Warning: Permanently added '[localhost]:8110' (ECDSA) to the list of known hosts.
2025/08/29 23:27:27 fuzzer started
2025/08/29 23:27:28 dialing manager at localhost:43077
syzkaller login: [   52.280455] cgroup: Unknown subsys name 'net'
[   52.342195] cgroup: Unknown subsys name 'cpuset'
[   52.356471] cgroup: Unknown subsys name 'rlimit'
2025/08/29 23:27:38 syscalls: 2214
2025/08/29 23:27:38 code coverage: enabled
2025/08/29 23:27:38 comparison tracing: enabled
2025/08/29 23:27:38 extra coverage: enabled
2025/08/29 23:27:38 setuid sandbox: enabled
2025/08/29 23:27:38 namespace sandbox: enabled
2025/08/29 23:27:38 Android sandbox: enabled
2025/08/29 23:27:38 fault injection: enabled
2025/08/29 23:27:38 leak checking: enabled
2025/08/29 23:27:38 net packet injection: enabled
2025/08/29 23:27:38 net device setup: enabled
2025/08/29 23:27:38 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/08/29 23:27:38 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/08/29 23:27:38 USB emulation: enabled
2025/08/29 23:27:38 hci packet injection: enabled
2025/08/29 23:27:38 wifi device emulation: enabled
2025/08/29 23:27:38 802.15.4 emulation: enabled
2025/08/29 23:27:38 fetching corpus: 50, signal 21041/22838 (executing program)
2025/08/29 23:27:38 fetching corpus: 100, signal 27254/30746 (executing program)
2025/08/29 23:27:38 fetching corpus: 150, signal 39978/44858 (executing program)
2025/08/29 23:27:39 fetching corpus: 200, signal 44787/51097 (executing program)
2025/08/29 23:27:39 fetching corpus: 250, signal 48644/56309 (executing program)
2025/08/29 23:27:39 fetching corpus: 300, signal 53239/62145 (executing program)
2025/08/29 23:27:39 fetching corpus: 350, signal 56895/67069 (executing program)
2025/08/29 23:27:39 fetching corpus: 400, signal 61249/72571 (executing program)
2025/08/29 23:27:39 fetching corpus: 450, signal 64650/77094 (executing program)
2025/08/29 23:27:39 fetching corpus: 500, signal 68785/82245 (executing program)
2025/08/29 23:27:39 fetching corpus: 550, signal 72377/86836 (executing program)
2025/08/29 23:27:39 fetching corpus: 600, signal 74855/90367 (executing program)
2025/08/29 23:27:39 fetching corpus: 650, signal 76787/93367 (executing program)
2025/08/29 23:27:39 fetching corpus: 700, signal 79756/97207 (executing program)
2025/08/29 23:27:40 fetching corpus: 750, signal 82476/100776 (executing program)
2025/08/29 23:27:40 fetching corpus: 800, signal 84485/103696 (executing program)
2025/08/29 23:27:40 fetching corpus: 850, signal 86698/106751 (executing program)
2025/08/29 23:27:40 fetching corpus: 900, signal 90035/110684 (executing program)
2025/08/29 23:27:40 fetching corpus: 950, signal 92814/114119 (executing program)
2025/08/29 23:27:40 fetching corpus: 1000, signal 94517/116656 (executing program)
2025/08/29 23:27:40 fetching corpus: 1050, signal 96086/119073 (executing program)
2025/08/29 23:27:40 fetching corpus: 1100, signal 97485/121256 (executing program)
2025/08/29 23:27:40 fetching corpus: 1150, signal 100384/124557 (executing program)
2025/08/29 23:27:40 fetching corpus: 1200, signal 102097/126967 (executing program)
2025/08/29 23:27:41 fetching corpus: 1250, signal 105199/130366 (executing program)
2025/08/29 23:27:41 fetching corpus: 1300, signal 107149/132822 (executing program)
2025/08/29 23:27:41 fetching corpus: 1350, signal 107925/134429 (executing program)
2025/08/29 23:27:41 fetching corpus: 1400, signal 108981/136186 (executing program)
2025/08/29 23:27:41 fetching corpus: 1450, signal 110566/138313 (executing program)
2025/08/29 23:27:41 fetching corpus: 1500, signal 111788/140128 (executing program)
2025/08/29 23:27:41 fetching corpus: 1550, signal 112667/141692 (executing program)
2025/08/29 23:27:41 fetching corpus: 1600, signal 113577/143297 (executing program)
2025/08/29 23:27:41 fetching corpus: 1650, signal 114696/145023 (executing program)
2025/08/29 23:27:41 fetching corpus: 1700, signal 116288/147042 (executing program)
2025/08/29 23:27:41 fetching corpus: 1750, signal 117959/149146 (executing program)
2025/08/29 23:27:42 fetching corpus: 1800, signal 119539/151012 (executing program)
2025/08/29 23:27:42 fetching corpus: 1850, signal 120658/152630 (executing program)
2025/08/29 23:27:42 fetching corpus: 1900, signal 121719/154209 (executing program)
2025/08/29 23:27:42 fetching corpus: 1950, signal 122907/155927 (executing program)
2025/08/29 23:27:42 fetching corpus: 2000, signal 123924/157357 (executing program)
2025/08/29 23:27:42 fetching corpus: 2050, signal 125094/158925 (executing program)
2025/08/29 23:27:42 fetching corpus: 2100, signal 125814/160218 (executing program)
2025/08/29 23:27:42 fetching corpus: 2150, signal 126760/161612 (executing program)
2025/08/29 23:27:42 fetching corpus: 2200, signal 127927/163079 (executing program)
2025/08/29 23:27:42 fetching corpus: 2250, signal 128725/164343 (executing program)
2025/08/29 23:27:43 fetching corpus: 2300, signal 129456/165560 (executing program)
2025/08/29 23:27:43 fetching corpus: 2350, signal 130331/166912 (executing program)
2025/08/29 23:27:43 fetching corpus: 2400, signal 131064/168062 (executing program)
2025/08/29 23:27:43 fetching corpus: 2450, signal 132080/169418 (executing program)
2025/08/29 23:27:43 fetching corpus: 2500, signal 133024/170636 (executing program)
2025/08/29 23:27:43 fetching corpus: 2550, signal 133670/171704 (executing program)
2025/08/29 23:27:43 fetching corpus: 2600, signal 134452/172827 (executing program)
2025/08/29 23:27:43 fetching corpus: 2650, signal 135461/174054 (executing program)
2025/08/29 23:27:43 fetching corpus: 2700, signal 136148/175116 (executing program)
2025/08/29 23:27:43 fetching corpus: 2750, signal 136680/176076 (executing program)
2025/08/29 23:27:44 fetching corpus: 2800, signal 137348/177076 (executing program)
2025/08/29 23:27:44 fetching corpus: 2850, signal 138297/178229 (executing program)
2025/08/29 23:27:44 fetching corpus: 2900, signal 139013/179323 (executing program)
2025/08/29 23:27:44 fetching corpus: 2950, signal 139554/180289 (executing program)
2025/08/29 23:27:44 fetching corpus: 3000, signal 140439/181342 (executing program)
2025/08/29 23:27:44 fetching corpus: 3050, signal 141432/182436 (executing program)
2025/08/29 23:27:44 fetching corpus: 3100, signal 142132/183490 (executing program)
2025/08/29 23:27:44 fetching corpus: 3150, signal 142775/184424 (executing program)
2025/08/29 23:27:44 fetching corpus: 3200, signal 143283/185308 (executing program)
2025/08/29 23:27:44 fetching corpus: 3250, signal 143798/186167 (executing program)
2025/08/29 23:27:44 fetching corpus: 3300, signal 144249/187008 (executing program)
2025/08/29 23:27:45 fetching corpus: 3350, signal 145028/187966 (executing program)
2025/08/29 23:27:45 fetching corpus: 3400, signal 145653/188819 (executing program)
2025/08/29 23:27:45 fetching corpus: 3450, signal 146170/189609 (executing program)
2025/08/29 23:27:45 fetching corpus: 3500, signal 147001/190530 (executing program)
2025/08/29 23:27:45 fetching corpus: 3550, signal 147554/191346 (executing program)
2025/08/29 23:27:45 fetching corpus: 3600, signal 148061/192145 (executing program)
2025/08/29 23:27:45 fetching corpus: 3650, signal 148534/192896 (executing program)
2025/08/29 23:27:45 fetching corpus: 3700, signal 149131/193710 (executing program)
2025/08/29 23:27:45 fetching corpus: 3750, signal 149689/194468 (executing program)
2025/08/29 23:27:45 fetching corpus: 3800, signal 150090/195186 (executing program)
2025/08/29 23:27:46 fetching corpus: 3850, signal 150429/195893 (executing program)
2025/08/29 23:27:46 fetching corpus: 3900, signal 150844/196580 (executing program)
2025/08/29 23:27:46 fetching corpus: 3950, signal 151359/197268 (executing program)
2025/08/29 23:27:46 fetching corpus: 4000, signal 151751/197937 (executing program)
2025/08/29 23:27:46 fetching corpus: 4050, signal 152389/198661 (executing program)
2025/08/29 23:27:46 fetching corpus: 4100, signal 153328/199406 (executing program)
2025/08/29 23:27:46 fetching corpus: 4150, signal 153819/200068 (executing program)
2025/08/29 23:27:46 fetching corpus: 4200, signal 154175/200719 (executing program)
2025/08/29 23:27:46 fetching corpus: 4250, signal 154806/201470 (executing program)
2025/08/29 23:27:46 fetching corpus: 4300, signal 155294/202094 (executing program)
2025/08/29 23:27:46 fetching corpus: 4350, signal 155810/202729 (executing program)
2025/08/29 23:27:46 fetching corpus: 4400, signal 156358/203343 (executing program)
2025/08/29 23:27:47 fetching corpus: 4450, signal 156766/203938 (executing program)
2025/08/29 23:27:47 fetching corpus: 4500, signal 157583/204592 (executing program)
2025/08/29 23:27:47 fetching corpus: 4550, signal 157854/205171 (executing program)
2025/08/29 23:27:47 fetching corpus: 4600, signal 158361/205701 (executing program)
2025/08/29 23:27:47 fetching corpus: 4650, signal 158771/206253 (executing program)
2025/08/29 23:27:47 fetching corpus: 4700, signal 159222/206848 (executing program)
2025/08/29 23:27:47 fetching corpus: 4750, signal 159708/207368 (executing program)
2025/08/29 23:27:47 fetching corpus: 4800, signal 160199/207909 (executing program)
2025/08/29 23:27:47 fetching corpus: 4850, signal 160415/208434 (executing program)
2025/08/29 23:27:47 fetching corpus: 4900, signal 160941/208999 (executing program)
2025/08/29 23:27:47 fetching corpus: 4950, signal 161309/209508 (executing program)
2025/08/29 23:27:47 fetching corpus: 5000, signal 161813/210023 (executing program)
2025/08/29 23:27:48 fetching corpus: 5050, signal 162522/210608 (executing program)
2025/08/29 23:27:48 fetching corpus: 5100, signal 162897/211174 (executing program)
2025/08/29 23:27:48 fetching corpus: 5150, signal 163185/211635 (executing program)
2025/08/29 23:27:48 fetching corpus: 5200, signal 163628/212107 (executing program)
2025/08/29 23:27:48 fetching corpus: 5250, signal 164136/212133 (executing program)
2025/08/29 23:27:48 fetching corpus: 5300, signal 164447/212149 (executing program)
2025/08/29 23:27:48 fetching corpus: 5350, signal 164965/212155 (executing program)
2025/08/29 23:27:48 fetching corpus: 5400, signal 165445/212208 (executing program)
2025/08/29 23:27:48 fetching corpus: 5450, signal 165775/212230 (executing program)
2025/08/29 23:27:48 fetching corpus: 5500, signal 166647/212297 (executing program)
2025/08/29 23:27:48 fetching corpus: 5550, signal 166895/212313 (executing program)
2025/08/29 23:27:48 fetching corpus: 5600, signal 167210/212368 (executing program)
2025/08/29 23:27:48 fetching corpus: 5650, signal 167689/212369 (executing program)
2025/08/29 23:27:48 fetching corpus: 5700, signal 168066/212379 (executing program)
2025/08/29 23:27:49 fetching corpus: 5750, signal 168512/212381 (executing program)
2025/08/29 23:27:49 fetching corpus: 5800, signal 168842/212389 (executing program)
2025/08/29 23:27:49 fetching corpus: 5850, signal 169173/212394 (executing program)
2025/08/29 23:27:49 fetching corpus: 5900, signal 169489/212396 (executing program)
2025/08/29 23:27:49 fetching corpus: 5950, signal 169856/212398 (executing program)
2025/08/29 23:27:49 fetching corpus: 6000, signal 170247/212399 (executing program)
2025/08/29 23:27:49 fetching corpus: 6050, signal 170610/212404 (executing program)
2025/08/29 23:27:49 fetching corpus: 6100, signal 170880/212414 (executing program)
2025/08/29 23:27:49 fetching corpus: 6150, signal 171176/212414 (executing program)
2025/08/29 23:27:49 fetching corpus: 6200, signal 171500/212427 (executing program)
2025/08/29 23:27:49 fetching corpus: 6250, signal 171788/212430 (executing program)
2025/08/29 23:27:49 fetching corpus: 6300, signal 172225/212433 (executing program)
2025/08/29 23:27:50 fetching corpus: 6350, signal 172597/212443 (executing program)
2025/08/29 23:27:50 fetching corpus: 6400, signal 173408/212455 (executing program)
2025/08/29 23:27:50 fetching corpus: 6450, signal 173838/212473 (executing program)
2025/08/29 23:27:50 fetching corpus: 6500, signal 174245/212499 (executing program)
2025/08/29 23:27:50 fetching corpus: 6550, signal 174471/212504 (executing program)
2025/08/29 23:27:50 fetching corpus: 6600, signal 174795/212513 (executing program)
2025/08/29 23:27:50 fetching corpus: 6650, signal 175245/212516 (executing program)
2025/08/29 23:27:50 fetching corpus: 6700, signal 175706/212524 (executing program)
2025/08/29 23:27:50 fetching corpus: 6750, signal 176055/212525 (executing program)
2025/08/29 23:27:50 fetching corpus: 6800, signal 176460/212537 (executing program)
2025/08/29 23:27:50 fetching corpus: 6850, signal 176832/212561 (executing program)
2025/08/29 23:27:51 fetching corpus: 6900, signal 177210/212565 (executing program)
2025/08/29 23:27:51 fetching corpus: 6950, signal 177497/212570 (executing program)
2025/08/29 23:27:51 fetching corpus: 7000, signal 177725/212584 (executing program)
2025/08/29 23:27:51 fetching corpus: 7050, signal 178181/212586 (executing program)
2025/08/29 23:27:51 fetching corpus: 7100, signal 178671/212588 (executing program)
2025/08/29 23:27:51 fetching corpus: 7150, signal 178971/212588 (executing program)
2025/08/29 23:27:51 fetching corpus: 7200, signal 179283/212606 (executing program)
2025/08/29 23:27:51 fetching corpus: 7250, signal 179765/212607 (executing program)
2025/08/29 23:27:51 fetching corpus: 7300, signal 179952/212609 (executing program)
2025/08/29 23:27:51 fetching corpus: 7350, signal 180340/212622 (executing program)
2025/08/29 23:27:52 fetching corpus: 7400, signal 180670/212629 (executing program)
2025/08/29 23:27:52 fetching corpus: 7450, signal 181071/212636 (executing program)
2025/08/29 23:27:52 fetching corpus: 7500, signal 181367/212637 (executing program)
2025/08/29 23:27:52 fetching corpus: 7550, signal 181673/212637 (executing program)
2025/08/29 23:27:52 fetching corpus: 7600, signal 182025/212651 (executing program)
2025/08/29 23:27:52 fetching corpus: 7650, signal 182547/212652 (executing program)
2025/08/29 23:27:52 fetching corpus: 7700, signal 182780/212658 (executing program)
2025/08/29 23:27:52 fetching corpus: 7750, signal 183092/212672 (executing program)
2025/08/29 23:27:52 fetching corpus: 7800, signal 183468/212712 (executing program)
2025/08/29 23:27:52 fetching corpus: 7850, signal 183823/212714 (executing program)
2025/08/29 23:27:52 fetching corpus: 7900, signal 184046/212717 (executing program)
2025/08/29 23:27:53 fetching corpus: 7950, signal 184283/212717 (executing program)
2025/08/29 23:27:53 fetching corpus: 8000, signal 184521/212723 (executing program)
2025/08/29 23:27:53 fetching corpus: 8050, signal 184764/212735 (executing program)
2025/08/29 23:27:53 fetching corpus: 8100, signal 185175/212738 (executing program)
2025/08/29 23:27:53 fetching corpus: 8150, signal 185483/212751 (executing program)
2025/08/29 23:27:53 fetching corpus: 8200, signal 185718/212757 (executing program)
2025/08/29 23:27:53 fetching corpus: 8250, signal 185956/212758 (executing program)
2025/08/29 23:27:53 fetching corpus: 8300, signal 186187/212760 (executing program)
2025/08/29 23:27:53 fetching corpus: 8350, signal 186465/212768 (executing program)
2025/08/29 23:27:53 fetching corpus: 8400, signal 186678/212779 (executing program)
2025/08/29 23:27:53 fetching corpus: 8450, signal 186848/212788 (executing program)
2025/08/29 23:27:54 fetching corpus: 8500, signal 187060/212788 (executing program)
2025/08/29 23:27:54 fetching corpus: 8550, signal 187387/212796 (executing program)
2025/08/29 23:27:54 fetching corpus: 8600, signal 187636/212799 (executing program)
2025/08/29 23:27:54 fetching corpus: 8650, signal 187946/212802 (executing program)
2025/08/29 23:27:54 fetching corpus: 8700, signal 188199/212805 (executing program)
2025/08/29 23:27:54 fetching corpus: 8750, signal 188456/212819 (executing program)
2025/08/29 23:27:54 fetching corpus: 8800, signal 188675/212832 (executing program)
2025/08/29 23:27:54 fetching corpus: 8850, signal 188881/212866 (executing program)
2025/08/29 23:27:54 fetching corpus: 8900, signal 189154/212870 (executing program)
2025/08/29 23:27:54 fetching corpus: 8950, signal 189363/212872 (executing program)
2025/08/29 23:27:54 fetching corpus: 9000, signal 189567/212898 (executing program)
2025/08/29 23:27:55 fetching corpus: 9050, signal 189777/212898 (executing program)
2025/08/29 23:27:55 fetching corpus: 9100, signal 190025/212910 (executing program)
2025/08/29 23:27:55 fetching corpus: 9150, signal 190278/212912 (executing program)
2025/08/29 23:27:55 fetching corpus: 9200, signal 190441/212916 (executing program)
2025/08/29 23:27:55 fetching corpus: 9250, signal 190621/212916 (executing program)
2025/08/29 23:27:55 fetching corpus: 9300, signal 190842/212924 (executing program)
2025/08/29 23:27:55 fetching corpus: 9350, signal 191104/212924 (executing program)
2025/08/29 23:27:55 fetching corpus: 9400, signal 191385/212947 (executing program)
2025/08/29 23:27:55 fetching corpus: 9450, signal 191590/212948 (executing program)
2025/08/29 23:27:55 fetching corpus: 9500, signal 191832/212951 (executing program)
2025/08/29 23:27:55 fetching corpus: 9550, signal 192113/212952 (executing program)
2025/08/29 23:27:55 fetching corpus: 9600, signal 192454/212952 (executing program)
2025/08/29 23:27:56 fetching corpus: 9650, signal 192767/212966 (executing program)
2025/08/29 23:27:56 fetching corpus: 9700, signal 192950/212977 (executing program)
2025/08/29 23:27:56 fetching corpus: 9750, signal 193180/213005 (executing program)
2025/08/29 23:27:56 fetching corpus: 9800, signal 193342/213006 (executing program)
2025/08/29 23:27:56 fetching corpus: 9850, signal 193528/213006 (executing program)
2025/08/29 23:27:56 fetching corpus: 9900, signal 193715/213009 (executing program)
2025/08/29 23:27:56 fetching corpus: 9950, signal 193979/213011 (executing program)
2025/08/29 23:27:56 fetching corpus: 10000, signal 194225/213014 (executing program)
2025/08/29 23:27:56 fetching corpus: 10050, signal 194435/213033 (executing program)
2025/08/29 23:27:56 fetching corpus: 10100, signal 194708/213034 (executing program)
2025/08/29 23:27:56 fetching corpus: 10150, signal 194940/213040 (executing program)
2025/08/29 23:27:57 fetching corpus: 10200, signal 195247/213042 (executing program)
2025/08/29 23:27:57 fetching corpus: 10250, signal 195509/213044 (executing program)
2025/08/29 23:27:57 fetching corpus: 10300, signal 195745/213044 (executing program)
2025/08/29 23:27:57 fetching corpus: 10350, signal 196082/213047 (executing program)
2025/08/29 23:27:57 fetching corpus: 10400, signal 196244/213051 (executing program)
2025/08/29 23:27:57 fetching corpus: 10450, signal 196430/213060 (executing program)
2025/08/29 23:27:57 fetching corpus: 10500, signal 196642/213062 (executing program)
2025/08/29 23:27:57 fetching corpus: 10550, signal 196898/213064 (executing program)
2025/08/29 23:27:57 fetching corpus: 10600, signal 197089/213083 (executing program)
2025/08/29 23:27:57 fetching corpus: 10650, signal 197311/213111 (executing program)
2025/08/29 23:27:57 fetching corpus: 10700, signal 197483/213112 (executing program)
2025/08/29 23:27:58 fetching corpus: 10750, signal 197732/213113 (executing program)
2025/08/29 23:27:58 fetching corpus: 10800, signal 198120/213118 (executing program)
2025/08/29 23:27:58 fetching corpus: 10850, signal 198339/213124 (executing program)
2025/08/29 23:27:58 fetching corpus: 10900, signal 198502/213124 (executing program)
2025/08/29 23:27:58 fetching corpus: 10950, signal 198753/213131 (executing program)
2025/08/29 23:27:58 fetching corpus: 11000, signal 199039/213145 (executing program)
2025/08/29 23:27:58 fetching corpus: 11050, signal 199199/213148 (executing program)
2025/08/29 23:27:58 fetching corpus: 11100, signal 199417/213152 (executing program)
2025/08/29 23:27:58 fetching corpus: 11150, signal 199651/213161 (executing program)
2025/08/29 23:27:58 fetching corpus: 11200, signal 199794/213164 (executing program)
2025/08/29 23:27:58 fetching corpus: 11250, signal 199918/213167 (executing program)
2025/08/29 23:27:59 fetching corpus: 11300, signal 200117/213167 (executing program)
2025/08/29 23:27:59 fetching corpus: 11350, signal 200324/213174 (executing program)
2025/08/29 23:27:59 fetching corpus: 11400, signal 200468/213189 (executing program)
2025/08/29 23:27:59 fetching corpus: 11450, signal 200697/213190 (executing program)
2025/08/29 23:27:59 fetching corpus: 11500, signal 200943/213194 (executing program)
2025/08/29 23:27:59 fetching corpus: 11550, signal 201114/213195 (executing program)
2025/08/29 23:27:59 fetching corpus: 11600, signal 201301/213196 (executing program)
2025/08/29 23:27:59 fetching corpus: 11650, signal 201515/213205 (executing program)
2025/08/29 23:27:59 fetching corpus: 11700, signal 201715/213211 (executing program)
2025/08/29 23:27:59 fetching corpus: 11750, signal 201893/213214 (executing program)
2025/08/29 23:27:59 fetching corpus: 11800, signal 202059/213221 (executing program)
2025/08/29 23:27:59 fetching corpus: 11850, signal 202435/213240 (executing program)
2025/08/29 23:28:00 fetching corpus: 11900, signal 202631/213253 (executing program)
2025/08/29 23:28:00 fetching corpus: 11915, signal 202742/213260 (executing program)
2025/08/29 23:28:00 fetching corpus: 11915, signal 202742/213260 (executing program)
2025/08/29 23:28:01 starting 8 fuzzer processes
23:28:01 executing program 0:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x3]}, 0x8)
r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x1]}, 0x8, 0x40800)
r2 = signalfd(r1, &(0x7f0000000080)={[0x3ff]}, 0x8)
r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0)
sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r3, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x8c, 0x0, 0x8, 0x70bd2c, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xb2d}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44014}, 0x20044080)
ioctl$CDROMPLAYBLK(r3, 0x5317, &(0x7f0000000280)={0x8, 0x3})
r4 = signalfd(r0, &(0x7f00000002c0)={[0x80000001]}, 0x8)
r5 = signalfd(r1, &(0x7f0000000300)={[0x3]}, 0x8)
dup2(r2, r3)
r6 = dup3(r5, r1, 0x80000)
ioctl$CDROMPAUSE(r6, 0x5301)
ioctl$DVD_AUTH(0xffffffffffffffff, 0x5390, &(0x7f0000000340)=@lsc={0x3, 0x1, "0e88f9327c54989d9faa"})
ioctl$CDROMPLAYMSF(r2, 0x5303, &(0x7f0000000380)={0x3, 0x6, 0x48, 0x8, 0x1, 0xc})
ioctl$CDROM_CLEAR_OPTIONS(r0, 0x5321, 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x1f)
sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x108, 0x0, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x108}, 0x1, 0x0, 0x0, 0x4000080}, 0x40004)
write$P9_RFSYNC(r4, &(0x7f0000000600)={0x7, 0x33, 0x1}, 0x7)
r7 = syz_io_uring_complete(0x0)
ioctl$INOTIFY_IOC_SETNEXTWD(r7, 0x40044900, 0x7)
signalfd(0xffffffffffffffff, &(0x7f0000000680)={[0x100]}, 0x8)

23:28:01 executing program 1:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, r0, 0x73e, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7, 0x5}}}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x8f6}, @NL80211_ATTR_PMK={0x14, 0xfe, "68a2e4c78d0ecedd39947a320e405e6c"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x3ff}, @NL80211_ATTR_MAC={0xa}]}, 0x58}}, 0x20008810)
sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0x150, r0, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x2, 0x66}}}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x33}, @NL80211_ATTR_IE={0xcf, 0x2a, [@random={0x1, 0x4, "34865f09"}, @ibss={0x6, 0x2, 0x100}, @random_vendor={0xdd, 0x8f, "5419469175e36325bb9797092e37680c5c9b63b978c7fac5c5ec48f255052ba71d9417a49afbf13f23e8786eab8ec8724efe51ec6c680d87b5b35138acc572fd26c0787d6dcb9d58a5985c3ce9fe0f9267970512ef2a38e730d48c22ad46d13fcab36abb65b4cd9ea29ff6acc566875e2dc0180704dec2bef51cf9d44c1bc3af3757729b9e16356b6bd54deb3f2d50"}, @dsss={0x3, 0x1, 0x40}, @mic={0x8c, 0x18, {0xa9b, "794880778557", @long="849d0292b174cdb8fb72070a84f40e27"}}, @mesh_chsw={0x76, 0x6, {0x4, 0x0, 0x1, 0x100}}, @cf={0x4, 0x6, {0xe0, 0xf0, 0x8, 0xca6}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}]}, @NL80211_ATTR_IE={0x46, 0x2a, [@ibss={0x6, 0x2, 0x1000}, @mic={0x8c, 0x18, {0x54a, "04689fff4ac3", @long="322a149203b7676d3fc96888e444da78"}}, @peer_mgmt={0x75, 0x6, {0x1, 0x4, @val=0xb5, @void, @void}}, @ht={0x2d, 0x1a, {0x10, 0x1, 0x2, 0x0, {0x9, 0x5, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x1}, 0x6, 0xfffffffc, 0x7f}}]}, @NL80211_ATTR_IE={0xe, 0x2a, [@peer_mgmt={0x75, 0x8, {0x1, 0x5, @val=0xff09, @val=0x16, @void}}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x4000010}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x81200}, 0xc, &(0x7f00000006c0)={&(0x7f0000000400)={0x2ac, 0x0, 0x400, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x0, 0x74}}}}, [@NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0xf3b1}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x1000}, @NL80211_ATTR_SCAN_SUPP_RATES={0x23c, 0x7d, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xf0, 0x0, "f3c6996eeb3b073976a5580e10555ed8848ebac21d08e619d9edc416e5d2be5f1e8801670a246db2cf276d4b7bf7b79527ae312a090c973f1f0347375e4e2dfdf8ead67cf7f0e647349aff0da8c6e185e08ee749549afe9ac28c2f5ad89fe08d87fa30dadf5478b44398f6043ebea6329ee78c9dd50b24815449787566df7ce66c191415160a00dd5d31d9722c540d5d1ddcce9c3fe0072d1453a12f5095a086dbc339802587fd6882c53f582a44fb45d0d5a298e54ad22e803df1ce9420c7038ad0a365091705ce6ad93939861e8c226fd5a5b65a7a3623a3189b8907212df5f10a66119361c6791c124b33"}, @NL80211_BAND_5GHZ={0x2c, 0x1, "22980beb5e3200c9def3838644840fb3f0347d1e4227faec2545e3859cf1f8f6b6f02bd37c2e0c10"}, @NL80211_BAND_5GHZ={0xb7, 0x1, "07187f362775bd4f48e0d9b284841ef4e2b29b4463cd7fcdb9a854e64ef4b2aad9d5d28ddbdcc29b0e0b2479d22cbb6137e1db1230fc5985467e5da4b86f0414aff420eb00bb073d642b14139fb317704576f751b06694225bb2ae4a34ac8168e5c9e37116e0a4c9bfc6c73c066b834dabbaf14ca744f8086787757b97199d92162fc85b3e3e40dae3a7317b49f1d4a862b077e7db44b3f1c58b12bedb756a7426dfe13b6e694d2f3a8c964995c63ba86bdb74"}, @NL80211_BAND_5GHZ={0x3f, 0x1, "116936a14bdf2c060d05f357f08977d5a83048f8b970cd822b5dae444978cf53c070f08b61dcb68a75870e3d7854941ff09c40c4691640da59f958"}, @NL80211_BAND_5GHZ={0x21, 0x1, "3dd86630a6855781001f145e907bf06cd4baf79184e0143132987c290c"}]}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_IE={0xd, 0x2a, [@dsss={0x3, 0x1, 0x7}, @chsw_timing={0x68, 0x4, {0x400, 0x3}}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_IE={0xe, 0x2a, [@ext_channel_switch={0x3c, 0x4, {0x0, 0x40, 0x74, 0x6}}, @ibss={0x6, 0x2, 0x520}]}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0xf9}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0xa46}]}, 0x2ac}, 0x1, 0x0, 0x0, 0x4004050}, 0x20000000)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000780), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x34, r1, 0x300, 0x70bd2d, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x1f, 0x8, @udp='udp:syz1\x00'}}}, ["", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x8000010}, 0x80)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000880)={{0x1, 0x1, 0x18, <r2=>0xffffffffffffffff, {0x7}}, './file0\x00'})
bind$netlink(r2, &(0x7f00000008c0)={0x10, 0x0, 0x25dfdbfe, 0x8}, 0xc)
socketpair(0x18, 0x3, 0x8000, &(0x7f0000000940)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r3)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000a80)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000000980)="c67e0452f5e8958b41cff5ecd20c9eb04c1ef3961a7ee8a5cfc940492ecff281d0524595a05d139466e59613d2ab000a4d8c468d4e7341ea79d7fd7a3d2e7b26a2bc339bc4d199e43bbdd07755a93906c4fcfeea8dd13f249398eb5caa6740ee0868ac5f5862b3cb99d0b4496ce260901baf2841c02dd130e78215390246fcf32173b240a2fc08a386c8e8337786a751f4109ffbcd8c6d697cd6a640e161685a54f79b34d87c852eff2b6dc1fe91c432f80fd71f582360f08e4b23c358dbc5d4ed954cf209a04828860f7212f6eafb8e383191ffcc7f6397db730e9b", 0xdc, r2}, 0x68)
ioctl$sock_inet_SIOCSIFNETMASK(r2, 0x891c, &(0x7f0000000b00)={'vlan0\x00', {0x2, 0x0, @broadcast}})
sendmsg$NL80211_CMD_SET_MPATH(r4, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x38, r5, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x101, 0x7e}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x38}, 0x1, 0x0, 0x0, 0x90}, 0x4004814)
r6 = fsmount(r2, 0x0, 0x88)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f0000000c40)={{0x1, 0x1, 0x18, <r7=>r3, {0x6}}, './file0\x00'})
sendmsg$IPCTNL_MSG_CT_GET_DYING(r7, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x8}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x24080090}, 0x40)
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000d80))
statx(r7, &(0x7f0000000dc0)='./file0\x00', 0x2000, 0x7ff, &(0x7f0000000e00))
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000f00)=0x4, 0x4)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000001080)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001040)={&(0x7f0000001000)={0x14, 0x0, 0x10, 0x70bd25, 0x25dfdbfc}, 0x14}}, 0x11)

23:28:01 executing program 2:
r0 = dup(0xffffffffffffffff)
r1 = syz_open_dev$mouse(&(0x7f0000000000), 0x27, 0xc000)
r2 = signalfd(r1, &(0x7f0000000040)={[0x3]}, 0x8)
ioctl$AUTOFS_IOC_EXPIRE(r1, 0x810c9365, &(0x7f0000000080)={{0xc9, 0x8}, 0x100, './file0\x00'})
r3 = ioctl$TIOCGPTPEER(r1, 0x5441, 0xa83)
ioctl$BTRFS_IOC_SEND(r2, 0x40489426, &(0x7f0000000200)={{r3}, 0x4, &(0x7f00000001c0)=[0x401, 0x4, 0x101, 0x5], 0x0, 0x4, [0x3bb, 0x5]})
setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000280)={0x25b5, {{0xa, 0x4e21, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x1, 0x3, [{{0xa, 0x4e23, 0x3, @private0, 0xfffffe00}}, {{0xa, 0x4e20, 0x1000, @private0, 0xea74}}, {{0xa, 0x4e23, 0xff, @remote, 0x285}}]}, 0x210)
r4 = openat$full(0xffffffffffffff9c, &(0x7f00000004c0), 0x14b400, 0x0)
ioctl$TCXONC(r4, 0x540a, 0x1)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000500)={{0x1, 0x1, 0x18, <r5=>r2, {0x63e6}}, './file0\x00'})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r5, 0xc0709411, &(0x7f0000000540)={{0x0, 0x7ff, 0x3f, 0x3, 0x5, 0x40, 0x9, 0x0, 0x70000000, 0x6, 0xb776, 0x7, 0x8, 0x8d7, 0x5}, 0x10, [0x0, 0x0]})
syz_open_pts(r2, 0x400100)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f00000005c0)={{0x1, 0x1, 0x18, <r6=>r0, @out_args}, './file0\x00'})
ioctl$sock_SIOCGIFBR(r6, 0x8940, &(0x7f0000000700)=@get={0x1, &(0x7f0000000600)=""/198, 0x101})
recvmsg$unix(r6, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000740)=""/159, 0x9f}], 0x1, &(0x7f0000000840)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [<r7=>0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, <r8=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x21)
r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000940), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x3c, r9, 0x20, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x6}, 0x8081)
sendfile(r8, r5, &(0x7f0000000a40)=0x43, 0xf00)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r7, 0xc0189375, &(0x7f0000000a80)={{0x1, 0x1, 0x18, r0}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000b80)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xbce3932a}}, './file0\x00'})

23:28:02 executing program 3:
rseq(&(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x2, 0x7, 0x6}, 0x568bfd2d5765568}, 0x20, 0x0, 0x0)
rseq(&(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x9, 0xffffffffffffffff, 0xfffffffffffffff9}, 0x3}, 0x20, 0x1, 0x0)
rseq(&(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x2, 0x4, 0x5, 0x4}}, 0x20, 0x1, 0x0)
rseq(&(0x7f0000000180)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x1, 0x0)
rseq(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x1, 0x0)
syz_mount_image$nfs4(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x1, 0x7, &(0x7f0000000700)=[{&(0x7f0000000280)="ce2c039f9a53ad6a23b4da9cfe814923452f446405582071e868aed0618615835729c17804adb08992bcecd514e85d6aa1f09386c11f37f9c08fc996ae00278beae13277bc70598ad28e83e75efafa6378257ec1616e015ac4c6a6813e8ae2b7b26356e883f8e992af2d94dd0e173e94061e0399d1aba4b8b88e0a088aea487f77013764a27c4e2145d5b4262193ce65b87a8513b23acfc1831ffa22803d1f96e1702a4435982554431152b50e605cdee4c9e0a26559998f160815ddbcf0cf84", 0xc0, 0x6}, {&(0x7f0000000340)="3656f4c96fc3798ca3566cb28c623fd1d063ce96bd637686f96140918a00293eb2727f71df766eb1a92811dde395ff21c165127e7805fe3466a33b327cc0732b88e88e451ab64664496de44e268026d5fde537cb69a528aff9e204f7d8881764965b87a7d839", 0x66, 0x3}, {&(0x7f00000003c0)="d26f43ef238e79c5310972e8f18763e77942a954afdcee900fa4b5a18904f7c2fae852e6d21134d266647551c628ff705de3ba21ed086b6960f7a3c8ecbccc797b10d9b905683909da0e4c9346c1a75383a98067f31389c5b055d2654e5964bb024ec45263a1434a003e61a5", 0x6c, 0x3f}, {&(0x7f0000000440)="58a9c32be78e3dc53aa39285408838f1c5dbb530cfad657772efbad0e0879562198cf40fff50d79649ccc85d7d13719557b252770beab48a0bfad389caa95265e92a0a699e0337f06200b022946a4406c73ff80f1d3c0fd85baf4e02e1c10480cdc75008358a1f3961dd942f543d3e5b6128a3cc93baafef88679f34e71d9f5fceb4f0", 0x83, 0xeb77}, {&(0x7f0000000500)="4c0ac0c41743103cb3ab364f3b5360ee561a4fb9ee90f9f275dc94201973b9291acc6f452be9186483cd8ca39115a853759aadae3254b087ba810b8c05c97e55a2899bd9ccef767afaf2ae34d1272c996c75f23d4df23879ed84d9486972bba340f7bdaa38c5d7e1bc4781d0212b5cd997e1e789a245faa2dacaf16cae8726f4ecf22ad9e74e0d9e40a01b22268b6fd2386685a2eacc6f63b3847b0cc06675993f246c2217de587fc8d8cdad6f44ab9e5947497dd4e64570a32e0f1ead0e598b2d71600baa478835e5a71aa7364848e8ae55587d4d596cfb21d9b8fe14a79c", 0xdf, 0x7fffffff}, {&(0x7f0000000600)="f40a083cd48d958a943325d1eb1c5936111ba215cadf06b7806df58c186797c21a34de4be57b27d152cb7b9f3b86f4ba64c5881ae53a7421546899c8beecc46096b10f11e08d9e4212a91189fc714e62d1681cb324b7eaa638ac6517535b03aa6abf78e3151c2d14b12a3174126fed281429b71a07416a1cbdfaefb76e5664216b74e8c1c2ac1b0f521de64db9dc7b786bc13e43cb097e42aca915b9ef06ba4c6903ca61c9924148e1f45e943adef2d68afc6d959e366528d8", 0xb9, 0x8}, {&(0x7f00000006c0)="aa75", 0x2, 0x6}], 0xc1000, &(0x7f00000007c0)={[{'.]-\\'}, {'%.\xc6K\\[!$:{)'}], [{@measure}, {@fsname}, {@dont_appraise}, {@permit_directio}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@context={'context', 0x3d, 'user_u'}}, {@func={'func', 0x3d, 'BPRM_CHECK'}}, {@audit}, {@fscontext={'fscontext', 0x3d, 'root'}}]})
rseq(&(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={0x0, 0x0, 0x2, 0x3f, 0x3a4f}, 0x6}, 0x20, 0x1, 0x0)
rseq(&(0x7f0000000900)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x1, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000940), 0x8c41, 0x0)
rseq(&(0x7f0000000980), 0x20, 0x0, 0x0)
rseq(&(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0, 0x2, 0x30, 0x7ff}, 0x5}, 0x20, 0x1, 0x0)
rseq(&(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={0x0, 0x4, 0x0, 0x1ff, 0x2}, 0x6}, 0x20, 0x0, 0x0)
rseq(&(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x6, 0x3ff, 0x7}, 0x7}, 0x20, 0x1, 0x0)
rseq(&(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={0x0, 0x0, 0x4, 0x72, 0x2}, 0x6}, 0x20, 0x0, 0x0)
rseq(&(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={0x0, 0x0, 0x4, 0x7, 0x1f}, 0x2}, 0x20, 0x1, 0x0)
msgsnd(0x0, &(0x7f0000000c40)={0x0, "758fd3bee8e0ed4b5f828534126663ac89"}, 0x19, 0x800)
rseq(&(0x7f0000000c80)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0)
rseq(&(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0)
rseq(&(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={0x0, 0x4, 0x3, 0xeb7, 0x3}, 0x2}, 0x20, 0x0, 0x0)
rseq(&(0x7f0000000d80)={0x0, 0x0, 0x0, 0x6}, 0x20, 0x0, 0x0)

[   85.942455] audit: type=1400 audit(1756510082.031:7): avc:  denied  { execmem } for  pid=275 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
23:28:02 executing program 4:
ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, &(0x7f0000000100)={0x1, 0x0, 0x1000, 0x67, &(0x7f0000000000)="8ae9d162950b97a2e652dc9776a398d3e8f1f0dfbc980b520a1ae572526a4985427828708c9447c9c8d26ef8e2038bfc281dbb97699450e812fe33f80a51f5302afbd1c49459ec5fd6bbea4ce496f4dfbbf6b41ffba5bd869aef0ca9ae748f598eb82594f036e9", 0x79, 0x0, &(0x7f0000000080)="da14eb598023cff9c0d6c214c5d61352d1edf69b35c1623869567507943bca014a649f17dfbac7944cdfc9967f454d74215a63a3e2b4d3c5a6a90fe9593fe20dc30fee5f8699e4a28ac7ab94a52848d9f6b45c4b8aa7ceeead4db91be5d068ad89fefb13ee47dc2a9f43cd20b9369d57cf5994e0aa84097891"})
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x222400, 0x0)
close_range(r0, 0xffffffffffffffff, 0x2)
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f0000000240)={{r0}, 0x0, 0x8, @inherit={0x78, &(0x7f00000001c0)={0x1, 0x6, 0x67ee, 0x8, {0x5, 0x3f, 0xfffffffffffffffc, 0xff, 0x10001}, [0x7, 0x0, 0x3, 0xccc, 0x5, 0x58a5]}}, @subvolid=0x319})
ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000001640)={0x1, 0x0, 0x2, 0x15, 0x172, &(0x7f0000001240)})
ioctl$CDROMPAUSE(0xffffffffffffffff, 0x5301)
syz_open_pts(r0, 0x218480)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001680), 0x761000, 0x0)
ioctl$TIOCPKT(r1, 0x5420, &(0x7f00000016c0)=0x2)
open_by_handle_at(r0, &(0x7f0000001700)=@fuse_with_parent={0x18, 0x82, {{0x1ff, 0x2, 0x7fff}, {0x36, 0x7, 0x3c5}}}, 0x533901)
ioctl$CDROMREADMODE1(r0, 0x530d, &(0x7f0000001740)={0x5, 0x6, 0xd7, 0x7, 0x6})
r2 = signalfd4(r0, &(0x7f00000021c0)={[0x1f]}, 0x8, 0x80000)
ioctl$INCFS_IOC_CREATE_FILE(r2, 0xc058671e, &(0x7f0000002480)={{'\x00', 0x3}, {0xfffffffffffffffb}, 0xa1, 0x0, 0x0, &(0x7f0000002200)='./file0\x00', &(0x7f0000002240)='./file0\x00', &(0x7f0000002280)="307f893b997a65eb99ca95a3dd862e6f6aa10d99b95f2c0a85c49c3e9c57f2d40fad71433e1c636168afcba78df9ae5a08e71af738dc0d03508bb875120c6464725d9fa8a8561215bdf21f094fe63f1d32f7913747ab5e9084db2ed41c4ed24c3fe843072282a80badeb7603c369836876e4aff40489c63e87528eb6f3dc99d2a0ed04387e237b8c4034068375a0a8c8dacba483ad709b511ca284c6a937657cdef347b6c13c78e459a95149a7f10775532d9ff8481c7deebe61073d9e3e77c66e9fa0443ab108733c14dcb950e93b8e6e84f6b358680d6f55fb", 0xda, 0x0, &(0x7f0000002380)={0x2, 0xa0, {0x0, 0xc, 0x3a, "a30a3e9f046c2a0d9d003b7754d7782f70be0f8bc7359b2199443331c8d44140b762e4e2af0a5356f341e083a86a09b6188fa4b1a6c308803a35", 0x59, "8ba0a5b0c0d20f051d9f0e4c22b9c44aeba268a341af4cbecae9d074866c48afd16d5255525197cb61d628a29a91d138113eb0f5a3a624dd68f40ce6cc76b9d8e995f6dde71afc85973a6e0ec7d3c840566e7315d4b2d012f5"}, 0x32, "426442854dbbf8906e82c30bdf38e091203950d64444fd268453fa258931a80455d47c5886c9d255f572fc702876602aa027"}, 0xde})
r3 = syz_mount_image$nfs4(&(0x7f0000002500), &(0x7f0000002540)='./file0\x00', 0x80000001, 0x2, &(0x7f0000002680)=[{&(0x7f0000002580)="d2a224a10145b5cac03eae28066e154ad23918f803902d066f9791b0167e35f71d7906cd5a0fb04e8428534f4a96e65c859d317be685b65b5e2cac270859ff6a07704f3976fa4ad63fe5a7688577b2dd3bfdcb0914e7c6e554", 0x59, 0x7fff}, {&(0x7f0000002600)="fb8f3ef67e7870ab2cb11f0df8888da6a9456ad0e06e7c47f8a94407c3e5c61a71bf992f66f630be0c81deb4654a7fbea09ab3edffd84d2b3ae3236f307fdf3f9e43548dd77c6f534007580098eb81d35bb2a1c032ab067020332a7d218717f1ec75579ce10e0ccf7ffb160177897afce8ec3b311cd9af62e2a9a9", 0x7b, 0xffff}], 0x804, &(0x7f00000026c0)={[{'/dev/nvram\x00'}, {'/dev/nvram\x00'}, {}, {'\x00'}, {'/dev/ptmx\x00'}, {'/dev/nvram\x00'}, {'/dev/nvram\x00'}], [{@euid_lt={'euid<', 0xee01}}]})
open_tree(r3, &(0x7f0000002740)='./file0\x00', 0x0)
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000005740), 0x304000, 0x0)
sendmsg$IPSET_CMD_SAVE(r4, &(0x7f0000005840)={&(0x7f0000005780)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000005800)={&(0x7f00000057c0)={0x14, 0x8, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x2000004}, 0x480c0)
ioctl$F2FS_IOC_FLUSH_DEVICE(r4, 0x4008f50a, &(0x7f0000005880)={0x5, 0x55502efa})
write(r4, &(0x7f00000058c0)="02c4a10553d1d02e0e0c7c00c3e71ac5f8186e7ffa563f0b820598db19428c10ae0a8e6d63464aa3414accbf9eda8769d763e431abfb16be40fe67128db269323377dcb2b6594288f18e12deff1d8fc2062a8e453fe98c396eb264aa586b3b2f56d7d4fc4ccadc03b03d17aee27650f030ba358fb7369ff7a8919b25d4cb0c561aa42920de7ff2448b57a2a591088fd1ca0c5775fda8c5f96b8392b4ef", 0x9d)
getsockopt$IP_SET_OP_GET_FNAME(0xffffffffffffffff, 0x1, 0x53, &(0x7f00000059c0)={0x8, 0x7, 0x0, 'syz0\x00'}, &(0x7f0000005a00)=0x2c)

23:28:02 executing program 5:
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x401, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x7, 0x3, 0x0, 0x9, 0x4040000}, 0x14)
ioctl$AUTOFS_IOC_SETTIMEOUT(r0, 0x80049367, &(0x7f0000000080)=0x5)
r1 = syz_io_uring_complete(0x0)
ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r1, 0x40046210, &(0x7f00000000c0)=0x1)
ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r1, 0x942e, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000140)={<r2=>r0, 0x7, 0x9, 0x8000000000000000})
r3 = openat$incfs(r0, &(0x7f0000000240)='.pending_reads\x00', 0x800, 0x1c5)
r4 = openat$null(0xffffffffffffff9c, &(0x7f00000004c0), 0x200, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000640)={{0x1, 0x1, 0x18, <r5=>r0, {r1}}, './file0\x00'})
io_submit(0x0, 0x8, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x7c4f, r1, &(0x7f0000000100)="36ebac3dff70a708e5046259afd8ef336b795837ea64e08a514ffea838a3c484fdf7705fad", 0x25, 0x3, 0x0, 0x2, r2}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x2, 0xff, r0, &(0x7f00000001c0)="cba27f40d24a3097972fd7be818ce8d08fb8167e7136ef82d83030a0d569d58e20614206b25e0d8b957f34fc88805c0d5187e4309b356cd490b035cf94506f94a6118ff62e78fce300bd8c60", 0x4c, 0x3, 0x0, 0x0, r3}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x3ff, r0, &(0x7f00000002c0)="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", 0xfe, 0x7, 0x0, 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x3, 0x97d, r0, &(0x7f0000000400)="addca50bf56c754e3cc37b129e7880eb4c3a3ade5fe5c2c3e6d153e06a52a7b20ec7d6a93ec390365a2f8f9a7c032b118ee57579fdff8a74169a401aeaa858155fb4293dede81c96921202cb997f54196d06c84662a7b80d442437619070bafc1e6b7d26f6e85e38c124b651d641", 0x6e, 0x10000, 0x0, 0x1, r0}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x8, 0xc167, r4, &(0x7f0000000500)="dc0cf9af5100", 0x6, 0x0, 0x0, 0x1, r1}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x2, 0x3f, r0, &(0x7f0000000580)="49ea9523411d646abf74cf39e0a9e4f3b5d139efe882f1c1f3282e2ae0fc1678b5ea956f6fe12dfe398d90fb9f8c3ec135848d5f4175aad8de5127fde9dfb073cf4551544c68ad3c64a4e4493cadd58e2d9706c28957bd40c2cb2aeac7e0434dc25a365d718a667e489800eb702f1657c1522a6b44caba764b2ee9e7e863ef956257a9e335f646f79723abcf5b61b9569064e9039e39693715997f1f5412f6de2e3d9367", 0xa4, 0x5, 0x0, 0x2, r5}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000006c0)="26a44c2d72a9efa50509dd9ce1c13544a332c742533494360f18112e1a0310c04bd004fba152b940abc0eab16915e52a2661c1088f8f0fb683d63122f6ab8dd5a2da7ab7d7f0630992bd201f01717ea71fb7e2fd", 0x54, 0x6, 0x0, 0x3}, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x5, 0xff, r0, &(0x7f0000000780)="a383af16799a5cfaf131ac45bd4f8bb98893414bf82b447b00c9246fa10ea49eaf95fa896cf4580d5894c508fa8bceccf71ff872589610a3961c969b97b57626ace96f8c49a16741312e1be99f1cf1cec9c1197a29148108b49c36357b1780ae97f32295c45c8d15a00e0187c3a4976f42e068568c5d7bdbc9f11f72af92b58d7a86ab5f90dac4e1a16b99efcfe68d64419ec098120b854503d601e86dc9421e42239f8c2092193632934e2af7a5b028f0d0467eb6a3bad228080be158adb3586e08c2df798eb23dbe301b0def6c0f6ec91ace537187974739635bfa5ca58492542921b527659e14ec54d6b704508643153bd95fd1f19b7f", 0xf8, 0x4, 0x0, 0x3, r0}])
ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000900)=0x20)
r6 = syz_open_dev$char_usb(0xc, 0xb4, 0xffffffffffff0001)
ioctl$BTRFS_IOC_SCRUB_CANCEL(r6, 0x941c, 0x0)
ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r1, 0x8010671f, &(0x7f0000000980)={&(0x7f0000000940)=""/35, 0x23})
r7 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$BTRFS_IOC_FS_INFO(r7, 0x8400941f, &(0x7f00000009c0))
r8 = dup2(r5, r5)
lseek(r8, 0x3, 0x4)
io_uring_register$IORING_UNREGISTER_EVENTFD(0xffffffffffffffff, 0x5, 0x0, 0x0)

23:28:02 executing program 7:
setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x42, &(0x7f0000000000)={0x77359400}, 0x10)
write(0xffffffffffffffff, &(0x7f0000000040)="f760f5b8a6fc402b60e6cd985353ffc2b44264a75e072ba9c087f5c65cbffdb7fe294c754fff5e59516f6dd91e29ac7d3755", 0x32)
pipe2(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80000)
sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xec, 0x0, 0x300, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FTM_RESPONDER={0x74, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x6d, 0x3, "f3345d8a17d61218064a34de6eefcf9bf2fd90de7181e52c35f8f49d5219f30564b8ed69a1201db15e2627f1fcb4219001fb3f30ee372b9366a1a9c945d026e8a5e172797e641ee44f39795adb0952d3319ecb2f0cbc1bfe0c95d83e33ff88842553111f53ef85dbdd"}]}, @NL80211_ATTR_IE_PROBE_RESP={0x1c, 0x7f, [@peer_mgmt={0x75, 0x16, {0x1, 0xce, @val=0x1, @void, @val="9462141e494b305bc6a2de773d7abf4d"}}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x3e, 0x80, [@random_vendor={0xdd, 0x30, "5766c4c8266713dd3a78815d86dbab4986302ab7ede0b5dc53c17bbb57c66fa64a6e6bd8892815bf209b9d8fccc6c8e9"}, @mesh_chsw={0x76, 0x6, {0xff, 0x25, 0x2c, 0x688a}}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x20008804}, 0x40894)
r2 = accept4$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @multicast2}, &(0x7f00000002c0)=0x10, 0x800)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2)
sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x68, 0x0, 0x4, 0x70bd25, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0x0, @link='broadcast-link\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x4091}, 0x48011)
io_cancel(0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x400, r0, &(0x7f0000000440)="c138e7d8bbe513110b0d7c52371ce8501608ac8fc55aab7ac790a367e0be81754ab507d043e0d7bab5f976e7088bf9cc4ba5e625d0c6dcc618c4ef26c3e5020aaf1b16a0160eaee480bd9e17d87425cfd4e45667", 0x54, 0x7f, 0x0, 0x2, r1}, &(0x7f0000000500))
sendmsg$TIPC_NL_BEARER_DISABLE(r1, &(0x7f0000000740)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000580)={0x174, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x50, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ipvlan1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}]}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffffffff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7ff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK={0xe4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x174}, 0x1, 0x0, 0x0, 0x800}, 0x80)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000780), 0x200000, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r0)
sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r3, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x5c, r4, 0x300, 0x70bd2d, 0x1000, {{}, {@void, @val={0xc, 0x99, {0x8, 0x10}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x49}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x27}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x9}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x29}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040800)
fcntl$F_GET_RW_HINT(r2, 0x40b, &(0x7f0000000940))
close(r1)
getpeername(0xffffffffffffffff, &(0x7f0000000980)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, &(0x7f0000000a00)=0x80)
ioctl$INCFS_IOC_CREATE_FILE(r0, 0xc058671e, &(0x7f0000000c00)={{}, {}, 0x38, 0x0, 0x0, &(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0)="85629b598994063196e8e234e649afe2ef73e25c6ee39d26c208355c6fc9b530be5f53", 0x23, 0x0, &(0x7f0000000b00)={0x2, 0x50, {0x1, 0xc, 0x33, "402db7e73741ad6c2bd0a3a4a4127b1689537b2b4c8d66131fd70b6df731e2fc0149e2564b49f905c8390b47bb251207ee2da6", 0x10, "d9ed6be999bf5c6d9d766e9434e680ac"}, 0x8f, "57ad97097715d12c8b8f44d8e8140b483b6d26a8d764f55404c6e019af5fce9a189001659e24f1f49128bba7a655b28385ad074d5c7c89c3f6318373dd43b54ae9c278a9dc993d9cf85fb2d38f91add1b5ba6f91f3613918bfae170b5b4e47260e72672b081ca73d3350b48e6436985961fab5d7d0a64dec11f4c4dd03c70c67149d33dff091f8364b5b714e495fb4"}, 0xeb})
sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000e00)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0xf0, r4, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x13880983, 0x32}}}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x9}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0xc330}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x9}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x90, 0x3, 0x0, 0x1, [{0x8c, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0x88, 0x1, "564a55573e95db0f1cee67df9a0fc2f7d6d9153305f6d6374011b115347be97bec8d0c535e0d9eae397f7552cde62764a28f2ce2ac87dc2a07f24b6cc8603edf32ac2beb0d9bcfe63ed6a336982aecd3b7e01caafe1f6ba57904dfc5fdc2997d78d2ec40bc7f68c016c2452af50cf5a032a0132c0003bb1f9a8ee6113144c960f0abf1b5"}}]}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x28}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}]}, 0xf0}, 0x1, 0x0, 0x0, 0x8000}, 0x805)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000e80)={0x1, &(0x7f0000000e40)=[{0x1ff, 0x7, 0x7, 0x1}]})
ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000ec0)={0x0, 0x0, 0x3, 0x0, '\x00', [{0x1, 0x3, 0x3, 0x16, 0x3f, 0x8}, {0x10000, 0x100, 0x1, 0x4, 0xf1e, 0x20}], ['\x00', '\x00', '\x00']})
sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001100)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x1400820}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x1c, 0x0, 0x10, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8c0}, 0x8004)

23:28:02 executing program 6:
ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, &(0x7f0000000000))
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000040)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}})
ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, &(0x7f0000000440))
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000540)='/sys/class/rfkill', 0x100, 0x101)
pread64(r0, &(0x7f0000000580)=""/23, 0x17, 0x6)
sendmsg$IPSET_CMD_HEADER(r0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x70, 0xc, 0x6, 0x0, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x70}, 0x1, 0x0, 0x0, 0x40081}, 0x801)
ioctl$SG_GET_TIMEOUT(r0, 0x2202, 0x0)
ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f0000000700)=0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000740)={{0x1, 0x1, 0x18, <r1=>r0, {0x200}}, './file0\x00'})
getdents(r1, &(0x7f0000000780)=""/59, 0x3b)
r2 = dup(r1)
ioctl$SCSI_IOCTL_SYNC(r2, 0x4)
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000007c0)={{{@in, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in6=@mcast2}, 0x0, @in6=@private0}}, &(0x7f00000008c0)=0xe8)
recvmmsg$unix(r0, &(0x7f0000003500)=[{{&(0x7f0000000900)=@abs, 0x6e, &(0x7f0000000e40)=[{&(0x7f0000000980)=""/216, 0xd8}, {&(0x7f0000000a80)=""/230, 0xe6}, {&(0x7f0000000b80)=""/201, 0xc9}, {&(0x7f0000000c80)=""/194, 0xc2}, {&(0x7f0000000d80)=""/181, 0xb5}], 0x5, &(0x7f0000000ec0)=[@rights={{0x24, 0x1, 0x1, [<r4=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, <r5=>0x0}}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xd0}}, {{&(0x7f0000000fc0), 0x6e, &(0x7f00000010c0)=[{&(0x7f0000001040)=""/72, 0x48}], 0x1, &(0x7f0000001100)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xb8}}, {{&(0x7f00000011c0)=@abs, 0x6e, &(0x7f00000016c0)=[{&(0x7f0000001240)=""/38, 0x26}, {&(0x7f0000001280)=""/200, 0xc8}, {&(0x7f0000001380)=""/78, 0x4e}, {&(0x7f0000001400)=""/120, 0x78}, {&(0x7f0000001480)=""/88, 0x58}, {&(0x7f0000001500)=""/55, 0x37}, {&(0x7f0000001540)=""/190, 0xbe}, {&(0x7f0000001600)=""/109, 0x6d}, {&(0x7f0000001680)=""/44, 0x2c}], 0x9, &(0x7f0000001780)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [<r6=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x70}}, {{&(0x7f0000001800)=@abs, 0x6e, &(0x7f0000001940)=[{&(0x7f0000001880)=""/90, 0x5a}, {&(0x7f0000001900)}], 0x2, &(0x7f0000001980)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f00000019c0), 0x6e, &(0x7f0000002bc0)=[{&(0x7f0000001a40)=""/3, 0x3}, {&(0x7f0000001a80)=""/198, 0xc6}, {&(0x7f0000001b80)=""/4096, 0x1000}, {&(0x7f0000002b80)=""/19, 0x13}], 0x4}}, {{&(0x7f0000002c00), 0x6e, &(0x7f0000002d00)=[{&(0x7f0000002c80)=""/82, 0x52}], 0x1, &(0x7f0000002d40)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, <r7=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}}, {{&(0x7f0000002d80), 0x6e, &(0x7f0000002f80)=[{&(0x7f0000002e00)=""/151, 0x97}, {&(0x7f0000002ec0)=""/16, 0x10}, {&(0x7f0000002f00)}, {&(0x7f0000002f40)=""/49, 0x31}], 0x4, &(0x7f0000002fc0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa0}}, {{&(0x7f0000003080), 0x6e, &(0x7f0000003480)=[{&(0x7f0000003100)=""/143, 0x8f}, {&(0x7f00000031c0)=""/28, 0x1c}, {&(0x7f0000003200)=""/108, 0x6c}, {&(0x7f0000003280)=""/93, 0x5d}, {&(0x7f0000003300)=""/182, 0xb6}, {&(0x7f00000033c0)=""/169, 0xa9}], 0x6}}], 0x8, 0xadb5313e8f884a49, 0x0)
setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000003700)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@rand_addr=0x64010102, 0x4e21, 0x9, 0x4e22, 0xfff, 0x2, 0x0, 0x100, 0x2f, 0x0, r5}, {0x4, 0x0, 0x2, 0x42a40745, 0x8000, 0x7fff, 0x3ff, 0x8}, {0x0, 0xfd, 0x3, 0x5}, 0x0, 0x6e6bb3, 0x2, 0xada8caac4baba2ab, 0x0, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0x39}, 0x4d3, 0xff}, 0xa, @in=@loopback, 0x3504, 0x2, 0x2, 0x9, 0xdce4, 0x4}}, 0xe8)
ioctl$SCSI_IOCTL_DOORUNLOCK(r7, 0x5381)
r8 = openat2(r6, &(0x7f0000003800)='./file0\x00', &(0x7f0000003840)={0x604800, 0x93, 0xc}, 0x18)
sendmsg$NFNL_MSG_ACCT_NEW(r8, &(0x7f0000003940)={&(0x7f0000003880)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000003900)={&(0x7f00000038c0)={0x20, 0x0, 0x7, 0x101, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFACCT_BYTES={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x8002}, 0x20000000)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000003a80)={'erspan0\x00', &(0x7f00000039c0)={'syztnl2\x00', <r9=>r3, 0x20, 0x80, 0x1, 0x164, {{0x26, 0x4, 0x2, 0xc, 0x98, 0x68, 0x0, 0x1, 0x29, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x20}, {[@timestamp_prespec={0x44, 0x24, 0xea, 0x3, 0x1, [{@remote, 0x81}, {@empty, 0x1}, {@broadcast, 0x3ff}, {@local, 0x3}]}, @cipso={0x86, 0x18, 0x0, [{0x1, 0x12, "4dcfe461752bc22544019138eb6f2ea3"}]}, @timestamp={0x44, 0x1c, 0xc1, 0x0, 0x9, [0x8000, 0x12b, 0x9, 0x6, 0x5, 0x7fff]}, @lsrr={0x83, 0xf, 0x40, [@empty, @loopback, @multicast2]}, @lsrr={0x83, 0x1b, 0x87, [@dev={0xac, 0x14, 0x14, 0xf}, @local, @remote, @empty, @rand_addr=0x64010101, @rand_addr=0x64010101]}]}}}}})
sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000004580)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000004540)={&(0x7f0000003ec0)={0x678, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [{{0x8, 0x1, r3}, {0x218, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffec64}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r3}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xe5}}}]}}, {{0x8, 0x1, r3}, {0x138, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r3}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r3}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r3}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x25a}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xb6b5}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x678}, 0x1, 0x0, 0x0, 0x50}, 0x20000004)

[   87.147718] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   87.150392] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   87.154340] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   87.156914] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   87.158624] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   87.161253] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   87.165527] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   87.168401] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   87.172193] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   87.177913] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   87.205635] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   87.210868] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   87.215010] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   87.218719] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   87.224446] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   87.287689] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   87.290384] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   87.294158] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   87.306011] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   87.306132] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   87.307543] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   87.311605] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   87.311879] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   87.319684] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   87.330323] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   87.331545] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   87.339685] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[   87.341313] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   87.351343] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[   87.355806] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   87.356225] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[   87.360253] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[   87.362501] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[   87.370002] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[   87.377724] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[   87.382531] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[   87.385740] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[   87.386761] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   87.400663] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   87.403448] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[   89.240230] Bluetooth: hci2: command tx timeout
[   89.240237] Bluetooth: hci0: command tx timeout
[   89.302773] Bluetooth: hci1: command tx timeout
[   89.430138] Bluetooth: hci4: command tx timeout
[   89.430196] Bluetooth: hci3: command tx timeout
[   89.494078] Bluetooth: hci6: command tx timeout
[   89.494155] Bluetooth: hci5: command tx timeout
[   89.494655] Bluetooth: hci7: command tx timeout
[   91.286083] Bluetooth: hci2: command tx timeout
[   91.287281] Bluetooth: hci0: command tx timeout
[   91.351045] Bluetooth: hci1: command tx timeout
[   91.478222] Bluetooth: hci3: command tx timeout
[   91.478240] Bluetooth: hci4: command tx timeout
[   91.542205] Bluetooth: hci5: command tx timeout
[   91.542245] Bluetooth: hci6: command tx timeout
[   91.543132] Bluetooth: hci7: command tx timeout
[   93.334201] Bluetooth: hci0: command tx timeout
[   93.336089] Bluetooth: hci2: command tx timeout
[   93.398064] Bluetooth: hci1: command tx timeout
[   93.527103] Bluetooth: hci4: command tx timeout
[   93.527122] Bluetooth: hci3: command tx timeout
[   93.590141] Bluetooth: hci7: command tx timeout
[   93.590232] Bluetooth: hci5: command tx timeout
[   93.590986] Bluetooth: hci6: command tx timeout
[   95.382075] Bluetooth: hci2: command tx timeout
[   95.384056] Bluetooth: hci0: command tx timeout
[   95.446248] Bluetooth: hci1: command tx timeout
[   95.574113] Bluetooth: hci4: command tx timeout
[   95.574266] Bluetooth: hci3: command tx timeout
[   95.638208] Bluetooth: hci7: command tx timeout
[   95.638227] Bluetooth: hci5: command tx timeout
[   95.639156] Bluetooth: hci6: command tx timeout
[  123.968191] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  123.968853] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  124.156377] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  124.157041] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  124.597612] loop4: detected capacity change from 0 to 264192
[  124.615400] nfs4: Unknown parameter '/dev/nvram'
[  124.649794] loop4: detected capacity change from 0 to 264192
23:28:40 executing program 4:
ioctl$HIDIOCGVERSION(0xffffffffffffffff, 0x80044801, &(0x7f0000000540))
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffffffff4b}], 0x0, &(0x7f0000010f60))
r1 = fsmount(0xffffffffffffffff, 0x1, 0x89)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, <r3=>0x0}, &(0x7f0000000040)=0x5)
setuid(r3)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x2008000, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rndno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',dfl|gid=', @ANYRESHEX=0x0, @ANYBLOB=',version=9p2000,access=client,access=', @ANYRESDEC=r3, @ANYBLOB=',seclabel,audit,\x00'])
r4 = creat(&(0x7f0000000180)='./file0\x00', 0x0)
fcntl$setlease(r4, 0x400, 0x0)
r5 = socket$inet(0x2, 0x3, 0x2)
r6 = syz_io_uring_complete(0x0)
sendmsg$AUDIT_MAKE_EQUIV(r6, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8a00018}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)={0x24, 0x3f7, 0x8, 0x70bd2d, 0x25dfdbfe, {0x5, 0x5, './mnt', './mnt'}, [""]}, 0x24}}, 0x45)
ioctl$sock_inet_SIOCGIFADDR(r5, 0x8915, &(0x7f00000001c0)={'wlan0\x00', {0x2, 0x0, @dev}})
mount$9p_fd(0x0, &(0x7f0000000040)='./mnt\x00', &(0x7f0000000080), 0x2080, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB="2c6e6f6465766d61702c76657273696f6e3d3970323030302e4c2c6c6f6f73652c76657273696f6e3d3970323030302c63616368653d6e6f6e652c64656275673d3078303030303030303030303030303030302c636f6e746578743d73797361646d5f752c61707072616973652c61707072616973652c7375626a5f726f6c653d2c7063723d30303030303030303030303030303030303031332c646f6e745f686173682c61756469742c00257b6b55e7f6e3f09f5d7b6b26aa834925da8a0d23a094d380147d7b8615c0cb0c36d4f7ce340bb85d38ddcf903ea12fb4"])

[  124.815994] loop4: detected capacity change from 0 to 16383
[  124.838168] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)!
[  124.838920] EXT4-fs (loop4): group descriptors corrupted!
23:28:41 executing program 4:
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/pm_async', 0x28001, 0x0)
write$tcp_mem(r0, &(0x7f0000000280)={0xfffffffffffffffd}, 0x48)
write$tcp_mem(r0, &(0x7f0000000000)={0x80000001, 0x20, 0x9, 0x20, 0xffff}, 0x48)

23:28:41 executing program 4:
fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100), 0x2, 0x2)
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000400)={{}, 0x0, 0x0, @unused=[0x7, 0x8, 0x10000, 0x20], @subvolid=0x3})
r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x44802, 0x0)
io_setup(0xfff, &(0x7f0000000040)=<r1=>0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1000, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',access=client,access=user,access=client,fowner<', @ANYRESDEC, @ANYBLOB=',defctext9sysadm_u,\x00'])
io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x6, 0x0, r0, &(0x7f0000000000)="fa", 0x1}])

[  125.209390] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  125.210014] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  125.316288] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  125.316921] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
23:28:41 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x496, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000080)=0x6)
r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
dup2(r1, r1)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000005, 0x13, 0xffffffffffffffff, 0x3000)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000100000018002000", @ANYRES32=r0, @ANYRES32])
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000200), 0xd2100, 0x0)
recvfrom(r2, &(0x7f0000000240)=""/238, 0xee, 0x40002040, 0x0, 0x0)
r3 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0)
r4 = dup(r3)
ioctl$SG_IO(r4, 0x5385, &(0x7f00000010c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x9, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
accept4$inet(r4, &(0x7f00000000c0)={0x2, 0x0, @loopback}, &(0x7f0000000100)=0x10, 0x0)
r5 = creat(&(0x7f0000000300)='./file0\x00', 0x0)
write(r5, &(0x7f0000000900)="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", 0x1b2)
r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setstatus(r5, 0x4, 0x44000)
sendfile(r5, r6, 0x0, 0xfdef)

[  125.388424] audit: type=1400 audit(1756510121.476:8): avc:  denied  { open } for  pid=3858 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[  125.390660] audit: type=1400 audit(1756510121.477:9): avc:  denied  { kernel } for  pid=3858 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[  125.574759] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  125.575691] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  125.698924] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  125.699836] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
23:28:41 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x2c, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000700100000f000000000000000000000004000000000002000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b0000000004000008000000d2c20100120300000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e33343135323238343000"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000d0a9da48497c4915a7449265c083aec0010040000c00000000000000d1f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000100000000000000000000000000000000000000040000003800000000000000", 0x40, 0x540}, {&(0x7f0000010300)="0300000004000000000000000000000000000000010400"/32, 0x20, 0x640}, {&(0x7f0000010400)="03000000040000000500000017000f000300040000000000000000000f008551", 0x20, 0x800}, {&(0x7f0000010500)="ff010000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0100ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000d1f4655fd1f4655fd1f4655f00"/2080, 0x820, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d1f4655fd1f4655fd1f4655f00000000000004002000000000000800050000000af301000400000000000000000000000100000030000000", 0x40, 0x1800}, {&(0x7f0000010f00)="2000000038fad6a438fad6a400000000d1f4655f00"/32, 0x20, 0x1880}, {&(0x7f0000011000)="8081000000180000d1f4655fd1f4655fd1f4655f00000000000001002000000010000800000000000af3020004000000000000000000000002000000500000000200000004000000520000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000d1f4655f00"/160, 0xa0, 0x1c00}, {&(0x7f0000011100)="8081000000180000d1f4655fd1f4655fd1f4655f00000000000001002000000010000800000000000af3020004000000000000000000000002000000600000000200000004000000620000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000d1f4655f00"/160, 0xa0, 0x2000}, {&(0x7f0000011200)="c0410000002c0000d1f4655fd1f4655fd1f4655f00000000000002002000000000000800000000000af301000400000000000000000000000b00000040000000", 0x40, 0x3c00}, {&(0x7f0000011300)="20000000000000000000000000000000d1f4655f000000000000000000000000000002ea00"/64, 0x40, 0x3c80}, {&(0x7f0000011400)="ed4100003c000000d1f4655fd1f4655fd1f4655f0000000000000200000000000000001003000000020000000d0000001000050166696c65300000000e0000002800050766696c6531000000000000000000000000000000000000000000000000000000e50617fa0000000000000000000000000000000000000000000000002000000038fad6a438fad6a438fad6a4d1f4655f38fad6a40000000000000000000002ea04070000000000000000000000000000646174610000000000000000", 0xc0, 0x4000}, {&(0x7f0000011500)="ed8100001a040000d1f4655fd1f4655fd1f4655f00000000000001002000000000000800010000000af3010004000000000000000000000002000000700000000000000000000000000000000000000000000000000000000000000000000000000000000281944c0000000000000000000000000000000000000000000000002000000038fad6a438fad6a438fad6a4d1f4655f38fad6a40000000000000000", 0xa0, 0x4400}, {&(0x7f0000011600)="ffa1000026000000d1f4655fd1f4655fd1f4655f00000000000001000000000000000000010000002f746d702f73797a2d696d61676567656e3334313532323834302f66696c65302f66696c6530000000000000000000000000000000000000000000007dfbeec50000000000000000000000000000000000000000000000002000000038fad6a438fad6a438fad6a4d1f4655f38fad6a40000000000000000", 0xa0, 0x4800}, {&(0x7f0000011700)="ed8100000a000000d1f4655fd1f4655fd1f4655f000000000000010000000000000000100100000073797a6b616c6c6572730000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000cf6b9f150000000000000000000000000000000000000000000000002000000038fad6a438fad6a438fad6a4d1f4655f38fad6a40000000000000000000002ea040700000000000000000000000000006461746106015403000000000600000000000000786174747231000006014c0300000000060000000000000078617474723200"/256, 0x100, 0x4c00}, {&(0x7f0000011800)="0000000000000000000000000000000078617474723200007861747472310000ed81000028230000d1f4655fd1f4655fd1f4655f00000000000002002000000000000800010000000af3010004000000000000000000000009000000800000000000000000000000000000000000000000000000000000000000000000000000000000009b745a560000000000000000000000000000000000000000000000002000000038fad6a438fad6a438fad6a4d1f4655f38fad6a40000000000000000", 0xc0, 0x4fe0}, {&(0x7f0000011900)="ed81000064000000d1f4655fd1f4655fd1f4655f000000000000010000000000000000100100000073797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c2cc444b00000000000000000000000000000000000000000000000002000000038fad6a438fad6a438fad6a4d1f4655f38fad6a40000000000000000000002ea04073403000000002800000000000000646174610000000000000000", 0xc0, 0x5400}, {&(0x7f0000011a00)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lersyzkallersyzkallersyzkallersyzkallers', 0x40, 0x57c0}, {&(0x7f0000011b00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531000000100000001000050166696c6532000000100000001000050166696c6533000000110000009403090166696c652e636f6c64000000", 0x80, 0xc000}, {&(0x7f0000011c00)="0b0000000c0001022e000000020000000c0002022e2e000000000000e8030000", 0x20, 0x10000}, {&(0x7f0000011d00)="00000000000400"/32, 0x20, 0x10400}, {&(0x7f0000011e00)="00000000000400"/32, 0x20, 0x10800}, {&(0x7f0000011f00)="00000000000400"/32, 0x20, 0x100000001}, {&(0x7f0000012000)="00000000000400"/32, 0x20, 0x11000}, {&(0x7f0000012100)="00000000000400"/32, 0x20, 0x11400}, {&(0x7f0000012200)="00000000000400"/32, 0x20, 0x11800}, {&(0x7f0000012300)="00000000000400"/32, 0x20, 0x11c00}, {&(0x7f0000012400)="00000000000400"/32, 0x20, 0x12000}, {&(0x7f0000012500)="00000000000400"/32, 0x20, 0x12400}, {&(0x7f0000012600)="00000000000400"/32, 0x20, 0x12800}, {&(0x7f0000012700)="111fc0d901000000803a0900803a090000000000060000000000000005000000", 0x20, 0x14000}, {&(0x7f0000012800)="0200"/32, 0x20, 0x14400}, {&(0x7f0000012900)="0300"/32, 0x20, 0x14800}, {&(0x7f0000012a00)="0400"/32, 0x20, 0x14c00}, {&(0x7f0000012b00)="0500"/32, 0x20, 0x15000}, {&(0x7f0000012c00)="0000000000000000010000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000100"/96, 0x60, 0x15400}, {&(0x7f0000012d00)="2719c0d901000000803a0900803a090000000000060000000000000005000000", 0x20, 0x18000}, {&(0x7f0000012e00)="0200"/32, 0x20, 0x18400}, {&(0x7f0000012f00)="0300"/32, 0x20, 0x18800}, {&(0x7f0000013000)="0400"/32, 0x20, 0x18c00}, {&(0x7f0000013100)="0500"/32, 0x20, 0x19000}, {&(0x7f0000013200)="0000000000000000010000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000100"/96, 0x60, 0x19400}, {&(0x7f0000013300)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x1c000}], 0x0, &(0x7f0000013800))
open$dir(&(0x7f0000000180)='./file0\x00', 0x2, 0x0)
open$dir(&(0x7f00000000c0)='./file1\x00', 0x20000, 0x1c)
newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040), 0x0)

[  125.835753] loop7: detected capacity change from 0 to 264192
[  125.848712] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  125.849362] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  125.877736] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
23:28:42 executing program 7:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0)
writev(r0, &(0x7f0000001800)=[{&(0x7f0000000280)="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", 0x15c}], 0x1)

[  125.989837] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  126.020931] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  126.021574] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
23:28:42 executing program 4:
recvfrom(0xffffffffffffffff, &(0x7f0000000040)=""/196, 0xc4, 0x40010100, &(0x7f0000000140)=@rc={0x1f, @none, 0x2}, 0x80)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x1}}, './file0\x00'})
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
recvfrom(0xffffffffffffffff, &(0x7f0000000380)=""/109, 0x6d, 0x40000020, &(0x7f0000000400)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @local}, 0x0, 0x4, 0x3, 0x1}}, 0x80)
setsockopt$inet_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000480)={0x3}, 0x4)
syz_emit_ethernet(0x3e, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"/416], 0x0)
ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r0, 0x8008f513, &(0x7f00000004c0))

23:28:42 executing program 7:
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000680)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x2}}, './file0\x00'})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, r2, 0x1, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x12}, @void, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000880}, 0x40)
syz_mount_image$tmpfs(0x0, &(0x7f0000000b40)='./file0\x00', 0x0, 0x0, 0x0, 0x80000, 0x0)
keyctl$KEYCTL_CAPABILITIES(0x1f, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)

[  126.128478] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  126.129117] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  126.178975] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  126.179913] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  126.208697] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  126.209356] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  126.283445] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  126.284152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  126.328811] loop3: detected capacity change from 0 to 264192
[  126.334483] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  126.335424] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  126.373678] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  126.374527] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  126.473439] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  126.474237] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  126.480352] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  126.481101] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
23:28:56 executing program 2:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCGSOFTCAR(r0, 0x5602, &(0x7f0000000040))
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x20)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='projid_map\x00')
ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x2)
lseek(r1, 0x0, 0x0)
fcntl$notify(r0, 0x402, 0x27)
ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000000))

23:28:56 executing program 6:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff)
r0 = perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0xfffffffffffffffc, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2)
poll(&(0x7f0000000140)=[{}], 0x1, 0x9)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="66d4e4ffffffffff2d2f66ebd56530000080000000000000abd08bb76aa1ee107e9920b37ca1f7559945bc2234ddb67bcbc892f9eb4621dcb345485dce34d02c722190055d13f6cd3a2afac149a4314691fa432b6d8a73b9cc73eb5d42bb486b6191aab370e25a27e32355cedc4ad6b8a097b6805916b2e5b83c2c08bdc8c9338e4152324c47afb583339ac7a718bd8e1c22e700af7c492d763df757f86670bf060387dca26c6e5dd34e7d63dbb62b02f83d4751937a9e7d3e7af81b64ea0c36000000000000"])
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
r2 = clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280)=<r3=>0x0, 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58)
r4 = gettid()
rt_sigqueueinfo(r4, 0x7, &(0x7f00000000c0))
r5 = getpid()
recvmmsg$unix(0xffffffffffffffff, &(0x7f00000079c0)=[{{&(0x7f00000006c0)=@abs, 0x6e, &(0x7f0000000440)=[{&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/42, 0x2a}, {&(0x7f0000001740)=""/82, 0x52}, {&(0x7f00000017c0)=""/157, 0x9d}], 0x4}}, {{&(0x7f0000001880)=@abs, 0x6e, &(0x7f0000001b40)=[{&(0x7f0000001900)=""/109, 0x6d}, {&(0x7f0000001980)=""/47, 0x2f}, {&(0x7f00000019c0)=""/49, 0x31}, {&(0x7f0000001a00)=""/192, 0xc0}, {&(0x7f0000001ac0)=""/84, 0x54}], 0x5, &(0x7f0000001bc0)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000001c00)=@abs, 0x6e, &(0x7f0000002c80)=[{&(0x7f0000001c80)=""/4096, 0x1000}], 0x1}}, {{&(0x7f0000002cc0), 0x6e, &(0x7f0000005000)=[{&(0x7f0000002d40)=""/146, 0x92}, {&(0x7f0000002e00)=""/4096, 0x1000}, {&(0x7f0000003e00)=""/200, 0xc8}, {&(0x7f0000003f00)=""/24, 0x18}, {&(0x7f0000003f40)=""/62, 0x3e}, {&(0x7f0000003f80)=""/117, 0x75}, {&(0x7f0000004000)=""/4096, 0x1000}], 0x7}}, {{0x0, 0x0, &(0x7f0000005280)=[{&(0x7f0000005080)=""/74, 0x4a}, {&(0x7f0000005100)=""/213, 0xd5}, {&(0x7f0000005200)=""/50, 0x32}, {&(0x7f0000005240)=""/25, 0x19}], 0x4, &(0x7f00000052c0)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x130}}, {{&(0x7f0000005400), 0x6e, &(0x7f0000006a80)=[{&(0x7f0000005900)=""/4096, 0x1000}, {&(0x7f0000005480)=""/242, 0xf2}, {&(0x7f0000005580)}, {&(0x7f00000055c0)=""/152, 0x98}, {&(0x7f0000005680)=""/67, 0x43}, {&(0x7f0000005700)=""/50, 0x32}, {&(0x7f0000005740)=""/145, 0x91}, {&(0x7f0000005800)=""/37, 0x25}, {&(0x7f0000006900)=""/104, 0x68}, {&(0x7f0000006980)=""/210, 0xd2}], 0xa, &(0x7f0000006b40)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}}, {{&(0x7f0000006bc0), 0x6e, &(0x7f0000005840)=[{&(0x7f0000006c40)=""/124, 0x7c}, {&(0x7f0000006cc0)=""/253, 0xfd}], 0x2}}, {{0x0, 0x0, &(0x7f0000007180)=[{&(0x7f0000006dc0)=""/97, 0x61}, {&(0x7f0000006e40)=""/246, 0xf6}, {&(0x7f0000006f40)=""/163, 0xa3}, {&(0x7f0000007000)=""/219, 0xdb}, {&(0x7f0000007100)=""/68, 0x44}], 0x5, &(0x7f0000007200)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd0}}, {{0x0, 0x0, &(0x7f0000007480)=[{&(0x7f0000007300)=""/196, 0xc4}, {&(0x7f0000007400)=""/97, 0x61}], 0x2, &(0x7f00000074c0)=[@cred={{0x1c, 0x1, 0x2, {<r6=>0x0}}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x160}}, {{0x0, 0x0, &(0x7f0000007880)=[{&(0x7f0000007640)=""/255, 0xff}, {&(0x7f0000007740)=""/138, 0x8a}, {&(0x7f0000007800)=""/68, 0x44}], 0x3, &(0x7f00000078c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xe8}}], 0xa, 0x40000000, &(0x7f0000007c40)={0x77359400})
clone3(&(0x7f0000007cc0)={0x100020000, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f00000002c0), {0x36}, &(0x7f00000005c0)=""/211, 0xd3, &(0x7f0000000300)=""/25, &(0x7f0000007c80)=[r4, r5, r3, r2, r6], 0x5, {r1}}, 0x58)

23:28:56 executing program 4:
munmap(&(0x7f0000000000/0x2000)=nil, 0x2000)
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0)
r2 = dup(r1)
ioctl$SG_IO(r2, 0x5385, &(0x7f00000010c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x9, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='dummy0\x00', 0x10)
r3 = fsmount(0xffffffffffffffff, 0x1, 0x2)
setsockopt$inet6_udp_int(r3, 0x11, 0x66, &(0x7f00000000c0)=0xea4, 0x4)
getsockopt$inet6_udp_int(r0, 0x11, 0x66, &(0x7f0000000000), &(0x7f0000000040)=0x4)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffc]}, 0x0, 0x8)

23:28:56 executing program 7:
r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f00000027c0)=ANY=[@ANYBLOB="980c07238eeffe0dec011fff7699386a20f795ce2926d04ad494645c62379f453597ecd14aca4199c5f1fdff89a164c4866404108d3bb0a5a5e0e163f45a345a63f3180699a2551c9506cedbf07fa16e9b33d65346c351c05c841fd2a4254490e055e6995db9fab4cfb79262f4b6256b151f2888e8799d620a5032ae5aa298729ff9e37ef27fb674cc354496e1ff7bcf9b59e0e0567d22ac98560a4b0e2a488d922488a3ea2cfaf6c5d87d64429a0a09c18c6c4b7e226639f8934cd5d6cec98161119571fd4761b268d8cf752faeab4fe06f1a3535957f6192596602c09ab172fa19c959960245d0243a56aa34e8646a525a7b", @ANYRES16=r0, @ANYBLOB="02002abd7000ffdbdf25270000000500310009120000088baa0500071148683341e08421459ed100f15bbca28624dc8473312676700b78e634eea8cb909c7e3facbd4bc48896bcd573e6133b336b867c63d3472b07d3ceadf337c2d545d21b6737cb07cd06937c370694d0824f56e085bd597490ad32b037b23c4403414ea70cc9ca2a534b6a0800"/145], 0x38}, 0x1, 0x0, 0x0, 0x4800}, 0x801)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$tmpfs(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, 0xffffffffffffffff, 0x0)
syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4)
syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000040), 0x0, 0x4)
r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000005, 0x12, 0xffffffffffffffff, 0x10000000)
syz_io_uring_submit(0x0, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x1, 0x0, @fd_index=0x8, 0x0, 0x0, 0x0, {0x4}, 0x0, {0x0, r2}}, 0x2f5a)
r4 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0)
r5 = dup(r4)
ioctl$SG_IO(r5, 0x5385, &(0x7f00000010c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x9, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r6 = syz_io_uring_setup(0x2262, &(0x7f0000003a00), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0))
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r5, 0xc0189373, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="81000000040000002e2f66696c653000"])
r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0x1c, 0x0, r7)
setuid(0x0)
creat(&(0x7f0000000240)='./file1/file0\x00', 0x0)
rename(&(0x7f0000000080)='./file1/file0\x00', &(0x7f0000000200)='./file0\x00')

23:28:56 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_SETVESABLANK(r0, 0x5414, &(0x7f00000000c0))
ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r0, 0x8040942d, &(0x7f0000000080))
r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x240, 0x0)
ioctl$KDGKBMETA(r1, 0x4b62, &(0x7f0000000140))

23:28:56 executing program 5:
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xffffffffffffb4ab, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = getpid()
pidfd_open(r1, 0x0)
process_mrelease(0xffffffffffffffff, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='sessionid\x00')
read$rfkill(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000040)={{{@in6=@initdev, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000140)=0xe8)
getgroups(0x4, &(0x7f0000000180)=[<r3=>0xffffffffffffffff, 0xee00, 0xee01, 0x0])
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, <r5=>0x0}, &(0x7f0000008600)=0xc)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, <r6=>0x0}, &(0x7f0000008600)=0xc)
setregid(r6, r5)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, <r8=>0x0}, &(0x7f0000008600)=0xc)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, <r9=>0x0}, &(0x7f0000008600)=0xc)
setregid(r9, r8)
fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="02000000010000000000000002000400", @ANYRES32=0xee01, @ANYBLOB="02040020", @ANYRESHEX, @ANYBLOB="02000300", @ANYRES32=0x0, @ANYBLOB="02000200", @ANYBLOB="1f7f0dfb38", @ANYBLOB="040001000000000008000100", @ANYRES32=r3, @ANYBLOB="08000500", @ANYRES32=r5, @ANYBLOB="08000400", @ANYRES32=0xee01, @ANYRES32, @ANYRES32=r8, @ANYBLOB="0002000000000020000400000000000e"], 0x64, 0x2)
close_range(r2, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, 0x0, 0x0)
fcntl$getown(0xffffffffffffffff, 0x9)

23:28:56 executing program 1:
r0 = io_uring_setup(0x1ff, &(0x7f0000000000)={0x0, 0x3, 0x1, 0x0, 0x1ff})
io_uring_register$IORING_REGISTER_FILES(r0, 0x13, 0x0, 0x0)

[  140.676903] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
23:29:04 executing program 7:
r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f00000027c0)=ANY=[@ANYBLOB="980c07238eeffe0dec011fff7699386a20f795ce2926d04ad494645c62379f453597ecd14aca4199c5f1fdff89a164c4866404108d3bb0a5a5e0e163f45a345a63f3180699a2551c9506cedbf07fa16e9b33d65346c351c05c841fd2a4254490e055e6995db9fab4cfb79262f4b6256b151f2888e8799d620a5032ae5aa298729ff9e37ef27fb674cc354496e1ff7bcf9b59e0e0567d22ac98560a4b0e2a488d922488a3ea2cfaf6c5d87d64429a0a09c18c6c4b7e226639f8934cd5d6cec98161119571fd4761b268d8cf752faeab4fe06f1a3535957f6192596602c09ab172fa19c959960245d0243a56aa34e8646a525a7b", @ANYRES16=r0, @ANYBLOB="02002abd7000ffdbdf25270000000500310009120000088baa0500071148683341e08421459ed100f15bbca28624dc8473312676700b78e634eea8cb909c7e3facbd4bc48896bcd573e6133b336b867c63d3472b07d3ceadf337c2d545d21b6737cb07cd06937c370694d0824f56e085bd597490ad32b037b23c4403414ea70cc9ca2a534b6a0800"/145], 0x38}, 0x1, 0x0, 0x0, 0x4800}, 0x801)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$tmpfs(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, 0xffffffffffffffff, 0x0)
syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4)
syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000040), 0x0, 0x4)
r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000005, 0x12, 0xffffffffffffffff, 0x10000000)
syz_io_uring_submit(0x0, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x1, 0x0, @fd_index=0x8, 0x0, 0x0, 0x0, {0x4}, 0x0, {0x0, r2}}, 0x2f5a)
r4 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0)
r5 = dup(r4)
ioctl$SG_IO(r5, 0x5385, &(0x7f00000010c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x9, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r6 = syz_io_uring_setup(0x2262, &(0x7f0000003a00), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0))
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r5, 0xc0189373, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="81000000040000002e2f66696c653000"])
r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0x1c, 0x0, r7)
setuid(0x0)
creat(&(0x7f0000000240)='./file1/file0\x00', 0x0)
rename(&(0x7f0000000080)='./file1/file0\x00', &(0x7f0000000200)='./file0\x00')

23:29:04 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e00010100000047272c0000b1fe00000000000053"], 0x1c}], 0x1}, 0x0)
r1 = creat(&(0x7f0000000040)='./file0\x00', 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_REG(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="146d0e81d2b944ffcdcfbd816e89cf9880ab04c97f1ef5948c0995699c1ec313566c88faba74a24113549d94047d93257169ad6851a6e77803b3d6757f41ce751765fda36cf7e5e64848d7ce26b6de9ce484a96a2f0b0153753b46cebd46b8df68be2c588750d07883ce35f62799234e3598882f465fc0b07188449a9ee0ae1862181985ecba61d0dc0cb3cd110894aec2b52d8ae5b0dbb7254c879e1acfc87578dcc179b022f7a4d98e943672f216edc71db6bcaaff92d01cce88b1fd121bdde80acb2ae96243e125", @ANYRES16=r3, @ANYBLOB="01ff07000000000000001f"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40080c1)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r2)
r5 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="01ff07000000000000001f"], 0x1c}}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_GET_SURVEY(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r8, 0x301, 0x0, 0x0, {{0x11}, {@val={0x8, 0x3, r9}, @void}}}, 0x1c}}, 0x0)
sendmsg$NL80211_CMD_GET_COALESCE(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x24, r6, 0x100, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x3c}, @val={0x8, 0x3, r9}, @void}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x40000)
r10 = dup(r5)
ioctl$SG_IO(r10, 0x5385, &(0x7f00000010c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x9, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r10, &(0x7f0000000600)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x50, r4, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x20}, @val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x20, 0x48}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x8, 0x6d}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x5, 0x6f}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r1}]}, 0x50}, 0x1, 0x0, 0x0, 0xc841}, 0x4040400)
sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x482881}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, r4, 0x800, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x800, 0x76}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x20044054)
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="571798b6eff4c39c62a5fa36d0b548200f2adc018a748d85abcb608d377cddcb88a4b3ee657496b88af726f2edaf60fda24a93385c20800bc41f29c8efb78eba076ad58e1e9ddfe2a8c17c53d7e3591508a11e1798fe95fa61c8316504bc83b24e19e6b413fcb590868c", @ANYRES16=r3, @ANYBLOB="00032abd7000fcdbdf2582000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x48014)

23:29:04 executing program 1:
r0 = socket$inet(0x2, 0x3, 0x26)
sendto$inet(r0, 0x0, 0x0, 0xfffffffe, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10)
ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x0, {0x2, 0x4e22, @private=0xa010101}, {0x2, 0x4e23, @rand_addr=0x64010102}, {0x2, 0x4e24, @private=0xa010102}, 0x1, 0x0, 0x0, 0x0, 0x200, 0x0, 0x5, 0x0, 0x9f3b})
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0x600, 0x4)

23:29:04 executing program 5:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmmsg$sock(r0, &(0x7f0000003080)=[{{&(0x7f0000000040)=@in6={0xa, 0x4e20, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000001680)}}], 0x1, 0x2000801)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r1=>r0, @in_args={0x2}}, './file0\x00'})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'wlan1\x00', <r5=>0x0})
sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000280)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010064dcd1a3000000002a0000000c00018008000100", @ANYRES32=r5], 0x20}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'syztnl2\x00', <r6=>0x0, 0x29, 0x0, 0x81, 0x55, 0x3c, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7, 0x20, 0x8, 0x5}})
sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000229bd7000bddbdf25020000004800018008000100", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="0800030001000000080003007e5a4c2208000100", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="1400020063616966300000000000000000000000180001801400020076657468315f6d616376746170000000"], 0x74}, 0x1, 0x0, 0x0, 0x20004040}, 0x800)

23:29:04 executing program 4:
r0 = openat$hpet(0xffffffffffffff9c, &(0x7f00000000c0), 0x84100, 0x0)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x4)
msgctl$MSG_STAT_ANY(0x0, 0xc, &(0x7f00000003c0)=""/4096)
r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x180, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x60, 0x1, 0x9, 0x7f, 0x0, 0x1, 0x800, 0x9, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f892df, 0x0, @perf_config_ext={0x1, 0x1f}, 0x1000, 0x0, 0x80000000, 0x9, 0xfffffffffffff001, 0x0, 0x1000, 0x0, 0x9, 0x0, 0x7}, 0x0, 0x9, r1, 0xa)
write$P9_RLCREATE(r0, &(0x7f0000000100)={0x18, 0xf, 0x2, {{0x10, 0x1, 0x5}, 0x966}}, 0x18)

23:29:04 executing program 3:
r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000540)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040))
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x1100)
name_to_handle_at(r0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@orangefs_parent={0x28, 0x2, {{"25d8e9d17b0bfe4c06000000adb88f73", 0x9}, {"6acab58dc1d6df117179fc18923722a8", 0x80000001}}}, &(0x7f0000000100), 0x400)
getdents64(r0, &(0x7f0000000280)=""/170, 0xaa)
chown(&(0x7f00000001c0)='./file0\x00', r1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r2=>r0, {0x2}}, './file0\x00'})
bind(r2, &(0x7f0000000200)=@llc={0x1a, 0xffff, 0x1, 0x9, 0x6, 0x7, @link_local}, 0x80)
openat$incfs(r0, &(0x7f0000001740)='.log\x00', 0x200040, 0x0)
faccessat2(r0, &(0x7f0000000180)='./file0\x00', 0x8, 0x1000)

23:29:04 executing program 6:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff)
r0 = perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0xfffffffffffffffc, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2)
poll(&(0x7f0000000140)=[{}], 0x1, 0x9)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="66d4e4ffffffffff2d2f66ebd56530000080000000000000abd08bb76aa1ee107e9920b37ca1f7559945bc2234ddb67bcbc892f9eb4621dcb345485dce34d02c722190055d13f6cd3a2afac149a4314691fa432b6d8a73b9cc73eb5d42bb486b6191aab370e25a27e32355cedc4ad6b8a097b6805916b2e5b83c2c08bdc8c9338e4152324c47afb583339ac7a718bd8e1c22e700af7c492d763df757f86670bf060387dca26c6e5dd34e7d63dbb62b02f83d4751937a9e7d3e7af81b64ea0c36000000000000"])
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
r2 = clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280)=<r3=>0x0, 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58)
r4 = gettid()
rt_sigqueueinfo(r4, 0x7, &(0x7f00000000c0))
r5 = getpid()
recvmmsg$unix(0xffffffffffffffff, &(0x7f00000079c0)=[{{&(0x7f00000006c0)=@abs, 0x6e, &(0x7f0000000440)=[{&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/42, 0x2a}, {&(0x7f0000001740)=""/82, 0x52}, {&(0x7f00000017c0)=""/157, 0x9d}], 0x4}}, {{&(0x7f0000001880)=@abs, 0x6e, &(0x7f0000001b40)=[{&(0x7f0000001900)=""/109, 0x6d}, {&(0x7f0000001980)=""/47, 0x2f}, {&(0x7f00000019c0)=""/49, 0x31}, {&(0x7f0000001a00)=""/192, 0xc0}, {&(0x7f0000001ac0)=""/84, 0x54}], 0x5, &(0x7f0000001bc0)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000001c00)=@abs, 0x6e, &(0x7f0000002c80)=[{&(0x7f0000001c80)=""/4096, 0x1000}], 0x1}}, {{&(0x7f0000002cc0), 0x6e, &(0x7f0000005000)=[{&(0x7f0000002d40)=""/146, 0x92}, {&(0x7f0000002e00)=""/4096, 0x1000}, {&(0x7f0000003e00)=""/200, 0xc8}, {&(0x7f0000003f00)=""/24, 0x18}, {&(0x7f0000003f40)=""/62, 0x3e}, {&(0x7f0000003f80)=""/117, 0x75}, {&(0x7f0000004000)=""/4096, 0x1000}], 0x7}}, {{0x0, 0x0, &(0x7f0000005280)=[{&(0x7f0000005080)=""/74, 0x4a}, {&(0x7f0000005100)=""/213, 0xd5}, {&(0x7f0000005200)=""/50, 0x32}, {&(0x7f0000005240)=""/25, 0x19}], 0x4, &(0x7f00000052c0)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x130}}, {{&(0x7f0000005400), 0x6e, &(0x7f0000006a80)=[{&(0x7f0000005900)=""/4096, 0x1000}, {&(0x7f0000005480)=""/242, 0xf2}, {&(0x7f0000005580)}, {&(0x7f00000055c0)=""/152, 0x98}, {&(0x7f0000005680)=""/67, 0x43}, {&(0x7f0000005700)=""/50, 0x32}, {&(0x7f0000005740)=""/145, 0x91}, {&(0x7f0000005800)=""/37, 0x25}, {&(0x7f0000006900)=""/104, 0x68}, {&(0x7f0000006980)=""/210, 0xd2}], 0xa, &(0x7f0000006b40)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}}, {{&(0x7f0000006bc0), 0x6e, &(0x7f0000005840)=[{&(0x7f0000006c40)=""/124, 0x7c}, {&(0x7f0000006cc0)=""/253, 0xfd}], 0x2}}, {{0x0, 0x0, &(0x7f0000007180)=[{&(0x7f0000006dc0)=""/97, 0x61}, {&(0x7f0000006e40)=""/246, 0xf6}, {&(0x7f0000006f40)=""/163, 0xa3}, {&(0x7f0000007000)=""/219, 0xdb}, {&(0x7f0000007100)=""/68, 0x44}], 0x5, &(0x7f0000007200)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd0}}, {{0x0, 0x0, &(0x7f0000007480)=[{&(0x7f0000007300)=""/196, 0xc4}, {&(0x7f0000007400)=""/97, 0x61}], 0x2, &(0x7f00000074c0)=[@cred={{0x1c, 0x1, 0x2, {<r6=>0x0}}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x160}}, {{0x0, 0x0, &(0x7f0000007880)=[{&(0x7f0000007640)=""/255, 0xff}, {&(0x7f0000007740)=""/138, 0x8a}, {&(0x7f0000007800)=""/68, 0x44}], 0x3, &(0x7f00000078c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xe8}}], 0xa, 0x40000000, &(0x7f0000007c40)={0x77359400})
clone3(&(0x7f0000007cc0)={0x100020000, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f00000002c0), {0x36}, &(0x7f00000005c0)=""/211, 0xd3, &(0x7f0000000300)=""/25, &(0x7f0000007c80)=[r4, r5, r3, r2, r6], 0x5, {r1}}, 0x58)

23:29:04 executing program 2:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='system.advise\x00', &(0x7f0000000180)='/dev/full\x00', 0xa, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100))
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0))
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0)
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x1100)
setresuid(0x0, r1, 0x0)
mount$9p_virtio(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x1000, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=virtio,msize=0x0000000000000008,access=', @ANYRESDEC=0x0, @ANYBLOB=',uname=/dev/sg#\x00,cache=fscache,appraise_type=imasig,euid<', @ANYRESDEC=0xee01, @ANYBLOB=',fowner<', @ANYRESDEC, @ANYBLOB="00efc700000000", @ANYRESDEC=r1, @ANYBLOB=',fowner<', @ANYRESDEC=0x0, @ANYBLOB=',\x00'])
openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0)
r3 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x101042)
dup(r3)
ioctl$SG_GET_PACK_ID(r3, 0x227c, &(0x7f0000000200))
dup(r2)
ioctl$SG_SET_COMMAND_Q(r2, 0x2271, &(0x7f0000000240)=0x1)
dup(r2)
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0)
r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
truncate(&(0x7f0000000040)='./file0\x00', 0x0)
sendfile(r4, r5, 0x0, 0xa0103)

[  148.706246] BUG: unable to handle page fault for address: ffffed10212c94ee
[  148.706828] #PF: supervisor read access in kernel mode
[  148.707249] #PF: error_code(0x0000) - not-present page
[  148.707669] PGD 7ffd4067 P4D 7ffd4067 PUD 7ffd3067 PMD 0 
[  148.708121] Oops: Oops: 0000 [#1] SMP KASAN NOPTI
[  148.708519] CPU: 0 UID: 0 PID: 3982 Comm: syz-executor.7 Tainted: G        W           6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) 
[  148.711219] Tainted: [W]=WARN
[  148.711946] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  148.714556] RIP: 0010:perf_tp_event+0x175/0xe70
[  148.716074] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[  148.717423] RSP: 0018:ffff888047867800 EFLAGS: 00010216
[  148.717822] RAX: 1ffff110212c94ee RBX: ffff88810964a580 RCX: ffffc9000ac3b000
[  148.718378] RDX: 0000000000040000 RSI: ffffffff818995b7 RDI: ffff88810964a770
[  148.718934] RBP: ffff888047867a70 R08: ffff88806ce31340 R09: ffffe8ffffc169a8
[  148.719493] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
[  148.720050] R13: 000000000000002c R14: ffff88806ce31340 R15: dffffc0000000000
[  148.720607] FS:  00007fca13a6c700(0000) GS:ffff8880e55dd000(0000) knlGS:0000000000000000
[  148.721248] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  148.721708] CR2: ffffed10212c94ee CR3: 000000000d196000 CR4: 0000000000350ef0
[  148.722267] Call Trace:
[  148.722474]  <TASK>
[  148.722655]  ? perf_swevent_event+0x63/0x3f0
[  148.723015]  ? __pfx_perf_tp_event+0x10/0x10
[  148.723373]  ? tracing_gen_ctx_irq_test+0x167/0x1f0
[  148.723767]  ? perf_swevent_event+0x63/0x3f0
[  148.724121]  ? tracing_gen_ctx_irq_test+0x167/0x1f0
[  148.724514]  ? perf_swevent_event+0x63/0x3f0
[  148.724871]  ? perf_tp_event+0x807/0xe70
[  148.725201]  ? __pfx_perf_tp_event+0x10/0x10
[  148.725566]  ? __perf_install_in_context+0x503/0xb90
[  148.725971]  ? do_raw_spin_unlock+0x53/0x220
[  148.726332]  ? perf_trace_run_bpf_submit+0xef/0x180
[  148.726734]  perf_trace_run_bpf_submit+0xef/0x180
[  148.727125]  perf_trace_lock+0x337/0x5d0
[  148.727459]  ? __pfx_perf_trace_lock+0x10/0x10
[  148.727826]  ? lock_acquire+0x15e/0x2f0
[  148.728146]  ? futex_ref_get+0x48/0x300
[  148.728466]  ? futex_ref_get+0x114/0x300
[  148.728788]  ? futex_hash+0x15c/0x390
[  148.729096]  lock_release+0x1ab/0x290
[  148.729414]  ? futex_hash+0x15c/0x390
[  148.729717]  futex_ref_get+0x119/0x300
[  148.730029]  ? futex_hash+0x15c/0x390
[  148.730340]  futex_hash+0x70/0x390
[  148.730626]  futex_wake+0x143/0x540
[  148.730920]  ? __pfx_perf_trace_lock+0x10/0x10
[  148.731288]  ? __pfx_futex_wake+0x10/0x10
[  148.731624]  ? __do_sys_perf_event_open+0x44d/0x2c20
[  148.732025]  ? lock_release+0xc8/0x290
[  148.732341]  do_futex+0x26d/0x370
[  148.732624]  ? __pfx_do_futex+0x10/0x10
[  148.732944]  ? __pfx___do_sys_perf_event_open+0x10/0x10
[  148.733378]  __x64_sys_futex+0x1c9/0x4d0
[  148.733704]  ? __pfx___x64_sys_futex+0x10/0x10
[  148.734069]  ? __pfx_fput_close_sync+0x10/0x10
[  148.734440]  ? dnotify_flush+0x79/0x4c0
[  148.734757]  ? xfd_validate_state+0x55/0x180
[  148.735121]  do_syscall_64+0xbf/0x360
[  148.735428]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  148.735835] RIP: 0033:0x7fca164f6b19
[  148.736132] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  148.737583] RSP: 002b:00007fca13a6c218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  148.738181] RAX: ffffffffffffffda RBX: 00007fca16609f68 RCX: 00007fca164f6b19
[  148.738740] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fca16609f6c
[  148.739298] RBP: 00007fca16609f60 R08: 000000000000000e R09: 0000000000000000
[  148.739853] R10: 0000000000000003 R11: 0000000000000246 R12: 00007fca16609f6c
[  148.740411] R13: 00007fff6de4f3bf R14: 00007fca13a6c300 R15: 0000000000022000
[  148.740986]  </TASK>
[  148.741174] Modules linked in:
[  148.741441] CR2: ffffed10212c94ee
[  148.741714] ---[ end trace 0000000000000000 ]---
[  148.742083] RIP: 0010:perf_tp_event+0x175/0xe70
[  148.742457] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[  148.743875] RSP: 0018:ffff888047867800 EFLAGS: 00010216
[  148.744293] RAX: 1ffff110212c94ee RBX: ffff88810964a580 RCX: ffffc9000ac3b000
[  148.744849] RDX: 0000000000040000 RSI: ffffffff818995b7 RDI: ffff88810964a770
[  148.745417] RBP: ffff888047867a70 R08: ffff88806ce31340 R09: ffffe8ffffc169a8
[  148.745973] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
[  148.746533] R13: 000000000000002c R14: ffff88806ce31340 R15: dffffc0000000000
[  148.747093] FS:  00007fca13a6c700(0000) GS:ffff8880e55dd000(0000) knlGS:0000000000000000
[  148.747734] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  148.748194] CR2: ffffed10212c94ee CR3: 000000000d196000 CR4: 0000000000350ef0
[  148.748756] note: syz-executor.7[3982] exited with irqs disabled
[  148.749257] BUG: unable to handle page fault for address: ffffed10212c94ee
[  148.749795] #PF: supervisor read access in kernel mode
[  148.750197] #PF: error_code(0x0000) - not-present page
[  148.750599] PGD 7ffd4067 P4D 7ffd4067 PUD 7ffd3067 PMD 0 
[  148.751039] Oops: Oops: 0000 [#2] SMP KASAN NOPTI
[  148.751420] CPU: 0 UID: 0 PID: 3982 Comm: syz-executor.7 Tainted: G      D W           6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) 
[  148.752344] Tainted: [D]=DIE, [W]=WARN
[  148.752643] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  148.753287] RIP: 0010:perf_tp_event+0x175/0xe70
[  148.753656] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[  148.755053] RSP: 0018:ffff88806ce08a80 EFLAGS: 00010016
[  148.755463] RAX: 1ffff110212c94ee RBX: ffff88810964a580 RCX: 0000000000000002
[  148.756013] RDX: ffff888047641b80 RSI: ffffffff818995b7 RDI: ffff88810964a770
[  148.756563] RBP: ffff88806ce08cf0 R08: ffff88806ce31490 R09: ffffe8ffffc169a8
[  148.757113] R10: 0000000000000000 R11: 746e756f63716573 R12: dffffc0000000000
[  148.757667] R13: 000000000000002c R14: ffff88806ce31490 R15: dffffc0000000000
[  148.758216] FS:  00007fca13a6c700(0000) GS:ffff8880e55dd000(0000) knlGS:0000000000000000
[  148.758837] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  148.759290] CR2: ffffed10212c94ee CR3: 000000000d196000 CR4: 0000000000350ef0
[  148.759844] Call Trace:
[  148.760047]  <IRQ>
[  148.760227]  ? __pfx_perf_tp_event+0x10/0x10
[  148.760580]  ? stack_depot_save_flags+0x2c/0xa20
[  148.760957]  ? kasan_save_stack+0x34/0x50
[  148.761391]  ? kasan_save_stack+0x24/0x50
[  148.762194]  ? kasan_save_track+0x14/0x30
[  148.762927]  ? __kasan_save_free_info+0x3a/0x60
[  148.763771]  ? __kasan_slab_free+0x3f/0x50
[  148.764513]  ? kmem_cache_free+0x2a1/0x540
[  148.765265]  ? rcu_core+0x7c8/0x1800
[  148.765925]  ? handle_softirqs+0x1b1/0x770
[  148.766541]  ? __irq_exit_rcu+0xc4/0x100
[  148.766995]  ? irq_exit_rcu+0x9/0x20
[  148.767406]  ? sysvec_apic_timer_interrupt+0x70/0x80
[  148.767971]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  148.768561]  ? _raw_spin_unlock_irqrestore+0x34/0x50
[  148.769121]  ? __create_object+0x59/0x80
[  148.769589]  ? kmem_cache_alloc_lru_noprof+0x418/0x6a0
[  148.770162]  ? __d_alloc+0x31/0xa10
[  148.770509]  ? d_alloc_pseudo+0x1d/0xc0
[  148.770838]  ? alloc_file_pseudo+0xbe/0x220
[  148.771198]  ? __anon_inode_getfile+0xe1/0x280
[  148.771579]  ? __do_sys_perf_event_open+0x18cb/0x2c20
[  148.771999]  ? do_syscall_64+0xbf/0x360
[  148.772327]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  148.772760]  ? __pfx_perf_trace_lock+0x10/0x10
[  148.773144]  ? perf_trace_run_bpf_submit+0xef/0x180
[  148.773566]  perf_trace_run_bpf_submit+0xef/0x180
[  148.773967]  perf_trace_lock+0x337/0x5d0
[  148.774303]  ? mark_held_locks+0x49/0x80
[  148.774641]  ? __pfx_perf_trace_lock+0x10/0x10
[  148.775020]  ? mark_held_locks+0x49/0x80
[  148.775358]  ? hrtimer_interrupt+0x114/0x830
[  148.775718]  lock_release+0x1ab/0x290
[  148.776037]  ktime_get_update_offsets_now+0xab/0x3c0
[  148.776456]  ? hrtimer_interrupt+0x114/0x830
[  148.776814]  ? __pfx_rcu_core+0x10/0x10
[  148.777147]  hrtimer_interrupt+0x114/0x830
[  148.777501]  ? __local_bh_enable+0x7b/0x90
[  148.777849]  ? handle_softirqs+0x50c/0x770
[  148.778202]  __sysvec_apic_timer_interrupt+0xbb/0x330
[  148.778633]  sysvec_apic_timer_interrupt+0x6b/0x80
[  148.779038]  </IRQ>
[  148.779226]  <TASK>
[  148.779415]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  148.779841] RIP: 0010:make_task_dead+0xa2/0x3b0
[  148.780231] Code: 38 00 85 db 0f 84 21 01 00 00 e8 d9 96 38 00 9c 5b 81 e3 00 02 00 00 31 ff 48 89 de e8 27 92 38 00 48 85 db 0f 84 17 01 00 00 <e8> b9 96 38 00 31 ff 65 8b 1d 60 df 48 06 81 e3 ff ff ff 7f 89 de
[  148.781697] RSP: 0018:ffff888047867f28 EFLAGS: 00000246
[  148.782129] RAX: 0000000000000001 RBX: ffff888047641b80 RCX: ffffffff817c2b86
[  148.782703] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff813b5234
[  148.783276] RBP: 0000000000000009 R08: 0000000000000000 R09: 0000000000000000
[  148.783850] R10: ffffffff8643ac57 R11: 0000000000000001 R12: ffff888047641b80
[  148.784431] R13: 0000000000000009 R14: ffff8880478677e0 R15: 0000000000000000
[  148.785007]  ? trace_irq_enable.constprop.0+0x26/0x100
[  148.785444]  ? make_task_dead+0x214/0x3b0
[  148.785787]  ? make_task_dead+0x214/0x3b0
[  148.786126]  ? do_syscall_64+0xbf/0x360
[  148.786450]  rewind_stack_and_make_dead+0x16/0x20
[  148.786846] RIP: 0033:0x7fca164f6b19
[  148.787153] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  148.788605] RSP: 002b:00007fca13a6c218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  148.789218] RAX: ffffffffffffffda RBX: 00007fca16609f68 RCX: 00007fca164f6b19
[  148.789793] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fca16609f6c
[  148.790364] RBP: 00007fca16609f60 R08: 000000000000000e R09: 0000000000000000
[  148.790933] R10: 0000000000000003 R11: 0000000000000246 R12: 00007fca16609f6c
[  148.791505] R13: 00007fff6de4f3bf R14: 00007fca13a6c300 R15: 0000000000022000
[  148.792083]  </TASK>
[  148.792275] Modules linked in:
[  148.792540] CR2: ffffed10212c94ee
[  148.792821] ---[ end trace 0000000000000000 ]---
[  148.793202] RIP: 0010:perf_tp_event+0x175/0xe70
[  148.793589] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[  148.795038] RSP: 0018:ffff888047867800 EFLAGS: 00010216
[  148.795470] RAX: 1ffff110212c94ee RBX: ffff88810964a580 RCX: ffffc9000ac3b000
[  148.796039] RDX: 0000000000040000 RSI: ffffffff818995b7 RDI: ffff88810964a770
[  148.796607] RBP: ffff888047867a70 R08: ffff88806ce31340 R09: ffffe8ffffc169a8
[  148.797176] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
[  148.797748] R13: 000000000000002c R14: ffff88806ce31340 R15: dffffc0000000000
[  148.798323] FS:  00007fca13a6c700(0000) GS:ffff8880e55dd000(0000) knlGS:0000000000000000
[  148.798962] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  148.799431] CR2: ffffed10212c94ee CR3: 000000000d196000 CR4: 0000000000350ef0
[  148.800001] Kernel panic - not syncing: Fatal exception in interrupt
[  148.800779] Kernel Offset: disabled
[  148.801075] ---[ end Kernel panic - not syncing: Fatal exception in interrupt ]---

VM DIAGNOSIS:
23:29:04  Registers:
info registers vcpu 0
RAX=000000000000006d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff828e32c5 RDI=ffffffff88724180 RBP=ffffffff88724140 RSP=ffff888047867048
R8 =0000000000000000 R9 =ffffed1001650046 R10=000000000000006d R11=6572617764726148
R12=000000000000006d R13=0000000000000010 R14=ffffffff88724140 R15=ffffffff828e32b0
RIP=ffffffff828e331d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007fca13a6c700 00000000 00000000
GS =0000 ffff8880e55dd000 00000000 00000000
LDT=0000 fffffe0b00000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=ffffed10212c94ee CR3=000000000d196000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000
XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000
XMM04=0000000000000000000000000000ff00 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=ffff888013cdeca0 RBX=ffff888013a52e48 RCX=ffff88801dba5e30 RDX=ffff88801378be50
RSI=ffff88801dba5538 RDI=0000000000000000 RBP=ffff88800d204de0 RSP=ffff888016caf9d8
R8 =0000000000000000 R9 =ffffed1002d95f2d R10=0000000000000003 R11=0000000000000000
R12=ffff88801dba5538 R13=00000000000008f8 R14=0000000000000001 R15=0000000000000282
RIP=ffffffff81b34996 RFL=00000086 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000555560330400 00000000 00000000
GS =0000 ffff8880e56dd000 00000000 00000000
LDT=0000 fffffe4400000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00005555804bf708 CR3=000000000e5ab000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=ff00000000ff000000000000000000ff XMM01=25252525252525252525252525252525
XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000
XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000