Warning: Permanently added '[localhost]:34488' (ECDSA) to the list of known hosts. 2025/07/03 20:22:47 fuzzer started 2025/07/03 20:22:48 dialing manager at localhost:33709 syzkaller login: [ 55.540719] cgroup: Unknown subsys name 'net' [ 55.619507] cgroup: Unknown subsys name 'cpuset' [ 55.638694] cgroup: Unknown subsys name 'rlimit' 2025/07/03 20:22:58 syscalls: 2214 2025/07/03 20:22:58 code coverage: enabled 2025/07/03 20:22:58 comparison tracing: enabled 2025/07/03 20:22:58 extra coverage: enabled 2025/07/03 20:22:58 setuid sandbox: enabled 2025/07/03 20:22:58 namespace sandbox: enabled 2025/07/03 20:22:58 Android sandbox: enabled 2025/07/03 20:22:58 fault injection: enabled 2025/07/03 20:22:58 leak checking: enabled 2025/07/03 20:22:58 net packet injection: enabled 2025/07/03 20:22:58 net device setup: enabled 2025/07/03 20:22:58 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/07/03 20:22:58 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/07/03 20:22:58 USB emulation: enabled 2025/07/03 20:22:58 hci packet injection: enabled 2025/07/03 20:22:58 wifi device emulation: enabled 2025/07/03 20:22:58 802.15.4 emulation: enabled 2025/07/03 20:22:58 fetching corpus: 50, signal 14609/16447 (executing program) 2025/07/03 20:22:58 fetching corpus: 100, signal 27171/30598 (executing program) 2025/07/03 20:22:59 fetching corpus: 150, signal 32578/37562 (executing program) 2025/07/03 20:22:59 fetching corpus: 200, signal 38357/44738 (executing program) 2025/07/03 20:22:59 fetching corpus: 250, signal 45058/52648 (executing program) 2025/07/03 20:22:59 fetching corpus: 300, signal 49661/58512 (executing program) 2025/07/03 20:22:59 fetching corpus: 350, signal 56189/66054 (executing program) 2025/07/03 20:22:59 fetching corpus: 400, signal 58898/69924 (executing program) 2025/07/03 20:22:59 fetching corpus: 450, signal 61035/73232 (executing program) 2025/07/03 20:22:59 fetching corpus: 500, signal 63000/76290 (executing program) 2025/07/03 20:22:59 fetching corpus: 550, signal 65964/80277 (executing program) 2025/07/03 20:22:59 fetching corpus: 600, signal 68227/83527 (executing program) 2025/07/03 20:22:59 fetching corpus: 650, signal 70524/86771 (executing program) 2025/07/03 20:23:00 fetching corpus: 700, signal 72334/89594 (executing program) 2025/07/03 20:23:00 fetching corpus: 750, signal 74426/92603 (executing program) 2025/07/03 20:23:00 fetching corpus: 800, signal 75991/95155 (executing program) 2025/07/03 20:23:00 fetching corpus: 850, signal 78365/98279 (executing program) 2025/07/03 20:23:00 fetching corpus: 900, signal 80802/101440 (executing program) 2025/07/03 20:23:00 fetching corpus: 950, signal 82272/103745 (executing program) 2025/07/03 20:23:00 fetching corpus: 1000, signal 83924/106180 (executing program) 2025/07/03 20:23:00 fetching corpus: 1050, signal 85822/108734 (executing program) 2025/07/03 20:23:00 fetching corpus: 1100, signal 87142/110860 (executing program) 2025/07/03 20:23:00 fetching corpus: 1150, signal 88870/113289 (executing program) 2025/07/03 20:23:00 fetching corpus: 1200, signal 90021/115206 (executing program) 2025/07/03 20:23:01 fetching corpus: 1250, signal 91327/117235 (executing program) 2025/07/03 20:23:01 fetching corpus: 1300, signal 92411/119059 (executing program) 2025/07/03 20:23:01 fetching corpus: 1350, signal 93432/120811 (executing program) 2025/07/03 20:23:01 fetching corpus: 1400, signal 94596/122647 (executing program) 2025/07/03 20:23:01 fetching corpus: 1450, signal 95878/124519 (executing program) 2025/07/03 20:23:01 fetching corpus: 1500, signal 97091/126358 (executing program) 2025/07/03 20:23:01 fetching corpus: 1550, signal 97982/127925 (executing program) 2025/07/03 20:23:01 fetching corpus: 1600, signal 99367/129805 (executing program) 2025/07/03 20:23:01 fetching corpus: 1650, signal 101098/131903 (executing program) 2025/07/03 20:23:01 fetching corpus: 1700, signal 102226/133566 (executing program) 2025/07/03 20:23:01 fetching corpus: 1750, signal 103079/135004 (executing program) 2025/07/03 20:23:01 fetching corpus: 1800, signal 104235/136629 (executing program) 2025/07/03 20:23:02 fetching corpus: 1850, signal 105065/138035 (executing program) 2025/07/03 20:23:02 fetching corpus: 1900, signal 105839/139388 (executing program) 2025/07/03 20:23:02 fetching corpus: 1950, signal 106706/140775 (executing program) 2025/07/03 20:23:02 fetching corpus: 2000, signal 107601/142180 (executing program) 2025/07/03 20:23:02 fetching corpus: 2050, signal 108765/143737 (executing program) 2025/07/03 20:23:02 fetching corpus: 2100, signal 110555/145539 (executing program) 2025/07/03 20:23:02 fetching corpus: 2150, signal 111164/146714 (executing program) 2025/07/03 20:23:02 fetching corpus: 2200, signal 111737/147866 (executing program) 2025/07/03 20:23:02 fetching corpus: 2250, signal 112425/149078 (executing program) 2025/07/03 20:23:02 fetching corpus: 2300, signal 113038/150224 (executing program) 2025/07/03 20:23:02 fetching corpus: 2350, signal 113756/151389 (executing program) 2025/07/03 20:23:02 fetching corpus: 2400, signal 114521/152563 (executing program) 2025/07/03 20:23:03 fetching corpus: 2450, signal 115362/153805 (executing program) 2025/07/03 20:23:03 fetching corpus: 2500, signal 116367/155035 (executing program) 2025/07/03 20:23:03 fetching corpus: 2550, signal 117047/156100 (executing program) 2025/07/03 20:23:03 fetching corpus: 2600, signal 117374/157048 (executing program) 2025/07/03 20:23:03 fetching corpus: 2650, signal 118186/158141 (executing program) 2025/07/03 20:23:03 fetching corpus: 2700, signal 118828/159238 (executing program) 2025/07/03 20:23:03 fetching corpus: 2750, signal 119435/160260 (executing program) 2025/07/03 20:23:03 fetching corpus: 2800, signal 119971/161220 (executing program) 2025/07/03 20:23:03 fetching corpus: 2850, signal 120419/162125 (executing program) 2025/07/03 20:23:03 fetching corpus: 2900, signal 120945/163070 (executing program) 2025/07/03 20:23:03 fetching corpus: 2950, signal 121436/164001 (executing program) 2025/07/03 20:23:03 fetching corpus: 3000, signal 121970/164906 (executing program) 2025/07/03 20:23:03 fetching corpus: 3050, signal 122335/165742 (executing program) 2025/07/03 20:23:04 fetching corpus: 3100, signal 123128/166718 (executing program) 2025/07/03 20:23:04 fetching corpus: 3150, signal 123686/167612 (executing program) 2025/07/03 20:23:04 fetching corpus: 3200, signal 124033/168436 (executing program) 2025/07/03 20:23:04 fetching corpus: 3250, signal 125229/169517 (executing program) 2025/07/03 20:23:04 fetching corpus: 3300, signal 125907/170349 (executing program) 2025/07/03 20:23:04 fetching corpus: 3350, signal 126488/171210 (executing program) 2025/07/03 20:23:04 fetching corpus: 3400, signal 126798/171976 (executing program) 2025/07/03 20:23:04 fetching corpus: 3450, signal 127575/172886 (executing program) 2025/07/03 20:23:04 fetching corpus: 3500, signal 128282/173773 (executing program) 2025/07/03 20:23:04 fetching corpus: 3550, signal 128867/174599 (executing program) 2025/07/03 20:23:04 fetching corpus: 3600, signal 129241/175313 (executing program) 2025/07/03 20:23:05 fetching corpus: 3650, signal 129600/176047 (executing program) 2025/07/03 20:23:05 fetching corpus: 3700, signal 130310/176834 (executing program) 2025/07/03 20:23:05 fetching corpus: 3750, signal 130675/177486 (executing program) 2025/07/03 20:23:05 fetching corpus: 3800, signal 131064/178206 (executing program) 2025/07/03 20:23:05 fetching corpus: 3850, signal 131453/178889 (executing program) 2025/07/03 20:23:05 fetching corpus: 3900, signal 131806/179570 (executing program) 2025/07/03 20:23:05 fetching corpus: 3950, signal 132197/180286 (executing program) 2025/07/03 20:23:05 fetching corpus: 4000, signal 132611/180962 (executing program) 2025/07/03 20:23:05 fetching corpus: 4050, signal 132986/181636 (executing program) 2025/07/03 20:23:05 fetching corpus: 4100, signal 134739/182477 (executing program) 2025/07/03 20:23:05 fetching corpus: 4150, signal 135013/183089 (executing program) 2025/07/03 20:23:05 fetching corpus: 4200, signal 135595/183697 (executing program) 2025/07/03 20:23:05 fetching corpus: 4250, signal 135959/184309 (executing program) 2025/07/03 20:23:05 fetching corpus: 4300, signal 136309/184940 (executing program) 2025/07/03 20:23:06 fetching corpus: 4350, signal 136620/185529 (executing program) 2025/07/03 20:23:06 fetching corpus: 4400, signal 136916/186100 (executing program) 2025/07/03 20:23:06 fetching corpus: 4450, signal 137223/186666 (executing program) 2025/07/03 20:23:06 fetching corpus: 4500, signal 137625/187256 (executing program) 2025/07/03 20:23:06 fetching corpus: 4550, signal 138164/187802 (executing program) 2025/07/03 20:23:06 fetching corpus: 4600, signal 138550/188347 (executing program) 2025/07/03 20:23:06 fetching corpus: 4650, signal 139308/188883 (executing program) 2025/07/03 20:23:06 fetching corpus: 4700, signal 139745/189430 (executing program) 2025/07/03 20:23:06 fetching corpus: 4750, signal 139963/189917 (executing program) 2025/07/03 20:23:06 fetching corpus: 4800, signal 140385/189917 (executing program) 2025/07/03 20:23:06 fetching corpus: 4850, signal 140616/189917 (executing program) 2025/07/03 20:23:06 fetching corpus: 4900, signal 141061/189917 (executing program) 2025/07/03 20:23:07 fetching corpus: 4950, signal 141398/189917 (executing program) 2025/07/03 20:23:07 fetching corpus: 5000, signal 141612/189917 (executing program) 2025/07/03 20:23:07 fetching corpus: 5050, signal 141940/189917 (executing program) 2025/07/03 20:23:07 fetching corpus: 5100, signal 142227/189917 (executing program) 2025/07/03 20:23:07 fetching corpus: 5150, signal 142647/189917 (executing program) 2025/07/03 20:23:07 fetching corpus: 5200, signal 143039/189917 (executing program) 2025/07/03 20:23:07 fetching corpus: 5250, signal 143336/189917 (executing program) 2025/07/03 20:23:07 fetching corpus: 5300, signal 143587/189917 (executing program) 2025/07/03 20:23:07 fetching corpus: 5350, signal 143937/189917 (executing program) 2025/07/03 20:23:07 fetching corpus: 5400, signal 144259/189917 (executing program) 2025/07/03 20:23:07 fetching corpus: 5450, signal 144668/189917 (executing program) 2025/07/03 20:23:07 fetching corpus: 5500, signal 144893/189917 (executing program) 2025/07/03 20:23:07 fetching corpus: 5550, signal 145252/189917 (executing program) 2025/07/03 20:23:08 fetching corpus: 5600, signal 145510/189917 (executing program) 2025/07/03 20:23:08 fetching corpus: 5650, signal 145809/189917 (executing program) 2025/07/03 20:23:08 fetching corpus: 5700, signal 146102/189917 (executing program) 2025/07/03 20:23:08 fetching corpus: 5750, signal 146978/189917 (executing program) 2025/07/03 20:23:08 fetching corpus: 5800, signal 147321/189917 (executing program) 2025/07/03 20:23:08 fetching corpus: 5850, signal 147651/189917 (executing program) 2025/07/03 20:23:08 fetching corpus: 5900, signal 147915/189917 (executing program) 2025/07/03 20:23:08 fetching corpus: 5950, signal 148284/189917 (executing program) 2025/07/03 20:23:08 fetching corpus: 6000, signal 148487/189917 (executing program) 2025/07/03 20:23:08 fetching corpus: 6050, signal 148726/189917 (executing program) 2025/07/03 20:23:08 fetching corpus: 6100, signal 149051/189917 (executing program) 2025/07/03 20:23:08 fetching corpus: 6150, signal 149312/189917 (executing program) 2025/07/03 20:23:08 fetching corpus: 6200, signal 149941/189917 (executing program) 2025/07/03 20:23:08 fetching corpus: 6250, signal 150243/189917 (executing program) 2025/07/03 20:23:09 fetching corpus: 6300, signal 150545/189917 (executing program) 2025/07/03 20:23:09 fetching corpus: 6350, signal 150998/189917 (executing program) 2025/07/03 20:23:09 fetching corpus: 6400, signal 151140/189917 (executing program) 2025/07/03 20:23:09 fetching corpus: 6450, signal 151349/189917 (executing program) 2025/07/03 20:23:09 fetching corpus: 6500, signal 151676/189917 (executing program) 2025/07/03 20:23:09 fetching corpus: 6550, signal 151981/189917 (executing program) 2025/07/03 20:23:09 fetching corpus: 6600, signal 152207/189917 (executing program) 2025/07/03 20:23:09 fetching corpus: 6650, signal 152443/189917 (executing program) 2025/07/03 20:23:09 fetching corpus: 6700, signal 152675/189917 (executing program) 2025/07/03 20:23:09 fetching corpus: 6750, signal 152930/189917 (executing program) 2025/07/03 20:23:09 fetching corpus: 6800, signal 153208/189917 (executing program) 2025/07/03 20:23:09 fetching corpus: 6850, signal 153422/189917 (executing program) 2025/07/03 20:23:09 fetching corpus: 6900, signal 153658/189917 (executing program) 2025/07/03 20:23:09 fetching corpus: 6950, signal 154000/189917 (executing program) 2025/07/03 20:23:10 fetching corpus: 7000, signal 154287/189917 (executing program) 2025/07/03 20:23:10 fetching corpus: 7050, signal 154537/189917 (executing program) 2025/07/03 20:23:10 fetching corpus: 7100, signal 154805/189917 (executing program) 2025/07/03 20:23:10 fetching corpus: 7150, signal 155057/189917 (executing program) 2025/07/03 20:23:10 fetching corpus: 7200, signal 155438/189917 (executing program) 2025/07/03 20:23:10 fetching corpus: 7250, signal 155697/189917 (executing program) 2025/07/03 20:23:10 fetching corpus: 7300, signal 155931/189917 (executing program) 2025/07/03 20:23:10 fetching corpus: 7350, signal 156137/189917 (executing program) 2025/07/03 20:23:10 fetching corpus: 7400, signal 156411/189917 (executing program) 2025/07/03 20:23:10 fetching corpus: 7450, signal 156656/189917 (executing program) 2025/07/03 20:23:10 fetching corpus: 7500, signal 156812/189917 (executing program) 2025/07/03 20:23:10 fetching corpus: 7550, signal 157070/189917 (executing program) 2025/07/03 20:23:11 fetching corpus: 7600, signal 157281/189917 (executing program) 2025/07/03 20:23:11 fetching corpus: 7650, signal 157464/189917 (executing program) 2025/07/03 20:23:11 fetching corpus: 7700, signal 157642/189917 (executing program) 2025/07/03 20:23:11 fetching corpus: 7750, signal 157876/189917 (executing program) 2025/07/03 20:23:11 fetching corpus: 7800, signal 158113/189917 (executing program) 2025/07/03 20:23:11 fetching corpus: 7850, signal 158342/189917 (executing program) 2025/07/03 20:23:11 fetching corpus: 7900, signal 158528/189917 (executing program) 2025/07/03 20:23:11 fetching corpus: 7950, signal 158673/189917 (executing program) 2025/07/03 20:23:11 fetching corpus: 8000, signal 158839/189917 (executing program) 2025/07/03 20:23:11 fetching corpus: 8050, signal 159045/189917 (executing program) 2025/07/03 20:23:11 fetching corpus: 8100, signal 159313/189917 (executing program) 2025/07/03 20:23:11 fetching corpus: 8150, signal 159617/189917 (executing program) 2025/07/03 20:23:11 fetching corpus: 8200, signal 159947/189917 (executing program) 2025/07/03 20:23:11 fetching corpus: 8250, signal 160223/189917 (executing program) 2025/07/03 20:23:12 fetching corpus: 8300, signal 160516/189917 (executing program) 2025/07/03 20:23:12 fetching corpus: 8350, signal 160796/189917 (executing program) 2025/07/03 20:23:12 fetching corpus: 8400, signal 161000/189917 (executing program) 2025/07/03 20:23:12 fetching corpus: 8450, signal 161174/189917 (executing program) 2025/07/03 20:23:12 fetching corpus: 8500, signal 161447/189917 (executing program) 2025/07/03 20:23:12 fetching corpus: 8550, signal 161668/189917 (executing program) 2025/07/03 20:23:12 fetching corpus: 8600, signal 161858/189917 (executing program) 2025/07/03 20:23:12 fetching corpus: 8650, signal 162029/189917 (executing program) 2025/07/03 20:23:12 fetching corpus: 8700, signal 162174/189917 (executing program) 2025/07/03 20:23:12 fetching corpus: 8750, signal 162359/189917 (executing program) 2025/07/03 20:23:12 fetching corpus: 8800, signal 162569/189917 (executing program) 2025/07/03 20:23:12 fetching corpus: 8850, signal 162801/189917 (executing program) 2025/07/03 20:23:12 fetching corpus: 8900, signal 163018/189917 (executing program) 2025/07/03 20:23:13 fetching corpus: 8950, signal 163231/189917 (executing program) 2025/07/03 20:23:13 fetching corpus: 9000, signal 163423/189917 (executing program) 2025/07/03 20:23:13 fetching corpus: 9050, signal 163578/189917 (executing program) 2025/07/03 20:23:13 fetching corpus: 9100, signal 163934/189917 (executing program) 2025/07/03 20:23:13 fetching corpus: 9150, signal 164097/189917 (executing program) 2025/07/03 20:23:13 fetching corpus: 9200, signal 164330/189917 (executing program) 2025/07/03 20:23:13 fetching corpus: 9250, signal 164672/189917 (executing program) 2025/07/03 20:23:13 fetching corpus: 9300, signal 164902/189917 (executing program) 2025/07/03 20:23:13 fetching corpus: 9350, signal 165039/189917 (executing program) 2025/07/03 20:23:13 fetching corpus: 9400, signal 165360/189917 (executing program) 2025/07/03 20:23:13 fetching corpus: 9450, signal 165513/189917 (executing program) 2025/07/03 20:23:13 fetching corpus: 9500, signal 165703/189917 (executing program) 2025/07/03 20:23:13 fetching corpus: 9550, signal 165843/189917 (executing program) 2025/07/03 20:23:13 fetching corpus: 9600, signal 165991/189917 (executing program) 2025/07/03 20:23:14 fetching corpus: 9650, signal 166213/189917 (executing program) 2025/07/03 20:23:14 fetching corpus: 9700, signal 166428/189917 (executing program) 2025/07/03 20:23:14 fetching corpus: 9750, signal 166597/189917 (executing program) 2025/07/03 20:23:14 fetching corpus: 9800, signal 166832/189917 (executing program) 2025/07/03 20:23:14 fetching corpus: 9850, signal 167169/189917 (executing program) 2025/07/03 20:23:14 fetching corpus: 9900, signal 167376/189917 (executing program) 2025/07/03 20:23:14 fetching corpus: 9950, signal 167514/189917 (executing program) 2025/07/03 20:23:14 fetching corpus: 10000, signal 167649/189917 (executing program) 2025/07/03 20:23:14 fetching corpus: 10050, signal 167772/189917 (executing program) 2025/07/03 20:23:14 fetching corpus: 10100, signal 167940/189917 (executing program) 2025/07/03 20:23:14 fetching corpus: 10150, signal 168058/189917 (executing program) 2025/07/03 20:23:14 fetching corpus: 10200, signal 168196/189917 (executing program) 2025/07/03 20:23:14 fetching corpus: 10250, signal 168443/189917 (executing program) 2025/07/03 20:23:14 fetching corpus: 10300, signal 168699/189917 (executing program) 2025/07/03 20:23:14 fetching corpus: 10350, signal 168894/189917 (executing program) 2025/07/03 20:23:14 fetching corpus: 10400, signal 169060/189917 (executing program) 2025/07/03 20:23:15 fetching corpus: 10450, signal 169235/189917 (executing program) 2025/07/03 20:23:15 fetching corpus: 10500, signal 169438/189917 (executing program) 2025/07/03 20:23:15 fetching corpus: 10550, signal 169632/189917 (executing program) 2025/07/03 20:23:15 fetching corpus: 10600, signal 169751/189917 (executing program) 2025/07/03 20:23:15 fetching corpus: 10650, signal 169922/189917 (executing program) 2025/07/03 20:23:15 fetching corpus: 10700, signal 170166/189917 (executing program) 2025/07/03 20:23:15 fetching corpus: 10750, signal 170507/189917 (executing program) 2025/07/03 20:23:15 fetching corpus: 10800, signal 170817/189917 (executing program) 2025/07/03 20:23:15 fetching corpus: 10850, signal 170978/189917 (executing program) 2025/07/03 20:23:15 fetching corpus: 10900, signal 171154/189917 (executing program) 2025/07/03 20:23:15 fetching corpus: 10950, signal 171302/189917 (executing program) 2025/07/03 20:23:15 fetching corpus: 10983, signal 171384/189917 (executing program) 2025/07/03 20:23:15 fetching corpus: 10983, signal 171384/189917 (executing program) 2025/07/03 20:23:18 starting 8 fuzzer processes 20:23:18 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x33, 0x0, 0xff, 0x0, 0x80, 0x22000, 0xc, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1000, 0x1, @perf_config_ext={0x1, 0xc78}, 0xce02, 0x3ff, 0x1000, 0x4, 0x3f, 0x2, 0x9, 0x0, 0x1ff, 0x0, 0x9}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x9) write$binfmt_elf64(r0, &(0x7f0000000080)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x7, 0x3, 0x8, 0x91d1, 0x2, 0x3e, 0x6, 0x173, 0x40, 0x109, 0x889f, 0x4, 0x38, 0x1, 0x4, 0xf37c, 0x536}, [{0x70000000, 0x24f6, 0x5, 0x4, 0x1, 0x8001, 0x0, 0x3}, {0x70000000, 0x4b56, 0x8, 0x3, 0x6, 0x1, 0x81, 0x3}], "ba2fa54458010d21e94f6e4bb7e30c04b940958d9cf07e62474172d848d6e7bbd393ec841744c3451d0ae6dd1bc1d940f9cef6268f1f4adc4c0e01c28d8e9b33fe349f137f4ba074c61c553bcf606bab117198bdb851235eef059bbceb0a1fccd33ca41b779b1408b8004e12f5be27397c47b0929a1d8b7d71f162ff34890808fae1f17769914028672b6d7a09c7d6d3392284929b04b9bbeb1ff4738b1a830270843ecbf1e3c4f59be2127ae1ea2a0a96838fde3c6534e0f81ffe78b55379ef078d4573671326dd67ec2a0ccc7271b7eac3a340c3764bd3534d5bc04a14e998a23a8f78be16321ace51efc665e4e128d217f91804", ['\x00', '\x00', '\x00', '\x00']}, 0x5a5) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000640), 0x10800, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000680)={0x3f, 0x7, 0x2, 0xff, 0x7, [{0x2, 0xfffffffffffffffc, 0x1, '\x00', 0x100}, {0x0, 0x2, 0x6, '\x00', 0xe}, {0x5e3f, 0x3, 0x8, '\x00', 0x484}, {0x3, 0x3f, 0x4}, {0x6, 0x6, 0x20, '\x00', 0x84}, {0x1, 0x0, 0x7, '\x00', 0x10d}, {0x2, 0x9, 0x3, '\x00', 0x100}]}) r2 = open(&(0x7f0000000840)='./file0\x00', 0x94203, 0x42) sendfile(r2, r0, &(0x7f0000000880)=0xfffffffffffffffc, 0xbed9) r3 = syz_open_dev$sg(&(0x7f00000008c0), 0x2, 0x204100) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r3) readv(r2, &(0x7f00000019c0)=[{&(0x7f0000000900)=""/127, 0x7f}, {&(0x7f0000000980)=""/4096, 0x1000}, {&(0x7f0000001980)=""/60, 0x3c}], 0x3) r4 = syz_io_uring_setup(0x6030, &(0x7f0000001a00)={0x0, 0x13b1, 0x8, 0x2, 0x60, 0x0, r2}, &(0x7f0000feb000/0x13000)=nil, &(0x7f0000fef000/0x2000)=nil, &(0x7f0000001a80), &(0x7f0000001ac0)) ioctl$FIDEDUPERANGE(r4, 0xc0189436, &(0x7f0000001b00)={0x101, 0x1, 0x1, 0x0, 0x0, [{{r3}, 0x200}]}) r5 = openat2(r2, &(0x7f0000001b40)='./file0\x00', &(0x7f0000001b80)={0x20100, 0x80, 0x4}, 0x18) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000020c0)=[{&(0x7f0000001bc0)=""/170, 0xaa}, {&(0x7f0000001c80)=""/45, 0x2d}, {&(0x7f0000001cc0)=""/53, 0x35}, {&(0x7f0000001d00)=""/219, 0xdb}, {&(0x7f0000001e00)=""/153, 0x99}, {&(0x7f0000001ec0)=""/178, 0xb2}, {&(0x7f0000001f80)=""/210, 0xd2}, {&(0x7f0000002080)=""/13, 0xd}], 0x8) r6 = syz_mount_image$nfs4(&(0x7f0000002180), &(0x7f00000021c0)='./file0\x00', 0xfffffffffffffffb, 0x1, &(0x7f0000002240)=[{&(0x7f0000002200)="1d04ca33c83218426f9c53a5f6d605cf919cda5ad9580340c2eb45b94d52f16ee5acf5f9721c815cb083845b2b", 0x2d, 0xfffffffffffffffa}], 0x10000, &(0x7f0000002280)={[{'-#$-#]'}], [{@obj_role={'obj_role', 0x3d, '\'{}#-@)'}}, {@subj_type={'subj_type', 0x3d, '/dev/sg#\x00'}}]}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_generic(r5, &(0x7f0000002440)={&(0x7f0000002140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002400)={&(0x7f00000022c0)={0x128, 0x40, 0x800, 0x70bd2a, 0x25dfdbff, {0xa}, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x100000000}, @typed={0x8, 0x74, 0x0, 0x0, @fd=r6}, @generic="f7cfcb11d484af7aedab5f53c035b440e0712b3c29419c0aef481526524798169630c6569c16265e", @typed={0x4, 0xf}, @generic="9c1f5e149f7ca2c3b6d0c78a6995666dd510de0deb35f2ede09f1c8beab418e337e817e774c1c5d6201707f259bf2833ef76a9552ac4", @nested={0x3e, 0x16, 0x0, 0x1, [@generic="01dabf163ede69cedc20b54845792f1bdc97c9c9e9ce62", @typed={0x8, 0x57, 0x0, 0x0, @fd=r7}, @typed={0x8, 0x27, 0x0, 0x0, @pid}, @typed={0x4, 0x67}, @typed={0x8, 0x55, 0x0, 0x0, @uid=0xffffffffffffffff}, @generic="64d7718ae317b2"]}, @generic="4e0cf0957a7d54269cc2552363162d8f8e956bbc2ade4da7aa59fc5590abae99679bb3662a9a0b64167aeb0dc8", @nested={0x2d, 0x65, 0x0, 0x1, [@typed={0x8, 0x34, 0x0, 0x0, @uid=0xffffffffffffffff}, @typed={0x8, 0x54, 0x0, 0x0, @ipv4=@remote}, @generic="531bdc2931", @typed={0x14, 0x96, 0x0, 0x0, @ipv6=@remote}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x8c4}, 0x0) r8 = openat$nvram(0xffffffffffffff9c, &(0x7f0000002480), 0x40000, 0x0) pidfd_send_signal(r8, 0xd, &(0x7f00000024c0)={0x21, 0x10001, 0xfff}, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000002540)={0x100, 0x2, 0x0, 0x7, 0x2, [{0x0, 0x4, 0x4, '\x00', 0x800}, {0x0, 0x4, 0x2, '\x00', 0x1400}]}) ioctl$BTRFS_IOC_INO_PATHS(r3, 0xc0389423, &(0x7f0000002640)={0x400, 0x28, [0x800, 0x5, 0x4f, 0x8001], &(0x7f0000002600)=[0x0, 0x0, 0x0, 0x0, 0x0]}) 20:23:18 executing program 1: r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x80, r0, 0x2, 0x70bd26, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000000}, 0xd1) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x78, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x64, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x100}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'syz_tun\x00'}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7e8}]}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x20080) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000300)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffff}}, './file0\x00'}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000380)={{{@in, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@broadcast}}, &(0x7f0000000480)=0xe8) getsockname$packet(0xffffffffffffffff, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000500)=0x14) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f00000007c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000780)={&(0x7f0000000540)={0x23c, 0x0, 0x4, 0x70bd26, 0x25dfdbfb, {}, [{{0x8, 0x1, r3}, {0x220, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xc614}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x23c}, 0x1, 0x0, 0x0, 0x24008810}, 0x10000800) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f0000000800)={{0x1, 0x1, 0x18, r2, {0x80000001}}, './file1\x00'}) ioctl$F2FS_IOC_RESIZE_FS(r5, 0x4008f510, &(0x7f0000000840)=0x8) r6 = open(&(0x7f0000000880)='./file1\x00', 0x181100, 0x1) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r6, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x60, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}]}, 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r7 = accept4(r2, &(0x7f0000000a00)=@vsock={0x28, 0x0, 0x0, @host}, &(0x7f0000000a80)=0x80, 0xc00) sendmsg$NL80211_CMD_SET_CQM(r7, &(0x7f0000000d00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000b00)={0x1b4, 0x0, 0x10, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CQM={0x70, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x7f}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x11}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x17}, @NL80211_ATTR_CQM_RSSI_THOLD={0x28, 0x1, [0x7, 0x200, 0x6, 0x2000000, 0x1, 0xe42, 0x80000000, 0x8, 0x2]}, @NL80211_ATTR_CQM_RSSI_THOLD={0x4}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x64ed}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x9}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x401}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x7, 0x2f03, 0x1]}]}, @NL80211_ATTR_CQM={0x34, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x3f}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x34}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x8}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x9}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x9, 0x20, 0x6]}]}, @NL80211_ATTR_CQM={0x40, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x3ff]}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x4c}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x80000000, 0x81]}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x101}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x4}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x7fffffff]}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x7fffffff}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x2}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3ab}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x16}]}, @NL80211_ATTR_CQM={0x40, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x673}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x5}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x4}, @NL80211_ATTR_CQM_RSSI_THOLD={0x1c, 0x1, [0x7fffffff, 0x9, 0x9, 0x0, 0x2, 0xffffffc0]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x1f}]}, @NL80211_ATTR_CQM={0x28, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xe7}, @NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0x5, 0x3, 0x4, 0xffffffb1]}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x80}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x20a}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x3}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x2}]}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x4}, 0x800) ioctl$AUTOFS_IOC_CATATONIC(r2, 0x9362, 0x0) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d80), r5) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000e40)={'ip6tnl0\x00', &(0x7f0000000dc0)={'syztnl0\x00', r3, 0x29, 0x4, 0x71, 0x401, 0x4, @local, @remote, 0x1, 0x40, 0x147, 0x9}}) getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000f40)={{{@in=@remote, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@private0}}, &(0x7f0000001040)=0xe8) sendmsg$ETHTOOL_MSG_PAUSE_GET(r7, &(0x7f0000001180)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001140)={&(0x7f0000001080)={0x9c, r8, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(r7, &(0x7f0000001500)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000014c0)={&(0x7f0000001240)={0x244, 0x0, 0x915, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_REG_RULES={0x68, 0x22, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x1}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x8001}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x83380}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x800}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7fffffff}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x10001}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x1f}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x5}]}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x6c}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x38}, @NL80211_ATTR_REG_RULES={0x1a4, 0x22, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x401}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x10001}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x4}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xffffffff}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xffffffff}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xfffffff9}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x9}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xfffffc00}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xca6e}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x6}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x90e4}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x1}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x3}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xfffff000}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x9}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x5}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x9}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x800}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x9}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xc7b}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xfff}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x4}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7}]}, {0x4}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xfd}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x80000001}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x400}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x6}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x401}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xf3}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x2b9c}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x20}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x2}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x80000000}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xfff}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x3}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xd94f}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xc0}, @NL80211_ATTR_DFS_CAC_TIME={0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x81}, @NL80211_ATTR_FREQ_RANGE_END={0x8}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x80}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x8}]}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x6f}]}, 0x244}, 0x1, 0x0, 0x0, 0x10}, 0x0) 20:23:18 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000040)) r2 = dup2(r1, r1) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000080)={0x1, 0x3d5, 0x3, 0xfffffffa, 0x6, [{0x3, 0x100000000, 0x9a1c, '\x00', 0x400}, {0x100, 0xbb, 0x8, '\x00', 0x100}, {0x7f, 0x1, 0x1, '\x00', 0x900}, {0x10000, 0x101, 0x6, '\x00', 0x1000}, {0x1, 0x6, 0x0, '\x00', 0x100}, {0x4, 0x2, 0x65, '\x00', 0x100}]}) getsockopt$inet_tcp_buf(r0, 0x6, 0x1c, &(0x7f0000000200)=""/48, &(0x7f0000000240)=0x30) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000280)={{0x16, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e23, 0x0, 'nq\x00', 0x20, 0x7, 0x2a}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e21, 0x1, 0x4, 0x5, 0x57fd}}, 0x44) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000300)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) ioctl$sock_inet_SIOCDARP(r3, 0x8953, &(0x7f0000000340)={{0x2, 0x4e20, @multicast2}, {0x1, @local}, 0x4, {0x2, 0x4e22, @remote}, 'team_slave_0\x00'}) recvfrom(r0, &(0x7f00000003c0)=""/4096, 0x1000, 0x40000000, 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000013c0)='./binderfs2/custom1\x00', 0x800, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000001400)={{0x1, 0x1, 0x18, r4, {0x2}}, './file0\x00'}) r6 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000001440)='./binderfs2/binder-control\x00', 0x800, 0x0) ioctl$BTRFS_IOC_INO_PATHS(r6, 0xc0389423, &(0x7f00000014c0)={0x6, 0x28, [0x7ff, 0x7, 0x8000000000000, 0x6], &(0x7f0000001480)=[0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f0000001500)=0x1) r7 = syz_io_uring_complete(0x0) setsockopt$IP_VS_SO_SET_DELDEST(r7, 0x0, 0x488, &(0x7f0000001540)={{0x11, @broadcast, 0x4e20, 0x2, 'wrr\x00', 0x0, 0x6, 0x3e}, {@rand_addr=0x64010100, 0x4e22, 0x1, 0x7fffffff, 0xbec, 0x9}}, 0x44) close(r5) r8 = accept$packet(r1, &(0x7f00000015c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001600)=0x14) ioctl$FS_IOC_RESVSP(r8, 0x40305828, &(0x7f0000001640)={0x0, 0x3, 0xfffffffffffffffd, 0x249e}) ioctl$GIO_FONT(r1, 0x4b60, &(0x7f0000001680)=""/7) [ 85.347145] audit: type=1400 audit(1751574198.198:7): avc: denied { execmem } for pid=274 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 20:23:18 executing program 3: ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, &(0x7f0000000000)=0x1) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000040)=0x3) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x100]}, 0x8, 0x80000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000000c0)={{0xffffffffffffffff, 0x3, 0x7, 0x3, 0x10001}}) ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, &(0x7f0000000100)={0x3a4, 0x0, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000058c0), r0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000005980)={&(0x7f0000005880)={0x10, 0x0, 0x0, 0x102080}, 0xc, &(0x7f0000005940)={&(0x7f0000005900)={0x1c, r1, 0x0, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f00000059c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000005a40), r0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000005b40)={&(0x7f0000005a00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000005b00)={&(0x7f0000005a80)={0x44, r3, 0x2, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x800}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40840}, 0xc8d5) r4 = syz_open_pts(r2, 0x60) fcntl$addseals(r4, 0x409, 0xd) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r5, &(0x7f0000005c80)={&(0x7f0000005b80)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000005c40)={&(0x7f0000005bc0)={0x54, r3, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7ff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6a}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000000) removexattr(&(0x7f0000005cc0)='./file0\x00', &(0x7f0000005d00)=@random={'trusted.', 'batadv\x00'}) sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f0000005e40)={&(0x7f0000005d40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000005e00)={&(0x7f0000005d80)={0x6c, 0x0, 0x8, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY={0x1c, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "f065175b88"}]}, @NL80211_ATTR_KEY_SEQ={0x9, 0xa, "d2f310ae2f"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x24, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x80}, 0x8000) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), r5) sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f0000005f80)={&(0x7f0000005e80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000005f40)={&(0x7f0000005f00)={0x34, r6, 0x800, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x54}, @void, @val={0xc, 0x99, {0x7f, 0x34}}}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x34}}, 0x80) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000006080)={&(0x7f0000005fc0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000006040)={&(0x7f0000006000)={0x38, r6, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0x5}, @NL80211_ATTR_WIPHY_NAME={0x14, 0x2, 'wlan1\x00'}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0xffffffff}]}, 0x38}}, 0x800) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r0, 0x80605414, &(0x7f00000060c0)) 20:23:18 executing program 4: ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x8000, 0x3}) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f0000000040)=""/123) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x4c) ioctl$TIOCNOTTY(r1, 0x5422) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7ff}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c0d0}, 0x8001) r2 = syz_open_dev$evdev(&(0x7f0000000200), 0x1, 0x402881) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) write$evdev(r2, &(0x7f00000002c0)=[{{r3, r4/1000+60000}, 0x11, 0x1, 0x81}, {{}, 0x0, 0x1, 0x4b}, {{}, 0x1f, 0x7fff, 0xffff5d7d}, {{}, 0x5, 0x0, 0x7ff}, {{r5, r6/1000+10000}, 0x17, 0xffff}, {{0x0, 0x2710}, 0x12, 0x6, 0x24f7}, {{}, 0x3, 0x444e, 0x9}, {{0x0, 0xea60}, 0x2, 0x8adf, 0x3}, {{}, 0x17, 0xffc5, 0xb35}, {{0x0, 0x2710}, 0x3, 0x4, 0x9}], 0xf0) r7 = io_uring_setup(0x6e9, &(0x7f00000003c0)={0x0, 0x2db7, 0x20, 0x0, 0x3e0, 0x0, r0}) sendfile(r7, 0xffffffffffffffff, &(0x7f0000000440)=0x2, 0x3ff) r8 = eventfd2(0x8000, 0x80000) ppoll(&(0x7f0000000480)=[{0xffffffffffffffff, 0x20}, {r2, 0x400}, {r0, 0x804}, {r0, 0x44}, {r8, 0x2200}, {r1}, {r0, 0x8002}], 0x7, &(0x7f00000004c0)={0x77359400}, &(0x7f0000000500)={[0x800]}, 0x8) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000540)) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000580)={0xffffffffffffff01, 0xf0, 0x0, 0x2, 0x7, [{0x56a, 0x5, 0x3, '\x00', 0x2001}, {0x5d3c, 0xa4, 0xfffffffffffffffb, '\x00', 0x3518}, {0x400, 0x7fff, 0xe7f, '\x00', 0x1}, {0x2, 0x100, 0x2c, '\x00', 0xd8a}, {0x7, 0x5, 0x3, '\x00', 0x2000}, {0x2, 0x20, 0xfffffffffffffffb, '\x00', 0x2781}, {0x829, 0x4ccc, 0x3f, '\x00', 0x80}]}) r9 = fsmount(0xffffffffffffffff, 0x1, 0x8f) sendmsg$unix(r9, &(0x7f0000000940)={&(0x7f0000000740)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000008c0)=[{&(0x7f00000007c0)="2676394232e91685e5083cc5663a941cef5287d5ecd7204c3d5fe960dc90b57db796f81c5905605c03bf2fca13a63a2607832b2882d54f1ce8a019a387014451701392219e1212776f697fc99bbf70c485169e0e60a22748fa2363f1287985e03802d3d1f6983898c7e25afacf96f2caed4985b309d84153f666e9778a94a4e342df8769ac90d1b0a9a546b7ffa492ed81425d8fa730008570d63133f828076527", 0xa1}, {&(0x7f0000000880)="844d70733b84f13c1e61db957191cefa7e5d2b3ba6e80d9a5bc096087cb773373d9477f65ae7", 0x26}], 0x2, &(0x7f0000000900)=[@rights={{0x18, 0x1, 0x1, [r2, r8]}}], 0x18, 0x4800}, 0x804) r10 = syz_open_dev$usbmon(&(0x7f0000000980), 0x5, 0x42001) ioctl$AUTOFS_IOC_PROTOVER(r10, 0x80049363, &(0x7f00000009c0)) sendmsg$SEG6_CMD_GET_TUNSRC(r9, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x28, 0x0, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@SEG6_ATTR_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x20004001) 20:23:18 executing program 5: shmctl$IPC_RMID(0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x1000, 0x800, &(0x7f0000ffe000/0x1000)=nil) shmctl$IPC_RMID(r0, 0x0) r1 = shmget(0x1, 0x3000, 0x1000, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r1, 0xc) r2 = shmget$private(0x0, 0x1000, 0x20, &(0x7f0000ffe000/0x1000)=nil) shmctl$IPC_RMID(r0, 0x0) shmctl$IPC_RMID(r1, 0x0) shmctl$IPC_RMID(r0, 0x0) shmctl$IPC_RMID(r1, 0x0) r3 = shmget(0x0, 0x2000, 0x10, &(0x7f0000ffe000/0x2000)=nil) shmctl$SHM_LOCK(r3, 0xb) shmctl$IPC_RMID(r0, 0x0) shmctl$IPC_RMID(r1, 0x0) r4 = shmget(0x0, 0x3000, 0x1, &(0x7f0000ffd000/0x3000)=nil) shmctl$IPC_RMID(r4, 0x0) shmctl$IPC_RMID(r0, 0x0) r5 = shmget$private(0x0, 0x3000, 0x1, &(0x7f0000ffd000/0x3000)=nil) shmctl$IPC_RMID(r5, 0x0) shmctl$IPC_RMID(r2, 0x0) 20:23:18 executing program 6: ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000000)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct}}) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000400)="5b3bdf0d25c655cb51316b8fc22b3df65917de326d1261d274c46d6a73cb7427b001f26e530cd0bea84b078a93d762689aa421e75a6ff6210bcd7d65ee35902c8a0172ce61eb") sendmsg$NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x3c, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x400, 0x0, 0x7, 0x0, {0x5, 0x1fe0, 0x0, 0x9a, 0x0, 0x0, 0x0, 0x3, 0x1}, 0x1, 0x2, 0x3}}]}, 0x3c}}, 0x1) r0 = openat2(0xffffffffffffffff, &(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)={0x40800, 0x7d, 0x2}, 0x18) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x3c, r1, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1000108}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x30, r1, 0x200, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @random="004dd4c73a95"}, @NL80211_ATTR_DISABLE_VHT={0x4}, @chandef_params, @NL80211_ATTR_USE_RRM={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x8005}, 0x44) recvmsg$unix(r0, &(0x7f0000000e80)={&(0x7f0000000940), 0x6e, &(0x7f0000000c80)=[{&(0x7f00000009c0)=""/49, 0x31}, {&(0x7f0000000a00)}, {&(0x7f0000000a40)=""/182, 0xb6}, {&(0x7f0000000b00)=""/72, 0x48}, {&(0x7f0000000b80)=""/193, 0xc1}], 0x5, &(0x7f0000000d00)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @cred={{0x1c}}], 0x158}, 0x6000) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f00), r0) sendmsg$NL80211_CMD_LEAVE_MESH(r4, &(0x7f0000000fc0)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x1c, r7, 0x4, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8084}, 0x4000011) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f00000010c0)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x24, 0x1, 0x2, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4}, [@CTA_EXPECT_ZONE={0x6}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000) r8 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001100), 0x2292abc1b65eb227, 0x0) sendmsg$NL80211_CMD_GET_MPP(r8, &(0x7f0000001200)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)={0x20, r7, 0x100, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x20}, 0x1, 0x0, 0x0, 0x20008881}, 0xc080) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r5, &(0x7f0000001340)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001300)={&(0x7f0000001280)={0x5c, 0x0, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x7}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x50000) r9 = syz_mount_image$nfs4(&(0x7f0000001380), &(0x7f00000013c0)='./file0\x00', 0x2, 0x9, &(0x7f0000003880)=[{&(0x7f0000001400)="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", 0x1000, 0xcc}, {&(0x7f0000002400)="582416fc3cfe6a33920f3e11d415d21f27768c7ec4fae897a5af96ce55c1602fdaa31f55d572cc721e29a31ebbad8009a0fc40be6f955d87fa10e5c4a96ec68b9e4fcb752be472e24f2b85a77c83755f2eeb4bceb6fa4e379073a6a14e4df6f68143d72eb449f031272653def3ae48a958434db4e49386bae267dcc90bfa8de9c90dd94e933bc8d36a1e4070eb32ca56ffa5a58875de73bbea451a6e9bd5d2b8324ed1f4da7860d9cccdc4bfffbdc6561e4ca5bddbc32d1ae285219a813bfa67ba09f1f71249ce0303613d4e905fb43832865a6234b153cb59e1123068dc83eded6b9ba685407f98dd46", 0xea, 0x889}, {&(0x7f0000002500)="f4ae6bbea4f7a42a41a395a182baf4eda17ef6a654ffdae6ebcec0eff28704babe077dcf9d4dc32e8786702d4a3ca1f0db1b5597c4a64c96afcbd98fc5213d435fe4e897beb89bc67ef7ecb7b5f2f30a3d9bd3aa4bcac3b2df6ed8e1d1d052e88f0c30f362bb32bbc11263f3f3d03fd240d9b5b979798213a50b18a339ea37b0f3c5ab70e46fd10a156d3d8f3b5a9b1e", 0x90, 0xffff}, {&(0x7f00000025c0)="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", 0x1000, 0x2}, {&(0x7f00000035c0)="7fbf14d6603ceac5ab975396b06f8b4a50cfa0d9ce3915abe404b02a26ac6186163307ee8483701617ff0227042a81d35dfa3c0c8930314c0900b60df2f604ce20cb1f76613ff333b60db1bb2a67b84c9c72bb997524f8cb9ebab3a745d7", 0x5e, 0x7}, {&(0x7f0000003640)="0838a6df215c3e11659f1b550a02b3b722754e5a940417a58fc390ec54c646191f129a74e25d8183d848f8ac17adff0bf7f4fe940fba7a0c63c96eb434025246fe902608c76c0a08ac171144500abc214e0ac8e1abf3cd1a915afd0d5caba0366c7daf23fe97848f9bc1339bdb42509c84bce35e6536f8253f85178c1a5550", 0x7f, 0x8}, {&(0x7f00000036c0)="5c0ac355105c36678074f6dc543b9325dfb8b5827c3005dd7498721b381c2b13ff640c196b292581404ca79a30366b17432036f6409e17948b38205bbbcdbf654954faa879d7e353e85c13444bf48ac60583d2be3c35456aa26d2b58e030d24f0669906feb35e513a7367c0a3c70c9ca60a3ffc831af5ab7d4ca98d4cc2e6a2980b300cb96bc5a6d7719983f57791674be45a1b90260c6fc2c0afb4c45025f27007761f757d4b4f79f9a828afa26845b8c5937dab29a", 0xb6, 0x401}, {&(0x7f0000003780)="d025", 0x2, 0x10001}, {&(0x7f00000037c0)="a8c947456244fd067df8002c38e48b3f3e5e97a6a7ca42e44894b628282143644ea367386f8f82d66b7971f9ba1c55fe5a919eb5255f9c345410348847104815dae43187e4edfd850bb9fcb7dac669c10b4af700f5c8f01b3e79120aac62d3f7714cd446fa11d5d6dffecfff168c44ce85bfd5b5989a0432e1714c22c27351cc4d05", 0x82, 0x4}], 0x800000, &(0x7f0000003980)={[{'nl80211\x00'}, {'nl80211\x00'}, {'nl80211\x00'}, {'+^!]\'^!]'}, {'\xb6:{-\x85])\\@{\\/^$'}, {'nl80211\x00'}, {'\x00'}, {'\xff\xff\xff\xff\xff\xff'}], [{@fowner_lt={'fowner<', r6}}]}) name_to_handle_at(r9, &(0x7f0000003a00)='./file1\x00', &(0x7f0000003a40)=@OVL_FILEID_V0={0xee, 0xfb, {0x0, 0xfb, 0xee, 0x5, 0x3d, "a6984d0a2eec9baeb58db92baabf6fd2", "800aef6e3b6377e9174a96f1125a1f642589a6b9274df35926ae709f6b00fec2c4698b995747a500edf8f3eef6a99d1dfd4cc196e8b7cbd42ba2f4c2e382753b876eb54d983f752170d3dd7fa071981299aa426728c88a691d3bec90bf44b7f9fd677813a90a21ea13f60ac705b1ec694cbc1adf75e757f906bfa0cf8e8f113e71ebf1aa702323c8aebdbeb71673cb2a18142c89081a7e517821eb0780b1c66ee93096db6ca6699b11793628ea4bd58e5ec51eaca6053fd5a3e11e82c14ba703aa5d673e40b2b51d772895c0d6aa666664fe359a61d5e9ca26"}}, &(0x7f0000003b40), 0x1400) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003bc0), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f0000003d00)={&(0x7f0000003b80)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000003cc0)={&(0x7f0000003c00)={0xb8, r10, 0x2, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xace, 0x58}}}}, [@NL80211_ATTR_HIDDEN_SSID={0x8, 0x7e, 0x1}, @acl_policy=[@NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x24}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15f4}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37d}], @NL80211_ATTR_P2P_OPPPS={0x5}, @NL80211_ATTR_HIDDEN_SSID={0x8, 0x7e, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0xb8}}, 0x40) sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f0000003e00)={&(0x7f0000003d40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000003dc0)={&(0x7f0000003d80)={0x28, r1, 0x1, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xaf6, 0x4}}}}, [@NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x400c045) 20:23:18 executing program 7: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x10001, 0x1}}, './file0\x00'}) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000040)=0x4) r1 = signalfd4(r0, &(0x7f0000000100)={[0xfffffffffffffffc]}, 0x8, 0x400) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000080)='^\\\x00', &(0x7f00000000c0)='./file1\x00', r1) r2 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x40) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000180)='\\!\x00', 0x0, r0) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f00000001c0)) ioctl$EVIOCGABS3F(r1, 0x8018457f, &(0x7f0000000200)=""/63) io_setup(0x0, &(0x7f0000000240)=0x0) io_pgetevents(r3, 0x6, 0x9, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f00000003c0), &(0x7f0000000440)={&(0x7f0000000400)={[0x53ff]}, 0x8}) setsockopt$inet6_udp_int(r2, 0x11, 0x1, &(0x7f0000000480)=0x9, 0x4) sync_file_range(r0, 0x5, 0x80000001, 0x4) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f00000004c0)={{0x84, @empty, 0x4e23, 0x0, 'dh\x00', 0x0, 0xfffffffd, 0x4c}, {@dev={0xac, 0x14, 0x14, 0x2f}, 0x4e22, 0x1, 0x27a, 0x1, 0xffffffff}}, 0x44) io_setup(0x0, &(0x7f0000000540)=0x0) r5 = syz_open_dev$vcsn(&(0x7f00000005c0), 0x2, 0x40) r6 = pidfd_open(0x0, 0x0) r7 = signalfd4(r1, &(0x7f00000007c0)={[0x10001]}, 0x8, 0xc00) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000840)='/sys/module/yenta_socket', 0x2800, 0x1) r9 = syz_io_uring_complete(0x0) io_submit(r4, 0x8, &(0x7f0000000bc0)=[&(0x7f0000000600)={0x0, 0x0, 0x0, 0x8, 0x1, r2, &(0x7f0000000580)="60e74dca412ac7ab135ada41268568e56659d079bfb7ce47c980aaa8f5638cee9cbfe6b8c1d87bd1f9d5ea64879d87e46dadf8508b7fac97f2139c", 0x3b, 0x0, 0x0, 0x1, r5}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x3, 0x1a, 0xffffffffffffffff, &(0x7f0000000640)="286f8d4b88ed845f04711556fc63c6aff9f051272cbe694b9e49976c3dd570b7a63c050d5f481ccf9db5c6a7a7c3918a1a164a23a20dc92ea09dccc65e16286b1d8eb9e511129b8001bb5f26e2d741c57ddbcded0d21d87e9d6d73f40aea0eb217feafe81eb3240f4f72da573b17b7218e", 0x71, 0x82, 0x0, 0x1, r2}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000700), 0x0, 0x5, 0x0, 0x0, r2}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x3, 0x0, r6, &(0x7f0000000780)="1412a42aa745c51e32f625368033426529b2cdef7026961b", 0x18, 0xfffffffffffffffd, 0x0, 0x3, r7}, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x20, r8, &(0x7f0000000880)="7baf5146d0a480e8393193dcf2352f520d3de5abded357e622b6e154c30d27d08d000fe2555e36cec5e0a9c7a11992c29fea6865b477e59a7823dea02df3b98cd07521b7a7d541063ce84264dc5426a863c8afbed3407fcc7905dba4745e91a99f47e042ccdadcbfbdc35b9430b8c7e619ece1c8fa212b58fdba19f0d99f77a85045dcfdb80c99bbe15d449e2bd2b0933c49d6d48f3daa7654b36017218be83505aad19ed8b1aeaeb5c1e008844ea592e70ae5772de1f1a0e6ddaf86254eae75f4e7d909a24dba992e6f58b1bb1bce546588713265a97bd462c68320df476167310d72281365740027f1677acb48a89909adffbe657bb6ebfe70", 0xfa, 0x8e, 0x0, 0x0, r9}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x1, 0xf000, r0, &(0x7f00000009c0)="56d34d61a36f0f3b405835237ecdf1c7bfdc45af5efb834af565ebb1fe00745b1f0bf07df3f9c140ad3de3ba60349406acd1be1f65a94ab171057920ed067af01bdb61fa65de8ba15ba52fbdb88c7688a5c0a8a7c9ccde9bda319d2bbcf003fa93dff8d01476b1df29", 0x69, 0x5, 0x0, 0x0, r0}, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x800, 0xffffffffffffffff, &(0x7f0000000a80)="3f54024ad0f633d638d24342be795642f79f", 0x12, 0x0, 0x0, 0x2}, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffffffffffff, &(0x7f0000000b40)="9b27bf1610895f24ae08e32cc9e825dcbe0394fbfa5a12629ed0fa38870f871a2519921264ea3b3eba2d", 0x2a, 0x4, 0x0, 0x3, r0}]) [ 86.580272] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.586126] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.591843] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.593752] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.601399] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.604057] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.607496] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.611471] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.613219] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.616752] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.739719] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.743519] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.749674] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 86.751855] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.755450] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.758033] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.763345] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 86.770613] [ 86.771167] ============================= [ 86.771853] WARNING: suspicious RCU usage [ 86.772682] 6.16.0-rc4-next-20250703 #1 Not tainted [ 86.773702] ----------------------------- [ 86.777794] fs/proc/proc_sysctl.c:934 suspicious rcu_dereference_check() usage! [ 86.778971] [ 86.778971] other info that might help us debug this: [ 86.778971] [ 86.780220] [ 86.780220] rcu_scheduler_active = 2, debug_locks = 1 [ 86.781240] 3 locks held by syz-executor.1/282: [ 86.781952] #0: ffff88800fb90400 (sb_writers#4){.+.+}-{0:0}, at: path_openat+0x1cd3/0x2880 [ 86.783372] #1: ffff88800bf3e618 (&sb->s_type->i_mutex_key#8){++++}-{4:4}, at: path_openat+0x1308/0x2880 [ 86.784914] #2: ffff8880189e5850 (&lockref->lock){+.+.}-{3:3}, at: d_alloc_parallel+0xf97/0x1330 [ 86.786354] [ 86.786354] stack backtrace: [ 86.787041] CPU: 1 UID: 0 PID: 282 Comm: syz-executor.1 Not tainted 6.16.0-rc4-next-20250703 #1 PREEMPT(voluntary) [ 86.787072] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 86.787085] Call Trace: [ 86.787094] [ 86.787103] dump_stack_lvl+0xfa/0x120 [ 86.787144] lockdep_rcu_suspicious+0x152/0x1c0 [ 86.787175] proc_sys_compare+0x28a/0x340 [ 86.787205] ? __pfx_proc_sys_compare+0x10/0x10 [ 86.787230] d_same_name+0x229/0x2e0 [ 86.787271] d_alloc_parallel+0x7c1/0x1330 [ 86.787310] ? __pfx_d_alloc_parallel+0x10/0x10 [ 86.787336] ? lock_is_held_type+0x9e/0x120 [ 86.787374] ? __pfx_default_wake_function+0x10/0x10 [ 86.787409] ? __d_lookup+0x25f/0x490 [ 86.787445] lookup_open.isra.0+0x64f/0x1530 [ 86.787482] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 86.787529] ? mnt_get_write_access+0x81/0x2d0 [ 86.787552] ? mnt_get_write_access+0x1ea/0x2d0 [ 86.787583] path_openat+0xc26/0x2880 [ 86.787627] ? __lock_acquire+0x694/0x1b70 [ 86.787652] ? __pfx_path_openat+0x10/0x10 [ 86.787696] do_filp_open+0x1e8/0x450 [ 86.787729] ? __pfx_do_filp_open+0x10/0x10 [ 86.787776] ? find_held_lock+0x2b/0x80 [ 86.787809] ? alloc_fd+0x2c1/0x560 [ 86.787839] ? lock_release+0xc8/0x290 [ 86.787869] ? alloc_fd+0x2c1/0x560 [ 86.787909] do_sys_openat2+0x104/0x1b0 [ 86.787937] ? __pfx_do_sys_openat2+0x10/0x10 [ 86.787966] ? __fput+0x67b/0xb50 [ 86.787998] __x64_sys_openat+0x142/0x200 [ 86.788026] ? __pfx___x64_sys_openat+0x10/0x10 [ 86.788051] ? __pfx_fput_close_sync+0x10/0x10 [ 86.788090] do_syscall_64+0xbf/0x360 [ 86.788116] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.788140] RIP: 0033:0x7faad8eada04 [ 86.788159] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 86.788182] RSP: 002b:00007ffc627ab420 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 86.788204] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007faad8eada04 [ 86.788219] RDX: 0000000000080001 RSI: 00007faad8f642bb RDI: 00000000ffffff9c [ 86.788234] RBP: 00007faad8f642bb R08: 0000000000000000 R09: 00007ffc627ab410 [ 86.788248] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000080001 [ 86.788264] R13: 00007ffc627ab4c0 R14: 0000000000000000 R15: 00000000000000f8 [ 86.788296] [ 86.821904] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 86.823703] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 86.825990] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 86.827168] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.828634] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.833551] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 86.834939] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.844473] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 86.846595] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 86.852315] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 86.855998] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 86.858044] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 86.867718] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.871154] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.888734] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 86.890998] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 86.894339] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 86.896260] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 86.917942] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 86.949703] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 86.954177] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 86.962613] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 86.967444] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 88.670583] Bluetooth: hci1: command tx timeout [ 88.672390] Bluetooth: hci0: command tx timeout [ 88.923316] Bluetooth: hci6: command tx timeout [ 88.924129] Bluetooth: hci3: command tx timeout [ 88.924903] Bluetooth: hci2: command tx timeout [ 88.987294] Bluetooth: hci5: command tx timeout [ 88.988132] Bluetooth: hci7: command tx timeout [ 88.988888] Bluetooth: hci4: command tx timeout [ 90.717228] Bluetooth: hci1: command tx timeout [ 90.717687] Bluetooth: hci0: command tx timeout [ 90.971404] Bluetooth: hci6: command tx timeout [ 90.973014] Bluetooth: hci3: command tx timeout [ 90.973584] Bluetooth: hci2: command tx timeout [ 91.035312] Bluetooth: hci7: command tx timeout [ 91.035765] Bluetooth: hci5: command tx timeout [ 91.035792] Bluetooth: hci4: command tx timeout [ 92.763331] Bluetooth: hci0: command tx timeout [ 92.763793] Bluetooth: hci1: command tx timeout [ 93.019421] Bluetooth: hci6: command tx timeout [ 93.019648] Bluetooth: hci3: command tx timeout [ 93.019962] Bluetooth: hci2: command tx timeout [ 93.085214] Bluetooth: hci4: command tx timeout [ 93.085622] Bluetooth: hci7: command tx timeout [ 93.086003] Bluetooth: hci5: command tx timeout [ 94.813233] Bluetooth: hci1: command tx timeout [ 94.813311] Bluetooth: hci0: command tx timeout [ 95.067384] Bluetooth: hci6: command tx timeout [ 95.067661] Bluetooth: hci2: command tx timeout [ 95.067824] Bluetooth: hci3: command tx timeout [ 95.131291] Bluetooth: hci5: command tx timeout [ 95.131691] Bluetooth: hci7: command tx timeout [ 95.132076] Bluetooth: hci4: command tx timeout VM DIAGNOSIS: 20:23:19 Registers: info registers vcpu 0 RAX=0000000000000001 RBX=00007fff1dc14608 RCX=0000000000000007 RDX=00007fff1dc14609 RSI=00007fff1dc145f9 RDI=00007f6eba40b25c RBP=00007fff1dc14360 RSP=00007fff1dc142e0 R8 =00007f6eba3d1a70 R9 =00005555d12ca9c1 R10=0000000000000000 R11=00005555d12ca9c0 R12=00007fff1dc145f8 R13=00007fff1dc14609 R14=00005555d134e980 R15=00007fff1dc145f8 RIP=00007f6eba37ad47 RFL=00000206 [-----P-] CPL=3 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0033 0000000000000000 ffffffff 00a0fb00 DPL=3 CS64 [-RA] SS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f6eb9816900 00000000 00000000 GS =0000 0000000000000000 00000000 00000000 LDT=0000 fffffe2300000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00005555d12bfcd7 CR3=000000000f2c8000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=3d3d3d3d3d3d3d3d3d3d3d3d3d3d3d3d XMM01=00000000000000ff0000000000000000 XMM02=00000000000000000000000000000000 XMM03=3a646d65747379733a3d534741540035 XMM04=343630303533383632383300010100ff XMM05=00005555d132a1f00000000100000004 XMM06=00000004ffffffff00005555d1329060 XMM07=00005555d135499000005555d132d4b0 XMM08=383438373536383d44455a494c414954 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=000000000000002d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff828b5535 RDI=ffffffff8871ef20 RBP=ffffffff8871eee0 RSP=ffff88801947f2b8 R8 =0000000000000000 R9 =ffffed1001726046 R10=000000000000002d R11=0000000000000001 R12=000000000000002d R13=0000000000000010 R14=ffffffff8871eee0 R15=ffffffff828b5520 RIP=ffffffff828b558d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000555591d41400 00000000 00000000 GS =0000 ffff8880e56f2000 00000000 00000000 LDT=0000 fffffe6300000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000555584d0b6e8 CR3=0000000035867000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=000000000000000041587bb800000000 XMM03=0000ff00000000000000000000000000 XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962 XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000