Warning: Permanently added '[localhost]:14049' (ECDSA) to the list of known hosts.
2025/08/29 16:58:06 fuzzer started
2025/08/29 16:58:06 dialing manager at localhost:43077
syzkaller login: [   51.263000] cgroup: Unknown subsys name 'net'
[   51.316160] cgroup: Unknown subsys name 'cpuset'
[   51.329052] cgroup: Unknown subsys name 'rlimit'
2025/08/29 16:58:16 syscalls: 2214
2025/08/29 16:58:16 code coverage: enabled
2025/08/29 16:58:16 comparison tracing: enabled
2025/08/29 16:58:16 extra coverage: enabled
2025/08/29 16:58:16 setuid sandbox: enabled
2025/08/29 16:58:16 namespace sandbox: enabled
2025/08/29 16:58:16 Android sandbox: enabled
2025/08/29 16:58:16 fault injection: enabled
2025/08/29 16:58:16 leak checking: enabled
2025/08/29 16:58:16 net packet injection: enabled
2025/08/29 16:58:16 net device setup: enabled
2025/08/29 16:58:16 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/08/29 16:58:16 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/08/29 16:58:16 USB emulation: enabled
2025/08/29 16:58:16 hci packet injection: enabled
2025/08/29 16:58:16 wifi device emulation: enabled
2025/08/29 16:58:16 802.15.4 emulation: enabled
2025/08/29 16:58:17 fetching corpus: 50, signal 12803/14673 (executing program)
2025/08/29 16:58:17 fetching corpus: 100, signal 29163/32584 (executing program)
2025/08/29 16:58:17 fetching corpus: 150, signal 40223/45029 (executing program)
2025/08/29 16:58:17 fetching corpus: 200, signal 45188/51373 (executing program)
2025/08/29 16:58:17 fetching corpus: 250, signal 52969/60387 (executing program)
2025/08/29 16:58:17 fetching corpus: 300, signal 57417/66061 (executing program)
2025/08/29 16:58:17 fetching corpus: 350, signal 62006/71811 (executing program)
2025/08/29 16:58:17 fetching corpus: 400, signal 66536/77379 (executing program)
2025/08/29 16:58:17 fetching corpus: 450, signal 70859/82691 (executing program)
2025/08/29 16:58:17 fetching corpus: 500, signal 72519/85509 (executing program)
2025/08/29 16:58:17 fetching corpus: 550, signal 74815/88860 (executing program)
2025/08/29 16:58:18 fetching corpus: 600, signal 77306/92344 (executing program)
2025/08/29 16:58:18 fetching corpus: 650, signal 79870/95844 (executing program)
2025/08/29 16:58:18 fetching corpus: 700, signal 82437/99249 (executing program)
2025/08/29 16:58:18 fetching corpus: 750, signal 85063/102677 (executing program)
2025/08/29 16:58:18 fetching corpus: 800, signal 87836/106238 (executing program)
2025/08/29 16:58:18 fetching corpus: 850, signal 89921/109061 (executing program)
2025/08/29 16:58:18 fetching corpus: 900, signal 92182/112058 (executing program)
2025/08/29 16:58:18 fetching corpus: 950, signal 93743/114409 (executing program)
2025/08/29 16:58:18 fetching corpus: 1000, signal 97508/118538 (executing program)
2025/08/29 16:58:18 fetching corpus: 1050, signal 99768/121404 (executing program)
2025/08/29 16:58:18 fetching corpus: 1100, signal 100962/123333 (executing program)
2025/08/29 16:58:19 fetching corpus: 1150, signal 102569/125589 (executing program)
2025/08/29 16:58:19 fetching corpus: 1200, signal 104407/128017 (executing program)
2025/08/29 16:58:19 fetching corpus: 1250, signal 106638/130718 (executing program)
2025/08/29 16:58:19 fetching corpus: 1300, signal 107608/132399 (executing program)
2025/08/29 16:58:19 fetching corpus: 1350, signal 108847/134242 (executing program)
2025/08/29 16:58:19 fetching corpus: 1400, signal 110832/136632 (executing program)
2025/08/29 16:58:19 fetching corpus: 1450, signal 112587/138812 (executing program)
2025/08/29 16:58:19 fetching corpus: 1500, signal 113368/140281 (executing program)
2025/08/29 16:58:19 fetching corpus: 1550, signal 114509/141958 (executing program)
2025/08/29 16:58:19 fetching corpus: 1600, signal 115888/143769 (executing program)
2025/08/29 16:58:20 fetching corpus: 1650, signal 117226/145629 (executing program)
2025/08/29 16:58:20 fetching corpus: 1700, signal 118236/147225 (executing program)
2025/08/29 16:58:20 fetching corpus: 1750, signal 119309/148837 (executing program)
2025/08/29 16:58:20 fetching corpus: 1800, signal 120291/150311 (executing program)
2025/08/29 16:58:20 fetching corpus: 1850, signal 122275/152418 (executing program)
2025/08/29 16:58:20 fetching corpus: 1900, signal 122954/153681 (executing program)
2025/08/29 16:58:20 fetching corpus: 1950, signal 123832/155060 (executing program)
2025/08/29 16:58:20 fetching corpus: 2000, signal 124842/156508 (executing program)
2025/08/29 16:58:20 fetching corpus: 2050, signal 125845/157910 (executing program)
2025/08/29 16:58:20 fetching corpus: 2100, signal 126802/159273 (executing program)
2025/08/29 16:58:20 fetching corpus: 2150, signal 127666/160522 (executing program)
2025/08/29 16:58:20 fetching corpus: 2200, signal 128717/161849 (executing program)
2025/08/29 16:58:21 fetching corpus: 2250, signal 129406/162975 (executing program)
2025/08/29 16:58:21 fetching corpus: 2300, signal 130450/164409 (executing program)
2025/08/29 16:58:21 fetching corpus: 2350, signal 131768/165896 (executing program)
2025/08/29 16:58:21 fetching corpus: 2400, signal 132934/167347 (executing program)
2025/08/29 16:58:21 fetching corpus: 2450, signal 133641/168446 (executing program)
2025/08/29 16:58:21 fetching corpus: 2500, signal 134432/169594 (executing program)
2025/08/29 16:58:21 fetching corpus: 2550, signal 135368/170735 (executing program)
2025/08/29 16:58:21 fetching corpus: 2600, signal 136057/171763 (executing program)
2025/08/29 16:58:21 fetching corpus: 2650, signal 136744/172834 (executing program)
2025/08/29 16:58:21 fetching corpus: 2700, signal 137281/173816 (executing program)
2025/08/29 16:58:21 fetching corpus: 2750, signal 137824/174714 (executing program)
2025/08/29 16:58:22 fetching corpus: 2800, signal 138467/175683 (executing program)
2025/08/29 16:58:22 fetching corpus: 2850, signal 139264/176655 (executing program)
2025/08/29 16:58:22 fetching corpus: 2900, signal 139958/177615 (executing program)
2025/08/29 16:58:22 fetching corpus: 2950, signal 140717/178585 (executing program)
2025/08/29 16:58:22 fetching corpus: 3000, signal 141155/179422 (executing program)
2025/08/29 16:58:22 fetching corpus: 3050, signal 141703/180299 (executing program)
2025/08/29 16:58:22 fetching corpus: 3100, signal 142532/181234 (executing program)
2025/08/29 16:58:22 fetching corpus: 3150, signal 143451/182259 (executing program)
2025/08/29 16:58:22 fetching corpus: 3200, signal 144308/183223 (executing program)
2025/08/29 16:58:22 fetching corpus: 3250, signal 144895/184059 (executing program)
2025/08/29 16:58:22 fetching corpus: 3300, signal 145439/184866 (executing program)
2025/08/29 16:58:23 fetching corpus: 3350, signal 146084/185681 (executing program)
2025/08/29 16:58:23 fetching corpus: 3400, signal 146559/186453 (executing program)
2025/08/29 16:58:23 fetching corpus: 3450, signal 147212/187315 (executing program)
2025/08/29 16:58:23 fetching corpus: 3500, signal 147596/188015 (executing program)
2025/08/29 16:58:23 fetching corpus: 3550, signal 148370/188809 (executing program)
2025/08/29 16:58:23 fetching corpus: 3600, signal 149114/189548 (executing program)
2025/08/29 16:58:23 fetching corpus: 3650, signal 149552/190256 (executing program)
2025/08/29 16:58:23 fetching corpus: 3700, signal 149922/190939 (executing program)
2025/08/29 16:58:23 fetching corpus: 3750, signal 150614/191727 (executing program)
2025/08/29 16:58:23 fetching corpus: 3800, signal 151111/192407 (executing program)
2025/08/29 16:58:23 fetching corpus: 3850, signal 151751/193167 (executing program)
2025/08/29 16:58:23 fetching corpus: 3900, signal 152079/193788 (executing program)
2025/08/29 16:58:23 fetching corpus: 3950, signal 152789/194516 (executing program)
2025/08/29 16:58:24 fetching corpus: 4000, signal 153466/195301 (executing program)
2025/08/29 16:58:24 fetching corpus: 4050, signal 153905/195948 (executing program)
2025/08/29 16:58:24 fetching corpus: 4100, signal 154476/196598 (executing program)
2025/08/29 16:58:24 fetching corpus: 4150, signal 154977/197182 (executing program)
2025/08/29 16:58:24 fetching corpus: 4200, signal 155421/197789 (executing program)
2025/08/29 16:58:24 fetching corpus: 4250, signal 155869/198391 (executing program)
2025/08/29 16:58:24 fetching corpus: 4300, signal 156381/198994 (executing program)
2025/08/29 16:58:24 fetching corpus: 4350, signal 157004/199613 (executing program)
2025/08/29 16:58:24 fetching corpus: 4400, signal 157444/200152 (executing program)
2025/08/29 16:58:24 fetching corpus: 4450, signal 157930/200690 (executing program)
2025/08/29 16:58:25 fetching corpus: 4500, signal 158268/201210 (executing program)
2025/08/29 16:58:25 fetching corpus: 4550, signal 159249/201798 (executing program)
2025/08/29 16:58:25 fetching corpus: 4600, signal 159700/202291 (executing program)
2025/08/29 16:58:25 fetching corpus: 4650, signal 160324/202790 (executing program)
2025/08/29 16:58:25 fetching corpus: 4700, signal 160716/203259 (executing program)
2025/08/29 16:58:25 fetching corpus: 4750, signal 160974/203773 (executing program)
2025/08/29 16:58:25 fetching corpus: 4800, signal 161164/204233 (executing program)
2025/08/29 16:58:25 fetching corpus: 4850, signal 161489/204721 (executing program)
2025/08/29 16:58:25 fetching corpus: 4900, signal 161826/205207 (executing program)
2025/08/29 16:58:25 fetching corpus: 4950, signal 162289/205695 (executing program)
2025/08/29 16:58:25 fetching corpus: 5000, signal 162682/206135 (executing program)
2025/08/29 16:58:26 fetching corpus: 5050, signal 162965/206566 (executing program)
2025/08/29 16:58:26 fetching corpus: 5100, signal 163352/206567 (executing program)
2025/08/29 16:58:26 fetching corpus: 5150, signal 163663/206575 (executing program)
2025/08/29 16:58:26 fetching corpus: 5200, signal 163988/206578 (executing program)
2025/08/29 16:58:26 fetching corpus: 5250, signal 164569/206584 (executing program)
2025/08/29 16:58:26 fetching corpus: 5300, signal 164929/206589 (executing program)
2025/08/29 16:58:26 fetching corpus: 5350, signal 165302/206605 (executing program)
2025/08/29 16:58:26 fetching corpus: 5400, signal 165842/206610 (executing program)
2025/08/29 16:58:26 fetching corpus: 5450, signal 166324/206624 (executing program)
2025/08/29 16:58:26 fetching corpus: 5500, signal 167005/206710 (executing program)
2025/08/29 16:58:26 fetching corpus: 5550, signal 167359/206711 (executing program)
2025/08/29 16:58:26 fetching corpus: 5600, signal 167805/206721 (executing program)
2025/08/29 16:58:27 fetching corpus: 5650, signal 168151/206734 (executing program)
2025/08/29 16:58:27 fetching corpus: 5700, signal 168613/206751 (executing program)
2025/08/29 16:58:27 fetching corpus: 5750, signal 168923/206764 (executing program)
2025/08/29 16:58:27 fetching corpus: 5800, signal 169619/206765 (executing program)
2025/08/29 16:58:27 fetching corpus: 5850, signal 170097/206828 (executing program)
2025/08/29 16:58:27 fetching corpus: 5900, signal 170345/206829 (executing program)
2025/08/29 16:58:27 fetching corpus: 5950, signal 170646/206838 (executing program)
2025/08/29 16:58:27 fetching corpus: 6000, signal 170961/206840 (executing program)
2025/08/29 16:58:27 fetching corpus: 6050, signal 171387/206846 (executing program)
2025/08/29 16:58:27 fetching corpus: 6100, signal 171665/206853 (executing program)
2025/08/29 16:58:27 fetching corpus: 6150, signal 172297/206854 (executing program)
2025/08/29 16:58:28 fetching corpus: 6200, signal 172730/206866 (executing program)
2025/08/29 16:58:28 fetching corpus: 6250, signal 173078/206867 (executing program)
2025/08/29 16:58:28 fetching corpus: 6300, signal 173632/206868 (executing program)
2025/08/29 16:58:28 fetching corpus: 6350, signal 173968/206884 (executing program)
2025/08/29 16:58:28 fetching corpus: 6400, signal 174379/206887 (executing program)
2025/08/29 16:58:28 fetching corpus: 6450, signal 174704/206888 (executing program)
2025/08/29 16:58:28 fetching corpus: 6500, signal 175000/206909 (executing program)
2025/08/29 16:58:28 fetching corpus: 6550, signal 175311/206912 (executing program)
2025/08/29 16:58:28 fetching corpus: 6600, signal 175675/206997 (executing program)
2025/08/29 16:58:28 fetching corpus: 6650, signal 175906/207006 (executing program)
2025/08/29 16:58:28 fetching corpus: 6700, signal 176286/207024 (executing program)
2025/08/29 16:58:28 fetching corpus: 6750, signal 176605/207026 (executing program)
2025/08/29 16:58:29 fetching corpus: 6800, signal 176968/207031 (executing program)
2025/08/29 16:58:29 fetching corpus: 6850, signal 177327/207033 (executing program)
2025/08/29 16:58:29 fetching corpus: 6900, signal 177666/207037 (executing program)
2025/08/29 16:58:29 fetching corpus: 6950, signal 178084/207046 (executing program)
2025/08/29 16:58:29 fetching corpus: 7000, signal 178336/207051 (executing program)
2025/08/29 16:58:29 fetching corpus: 7050, signal 178610/207055 (executing program)
2025/08/29 16:58:29 fetching corpus: 7100, signal 179059/207065 (executing program)
2025/08/29 16:58:29 fetching corpus: 7150, signal 179362/207083 (executing program)
2025/08/29 16:58:29 fetching corpus: 7200, signal 179632/207086 (executing program)
2025/08/29 16:58:29 fetching corpus: 7250, signal 179992/207099 (executing program)
2025/08/29 16:58:29 fetching corpus: 7300, signal 180199/207108 (executing program)
2025/08/29 16:58:29 fetching corpus: 7350, signal 180591/207143 (executing program)
2025/08/29 16:58:29 fetching corpus: 7400, signal 180846/207152 (executing program)
2025/08/29 16:58:30 fetching corpus: 7450, signal 181083/207157 (executing program)
2025/08/29 16:58:30 fetching corpus: 7500, signal 181251/207160 (executing program)
2025/08/29 16:58:30 fetching corpus: 7550, signal 181846/207170 (executing program)
2025/08/29 16:58:30 fetching corpus: 7600, signal 182151/207176 (executing program)
2025/08/29 16:58:30 fetching corpus: 7650, signal 182488/207180 (executing program)
2025/08/29 16:58:30 fetching corpus: 7700, signal 182816/207192 (executing program)
2025/08/29 16:58:30 fetching corpus: 7750, signal 183096/207193 (executing program)
2025/08/29 16:58:30 fetching corpus: 7800, signal 183304/207201 (executing program)
2025/08/29 16:58:30 fetching corpus: 7850, signal 183601/207245 (executing program)
2025/08/29 16:58:30 fetching corpus: 7900, signal 184271/207259 (executing program)
2025/08/29 16:58:30 fetching corpus: 7950, signal 184789/207326 (executing program)
2025/08/29 16:58:31 fetching corpus: 8000, signal 185011/207334 (executing program)
2025/08/29 16:58:31 fetching corpus: 8050, signal 185274/207349 (executing program)
2025/08/29 16:58:31 fetching corpus: 8100, signal 185520/207361 (executing program)
2025/08/29 16:58:31 fetching corpus: 8150, signal 185959/207362 (executing program)
2025/08/29 16:58:31 fetching corpus: 8200, signal 186340/207365 (executing program)
2025/08/29 16:58:31 fetching corpus: 8250, signal 186631/207366 (executing program)
2025/08/29 16:58:31 fetching corpus: 8300, signal 186874/207379 (executing program)
2025/08/29 16:58:31 fetching corpus: 8350, signal 187195/207380 (executing program)
2025/08/29 16:58:31 fetching corpus: 8400, signal 187413/207380 (executing program)
2025/08/29 16:58:31 fetching corpus: 8450, signal 187670/207381 (executing program)
2025/08/29 16:58:31 fetching corpus: 8500, signal 187894/207388 (executing program)
2025/08/29 16:58:31 fetching corpus: 8550, signal 188122/207393 (executing program)
2025/08/29 16:58:31 fetching corpus: 8600, signal 188452/207396 (executing program)
2025/08/29 16:58:32 fetching corpus: 8650, signal 188684/207402 (executing program)
2025/08/29 16:58:32 fetching corpus: 8700, signal 188875/207414 (executing program)
2025/08/29 16:58:32 fetching corpus: 8750, signal 189181/207529 (executing program)
2025/08/29 16:58:32 fetching corpus: 8800, signal 189457/207530 (executing program)
2025/08/29 16:58:32 fetching corpus: 8850, signal 189657/207535 (executing program)
2025/08/29 16:58:32 fetching corpus: 8900, signal 189805/207536 (executing program)
2025/08/29 16:58:32 fetching corpus: 8950, signal 190006/207540 (executing program)
2025/08/29 16:58:32 fetching corpus: 9000, signal 190280/207541 (executing program)
2025/08/29 16:58:32 fetching corpus: 9050, signal 190520/207554 (executing program)
2025/08/29 16:58:32 fetching corpus: 9100, signal 190879/207607 (executing program)
2025/08/29 16:58:32 fetching corpus: 9150, signal 191059/207611 (executing program)
2025/08/29 16:58:33 fetching corpus: 9200, signal 191327/207614 (executing program)
2025/08/29 16:58:33 fetching corpus: 9250, signal 191496/207623 (executing program)
2025/08/29 16:58:33 fetching corpus: 9300, signal 191833/207626 (executing program)
2025/08/29 16:58:33 fetching corpus: 9350, signal 192079/207631 (executing program)
2025/08/29 16:58:33 fetching corpus: 9400, signal 192276/207631 (executing program)
2025/08/29 16:58:33 fetching corpus: 9450, signal 192450/207642 (executing program)
2025/08/29 16:58:33 fetching corpus: 9500, signal 192674/207657 (executing program)
2025/08/29 16:58:33 fetching corpus: 9550, signal 192869/207672 (executing program)
2025/08/29 16:58:33 fetching corpus: 9600, signal 193185/207680 (executing program)
2025/08/29 16:58:33 fetching corpus: 9650, signal 193498/207680 (executing program)
2025/08/29 16:58:33 fetching corpus: 9700, signal 193666/207687 (executing program)
2025/08/29 16:58:33 fetching corpus: 9750, signal 193904/207697 (executing program)
2025/08/29 16:58:34 fetching corpus: 9800, signal 194361/207703 (executing program)
2025/08/29 16:58:34 fetching corpus: 9850, signal 194536/207709 (executing program)
2025/08/29 16:58:34 fetching corpus: 9900, signal 194749/207711 (executing program)
2025/08/29 16:58:34 fetching corpus: 9950, signal 195031/207711 (executing program)
2025/08/29 16:58:34 fetching corpus: 10000, signal 195284/207715 (executing program)
2025/08/29 16:58:34 fetching corpus: 10050, signal 195528/207719 (executing program)
2025/08/29 16:58:34 fetching corpus: 10100, signal 195763/207720 (executing program)
2025/08/29 16:58:34 fetching corpus: 10150, signal 196013/207722 (executing program)
2025/08/29 16:58:35 fetching corpus: 10200, signal 196283/207725 (executing program)
2025/08/29 16:58:35 fetching corpus: 10250, signal 196445/207725 (executing program)
2025/08/29 16:58:35 fetching corpus: 10300, signal 196619/207750 (executing program)
2025/08/29 16:58:35 fetching corpus: 10350, signal 196810/207754 (executing program)
2025/08/29 16:58:35 fetching corpus: 10400, signal 197033/207757 (executing program)
2025/08/29 16:58:35 fetching corpus: 10450, signal 197216/207774 (executing program)
2025/08/29 16:58:35 fetching corpus: 10500, signal 197401/207780 (executing program)
2025/08/29 16:58:35 fetching corpus: 10550, signal 197634/207782 (executing program)
2025/08/29 16:58:35 fetching corpus: 10600, signal 197841/207784 (executing program)
2025/08/29 16:58:35 fetching corpus: 10650, signal 198039/207790 (executing program)
2025/08/29 16:58:35 fetching corpus: 10700, signal 198210/207791 (executing program)
2025/08/29 16:58:36 fetching corpus: 10750, signal 198397/207819 (executing program)
2025/08/29 16:58:36 fetching corpus: 10800, signal 198597/207824 (executing program)
2025/08/29 16:58:36 fetching corpus: 10850, signal 198790/207830 (executing program)
2025/08/29 16:58:36 fetching corpus: 10900, signal 199059/207832 (executing program)
2025/08/29 16:58:36 fetching corpus: 10950, signal 199224/207842 (executing program)
2025/08/29 16:58:36 fetching corpus: 11000, signal 199413/207845 (executing program)
2025/08/29 16:58:36 fetching corpus: 11050, signal 199641/207848 (executing program)
2025/08/29 16:58:36 fetching corpus: 11100, signal 199840/207852 (executing program)
2025/08/29 16:58:36 fetching corpus: 11150, signal 200039/207873 (executing program)
2025/08/29 16:58:36 fetching corpus: 11200, signal 200270/207879 (executing program)
2025/08/29 16:58:36 fetching corpus: 11250, signal 200588/207893 (executing program)
2025/08/29 16:58:36 fetching corpus: 11300, signal 200809/207893 (executing program)
2025/08/29 16:58:37 fetching corpus: 11350, signal 200938/207899 (executing program)
2025/08/29 16:58:37 fetching corpus: 11400, signal 201110/207906 (executing program)
2025/08/29 16:58:37 fetching corpus: 11450, signal 201301/207910 (executing program)
2025/08/29 16:58:37 fetching corpus: 11500, signal 201475/207911 (executing program)
2025/08/29 16:58:37 fetching corpus: 11550, signal 201661/207911 (executing program)
2025/08/29 16:58:37 fetching corpus: 11600, signal 201868/207912 (executing program)
2025/08/29 16:58:37 fetching corpus: 11650, signal 202029/207917 (executing program)
2025/08/29 16:58:37 fetching corpus: 11654, signal 202036/207917 (executing program)
2025/08/29 16:58:37 fetching corpus: 11654, signal 202036/207917 (executing program)
2025/08/29 16:58:39 starting 8 fuzzer processes
16:58:39 executing program 0:
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fremovexattr(0xffffffffffffffff, &(0x7f0000000000)=@random={'trusted.', '\x00'})
r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000040), 0x80080, 0x0)
ioctl$CDROMMULTISESSION(r0, 0x5310, &(0x7f0000000080)={@lba=0x1, 0x1, 0x1})
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r1=>r0}, './file0\x00'})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2/custom1\x00', 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000180)={<r3=>0x0, <r4=>0x0})
ppoll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x2424}, {r1, 0x2000}, {r2, 0x5000}], 0x3, &(0x7f00000001c0)={r3, r4+10000000}, &(0x7f0000000200)={[0x3]}, 0x8)
ioctl$SCSI_IOCTL_PROBE_HOST(r1, 0x5385, &(0x7f0000000240)={0xba, ""/186})
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='net/if_inet6\x00')
r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000340), 0x8000, 0x0)
clock_gettime(0x0, &(0x7f0000000400)={<r7=>0x0, <r8=>0x0})
epoll_pwait2(r6, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}], 0x6, &(0x7f0000000440)={r7, r8+10000000}, &(0x7f0000000480)={[0x81]}, 0x8)
clock_gettime(0x1, &(0x7f00000004c0))
pselect6(0x40, &(0x7f0000000500)={0x7fff, 0x4, 0xf01, 0x4, 0x6, 0x2, 0x4, 0x80}, &(0x7f0000000540)={0xffffffffffff0000, 0x80000000, 0xffffffff, 0x0, 0x3, 0x400, 0x8, 0x80000001}, &(0x7f0000000580)={0x7, 0x7, 0xff, 0x7fff, 0x3, 0x6, 0x4, 0x49}, &(0x7f00000005c0)={0x0, 0x3938700}, &(0x7f0000000640)={&(0x7f0000000600)={[0xfffffffffffff801]}, 0x8})
r9 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000680), 0x22500, 0x0)
r10 = pidfd_open(0xffffffffffffffff, 0x0)
close_range(r9, r10, 0x2)
r11 = openat$cgroup_ro(r5, &(0x7f00000006c0)='cgroup.stat\x00', 0x0, 0x0)
splice(r11, &(0x7f0000000700)=0x2, 0xffffffffffffffff, &(0x7f0000000780)=0xc25, 0x28d, 0x0)

16:58:39 executing program 1:
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0)
ioctl$RTC_PLL_GET(r0, 0x80207011, &(0x7f0000000040))
ioctl$RTC_WKALM_RD(r0, 0x80287010, &(0x7f0000000080))
r1 = dup2(r0, r0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x1204428, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@fscache}, {@cachetag={'cachetag', 0x3d, '/dev/nvram\x00'}}, {@cache_mmap}, {@nodevmap}, {@posixacl}, {@cache_loose}, {@cache_mmap}, {@fscache}, {@loose}, {@mmap}], [{@mask={'mask', 0x3d, '^MAY_READ'}}, {@subj_user={'subj_user', 0x3d, '$+!$'}}]}})
r2 = syz_open_dev$rtc(&(0x7f0000000200), 0x3, 0x4000)
ioctl$RTC_PLL_SET(r2, 0x40207012, &(0x7f0000000240)={0x5, 0x20, 0x80000000, 0x7f, 0x1, 0x2, 0x9})
ioctl$RTC_IRQP_READ(r1, 0x8008700b, &(0x7f0000000280))
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x220000, 0x0)
mount$9p_unix(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x4010, &(0x7f00000003c0)={'trans=unix,', {[{@access_any}, {@dfltuid}, {}, {@access_client}, {@cachetag={'cachetag', 0x3d, '/dev/rtc#\x00'}}], [{@dont_appraise}, {@audit}]}})
ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, &(0x7f0000000440)={0x0, 0x7fff, @status={[0x1000, 0xfff, 0xfffffffffffffffb, 0xfffffffffffffffb, 0x9, 0xe6]}, [0x2, 0x40000000000000, 0x20, 0x8001, 0xb8, 0x2358c0000000000, 0x8001, 0x2, 0x7, 0x1f, 0x5, 0xfffffffffffffffd, 0x2, 0x4, 0x2c, 0x6b, 0x100000000, 0x2, 0xfff, 0xffffffffffffff80, 0x7, 0x5, 0x5, 0x75, 0x7, 0xffffffffffffff80, 0x0, 0x0, 0x276, 0x3, 0x101, 0x7fff, 0x5, 0x8, 0x4f8d, 0x4, 0x0, 0x5, 0xffffffff, 0x0, 0xffffffff, 0xcbc, 0x3, 0x10000, 0x9, 0x6, 0x7, 0xffffffffffff8001, 0x0, 0x7, 0x2, 0x4, 0x81, 0x5, 0x3, 0x0, 0x1, 0x400, 0x188, 0x8, 0xffffffff, 0xfffffffffffffffd, 0x5, 0x7f]})
ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f0000000e80)={0x0, 0x6, 0x800, 0xfe5102adf40457b9})
pwrite64(0xffffffffffffffff, &(0x7f0000001280)="f522767ccaedc7595bc33fd7de1adbe7b4", 0x11, 0x1)
close_range(r3, r3, 0x0)
r4 = signalfd(r3, &(0x7f00000012c0)={[0x2]}, 0x8)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r4, &(0x7f0000001680)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001640)={&(0x7f0000001340)={0x2d4, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xffff}, {0x6, 0x16, 0x7f}, {0x5}, {0x6, 0x11, 0xffe0}, {0x8, 0xb, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x70ad}, {0x6, 0x16, 0x1}, {0x5}, {0x6, 0x11, 0x8000}, {0x8, 0xb, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x28a20f04}, {0x6, 0x16, 0x7}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x6}, {0x8, 0xb, 0x4}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x2}, {0x6, 0x16, 0x6}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x401}, {0x8, 0xb, 0x4}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8}, {0x6, 0x16, 0x2}, {0x5}, {0x6, 0x11, 0xcb87}, {0x8, 0xb, 0x1424}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x80000000}, {0x6, 0x16, 0x3}, {0x5}, {0x6, 0x11, 0x6}, {0x8, 0xb, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x3}, {0x6, 0x16, 0x1c}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x8}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x4}, {0x6, 0x16, 0x3}, {0x5}, {0x6, 0x11, 0x8001}, {0x8, 0xb, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x1}, {0x6, 0x16, 0x8001}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x7ff}, {0x8, 0xb, 0x9}}]}, 0x2d4}, 0x1, 0x0, 0x0, 0x20810}, 0x4000800)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x5, 0x4010, 0xffffffffffffffff, 0xf1e92000)
close_range(r2, r2, 0x2)
pread64(r1, &(0x7f00000016c0)=""/92, 0x5c, 0xdb)
ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, &(0x7f0000001780))

16:58:39 executing program 7:
removexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='system.sockprotoname\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x80000, 0x82)
utimes(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={{}, {0x0, 0x2710}})
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r1=>r0, {0x8}}, './file0\x00'})
r2 = openat(r1, &(0x7f0000000180)='./file0\x00', 0x10000, 0x10)
futimesat(r1, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200))
setxattr$trusted_overlay_origin(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x2)
getdents64(r1, &(0x7f0000000300)=""/143, 0x8f)
mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x4, 0x3)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000004c0)={<r3=>0xffffffffffffffff})
ioctl$VFAT_IOCTL_READDIR_BOTH(r3, 0x82307201, &(0x7f0000000500)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
r4 = fsmount(r2, 0x1, 0x70)
unlinkat(r4, &(0x7f0000000740)='./file0\x00', 0x0)
execveat(r0, &(0x7f0000000780)='./file0\x00', &(0x7f00000009c0)=[&(0x7f00000007c0)='\x00', &(0x7f0000000800)='system.sockprotoname\x00', &(0x7f0000000840)=':#\x00', &(0x7f0000000880)='system.sockprotoname\x00', &(0x7f00000008c0)='trusted.overlay.origin\x00', &(0x7f0000000900)='(\x00', &(0x7f0000000940), &(0x7f0000000980)='!\x00'], &(0x7f0000000a40)=[&(0x7f0000000a00)='system.sockprotoname\x00'], 0x100)
splice(r2, &(0x7f0000000a80)=0xffffffffffffffff, r2, &(0x7f0000000ac0)=0x20, 0x100000000, 0x0)
creat(&(0x7f0000000b00)='./file0\x00', 0x163)
clock_gettime(0x0, &(0x7f0000000b80)={<r5=>0x0, <r6=>0x0})
clock_gettime(0x0, &(0x7f0000000bc0)={<r7=>0x0, <r8=>0x0})
utimes(&(0x7f0000000b40)='./file0/file0\x00', &(0x7f0000000c00)={{r5, r6/1000+10000}, {r7, r8/1000+60000}})
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, 0xffffffffffffffff, &(0x7f0000000c40)={0x8})

16:58:39 executing program 2:
ioctl$KDSETLED(0xffffffffffffffff, 0x4b32, 0x3)
r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0)
ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000040)=0x8)
ioctl$TIOCMGET(r0, 0x5415, &(0x7f0000000080))
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f00000000c0))
setsockopt$sock_timeval(r0, 0x1, 0x43, &(0x7f0000000100), 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$binfmt_elf32(r1, &(0x7f0000000180)={{0x7f, 0x45, 0x4c, 0x46, 0x3, 0x4, 0x7f, 0xb5, 0x2c5a6783, 0x2, 0x6, 0x394, 0x18c, 0x38, 0x39, 0x2d77, 0x20, 0x20, 0x1, 0x4, 0x400, 0x9}, [{0x2, 0x0, 0x8, 0x3, 0x80, 0x0, 0x1ff, 0x2}], "b27bb072e77401270821f8d006ea0693b026bb2f90ed648476cc69bc3d8d3059a83856e6e6f1ce2c3af215c71597f7984507ed6e2939f7588a982b477ba3ced92ff01484836a7d34bb02edfce05f67be", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x8a8)
r3 = accept4(r1, 0x0, &(0x7f0000000a40), 0x80800)
getsockopt$bt_hci(r3, 0x0, 0x0, &(0x7f0000000a80)=""/191, &(0x7f0000000b40)=0xbf)
r4 = openat(r0, &(0x7f0000000b80)='./file0\x00', 0x501200, 0x1b0)
r5 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000bc0), 0x20803, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, &(0x7f0000000c00)={{0x1, 0x1, 0x18, r5}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000c40)={{0x1, 0x1, 0x18, <r6=>r2, @out_args}, './file0\x00'})
recvmmsg$unix(r6, &(0x7f0000007a40)=[{{&(0x7f0000000c80), 0x6e, &(0x7f0000000e00)=[{&(0x7f0000000d00)=""/214, 0xd6}], 0x1, &(0x7f0000000e40)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000002280)=[{&(0x7f0000000e80)=""/36, 0x24}, {&(0x7f0000000ec0)=""/18, 0x12}, {&(0x7f0000000f00)=""/39, 0x27}, {&(0x7f0000000f40)=""/4096, 0x1000}, {&(0x7f0000001f40)=""/170, 0xaa}, {&(0x7f0000002000)=""/188, 0xbc}, {&(0x7f00000020c0)=""/36, 0x24}, {&(0x7f0000002100)=""/255, 0xff}, {&(0x7f0000002200)=""/76, 0x4c}], 0x9, &(0x7f0000002340)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}}, {{&(0x7f0000002380), 0x6e, &(0x7f00000035c0)=[{&(0x7f0000002400)=""/207, 0xcf}, {&(0x7f0000002500)=""/128, 0x80}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000003580)=""/24, 0x18}], 0x4, &(0x7f0000003600)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xb0}}, {{0x0, 0x0, &(0x7f0000003980)=[{&(0x7f00000036c0)=""/70, 0x46}, {&(0x7f0000003740)}, {&(0x7f0000003780)=""/195, 0xc3}, {&(0x7f0000003880)=""/151, 0x97}, {&(0x7f0000003940)=""/15, 0xf}], 0x5, &(0x7f0000003a00)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, <r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r9=>0xffffffffffffffff, 0xffffffffffffffff]}}], 0x170}}, {{&(0x7f0000003b80), 0x6e, &(0x7f0000004d00)=[{&(0x7f0000003c00)=""/4096, 0x1000}, {&(0x7f0000004c00)=""/206, 0xce}], 0x2, &(0x7f0000004d40)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000005f00)=[{&(0x7f0000004d80)=""/18, 0x12}, {&(0x7f0000004dc0)=""/4096, 0x1000}, {&(0x7f0000005dc0)=""/81, 0x51}, {&(0x7f0000005e40)=""/145, 0x91}], 0x4}}, {{&(0x7f0000005f40), 0x6e, &(0x7f0000006080)=[{&(0x7f0000005fc0)=""/174, 0xae}], 0x1, &(0x7f00000060c0)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x98}}, {{0x0, 0x0, &(0x7f0000007680)=[{&(0x7f0000006180)=""/53, 0x35}, {&(0x7f00000061c0)=""/247, 0xf7}, {&(0x7f00000062c0)=""/143, 0x8f}, {&(0x7f0000006380)=""/34, 0x22}, {&(0x7f00000063c0)=""/232, 0xe8}, {&(0x7f00000064c0)=""/187, 0xbb}, {&(0x7f0000006580)=""/4096, 0x1000}, {&(0x7f0000007580)=""/183, 0xb7}, {&(0x7f0000007640)=""/64, 0x40}], 0x9, &(0x7f0000007740)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{&(0x7f00000077c0), 0x6e, &(0x7f00000079c0)=[{&(0x7f0000007840)=""/186, 0xba}, {&(0x7f0000007900)=""/117, 0x75}, {&(0x7f0000007980)=""/17, 0x11}], 0x3, &(0x7f0000007a00)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}], 0x9, 0x2060, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r8, 0xc018937e, &(0x7f0000007c80)={{0x1, 0x1, 0x18, r9, @out_args}, './file0\x00'})
ioctl$TCSETSF2(r7, 0x402c542d, &(0x7f0000007cc0)={0x47, 0x2, 0xffffffff, 0x0, 0xf9, "cdcdeadbedbaa75de3d4a2c3bb2810f7d37626", 0x2, 0x2fe3})
r10 = syz_io_uring_complete(0x0)
ioctl$TCFLSH(r10, 0x540b, 0x1)
ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, &(0x7f0000007d00)={0x7, {0x0, 0x401, 0x62, 0x800, 0x9}})

16:58:39 executing program 3:
r0 = request_key(&(0x7f0000000000)='trusted\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)='\'\x00', 0xfffffffffffffffd)
keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffb, 0x0, 0x1)
r1 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffa)
r2 = request_key(&(0x7f00000000c0)='cifs.spnego\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)='\'\x00', r1)
r3 = add_key$fscrypt_provisioning(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x3}, &(0x7f0000000280)={0x0, 0x0, @b}, 0x48, r1)
r4 = add_key(&(0x7f0000000300)='encrypted\x00', &(0x7f0000000340)={'syz', 0x3}, &(0x7f0000000380)="65a3875327f53678444280302eabd0da21fe2d520edae3c341e6d58f3c66926e", 0x20, r1)
keyctl$KEYCTL_MOVE(0x1e, r3, r4, r1, 0x0)
r5 = add_key$fscrypt_provisioning(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000440)={0x2, 0x0, @auto=[0x26, 0x35, 0x3c]}, 0xb, r2)
r6 = add_key(&(0x7f0000000500)='blacklist\x00', &(0x7f0000000540)={'syz', 0x1}, &(0x7f0000000580)="65a426dcace4b53558df5e959207b3afea2a41d9502727b15c84a020", 0x1c, r1)
keyctl$search(0xa, r4, &(0x7f0000000480)='trusted\x00', &(0x7f00000004c0)={'syz', 0x3}, r6)
request_key(&(0x7f00000005c0)='syzkaller\x00', &(0x7f0000000600)={'syz', 0x1}, &(0x7f0000000640)='syz', r1)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000680)='cifs.idmap\x00', &(0x7f00000006c0)=@secondary)
r7 = add_key(&(0x7f0000000700)='rxrpc\x00', &(0x7f0000000740)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff9)
r8 = add_key$fscrypt_v1(&(0x7f0000000780), &(0x7f00000007c0)={'fscrypt:', @desc4}, &(0x7f0000000800)={0x0, "f8f0e5268b9640aa0a4274cbb097fe01bb0cafc0a8534f129f2665036e5669d7722b70a35a56006f5c38933535d4712a0f5ae05b9a0a80b5d1b714348ddf3935", 0x33}, 0x48, r4)
keyctl$KEYCTL_MOVE(0x1e, r0, r7, r8, 0x0)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, 0x0, &(0x7f0000000880))
request_key(&(0x7f00000008c0)='cifs.spnego\x00', &(0x7f0000000900)={'syz', 0x1}, &(0x7f0000000940)='9\x00', r0)
r9 = add_key$user(&(0x7f0000000980), &(0x7f00000009c0)={'syz', 0x3}, &(0x7f0000000a00)="57c0bc5f8904006a896cf69686c147e3e03ba9db1632ba8d9a83426a4cccee51f0cf86ea103a2f00b066fa8d3a4c211ab47656d9619aeae30bff4726f6cdc017b9de1dc33ef3598e75045fedacc381338193734ce18fd7b2131363714c759aff48eeb173c4949076d2f13f695e4dfafcf7b94ace3081879e386d0a472beffbb0358eaa30", 0x84, r4)
r10 = add_key(&(0x7f0000000ac0)='trusted\x00', &(0x7f0000000b00)={'syz', 0x3}, &(0x7f0000000b40)="9958c1b07c402fd8663af50a2a42a54631a858ec6d74fc6f321b1821fe62d51e345138b22ed5130d879ca4e32b8871cbdc6670c7769de36a94de2240b33e64a3d42bb94a67f7e3bed10219d6b1b2fad5760d845d9ae00479d7c4ac698f394e064bce0f14ad0d9dfdcdd50e4661867fa8c409151549ad6d", 0x77, 0xffffffffffffffff)
keyctl$KEYCTL_MOVE(0x1e, r9, r10, r4, 0x0)

[   84.102266] audit: type=1400 audit(1756486719.703:7): avc:  denied  { execmem } for  pid=271 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
16:58:39 executing program 4:
r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x800)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000040)=[@mss={0x2, 0x1}], 0x1)
renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x5)
setxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=@random={'os2.', '\x00'}, &(0x7f0000000180)='$$]]){/*+(-@:-&\\\x00', 0x11, 0x2)
r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x400, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0)
sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb8, r2, 0x800, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "174cf6e9d8586b68636756cdef3a54d21b97ab262cc26028"}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d286b4610a1eb3a763a038fb6b862b7252f7d8a36d011d58"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "2a11ad22ab6fea0758dd1cc75160a8f4e757163149d4fe52"}], @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}]}, 0xb8}, 0x1, 0x0, 0x0, 0x20048401}, 0x40000)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f00000003c0)={{0x1, 0x1, 0x18, <r3=>r1, @out_args}, './file0\x00'})
ioctl$CDROMREADMODE1(r3, 0x530d, &(0x7f0000000400)={0x40, 0x1, 0x85, 0x5, 0x0, 0x81})
r4 = accept$unix(r1, &(0x7f0000000e80)=@abs, &(0x7f0000000f00)=0x6e)
fsetxattr$trusted_overlay_redirect(r4, &(0x7f0000000f40), &(0x7f0000000f80)='./file0\x00', 0x8, 0x0)
sendmsg$AUDIT_USER(r3, &(0x7f00000010c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001080)={&(0x7f0000001000)={0x48, 0x3ed, 0x200, 0x70bd2d, 0x25dfdbff, "24ed7342cb1392bbc0a68b91670b66419a8d4c60699ac8a4c3ab48f30635446eaa3d65739843e99b5b18ea9cfdaf7e41627478fee3", [""]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x4)
mount$cgroup(0x0, &(0x7f0000001100)='./file0\x00', &(0x7f0000001140), 0x10001, &(0x7f0000001180)={[{@none}, {}, {@clone_children}, {@release_agent={'release_agent', 0x3d, './file0'}}, {@clone_children}], [{@dont_hash}, {@appraise_type}, {@smackfsroot={'smackfsroot', 0x3d, 'trusted.overlay.redirect\x00'}}]})
r5 = socket$inet_icmp(0x2, 0x2, 0x1)
recvfrom(r5, &(0x7f0000001480)=""/184, 0xb8, 0x40, &(0x7f0000001540)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224-generic\x00'}, 0x80)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000015c0)={{0x1, 0x1, 0x18, <r6=>r5, {0xffffffffffffffff, 0xee01}}, './file0\x00'})
r7 = dup3(r6, r1, 0x0)
r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000001640), r0)
sendmsg$DEVLINK_CMD_RATE_NEW(r7, &(0x7f0000001700)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001680)={0x28, r8, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x100000000}]}, 0x28}, 0x1, 0x0, 0x0, 0x4103beb40a9fb080}, 0x800)
sendmsg$BATADV_CMD_GET_BLA_CLAIM(r6, &(0x7f0000001800)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x24, 0x0, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xa94a}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x40080d0)

16:58:39 executing program 5:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>0xffffffffffffffff, {0x2}}, './file0\x00'})
sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x84, r1, 0x20, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x105}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x128}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffe00}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r2}, {0x8}, {0x8}, {0x8}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x2400c080}, 0x20000000)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x28}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000000)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r4, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x40)
r5 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000440)='./binderfs2/binder-control\x00', 0x1802, 0x0)
ioctl$F2FS_IOC_FLUSH_DEVICE(r5, 0x4008f50a, &(0x7f0000000480)={0x1000, 0x2f23})
ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r5, 0xf502, 0x0)
r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), r4)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x44, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0xbd}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x44}}, 0x0)
sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000700)={&(0x7f0000000640), 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x2c, r6, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000000}, 0x8000)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000740), r7)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), r2)
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r2, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x20, r8, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x800, 0x3e}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x4000040}, 0x20000000)
r9 = creat(&(0x7f00000008c0)='./file0\x00', 0x8)
sendmsg$SOCK_DESTROY(r9, &(0x7f0000000a80)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000940)={0xc8, 0x15, 0x10, 0x70bd26, 0x25dfdbff, {0x28, 0x1}, [@INET_DIAG_REQ_BYTECODE={0xb3, 0x1, "202ed797ae635c2ae5f0fb1ce17a2b9692e2c851421ec30375f003bf7c2f5f4496d13c9ac178b974f57d8b2f3baa9b9738dfe23c4a7a350bb17fc5312e894bd333b4167cfa68a15f41e57e7c38bb3258310ff9e9e2f29d24597e7b4423ddd1316fd19d0c26ecfacfc653b03d8007afe92ddcca3c4b3c8a52e3c4890993b88d9bd29cf94898338b5389f587959a1f955c3336f971416d437a46128f2c71074b5ade0d2005b56ea8e05146015d6e42f3"}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4004040}, 0x400c0d4)

16:58:39 executing program 6:
modify_ldt$read(0x0, &(0x7f0000000000)=""/55, 0x37)
modify_ldt$read(0x0, &(0x7f0000000040)=""/252, 0xfc)
modify_ldt$read(0x0, &(0x7f0000000140)=""/141, 0x8d)
modify_ldt$read(0x0, &(0x7f0000000200)=""/212, 0xd4)
modify_ldt$read(0x0, &(0x7f0000000300)=""/79, 0x4f)
modify_ldt$read(0x0, &(0x7f0000000380)=""/92, 0x5c)
modify_ldt$read(0x0, &(0x7f0000000400)=""/100, 0x64)
modify_ldt$read(0x0, &(0x7f0000000480)=""/4096, 0x1000)
modify_ldt$read(0x0, &(0x7f0000001480)=""/115, 0x73)
modify_ldt$read(0x0, &(0x7f0000001500)=""/41, 0x29)
modify_ldt$read(0x0, &(0x7f0000001540)=""/82, 0x52)
modify_ldt$read(0x0, &(0x7f00000015c0)=""/228, 0xe4)
modify_ldt$read(0x0, &(0x7f00000016c0)=""/208, 0xd0)
modify_ldt$read(0x0, &(0x7f00000017c0)=""/91, 0x5b)
modify_ldt$read(0x0, &(0x7f0000001840)=""/252, 0xfc)
modify_ldt$read(0x0, &(0x7f0000001940)=""/96, 0x60)
modify_ldt$read(0x0, &(0x7f00000019c0)=""/4096, 0x1000)
modify_ldt$read(0x0, &(0x7f00000029c0)=""/183, 0xb7)
modify_ldt$read(0x0, &(0x7f0000002a80)=""/133, 0x85)
modify_ldt$read(0x0, &(0x7f0000002b40)=""/92, 0x5c)

[   85.272903] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   85.276537] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   85.278420] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   85.282972] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   85.286824] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   85.335670] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   85.340134] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   85.342142] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   85.345077] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   85.347290] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   85.416392] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   85.426213] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   85.428275] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   85.433052] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   85.440028] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   85.442192] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   85.444240] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   85.452830] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   85.453818] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   85.459279] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   85.474942] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   85.486123] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   85.488521] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   85.491859] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   85.495913] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   85.497645] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   85.499750] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   85.507229] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   85.524096] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   85.527307] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   85.567371] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[   85.573943] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[   85.578110] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[   85.581128] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[   85.583010] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[   85.593871] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[   85.609331] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[   85.614206] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[   85.620583] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[   85.643170] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[   87.368268] Bluetooth: hci1: command tx timeout
[   87.368672] Bluetooth: hci0: command tx timeout
[   87.497124] Bluetooth: hci3: command tx timeout
[   87.497146] Bluetooth: hci2: command tx timeout
[   87.559764] Bluetooth: hci4: command tx timeout
[   87.624359] Bluetooth: hci5: command tx timeout
[   87.687912] Bluetooth: hci6: command tx timeout
[   87.752094] Bluetooth: hci7: command tx timeout
[   89.415816] Bluetooth: hci0: command tx timeout
[   89.417086] Bluetooth: hci1: command tx timeout
[   89.543950] Bluetooth: hci3: command tx timeout
[   89.544336] Bluetooth: hci2: command tx timeout
[   89.607805] Bluetooth: hci4: command tx timeout
[   89.672871] Bluetooth: hci5: command tx timeout
[   89.735803] Bluetooth: hci6: command tx timeout
[   89.799771] Bluetooth: hci7: command tx timeout
[   91.463809] Bluetooth: hci1: command tx timeout
[   91.463897] Bluetooth: hci0: command tx timeout
[   91.591946] Bluetooth: hci2: command tx timeout
[   91.592086] Bluetooth: hci3: command tx timeout
[   91.655756] Bluetooth: hci4: command tx timeout
[   91.719798] Bluetooth: hci5: command tx timeout
[   91.785710] Bluetooth: hci6: command tx timeout
[   91.848734] Bluetooth: hci7: command tx timeout
[   93.511759] Bluetooth: hci1: command tx timeout
[   93.512222] Bluetooth: hci0: command tx timeout
[   93.639836] Bluetooth: hci3: command tx timeout
[   93.641046] Bluetooth: hci2: command tx timeout
[   93.703741] Bluetooth: hci4: command tx timeout
[   93.767783] Bluetooth: hci5: command tx timeout
[   93.833707] Bluetooth: hci6: command tx timeout
[   93.895749] Bluetooth: hci7: command tx timeout
[  122.280394] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  122.281082] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  122.482863] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  122.483484] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
16:59:18 executing program 6:
modify_ldt$read(0x0, &(0x7f0000000000)=""/55, 0x37)
modify_ldt$read(0x0, &(0x7f0000000040)=""/252, 0xfc)
modify_ldt$read(0x0, &(0x7f0000000140)=""/141, 0x8d)
modify_ldt$read(0x0, &(0x7f0000000200)=""/212, 0xd4)
modify_ldt$read(0x0, &(0x7f0000000300)=""/79, 0x4f)
modify_ldt$read(0x0, &(0x7f0000000380)=""/92, 0x5c)
modify_ldt$read(0x0, &(0x7f0000000400)=""/100, 0x64)
modify_ldt$read(0x0, &(0x7f0000000480)=""/4096, 0x1000)
modify_ldt$read(0x0, &(0x7f0000001480)=""/115, 0x73)
modify_ldt$read(0x0, &(0x7f0000001500)=""/41, 0x29)
modify_ldt$read(0x0, &(0x7f0000001540)=""/82, 0x52)
modify_ldt$read(0x0, &(0x7f00000015c0)=""/228, 0xe4)
modify_ldt$read(0x0, &(0x7f00000016c0)=""/208, 0xd0)
modify_ldt$read(0x0, &(0x7f00000017c0)=""/91, 0x5b)
modify_ldt$read(0x0, &(0x7f0000001840)=""/252, 0xfc)
modify_ldt$read(0x0, &(0x7f0000001940)=""/96, 0x60)
modify_ldt$read(0x0, &(0x7f00000019c0)=""/4096, 0x1000)
modify_ldt$read(0x0, &(0x7f00000029c0)=""/183, 0xb7)
modify_ldt$read(0x0, &(0x7f0000002a80)=""/133, 0x85)
modify_ldt$read(0x0, &(0x7f0000002b40)=""/92, 0x5c)

16:59:18 executing program 6:
modify_ldt$read(0x0, &(0x7f0000000000)=""/55, 0x37)
modify_ldt$read(0x0, &(0x7f0000000040)=""/252, 0xfc)
modify_ldt$read(0x0, &(0x7f0000000140)=""/141, 0x8d)
modify_ldt$read(0x0, &(0x7f0000000200)=""/212, 0xd4)
modify_ldt$read(0x0, &(0x7f0000000300)=""/79, 0x4f)
modify_ldt$read(0x0, &(0x7f0000000380)=""/92, 0x5c)
modify_ldt$read(0x0, &(0x7f0000000400)=""/100, 0x64)
modify_ldt$read(0x0, &(0x7f0000000480)=""/4096, 0x1000)
modify_ldt$read(0x0, &(0x7f0000001480)=""/115, 0x73)
modify_ldt$read(0x0, &(0x7f0000001500)=""/41, 0x29)
modify_ldt$read(0x0, &(0x7f0000001540)=""/82, 0x52)
modify_ldt$read(0x0, &(0x7f00000015c0)=""/228, 0xe4)
modify_ldt$read(0x0, &(0x7f00000016c0)=""/208, 0xd0)
modify_ldt$read(0x0, &(0x7f00000017c0)=""/91, 0x5b)
modify_ldt$read(0x0, &(0x7f0000001840)=""/252, 0xfc)
modify_ldt$read(0x0, &(0x7f0000001940)=""/96, 0x60)
modify_ldt$read(0x0, &(0x7f00000019c0)=""/4096, 0x1000)
modify_ldt$read(0x0, &(0x7f00000029c0)=""/183, 0xb7)
modify_ldt$read(0x0, &(0x7f0000002a80)=""/133, 0x85)
modify_ldt$read(0x0, &(0x7f0000002b40)=""/92, 0x5c)

[  123.109208] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  123.109821] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
16:59:18 executing program 6:
modify_ldt$read(0x0, &(0x7f0000000000)=""/55, 0x37)
modify_ldt$read(0x0, &(0x7f0000000040)=""/252, 0xfc)
modify_ldt$read(0x0, &(0x7f0000000140)=""/141, 0x8d)
modify_ldt$read(0x0, &(0x7f0000000200)=""/212, 0xd4)
modify_ldt$read(0x0, &(0x7f0000000300)=""/79, 0x4f)
modify_ldt$read(0x0, &(0x7f0000000380)=""/92, 0x5c)
modify_ldt$read(0x0, &(0x7f0000000400)=""/100, 0x64)
modify_ldt$read(0x0, &(0x7f0000000480)=""/4096, 0x1000)
modify_ldt$read(0x0, &(0x7f0000001480)=""/115, 0x73)
modify_ldt$read(0x0, &(0x7f0000001500)=""/41, 0x29)
modify_ldt$read(0x0, &(0x7f0000001540)=""/82, 0x52)
modify_ldt$read(0x0, &(0x7f00000015c0)=""/228, 0xe4)
modify_ldt$read(0x0, &(0x7f00000016c0)=""/208, 0xd0)
modify_ldt$read(0x0, &(0x7f00000017c0)=""/91, 0x5b)
modify_ldt$read(0x0, &(0x7f0000001840)=""/252, 0xfc)
modify_ldt$read(0x0, &(0x7f0000001940)=""/96, 0x60)
modify_ldt$read(0x0, &(0x7f00000019c0)=""/4096, 0x1000)
modify_ldt$read(0x0, &(0x7f00000029c0)=""/183, 0xb7)
modify_ldt$read(0x0, &(0x7f0000002a80)=""/133, 0x85)
modify_ldt$read(0x0, &(0x7f0000002b40)=""/92, 0x5c)

[  123.248157] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  123.248888] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
16:59:18 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000140)='./file0\x00', 0x2, 0x0, &(0x7f0000001480), 0x0, &(0x7f0000001540)={[{@session}]})
getgroups(0x1, &(0x7f0000000080)=[<r0=>0xffffffffffffffff])
getgroups(0x2, &(0x7f0000000240)=[r0, <r1=>r0])
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, <r2=>0x0}, &(0x7f00000002c0)=0xc)
getresgid(&(0x7f00000003c0)=<r3=>0x0, &(0x7f0000000400), &(0x7f0000000440))
getgroups(0x6, &(0x7f0000000480)=[r0, r0, r1, 0xee01, r2, r3])
chown(&(0x7f00000000c0)='./file0\x00', 0xee01, r3)
rmdir(&(0x7f0000000100)='./file0\x00')

[  123.366793] audit: type=1400 audit(1756486758.966:8): avc:  denied  { open } for  pid=3804 comm="syz-executor.6" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[  123.376835] audit: type=1400 audit(1756486758.966:9): avc:  denied  { kernel } for  pid=3804 comm="syz-executor.6" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[  123.395169] I/O error, dev loop6, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  123.396853] isofs_fill_super: bread failed, dev=loop6, iso_blknum=16, block=32
16:59:19 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000140)='./file0\x00', 0x2, 0x0, &(0x7f0000001480), 0x0, &(0x7f0000001540)={[{@session}]})
getgroups(0x1, &(0x7f0000000080)=[<r0=>0xffffffffffffffff])
getgroups(0x2, &(0x7f0000000240)=[r0, <r1=>r0])
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, <r2=>0x0}, &(0x7f00000002c0)=0xc)
getresgid(&(0x7f00000003c0)=<r3=>0x0, &(0x7f0000000400), &(0x7f0000000440))
getgroups(0x6, &(0x7f0000000480)=[r0, r0, r1, 0xee01, r2, r3])
chown(&(0x7f00000000c0)='./file0\x00', 0xee01, r3)
rmdir(&(0x7f0000000100)='./file0\x00')

16:59:19 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000140)='./file0\x00', 0x2, 0x0, &(0x7f0000001480), 0x0, &(0x7f0000001540)={[{@session}]})
getgroups(0x1, &(0x7f0000000080)=[<r0=>0xffffffffffffffff])
getgroups(0x2, &(0x7f0000000240)=[r0, <r1=>r0])
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, <r2=>0x0}, &(0x7f00000002c0)=0xc)
getresgid(&(0x7f00000003c0)=<r3=>0x0, &(0x7f0000000400), &(0x7f0000000440))
getgroups(0x6, &(0x7f0000000480)=[r0, r0, r1, 0xee01, r2, r3])
chown(&(0x7f00000000c0)='./file0\x00', 0xee01, r3)
rmdir(&(0x7f0000000100)='./file0\x00')

[  123.655044] I/O error, dev loop6, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  123.661355] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  123.662491] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  123.663718] isofs_fill_super: bread failed, dev=loop6, iso_blknum=16, block=32
16:59:19 executing program 2:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000140)='./file0\x00', 0x2, 0x0, &(0x7f0000001480), 0x0, &(0x7f0000001540)={[{@session}]})
getgroups(0x1, &(0x7f0000000080)=[<r0=>0xffffffffffffffff])
getgroups(0x2, &(0x7f0000000240)=[r0, <r1=>r0])
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, <r2=>0x0}, &(0x7f00000002c0)=0xc)
getresgid(&(0x7f00000003c0)=<r3=>0x0, &(0x7f0000000400), &(0x7f0000000440))
getgroups(0x6, &(0x7f0000000480)=[r0, r0, r1, 0xee01, r2, r3])
chown(&(0x7f00000000c0)='./file0\x00', 0xee01, r3)
rmdir(&(0x7f0000000100)='./file0\x00')

16:59:19 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000140)='./file0\x00', 0x2, 0x0, &(0x7f0000001480), 0x0, &(0x7f0000001540)={[{@session}]})
getgroups(0x1, &(0x7f0000000080)=[<r0=>0xffffffffffffffff])
getgroups(0x2, &(0x7f0000000240)=[r0, <r1=>r0])
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, <r2=>0x0}, &(0x7f00000002c0)=0xc)
getresgid(&(0x7f00000003c0)=<r3=>0x0, &(0x7f0000000400), &(0x7f0000000440))
getgroups(0x6, &(0x7f0000000480)=[r0, r0, r1, 0xee01, r2, r3])
chown(&(0x7f00000000c0)='./file0\x00', 0xee01, r3)
rmdir(&(0x7f0000000100)='./file0\x00')

[  123.791643] I/O error, dev loop2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  123.792556] isofs_fill_super: bread failed, dev=loop2, iso_blknum=16, block=32
[  123.828083] I/O error, dev loop6, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  123.830955] isofs_fill_super: bread failed, dev=loop6, iso_blknum=16, block=32
[  123.839892] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  123.840519] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  124.130081] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  124.130709] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  124.222953] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  124.223561] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  124.397349] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  124.397986] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  124.427495] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  124.428140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  124.543486] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  124.544174] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  124.633289] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  124.633933] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  124.747710] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  124.748312] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  124.787757] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  124.788569] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  124.861613] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  124.862521] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  124.965026] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  124.965648] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
16:59:32 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000140)='./file0\x00', 0x2, 0x0, &(0x7f0000001480), 0x0, &(0x7f0000001540)={[{@session}]})
getgroups(0x1, &(0x7f0000000080)=[<r0=>0xffffffffffffffff])
getgroups(0x2, &(0x7f0000000240)=[r0, <r1=>r0])
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, <r2=>0x0}, &(0x7f00000002c0)=0xc)
getresgid(&(0x7f00000003c0)=<r3=>0x0, &(0x7f0000000400), &(0x7f0000000440))
getgroups(0x6, &(0x7f0000000480)=[r0, r0, r1, 0xee01, r2, r3])
chown(&(0x7f00000000c0)='./file0\x00', 0xee01, r3)
rmdir(&(0x7f0000000100)='./file0\x00')

16:59:32 executing program 2:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000140)='./file0\x00', 0x2, 0x0, &(0x7f0000001480), 0x0, &(0x7f0000001540)={[{@session}]})
getgroups(0x1, &(0x7f0000000080)=[<r0=>0xffffffffffffffff])
getgroups(0x2, &(0x7f0000000240)=[r0, <r1=>r0])
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, <r2=>0x0}, &(0x7f00000002c0)=0xc)
getresgid(&(0x7f00000003c0)=<r3=>0x0, &(0x7f0000000400), &(0x7f0000000440))
getgroups(0x6, &(0x7f0000000480)=[r0, r0, r1, 0xee01, r2, r3])
chown(&(0x7f00000000c0)='./file0\x00', 0xee01, r3)
rmdir(&(0x7f0000000100)='./file0\x00')

16:59:32 executing program 0:
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000100)=0x2, 0x4)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$sock_SIOCOUTQ(r1, 0x541b, 0xfffffffffffffffe)
r2 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000000), 0x4)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000040)={<r3=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f00000000c0)=r3)

16:59:32 executing program 7:
syz_usb_connect$cdc_ecm(0x5, 0x4d, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x20, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0})
syz_usb_connect(0x1, 0x361, &(0x7f00000006c0)={{0x12, 0x1, 0x201, 0x84, 0xf8, 0x9f, 0xff, 0x18e8, 0x6238, 0xfd21, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x34f, 0x1, 0x30, 0x2, 0xc0, 0x8, [{{0x9, 0x4, 0xf4, 0x20, 0xb, 0x43, 0x53, 0x7c, 0x1, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x40, 0x6, 0x3f}, {0x6, 0x24, 0x1a, 0x7, 0x1c}, [@mdlm_detail={0x69, 0x24, 0x13, 0x7, "7d851fb62d0ead500e9e10f2d21849915104c62ec79988e051a08fd02ef6368dd0d1f4e9d3be4b2f308832096065f51997dee6b1b636857ad3e8ab381f8457ad1dabe73f347403181dfb27ebb2487aaab4d6e17a282e33469add59a84e3602573f4f0cb267"}, @network_terminal={0x7, 0x24, 0xa, 0xba, 0x0, 0x40, 0x8}, @mdlm={0x15, 0x24, 0x12, 0x2}, @dmm={0x7, 0x24, 0x14, 0x401, 0x8}, @network_terminal={0x7, 0x24, 0xa, 0x64, 0x7, 0x80, 0x19}]}], [{{0x9, 0x5, 0x4, 0x0, 0x0, 0x6, 0x0, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1f, 0x7f}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x8c, 0x934}]}}, {{0x9, 0x5, 0xf, 0x0, 0x400, 0x80, 0x2, 0xaa, [@generic={0x86, 0x31, "6e5a9cb9e703992396d0b347a0efd6eee5ba64b0d858b6c78ee9211e668cdf7f2da2a2cf0c5cbfdf81a32dec4009c80c656c8252da3b4d1eafebeadbe3405bc5a8a39b3a296376a8c891072ad92a9f3b5098493c167c921f987643fcd9a7d18853ad64967aa09350efb2a7b7bdaad6473cf5f979f24d3667db903d11040fadc88e7173b2"}, @generic={0x48, 0x31, "65cda1f79a7fcf6ee1fc28efcfd49aaa55e288107384d08af612b00d4477127cf063802a846bd42dd7fb1b99406f3f6ff427f1c1778f4ca87164454bd95257961164240f570d"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x20, 0x7f, 0xfe, 0x3}}, {{0x9, 0x5, 0x1, 0x0, 0x8, 0x0, 0x77, 0x4}}, {{0x9, 0x5, 0x4, 0x3, 0x20, 0x9, 0x4, 0x20, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x40, 0xb21}, @generic={0xab, 0x7, "16974bc1a68d9805254eb1bd57e7d8ef49eea83b0f2ec523719c3d72c37230b2daf43c34c470d62120c1a7908b7bf50578c42802d958424ffeb976efc83a95279b761cabd1d9fdd5ce94a1fab7dad1ba1596a7ba202977d3a3a6b615d38416cfab50dd79d82c14074c9483c4e37df188537f4ccf91b238e5ad3feff5f12f71e403a714571fc628b5cb8d44311412a413a06f845d9c0d13b448855e2a6b9971e9dec643cfa97fc723b6"}]}}, {{0x9, 0x5, 0x8, 0x3, 0x200, 0x9, 0xe3, 0x77}}, {{0x9, 0x5, 0x1, 0x10, 0x20, 0x2, 0x0, 0x20}}, {{0x9, 0x5, 0x7, 0x10, 0x3ff, 0x0, 0x20, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x1, 0xff81}, @generic={0x65, 0x10, "fea3f25e547cc44891845058c44eade79a53875b72fa16023e2676f23ae894592f23003ecb37b0460f4881c567d5bf7a24561521525ed2bd37b3490f4ae7a290bda40d697c0fe657196c7d04baf44b416ebac52e7e4cf93e1dc81a1375eb50f3059ef7"}]}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x2, 0x9, 0x4, [@generic={0x22, 0x31, "6dae5039e1598d0b9ac9484a9bf51a6afdd471b316d9c91a02ac8601baa9f737"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x3}]}}, {{0x9, 0x5, 0x9, 0x0, 0x8, 0x7, 0x9, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0x3}]}}, {{0x9, 0x5, 0xc, 0x10, 0x10, 0xff, 0xf9, 0x20}}]}}]}}]}}, &(0x7f0000000dc0)={0xa, &(0x7f00000005c0)={0xa, 0x6, 0x201, 0x4, 0x62, 0x5, 0x40, 0x80}, 0x10, &(0x7f0000000a40)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x8, 0x80, 0xff, 0x1, 0xfff9, 0x80}]}, 0xa, [{0x4, &(0x7f0000000a80)=@lang_id={0x4, 0x3, 0x55c77e44aa4e3da7}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x82c}}, {0x4, &(0x7f0000000b00)=@lang_id={0x4, 0x3, 0x340a}}, {0x4, &(0x7f0000000b40)=@lang_id={0x4, 0x3, 0x438}}, {0x4, &(0x7f0000000b80)=@lang_id={0x4, 0x3, 0x402}}, {0x4, &(0x7f0000000bc0)=@lang_id={0x4, 0x3, 0x416}}, {0xb6, &(0x7f0000000c00)=@string={0xb6, 0x3, "46a61180c784d0701fd5392afe8fd199a0893ff9023923c356354a282966f660daa01e8e2cc88d7e6de94aa403664ebe7759f1a277312b8dfbde1c793a2b27bb3003a60999891ca5fb48ac2f5a7cc39aba5d62a8e2efed79746aa94f0feebef8b7c3326a4ee21e62c7ca60c4bf66fd712533ac624324fa5c12c2113371473916284a1ab8cc06299f4edfd9c1bb7b9bc338dd46afefc9a5d86ac9f9ec1b2bfe99e83d33b5cc7c3f5d50263792ffb6a22b6a3dff16"}}, {0x6f, &(0x7f0000000cc0)=@string={0x6f, 0x3, "51cd972043c866f3236cc708427413b8c82648bd9784d72380a96a414539bbef0daf7c2ea8e252e44d672b5809f54bac642200d530184951ec72481e2a44c0323709a98df90d52510161450a3d2ed991cb26b73274c4c0851c658ca51d9af2c37ea7f661b2d9e1e3882ccfb6a7"}}, {0x4, &(0x7f0000000d40)=@lang_id={0x4}}, {0x4, &(0x7f0000000d80)=@lang_id={0x4, 0x3, 0x40f}}]})
syz_usb_connect(0x4, 0x269, &(0x7f00000002c0)={{0x12, 0x1, 0x110, 0x91, 0x37, 0x3b, 0xff, 0xdb0, 0x5581, 0x9163, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x257, 0x1, 0x9, 0x0, 0x0, 0x7f, [{{0x9, 0x4, 0xd4, 0x93, 0x6, 0xf1, 0x51, 0x18, 0x81, [], [{{0x9, 0x5, 0x0, 0x1, 0x3ff, 0x5, 0x3f, 0xe0, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x2f, 0x800}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x8, 0x4}]}}, {{0x9, 0x5, 0xa, 0xc, 0x200, 0x3, 0x7f, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xd0, 0x8}, @generic={0x29, 0x1, "29548b9c7c171e42ba610cd795a37fccb25698020dbc465d4b3908adee8264e392d279164f4479"}]}}, {{0x9, 0x5, 0x1, 0x12, 0x400, 0xd, 0xfe, 0x20, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x9, 0x5}]}}, {{0x9, 0x5, 0x2, 0x0, 0x10, 0x0, 0x6, 0xd6}}, {{0x9, 0x5, 0x2, 0x4, 0x200, 0x7, 0x7, 0xde}}, {{0x9, 0x5, 0xf, 0x3, 0x40, 0x7f, 0x0, 0xf8, [@generic={0xd9, 0x22, "a65634a5be7745488b59ae55841a140ccca436b29f8a41c67cdcf063fa0b64178a46bcdd0500ddf6da82ad5124ba6eb5e927f953e605c63d8905a056e383f8012bb6e35b5f8b6df3b4eb4a46e7e2a3c7a0cce305f4a723b07e8ea00c81029fe5470566080a57f8671214ccb0ea9e4886d3d60314815395a51927a51cb0f188c95d1cd3071542a49b1b5ad013b26cd69335cb186da9e4a461edb28d3157724b17d8cf08e385d31aa7626ab5c7656eb6dcdc0debcee2fd01610833c45220d6b47ba8b4d7a4ea164a15e5f96822120adc5bbb111260e08843"}, @generic={0xf1, 0xa, "6abcfaf55ac73bb44ae7428f75ebac5bd47440934cd22fb302d97e5d8f4f64024a0eb9803bb7aad553c575ea1ad2cdba82c5aa7917b9e0b0b9579fd8cf07ce9ee48223e475ff1fa731aa879bfbeefa283707b796e162ec1dc0cc7d5d1ae509365a143acdad1dc2e5475091c5912ab8b17ae5fa9fa1a15c37f780280776d53e48b7e499806b0d53c075d94438e154a2470b402088a3b12c4e45a32c079db5bbfbc1859d0465000ff626a097ad5bde1ca0d8429ccc1eec2cb2de6dda0f627525bb9b84ab03c797fd6f41de04d1cfebb87f23ad7b4ed495dc6c1cb51eb013139e7664cb5f72cf60b57617b04cad1853ca"}]}}]}}]}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x201, 0x7, 0x7a, 0x0, 0x20}, 0x99, &(0x7f0000000040)={0x5, 0xf, 0x99, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x8, 0x9, 0x0, 0x8}, @generic={0x6b, 0x10, 0xb, "a2117c7b2ee0a4fcb7da23a0cc18f0bf88925489d3c056b2d2d7c43862e94e4bcd3d3256fc5b384e29f19fd21a8f5a32f3974cca3fde2dbe614235c18038a9df376a5612c866e3ae4558d01aa05d18e6a4c2502f7d8b91e94b155c1b4b20f54e1a3d51c9a732edb8"}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "2229c8517e2b572371e4e97ff1eb6ac7"}, @wireless={0xb, 0x10, 0x1, 0x2, 0x22, 0x3, 0x7f, 0x2, 0x24}, @ptm_cap={0x3}]}, 0x7, [{0x1e, &(0x7f0000000100)=ANY=[@ANYBLOB="1e037e3182cf9bb15b25493acf73f322f65b903e56695d09db9445aef041"]}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x40d}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x140a}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x140a}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x380a}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x500a}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x44d}}]})

16:59:32 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000140)='./file0\x00', 0x2, 0x0, &(0x7f0000001480), 0x0, &(0x7f0000001540)={[{@session}]})
getgroups(0x1, &(0x7f0000000080)=[<r0=>0xffffffffffffffff])
getgroups(0x2, &(0x7f0000000240)=[r0, <r1=>r0])
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, <r2=>0x0}, &(0x7f00000002c0)=0xc)
getresgid(&(0x7f00000003c0)=<r3=>0x0, &(0x7f0000000400), &(0x7f0000000440))
getgroups(0x6, &(0x7f0000000480)=[r0, r0, r1, 0xee01, r2, r3])
chown(&(0x7f00000000c0)='./file0\x00', 0xee01, r3)

16:59:32 executing program 1:
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0)
ioctl$RTC_PLL_GET(r0, 0x80207011, &(0x7f0000000040))
ioctl$RTC_WKALM_RD(r0, 0x80287010, &(0x7f0000000080))
r1 = dup2(r0, r0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x1204428, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@fscache}, {@cachetag={'cachetag', 0x3d, '/dev/nvram\x00'}}, {@cache_mmap}, {@nodevmap}, {@posixacl}, {@cache_loose}, {@cache_mmap}, {@fscache}, {@loose}, {@mmap}], [{@mask={'mask', 0x3d, '^MAY_READ'}}, {@subj_user={'subj_user', 0x3d, '$+!$'}}]}})
r2 = syz_open_dev$rtc(&(0x7f0000000200), 0x3, 0x4000)
ioctl$RTC_PLL_SET(r2, 0x40207012, &(0x7f0000000240)={0x5, 0x20, 0x80000000, 0x7f, 0x1, 0x2, 0x9})
ioctl$RTC_IRQP_READ(r1, 0x8008700b, &(0x7f0000000280))
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x220000, 0x0)
mount$9p_unix(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x4010, &(0x7f00000003c0)={'trans=unix,', {[{@access_any}, {@dfltuid}, {}, {@access_client}, {@cachetag={'cachetag', 0x3d, '/dev/rtc#\x00'}}], [{@dont_appraise}, {@audit}]}})
ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, &(0x7f0000000440)={0x0, 0x7fff, @status={[0x1000, 0xfff, 0xfffffffffffffffb, 0xfffffffffffffffb, 0x9, 0xe6]}, [0x2, 0x40000000000000, 0x20, 0x8001, 0xb8, 0x2358c0000000000, 0x8001, 0x2, 0x7, 0x1f, 0x5, 0xfffffffffffffffd, 0x2, 0x4, 0x2c, 0x6b, 0x100000000, 0x2, 0xfff, 0xffffffffffffff80, 0x7, 0x5, 0x5, 0x75, 0x7, 0xffffffffffffff80, 0x0, 0x0, 0x276, 0x3, 0x101, 0x7fff, 0x5, 0x8, 0x4f8d, 0x4, 0x0, 0x5, 0xffffffff, 0x0, 0xffffffff, 0xcbc, 0x3, 0x10000, 0x9, 0x6, 0x7, 0xffffffffffff8001, 0x0, 0x7, 0x2, 0x4, 0x81, 0x5, 0x3, 0x0, 0x1, 0x400, 0x188, 0x8, 0xffffffff, 0xfffffffffffffffd, 0x5, 0x7f]})
ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f0000000e80)={0x0, 0x6, 0x800, 0xfe5102adf40457b9})
pwrite64(0xffffffffffffffff, &(0x7f0000001280)="f522767ccaedc7595bc33fd7de1adbe7b4", 0x11, 0x1)
close_range(r3, r3, 0x0)
r4 = signalfd(r3, &(0x7f00000012c0)={[0x2]}, 0x8)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r4, &(0x7f0000001680)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001640)={&(0x7f0000001340)={0x2d4, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xffff}, {0x6, 0x16, 0x7f}, {0x5}, {0x6, 0x11, 0xffe0}, {0x8, 0xb, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x70ad}, {0x6, 0x16, 0x1}, {0x5}, {0x6, 0x11, 0x8000}, {0x8, 0xb, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x28a20f04}, {0x6, 0x16, 0x7}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x6}, {0x8, 0xb, 0x4}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x2}, {0x6, 0x16, 0x6}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x401}, {0x8, 0xb, 0x4}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8}, {0x6, 0x16, 0x2}, {0x5}, {0x6, 0x11, 0xcb87}, {0x8, 0xb, 0x1424}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x80000000}, {0x6, 0x16, 0x3}, {0x5}, {0x6, 0x11, 0x6}, {0x8, 0xb, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x3}, {0x6, 0x16, 0x1c}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x8}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x4}, {0x6, 0x16, 0x3}, {0x5}, {0x6, 0x11, 0x8001}, {0x8, 0xb, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x1}, {0x6, 0x16, 0x8001}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x7ff}, {0x8, 0xb, 0x9}}]}, 0x2d4}, 0x1, 0x0, 0x0, 0x20810}, 0x4000800)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x5, 0x4010, 0xffffffffffffffff, 0xf1e92000)
close_range(r2, r2, 0x2)
pread64(r1, &(0x7f00000016c0)=""/92, 0x5c, 0xdb)
ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, &(0x7f0000001780))

16:59:32 executing program 3:
ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000280)={0x6, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}]})
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000180)={0x1f, 0x0, @fixed, 0x0, 0x2}, 0xe)
dup(r0)
ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0)
sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x0, 0x800, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x800, 0x53}}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x40)
r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
sendmsg$TIPC_NL_MON_SET(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, 0x0, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1f}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffc00}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x80}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}]}]}, 0x50}}, 0x40894)
perf_event_open$cgroup(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x1}, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x10000, 0xffffffffffffffff, 0x0)
r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
ioctl$TIOCSIG(r2, 0x40045436, 0x20)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x5, 0x5, 0x80, 0x8, 0x0, 0x1, 0x0, 0x6, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x970, 0x1, @perf_config_ext={0x6, 0x200}, 0x480, 0x7, 0x20, 0x3, 0x7, 0x100, 0x0, 0x0, 0x9, 0x0, 0x5}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x1)

16:59:32 executing program 5:
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x20640, 0x13, 0x20}, 0x18)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000040)=ANY=[])

[  137.027703] I/O error, dev loop2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  137.028523] isofs_fill_super: bread failed, dev=loop2, iso_blknum=16, block=32
[  137.074560] I/O error, dev loop4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  137.077847] I/O error, dev loop6, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  137.079405] isofs_fill_super: bread failed, dev=loop6, iso_blknum=16, block=32
[  137.085081] isofs_fill_super: bread failed, dev=loop4, iso_blknum=16, block=32
16:59:32 executing program 2:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000140)='./file0\x00', 0x2, 0x0, &(0x7f0000001480), 0x0, &(0x7f0000001540)={[{@session}]})
getgroups(0x1, &(0x7f0000000080)=[<r0=>0xffffffffffffffff])
getgroups(0x2, &(0x7f0000000240)=[r0, <r1=>r0])
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, <r2=>0x0}, &(0x7f00000002c0)=0xc)
getresgid(&(0x7f00000003c0)=<r3=>0x0, &(0x7f0000000400), &(0x7f0000000440))
getgroups(0x6, &(0x7f0000000480)=[r0, r0, r1, 0xee01, r2, r3])
chown(&(0x7f00000000c0)='./file0\x00', 0xee01, r3)
rmdir(&(0x7f0000000100)='./file0\x00')

[  137.088436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  137.101836] misc raw-gadget: fail, usb_gadget_register_driver returned -16
16:59:32 executing program 0:
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000100)=0x2, 0x4)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$sock_SIOCOUTQ(r1, 0x541b, 0xfffffffffffffffe)
r2 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000000), 0x4)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000040)={<r3=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f00000000c0)=r3)

[  137.118364] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  137.130268] misc raw-gadget: fail, usb_gadget_register_driver returned -16
16:59:32 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_score_adj\x00')
readv(r0, &(0x7f0000001380)=[{&(0x7f00000001c0)=""/160, 0xa0}], 0x1)

[  137.171269] I/O error, dev loop2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  137.172310] isofs_fill_super: bread failed, dev=loop2, iso_blknum=16, block=32
16:59:32 executing program 1:
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0)
ioctl$RTC_PLL_GET(r0, 0x80207011, &(0x7f0000000040))
ioctl$RTC_WKALM_RD(r0, 0x80287010, &(0x7f0000000080))
r1 = dup2(r0, r0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x1204428, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@fscache}, {@cachetag={'cachetag', 0x3d, '/dev/nvram\x00'}}, {@cache_mmap}, {@nodevmap}, {@posixacl}, {@cache_loose}, {@cache_mmap}, {@fscache}, {@loose}, {@mmap}], [{@mask={'mask', 0x3d, '^MAY_READ'}}, {@subj_user={'subj_user', 0x3d, '$+!$'}}]}})
r2 = syz_open_dev$rtc(&(0x7f0000000200), 0x3, 0x4000)
ioctl$RTC_PLL_SET(r2, 0x40207012, &(0x7f0000000240)={0x5, 0x20, 0x80000000, 0x7f, 0x1, 0x2, 0x9})
ioctl$RTC_IRQP_READ(r1, 0x8008700b, &(0x7f0000000280))
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x220000, 0x0)
mount$9p_unix(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x4010, &(0x7f00000003c0)={'trans=unix,', {[{@access_any}, {@dfltuid}, {}, {@access_client}, {@cachetag={'cachetag', 0x3d, '/dev/rtc#\x00'}}], [{@dont_appraise}, {@audit}]}})
ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, &(0x7f0000000440)={0x0, 0x7fff, @status={[0x1000, 0xfff, 0xfffffffffffffffb, 0xfffffffffffffffb, 0x9, 0xe6]}, [0x2, 0x40000000000000, 0x20, 0x8001, 0xb8, 0x2358c0000000000, 0x8001, 0x2, 0x7, 0x1f, 0x5, 0xfffffffffffffffd, 0x2, 0x4, 0x2c, 0x6b, 0x100000000, 0x2, 0xfff, 0xffffffffffffff80, 0x7, 0x5, 0x5, 0x75, 0x7, 0xffffffffffffff80, 0x0, 0x0, 0x276, 0x3, 0x101, 0x7fff, 0x5, 0x8, 0x4f8d, 0x4, 0x0, 0x5, 0xffffffff, 0x0, 0xffffffff, 0xcbc, 0x3, 0x10000, 0x9, 0x6, 0x7, 0xffffffffffff8001, 0x0, 0x7, 0x2, 0x4, 0x81, 0x5, 0x3, 0x0, 0x1, 0x400, 0x188, 0x8, 0xffffffff, 0xfffffffffffffffd, 0x5, 0x7f]})
ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f0000000e80)={0x0, 0x6, 0x800, 0xfe5102adf40457b9})
pwrite64(0xffffffffffffffff, &(0x7f0000001280)="f522767ccaedc7595bc33fd7de1adbe7b4", 0x11, 0x1)
close_range(r3, r3, 0x0)
r4 = signalfd(r3, &(0x7f00000012c0)={[0x2]}, 0x8)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r4, &(0x7f0000001680)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001640)={&(0x7f0000001340)={0x2d4, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xffff}, {0x6, 0x16, 0x7f}, {0x5}, {0x6, 0x11, 0xffe0}, {0x8, 0xb, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x70ad}, {0x6, 0x16, 0x1}, {0x5}, {0x6, 0x11, 0x8000}, {0x8, 0xb, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x28a20f04}, {0x6, 0x16, 0x7}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x6}, {0x8, 0xb, 0x4}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x2}, {0x6, 0x16, 0x6}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x401}, {0x8, 0xb, 0x4}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8}, {0x6, 0x16, 0x2}, {0x5}, {0x6, 0x11, 0xcb87}, {0x8, 0xb, 0x1424}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x80000000}, {0x6, 0x16, 0x3}, {0x5}, {0x6, 0x11, 0x6}, {0x8, 0xb, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x3}, {0x6, 0x16, 0x1c}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x8}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x4}, {0x6, 0x16, 0x3}, {0x5}, {0x6, 0x11, 0x8001}, {0x8, 0xb, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x1}, {0x6, 0x16, 0x8001}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x7ff}, {0x8, 0xb, 0x9}}]}, 0x2d4}, 0x1, 0x0, 0x0, 0x20810}, 0x4000800)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x5, 0x4010, 0xffffffffffffffff, 0xf1e92000)
close_range(r2, r2, 0x2)
pread64(r1, &(0x7f00000016c0)=""/92, 0x5c, 0xdb)
ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, &(0x7f0000001780))

16:59:32 executing program 3:
syz_mount_image$tmpfs(&(0x7f0000000380), &(0x7f0000000540)='./file0\x00', 0x0, 0x0, 0x0, 0x1, &(0x7f0000001980)=ANY=[])
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x124000, &(0x7f00000001c0)={'trans=unix,', {[{@dfltuid={'dfltuid', 0x3d, 0xee00}}, {@noextend}], [{@subj_type={'subj_type', 0x3d, 'tmpfs\x00'}}, {@appraise_type}, {@euid_gt={'euid>', 0xee00}}, {@fowner_gt={'fowner>', 0xee00}}, {@appraise_type}]}})
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140))

16:59:32 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000140)='./file0\x00', 0x2, 0x0, &(0x7f0000001480), 0x0, &(0x7f0000001540)={[{@session}]})
getgroups(0x1, &(0x7f0000000080)=[<r0=>0xffffffffffffffff])
getgroups(0x2, &(0x7f0000000240)=[r0, r0])
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc)
getresgid(&(0x7f00000003c0)=<r1=>0x0, &(0x7f0000000400), &(0x7f0000000440))
chown(&(0x7f00000000c0)='./file0\x00', 0xee01, r1)

16:59:32 executing program 0:
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000100)=0x2, 0x4)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$sock_SIOCOUTQ(r1, 0x541b, 0xfffffffffffffffe)
r2 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000000), 0x4)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000040)={<r3=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f00000000c0)=r3)

16:59:32 executing program 2:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000140)='./file0\x00', 0x2, 0x0, &(0x7f0000001480), 0x0, &(0x7f0000001540)={[{@session}]})
getgroups(0x1, &(0x7f0000000080)=[<r0=>0xffffffffffffffff])
getgroups(0x2, &(0x7f0000000240)=[r0, <r1=>r0])
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, <r2=>0x0}, &(0x7f00000002c0)=0xc)
getresgid(&(0x7f00000003c0)=<r3=>0x0, &(0x7f0000000400), &(0x7f0000000440))
getgroups(0x6, &(0x7f0000000480)=[r0, r0, r1, 0xee01, r2, r3])
chown(&(0x7f00000000c0)='./file0\x00', 0xee01, r3)

[  137.283927] I/O error, dev loop6, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  137.286715] isofs_fill_super: bread failed, dev=loop6, iso_blknum=16, block=32
[  137.310080] 9pnet_fd: p9_fd_create_unix (3969): problem connecting socket: ./file0: -30
[  137.325190] 9pnet_fd: p9_fd_create_unix (3969): problem connecting socket: ./file0: -30
[  137.332201] I/O error, dev loop2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  137.337809] isofs_fill_super: bread failed, dev=loop2, iso_blknum=16, block=32
[  137.654566] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  137.657330] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  137.659954] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  137.664249] misc raw-gadget: fail, usb_gadget_register_driver returned -16
16:59:42 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000140)='./file0\x00', 0x2, 0x0, &(0x7f0000001480), 0x0, &(0x7f0000001540)={[{@session}]})
getgroups(0x1, &(0x7f0000000080)=[<r0=>0xffffffffffffffff])
getgroups(0x2, &(0x7f0000000240)=[r0, <r1=>r0])
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, <r2=>0x0}, &(0x7f00000002c0)=0xc)
getresgid(&(0x7f00000003c0)=<r3=>0x0, &(0x7f0000000400), &(0x7f0000000440))
getgroups(0x6, &(0x7f0000000480)=[r0, r0, r1, 0xee01, r2, r3])
chown(&(0x7f00000000c0)='./file0\x00', 0xee01, r3)
rmdir(&(0x7f0000000100)='./file0\x00')

16:59:42 executing program 2:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000140)='./file0\x00', 0x2, 0x0, &(0x7f0000001480), 0x0, &(0x7f0000001540)={[{@session}]})
getgroups(0x1, &(0x7f0000000080)=[<r0=>0xffffffffffffffff])
getgroups(0x2, &(0x7f0000000240)=[r0, <r1=>r0])
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, <r2=>0x0}, &(0x7f00000002c0)=0xc)
getresgid(&(0x7f00000003c0)=<r3=>0x0, &(0x7f0000000400), &(0x7f0000000440))
getgroups(0x6, &(0x7f0000000480)=[r0, r0, r1, 0xee01, r2, r3])

16:59:42 executing program 0:
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000100)=0x2, 0x4)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$sock_SIOCOUTQ(r1, 0x541b, 0xfffffffffffffffe)
r2 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000000), 0x4)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000040)={<r3=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f00000000c0)=r3)

16:59:42 executing program 1:
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0)
ioctl$RTC_PLL_GET(r0, 0x80207011, &(0x7f0000000040))
ioctl$RTC_WKALM_RD(r0, 0x80287010, &(0x7f0000000080))
r1 = dup2(r0, r0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x1204428, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@fscache}, {@cachetag={'cachetag', 0x3d, '/dev/nvram\x00'}}, {@cache_mmap}, {@nodevmap}, {@posixacl}, {@cache_loose}, {@cache_mmap}, {@fscache}, {@loose}, {@mmap}], [{@mask={'mask', 0x3d, '^MAY_READ'}}, {@subj_user={'subj_user', 0x3d, '$+!$'}}]}})
r2 = syz_open_dev$rtc(&(0x7f0000000200), 0x3, 0x4000)
ioctl$RTC_PLL_SET(r2, 0x40207012, &(0x7f0000000240)={0x5, 0x20, 0x80000000, 0x7f, 0x1, 0x2, 0x9})
ioctl$RTC_IRQP_READ(r1, 0x8008700b, &(0x7f0000000280))
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x220000, 0x0)
mount$9p_unix(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x4010, &(0x7f00000003c0)={'trans=unix,', {[{@access_any}, {@dfltuid}, {}, {@access_client}, {@cachetag={'cachetag', 0x3d, '/dev/rtc#\x00'}}], [{@dont_appraise}, {@audit}]}})
ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, &(0x7f0000000440)={0x0, 0x7fff, @status={[0x1000, 0xfff, 0xfffffffffffffffb, 0xfffffffffffffffb, 0x9, 0xe6]}, [0x2, 0x40000000000000, 0x20, 0x8001, 0xb8, 0x2358c0000000000, 0x8001, 0x2, 0x7, 0x1f, 0x5, 0xfffffffffffffffd, 0x2, 0x4, 0x2c, 0x6b, 0x100000000, 0x2, 0xfff, 0xffffffffffffff80, 0x7, 0x5, 0x5, 0x75, 0x7, 0xffffffffffffff80, 0x0, 0x0, 0x276, 0x3, 0x101, 0x7fff, 0x5, 0x8, 0x4f8d, 0x4, 0x0, 0x5, 0xffffffff, 0x0, 0xffffffff, 0xcbc, 0x3, 0x10000, 0x9, 0x6, 0x7, 0xffffffffffff8001, 0x0, 0x7, 0x2, 0x4, 0x81, 0x5, 0x3, 0x0, 0x1, 0x400, 0x188, 0x8, 0xffffffff, 0xfffffffffffffffd, 0x5, 0x7f]})
ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f0000000e80)={0x0, 0x6, 0x800, 0xfe5102adf40457b9})
pwrite64(0xffffffffffffffff, &(0x7f0000001280)="f522767ccaedc7595bc33fd7de1adbe7b4", 0x11, 0x1)
close_range(r3, r3, 0x0)
r4 = signalfd(r3, &(0x7f00000012c0)={[0x2]}, 0x8)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r4, &(0x7f0000001680)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001640)={&(0x7f0000001340)={0x2d4, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xffff}, {0x6, 0x16, 0x7f}, {0x5}, {0x6, 0x11, 0xffe0}, {0x8, 0xb, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x70ad}, {0x6, 0x16, 0x1}, {0x5}, {0x6, 0x11, 0x8000}, {0x8, 0xb, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x28a20f04}, {0x6, 0x16, 0x7}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x6}, {0x8, 0xb, 0x4}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x2}, {0x6, 0x16, 0x6}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x401}, {0x8, 0xb, 0x4}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8}, {0x6, 0x16, 0x2}, {0x5}, {0x6, 0x11, 0xcb87}, {0x8, 0xb, 0x1424}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x80000000}, {0x6, 0x16, 0x3}, {0x5}, {0x6, 0x11, 0x6}, {0x8, 0xb, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x3}, {0x6, 0x16, 0x1c}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x8}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x4}, {0x6, 0x16, 0x3}, {0x5}, {0x6, 0x11, 0x8001}, {0x8, 0xb, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x1}, {0x6, 0x16, 0x8001}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x7ff}, {0x8, 0xb, 0x9}}]}, 0x2d4}, 0x1, 0x0, 0x0, 0x20810}, 0x4000800)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x5, 0x4010, 0xffffffffffffffff, 0xf1e92000)
close_range(r2, r2, 0x2)
pread64(r1, &(0x7f00000016c0)=""/92, 0x5c, 0xdb)
ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, &(0x7f0000001780))

16:59:42 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000140)='./file0\x00', 0x2, 0x0, &(0x7f0000001480), 0x0, &(0x7f0000001540)={[{@session}]})
getgroups(0x1, &(0x7f0000000080)=[<r0=>0xffffffffffffffff])
getgroups(0x2, &(0x7f0000000240)=[r0, r0])
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc)
chown(&(0x7f00000000c0)='./file0\x00', 0xee01, 0x0)

16:59:42 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000140)='./file0\x00', 0x2, 0x0, &(0x7f0000001480), 0x0, &(0x7f0000001540)={[{@session}]})
getgroups(0x1, &(0x7f0000000080)=[<r0=>0xffffffffffffffff])
getgroups(0x2, &(0x7f0000000240)=[r0, r0])
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc)
getresgid(&(0x7f00000003c0)=<r1=>0x0, &(0x7f0000000400), &(0x7f0000000440))
chown(&(0x7f00000000c0)='./file0\x00', 0xee01, r1)

16:59:42 executing program 3:
syz_mount_image$tmpfs(&(0x7f0000000380), &(0x7f0000000540)='./file0\x00', 0x0, 0x0, 0x0, 0x1, &(0x7f0000001980)=ANY=[])
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x124000, &(0x7f00000001c0)={'trans=unix,', {[{@dfltuid={'dfltuid', 0x3d, 0xee00}}, {@noextend}], [{@subj_type={'subj_type', 0x3d, 'tmpfs\x00'}}, {@appraise_type}, {@euid_gt={'euid>', 0xee00}}, {@fowner_gt={'fowner>', 0xee00}}, {@appraise_type}]}})
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140))

16:59:42 executing program 7:
syz_usb_connect$cdc_ecm(0x5, 0x4d, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x20, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0})
syz_usb_connect(0x1, 0x361, &(0x7f00000006c0)={{0x12, 0x1, 0x201, 0x84, 0xf8, 0x9f, 0xff, 0x18e8, 0x6238, 0xfd21, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x34f, 0x1, 0x30, 0x2, 0xc0, 0x8, [{{0x9, 0x4, 0xf4, 0x20, 0xb, 0x43, 0x53, 0x7c, 0x1, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x40, 0x6, 0x3f}, {0x6, 0x24, 0x1a, 0x7, 0x1c}, [@mdlm_detail={0x69, 0x24, 0x13, 0x7, "7d851fb62d0ead500e9e10f2d21849915104c62ec79988e051a08fd02ef6368dd0d1f4e9d3be4b2f308832096065f51997dee6b1b636857ad3e8ab381f8457ad1dabe73f347403181dfb27ebb2487aaab4d6e17a282e33469add59a84e3602573f4f0cb267"}, @network_terminal={0x7, 0x24, 0xa, 0xba, 0x0, 0x40, 0x8}, @mdlm={0x15, 0x24, 0x12, 0x2}, @dmm={0x7, 0x24, 0x14, 0x401, 0x8}, @network_terminal={0x7, 0x24, 0xa, 0x64, 0x7, 0x80, 0x19}]}], [{{0x9, 0x5, 0x4, 0x0, 0x0, 0x6, 0x0, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1f, 0x7f}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x8c, 0x934}]}}, {{0x9, 0x5, 0xf, 0x0, 0x400, 0x80, 0x2, 0xaa, [@generic={0x86, 0x31, "6e5a9cb9e703992396d0b347a0efd6eee5ba64b0d858b6c78ee9211e668cdf7f2da2a2cf0c5cbfdf81a32dec4009c80c656c8252da3b4d1eafebeadbe3405bc5a8a39b3a296376a8c891072ad92a9f3b5098493c167c921f987643fcd9a7d18853ad64967aa09350efb2a7b7bdaad6473cf5f979f24d3667db903d11040fadc88e7173b2"}, @generic={0x48, 0x31, "65cda1f79a7fcf6ee1fc28efcfd49aaa55e288107384d08af612b00d4477127cf063802a846bd42dd7fb1b99406f3f6ff427f1c1778f4ca87164454bd95257961164240f570d"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x20, 0x7f, 0xfe, 0x3}}, {{0x9, 0x5, 0x1, 0x0, 0x8, 0x0, 0x77, 0x4}}, {{0x9, 0x5, 0x4, 0x3, 0x20, 0x9, 0x4, 0x20, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x40, 0xb21}, @generic={0xab, 0x7, "16974bc1a68d9805254eb1bd57e7d8ef49eea83b0f2ec523719c3d72c37230b2daf43c34c470d62120c1a7908b7bf50578c42802d958424ffeb976efc83a95279b761cabd1d9fdd5ce94a1fab7dad1ba1596a7ba202977d3a3a6b615d38416cfab50dd79d82c14074c9483c4e37df188537f4ccf91b238e5ad3feff5f12f71e403a714571fc628b5cb8d44311412a413a06f845d9c0d13b448855e2a6b9971e9dec643cfa97fc723b6"}]}}, {{0x9, 0x5, 0x8, 0x3, 0x200, 0x9, 0xe3, 0x77}}, {{0x9, 0x5, 0x1, 0x10, 0x20, 0x2, 0x0, 0x20}}, {{0x9, 0x5, 0x7, 0x10, 0x3ff, 0x0, 0x20, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x1, 0xff81}, @generic={0x65, 0x10, "fea3f25e547cc44891845058c44eade79a53875b72fa16023e2676f23ae894592f23003ecb37b0460f4881c567d5bf7a24561521525ed2bd37b3490f4ae7a290bda40d697c0fe657196c7d04baf44b416ebac52e7e4cf93e1dc81a1375eb50f3059ef7"}]}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x2, 0x9, 0x4, [@generic={0x22, 0x31, "6dae5039e1598d0b9ac9484a9bf51a6afdd471b316d9c91a02ac8601baa9f737"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x3}]}}, {{0x9, 0x5, 0x9, 0x0, 0x8, 0x7, 0x9, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0x3}]}}, {{0x9, 0x5, 0xc, 0x10, 0x10, 0xff, 0xf9, 0x20}}]}}]}}]}}, &(0x7f0000000dc0)={0xa, &(0x7f00000005c0)={0xa, 0x6, 0x201, 0x4, 0x62, 0x5, 0x40, 0x80}, 0x10, &(0x7f0000000a40)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x8, 0x80, 0xff, 0x1, 0xfff9, 0x80}]}, 0xa, [{0x4, &(0x7f0000000a80)=@lang_id={0x4, 0x3, 0x55c77e44aa4e3da7}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x82c}}, {0x4, &(0x7f0000000b00)=@lang_id={0x4, 0x3, 0x340a}}, {0x4, &(0x7f0000000b40)=@lang_id={0x4, 0x3, 0x438}}, {0x4, &(0x7f0000000b80)=@lang_id={0x4, 0x3, 0x402}}, {0x4, &(0x7f0000000bc0)=@lang_id={0x4, 0x3, 0x416}}, {0xb6, &(0x7f0000000c00)=@string={0xb6, 0x3, "46a61180c784d0701fd5392afe8fd199a0893ff9023923c356354a282966f660daa01e8e2cc88d7e6de94aa403664ebe7759f1a277312b8dfbde1c793a2b27bb3003a60999891ca5fb48ac2f5a7cc39aba5d62a8e2efed79746aa94f0feebef8b7c3326a4ee21e62c7ca60c4bf66fd712533ac624324fa5c12c2113371473916284a1ab8cc06299f4edfd9c1bb7b9bc338dd46afefc9a5d86ac9f9ec1b2bfe99e83d33b5cc7c3f5d50263792ffb6a22b6a3dff16"}}, {0x6f, &(0x7f0000000cc0)=@string={0x6f, 0x3, "51cd972043c866f3236cc708427413b8c82648bd9784d72380a96a414539bbef0daf7c2ea8e252e44d672b5809f54bac642200d530184951ec72481e2a44c0323709a98df90d52510161450a3d2ed991cb26b73274c4c0851c658ca51d9af2c37ea7f661b2d9e1e3882ccfb6a7"}}, {0x4, &(0x7f0000000d40)=@lang_id={0x4}}, {0x4, &(0x7f0000000d80)=@lang_id={0x4, 0x3, 0x40f}}]})
syz_usb_connect(0x4, 0x269, &(0x7f00000002c0)={{0x12, 0x1, 0x110, 0x91, 0x37, 0x3b, 0xff, 0xdb0, 0x5581, 0x9163, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x257, 0x1, 0x9, 0x0, 0x0, 0x7f, [{{0x9, 0x4, 0xd4, 0x93, 0x6, 0xf1, 0x51, 0x18, 0x81, [], [{{0x9, 0x5, 0x0, 0x1, 0x3ff, 0x5, 0x3f, 0xe0, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x2f, 0x800}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x8, 0x4}]}}, {{0x9, 0x5, 0xa, 0xc, 0x200, 0x3, 0x7f, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xd0, 0x8}, @generic={0x29, 0x1, "29548b9c7c171e42ba610cd795a37fccb25698020dbc465d4b3908adee8264e392d279164f4479"}]}}, {{0x9, 0x5, 0x1, 0x12, 0x400, 0xd, 0xfe, 0x20, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x9, 0x5}]}}, {{0x9, 0x5, 0x2, 0x0, 0x10, 0x0, 0x6, 0xd6}}, {{0x9, 0x5, 0x2, 0x4, 0x200, 0x7, 0x7, 0xde}}, {{0x9, 0x5, 0xf, 0x3, 0x40, 0x7f, 0x0, 0xf8, [@generic={0xd9, 0x22, "a65634a5be7745488b59ae55841a140ccca436b29f8a41c67cdcf063fa0b64178a46bcdd0500ddf6da82ad5124ba6eb5e927f953e605c63d8905a056e383f8012bb6e35b5f8b6df3b4eb4a46e7e2a3c7a0cce305f4a723b07e8ea00c81029fe5470566080a57f8671214ccb0ea9e4886d3d60314815395a51927a51cb0f188c95d1cd3071542a49b1b5ad013b26cd69335cb186da9e4a461edb28d3157724b17d8cf08e385d31aa7626ab5c7656eb6dcdc0debcee2fd01610833c45220d6b47ba8b4d7a4ea164a15e5f96822120adc5bbb111260e08843"}, @generic={0xf1, 0xa, "6abcfaf55ac73bb44ae7428f75ebac5bd47440934cd22fb302d97e5d8f4f64024a0eb9803bb7aad553c575ea1ad2cdba82c5aa7917b9e0b0b9579fd8cf07ce9ee48223e475ff1fa731aa879bfbeefa283707b796e162ec1dc0cc7d5d1ae509365a143acdad1dc2e5475091c5912ab8b17ae5fa9fa1a15c37f780280776d53e48b7e499806b0d53c075d94438e154a2470b402088a3b12c4e45a32c079db5bbfbc1859d0465000ff626a097ad5bde1ca0d8429ccc1eec2cb2de6dda0f627525bb9b84ab03c797fd6f41de04d1cfebb87f23ad7b4ed495dc6c1cb51eb013139e7664cb5f72cf60b57617b04cad1853ca"}]}}]}}]}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x201, 0x7, 0x7a, 0x0, 0x20}, 0x99, &(0x7f0000000040)={0x5, 0xf, 0x99, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x8, 0x9, 0x0, 0x8}, @generic={0x6b, 0x10, 0xb, "a2117c7b2ee0a4fcb7da23a0cc18f0bf88925489d3c056b2d2d7c43862e94e4bcd3d3256fc5b384e29f19fd21a8f5a32f3974cca3fde2dbe614235c18038a9df376a5612c866e3ae4558d01aa05d18e6a4c2502f7d8b91e94b155c1b4b20f54e1a3d51c9a732edb8"}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "2229c8517e2b572371e4e97ff1eb6ac7"}, @wireless={0xb, 0x10, 0x1, 0x2, 0x22, 0x3, 0x7f, 0x2, 0x24}, @ptm_cap={0x3}]}, 0x7, [{0x1e, &(0x7f0000000100)=ANY=[@ANYBLOB="1e037e3182cf9bb15b25493acf73f322f65b903e56695d09db9445aef041"]}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x40d}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x140a}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x140a}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x380a}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x500a}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x44d}}]})

[  146.520886] BUG: unable to handle page fault for address: ffffed10212c967e
[  146.521473] #PF: supervisor read access in kernel mode
[  146.521887] #PF: error_code(0x0000) - not-present page
[  146.522308] PGD 7ffd4067 P4D 7ffd4067 PUD 7ffd3067 PMD 0 
[  146.522757] Oops: Oops: 0000 [#1] SMP KASAN NOPTI
[  146.523164] CPU: 0 UID: 0 PID: 3986 Comm: syz-executor.4 Tainted: G        W           6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) 
[  146.525778] Tainted: [W]=WARN
[  146.526455] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  146.528540] RIP: 0010:perf_tp_event+0x175/0xe70
[  146.529559] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[  146.532388] RSP: 0018:ffff888015f7f780 EFLAGS: 00010016
[  146.532805] RAX: 1ffff110212c967e RBX: ffff88810964b200 RCX: ffffc90007ac7000
[  146.533368] RDX: 0000000000040000 RSI: ffffffff818995b7 RDI: ffff88810964b3f0
[  146.533932] RBP: ffff888015f7f9f0 R08: ffff88806ce31340 R09: ffffe8ffffc094c8
[  146.534501] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
[  146.535064] R13: 0000000000000014 R14: ffff88806ce31340 R15: dffffc0000000000
[  146.535633] FS:  00007f22ca92e700(0000) GS:ffff8880e55dd000(0000) knlGS:0000000000000000
[  146.536268] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  146.536722] CR2: ffffed10212c967e CR3: 00000000138f1000 CR4: 0000000000350ef0
[  146.537289] Call Trace:
[  146.537496]  <TASK>
[  146.537678]  ? merge_sched_in+0xcb/0x1810
[  146.538012]  ? __pfx_perf_tp_event+0x10/0x10
[  146.538365]  ? __asan_memcpy+0x3d/0x60
[  146.538677]  ? visit_groups_merge.constprop.0.isra.0+0x6e7/0x1150
[  146.539172]  ? __pfx_visit_groups_merge.constprop.0.isra.0+0x10/0x10
[  146.539687]  ? lock_is_held_type+0x9e/0x120
[  146.540043]  ? ctx_sched_in+0x134/0x9b0
[  146.540357]  ? tracing_gen_ctx_irq_test+0x167/0x1f0
[  146.540750]  ? perf_swevent_event+0x63/0x3f0
[  146.541110]  ? perf_tp_event+0x807/0xe70
[  146.541439]  ? perf_trace_run_bpf_submit+0xef/0x180
[  146.541836]  perf_trace_run_bpf_submit+0xef/0x180
[  146.542238]  perf_trace_preemptirq_template+0x259/0x430
[  146.542666]  ? mark_held_locks+0x49/0x80
[  146.543002]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  146.543481]  ? _raw_spin_lock_irqsave+0x53/0x60
[  146.543853]  trace_irq_disable.constprop.0+0xa6/0x100
[  146.544268]  _raw_spin_lock_irqsave+0x53/0x60
[  146.544627]  try_to_wake_up+0xa0/0x11d0
[  146.544956]  ? __pfx_try_to_wake_up+0x10/0x10
[  146.545318]  ? plist_del+0x122/0x270
[  146.545617]  ? find_held_lock+0x2b/0x80
[  146.545940]  ? futex_wake+0x474/0x540
[  146.546263]  wake_up_q+0xa1/0x130
[  146.546548]  futex_wake+0x47e/0x540
[  146.546844]  ? __pfx_futex_wake+0x10/0x10
[  146.547188]  ? __do_sys_perf_event_open+0x44d/0x2c20
[  146.547602]  ? lock_release+0xc8/0x290
[  146.547915]  do_futex+0x26d/0x370
[  146.548207]  ? __pfx_do_futex+0x10/0x10
[  146.548527]  ? perf_trace_run_bpf_submit+0xef/0x180
[  146.548925]  __x64_sys_futex+0x1c9/0x4d0
[  146.549261]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  146.549727]  ? __pfx___x64_sys_futex+0x10/0x10
[  146.550109]  do_syscall_64+0xbf/0x360
[  146.550415]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  146.550824] RIP: 0033:0x7f22cd3b8b19
[  146.551125] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  146.552553] RSP: 002b:00007f22ca92e218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  146.553153] RAX: ffffffffffffffda RBX: 00007f22cd4cbf68 RCX: 00007f22cd3b8b19
[  146.553712] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f22cd4cbf6c
[  146.554274] RBP: 00007f22cd4cbf60 R08: 000000000000000e R09: 0000000000000000
[  146.554829] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f22cd4cbf6c
[  146.555405] R13: 00007fffb05bccdf R14: 00007f22ca92e300 R15: 0000000000022000
[  146.555971]  </TASK>
[  146.556160] Modules linked in:
[  146.556417] CR2: ffffed10212c967e
[  146.556692] ---[ end trace 0000000000000000 ]---
[  146.557069] RIP: 0010:perf_tp_event+0x175/0xe70
[  146.557441] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[  146.558860] RSP: 0018:ffff888015f7f780 EFLAGS: 00010016
[  146.559286] RAX: 1ffff110212c967e RBX: ffff88810964b200 RCX: ffffc90007ac7000
[  146.559852] RDX: 0000000000040000 RSI: ffffffff818995b7 RDI: ffff88810964b3f0
[  146.560420] RBP: ffff888015f7f9f0 R08: ffff88806ce31340 R09: ffffe8ffffc094c8
[  146.560984] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
[  146.561539] R13: 0000000000000014 R14: ffff88806ce31340 R15: dffffc0000000000
[  146.562103] FS:  00007f22ca92e700(0000) GS:ffff8880e55dd000(0000) knlGS:0000000000000000
[  146.562861] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  146.563446] CR2: ffffed10212c967e CR3: 00000000138f1000 CR4: 0000000000350ef0
[  146.564142] note: syz-executor.4[3986] exited with irqs disabled
[  146.564796] BUG: unable to handle page fault for address: ffffed10212c967e
[  146.565469] #PF: supervisor read access in kernel mode
[  146.565975] #PF: error_code(0x0000) - not-present page
[  146.566475] PGD 7ffd4067 P4D 7ffd4067 PUD 7ffd3067 PMD 0 
[  146.566976] Oops: Oops: 0000 [#2] SMP KASAN NOPTI
[  146.567372] CPU: 0 UID: 0 PID: 3986 Comm: syz-executor.4 Tainted: G      D W           6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) 
[  146.568311] Tainted: [D]=DIE, [W]=WARN
[  146.568612] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  146.569265] RIP: 0010:perf_tp_event+0x175/0xe70
[  146.569636] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[  146.571062] RSP: 0018:ffff88806ce08b40 EFLAGS: 00010016
[  146.571533] RAX: 1ffff110212c967e RBX: ffff88810964b200 RCX: 0000000000000002
[  146.572098] RDX: ffff888015e8d280 RSI: ffffffff818995b7 RDI: ffff88810964b3f0
[  146.572657] RBP: ffff88806ce08db0 R08: ffff88806ce313e8 R09: ffffe8ffffc094c8
[  146.573220] R10: 0000000000000000 R11: ffff888019c14498 R12: dffffc0000000000
[  146.573777] R13: 0000000000000014 R14: ffff88806ce313e8 R15: dffffc0000000000
[  146.574347] FS:  00007f22ca92e700(0000) GS:ffff8880e55dd000(0000) knlGS:0000000000000000
[  146.574983] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  146.575446] CR2: ffffed10212c967e CR3: 00000000138f1000 CR4: 0000000000350ef0
[  146.576009] Call Trace:
[  146.576216]  <IRQ>
[  146.576394]  ? __pfx_perf_tp_event+0x10/0x10
[  146.576748]  ? __rb_insert_augmented+0x4b6/0x8b0
[  146.577137]  ? enqueue_task_fair+0x43a/0x1e00
[  146.577498]  ? check_preempt_wakeup_fair+0x6e/0x950
[  146.577892]  ? wakeup_preempt+0x140/0x2a0
[  146.578235]  ? lock_release+0x1c7/0x290
[  146.578552]  ? lock_release+0x1c7/0x290
[  146.578866]  ? do_raw_spin_unlock+0x53/0x220
[  146.579227]  ? _raw_spin_unlock_irqrestore+0x22/0x50
[  146.579640]  ? try_to_wake_up+0x8ae/0x11d0
[  146.579989]  ? perf_trace_run_bpf_submit+0xef/0x180
[  146.580388]  ? lock_release+0x1c7/0x290
[  146.580705]  perf_trace_run_bpf_submit+0xef/0x180
[  146.581096]  perf_trace_preemptirq_template+0x259/0x430
[  146.581520]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  146.581993]  ? read_tsc+0x9/0x20
[  146.582270]  ? ktime_get+0x16d/0x270
[  146.582570]  ? __pfx_lapic_next_deadline+0x10/0x10
[  146.582968]  ? clockevents_program_event+0x135/0x360
[  146.583389]  ? _raw_spin_lock_irq+0x42/0x50
[  146.583731]  trace_irq_disable.constprop.0+0xa6/0x100
[  146.584145]  _raw_spin_lock_irq+0x42/0x50
[  146.584475]  run_timer_softirq+0x10f/0x210
[  146.584811]  handle_softirqs+0x1b1/0x770
[  146.585147]  __irq_exit_rcu+0xc4/0x100
[  146.585464]  irq_exit_rcu+0x9/0x20
[  146.585749]  sysvec_apic_timer_interrupt+0x70/0x80
[  146.586157]  </IRQ>
[  146.586339]  <TASK>
[  146.586520]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  146.586931] RIP: 0010:make_task_dead+0xa2/0x3b0
[  146.587329] Code: 38 00 85 db 0f 84 21 01 00 00 e8 d9 96 38 00 9c 5b 81 e3 00 02 00 00 31 ff 48 89 de e8 27 92 38 00 48 85 db 0f 84 17 01 00 00 <e8> b9 96 38 00 31 ff 65 8b 1d 60 df 48 06 81 e3 ff ff ff 7f 89 de
[  146.588747] RSP: 0018:ffff888015f7ff28 EFLAGS: 00000246
[  146.589172] RAX: 0000000000000001 RBX: ffff888015e8d280 RCX: ffffffff817c2b86
[  146.589727] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff813b5234
[  146.590286] RBP: 0000000000000009 R08: 0000000000000000 R09: 0000000000000000
[  146.590844] R10: ffffffff8643ac57 R11: 0000000000000001 R12: ffff888015e8d280
[  146.591418] R13: 0000000000000009 R14: ffff888015f7f760 R15: 0000000000000000
[  146.591987]  ? trace_irq_enable.constprop.0+0x26/0x100
[  146.592400]  ? make_task_dead+0x214/0x3b0
[  146.592730]  ? make_task_dead+0x214/0x3b0
[  146.593069]  ? do_syscall_64+0xbf/0x360
[  146.593388]  rewind_stack_and_make_dead+0x16/0x20
[  146.593780] RIP: 0033:0x7f22cd3b8b19
[  146.594083] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  146.595527] RSP: 002b:00007f22ca92e218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  146.596134] RAX: ffffffffffffffda RBX: 00007f22cd4cbf68 RCX: 00007f22cd3b8b19
[  146.596694] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f22cd4cbf6c
[  146.597263] RBP: 00007f22cd4cbf60 R08: 000000000000000e R09: 0000000000000000
[  146.597824] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f22cd4cbf6c
[  146.598392] R13: 00007fffb05bccdf R14: 00007f22ca92e300 R15: 0000000000022000
[  146.598965]  </TASK>
[  146.599157] Modules linked in:
[  146.599425] CR2: ffffed10212c967e
[  146.599702] ---[ end trace 0000000000000000 ]---
[  146.600077] RIP: 0010:perf_tp_event+0x175/0xe70
[  146.600455] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[  146.601902] RSP: 0018:ffff888015f7f780 EFLAGS: 00010016
[  146.602335] RAX: 1ffff110212c967e RBX: ffff88810964b200 RCX: ffffc90007ac7000
[  146.602896] RDX: 0000000000040000 RSI: ffffffff818995b7 RDI: ffff88810964b3f0
[  146.603471] RBP: ffff888015f7f9f0 R08: ffff88806ce31340 R09: ffffe8ffffc094c8
[  146.604040] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
[  146.604607] R13: 0000000000000014 R14: ffff88806ce31340 R15: dffffc0000000000
[  146.605172] FS:  00007f22ca92e700(0000) GS:ffff8880e55dd000(0000) knlGS:0000000000000000
[  146.605809] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  146.606281] CR2: ffffed10212c967e CR3: 00000000138f1000 CR4: 0000000000350ef0
[  146.606845] Kernel panic - not syncing: Fatal exception in interrupt
[  146.607624] Kernel Offset: disabled
[  146.607916] ---[ end Kernel panic - not syncing: Fatal exception in interrupt ]---

VM DIAGNOSIS:
16:59:42  Registers:
info registers vcpu 0
RAX=0000000000000042 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff828e32c5 RDI=ffffffff88724180 RBP=ffffffff88724140 RSP=ffff888015f7efc8
R8 =0000000000000000 R9 =ffffed10016ea046 R10=0000000000000042 R11=6572617764726148
R12=0000000000000042 R13=0000000000000010 R14=ffffffff88724140 R15=ffffffff828e32b0
RIP=ffffffff828e331d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007f22ca92e700 00000000 00000000
GS =0000 ffff8880e55dd000 00000000 00000000
LDT=0000 fffffe5100000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=ffffed10212c967e CR3=00000000138f1000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00007f22cd49f7c000007f22cd49f7c8
XMM02=00007f22cd49f7e000007f22cd49f7c0 XMM03=00007f22cd49f7c800007f22cd49f7c0
XMM04=ffffffff0000ff00000000ff00000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=ffffea0000d517d8 RBX=0000000000000082 RCX=ffffffff819e41e5 RDX=fffff940001aa2ff
RSI=0000000000000004 RDI=ffffea0000d517f4 RBP=ffffea0000d517c0 RSP=ffff8880176cf6c0
R8 =0000000000000001 R9 =fffff940001aa2fe R10=ffffea0000d517f7 R11=ffff88800e619e71
R12=ffffea0000d517f4 R13=ffffea0000d517c0 R14=ffffea0000d517c0 R15=dffffc0000000000
RIP=ffffffff819e41ee RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000555583d16400 00000000 00000000
GS =0000 ffff8880e56dd000 00000000 00000000
LDT=0000 fffffe1600000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fb776f4ef64 CR3=000000003e433000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=0100ff00000000000000000000000000
XMM02=7463656a6e695f31313230385f7a7973 XMM03=00000000000000000000000000000000
XMM04=ffffffff0000ff00000000ff00000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000