Warning: Permanently added '[localhost]:15467' (ECDSA) to the list of known hosts.
2025/08/29 17:03:43 fuzzer started
2025/08/29 17:03:44 dialing manager at localhost:43077
syzkaller login: [   60.030728] cgroup: Unknown subsys name 'net'
[   60.093215] cgroup: Unknown subsys name 'cpuset'
[   60.108985] cgroup: Unknown subsys name 'rlimit'
2025/08/29 17:03:54 syscalls: 2214
2025/08/29 17:03:54 code coverage: enabled
2025/08/29 17:03:54 comparison tracing: enabled
2025/08/29 17:03:54 extra coverage: enabled
2025/08/29 17:03:54 setuid sandbox: enabled
2025/08/29 17:03:54 namespace sandbox: enabled
2025/08/29 17:03:54 Android sandbox: enabled
2025/08/29 17:03:54 fault injection: enabled
2025/08/29 17:03:54 leak checking: enabled
2025/08/29 17:03:54 net packet injection: enabled
2025/08/29 17:03:54 net device setup: enabled
2025/08/29 17:03:54 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/08/29 17:03:54 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/08/29 17:03:54 USB emulation: enabled
2025/08/29 17:03:54 hci packet injection: enabled
2025/08/29 17:03:54 wifi device emulation: enabled
2025/08/29 17:03:54 802.15.4 emulation: enabled
2025/08/29 17:03:54 fetching corpus: 50, signal 25742/27496 (executing program)
2025/08/29 17:03:54 fetching corpus: 100, signal 33078/36419 (executing program)
2025/08/29 17:03:55 fetching corpus: 150, signal 43119/47866 (executing program)
2025/08/29 17:03:55 fetching corpus: 200, signal 49040/55128 (executing program)
2025/08/29 17:03:55 fetching corpus: 250, signal 55328/62619 (executing program)
2025/08/29 17:03:55 fetching corpus: 300, signal 59794/68285 (executing program)
2025/08/29 17:03:55 fetching corpus: 350, signal 61986/71764 (executing program)
2025/08/29 17:03:55 fetching corpus: 400, signal 65986/76859 (executing program)
2025/08/29 17:03:55 fetching corpus: 450, signal 68975/81006 (executing program)
2025/08/29 17:03:55 fetching corpus: 500, signal 72723/85708 (executing program)
2025/08/29 17:03:55 fetching corpus: 550, signal 74964/88984 (executing program)
2025/08/29 17:03:55 fetching corpus: 600, signal 79053/93889 (executing program)
2025/08/29 17:03:55 fetching corpus: 650, signal 81715/97464 (executing program)
2025/08/29 17:03:55 fetching corpus: 700, signal 83742/100442 (executing program)
2025/08/29 17:03:55 fetching corpus: 750, signal 86791/104239 (executing program)
2025/08/29 17:03:56 fetching corpus: 800, signal 91091/108972 (executing program)
2025/08/29 17:03:56 fetching corpus: 850, signal 92905/111584 (executing program)
2025/08/29 17:03:56 fetching corpus: 900, signal 94904/114335 (executing program)
2025/08/29 17:03:56 fetching corpus: 950, signal 96910/117045 (executing program)
2025/08/29 17:03:56 fetching corpus: 1000, signal 98316/119177 (executing program)
2025/08/29 17:03:56 fetching corpus: 1050, signal 99931/121497 (executing program)
2025/08/29 17:03:56 fetching corpus: 1100, signal 102087/124285 (executing program)
2025/08/29 17:03:56 fetching corpus: 1150, signal 103775/126609 (executing program)
2025/08/29 17:03:56 fetching corpus: 1200, signal 105448/128866 (executing program)
2025/08/29 17:03:56 fetching corpus: 1250, signal 107469/131357 (executing program)
2025/08/29 17:03:56 fetching corpus: 1300, signal 108937/133395 (executing program)
2025/08/29 17:03:57 fetching corpus: 1350, signal 109940/135134 (executing program)
2025/08/29 17:03:57 fetching corpus: 1400, signal 111330/137063 (executing program)
2025/08/29 17:03:57 fetching corpus: 1450, signal 112998/139223 (executing program)
2025/08/29 17:03:57 fetching corpus: 1500, signal 114107/140886 (executing program)
2025/08/29 17:03:57 fetching corpus: 1550, signal 115255/142660 (executing program)
2025/08/29 17:03:57 fetching corpus: 1600, signal 116164/144194 (executing program)
2025/08/29 17:03:57 fetching corpus: 1650, signal 117792/146173 (executing program)
2025/08/29 17:03:57 fetching corpus: 1700, signal 119268/148010 (executing program)
2025/08/29 17:03:57 fetching corpus: 1750, signal 120105/149442 (executing program)
2025/08/29 17:03:57 fetching corpus: 1800, signal 120943/150799 (executing program)
2025/08/29 17:03:57 fetching corpus: 1850, signal 122081/152325 (executing program)
2025/08/29 17:03:57 fetching corpus: 1900, signal 123201/153919 (executing program)
2025/08/29 17:03:58 fetching corpus: 1950, signal 124215/155385 (executing program)
2025/08/29 17:03:58 fetching corpus: 2000, signal 125266/156855 (executing program)
2025/08/29 17:03:58 fetching corpus: 2050, signal 126337/158356 (executing program)
2025/08/29 17:03:58 fetching corpus: 2100, signal 127033/159545 (executing program)
2025/08/29 17:03:58 fetching corpus: 2150, signal 128753/161427 (executing program)
2025/08/29 17:03:58 fetching corpus: 2200, signal 129420/162537 (executing program)
2025/08/29 17:03:58 fetching corpus: 2250, signal 131019/164253 (executing program)
2025/08/29 17:03:58 fetching corpus: 2300, signal 131437/165241 (executing program)
2025/08/29 17:03:58 fetching corpus: 2350, signal 132393/166530 (executing program)
2025/08/29 17:03:58 fetching corpus: 2400, signal 133334/167780 (executing program)
2025/08/29 17:03:59 fetching corpus: 2450, signal 134045/168884 (executing program)
2025/08/29 17:03:59 fetching corpus: 2500, signal 134801/169993 (executing program)
2025/08/29 17:03:59 fetching corpus: 2550, signal 135359/170990 (executing program)
2025/08/29 17:03:59 fetching corpus: 2600, signal 135828/171933 (executing program)
2025/08/29 17:03:59 fetching corpus: 2650, signal 136612/172969 (executing program)
2025/08/29 17:03:59 fetching corpus: 2700, signal 137310/173956 (executing program)
2025/08/29 17:03:59 fetching corpus: 2750, signal 138307/175120 (executing program)
2025/08/29 17:03:59 fetching corpus: 2800, signal 138946/176070 (executing program)
2025/08/29 17:03:59 fetching corpus: 2850, signal 139374/176939 (executing program)
2025/08/29 17:03:59 fetching corpus: 2900, signal 140043/177921 (executing program)
2025/08/29 17:03:59 fetching corpus: 2950, signal 140912/178887 (executing program)
2025/08/29 17:04:00 fetching corpus: 3000, signal 141738/179915 (executing program)
2025/08/29 17:04:00 fetching corpus: 3050, signal 142688/180952 (executing program)
2025/08/29 17:04:00 fetching corpus: 3100, signal 143303/181813 (executing program)
2025/08/29 17:04:00 fetching corpus: 3150, signal 143934/182679 (executing program)
2025/08/29 17:04:00 fetching corpus: 3200, signal 144538/183538 (executing program)
2025/08/29 17:04:00 fetching corpus: 3250, signal 145008/184330 (executing program)
2025/08/29 17:04:00 fetching corpus: 3300, signal 145671/185202 (executing program)
2025/08/29 17:04:00 fetching corpus: 3350, signal 146054/185897 (executing program)
2025/08/29 17:04:00 fetching corpus: 3400, signal 147095/186812 (executing program)
2025/08/29 17:04:00 fetching corpus: 3450, signal 147680/187596 (executing program)
2025/08/29 17:04:00 fetching corpus: 3500, signal 148015/188244 (executing program)
2025/08/29 17:04:00 fetching corpus: 3550, signal 148491/189000 (executing program)
2025/08/29 17:04:01 fetching corpus: 3600, signal 149176/189853 (executing program)
2025/08/29 17:04:01 fetching corpus: 3650, signal 149622/190565 (executing program)
2025/08/29 17:04:01 fetching corpus: 3700, signal 150330/191324 (executing program)
2025/08/29 17:04:01 fetching corpus: 3750, signal 150802/192013 (executing program)
2025/08/29 17:04:01 fetching corpus: 3800, signal 151322/192744 (executing program)
2025/08/29 17:04:01 fetching corpus: 3850, signal 152153/193603 (executing program)
2025/08/29 17:04:01 fetching corpus: 3900, signal 152611/194257 (executing program)
2025/08/29 17:04:01 fetching corpus: 3950, signal 153204/194947 (executing program)
2025/08/29 17:04:01 fetching corpus: 4000, signal 153643/195548 (executing program)
2025/08/29 17:04:01 fetching corpus: 4050, signal 154123/196161 (executing program)
2025/08/29 17:04:02 fetching corpus: 4100, signal 154601/196837 (executing program)
2025/08/29 17:04:02 fetching corpus: 4150, signal 155124/197420 (executing program)
2025/08/29 17:04:02 fetching corpus: 4200, signal 155683/198024 (executing program)
2025/08/29 17:04:02 fetching corpus: 4250, signal 156226/198689 (executing program)
2025/08/29 17:04:02 fetching corpus: 4300, signal 156672/199257 (executing program)
2025/08/29 17:04:02 fetching corpus: 4350, signal 157113/199767 (executing program)
2025/08/29 17:04:02 fetching corpus: 4400, signal 158040/200373 (executing program)
2025/08/29 17:04:02 fetching corpus: 4450, signal 158688/200925 (executing program)
2025/08/29 17:04:02 fetching corpus: 4500, signal 159176/201447 (executing program)
2025/08/29 17:04:02 fetching corpus: 4550, signal 159447/201977 (executing program)
2025/08/29 17:04:02 fetching corpus: 4600, signal 159717/202440 (executing program)
2025/08/29 17:04:03 fetching corpus: 4650, signal 159928/202928 (executing program)
2025/08/29 17:04:03 fetching corpus: 4700, signal 160236/203439 (executing program)
2025/08/29 17:04:03 fetching corpus: 4750, signal 160656/203915 (executing program)
2025/08/29 17:04:03 fetching corpus: 4800, signal 161150/204399 (executing program)
2025/08/29 17:04:03 fetching corpus: 4850, signal 161436/204881 (executing program)
2025/08/29 17:04:03 fetching corpus: 4900, signal 161766/205391 (executing program)
2025/08/29 17:04:03 fetching corpus: 4950, signal 162154/205794 (executing program)
2025/08/29 17:04:03 fetching corpus: 5000, signal 162450/206266 (executing program)
2025/08/29 17:04:03 fetching corpus: 5050, signal 163056/206709 (executing program)
2025/08/29 17:04:03 fetching corpus: 5100, signal 163441/206755 (executing program)
2025/08/29 17:04:03 fetching corpus: 5150, signal 163751/206770 (executing program)
2025/08/29 17:04:03 fetching corpus: 5200, signal 164209/206775 (executing program)
2025/08/29 17:04:03 fetching corpus: 5250, signal 164675/206789 (executing program)
2025/08/29 17:04:04 fetching corpus: 5300, signal 165371/206797 (executing program)
2025/08/29 17:04:04 fetching corpus: 5350, signal 165880/206881 (executing program)
2025/08/29 17:04:04 fetching corpus: 5400, signal 166300/206884 (executing program)
2025/08/29 17:04:04 fetching corpus: 5450, signal 166649/206900 (executing program)
2025/08/29 17:04:04 fetching corpus: 5500, signal 167149/206904 (executing program)
2025/08/29 17:04:04 fetching corpus: 5550, signal 167469/206923 (executing program)
2025/08/29 17:04:04 fetching corpus: 5600, signal 167852/206934 (executing program)
2025/08/29 17:04:04 fetching corpus: 5650, signal 168511/206943 (executing program)
2025/08/29 17:04:04 fetching corpus: 5700, signal 168934/206998 (executing program)
2025/08/29 17:04:04 fetching corpus: 5750, signal 169197/207002 (executing program)
2025/08/29 17:04:04 fetching corpus: 5800, signal 169591/207009 (executing program)
2025/08/29 17:04:05 fetching corpus: 5850, signal 169951/207010 (executing program)
2025/08/29 17:04:05 fetching corpus: 5900, signal 170284/207016 (executing program)
2025/08/29 17:04:05 fetching corpus: 5950, signal 170949/207024 (executing program)
2025/08/29 17:04:05 fetching corpus: 6000, signal 171255/207026 (executing program)
2025/08/29 17:04:05 fetching corpus: 6050, signal 171715/207037 (executing program)
2025/08/29 17:04:05 fetching corpus: 6100, signal 172049/207037 (executing program)
2025/08/29 17:04:05 fetching corpus: 6150, signal 172530/207045 (executing program)
2025/08/29 17:04:05 fetching corpus: 6200, signal 172974/207054 (executing program)
2025/08/29 17:04:05 fetching corpus: 6250, signal 173309/207057 (executing program)
2025/08/29 17:04:05 fetching corpus: 6300, signal 173665/207058 (executing program)
2025/08/29 17:04:05 fetching corpus: 6350, signal 174016/207081 (executing program)
2025/08/29 17:04:06 fetching corpus: 6400, signal 174242/207082 (executing program)
2025/08/29 17:04:06 fetching corpus: 6450, signal 174635/207168 (executing program)
2025/08/29 17:04:06 fetching corpus: 6500, signal 174892/207193 (executing program)
2025/08/29 17:04:06 fetching corpus: 6550, signal 175306/207195 (executing program)
2025/08/29 17:04:06 fetching corpus: 6600, signal 175661/207197 (executing program)
2025/08/29 17:04:06 fetching corpus: 6650, signal 175957/207201 (executing program)
2025/08/29 17:04:06 fetching corpus: 6700, signal 176430/207204 (executing program)
2025/08/29 17:04:06 fetching corpus: 6750, signal 176798/207215 (executing program)
2025/08/29 17:04:06 fetching corpus: 6800, signal 177093/207216 (executing program)
2025/08/29 17:04:06 fetching corpus: 6850, signal 177351/207223 (executing program)
2025/08/29 17:04:06 fetching corpus: 6900, signal 177702/207225 (executing program)
2025/08/29 17:04:06 fetching corpus: 6950, signal 178106/207238 (executing program)
2025/08/29 17:04:06 fetching corpus: 7000, signal 178401/207253 (executing program)
2025/08/29 17:04:06 fetching corpus: 7050, signal 178683/207256 (executing program)
2025/08/29 17:04:07 fetching corpus: 7100, signal 179035/207269 (executing program)
2025/08/29 17:04:07 fetching corpus: 7150, signal 179281/207283 (executing program)
2025/08/29 17:04:07 fetching corpus: 7200, signal 179625/207314 (executing program)
2025/08/29 17:04:07 fetching corpus: 7250, signal 179920/207322 (executing program)
2025/08/29 17:04:07 fetching corpus: 7300, signal 180107/207329 (executing program)
2025/08/29 17:04:07 fetching corpus: 7350, signal 180565/207330 (executing program)
2025/08/29 17:04:07 fetching corpus: 7400, signal 180914/207340 (executing program)
2025/08/29 17:04:07 fetching corpus: 7450, signal 181254/207346 (executing program)
2025/08/29 17:04:07 fetching corpus: 7500, signal 181554/207351 (executing program)
2025/08/29 17:04:07 fetching corpus: 7550, signal 181914/207362 (executing program)
2025/08/29 17:04:07 fetching corpus: 7600, signal 182174/207363 (executing program)
2025/08/29 17:04:07 fetching corpus: 7650, signal 182371/207382 (executing program)
2025/08/29 17:04:08 fetching corpus: 7700, signal 183116/207424 (executing program)
2025/08/29 17:04:08 fetching corpus: 7750, signal 183408/207429 (executing program)
2025/08/29 17:04:08 fetching corpus: 7800, signal 183893/207499 (executing program)
2025/08/29 17:04:08 fetching corpus: 7850, signal 184181/207504 (executing program)
2025/08/29 17:04:08 fetching corpus: 7900, signal 184410/207525 (executing program)
2025/08/29 17:04:08 fetching corpus: 7950, signal 184856/207532 (executing program)
2025/08/29 17:04:08 fetching corpus: 8000, signal 185120/207532 (executing program)
2025/08/29 17:04:08 fetching corpus: 8050, signal 185498/207535 (executing program)
2025/08/29 17:04:08 fetching corpus: 8100, signal 185834/207536 (executing program)
2025/08/29 17:04:08 fetching corpus: 8150, signal 186032/207550 (executing program)
2025/08/29 17:04:08 fetching corpus: 8200, signal 186327/207550 (executing program)
2025/08/29 17:04:08 fetching corpus: 8250, signal 186524/207550 (executing program)
2025/08/29 17:04:08 fetching corpus: 8300, signal 186846/207554 (executing program)
2025/08/29 17:04:09 fetching corpus: 8350, signal 187031/207561 (executing program)
2025/08/29 17:04:09 fetching corpus: 8400, signal 187355/207563 (executing program)
2025/08/29 17:04:09 fetching corpus: 8450, signal 187646/207566 (executing program)
2025/08/29 17:04:09 fetching corpus: 8500, signal 187866/207572 (executing program)
2025/08/29 17:04:09 fetching corpus: 8550, signal 188051/207585 (executing program)
2025/08/29 17:04:09 fetching corpus: 8600, signal 188373/207700 (executing program)
2025/08/29 17:04:09 fetching corpus: 8650, signal 188636/207700 (executing program)
2025/08/29 17:04:09 fetching corpus: 8700, signal 188824/207705 (executing program)
2025/08/29 17:04:09 fetching corpus: 8750, signal 188975/207706 (executing program)
2025/08/29 17:04:09 fetching corpus: 8800, signal 189211/207710 (executing program)
2025/08/29 17:04:10 fetching corpus: 8850, signal 189476/207711 (executing program)
2025/08/29 17:04:10 fetching corpus: 8900, signal 189704/207724 (executing program)
2025/08/29 17:04:10 fetching corpus: 8950, signal 190082/207778 (executing program)
2025/08/29 17:04:10 fetching corpus: 9000, signal 190242/207781 (executing program)
2025/08/29 17:04:10 fetching corpus: 9050, signal 190519/207784 (executing program)
2025/08/29 17:04:10 fetching corpus: 9100, signal 190688/207793 (executing program)
2025/08/29 17:04:10 fetching corpus: 9150, signal 191069/207798 (executing program)
2025/08/29 17:04:10 fetching corpus: 9200, signal 191267/207798 (executing program)
2025/08/29 17:04:10 fetching corpus: 9250, signal 191471/207798 (executing program)
2025/08/29 17:04:10 fetching corpus: 9300, signal 191640/207809 (executing program)
2025/08/29 17:04:10 fetching corpus: 9350, signal 191859/207825 (executing program)
2025/08/29 17:04:10 fetching corpus: 9400, signal 192126/207841 (executing program)
2025/08/29 17:04:11 fetching corpus: 9450, signal 192413/207847 (executing program)
2025/08/29 17:04:11 fetching corpus: 9500, signal 192718/207851 (executing program)
2025/08/29 17:04:11 fetching corpus: 9550, signal 192909/207855 (executing program)
2025/08/29 17:04:11 fetching corpus: 9600, signal 193116/207864 (executing program)
2025/08/29 17:04:11 fetching corpus: 9650, signal 193576/207870 (executing program)
2025/08/29 17:04:11 fetching corpus: 9700, signal 193765/207876 (executing program)
2025/08/29 17:04:11 fetching corpus: 9750, signal 194024/207878 (executing program)
2025/08/29 17:04:11 fetching corpus: 9800, signal 194260/207878 (executing program)
2025/08/29 17:04:11 fetching corpus: 9850, signal 194529/207883 (executing program)
2025/08/29 17:04:11 fetching corpus: 9900, signal 194774/207887 (executing program)
2025/08/29 17:04:11 fetching corpus: 9950, signal 195023/207887 (executing program)
2025/08/29 17:04:11 fetching corpus: 10000, signal 195311/207889 (executing program)
2025/08/29 17:04:12 fetching corpus: 10050, signal 195502/207892 (executing program)
2025/08/29 17:04:12 fetching corpus: 10100, signal 195692/207913 (executing program)
2025/08/29 17:04:12 fetching corpus: 10150, signal 195861/207917 (executing program)
2025/08/29 17:04:12 fetching corpus: 10200, signal 196047/207922 (executing program)
2025/08/29 17:04:12 fetching corpus: 10250, signal 196274/207933 (executing program)
2025/08/29 17:04:12 fetching corpus: 10300, signal 196489/207942 (executing program)
2025/08/29 17:04:12 fetching corpus: 10350, signal 196649/207948 (executing program)
2025/08/29 17:04:12 fetching corpus: 10400, signal 196916/207950 (executing program)
2025/08/29 17:04:13 fetching corpus: 10450, signal 197103/207957 (executing program)
2025/08/29 17:04:13 fetching corpus: 10500, signal 197284/207958 (executing program)
2025/08/29 17:04:13 fetching corpus: 10550, signal 197484/207959 (executing program)
2025/08/29 17:04:13 fetching corpus: 10600, signal 197651/207987 (executing program)
2025/08/29 17:04:13 fetching corpus: 10650, signal 197878/207992 (executing program)
2025/08/29 17:04:13 fetching corpus: 10700, signal 198078/208000 (executing program)
2025/08/29 17:04:13 fetching corpus: 10750, signal 198331/208000 (executing program)
2025/08/29 17:04:13 fetching corpus: 10800, signal 198516/208010 (executing program)
2025/08/29 17:04:13 fetching corpus: 10850, signal 198690/208013 (executing program)
2025/08/29 17:04:13 fetching corpus: 10900, signal 198911/208016 (executing program)
2025/08/29 17:04:13 fetching corpus: 10950, signal 199114/208022 (executing program)
2025/08/29 17:04:13 fetching corpus: 11000, signal 199323/208042 (executing program)
2025/08/29 17:04:13 fetching corpus: 11050, signal 199616/208050 (executing program)
2025/08/29 17:04:14 fetching corpus: 11100, signal 199872/208061 (executing program)
2025/08/29 17:04:14 fetching corpus: 11150, signal 200081/208061 (executing program)
2025/08/29 17:04:14 fetching corpus: 11200, signal 200221/208069 (executing program)
2025/08/29 17:04:14 fetching corpus: 11250, signal 200407/208078 (executing program)
2025/08/29 17:04:14 fetching corpus: 11300, signal 200607/208078 (executing program)
2025/08/29 17:04:14 fetching corpus: 11350, signal 200793/208079 (executing program)
2025/08/29 17:04:14 fetching corpus: 11400, signal 201006/208079 (executing program)
2025/08/29 17:04:14 fetching corpus: 11450, signal 201220/208081 (executing program)
2025/08/29 17:04:14 fetching corpus: 11500, signal 201375/208086 (executing program)
2025/08/29 17:04:14 fetching corpus: 11550, signal 201537/208087 (executing program)
2025/08/29 17:04:14 fetching corpus: 11600, signal 201724/208087 (executing program)
2025/08/29 17:04:14 fetching corpus: 11650, signal 201994/208092 (executing program)
2025/08/29 17:04:14 fetching corpus: 11661, signal 202039/208094 (executing program)
2025/08/29 17:04:14 fetching corpus: 11661, signal 202039/208094 (executing program)
2025/08/29 17:04:16 starting 8 fuzzer processes
17:04:16 executing program 0:
sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, &(0x7f00000010c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001080)={&(0x7f0000000040)={0x1010, 0x453, 0x20, 0x70bd27, 0x25dfdbfd, "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", ["", "", "", ""]}, 0x1010}, 0x1, 0x0, 0x0, 0x800}, 0x8010)
sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000001240)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001200)={&(0x7f0000001140)={0x98, 0x1, 0x2, 0x801, 0x0, 0x0, {0x1}, [@CTA_EXPECT_HELP_NAME={0x9, 0x6, 'syz1\x00'}, @CTA_EXPECT_HELP_NAME={0xa, 0x6, 'H.245\x00'}, @CTA_EXPECT_NAT={0x64, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @CTA_EXPECT_NAT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}]}, @CTA_EXPECT_NAT_TUPLE={0xc, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}]}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x1}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000000)
sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001340)={&(0x7f00000012c0)={0x6c, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xe}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x6}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x6c}}, 0x0)
sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001440)={&(0x7f0000001400)={0x30, 0x0, 0x10, 0x70bd29, 0x8, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x66}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x4000000)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000001580)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001540)={&(0x7f0000001500)={0x30, 0x0, 0x4, 0x70bd28, 0x25dfdbff, {{}, {}, {0x14, 0x18, {0x101, @bearer=@l2={'ib', 0x3a, 'ipvlan0\x00'}}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4008840}, 0x4040040)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001600), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001640)={'wlan0\x00', <r1=>0x0})
sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001680)={0x30, r0, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x2, 0x56}}}}, [@NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x24040050)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001740)='./cgroup/syz0\x00', 0x200002, 0x0)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r2, 0xc038943b, &(0x7f00000017c0)={0x2, 0x18, '\x00', 0x0, &(0x7f0000001780)=[0x0, 0x0, 0x0]})
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000018c0)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001880)={&(0x7f0000001840)={0x14, 0x4, 0x1, 0x5, 0x0, 0x0, {0xa, 0x0, 0x9}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x1000)
r3 = fsmount(0xffffffffffffffff, 0x1, 0xf0)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000001940), 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_LINKS(r3, &(0x7f0000001a00)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x24, r4, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x200}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0xc5)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001a40)='/proc/stat\x00', 0x0, 0x0)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x24, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_COALESCE_TX_MAX_FRAMES={0x8, 0x7, 0x1f}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES={0x8, 0x7, 0xf3a7}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000890}, 0x48081)
sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000001dc0)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001d80)={&(0x7f0000001bc0)={0x1a0, r0, 0x200, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x24}, @void, @val={0xc, 0x99, {0x8, 0x5e}}}}, [@NL80211_ATTR_VENDOR_DATA={0x3b, 0xc5, "f15d02309fa5150512ea6e181ed7a127a8621da82df69df3bf7879fbd3e1994adc166176738efbf4e82311a9dff2e81471efd26bc7177d"}, @NL80211_ATTR_VENDOR_DATA={0xb4, 0xc5, "6b32d0aebe359368871eec5e8a7ffa3d8b9235eea26405e298614cdae680938df08da67321464ff50d6bd4628640341daa0642d56bef8031e95d9967d29dfb367a9111b1b33fdc1cce1dd5ffca15a70c867b4d71c2c34aa7804e471688a122df59993897fbc28a13dd002b9e38ed7de90f5a27aeb8ac3eed6280636339e335eae223ea832865a026a2eba9701a5ea07c40c7d2b4931943819a76cb57f7a7accad475efce7a082d612e86197a11450999"}, @NL80211_ATTR_VENDOR_DATA={0x77, 0xc5, "6f97460a25537961665aae62c99ad42020deaba869539696cb9555f3f68834312fc6fe8084ede53acf7e5599a335982c53f0fe64d56b5b205388e93d490a1dce87946db6c9dfeb753b255a7318d94533971d7431f37e6bbf287f92962e27673c3716e8ec482fabd8380d35afb2a57aa8389c32"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1f}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x5}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x588a6165967d0357}, 0x20000000)
r6 = syz_open_dev$vcsu(&(0x7f0000001e00), 0x9, 0x81)
sendmsg$TIPC_CMD_GET_MAX_PORTS(r6, &(0x7f0000001f00)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001e80)={0x1c, r4, 0x800, 0x70bd2b, 0x25dfdbff, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x48080}, 0x4084)
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000002080)={&(0x7f0000001f40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002040)={&(0x7f0000001f80)={0xa8, r0, 0x20, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x5, 0x1b}}}}, [@NL80211_ATTR_TID_CONFIG={0x14, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x6c, 0x11d, 0x0, 0x1, [{0x4}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x55}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x9}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa3}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x922}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x8b}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe5}]}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000)

17:04:16 executing program 1:
r0 = request_key(&(0x7f0000000000)='encrypted\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)='./]$(@-::-{\xc1-+!]/#-{$#,()\x00', 0xfffffffffffffffd)
keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffffd, r0, 0x0)
r1 = request_key(&(0x7f00000000c0)='big_key\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)='syz', r0)
r2 = add_key(&(0x7f0000000180)='user\x00', &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, r1)
keyctl$describe(0x6, r2, &(0x7f0000000200), 0x0)
r3 = request_key(&(0x7f0000000240)='pkcs7_test\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)='+\'@/%#(^&}\x00', 0xfffffffffffffffb)
keyctl$revoke(0x3, r2)
keyctl$setperm(0x5, r1, 0x20)
r4 = add_key(&(0x7f0000000380)='.dead\x00', &(0x7f00000003c0)={'syz', 0x0}, &(0x7f0000000400)="c3db4ee8b0905bf0a625", 0xa, r2)
keyctl$search(0xa, r1, &(0x7f0000000300)='id_legacy\x00', &(0x7f0000000340)={'syz', 0x2}, r4)
r5 = request_key(&(0x7f0000000440)='dns_resolver\x00', &(0x7f0000000480)={'syz', 0x2}, &(0x7f00000004c0)='+\'@/%#(^&}\x00', 0xfffffffffffffffa)
keyctl$KEYCTL_MOVE(0x1e, r5, r3, r5, 0x1)
add_key(&(0x7f0000000500)='keyring\x00', &(0x7f0000000540)={'syz', 0x2}, &(0x7f0000000580)="e19732ff15cce0efefe7848241f7185f39b1270fba66f55e526db5e00f127e66e137046474cab63176c280629afd8e8137a009ce2700cc99ba705fef39ddef5d004fc05f769b325e8f5612b40fc0455ff76c988b631f64b207656c55b75e7e3aa36e046ce6ecd201d8d16e9a048f7fc833951d679cbde936bdb5b341ad15607cac05460051f85c7a88a2e17eb3d9d60a7c536ce5166cc1d9b14969c885f7340394c4107b93151769b876b5e2d5ea12402fbe927fb3a3d7bd6da6b46ab18633b731187482f2d72595b7c09b2f93a5c5884526eb9c303021ceb716be7369b40a4f133c8a", 0xe3, r2)
r6 = add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x3}, 0x0, 0x0, r2)
add_key$keyring(&(0x7f0000000680), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, r6)
r7 = add_key(&(0x7f0000000780)='dns_resolver\x00', &(0x7f00000007c0)={'syz', 0x1}, &(0x7f0000000800)="122636329eb0533a7de3eb79049d8e3e3afa974bc2c102f826842d2996023e41d3f4591541e23546608412f8c1ced0b834b5f2", 0x33, 0xfffffffffffffffa)
r8 = add_key$keyring(&(0x7f0000000840), &(0x7f0000000880)={'syz', 0x1}, 0x0, 0x0, r2)
keyctl$link(0x8, r7, r8)
r9 = add_key$keyring(&(0x7f0000000940), &(0x7f0000000980)={'syz', 0x2}, 0x0, 0x0, r0)
keyctl$search(0xa, r2, &(0x7f00000008c0)='rxrpc_s\x00', &(0x7f0000000900)={'syz', 0x3}, r9)

17:04:16 executing program 3:
ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f511, &(0x7f0000000000))
io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000000040)="aeb0cef1253fab18874244816b410eaf07630f133a5836fecfb3", 0x1a, 0x8000}, &(0x7f00000000c0))
r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x6, 0x80e80)
clock_gettime(0x0, &(0x7f0000000180)={<r1=>0x0, <r2=>0x0})
utimensat(r0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{r1, r2/1000+60000}, {0x0, 0x2710}}, 0x100)
io_setup(0x4, &(0x7f0000000200)=<r3=>0x0)
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
r5 = syz_open_dev$vcsa(&(0x7f0000000340), 0x2, 0x48001)
r6 = ioctl$NS_GET_PARENT(r0, 0xb702, 0x0)
r7 = fsmount(r0, 0x0, 0x86)
io_submit(r3, 0x5, &(0x7f0000000800)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x4, 0xff, r4, &(0x7f0000000240)="1334560aca001efba30ef91f0694b4d05f511f909ddc73ee4c2957608464b54fc4734b171dfc81590fac91880b208faff0f0d1f9dbd681c20d573f6d59b01bb808519e6f3f9158b0f4e4d5f4bda93aba266f1a319bd29e0c9252eb24b06d507ef4aeb9cbe4c8074fb93a138c42095900071a9d640e4e22d3d1acd217abf7f9eb28a528d8b4f358c5f5eb6c6164ce480003225a7ad8a615d2070d1f6bb6f9f02a96c898a012fdea7ae7208a2e7f8cd0c369c81df998093f69951a1f6307fbcb2ee4d4", 0xc2, 0x8000, 0x0, 0x1, r5}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x3, r0, &(0x7f00000003c0)="86042fad4ea84ba666a25801b877a83c34ae9b690362589c0b5cb1f86e7fe51b34ae1bf99585d80bfc729c760e6354a403e74ed428e473d1dec5b783e5e3ee4e9e4b9ec7747b2d7014ad5f4963c7778b98692dcab1f6f09bf9a22e8c3a7848d516e65204af61ccb5d37b5bb063aaab04b553ceb3926c6a8a3c311b8c844d725eda660f873a6efd9df00610656f345c669b2a1e75b609fe7f03b9d619c8f8893be2deb92ec1d0ed73f5f775c557822c4244d3854fd35242ab25ad32fde19078a1f1fce19d0fc227c7df8b974c6ad1568486878813a20aa0b6ef9cf4df69d56dd4e73bda4d27b16efd607950", 0xeb, 0xaa, 0x0, 0x2, r0}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x6, 0x0, r0, &(0x7f0000000500)="0f8d98efd8aed2af0587e517241dddd8d4fc1a2fcdbb3ff3d86fc6e4e2c7b0d6582cf708b2bd572baed325b57fbcb793b061d3a1a992749a291423a67f50f87b48ebe989bd678e6adfe823f98e119f2d979a8a316921ace325c4800de4bb843a5bf4a624c78f68ed2d98937088e534692b672c057fc6ccc6ad91d4db0523196e168d0a454f1088a80a1156a5fbca36490830909884138ad73c2c300b020760db2d495f70ea5e2275157cd17f4aa9", 0xae, 0x0, 0x0, 0x3}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x6, 0x5, r0, &(0x7f0000000600)="9c947a8ff36de06b64235547ac348cf1d5e347bfd4ccf66e541aa587832a6a0fbddaa13881d1b8950485471efd465c7579f1b939e177b08e0c53fc2a86f1120fec41739632329ff5f72a4115ec8563e60388bd88c40d357f178ec1cc3284bd82b7b0a219b59080f051de1b00cb6d245ff6f834b0f786538c1fc02b763c99", 0x7e, 0x10000, 0x0, 0x3, r0}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x3, 0x7fff, r6, &(0x7f00000006c0)="e073130c60ef829448e6e03fabb888e06eadb365908018130356c8adb147985d04971b3764cad91e5f274fa00af3ce30672d0d9fb581a61d970deac8242c94178559209ea77625de954a4d9891e05a465a00c9d6bf6278bdb3bda6cf7af5df316e814e8439bbb56a06307be185121b77d4e1135e27bf0ae55aa0a43b36bbf225c54be6c6a175bcc5d73f7b515da4d70e1ab9b8cb1759a4feb90bd6405c837a534a639377b55bee653c593f67ab6e6431b660835710fe311a8ff3eb6dc437ede48240a408c249e75f015fcec6b25b53be3946e7cab87c75823f06e2d127a67c44becc", 0xe2, 0x5, 0x0, 0x0, r7}])
ioctl$HIDIOCGDEVINFO(r0, 0x801c4803, &(0x7f0000000840)=""/235)
r8 = socket$packet(0x11, 0x2, 0x300)
recvfrom(r8, &(0x7f0000000940)=""/15, 0xf, 0x10041, &(0x7f0000000980)=@ieee802154={0x24, @none={0x0, 0x2}}, 0x80)
r9 = syz_genetlink_get_family_id$gtp(&(0x7f0000000a40), r5)
sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x5c, r9, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r7}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x880}, 0x4004)
read$hiddev(r0, &(0x7f0000000b80)=""/107, 0x6b)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000c00)={0x2, 0x8002}, 0x4)
accept4$unix(r5, &(0x7f0000000c40), &(0x7f0000000cc0)=0x6e, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r4, 0x40286608, &(0x7f0000000d00)={0x54, 0x80, 0x100000001, 0x6c, 0x6, 0x7})

17:04:16 executing program 2:
ioctl$INCFS_IOC_READ_FILE_SIGNATURE(0xffffffffffffffff, 0x8010671f, &(0x7f0000000040)={&(0x7f0000000000)=""/14, 0xe})
setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000080)={0x5, {{0xa, 0x4e24, 0xfffffffb, @empty, 0x6f}}}, 0x88)
r0 = fsmount(0xffffffffffffffff, 0x0, 0x18)
sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x138, 0x0, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@WGDEVICE_A_PEERS={0x114, 0x8, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}, {0xe0, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x9}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "314c2ee101ea2b7ab7e6dc001ab7c6ba3f27b8012879360dd60e60f3744ba2ae"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "a7e7985a4f7d252364fd32735b7ca80355ffad91fc43c2eb984ba2360db60096"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0xf}, 0x3f}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "65a0fc11d782f834a8e2fd4cae0d3497a8c00f8e35a451d8fa35ca31d9f60387"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "130447bf795df83673bd9d71d6a13bb62f5a1a29067aadbacb0049c5483a23c1"}]}]}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x138}, 0x1, 0x0, 0x0, 0x4000000}, 0x40)
r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000001640)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r2=>0x0}], 0x10, "cf3d5025941e55"})
ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f0000002640)={r2, 0xf67})
r3 = dup2(r0, r0)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f0000003640)={{0x1, 0x1, 0x18, <r4=>r1, {0x2}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000003680)={{0x1, 0x1, 0x18, <r5=>r1, @in_args={0x4}}, './file0\x00'})
r6 = openat$dir(0xffffffffffffff9c, &(0x7f00000036c0)='./file0\x00', 0x10000, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_SEND(r3, 0xc0182101, &(0x7f0000003700)={0x0, 0x3, 0x4})
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r5, 0xc018937e, &(0x7f0000003740)={{0x1, 0x1, 0x18, <r7=>r6, @in_args={0x1}}, './file0\x00'})
fsconfig$FSCONFIG_CMD_RECONFIGURE(r7, 0x7, 0x0, 0x0, 0x0)
r8 = openat$vcs(0xffffffffffffff9c, &(0x7f0000003780), 0x208200, 0x0)
ioctl$TIOCSSOFTCAR(r8, 0x541a, &(0x7f00000037c0)=0x7)
r9 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000003800), 0x301280, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r8, 0xc0189377, &(0x7f0000003840)={{0x1, 0x1, 0x18, r9, {0x9, 0xfffffffb}}, './file0\x00'})
r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000003880)='./binderfs2/binder1\x00', 0x804, 0x0)
ioctl$BTRFS_IOC_GET_DEV_STATS(r10, 0xc4089434, &(0x7f00000038c0)={0x0, 0xa0, 0x1, [0x80000000, 0x8, 0x7, 0x2, 0x5], [0x2, 0x4, 0x50, 0x1f, 0x1, 0x8001, 0x6, 0xa38, 0x9401, 0x4, 0x39, 0x9, 0x4, 0x3, 0x10001, 0xffffffff, 0x6, 0x2, 0x1, 0x6, 0x6, 0x4, 0x7, 0x1f, 0x4, 0x7, 0x7fffffff, 0x7fffffff, 0xd3f, 0xffffffffffff7fff, 0x7, 0x1f, 0x0, 0x3, 0x18e2, 0x2, 0x6, 0x3fffffff80, 0x2, 0x5, 0x3, 0x1, 0x6, 0x3, 0x7, 0xffffffff, 0x3, 0x92, 0x5, 0x8, 0x0, 0x2, 0xfe, 0x2, 0x22, 0x10001, 0x80000001, 0x4, 0x0, 0x8ab6, 0x1, 0x2, 0x7c, 0x0, 0x2, 0x9, 0xfff, 0x9, 0x2, 0x10001, 0xea, 0x7, 0x3f, 0x8, 0x6, 0x9, 0x8, 0x8, 0x504, 0x7, 0x7, 0x3f, 0x2, 0x9, 0x8, 0x0, 0x1, 0x9, 0x2, 0x15, 0x4, 0xfffffffffffffff9, 0x4, 0x0, 0x7, 0x0, 0x401, 0x1, 0x8000, 0x6, 0x5ff, 0x100000001, 0x0, 0x4, 0x8, 0x401, 0x7, 0xef, 0x5, 0x3, 0xa2, 0x5, 0x4, 0x7ff, 0x10000, 0x80, 0x9ef7, 0x7, 0xffffffffffffff83, 0xff, 0x1000000000000]})

17:04:16 executing program 7:
move_pages(0x0, 0x3, &(0x7f0000000000)=[&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000800000/0x800000)=nil], &(0x7f0000000040)=[0x6, 0x9, 0x0, 0x8, 0x6], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6)
getpid()
r0 = gettid()
ptrace(0x8, r0)
wait4(r0, &(0x7f00000000c0), 0x1, &(0x7f0000000100))
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={<r1=>0x0}, &(0x7f0000000200)=0xc)
wait4(r1, &(0x7f0000000240), 0x2, &(0x7f0000000280))
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000340)={{0x1, 0x1, 0x18, <r2=>0xffffffffffffffff, {0x2}}, './file0\x00'})
ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f0000000380)=[0x4, 0x5])
r3 = pidfd_open(r1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f00000003c0)={{0x1, 0x1, 0x18, <r4=>r3, {0x89}}, './file0/file0\x00'})
ioctl$EVIOCSKEYCODE(r4, 0x40084504, &(0x7f0000000400)=[0x8577, 0x5])
ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f0000000440)=[0x2, 0xcf29])
ioctl$BTRFS_IOC_SPACE_INFO(r2, 0xc0109414, &(0x7f0000000480)={0x94a, 0x13e, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']})
r5 = inotify_init1(0x80000)
splice(r5, &(0x7f000000e380)=0x60f5, r2, &(0x7f000000e3c0)=0x3, 0x100000001, 0x4)
r6 = openat$full(0xffffffffffffff9c, &(0x7f000000e400), 0x80000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r6, 0xc0189373, &(0x7f000000e440)={{0x1, 0x1, 0x18, <r7=>0xffffffffffffffff, {0x8}}, './file0/file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r7, 0xc0189374, &(0x7f000000e480)={{0x1, 0x1, 0x18, r6, {0x8}}, './file0/file0\x00'})
fcntl$dupfd(r2, 0x406, 0xffffffffffffffff)

[   92.465730] audit: type=1400 audit(1756487056.859:7): avc:  denied  { execmem } for  pid=273 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
17:04:16 executing program 4:
ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x7, 'ip6tnl0\x00', {0x101}, 0x3})
r0 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x3938700}, 0x1, 0x1, 0x0, {0x0, r0}}, 0x6)
io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, r0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)
sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0x4, @media='eth\x00'}}}, ["", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x40000b0}, 0x8001)
fadvise64(r1, 0x0, 0x7, 0x3)
writev(r1, &(0x7f0000001440)=[{&(0x7f00000003c0)="dab2304563ee3521364fdb771aa627e8d434f45cc51665635555ee232b15d09fe92c71a1c166612f7efc49472c95b545a6a2f4f7b0a1bdc300d90ad3af9f6d0ca75ba58e9ed0bed0c548a8d4f3479288de22c2", 0x53}, {&(0x7f0000000440)="e2b8fe0fe138ffdafcff6a0b4312e0dd8d48685b685bd18a2cd542a9a0fcafb453c38ec42bd38fd006dc95e00fcf8f549eb6d5e1611df099a8b2ba3e902b648c5fd7c33f9fcfb4fad22a4a09ee0a5d834b585c7debbeb605b0fb3b2b2799640a874ed697bf52f45a0463e6c741e2984c50cb00aeb8d6650abc697bb21c0ae40042c051c787e907f845f2e0a3cd18ad9e680066d2cc884f33492cb176bd5680da914fe34b0e633a67957ec888afa83e16ba0822e000c7d5ea581cee0ea18aac2a8eac06e15794755fd3261a94f6682e9f664b6c6b5259469cead727f2c58480aa9bf8b675fe79aff34c7b93f6c7ea3cf0c42bc623f13625e3356b37ce1fa2048264b74dc83fcd28aa5cf27a5158f616e272f3f069d7933d22e0b06034b09edc07563839fb77674b7d470958d1d30cd8de135b049cd53b6b24f053ee851f40d35e6f2d3915a47d8a46a23acff57a4760f62fe875c42d3604a06f4d69565489e2acb51cbe76cb5c902592dbefd65641a44e0cd833c347eab28c50fc27f0bd32e6566b9c0cc108c9b68b0612b396c1003d01b674b613178c59b1c32f6fabe7c3e69adf10ecb23d2864317cf45454187c5470c5e90e784b9a577f7302eb71e2ad69eca67451339b256f5d19d19b1bfab5557657b13596538e9997d0fa0731395795512e6bbae06cfa7f1027dab33f266004fb70c69799c33661547896e2e9299d8757008d9f4a06e9739537101d681382913aa39b07283f5973509330276fae1e0c7b46c849df8d02a90dc2c9dcd2d672043e37d4348342a3fd00c2edab4cc983ad96a214340e7084dbd83197ae9314bd10912e3576e1ea97c41cce815d91d3905643af2df856fc2d10009fda59ad68346770f41d7727d19de6bcfbd5848fd205f6f8119b9d5e97d7bbb968e6dd37c04c86840c407d6ddef8635e3dc15144c2268d9dd879b355e2cc862cdc0e385eb5454632f23c8ed871f32d142cb71f7ced7d87dcbe9c80ceca40f55be35aca2d547afab9b8a7220a09012f2bc69584b726deb69836a878bc805b87df8ab19dd449e6f6fe51943d8669bb2dc83dd9517196a63b954b5412a6fdfd9ef7d3411f929268b3425f226d9f12dcd4ccb1261fbff2bfac1fe6a97d5fbdb4b84776adc51ed8ddbd73c7b2349b38d49f93e5e9bca157561c9f37ee4933fcf2974a7b56e47336057472c268372544956810446865cd35193f75497bfdb5af1242200f49d3b588e973c8379f97d0ea394ff0b1000e0a4c453cbea82d19ef8e1d1a2ec553a6579babe40a531538739a03fbab0c566cfc7793abf6b2465621ea693e06990db6cb8b231cbc864d3ee18ce66cf67a46648de897f1fb4eb1b35a340119bff01b8e75bd92cb93b5f260c8b97dcc46580b4a87603ad06655c4682bd3bf8d363d7a2c45b863df6c0cecbc9049da0c4b0efa5c85972f81d60f3e477aaecdeda9bd912d6aeeea16007e59cd5e41547d11f9bfb20140fb545ab7b15609c48139ed9e4d411974483604d11b40d1ee574c88417ddefe756e2eebde8193a195b8e4c76e9929e2025b528d66cf870d695d4610e05e3f0d11be5c740061b33e0fb82aa02062d17950c653e31151a43d0f2262d55136b881d39565b990807f24d3934712ba8dd2e57c51847392ddb05c938b1ddc1c719f70db4941861e8824a8f875db2c43bbe981ba8825d92b282740b9af860c87f79f8a5ce167cce97fa43b0e9ce70bd0d4f3cdc24f08e519c6d885f71bbd149575ab607bb48adc2e5251f8a07436342c35430bd3e7bfdda7d3314723371ecaf88ebeee6c4601b8e6c0429e5dd006e859475911cadd6174129d16b86edbe21a61dc0d1be775c6d59dff28979e36b0616bc3ec077c3ab50d02dabb5f0bf4acff82220468f72ae06cad4ad7c12c7536d739df5227e56c6c807f1b07fc5dc38122a0bf0abf883df19de27975840a0755195100f0d276c400bc976d00c61ae385dcc63f21c438fce6398d8fb062f2c76ad8821654915e90092c6cc51bb8f873272dfb762e293c99f1bc61dc11ac4e2bd5983300e5d57550bc04ef56ae693d60852095a8891f9af9fe6e5428ded753fbd095555aad2773cfaa9e6b804f8e755e8d980cdfde3f13fe0db01332b566a2114a83673ccc470b5fbedef266c6ebfb9b20438b9832ba9e7edd7123fdf51cb0623db8d8af5a4a118802870625a1ce85cac6802ebed441a9bcd9af25c5f74bba879bd235ef52cbaeb2087bc7fdc8e1156b7c086cb64a4d424ca00ad16a058f1f982bea7aae68bdcbd797ed5969da209b38c044d29664e95766427cbec796b5c94a6c3eb4ce29f8a99f3e6ff7afd7b6d988184ed9040231cdcb1fb76dee77c54753d123290858960c6e01b754cd609eb93e50ac566115caff8d7be7aeff66b170dd3a95c6245831858e26578be9e97a0a953bb6f7730ef693d1c5bc65a394bd226801a6826621d9e6eddc10c0f966edf9b5d021cc0edb81bdd9893b1feba52222bd704726dfc45b919872a08ec38e48f2bfee66f507aca8904de6dd66160fbe61d7c863ff7419ec43c458089a4a3eaecb376ec4b07739b72b7855ec06aa60af6b6dd69654228b9691b1a2f276fd4aef66789c3047e14fcd7f398f36ce19f568564ca0a93eafc11e34012947de03b128c63e632479399dd403cc8f7dad9c0738f0a1211a8b2ba72fc7b8da551ad5800491ab64ce1bc2e9106d7075db6f1f4776ec89ea8412c50b7e6c82d82291294d82baf45353462e7050c0eddbae012c8e8c14ef168a8ba889fb366c0dfb03b5fbc374f2ffda55d1e3e16e762c08d1006ef4825faf8cb7e74585bb948e5d296569afa1a744c7e5a32b5ad5cc276a9f715b58b5648e533820a03a11c606f5003ba39d9549ea6bbd540800f48254d47d9f70dd74c8582167dbdd21f94c51d53315804c1fe7f75d0c8894b4e54133ad31782291aa9bcdc41f5d9fad86d617c16c5639d50ef905e27633629e959f62b5252b64ed00b0fc046c14285b2d3e17829d9404f10476902b42706a609d11734c45d31f628a03f63bd3d383af5d065496a24e6b8d02b72250d8606c51eba168001b11213a8c2c7e9abd6d8d98c375ec3cd837015de26992573a5d134eca0c8da98c97b86c1be5decd02aeec3c2758da3517dc4d29c5d534e820f091e06179e9ccc39a6bc50de130b3a97ec98d80ace623b8a9b7477d9aae8891b9191250db4cfc4ba02bb10272cb6ecf3e3937c9d7847c37000f14970610e4b54eeba0c78dadb4f466ec147ad0dfb19016868e8f1adadfbe671a7a72af7f4f9576d270f3be08b679c8d2a2b5208d79c42e617aa2c251f3a697661b477bbd99d3fbde5c860f1136ac12785b927e412cc13a8ef3370840f178b47457acef17f10b18bdb8a8131b7e98ac5365c8ccd98fa05c5cad24f61a0e978482ea9af9c8a7b30c8aaf28b2f25a4003fed6fad84d767364f6fd028d93defd660187b2285dc67b0d3b0dd152acbb56cea057a98313d007fb7c474ff4546bac3ebf7faa7e0a5706a082ef08b6d687d11f143dcbe7efc013c81f59983cce03a2439efd7172af4b75928f37fdf5875542ff20a3d1671fc04e9d38859528fdde259823e5a556c6119d408efa25a58586a8c68c2404ad909c8c3e49210cd589b16af02a60067aab348274f7f404bb23abe02c5c9cda223c3637dafb8d05821b321ce2777449fae7731df0883747c92cf16401f01b80d6cff6ba7335f0228d0511714faf0ea57deaff81ca3b82758bdcbd91e991e81f04117ecde83ab605fae84e9318f9724cbf2ae517351042ef57a34b86b9162c8667bee80552ba11853f735fb07ad90cd000bac4a9d6038c9d6543b90a62530138ae2dc9dba469684be9d54a505abfa4cd39af5541715b1a58c3409a3fcba04a82a1badd2b8a4fdff55d4c78d63cac17f4ed38c82080190afa013ce915c37d2b29ef0c6db9032a52adea32608d435c020d63be591e61eb029222d18a75de053fcb8424c9bf897cb55300da9d62f5f052f93895b08c1e1eaa9af5a24c4bd6b53842362d54b24c0178a0eadedb549774d93788aacdf050ec4b69517e67d348937ae61568b7b15627520ecc4664f17415872190bb8444a513fd7ed042f9785e632adf842e7a150758ca9d4f6b9a25ab6304989f53a6f59f592d750db1611666baae93da39ef1479b0b205414a49e3edd55da8430091e3e3ae412196761f7129d66c8b112c7cfe38c93a94dd56bc6d7eb9fff14fa038e2985c127b66686df7a3c08771a7c94fb19d1f7f1073d1d81ec1b63a444b496deab5397791e8b88d7cd513a7ef4263ab2c177d1b988ee03a50164b305486b5887af410fca55aa5882f2e9b06852034c6559aa83af6e68e7ec8355db0bed5db2b694179846c2988abbc7733bb3ae9f9a978ab78b7e769f94590ead326aaf182a3e74283ff6d284020db743b45415649f96b28d58273672fa400f62e38d0ac2605f740514df89452ee2a7e981a35b22d48c28dc720d30882adeaa2bf6aa48ab8b0ee0dfb5d85c1fb4cc781473d26d4d58a80f02d5eb0903fce448eda04a87b4d56df9db1f77c3232af4ad30955347739ba0519d4d1ce26a8e86f20387ce97510ad4639ba3fc5719ae7a5fe67d90402ce6d211c4f620c64b5fc86f0160d479c8de185c2e00fd7b3be579134ee3ca203334ebfa4c7beb70447680855e1e3a7aa070d812fa41b80db47ea9da31883df8150912ce45c5be57aa4f5e3efd2684034767537b1b501fe3781cd4a6980e05278b306b5b9206fe2b9a15ee8698e28a872b1192991b673b824530e080d16fd16b75e3ba6129531e9a089cd64387749a900b0675a562b67a445f1a4820536f9bcf476e58f73f6a44dd231b4e41bd19253ca63b967e03861167554ce83a0da01a1d1df6bfcef859c47639d50e33b5b7fc5d1a2c6db6d3c96b02ef71216d708c1191132ffad07efc0c4c2962423605b2be6effb7d60181653a211202046d34a180017ef26b49f04588f310cc0920803ff7857a8c30d7a4ac46fbdc6cc62419fa9e7808ba15a3575e55021fda24567929680a29417326ee6e8552d24b892dec16cf5d32605454b6938f8d797b56956a209d27fba322a89f6d7c24de89b99a3764410098428135731c674cf0f9f8f00a4c52b9be69dbcee30b1579a471e34fb117e6b0c1edd31a7ad4f01985fa324533e6a84cc3fd930b60e3a8b8f28b9fbff3ffd6adec605020391224e33c4b9dadfb6f4cf9820e02709f862cdd57eee2c18d60b7c4c74db65df971fcb0fbae5b957c785f22374c6ad80eff3c5888479c51f809dd50fca0deeb1efaffddfd2f8094410d96e40172a3ffe55e75416b1c1a3bc7a90dd1337bd0b2738e95b24be0ac3053defa3b9c8de33affc89198a7dd341da4629d34de228b33ad9fa55af8c0a5a3d46472435d66b3e0c2df21783d147754ebcc70dba5d9a30073fb50efe1593d9cb5aabe205816d3f008b2eaa93be3db4d02fa70ba0eddb4f79eb023b774a6f8cafb1bee09eea0aeaf36608793326a1d47d3d46c85feaa54283ade8b69f034f7316dfb829721aa00cd5c22e2b4983fc463dd61decd45d6cbd8c11f4b530850ca8ce687f32e053feb6b7058f5acf010e235abf096d829fd5994878db1c6f346657bb417e7d2d669d6d1c5250441e1ec3f2cf54dd3c515f1ad943b2d9934f55e9b13c682a9d857624641a1993f5ef8454fd403ecdcde426a69e35a3a2ba85cb96dc744fce5b40cd9e9e43894f5fb0f242aa9e06dec18225c5ceb84c44edb7da600f9d590cfa7614be95efd089294dc2a2", 0x1000}], 0x2)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
r3 = syz_io_uring_setup(0xfb3, &(0x7f0000001480)={0x0, 0xb931, 0x1, 0x2, 0x279}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001500), &(0x7f0000001540)=<r4=>0x0)
syz_io_uring_submit(0x0, r4, &(0x7f0000001580)=@IORING_OP_WRITE_FIXED={0x5, 0x4, 0x4004, @fd=r2, 0x7, 0x983, 0x7, 0x3, 0x1, {0x1, r0}}, 0x9)
r5 = openat2(0xffffffffffffffff, &(0x7f00000015c0)='./file0\x00', &(0x7f0000001600)={0x4a0000, 0x1, 0x10}, 0x18)
splice(r5, &(0x7f0000001640)=0x8, r3, &(0x7f0000001680)=0x8d, 0x5, 0x0)
sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f0000001780)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x34, 0x0, 0x20, 0x70bd25, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0xc, 0x4, @l2={'eth', 0x3a, 'dummy0\x00'}}}}, ["", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x8004)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000017c0)=0x2)
r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0xa, 0x0, r6)
sendto$inet(r5, &(0x7f0000001800)="217847f7a72354de7a012b6d306189e165d90dbdb86177a4b84dc300b2bd8290514a8b815701e2b6a04b8c0d58ce", 0x2e, 0x4000010, &(0x7f0000001840)={0x2, 0x4e23, @loopback}, 0x10)
syz_io_uring_setup(0x4691, &(0x7f0000001880)={0x0, 0xba32, 0x2, 0x2, 0x28e}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001900), &(0x7f0000001940))

17:04:16 executing program 5:
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000040)={{{@in=@private, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@private}, 0x0, @in6=@empty}}, &(0x7f0000000140)=0xe8)
statfs(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=""/200)
r2 = creat(&(0x7f00000002c0)='./file0\x00', 0xa8)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000380)={'syztnl2\x00', &(0x7f0000000300)={'syztnl1\x00', r1, 0x4, 0x2, 0x2, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0, 0x7888, 0x1, 0x0, 0x7}})
r3 = accept$unix(r0, &(0x7f00000003c0), &(0x7f0000000440)=0x6e)
ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000480)={0x9, 0x0, 0x7, 0x10001, 0x3, [{0x3b, 0x5, 0x100, '\x00', 0x400}, {0x8, 0x1ff, 0x200, '\x00', 0x4}, {0x2, 0x400, 0x40}]})
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000580)={{0x1, 0x1, 0x18, <r4=>r2, {0x1000}}, './file0/file0\x00'})
getsockopt$ARPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x63, &(0x7f00000005c0)={'ah\x00'}, &(0x7f0000000600)=0x1e)
r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x12, 0xffffffffffffffff, 0x10000000)
r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, r5, &(0x7f0000000640)=@IORING_OP_POLL_REMOVE={0x7, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r6}}, 0x6a6d)
ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000000680))
connect(r2, &(0x7f00000006c0)=@vsock={0x28, 0x0, 0x0, @host}, 0x80)
openat$dir(0xffffffffffffff9c, &(0x7f0000000740)='./file0\x00', 0xc00, 0x86)
recvmsg(r4, &(0x7f0000003940)={&(0x7f0000000780)=@generic, 0x80, &(0x7f0000003840)=[{&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000001800)=""/4096, 0x1000}, {&(0x7f0000002800)=""/4096, 0x1000}, {&(0x7f0000003800)=""/46, 0x2e}], 0x4, &(0x7f0000003880)=""/192, 0xc0}, 0x40012102)
ioctl$F2FS_IOC_GET_FEATURES(r4, 0x8004f50c, &(0x7f0000003980))
r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, r7)
setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000003ac0)=@broute={'broute\x00', 0x20, 0x0, 0xc0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20003a00], 0x0, &(0x7f00000039c0), &(0x7f0000003a00)=[{0x0, '\x00', 0x0, 0xfffffffffffffffd}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x138)

17:04:16 executing program 6:
r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r0, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}]}, 0x68}}, 0x0)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_DEL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, r1, 0x4, 0x70bd2c, 0x25dfdbfd, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000080}, 0x40000000)
sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0xbc, 0x1, 0x9, 0x401, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x327}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7}, @NFCTH_TUPLE={0x70, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x4c80cbe9c00c98d5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @remote}}}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x8}}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xde36}]}, 0xbc}, 0x1, 0x0, 0x0, 0x2404c880}, 0x4808)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0xb4, r1, 0x800, 0x70bd25, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x5}}, {0x8, 0xb, 0xffff0000}, {0x6, 0x16, 0x100}, {0x5}, {0x6, 0x11, 0xfff7}, {0x8, 0xb, 0x400}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x200}, {0x6, 0x16, 0xb7}, {0x5}, {0x6, 0x11, 0xffc1}, {0x8, 0xb, 0x6}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x9840}, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$NLBL_UNLABEL_C_ACCEPT(r2, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x28, r3, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000080}, 0x8000)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000740), r2)
sendmsg$NL802154_CMD_SET_PAN_ID(r2, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x13141402}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x60, r4, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0xffff}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x44041}, 0x4040)
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000008c0), r2)
sendmsg$NL802154_CMD_NEW_INTERFACE(r2, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x20000004}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x1c, r5, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040041}, 0x8001)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000a00)={'wpan0\x00', <r7=>0x0})
sendmsg$NL802154_CMD_GET_INTERFACE(r6, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x34, r5, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x34}, 0x1, 0x0, 0x0, 0x408c0}, 0x24004801)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b40), 0xffffffffffffffff)
sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x20, r8, 0x200, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x6, 0x4a}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4048045)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000c80)={{{@in=@multicast1, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0}}, {{@in6}, 0x0, @in=@broadcast}}, &(0x7f0000000d80)=0xe8)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x8020081}, 0xc, &(0x7f0000001340)={&(0x7f0000001200)={0x140, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x94}, 0x4)

[   93.695196] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   93.697234] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   93.700786] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   93.704735] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   93.707561] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   93.754209] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   93.765741] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   93.768054] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   93.771579] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   93.772955] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   93.774615] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   93.775955] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   93.780135] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   93.782317] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   93.784087] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   93.788922] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   93.790524] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   93.792757] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   93.794940] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   93.803915] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   93.824946] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   93.830908] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   93.838981] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   93.843516] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   93.846914] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   93.850917] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   93.857931] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[   93.858584] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[   93.864221] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[   93.865333] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[   93.873538] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   93.874635] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[   93.875749] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[   93.880115] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   93.894248] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[   93.895736] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[   93.908743] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   93.913649] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[   93.917216] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[   93.920644] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   95.723832] Bluetooth: hci0: command tx timeout
[   95.851437] Bluetooth: hci3: command tx timeout
[   95.852814] Bluetooth: hci2: command tx timeout
[   95.853169] Bluetooth: hci1: command tx timeout
[   95.915518] Bluetooth: hci4: command tx timeout
[   95.979734] Bluetooth: hci5: command tx timeout
[   95.981764] Bluetooth: hci7: command tx timeout
[   95.981794] Bluetooth: hci6: command tx timeout
[   97.771453] Bluetooth: hci0: command tx timeout
[   97.899449] Bluetooth: hci2: command tx timeout
[   97.899469] Bluetooth: hci3: command tx timeout
[   97.899921] Bluetooth: hci1: command tx timeout
[   97.966469] Bluetooth: hci4: command tx timeout
[   98.027533] Bluetooth: hci7: command tx timeout
[   98.027983] Bluetooth: hci5: command tx timeout
[   98.028680] Bluetooth: hci6: command tx timeout
[   99.820591] Bluetooth: hci0: command tx timeout
[   99.947482] Bluetooth: hci1: command tx timeout
[   99.947505] Bluetooth: hci3: command tx timeout
[   99.947923] Bluetooth: hci2: command tx timeout
[  100.012611] Bluetooth: hci4: command tx timeout
[  100.076507] Bluetooth: hci6: command tx timeout
[  100.076918] Bluetooth: hci5: command tx timeout
[  100.076940] Bluetooth: hci7: command tx timeout
[  101.868738] Bluetooth: hci0: command tx timeout
[  101.995492] Bluetooth: hci1: command tx timeout
[  101.995964] Bluetooth: hci2: command tx timeout
[  101.998390] Bluetooth: hci3: command tx timeout
[  102.059499] Bluetooth: hci4: command tx timeout
[  102.123526] Bluetooth: hci6: command tx timeout
[  102.123964] Bluetooth: hci5: command tx timeout
[  102.124608] Bluetooth: hci7: command tx timeout
[  132.453531] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  132.454203] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  132.631910] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  132.632572] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  132.818511] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  132.819134] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  133.048865] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  133.049500] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  133.171766] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  133.172422] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  133.305162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  133.305819] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  133.539951] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  133.540597] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  133.715341] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  133.716001] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  134.247466] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  134.248656] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  134.328744] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  134.329661] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  134.724709] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  134.725715] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  134.821278] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  134.822421] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  134.885422] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  134.886047] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  134.927509] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  134.928173] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  135.286993] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  135.288236] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  135.338821] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  135.340225] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
17:05:12 executing program 2:
mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x0, 0x0)
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000)

17:05:12 executing program 6:
fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f0000000000)=0x5)
r0 = gettid()
rt_sigqueueinfo(r0, 0x7, &(0x7f00000000c0))

17:05:12 executing program 7:
syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi={{0x22, 0x7f}, {0x9, [{@none, 0x80, 0x2, "2571ac", 0x6, 0x1}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x4, 0x40, "f3e2f6", 0x69, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x6, 0xfc, "3a4303", 0x800, 0x5}, {@any, 0x3, 0x9, "d597d2", 0x6, 0x13}, {@any, 0x20, 0x0, "acc749", 0x5, 0x5a}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3, 0x2, "b88488", 0xa8c, 0x3}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x6, 0x1f, "cfc133", 0xa60e, 0x1}, {@any, 0x4, 0x5, "f76e7a", 0x2, 0xff}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x67, "a58ea6", 0xff, 0x6}]}}}, 0x82)
syz_emit_vhci(&(0x7f00000003c0)=@HCI_VENDOR_PKT, 0x2)
syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2)
syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x81, 0x0, 0x804}}}, 0x7)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000280)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x0, 0x14}, @l2cap_cid_le_signaling={{0x10}, @l2cap_ecred_conn_req={{0x17, 0x3, 0xc}, {0x401, 0x6a7, 0x4, 0xff, [0x1, 0x6]}}}}, 0x19)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000))
syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="030000502bbbe9325c2f4825ed4e2e792fdda73f228ffd7503c16d40f44ecf7770235540cb73eb566be07629ad9d0d92926932bbae11c89a05bab2b57521c5d80fdc4c248dbc73be336b0e1cb2cf1f2859a4c280e00466"], 0x54)
syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="02c91014001000050017000ce4bd85cf500772f10001800400ccc3cf49b6000300"], 0x19)
getdents64(r0, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000240)=@HCI_VENDOR_PKT, 0x15c)
syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x0, 0x14}, @l2cap_cid_signaling={{0x10}, [@l2cap_move_chan_cfm={{0x10, 0x0, 0x4}, {0x8, 0xfe00}}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0xfff8, 0x1}}]}}, 0x19)
syz_emit_vhci(&(0x7f00000005c0)=ANY=[@ANYBLOB="04480f080003c80001c8a43d4d14eb3114007b684370cc7d3452897f7ab2858cc15eecd1795cd8d512b4b2d079160da36d8af86514c82f10a07ae00a50e3939ae66917d70b26a628859ba31307f7efc3b4a19dc6be12a274d95a86cf06918a3c6f34636c4d0796b442f79d0599db6299814695da1bc36fbef4621e804eceeee4b704ece077754414eb21c03e8de4e561b3e304698dba04ebe4ae35f024703e469a0b761d2589728911e51735f57ccfe2690b0ab7c57c73b08eeffa96d63b9b05b159d1389e65cf36628ebc0b57c4160c12bc4b09367d9844c2167b59713a5d3c2d3094ca4126e88d05dc0e8f175218fd8283a542cb39242e5a9411ba82aaeb4f21b9489a1d749c5342a811cc222b2673e6bee0dafee069d12c776da0"], 0x12)
syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT, 0x2)
r1 = syz_open_dev$sg(&(0x7f0000000380), 0x1fb, 0x2000)
ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB])
syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2)
syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="02c9e00a8da2fc2600131b42038000"], 0xf)
syz_emit_vhci(&(0x7f0000000500)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x8c}, "b85bd39cdd9c8132caf9a52aaed54f1beac66b0d20609795f390b6e6bd67517df18abe884c05ed0745a531794b2f525f129dab6f54a99c60c7e214bf21b034e69f08e326aef661b51cb4e9cd7eeb3572dd65d0bb6a60899dde430f28eb92f08f1a14ea87df5dec048a0b787386a6a3b5216632f1f1a8f5be29ffb813b5b0c5905eb9d38e163ef73386531ce3"}, 0x90)
clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0)

17:05:12 executing program 4:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
fcntl$setownex(r1, 0xf, &(0x7f0000000300))
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'})
ioctl$KIOCSOUND(r1, 0x4b2f, 0x7)
ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0xfffffffffffffffc)

17:05:12 executing program 3:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8df}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
r2 = getpid()
pidfd_open(r2, 0x0)
perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0xa3, 0xb8, 0xab, 0x6, 0x0, 0x8, 0x100, 0x6, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x81, 0x1, @perf_config_ext={0x8, 0x80000000000003f}, 0x2180, 0x0, 0xffffff80, 0x2, 0x4d, 0x4, 0xfffc, 0x0, 0x8000, 0x0, 0x2}, r2, 0xb, r0, 0x1)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x12, r1, 0x0)
syz_memcpy_off$IO_URING_METADATA_FLAGS(r3, 0x0, &(0x7f0000000100), 0x0, 0x4)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x6f5a, &(0x7f0000000140)={0x0, 0xaddf, 0x0, 0x1, 0x34b, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200))
r4 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0)
r5 = dup(r4)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, 0x12, r5, 0x0)

17:05:12 executing program 1:
syz_genetlink_get_family_id$team(&(0x7f0000000180), 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=ANY=[@ANYBLOB="020800003c2dafbb62c32e291709ee1644d9ab9cce0abef729a25e5ddf186c7349bc2d5c430707b5ae6a6810fa4a35ba2a9c4d1b880d369089d10b951d01832caa3ed0c09cdcbe0e627c5dd43f15a6689dc2ff837c3fa32f4afe6d272b4c1aa9ef17c242ce5a7643fa5568ecd215d9f296d275a9fe722ac88a7b11a0a042a907a52523c981897924c47cb85e8a", @ANYRES16=r1, @ANYBLOB="050000000000000000007e00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0)
syz_genetlink_get_family_id$SEG6(&(0x7f0000000000), r0)
syz_genetlink_get_family_id$SEG6(&(0x7f0000000240), 0xffffffffffffffff)
fcntl$setflags(r0, 0x2, 0x1)

17:05:12 executing program 5:
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000040)={{{@in=@private, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@private}, 0x0, @in6=@empty}}, &(0x7f0000000140)=0xe8)
statfs(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=""/200)
r2 = creat(&(0x7f00000002c0)='./file0\x00', 0xa8)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000380)={'syztnl2\x00', &(0x7f0000000300)={'syztnl1\x00', r1, 0x4, 0x2, 0x2, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0, 0x7888, 0x1, 0x0, 0x7}})
r3 = accept$unix(r0, &(0x7f00000003c0), &(0x7f0000000440)=0x6e)
ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000480)={0x9, 0x0, 0x7, 0x10001, 0x3, [{0x3b, 0x5, 0x100, '\x00', 0x400}, {0x8, 0x1ff, 0x200, '\x00', 0x4}, {0x2, 0x400, 0x40}]})
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000580)={{0x1, 0x1, 0x18, <r4=>r2, {0x1000}}, './file0/file0\x00'})
getsockopt$ARPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x63, &(0x7f00000005c0)={'ah\x00'}, &(0x7f0000000600)=0x1e)
r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x12, 0xffffffffffffffff, 0x10000000)
r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, r5, &(0x7f0000000640)=@IORING_OP_POLL_REMOVE={0x7, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r6}}, 0x6a6d)
ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000000680))
connect(r2, &(0x7f00000006c0)=@vsock={0x28, 0x0, 0x0, @host}, 0x80)
openat$dir(0xffffffffffffff9c, &(0x7f0000000740)='./file0\x00', 0xc00, 0x86)
recvmsg(r4, &(0x7f0000003940)={&(0x7f0000000780)=@generic, 0x80, &(0x7f0000003840)=[{&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000001800)=""/4096, 0x1000}, {&(0x7f0000002800)=""/4096, 0x1000}, {&(0x7f0000003800)=""/46, 0x2e}], 0x4, &(0x7f0000003880)=""/192, 0xc0}, 0x40012102)
ioctl$F2FS_IOC_GET_FEATURES(r4, 0x8004f50c, &(0x7f0000003980))
r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, r7)
setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000003ac0)=@broute={'broute\x00', 0x20, 0x0, 0xc0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20003a00], 0x0, &(0x7f00000039c0), &(0x7f0000003a00)=[{0x0, '\x00', 0x0, 0xfffffffffffffffd}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x138)

17:05:12 executing program 0:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone3(0x0, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f0000000080)={0x2, [0x0, 0x0]})
r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0x40086607, &(0x7f0000000640)=ANY=[@ANYBLOB="0006"])
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)

[  148.619015] audit: type=1400 audit(1756487113.014:8): avc:  denied  { open } for  pid=3920 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[  148.619215] audit: type=1400 audit(1756487113.014:9): avc:  denied  { kernel } for  pid=3920 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[  148.628495] EXT4-fs warning (device sda): ext4_group_extend:1862: can't shrink FS - resize aborted
[  148.628586] audit: type=1400 audit(1756487113.022:10): avc:  denied  { write } for  pid=3920 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
17:05:13 executing program 5:
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000040)={{{@in=@private, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@private}, 0x0, @in6=@empty}}, &(0x7f0000000140)=0xe8)
statfs(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=""/200)
r2 = creat(&(0x7f00000002c0)='./file0\x00', 0xa8)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000380)={'syztnl2\x00', &(0x7f0000000300)={'syztnl1\x00', r1, 0x4, 0x2, 0x2, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0, 0x7888, 0x1, 0x0, 0x7}})
r3 = accept$unix(r0, &(0x7f00000003c0), &(0x7f0000000440)=0x6e)
ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000480)={0x9, 0x0, 0x7, 0x10001, 0x3, [{0x3b, 0x5, 0x100, '\x00', 0x400}, {0x8, 0x1ff, 0x200, '\x00', 0x4}, {0x2, 0x400, 0x40}]})
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000580)={{0x1, 0x1, 0x18, <r4=>r2, {0x1000}}, './file0/file0\x00'})
getsockopt$ARPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x63, &(0x7f00000005c0)={'ah\x00'}, &(0x7f0000000600)=0x1e)
r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x12, 0xffffffffffffffff, 0x10000000)
r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, r5, &(0x7f0000000640)=@IORING_OP_POLL_REMOVE={0x7, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r6}}, 0x6a6d)
ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000000680))
connect(r2, &(0x7f00000006c0)=@vsock={0x28, 0x0, 0x0, @host}, 0x80)
openat$dir(0xffffffffffffff9c, &(0x7f0000000740)='./file0\x00', 0xc00, 0x86)
recvmsg(r4, &(0x7f0000003940)={&(0x7f0000000780)=@generic, 0x80, &(0x7f0000003840)=[{&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000001800)=""/4096, 0x1000}, {&(0x7f0000002800)=""/4096, 0x1000}, {&(0x7f0000003800)=""/46, 0x2e}], 0x4, &(0x7f0000003880)=""/192, 0xc0}, 0x40012102)
ioctl$F2FS_IOC_GET_FEATURES(r4, 0x8004f50c, &(0x7f0000003980))
r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, r7)
setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000003ac0)=@broute={'broute\x00', 0x20, 0x0, 0xc0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20003a00], 0x0, &(0x7f00000039c0), &(0x7f0000003a00)=[{0x0, '\x00', 0x0, 0xfffffffffffffffd}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x138)

[  148.682663] Bluetooth: Unexpected continuation frame (len 20)
[  148.702826] EXT4-fs warning (device sda): ext4_group_extend:1862: can't shrink FS - resize aborted
17:05:13 executing program 1:
madvise(&(0x7f0000904000/0x3000)=nil, 0x3000, 0x10)
mlock(&(0x7f0000f13000/0x1000)=nil, 0x1000)
mlock2(&(0x7f00008b6000/0x2000)=nil, 0x2000, 0x0)
madvise(&(0x7f00008b6000/0x3000)=nil, 0x3000, 0x12)
munmap(&(0x7f0000904000/0x4000)=nil, 0x4000)
madvise(&(0x7f00008b6000/0x4000)=nil, 0x4000, 0x14)
mremap(&(0x7f00008b7000/0x3000)=nil, 0x3000, 0x2000, 0x4, &(0x7f0000ffb000/0x2000)=nil)
mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0)
munmap(&(0x7f0000906000/0x2000)=nil, 0x2000)
madvise(&(0x7f0000904000/0x4000)=nil, 0x4000, 0xb)
munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000)

[  148.705637] Bluetooth: hci6: SCO packet for unknown connection handle 0
[  148.705773] Bluetooth: Unexpected continuation frame (len 20)
[  148.710986] Bluetooth: hci6: link tx timeout
[  148.712743] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa
[  148.768984] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s
[  148.769848] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] 
[  148.770476] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present
[  148.771023] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00
[  148.771650] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 2
[  148.772836] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  148.773640] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  148.774330] Buffer I/O error on dev sr0, logical block 0, async page read
[  148.790556] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  148.791789] I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  148.793480] Buffer I/O error on dev sr0, logical block 1, async page read
17:05:13 executing program 6:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0)
r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0)
syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4)
r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff8943, 0x0, @perf_config_ext={0x4000, 0x8000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x2)
mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000)
munlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040))
madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15)
mlock2(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x0)
r3 = open_tree(r0, &(0x7f0000000080)='./file1\x00', 0x102)
r4 = fcntl$dupfd(r2, 0x0, r2)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4}, './file1\x00'})

17:05:13 executing program 0:
madvise(&(0x7f0000870000/0x4000)=nil, 0x4000, 0x17)
pkey_mprotect(&(0x7f0000871000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff)
mlock(&(0x7f0000871000/0x3000)=nil, 0x3000)
mbind(&(0x7f0000873000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x2)

17:05:13 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8941, 0x0)
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x60, 0x0, 0x2, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xa}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x31bf0b29}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x40004)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmsg(r1, &(0x7f00000001c0)={&(0x7f0000000000)=@nl=@unspec, 0x80, &(0x7f0000000180)=[{&(0x7f0000000080)="ec25aff3", 0x3}, {0x0, 0x4000}], 0x2}, 0x0)

[  148.822026] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  148.825654] I/O error, dev sr0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  148.827311] Buffer I/O error on dev sr0, logical block 2, async page read
17:05:13 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000000)=0x4, 0x4)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000a00000006000180180001"], 0x44}}, 0x0)

[  148.873812] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'.
[  148.900085] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  148.901622] I/O error, dev sr0, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  148.903076] Buffer I/O error on dev sr0, logical block 3, async page read
[  148.932113] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  148.933264] I/O error, dev sr0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  148.934555] Buffer I/O error on dev sr0, logical block 4, async page read
[  148.944023] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  148.945172] I/O error, dev sr0, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  148.946659] Buffer I/O error on dev sr0, logical block 5, async page read
[  148.948187] Bluetooth: hci6: unexpected event for opcode 0x0804
[  148.949457] Bluetooth: hci6: SCO packet for unknown connection handle 0
[  148.949495] Bluetooth: Unexpected continuation frame (len 20)
[  148.951044] Bluetooth: Unexpected continuation frame (len 20)
[  148.978694] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  148.979804] I/O error, dev sr0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  148.981137] Buffer I/O error on dev sr0, logical block 6, async page read
[  149.006639] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  149.007160] I/O error, dev sr0, sector 7 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  149.007870] Buffer I/O error on dev sr0, logical block 7, async page read
[  152.684114] Bluetooth: hci6: Controller not accepting commands anymore: ncmd = 0
[  152.685469] Bluetooth: hci6: Injecting HCI hardware error event
[  152.688113] Bluetooth: hci6: hardware error 0x00
[  154.731492] Bluetooth: hci6: Opcode 0x0c03 failed: -110
17:05:23 executing program 3:
waitid(0x1, 0x0, &(0x7f0000000000), 0x8, &(0x7f0000000080))
syz_open_procfs$namespace(0x0, 0x0)

17:05:23 executing program 5:
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000040)={{{@in=@private, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@private}, 0x0, @in6=@empty}}, &(0x7f0000000140)=0xe8)
statfs(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=""/200)
r2 = creat(&(0x7f00000002c0)='./file0\x00', 0xa8)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000380)={'syztnl2\x00', &(0x7f0000000300)={'syztnl1\x00', r1, 0x4, 0x2, 0x2, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0, 0x7888, 0x1, 0x0, 0x7}})
r3 = accept$unix(r0, &(0x7f00000003c0), &(0x7f0000000440)=0x6e)
ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000480)={0x9, 0x0, 0x7, 0x10001, 0x3, [{0x3b, 0x5, 0x100, '\x00', 0x400}, {0x8, 0x1ff, 0x200, '\x00', 0x4}, {0x2, 0x400, 0x40}]})
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000580)={{0x1, 0x1, 0x18, <r4=>r2, {0x1000}}, './file0/file0\x00'})
getsockopt$ARPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x63, &(0x7f00000005c0)={'ah\x00'}, &(0x7f0000000600)=0x1e)
r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x12, 0xffffffffffffffff, 0x10000000)
r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, r5, &(0x7f0000000640)=@IORING_OP_POLL_REMOVE={0x7, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r6}}, 0x6a6d)
ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000000680))
connect(r2, &(0x7f00000006c0)=@vsock={0x28, 0x0, 0x0, @host}, 0x80)
openat$dir(0xffffffffffffff9c, &(0x7f0000000740)='./file0\x00', 0xc00, 0x86)
recvmsg(r4, &(0x7f0000003940)={&(0x7f0000000780)=@generic, 0x80, &(0x7f0000003840)=[{&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000001800)=""/4096, 0x1000}, {&(0x7f0000002800)=""/4096, 0x1000}, {&(0x7f0000003800)=""/46, 0x2e}], 0x4, &(0x7f0000003880)=""/192, 0xc0}, 0x40012102)
ioctl$F2FS_IOC_GET_FEATURES(r4, 0x8004f50c, &(0x7f0000003980))
r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, r7)
setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000003ac0)=@broute={'broute\x00', 0x20, 0x0, 0xc0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20003a00], 0x0, &(0x7f00000039c0), &(0x7f0000003a00)=[{0x0, '\x00', 0x0, 0xfffffffffffffffd}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x138)

17:05:23 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001240)={0x1c, r2, 0x5, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001240)={0x1c, r4, 0x5, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r3)
sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r5, 0xb341daa0822653b3, 0x0, 0x0, {0x4}}, 0x14}}, 0x0)

17:05:23 executing program 0:
madvise(&(0x7f0000870000/0x4000)=nil, 0x4000, 0x17)
pkey_mprotect(&(0x7f0000871000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff)
mlock(&(0x7f0000871000/0x3000)=nil, 0x3000)
mbind(&(0x7f0000873000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x2)

17:05:23 executing program 1:
syz_usb_connect$uac1(0x0, 0xb2, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa0, 0x3, 0x1, 0x0, 0x50, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@selector_unit={0x5, 0x24, 0x5, 0x4, 0x66}, @selector_unit={0xb, 0x24, 0x5, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00'}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x4, {0x7, 0x25, 0x1, 0x80}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x0, 0x6, 0x6, "6d75a56f2cbc"}, @as_header={0x7, 0x24, 0x1, 0x1f, 0x0, 0x1002}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x7f, 0x1, 0x8, 0x6, '_'}, @as_header={0x7, 0x24, 0x1, 0x4, 0x8, 0x1002}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x1, 0x2, 0x9, 0x7, "e33b79"}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000ec0)={0x0, 0x0, 0x0}, 0x0)

17:05:23 executing program 6:
sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0x0, 0x20, 0x70bd26, 0x2, {{}, {@void, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x5}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x8c}, @NL80211_ATTR_VENDOR_DATA={0x10, 0xc5, "0270c3ef73c20c8ab7b77aa9"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x101}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x8080)
r0 = perf_event_open(&(0x7f0000000340)={0x5, 0x80, 0x79, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1029, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000280), 0x4}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240), 0x40001, 0x0)
ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f00000003c0)={0xe3, 0x20, 0x3f8980, "9a9f8d259b4c118914b64b50fd932b40b67c08dc7996f658e82a5806f67d54d7e9c1b187c807de2ee86cb91517eb06eed1c2769318c700795261c18af48c5e61d37d041ecd75362d776af11b169a600c0cffae547cd5abca255308e5e4ee11ccfb9a21309ec8c83ad64312a7afb1051aad8d72a06d420daa249018f161f6d8c00fc68e503841c7dff7bd6d6de6c51101e6307dc33f9ad7b21e38b56765976dee391e849c5f2dbeeb456ec71a36349d853059c3b41e8639f59214ed4cbc369a7b9a8781b7baa34d42f45bfbdada5d12bcbfaa44351b98cc75151555d9bdd9cdc2deb01e"})
r4 = dup2(r2, r1)
ioctl$SG_IO(r4, 0x2271, &(0x7f00000022c0)={0x0, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x0, 0xc0, &(0x7f0000000180)=""/192}, 0x0, 0x0, 0xffffffff, 0x0, 0x2, 0x0})
mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3000004, 0x4000130, r3, 0x825fe000)
io_setup(0x1f, &(0x7f0000000300)=<r5=>0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x3, 0x1, 0x9}, 0x20)
r7 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
recvmmsg(r7, &(0x7f0000002840)=[{{&(0x7f0000001740)=@hci, 0x80, &(0x7f0000001d00)=[{&(0x7f00000017c0)=""/142, 0x8e}, {&(0x7f0000001880)=""/218, 0xda}, {&(0x7f0000001980)=""/110, 0x6e}, {&(0x7f0000001a00)=""/181, 0xb5}, {&(0x7f0000001ac0)=""/168, 0xa8}, {&(0x7f0000001b80)=""/241, 0xf1}, {&(0x7f0000001c80)=""/123, 0x7b}], 0x7, &(0x7f0000001d80)=""/42, 0x2a}, 0x6}, {{&(0x7f0000001dc0)=@pppol2tp={0x18, 0x1, {0x0, <r8=>0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000002080)=[{&(0x7f0000001e40)=""/44, 0x2c}, {&(0x7f0000001e80)=""/21, 0x15}, {&(0x7f0000001ec0)=""/12, 0xc}, {&(0x7f0000001f00)=""/195, 0xc3}, {&(0x7f0000002000)=""/126, 0x7e}], 0x5, &(0x7f0000002100)=""/223, 0xdf}, 0x3}, {{0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000002340)=""/225, 0xe1}, {&(0x7f0000002200)=""/184, 0xb8}, {&(0x7f0000002440)=""/134, 0x86}, {&(0x7f0000002500)=""/133, 0x85}, {&(0x7f00000025c0)=""/252, 0xfc}], 0x5, &(0x7f0000002740)=""/225, 0xe1}, 0xfffffff9}], 0x3, 0x10001, 0x0)
ioctl$F2FS_IOC_GET_FEATURES(r8, 0x8004f50c, &(0x7f0000002900))
openat$sysfs(0xffffffffffffff9c, &(0x7f00000016c0)='/sys/power/suspend_stats', 0x418001, 0x80)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000001700)=@IORING_OP_FSYNC={0x3, 0x4, 0x0, @fd=r7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1)
fcntl$setownex(r7, 0xf, &(0x7f0000000300))
io_submit(r5, 0x3, &(0x7f0000001680)=[&(0x7f0000000580)={0x0, 0x0, 0x0, 0x3, 0x400, r0, &(0x7f00000004c0)="f844a62e6559ccac13758386a004da65af10fb2506417e5f75df6db7ce0a71692074a8181ade92169ccb79bfc255d8f55f8f198f5bd169edf1d5940e7ccaf04d836319642b3b9c0f8f1b9841b3cb90d5ad64d6eefc9c2c8de621315443f34a0223f763be16918530ed6f319c04d0843fc849032467508e7c4e5ed064f4a8bd213bac06588bd4fa651fce1f8b2205f37a8248a46f8656cd1af3815aa80d", 0x9d, 0xfffffffffffffffc, 0x0, 0x3}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x7, 0x5, r6, &(0x7f00000005c0)="cccb99b5513fd9787193f3119370c0392228831fdda31a9ab84c42cf0948e65309ea52839bad9caf91fe95e1bd4d6dd98c19ae541513b8eb3d8b6caa637793c1", 0x40, 0x0, 0x0, 0x3, r3}, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x3, 0x2, r0, &(0x7f0000000640)="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", 0x1000, 0x3ff, 0x0, 0x0, r7}])
ioctl$SG_GET_PACK_ID(r2, 0x227c, &(0x7f0000000140))

17:05:23 executing program 2:
r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r2=>0x0}, 0x1100)
setresuid(0x0, r2, 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x9b6844, &(0x7f0000000180)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@privport}, {@cache_none}, {@debug={'debug', 0x3d, 0x3}}, {@access_uid={'access', 0x3d, r2}}, {@privport}, {@uname={'uname', 0x3d, '-*)'}}, {@fscache}], [{@dont_hash}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@appraise}, {@uid_eq={'uid', 0x3d, 0xffffffffffffffff}}]}})
close(r1)

17:05:23 executing program 7:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r2 = socket(0xb, 0x80000, 0x9)
fcntl$setstatus(r2, 0x4, 0x400)
ioctl$EXT4_IOC_GETSTATE(r1, 0x40086602, &(0x7f0000002a00))
write$binfmt_script(r0, &(0x7f0000000140)={'#! ', './file0'}, 0xb)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x3, 0x1, 0x9}, 0x20)
ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r3, 0x8008f511, &(0x7f0000000000))
ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000440)=ANY=[@ANYBLOB="006a00000000000000100000000000000000008000"/32])

[  159.099263] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  159.107343] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  159.118004] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  159.147427] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  159.186914] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
17:05:23 executing program 0:
syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi={{0x22, 0x7f}, {0x9, [{@none, 0x80, 0x2, "2571ac", 0x6, 0x1}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x4, 0x40, "f3e2f6", 0x69, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x6, 0xfc, "3a4303", 0x800, 0x5}, {@any, 0x3, 0x9, "d597d2", 0x6, 0x13}, {@any, 0x20, 0x0, "acc749", 0x5, 0x5a}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3, 0x2, "b88488", 0xa8c, 0x3}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x6, 0x1f, "cfc133", 0xa60e, 0x1}, {@any, 0x4, 0x5, "f76e7a", 0x2, 0xff}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x67, "a58ea6", 0xff, 0x6}]}}}, 0x82)
syz_emit_vhci(&(0x7f00000003c0)=@HCI_VENDOR_PKT, 0x2)
syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2)
syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x81, 0x0, 0x804}}}, 0x7)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000280)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x0, 0x14}, @l2cap_cid_le_signaling={{0x10}, @l2cap_ecred_conn_req={{0x17, 0x3, 0xc}, {0x401, 0x6a7, 0x4, 0xff, [0x1, 0x6]}}}}, 0x19)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000))
syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="030000502bbbe9325c2f4825ed4e2e792fdda73f228ffd7503c16d40f44ecf7770235540cb73eb566be07629ad9d0d92926932bbae11c89a05bab2b57521c5d80fdc4c248dbc73be336b0e1cb2cf1f2859a4c280e00466"], 0x54)
syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="02c91014001000050017000ce4bd85cf500772f10001800400ccc3cf49b6000300"], 0x19)
getdents64(r0, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000240)=@HCI_VENDOR_PKT, 0x15c)
syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x0, 0x14}, @l2cap_cid_signaling={{0x10}, [@l2cap_disconn_req={{0x6, 0xfb, 0x4}, {0x7, 0x9}}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0xfff8, 0x1}}]}}, 0x19)
syz_emit_vhci(&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x12)
syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT, 0x2)
r1 = syz_open_dev$sg(&(0x7f0000000380), 0x1fb, 0x2000)
ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f00000000c0)={0x0, 0xffffffff, 0xffffff85})
syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2)
syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="02c9e00a8da2fc2600131b02038000"], 0xf)
syz_emit_vhci(&(0x7f0000000500)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x8c}, "b85bd39cdd9c8132caf9a52aaed54f1beac66b0d20609795f390b6e6bd67517df18abe884c05ed0745a531794b2f525f129dab6f54a99c60c7e214bf21b034e69f08e326aef661b51cb4e9cd7eeb3572dd65d0bb6a60899dde430f28eb92f08f1a14ea87df5dec048a0b787386a6a3b5216632f1f1a8f5be29ffb813b5b0c5905eb9d38e163ef73386531ce3"}, 0x90)
clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0)

17:05:23 executing program 5:
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000040)={{{@in=@private, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@private}, 0x0, @in6=@empty}}, &(0x7f0000000140)=0xe8)
statfs(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=""/200)
r2 = creat(&(0x7f00000002c0)='./file0\x00', 0xa8)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000380)={'syztnl2\x00', &(0x7f0000000300)={'syztnl1\x00', r1, 0x4, 0x2, 0x2, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0, 0x7888, 0x1, 0x0, 0x7}})
r3 = accept$unix(r0, &(0x7f00000003c0), &(0x7f0000000440)=0x6e)
ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000480)={0x9, 0x0, 0x7, 0x10001, 0x3, [{0x3b, 0x5, 0x100, '\x00', 0x400}, {0x8, 0x1ff, 0x200, '\x00', 0x4}, {0x2, 0x400, 0x40}]})
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000580)={{0x1, 0x1, 0x18, <r4=>r2, {0x1000}}, './file0/file0\x00'})
getsockopt$ARPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x63, &(0x7f00000005c0)={'ah\x00'}, &(0x7f0000000600)=0x1e)
r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x12, 0xffffffffffffffff, 0x10000000)
r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, r5, &(0x7f0000000640)=@IORING_OP_POLL_REMOVE={0x7, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r6}}, 0x6a6d)
ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000000680))
connect(r2, &(0x7f00000006c0)=@vsock={0x28, 0x0, 0x0, @host}, 0x80)
openat$dir(0xffffffffffffff9c, &(0x7f0000000740)='./file0\x00', 0xc00, 0x86)
recvmsg(r4, &(0x7f0000003940)={&(0x7f0000000780)=@generic, 0x80, &(0x7f0000003840)=[{&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000001800)=""/4096, 0x1000}, {&(0x7f0000002800)=""/4096, 0x1000}, {&(0x7f0000003800)=""/46, 0x2e}], 0x4, &(0x7f0000003880)=""/192, 0xc0}, 0x40012102)
ioctl$F2FS_IOC_GET_FEATURES(r4, 0x8004f50c, &(0x7f0000003980))
r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, r7)

[  159.220486] kmemleak: Found object by alias at 0x607f1a639a0c
[  159.220512] CPU: 0 UID: 16877 PID: 3988 Comm: syz-executor.2 Tainted: G        W           6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) 
[  159.220545] Tainted: [W]=WARN
[  159.220552] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  159.220564] Call Trace:
[  159.220570]  <TASK>
[  159.220579]  dump_stack_lvl+0xca/0x120
[  159.220617]  __lookup_object+0x94/0xb0
[  159.220646]  delete_object_full+0x27/0x70
[  159.220674]  free_percpu+0x30/0x1160
[  159.220709]  ? arch_uprobe_clear_state+0x16/0x140
[  159.220744]  futex_hash_free+0x38/0xc0
[  159.220768]  mmput+0x2d3/0x390
[  159.220800]  do_exit+0x79d/0x2970
[  159.220824]  ? lock_release+0xc8/0x290
[  159.220853]  ? __pfx_do_exit+0x10/0x10
[  159.220878]  ? find_held_lock+0x2b/0x80
[  159.220908]  ? get_signal+0x835/0x2340
[  159.220943]  do_group_exit+0xd3/0x2a0
[  159.220970]  get_signal+0x2315/0x2340
[  159.221001]  ? __virt_addr_valid+0x2e8/0x5d0
[  159.221040]  ? __pfx_get_signal+0x10/0x10
[  159.221070]  ? do_futex+0x135/0x370
[  159.221094]  ? __pfx_do_futex+0x10/0x10
[  159.221115]  ? trace_irq_enable.constprop.0+0xc2/0x100
[  159.221141]  arch_do_signal_or_restart+0x80/0x790
[  159.221176]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  159.221205]  ? __x64_sys_futex+0x1c9/0x4d0
[  159.221227]  ? __x64_sys_futex+0x1d2/0x4d0
[  159.221254]  ? __pfx___x64_sys_futex+0x10/0x10
[  159.221279]  ? __pfx___x64_sys_mount+0x10/0x10
[  159.221310]  exit_to_user_mode_loop+0x8b/0x110
[  159.221332]  do_syscall_64+0x2f7/0x360
[  159.221354]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  159.221375] RIP: 0033:0x7f5ad3aebb19
[  159.221390] Code: Unable to access opcode bytes at 0x7f5ad3aebaef.
[  159.221399] RSP: 002b:00007f5ad1061218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  159.221419] RAX: 0000000000000000 RBX: 00007f5ad3bfef68 RCX: 00007f5ad3aebb19
[  159.221433] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f5ad3bfef68
[  159.221445] RBP: 00007f5ad3bfef60 R08: 0000000000000000 R09: 0000000000000000
[  159.221457] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5ad3bfef6c
[  159.221470] R13: 00007ffe534b6edf R14: 00007f5ad1061300 R15: 0000000000022000
[  159.221499]  </TASK>
[  159.221505] kmemleak: Object (percpu) 0x607f1a639a08 (size 8):
[  159.221517] kmemleak:   comm "syz-executor.4", pid 3977, jiffies 4294825751
[  159.221530] kmemleak:   min_count = 1
[  159.221537] kmemleak:   count = 0
[  159.221543] kmemleak:   flags = 0x21
[  159.221550] kmemleak:   checksum = 0
[  159.221557] kmemleak:   backtrace:
[  159.221563]  pcpu_alloc_noprof+0x87a/0x1170
[  159.221590]  perf_trace_event_init+0x366/0xa10
[  159.221613]  perf_trace_init+0x1a4/0x2f0
[  159.221634]  perf_tp_event_init+0xa6/0x120
[  159.221660]  perf_try_init_event+0x140/0x9f0
[  159.221684]  perf_event_alloc.part.0+0x118e/0x45f0
[  159.221713]  __do_sys_perf_event_open+0x719/0x2c20
[  159.221735]  do_syscall_64+0xbf/0x360
[  159.221750]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  159.273262] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
17:05:23 executing program 3:
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000000)=0x100, 0x4)
syz_emit_ethernet(0x10c, &(0x7f0000000280)=ANY=[], 0x0)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req={0x20, 0x8, 0x5, 0x2}, 0x10)
recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

[  159.328719] syz-executor.4 (3977) used greatest stack depth: 23360 bytes left
[  159.346700] Bluetooth: Unexpected continuation frame (len 20)
[  159.348101] Bluetooth: hci2: SCO packet for unknown connection handle 0
[  159.348157] Bluetooth: Unexpected continuation frame (len 20)
[  159.351574] Bluetooth: hci2: link tx timeout
[  159.352433] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
17:05:23 executing program 5:
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000040)={{{@in=@private, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@private}, 0x0, @in6=@empty}}, &(0x7f0000000140)=0xe8)
statfs(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=""/200)
r2 = creat(&(0x7f00000002c0)='./file0\x00', 0xa8)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000380)={'syztnl2\x00', &(0x7f0000000300)={'syztnl1\x00', r1, 0x4, 0x2, 0x2, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0, 0x7888, 0x1, 0x0, 0x7}})
r3 = accept$unix(r0, &(0x7f00000003c0), &(0x7f0000000440)=0x6e)
ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000480)={0x9, 0x0, 0x7, 0x10001, 0x3, [{0x3b, 0x5, 0x100, '\x00', 0x400}, {0x8, 0x1ff, 0x200, '\x00', 0x4}, {0x2, 0x400, 0x40}]})
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000580)={{0x1, 0x1, 0x18, <r4=>r2, {0x1000}}, './file0/file0\x00'})
getsockopt$ARPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x63, &(0x7f00000005c0)={'ah\x00'}, &(0x7f0000000600)=0x1e)
r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x12, 0xffffffffffffffff, 0x10000000)
r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, r5, &(0x7f0000000640)=@IORING_OP_POLL_REMOVE={0x7, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r6}}, 0x6a6d)
ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000000680))
connect(r2, &(0x7f00000006c0)=@vsock={0x28, 0x0, 0x0, @host}, 0x80)
openat$dir(0xffffffffffffff9c, &(0x7f0000000740)='./file0\x00', 0xc00, 0x86)
recvmsg(r4, &(0x7f0000003940)={&(0x7f0000000780)=@generic, 0x80, &(0x7f0000003840)=[{&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000001800)=""/4096, 0x1000}, {&(0x7f0000002800)=""/4096, 0x1000}, {&(0x7f0000003800)=""/46, 0x2e}], 0x4, &(0x7f0000003880)=""/192, 0xc0}, 0x40012102)
ioctl$F2FS_IOC_GET_FEATURES(r4, 0x8004f50c, &(0x7f0000003980))
io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0)

[  159.454343] Bluetooth: hci2: unexpected event for opcode 0x0804
17:05:23 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x3, 0x1, 0x9}, 0x20)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_hsr\x00'})
sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000100b7120000000080"], 0x14}], 0x1}, 0x0)

[  159.468599] Bluetooth: Unexpected continuation frame (len 20)
[  159.471611] Bluetooth: Unexpected continuation frame (len 20)
[  159.497142] Bluetooth: hci2: link tx timeout
[  159.498204] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
17:05:23 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001240)={0x1c, r2, 0x5, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001240)={0x1c, r4, 0x5, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r3)
sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r5, 0xb341daa0822653b3, 0x0, 0x0, {0x4}}, 0x14}}, 0x0)

[  159.513185] Bluetooth: hci2: SCO packet for unknown connection handle 0
[  159.656569] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  159.669193] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  159.672233] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  159.688034] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  163.371480] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  163.373269] Bluetooth: hci2: Injecting HCI hardware error event
[  163.375329] Bluetooth: hci2: hardware error 0x00
[  165.420423] Bluetooth: hci2: Opcode 0x0c03 failed: -110
17:05:32 executing program 3:
r0 = msgget(0x2, 0x220)
msgctl$IPC_RMID(r0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef0100010000009f09c75f000000000000000001000000000000000b0000008000000038000000c20201006b04", 0x66, 0x400}], 0x0, &(0x7f0000000040))

17:05:32 executing program 2:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x0, 0x5a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mlockall(0x3)

17:05:32 executing program 4:
r0 = perf_event_open(&(0x7f0000000100)={0x31e44f3f7567aaf5, 0x80, 0xf4, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={&(0x7f0000000180), 0xc}, 0x5a048, 0x0, 0x2, 0x2, 0x4, 0x0, 0xfff9}, 0x0, 0xe, 0xffffffffffffffff, 0xa)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000001c0)=')\x00')
write$binfmt_script(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="2321202e2f66696c6530203a272d2d23f7205e207d5e205c297b0a6433709910bf83dd30fcdff815f47cbae0c4d7d6d890422c33b19b644358b80fa8139348af16ffcffb798a801664829d348ec554cbcf2686cd5d6a1b66abaf11023017109c4f13e6b677b1fc128acb7956fd75873ccf5dfbe1e7fbfc5d0791b1518c72cf8b295322aa01e5a5cdbbef2cf0de28d904ca91c5b496bb568f1ccf2cd0494bc5cd710012cd57f770f3cd2601535a5099e54cc941dd7a8d84d0566603eeb691266e451bdf660228ab43f7837b2be5694cdc50f34d8a4a46e61e7a126d4ea266d9d2b228ef0f0c1e903687a2449f26ea"], 0xee)

17:05:32 executing program 7:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x9a)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r1, 0xc0096616, &(0x7f00000000c0)={0x4, [0x0, 0x0, 0x0, 0x0]})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x3, 0x1, 0x9}, 0x20)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000200)={0x0, 0x4, 0x7, 0x3})
ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000140))
r3 = gettid()
ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000180))
fcntl$setownex(r0, 0xf, &(0x7f00000001c0)={0x0, r3})
creat(&(0x7f0000000100)='./file0\x00', 0x1)
ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000080)={0x9, 0x3, 0x8000, 0x3, 0x7f, "7475080a66757745b1fa060bd95deb335c32bb", 0x1ce, 0x7ff})
ioctl$TIOCSIG(r0, 0x40045436, 0x0)
r4 = open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x1)
ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x8, 0x1, 0x8, 0x1, 0x2}})

17:05:32 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000500000000f000000000000000200000006000000000008000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000008000000018000000c1e9", 0x62, 0x400}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000013b00)=ANY=[@ANYBLOB='Y'])

17:05:32 executing program 5:
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000040)={{{@in=@private, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@private}, 0x0, @in6=@empty}}, &(0x7f0000000140)=0xe8)
statfs(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=""/200)
r2 = creat(&(0x7f00000002c0)='./file0\x00', 0xa8)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000380)={'syztnl2\x00', &(0x7f0000000300)={'syztnl1\x00', r1, 0x4, 0x2, 0x2, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0, 0x7888, 0x1, 0x0, 0x7}})
r3 = accept$unix(r0, &(0x7f00000003c0), &(0x7f0000000440)=0x6e)
ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000480)={0x9, 0x0, 0x7, 0x10001, 0x3, [{0x3b, 0x5, 0x100, '\x00', 0x400}, {0x8, 0x1ff, 0x200, '\x00', 0x4}, {0x2, 0x400, 0x40}]})
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000580)={{0x1, 0x1, 0x18, <r4=>r2, {0x1000}}, './file0/file0\x00'})
getsockopt$ARPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x63, &(0x7f00000005c0)={'ah\x00'}, &(0x7f0000000600)=0x1e)
r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x12, 0xffffffffffffffff, 0x10000000)
r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, r5, &(0x7f0000000640)=@IORING_OP_POLL_REMOVE={0x7, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r6}}, 0x6a6d)
ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000000680))
connect(r2, &(0x7f00000006c0)=@vsock={0x28, 0x0, 0x0, @host}, 0x80)
openat$dir(0xffffffffffffff9c, &(0x7f0000000740)='./file0\x00', 0xc00, 0x86)
recvmsg(r4, &(0x7f0000003940)={&(0x7f0000000780)=@generic, 0x80, &(0x7f0000003840)=[{&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000001800)=""/4096, 0x1000}, {&(0x7f0000002800)=""/4096, 0x1000}, {&(0x7f0000003800)=""/46, 0x2e}], 0x4, &(0x7f0000003880)=""/192, 0xc0}, 0x40012102)
ioctl$F2FS_IOC_GET_FEATURES(r4, 0x8004f50c, &(0x7f0000003980))

17:05:32 executing program 0:
syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi={{0x22, 0x7f}, {0x9, [{@none, 0x80, 0x2, "2571ac", 0x6, 0x1}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x4, 0x40, "f3e2f6", 0x69, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x6, 0xfc, "3a4303", 0x800, 0x5}, {@any, 0x3, 0x9, "d597d2", 0x6, 0x13}, {@any, 0x20, 0x0, "acc749", 0x5, 0x5a}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3, 0x2, "b88488", 0xa8c, 0x3}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x6, 0x1f, "cfc133", 0xa60e, 0x1}, {@any, 0x4, 0x5, "f76e7a", 0x2, 0xff}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x67, "a58ea6", 0xff, 0x6}]}}}, 0x82)
syz_emit_vhci(&(0x7f00000003c0)=@HCI_VENDOR_PKT, 0x2)
syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2)
syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x81, 0x0, 0x804}}}, 0x7)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000280)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x0, 0x14}, @l2cap_cid_le_signaling={{0x10}, @l2cap_ecred_conn_req={{0x17, 0x3, 0xc}, {0x401, 0x6a7, 0x4, 0xff, [0x1, 0x6]}}}}, 0x19)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000))
syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="030000502bbbe9325c2f4825ed4e2e792fdda73f228ffd7503c16d40f44ecf7770235540cb73eb566be07629ad9d0d92926932bbae11c89a05bab2b57521c5d80fdc4c248dbc73be336b0e1cb2cf1f2859a4c280e00466"], 0x54)
syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="02c91014001000050017000ce4bd85cf500772f10001800400ccc3cf49b6000300"], 0x19)
getdents64(r0, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000240)=@HCI_VENDOR_PKT, 0x15c)
syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x0, 0x14}, @l2cap_cid_signaling={{0x10}, [@l2cap_disconn_req={{0x6, 0xfb, 0x4}, {0x7, 0x9}}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0xfff8, 0x1}}]}}, 0x19)
syz_emit_vhci(&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x12)
syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT, 0x2)
r1 = syz_open_dev$sg(&(0x7f0000000380), 0x1fb, 0x2000)
ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f00000000c0)={0x0, 0xffffffff, 0xffffff85})
syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2)
syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="02c9e00a8da2fc2600131b02038000"], 0xf)
syz_emit_vhci(&(0x7f0000000500)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x8c}, "b85bd39cdd9c8132caf9a52aaed54f1beac66b0d20609795f390b6e6bd67517df18abe884c05ed0745a531794b2f525f129dab6f54a99c60c7e214bf21b034e69f08e326aef661b51cb4e9cd7eeb3572dd65d0bb6a60899dde430f28eb92f08f1a14ea87df5dec048a0b787386a6a3b5216632f1f1a8f5be29ffb813b5b0c5905eb9d38e163ef73386531ce3"}, 0x90)
clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0)

17:05:32 executing program 1:
r0 = io_uring_setup(0x5885, &(0x7f0000000480))
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendmmsg$inet(r1, &(0x7f0000001fc0)=[{{&(0x7f00000001c0)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000800)=[{&(0x7f0000000240)="06d5267a31baebee05970a797e1571307b155ac093438ad5d7ba18323765048879fca0d76fa8b8d7c027e291fb287a778538618d225294e0b76fc6903754f2c2c79c11fd4a6c4735f822eef28c700c7e2df622a6a6406024a2201b1cac024562139e91615be858ca550cb6e770213d535e16a8b28c50871f89efe60aeb74f2943f20992b6442d7cf1f", 0x89}, {&(0x7f0000000300)="413230529e1f9877c26aeffb147485608444bd389b1ddad0691708da493d25f995cbcc82734d7b2b085ab5e12b0cb2ee281808073553a9c0defee0ef48139828bac58b36e9c22ac55bd7adc8e6e20f99c1e157faaf6c1cead23b46a20a5e5976dea1be4330fb30812d991ac17d999a616400f6c3264bb7c03a606b267f9329456db4", 0x82}, {&(0x7f00000003c0)="86b9f1f27f2f713f4653f2e7dd2454a7995e461d9018dc6878df13318a457773473fed320e82aa668c7655243b9ba127b633658ffe243cc89cf4bb4d69962100d932fde53f47b7f015cb3df44fde7c2e4df9f8286aa1b71480a9876de21e7d", 0x5f}, {&(0x7f0000000440)="78daeab66fa97603330a537e46862dfc7665b7d1f7421cec109ea256398669d61f37", 0x22}, {&(0x7f00000004c0)="194ca9ac88e03495ba7d6c6fb80d2c29b82824e91f04a0cb96d57d2be335fa5dbc4b06cf9eed995c1d4378a45593870579b22d0b1f88f38a3d713733ee4feb022f37717023cc7607708c3d4c3856813a8c804998a312ae3b32f40a939f14cf45eee34ce27acf306ee2d53c0008763ab21289529fa47b3a1aa8c48385278ea9fe50999d4115282b0fc83cb2a84fd93e5c8614050e6e6def29b76c4cd002d8c34ef19d1f28d77bde110f98a83de1b378731781cc878ee0ea61f5ddfdd15deb3d", 0xbf}, {&(0x7f0000000580)="89b96b18f29df6265464b8d02d4c4ffa8e4953667f5a91880e8d3bb24078712db2e0ed716a977ae903922093c276978b07fe5b84ca047fe7bb1ec9fa97886609ad236491651ed59866208c7eb52de1083f361d945f628bdc2313b01832ce4ad445d0eb6466b3692736d9143b004f6a733277f0db41f772c6f604f5dcb310f45fbc1980121d33aad79d9b76c51f0a2a73b9", 0x91}, {&(0x7f0000000640)="1e15260904ffb6285296ae11e0cedd604a49580dc573aba7ee188313dce1ae4651a4bb5e00445abd5765bec5777ab8ac836f6e52856284077df111e9c25806a15f14d2f2020e7ffca1253e95aec6efc6689f96", 0x53}, {&(0x7f00000006c0)="0c497acead4b14feca96be0e0c4019d6d6fb74f60cb2e3308884a311acad9d", 0x1f}, {&(0x7f0000000700)="12bc976dd6f76e44d85124b01846e3e7416c93a2ed752777bb27f3f0cf2b1d548fa8f05141e46b32e8dddfb9d735a0a33d29030de12c3af725f2bab34d4a1cee365f255bc4fa8cfbb366f808964b5fd436a642ad453386fb118daf84d54b7e51cf464ef35bb2b209e2afdf8ca011c4caabaac56ea63dca6f22c7256f3d5bbbc6d4f52de1705bbbd64ba49c80f7d41cab853857d4204193d7e8d9929379bc0de3510abfd3faffd27d2ce11fd639a8a9a505ab638ae27acf47a36fe7330355d8e2c2d117ecd09703ab36", 0xc9}], 0x9, &(0x7f0000000a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @loopback}}}], 0x20}}, {{&(0x7f0000000a40)={0x2, 0x0, @dev}, 0x10, &(0x7f0000001c00)=[{&(0x7f0000000a80)="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", 0x1b2}], 0x1}}], 0x2, 0x20048804)
close_range(r0, 0xffffffffffffffff, 0x0)

[  168.154528] loop3: detected capacity change from 0 to 4
[  168.159324] loop6: detected capacity change from 0 to 16
[  168.186208] EXT4-fs (loop3): VFS: Found ext4 filesystem with unknown checksum algorithm.
[  168.193131] ext4: Unknown parameter 'Y'
[  168.214221] loop6: detected capacity change from 0 to 16
[  168.218693] loop3: detected capacity change from 0 to 4
[  168.222312] ext4: Unknown parameter 'Y'
17:05:32 executing program 4:
unshare(0x40000000)
unshare(0x1e000080)

[  168.238998] EXT4-fs (loop3): VFS: Found ext4 filesystem with unknown checksum algorithm.
17:05:32 executing program 5:
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000040)={{{@in=@private, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@private}, 0x0, @in6=@empty}}, &(0x7f0000000140)=0xe8)
statfs(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=""/200)
r2 = creat(&(0x7f00000002c0)='./file0\x00', 0xa8)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000380)={'syztnl2\x00', &(0x7f0000000300)={'syztnl1\x00', r1, 0x4, 0x2, 0x2, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0, 0x7888, 0x1, 0x0, 0x7}})
r3 = accept$unix(r0, &(0x7f00000003c0), &(0x7f0000000440)=0x6e)
ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000480)={0x9, 0x0, 0x7, 0x10001, 0x3, [{0x3b, 0x5, 0x100, '\x00', 0x400}, {0x8, 0x1ff, 0x200, '\x00', 0x4}, {0x2, 0x400, 0x40}]})
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000580)={{0x1, 0x1, 0x18, <r4=>r2, {0x1000}}, './file0/file0\x00'})
getsockopt$ARPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x63, &(0x7f00000005c0)={'ah\x00'}, &(0x7f0000000600)=0x1e)
r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x12, 0xffffffffffffffff, 0x10000000)
r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, r5, &(0x7f0000000640)=@IORING_OP_POLL_REMOVE={0x7, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r6}}, 0x6a6d)
ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000000680))
connect(r2, &(0x7f00000006c0)=@vsock={0x28, 0x0, 0x0, @host}, 0x80)
openat$dir(0xffffffffffffff9c, &(0x7f0000000740)='./file0\x00', 0xc00, 0x86)
recvmsg(r4, &(0x7f0000003940)={&(0x7f0000000780)=@generic, 0x80, &(0x7f0000003840)=[{&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000001800)=""/4096, 0x1000}, {&(0x7f0000002800)=""/4096, 0x1000}, {&(0x7f0000003800)=""/46, 0x2e}], 0x4, &(0x7f0000003880)=""/192, 0xc0}, 0x40012102)

17:05:32 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendmsg$inet(r0, &(0x7f0000001540)={&(0x7f0000000740)={0x2, 0x0, @broadcast}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000100)="5ec7", 0x2}], 0x1, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback}}}], 0x20}, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000380)={@loopback, 0xaad, 0x1, 0x3, 0x1, 0x5a6, 0x6}, 0x20)
ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000280)={@loopback, @mcast2, @mcast2, 0x5, 0x100, 0x4, 0x500, 0x0, 0x80100004})
recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000000000)=""/5, 0x5}, {&(0x7f0000000140)=""/224, 0xe0}], 0x3}, 0x40010000)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000340)={'syzkaller1\x00', &(0x7f00000003c0)=@ethtool_regs={0x4, 0x1, 0x7d, "592f609f6f4c9f3d4eb02913e84a73e2234b41c6e8ce1d76ec5532055a05deae170ea18ef629819195fca4579f7074228ce59f2f3a43d21c25f3a2c56255b7b0f362ad93c82d812e1e7853df040bb98aa7e75babf23756a7c2581e43661368771bbc2f1d9d7e89ba2fcc934dd894cab852d228dd55a29638c7a2b3448d"}})
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)

17:05:32 executing program 6:
mincore(&(0x7f0000ffc000/0x3000)=nil, 0x3000, &(0x7f0000000080)=""/228)
setitimer(0xaf0f8c5cbad58981, 0x0, 0x0)
setitimer(0x1, &(0x7f0000000000), &(0x7f0000000040))

17:05:32 executing program 3:
r0 = syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='ramfs\x00', 0x0, 0x0)
r1 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x24006e, &(0x7f0000000040)=ANY=[])
execveat(r0, &(0x7f0000000040)='./file0/file0\x00', &(0x7f00000002c0)=[&(0x7f00000001c0)='/&/\x00', &(0x7f0000000240)='tmpfs\x00'], &(0x7f0000000480)=[&(0x7f0000000300)='\\+%-*\x00'], 0x800)
symlinkat(&(0x7f0000000280)='./file1\x00', r1, &(0x7f0000000200)='./file0\x00')
creat(&(0x7f0000000000)='./file0/file0\x00', 0x0)
umount2(&(0x7f0000000340)='./file0\x00', 0x8)
statfs(&(0x7f00000004c0)='./file0/file0\x00', &(0x7f0000000380)=""/214)

17:05:32 executing program 7:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
fcntl$setownex(r0, 0xf, &(0x7f0000000300))
perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x7b, 0x0, 0x0, 0x10, 0x0, 0x0, 0x26820, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0x8e}, 0x10020}, 0x0, 0xfffffffffffffffd, r0, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', <r3=>0x0})
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r3, 0x3, 0x6, @multicast}, 0x10)

17:05:32 executing program 5:
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000040)={{{@in=@private, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@private}, 0x0, @in6=@empty}}, &(0x7f0000000140)=0xe8)
statfs(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=""/200)
r2 = creat(&(0x7f00000002c0)='./file0\x00', 0xa8)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000380)={'syztnl2\x00', &(0x7f0000000300)={'syztnl1\x00', r1, 0x4, 0x2, 0x2, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0, 0x7888, 0x1, 0x0, 0x7}})
r3 = accept$unix(r0, &(0x7f00000003c0), &(0x7f0000000440)=0x6e)
ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000480)={0x9, 0x0, 0x7, 0x10001, 0x3, [{0x3b, 0x5, 0x100, '\x00', 0x400}, {0x8, 0x1ff, 0x200, '\x00', 0x4}, {0x2, 0x400, 0x40}]})
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000580)={{0x1, 0x1, 0x18, <r4=>r2, {0x1000}}, './file0/file0\x00'})
getsockopt$ARPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x63, &(0x7f00000005c0)={'ah\x00'}, &(0x7f0000000600)=0x1e)
r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x12, 0xffffffffffffffff, 0x10000000)
r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, r5, &(0x7f0000000640)=@IORING_OP_POLL_REMOVE={0x7, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r6}}, 0x6a6d)
ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000000680))
connect(r2, &(0x7f00000006c0)=@vsock={0x28, 0x0, 0x0, @host}, 0x80)
openat$dir(0xffffffffffffff9c, &(0x7f0000000740)='./file0\x00', 0xc00, 0x86)

[  168.474772] syz-executor.6 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  168.495452] =======================================================
[  168.495452] WARNING: The mand mount option has been deprecated and
[  168.495452]          and is ignored by this kernel. Remove the mand
[  168.495452]          option from the mount to silence this warning.
[  168.495452] =======================================================
17:05:32 executing program 0:
syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi={{0x22, 0x7f}, {0x9, [{@none, 0x80, 0x2, "2571ac", 0x6, 0x1}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x4, 0x40, "f3e2f6", 0x69, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x6, 0xfc, "3a4303", 0x800, 0x5}, {@any, 0x3, 0x9, "d597d2", 0x6, 0x13}, {@any, 0x20, 0x0, "acc749", 0x5, 0x5a}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3, 0x2, "b88488", 0xa8c, 0x3}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x6, 0x1f, "cfc133", 0xa60e, 0x1}, {@any, 0x4, 0x5, "f76e7a", 0x2, 0xff}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x67, "a58ea6", 0xff, 0x6}]}}}, 0x82)
syz_emit_vhci(&(0x7f00000003c0)=@HCI_VENDOR_PKT, 0x2)
syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2)
syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x81, 0x0, 0x804}}}, 0x7)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000280)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x0, 0x14}, @l2cap_cid_le_signaling={{0x10}, @l2cap_ecred_conn_req={{0x17, 0x3, 0xc}, {0x401, 0x6a7, 0x4, 0xff, [0x1, 0x6]}}}}, 0x19)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000))
syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="030000502bbbe9325c2f4825ed4e2e792fdda73f228ffd7503c16d40f44ecf7770235540cb73eb566be07629ad9d0d92926932bbae11c89a05bab2b57521c5d80fdc4c248dbc73be336b0e1cb2cf1f2859a4c280e00466"], 0x54)
syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="02c91014001000050017000ce4bd85cf500772f10001800400ccc3cf49b6000300"], 0x19)
getdents64(r0, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000240)=@HCI_VENDOR_PKT, 0x15c)
syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x0, 0x14}, @l2cap_cid_signaling={{0x10}, [@l2cap_disconn_req={{0x6, 0xfb, 0x4}, {0x7, 0x9}}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0xfff8, 0x1}}]}}, 0x19)
syz_emit_vhci(&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x12)
syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT, 0x2)
r1 = syz_open_dev$sg(&(0x7f0000000380), 0x1fb, 0x2000)
ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f00000000c0)={0x0, 0xffffffff, 0xffffff85})
syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2)
syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="02c9e00a8da2fc2600131b02038000"], 0xf)
syz_emit_vhci(&(0x7f0000000500)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x8c}, "b85bd39cdd9c8132caf9a52aaed54f1beac66b0d20609795f390b6e6bd67517df18abe884c05ed0745a531794b2f525f129dab6f54a99c60c7e214bf21b034e69f08e326aef661b51cb4e9cd7eeb3572dd65d0bb6a60899dde430f28eb92f08f1a14ea87df5dec048a0b787386a6a3b5216632f1f1a8f5be29ffb813b5b0c5905eb9d38e163ef73386531ce3"}, 0x90)
clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0)

[  168.555904] mac80211_hwsim hwsim15 wlan1: entered promiscuous mode
[  168.570620] mac80211_hwsim hwsim15 wlan1: left promiscuous mode
[  168.597163] mac80211_hwsim hwsim15 wlan1: entered promiscuous mode
[  168.608137] mac80211_hwsim hwsim15 wlan1: left promiscuous mode
17:05:33 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
io_setup(0xfff, &(0x7f0000000040))
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
fallocate(0xffffffffffffffff, 0x41, 0x4, 0xfffffffffffffffc)

[  169.016484] BUG: unable to handle page fault for address: ffffed1028c09746
[  169.017473] #PF: supervisor read access in kernel mode
[  169.018163] #PF: error_code(0x0000) - not-present page
[  169.018853] PGD 7ffd4067 P4D 7ffd4067 PUD 7ffd3067 PMD 0 
[  169.019597] Oops: Oops: 0000 [#1] SMP KASAN NOPTI
[  169.020979] CPU: 1 UID: 0 PID: 4043 Comm: syz-executor.2 Tainted: G        W           6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) 
[  169.023611] Tainted: [W]=WARN
[  169.024576] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  169.026202] RIP: 0010:perf_tp_event+0x175/0xe70
[  169.027185] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[  169.031420] RSP: 0018:ffff88800a037780 EFLAGS: 00010012
[  169.032572] RAX: 1ffff11028c09746 RBX: ffff88814604b840 RCX: ffffc9000b43b000
[  169.034131] RDX: 0000000000040000 RSI: ffffffff818995b7 RDI: ffff88814604ba30
[  169.036233] RBP: ffff88800a0379f0 R08: ffff88806cf31340 R09: ffffe8ffffd16a08
[  169.037171] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
[  169.038105] R13: 0000000000000014 R14: ffff88806cf31340 R15: dffffc0000000000
[  169.039052] FS:  00007f5ad1061700(0000) GS:ffff8880e56dd000(0000) knlGS:0000000000000000
[  169.040111] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  169.040876] CR2: ffffed1028c09746 CR3: 00000000161c1000 CR4: 0000000000350ef0
[  169.041805] Call Trace:
[  169.042156]  <TASK>
[  169.042468]  ? __pfx_perf_tp_event+0x10/0x10
[  169.043058]  ? __asan_memcpy+0x3d/0x60
[  169.043587]  ? visit_groups_merge.constprop.0.isra.0+0x6e7/0x1150
[  169.044421]  ? __pfx_visit_groups_merge.constprop.0.isra.0+0x10/0x10
[  169.045263]  ? lock_is_held_type+0x9e/0x120
[  169.045846]  ? ctx_sched_in+0x134/0x9b0
[  169.046369]  ? tracing_gen_ctx_irq_test+0x167/0x1f0
[  169.047032]  ? perf_swevent_event+0x63/0x3f0
[  169.047634]  ? perf_tp_event+0x807/0xe70
[  169.048181]  ? perf_trace_run_bpf_submit+0xef/0x180
[  169.048855]  ? perf_trace_run_bpf_submit+0xef/0x180
[  169.049518]  perf_trace_run_bpf_submit+0xef/0x180
[  169.050168]  perf_trace_preemptirq_template+0x259/0x430
[  169.050878]  ? trace_sched_set_need_resched_tp+0xd4/0x110
[  169.051607]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  169.052400]  ? __pfx___resched_curr+0x10/0x10
[  169.053003]  ? find_held_lock+0x2b/0x80
[  169.053543]  ? try_to_wake_up+0x8ae/0x11d0
[  169.054109]  ? _raw_spin_unlock_irqrestore+0x2c/0x50
[  169.054786]  trace_irq_enable.constprop.0+0xa6/0x100
[  169.055465]  trace_hardirqs_on+0x26/0x40
[  169.056005]  _raw_spin_unlock_irqrestore+0x2c/0x50
[  169.056661]  try_to_wake_up+0x8ae/0x11d0
[  169.057213]  ? __pfx_try_to_wake_up+0x10/0x10
[  169.057829]  ? plist_del+0x122/0x270
[  169.058331]  ? find_held_lock+0x2b/0x80
[  169.058870]  ? futex_wake+0x474/0x540
[  169.059388]  wake_up_q+0xa1/0x130
[  169.059859]  futex_wake+0x47e/0x540
[  169.060359]  ? __pfx_futex_wake+0x10/0x10
[  169.060918]  ? __do_sys_perf_event_open+0x44d/0x2c20
[  169.061588]  ? lock_release+0xc8/0x290
[  169.062108]  do_futex+0x26d/0x370
[  169.062576]  ? __pfx_do_futex+0x10/0x10
[  169.063109]  __x64_sys_futex+0x1c9/0x4d0
[  169.063651]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  169.064434]  ? __pfx___x64_sys_futex+0x10/0x10
[  169.065040]  ? xfd_validate_state+0x55/0x180
[  169.065637]  ? up_write+0x195/0x520
[  169.066129]  do_syscall_64+0xbf/0x360
[  169.066637]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  169.067315] RIP: 0033:0x7f5ad3aebb19
[  169.067803] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  169.070138] RSP: 002b:00007f5ad1061218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  169.071122] RAX: ffffffffffffffda RBX: 00007f5ad3bfef68 RCX: 00007f5ad3aebb19
[  169.072053] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f5ad3bfef6c
[  169.072977] RBP: 00007f5ad3bfef60 R08: 000000000000000e R09: 0000000000000000
[  169.073885] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f5ad3bfef6c
[  169.074802] R13: 00007ffe534b6edf R14: 00007f5ad1061300 R15: 0000000000022000
[  169.075733]  </TASK>
[  169.076047] Modules linked in:
[  169.076474] CR2: ffffed1028c09746
[  169.076928] ---[ end trace 0000000000000000 ]---
[  169.077537] RIP: 0010:perf_tp_event+0x175/0xe70
[  169.078143] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[  169.080478] RSP: 0018:ffff88800a037780 EFLAGS: 00010012
[  169.081159] RAX: 1ffff11028c09746 RBX: ffff88814604b840 RCX: ffffc9000b43b000
[  169.082074] RDX: 0000000000040000 RSI: ffffffff818995b7 RDI: ffff88814604ba30
[  169.082990] RBP: ffff88800a0379f0 R08: ffff88806cf31340 R09: ffffe8ffffd16a08
[  169.083902] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
[  169.084825] R13: 0000000000000014 R14: ffff88806cf31340 R15: dffffc0000000000
[  169.085739] FS:  00007f5ad1061700(0000) GS:ffff8880e56dd000(0000) knlGS:0000000000000000
[  169.086770] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  169.087522] CR2: ffffed1028c09746 CR3: 00000000161c1000 CR4: 0000000000350ef0
[  169.088442] note: syz-executor.2[4043] exited with irqs disabled
[  169.089333] BUG: unable to handle page fault for address: ffffed1028c09746
[  169.090231] #PF: supervisor read access in kernel mode
[  169.090901] #PF: error_code(0x0000) - not-present page
[  169.091566] PGD 7ffd4067 P4D 7ffd4067 PUD 7ffd3067 PMD 0 
[  169.092310] Oops: Oops: 0000 [#2] SMP KASAN NOPTI
[  169.092939] CPU: 1 UID: 0 PID: 4043 Comm: syz-executor.2 Tainted: G      D W           6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) 
[  169.094464] Tainted: [D]=DIE, [W]=WARN
[  169.094967] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  169.096028] RIP: 0010:perf_tp_event+0x175/0xe70
[  169.096638] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[  169.098922] RSP: 0018:ffff88806cf08b80 EFLAGS: 00010012
[  169.099600] RAX: 1ffff11028c09746 RBX: ffff88814604b840 RCX: 0000000000000002
[  169.100513] RDX: ffff88801a0dd280 RSI: ffffffff818995b7 RDI: ffff88814604ba30
[  169.101420] RBP: ffff88806cf08df0 R08: ffff88806cf313e8 R09: ffffe8ffffd16a08
[  169.102327] R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000
[  169.103221] R13: 0000000000000014 R14: ffff88806cf313e8 R15: dffffc0000000000
[  169.104129] FS:  00007f5ad1061700(0000) GS:ffff8880e56dd000(0000) knlGS:0000000000000000
[  169.105145] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  169.105886] CR2: ffffed1028c09746 CR3: 00000000161c1000 CR4: 0000000000350ef0
[  169.106799] Call Trace:
[  169.107136]  <IRQ>
[  169.107426]  ? css_rstat_updated+0x1b8/0x4d0
[  169.108008]  ? __pfx_perf_tp_event+0x10/0x10
[  169.108586]  ? __virt_addr_valid+0x100/0x5d0
[  169.109169]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  169.109840]  ? do_raw_spin_lock+0x123/0x260
[  169.110403]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  169.111003]  ? lock_acquire+0x18c/0x2f0
[  169.111524]  ? __pfx_task_work_add+0x10/0x10
[  169.112110]  ? update_cfs_group+0x11d/0x260
[  169.112668]  ? lock_release+0x1c7/0x290
[  169.113183]  ? do_raw_spin_unlock+0x53/0x220
[  169.113760]  ? _raw_spin_unlock_irqrestore+0x22/0x50
[  169.114415]  ? try_to_wake_up+0x128/0x11d0
[  169.114970]  ? do_raw_spin_lock+0x123/0x260
[  169.115532]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  169.116149]  ? perf_trace_run_bpf_submit+0xef/0x180
[  169.116800]  perf_trace_run_bpf_submit+0xef/0x180
[  169.117427]  perf_trace_preemptirq_template+0x259/0x430
[  169.118123]  ? read_tsc+0x9/0x20
[  169.118567]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  169.119315]  ? clockevents_program_event+0x135/0x360
[  169.119963]  ? tick_program_event+0xac/0x140
[  169.120529]  ? handle_softirqs+0x16e/0x770
[  169.121079]  trace_irq_enable.constprop.0+0xa6/0x100
[  169.121716]  trace_hardirqs_on+0x26/0x40
[  169.122232]  handle_softirqs+0x16e/0x770
[  169.122762]  __irq_exit_rcu+0xc4/0x100
[  169.123275]  irq_exit_rcu+0x9/0x20
[  169.123732]  sysvec_apic_timer_interrupt+0x70/0x80
[  169.124359]  </IRQ>
[  169.124650]  <TASK>
[  169.124940]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  169.125606] RIP: 0010:make_task_dead+0xa2/0x3b0
[  169.126202] Code: 38 00 85 db 0f 84 21 01 00 00 e8 d9 96 38 00 9c 5b 81 e3 00 02 00 00 31 ff 48 89 de e8 27 92 38 00 48 85 db 0f 84 17 01 00 00 <e8> b9 96 38 00 31 ff 65 8b 1d 60 df 48 06 81 e3 ff ff ff 7f 89 de
[  169.128448] RSP: 0018:ffff88800a037f28 EFLAGS: 00000246
[  169.129115] RAX: 0000000000000001 RBX: ffff88801a0dd280 RCX: ffffffff817c2b86
[  169.130009] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff813b5234
[  169.130893] RBP: 0000000000000009 R08: 0000000000000000 R09: 0000000000000000
[  169.131786] R10: ffffffff8643ac57 R11: 0000000000000001 R12: ffff88801a0dd280
[  169.132678] R13: 0000000000000009 R14: ffff88800a037760 R15: 0000000000000000
[  169.133567]  ? trace_irq_enable.constprop.0+0x26/0x100
[  169.134228]  ? make_task_dead+0x214/0x3b0
[  169.134758]  ? make_task_dead+0x214/0x3b0
[  169.135283]  ? do_syscall_64+0xbf/0x360
[  169.135793]  rewind_stack_and_make_dead+0x16/0x20
[  169.136414] RIP: 0033:0x7f5ad3aebb19
[  169.136880] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  169.139120] RSP: 002b:00007f5ad1061218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  169.140070] RAX: ffffffffffffffda RBX: 00007f5ad3bfef68 RCX: 00007f5ad3aebb19
[  169.140958] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f5ad3bfef6c
[  169.141833] RBP: 00007f5ad3bfef60 R08: 000000000000000e R09: 0000000000000000
[  169.142712] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f5ad3bfef6c
[  169.143583] R13: 00007ffe534b6edf R14: 00007f5ad1061300 R15: 0000000000022000
[  169.144474]  </TASK>
[  169.144767] Modules linked in:
[  169.145174] CR2: ffffed1028c09746
[  169.145611] ---[ end trace 0000000000000000 ]---
[  169.146196] RIP: 0010:perf_tp_event+0x175/0xe70
[  169.146789] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[  169.149015] RSP: 0018:ffff88800a037780 EFLAGS: 00010012
[  169.149677] RAX: 1ffff11028c09746 RBX: ffff88814604b840 RCX: ffffc9000b43b000
[  169.150553] RDX: 0000000000040000 RSI: ffffffff818995b7 RDI: ffff88814604ba30
[  169.151429] RBP: ffff88800a0379f0 R08: ffff88806cf31340 R09: ffffe8ffffd16a08
[  169.152317] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
[  169.153192] R13: 0000000000000014 R14: ffff88806cf31340 R15: dffffc0000000000
[  169.154078] FS:  00007f5ad1061700(0000) GS:ffff8880e56dd000(0000) knlGS:0000000000000000
[  169.155064] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  169.155780] CR2: ffffed1028c09746 CR3: 00000000161c1000 CR4: 0000000000350ef0
[  169.156673] Kernel panic - not syncing: Fatal exception in interrupt
[  169.157735] Kernel Offset: disabled
[  169.158186] ---[ end Kernel panic - not syncing: Fatal exception in interrupt ]---

VM DIAGNOSIS:
17:05:33  Registers:
info registers vcpu 0
RAX=dffffc0000000000 RBX=ffff88800997c710 RCX=ffffffff817c2bc0 RDX=1ffff1100132f8e3
RSI=0000000000000008 RDI=ffff88800997c718 RBP=ffffffff84bde3bc RSP=ffff888015df79d0
R8 =0000000000000000 R9 =fffffbfff0c8758a R10=ffffffff8643ac57 R11=0000000000000000
R12=ffff888016426fc0 R13=0000000000000168 R14=0000000000000001 R15=0000000000000286
RIP=ffffffff817c2bf6 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007f3a6d0678c0 00000000 00000000
GS =0000 ffff8880e55dd000 00000000 00000000
LDT=0000 fffffe2c00000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055ba4fc5a0e0 CR3=000000000fb0a000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=ffffffffffffff00ffffffffffffffff
XMM02=00000000000000510000000000000000 XMM03=7269762f736563697665642f7379732f
XMM04=00000000000000000000000000000000 XMM05=000055ba4fc1a3f0000055ba4fc96e90
XMM06=000055ba4fc472f00000000000000003 XMM07=00000000000000000000000000000000
XMM08=2f63697361622f6372732f2e2e000d0a XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=000000000000000d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff828e32c5 RDI=ffffffff88724180 RBP=ffffffff88724140 RSP=ffff88800a036fa0
R8 =0000000000000000 R9 =ffffed10016d6046 R10=0000000000000000 R11=6666666666662052
R12=000000000000000d R13=0000000000000010 R14=ffffffff88724140 R15=ffffffff828e32b0
RIP=ffffffff828e331d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007f5ad1061700 00000000 00000000
GS =0000 ffff8880e56dd000 00000000 00000000
LDT=0000 fffffe2300000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=ffffed1028c09746 CR3=00000000161c1000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00007f5ad3bd27c000007f5ad3bd27c8
XMM02=00007f5ad3bd27e000007f5ad3bd27c0 XMM03=00007f5ad3bd27c800007f5ad3bd27c0
XMM04=ffffffff0000ff00000000ff00000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000