Debian GNU/Linux 11 syzkaller ttyS0

Warning: Permanently added '[localhost]:19086' (ECDSA) to the list of known hosts.
2025/08/30 02:59:33 fuzzer started
2025/08/30 02:59:33 dialing manager at localhost:43077
syzkaller login: [   50.743014] cgroup: Unknown subsys name 'net'
[   50.812348] cgroup: Unknown subsys name 'cpuset'
[   50.829695] cgroup: Unknown subsys name 'rlimit'
2025/08/30 02:59:44 syscalls: 2214
2025/08/30 02:59:44 code coverage: enabled
2025/08/30 02:59:44 comparison tracing: enabled
2025/08/30 02:59:44 extra coverage: enabled
2025/08/30 02:59:44 setuid sandbox: enabled
2025/08/30 02:59:44 namespace sandbox: enabled
2025/08/30 02:59:44 Android sandbox: enabled
2025/08/30 02:59:44 fault injection: enabled
2025/08/30 02:59:44 leak checking: enabled
2025/08/30 02:59:44 net packet injection: enabled
2025/08/30 02:59:44 net device setup: enabled
2025/08/30 02:59:44 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/08/30 02:59:44 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/08/30 02:59:44 USB emulation: enabled
2025/08/30 02:59:44 hci packet injection: enabled
2025/08/30 02:59:44 wifi device emulation: enabled
2025/08/30 02:59:44 802.15.4 emulation: enabled
2025/08/30 02:59:44 fetching corpus: 50, signal 23493/25266 (executing program)
2025/08/30 02:59:45 fetching corpus: 100, signal 34009/37333 (executing program)
2025/08/30 02:59:45 fetching corpus: 150, signal 38160/43014 (executing program)
2025/08/30 02:59:45 fetching corpus: 200, signal 45337/51551 (executing program)
2025/08/30 02:59:45 fetching corpus: 250, signal 50092/57660 (executing program)
2025/08/30 02:59:45 fetching corpus: 300, signal 55000/63810 (executing program)
2025/08/30 02:59:45 fetching corpus: 350, signal 60427/70362 (executing program)
2025/08/30 02:59:45 fetching corpus: 400, signal 64509/75569 (executing program)
2025/08/30 02:59:45 fetching corpus: 450, signal 67189/79402 (executing program)
2025/08/30 02:59:45 fetching corpus: 500, signal 69720/83050 (executing program)
2025/08/30 02:59:45 fetching corpus: 550, signal 73233/87560 (executing program)
2025/08/30 02:59:46 fetching corpus: 600, signal 75717/91079 (executing program)
2025/08/30 02:59:46 fetching corpus: 650, signal 78802/95042 (executing program)
2025/08/30 02:59:46 fetching corpus: 700, signal 81333/98498 (executing program)
2025/08/30 02:59:46 fetching corpus: 750, signal 82800/101024 (executing program)
2025/08/30 02:59:46 fetching corpus: 800, signal 84888/104016 (executing program)
2025/08/30 02:59:46 fetching corpus: 850, signal 87308/107283 (executing program)
2025/08/30 02:59:46 fetching corpus: 900, signal 88348/109348 (executing program)
2025/08/30 02:59:46 fetching corpus: 950, signal 89859/111739 (executing program)
2025/08/30 02:59:46 fetching corpus: 1000, signal 91541/114229 (executing program)
2025/08/30 02:59:46 fetching corpus: 1050, signal 93180/116650 (executing program)
2025/08/30 02:59:46 fetching corpus: 1100, signal 94389/118777 (executing program)
2025/08/30 02:59:46 fetching corpus: 1150, signal 96244/121348 (executing program)
2025/08/30 02:59:47 fetching corpus: 1200, signal 98180/123963 (executing program)
2025/08/30 02:59:47 fetching corpus: 1250, signal 99742/126258 (executing program)
2025/08/30 02:59:47 fetching corpus: 1300, signal 100875/128194 (executing program)
2025/08/30 02:59:47 fetching corpus: 1350, signal 101977/130106 (executing program)
2025/08/30 02:59:47 fetching corpus: 1400, signal 103118/132037 (executing program)
2025/08/30 02:59:47 fetching corpus: 1450, signal 104313/133923 (executing program)
2025/08/30 02:59:47 fetching corpus: 1500, signal 105387/135771 (executing program)
2025/08/30 02:59:47 fetching corpus: 1550, signal 107259/138058 (executing program)
2025/08/30 02:59:47 fetching corpus: 1600, signal 108555/139969 (executing program)
2025/08/30 02:59:47 fetching corpus: 1650, signal 109269/141478 (executing program)
2025/08/30 02:59:47 fetching corpus: 1700, signal 110829/143506 (executing program)
2025/08/30 02:59:47 fetching corpus: 1750, signal 112196/145395 (executing program)
2025/08/30 02:59:48 fetching corpus: 1800, signal 114023/147671 (executing program)
2025/08/30 02:59:48 fetching corpus: 1850, signal 115050/149269 (executing program)
2025/08/30 02:59:48 fetching corpus: 1900, signal 116230/150971 (executing program)
2025/08/30 02:59:48 fetching corpus: 1950, signal 117292/152559 (executing program)
2025/08/30 02:59:48 fetching corpus: 2000, signal 118011/153848 (executing program)
2025/08/30 02:59:48 fetching corpus: 2050, signal 119132/155469 (executing program)
2025/08/30 02:59:48 fetching corpus: 2100, signal 120594/157250 (executing program)
2025/08/30 02:59:48 fetching corpus: 2150, signal 121301/158602 (executing program)
2025/08/30 02:59:48 fetching corpus: 2200, signal 122046/159897 (executing program)
2025/08/30 02:59:48 fetching corpus: 2250, signal 123242/161462 (executing program)
2025/08/30 02:59:48 fetching corpus: 2300, signal 123802/162603 (executing program)
2025/08/30 02:59:48 fetching corpus: 2350, signal 124795/164030 (executing program)
2025/08/30 02:59:48 fetching corpus: 2400, signal 125378/165225 (executing program)
2025/08/30 02:59:49 fetching corpus: 2450, signal 126360/166567 (executing program)
2025/08/30 02:59:49 fetching corpus: 2500, signal 127564/168064 (executing program)
2025/08/30 02:59:49 fetching corpus: 2550, signal 128377/169315 (executing program)
2025/08/30 02:59:49 fetching corpus: 2600, signal 128986/170445 (executing program)
2025/08/30 02:59:49 fetching corpus: 2650, signal 129936/171732 (executing program)
2025/08/30 02:59:49 fetching corpus: 2700, signal 130982/173067 (executing program)
2025/08/30 02:59:49 fetching corpus: 2750, signal 131820/174247 (executing program)
2025/08/30 02:59:49 fetching corpus: 2800, signal 132598/175361 (executing program)
2025/08/30 02:59:49 fetching corpus: 2850, signal 133205/176428 (executing program)
2025/08/30 02:59:49 fetching corpus: 2900, signal 133796/177488 (executing program)
2025/08/30 02:59:49 fetching corpus: 2950, signal 134349/178491 (executing program)
2025/08/30 02:59:50 fetching corpus: 3000, signal 135788/179896 (executing program)
2025/08/30 02:59:50 fetching corpus: 3050, signal 136525/180924 (executing program)
2025/08/30 02:59:50 fetching corpus: 3100, signal 137417/182087 (executing program)
2025/08/30 02:59:50 fetching corpus: 3150, signal 137852/182900 (executing program)
2025/08/30 02:59:50 fetching corpus: 3200, signal 138448/183903 (executing program)
2025/08/30 02:59:50 fetching corpus: 3250, signal 139334/184980 (executing program)
2025/08/30 02:59:50 fetching corpus: 3300, signal 140236/186014 (executing program)
2025/08/30 02:59:50 fetching corpus: 3350, signal 141093/186997 (executing program)
2025/08/30 02:59:50 fetching corpus: 3400, signal 141650/187866 (executing program)
2025/08/30 02:59:50 fetching corpus: 3450, signal 142474/188839 (executing program)
2025/08/30 02:59:50 fetching corpus: 3500, signal 143148/189773 (executing program)
2025/08/30 02:59:50 fetching corpus: 3550, signal 143671/190609 (executing program)
2025/08/30 02:59:51 fetching corpus: 3600, signal 144205/191451 (executing program)
2025/08/30 02:59:51 fetching corpus: 3650, signal 146752/192837 (executing program)
2025/08/30 02:59:51 fetching corpus: 3700, signal 147571/193694 (executing program)
2025/08/30 02:59:51 fetching corpus: 3750, signal 148129/194502 (executing program)
2025/08/30 02:59:51 fetching corpus: 3800, signal 148858/195335 (executing program)
2025/08/30 02:59:51 fetching corpus: 3850, signal 149433/196116 (executing program)
2025/08/30 02:59:51 fetching corpus: 3900, signal 150049/196817 (executing program)
2025/08/30 02:59:51 fetching corpus: 3950, signal 150527/197593 (executing program)
2025/08/30 02:59:51 fetching corpus: 4000, signal 151207/198340 (executing program)
2025/08/30 02:59:51 fetching corpus: 4050, signal 151917/199221 (executing program)
2025/08/30 02:59:51 fetching corpus: 4100, signal 152385/199903 (executing program)
2025/08/30 02:59:51 fetching corpus: 4150, signal 152941/200598 (executing program)
2025/08/30 02:59:52 fetching corpus: 4200, signal 153412/201264 (executing program)
2025/08/30 02:59:52 fetching corpus: 4250, signal 153934/201973 (executing program)
2025/08/30 02:59:52 fetching corpus: 4300, signal 154591/202624 (executing program)
2025/08/30 02:59:52 fetching corpus: 4350, signal 155188/203296 (executing program)
2025/08/30 02:59:52 fetching corpus: 4400, signal 155949/203967 (executing program)
2025/08/30 02:59:52 fetching corpus: 4450, signal 156423/204611 (executing program)
2025/08/30 02:59:52 fetching corpus: 4500, signal 156847/205216 (executing program)
2025/08/30 02:59:52 fetching corpus: 4550, signal 157223/205813 (executing program)
2025/08/30 02:59:52 fetching corpus: 4600, signal 157626/206403 (executing program)
2025/08/30 02:59:52 fetching corpus: 4650, signal 158266/207029 (executing program)
2025/08/30 02:59:52 fetching corpus: 4700, signal 158878/207632 (executing program)
2025/08/30 02:59:53 fetching corpus: 4750, signal 159238/208175 (executing program)
2025/08/30 02:59:53 fetching corpus: 4800, signal 159570/208746 (executing program)
2025/08/30 02:59:53 fetching corpus: 4850, signal 159806/209309 (executing program)
2025/08/30 02:59:54 fetching corpus: 4900, signal 160267/209876 (executing program)
2025/08/30 02:59:54 fetching corpus: 4950, signal 160585/210361 (executing program)
2025/08/30 02:59:54 fetching corpus: 5000, signal 160986/210901 (executing program)
2025/08/30 02:59:54 fetching corpus: 5050, signal 161380/211400 (executing program)
2025/08/30 02:59:54 fetching corpus: 5100, signal 162445/211951 (executing program)
2025/08/30 02:59:54 fetching corpus: 5150, signal 163038/212428 (executing program)
2025/08/30 02:59:54 fetching corpus: 5200, signal 163431/212963 (executing program)
2025/08/30 02:59:54 fetching corpus: 5250, signal 163753/213428 (executing program)
2025/08/30 02:59:54 fetching corpus: 5300, signal 164455/213430 (executing program)
2025/08/30 02:59:54 fetching corpus: 5350, signal 164924/213439 (executing program)
2025/08/30 02:59:54 fetching corpus: 5400, signal 165496/213454 (executing program)
2025/08/30 02:59:55 fetching corpus: 5450, signal 166049/213476 (executing program)
2025/08/30 02:59:55 fetching corpus: 5500, signal 166412/213502 (executing program)
2025/08/30 02:59:55 fetching corpus: 5550, signal 166754/213543 (executing program)
2025/08/30 02:59:55 fetching corpus: 5600, signal 167281/213548 (executing program)
2025/08/30 02:59:55 fetching corpus: 5650, signal 167594/213548 (executing program)
2025/08/30 02:59:55 fetching corpus: 5700, signal 168026/213637 (executing program)
2025/08/30 02:59:55 fetching corpus: 5750, signal 168525/213647 (executing program)
2025/08/30 02:59:55 fetching corpus: 5800, signal 168795/213657 (executing program)
2025/08/30 02:59:55 fetching corpus: 5850, signal 169273/213661 (executing program)
2025/08/30 02:59:55 fetching corpus: 5900, signal 170096/213667 (executing program)
2025/08/30 02:59:55 fetching corpus: 5950, signal 170349/213674 (executing program)
2025/08/30 02:59:55 fetching corpus: 6000, signal 170666/213756 (executing program)
2025/08/30 02:59:56 fetching corpus: 6050, signal 170963/213767 (executing program)
2025/08/30 02:59:56 fetching corpus: 6100, signal 171272/213768 (executing program)
2025/08/30 02:59:56 fetching corpus: 6150, signal 171783/213776 (executing program)
2025/08/30 02:59:56 fetching corpus: 6200, signal 172435/213778 (executing program)
2025/08/30 02:59:56 fetching corpus: 6250, signal 172962/213780 (executing program)
2025/08/30 02:59:56 fetching corpus: 6300, signal 173201/213783 (executing program)
2025/08/30 02:59:56 fetching corpus: 6350, signal 173721/213788 (executing program)
2025/08/30 02:59:56 fetching corpus: 6400, signal 174175/213791 (executing program)
2025/08/30 02:59:56 fetching corpus: 6450, signal 174616/213791 (executing program)
2025/08/30 02:59:56 fetching corpus: 6500, signal 174865/213810 (executing program)
2025/08/30 02:59:56 fetching corpus: 6550, signal 175217/213811 (executing program)
2025/08/30 02:59:56 fetching corpus: 6600, signal 175583/213818 (executing program)
2025/08/30 02:59:57 fetching corpus: 6650, signal 175803/213819 (executing program)
2025/08/30 02:59:57 fetching corpus: 6700, signal 176054/213833 (executing program)
2025/08/30 02:59:57 fetching corpus: 6750, signal 176416/213834 (executing program)
2025/08/30 02:59:57 fetching corpus: 6800, signal 176767/213864 (executing program)
2025/08/30 02:59:57 fetching corpus: 6850, signal 177083/213864 (executing program)
2025/08/30 02:59:57 fetching corpus: 6900, signal 177399/213875 (executing program)
2025/08/30 02:59:57 fetching corpus: 6950, signal 177731/213880 (executing program)
2025/08/30 02:59:57 fetching corpus: 7000, signal 178189/213880 (executing program)
2025/08/30 02:59:57 fetching corpus: 7050, signal 178438/213909 (executing program)
2025/08/30 02:59:57 fetching corpus: 7100, signal 178772/213922 (executing program)
2025/08/30 02:59:57 fetching corpus: 7150, signal 179111/213925 (executing program)
2025/08/30 02:59:57 fetching corpus: 7200, signal 179512/213928 (executing program)
2025/08/30 02:59:58 fetching corpus: 7250, signal 179742/213939 (executing program)
2025/08/30 02:59:58 fetching corpus: 7300, signal 179986/213941 (executing program)
2025/08/30 02:59:58 fetching corpus: 7350, signal 180232/213944 (executing program)
2025/08/30 02:59:58 fetching corpus: 7400, signal 180552/213946 (executing program)
2025/08/30 02:59:58 fetching corpus: 7450, signal 180817/213953 (executing program)
2025/08/30 02:59:58 fetching corpus: 7500, signal 181107/213957 (executing program)
2025/08/30 02:59:58 fetching corpus: 7550, signal 181377/213961 (executing program)
2025/08/30 02:59:58 fetching corpus: 7600, signal 181677/213979 (executing program)
2025/08/30 02:59:58 fetching corpus: 7650, signal 182029/213980 (executing program)
2025/08/30 02:59:58 fetching corpus: 7700, signal 182252/214015 (executing program)
2025/08/30 02:59:58 fetching corpus: 7750, signal 182659/214021 (executing program)
2025/08/30 02:59:58 fetching corpus: 7800, signal 182919/214031 (executing program)
2025/08/30 02:59:59 fetching corpus: 7850, signal 183322/214038 (executing program)
2025/08/30 02:59:59 fetching corpus: 7900, signal 183611/214041 (executing program)
2025/08/30 02:59:59 fetching corpus: 7950, signal 183916/214041 (executing program)
2025/08/30 02:59:59 fetching corpus: 8000, signal 184150/214042 (executing program)
2025/08/30 02:59:59 fetching corpus: 8050, signal 184415/214056 (executing program)
2025/08/30 02:59:59 fetching corpus: 8100, signal 184613/214058 (executing program)
2025/08/30 02:59:59 fetching corpus: 8150, signal 184905/214062 (executing program)
2025/08/30 02:59:59 fetching corpus: 8200, signal 185166/214070 (executing program)
2025/08/30 02:59:59 fetching corpus: 8250, signal 185367/214072 (executing program)
2025/08/30 02:59:59 fetching corpus: 8300, signal 185635/214072 (executing program)
2025/08/30 02:59:59 fetching corpus: 8350, signal 185845/214074 (executing program)
2025/08/30 02:59:59 fetching corpus: 8400, signal 186163/214079 (executing program)
2025/08/30 02:59:59 fetching corpus: 8450, signal 186347/214082 (executing program)
2025/08/30 03:00:00 fetching corpus: 8500, signal 186575/214082 (executing program)
2025/08/30 03:00:00 fetching corpus: 8550, signal 186843/214095 (executing program)
2025/08/30 03:00:00 fetching corpus: 8600, signal 187128/214106 (executing program)
2025/08/30 03:00:00 fetching corpus: 8650, signal 187455/214123 (executing program)
2025/08/30 03:00:00 fetching corpus: 8700, signal 187797/214153 (executing program)
2025/08/30 03:00:00 fetching corpus: 8750, signal 188063/214196 (executing program)
2025/08/30 03:00:00 fetching corpus: 8800, signal 188300/214197 (executing program)
2025/08/30 03:00:00 fetching corpus: 8850, signal 188716/214204 (executing program)
2025/08/30 03:00:00 fetching corpus: 8900, signal 189160/214213 (executing program)
2025/08/30 03:00:00 fetching corpus: 8950, signal 189555/214228 (executing program)
2025/08/30 03:00:00 fetching corpus: 9000, signal 189854/214232 (executing program)
2025/08/30 03:00:00 fetching corpus: 9050, signal 190044/214239 (executing program)
2025/08/30 03:00:00 fetching corpus: 9100, signal 190304/214241 (executing program)
2025/08/30 03:00:01 fetching corpus: 9150, signal 190533/214242 (executing program)
2025/08/30 03:00:01 fetching corpus: 9200, signal 190739/214244 (executing program)
2025/08/30 03:00:01 fetching corpus: 9250, signal 191059/214245 (executing program)
2025/08/30 03:00:01 fetching corpus: 9300, signal 191324/214291 (executing program)
2025/08/30 03:00:01 fetching corpus: 9350, signal 191498/214295 (executing program)
2025/08/30 03:00:01 fetching corpus: 9400, signal 191845/214314 (executing program)
2025/08/30 03:00:01 fetching corpus: 9450, signal 192032/214334 (executing program)
2025/08/30 03:00:01 fetching corpus: 9500, signal 192263/214345 (executing program)
2025/08/30 03:00:01 fetching corpus: 9550, signal 192583/214345 (executing program)
2025/08/30 03:00:01 fetching corpus: 9600, signal 192857/214353 (executing program)
2025/08/30 03:00:01 fetching corpus: 9650, signal 193115/214360 (executing program)
2025/08/30 03:00:01 fetching corpus: 9700, signal 193392/214395 (executing program)
2025/08/30 03:00:02 fetching corpus: 9750, signal 193685/214400 (executing program)
2025/08/30 03:00:02 fetching corpus: 9800, signal 193911/214411 (executing program)
2025/08/30 03:00:02 fetching corpus: 9850, signal 194125/214423 (executing program)
2025/08/30 03:00:02 fetching corpus: 9900, signal 194339/214430 (executing program)
2025/08/30 03:00:02 fetching corpus: 9950, signal 194522/214437 (executing program)
2025/08/30 03:00:02 fetching corpus: 10000, signal 194765/214441 (executing program)
2025/08/30 03:00:02 fetching corpus: 10050, signal 194934/214444 (executing program)
2025/08/30 03:00:02 fetching corpus: 10100, signal 195116/214444 (executing program)
2025/08/30 03:00:02 fetching corpus: 10150, signal 195263/214449 (executing program)
2025/08/30 03:00:02 fetching corpus: 10200, signal 195500/214451 (executing program)
2025/08/30 03:00:02 fetching corpus: 10250, signal 195799/214457 (executing program)
2025/08/30 03:00:02 fetching corpus: 10300, signal 196158/214473 (executing program)
2025/08/30 03:00:03 fetching corpus: 10350, signal 196368/214476 (executing program)
2025/08/30 03:00:03 fetching corpus: 10400, signal 196685/214479 (executing program)
2025/08/30 03:00:03 fetching corpus: 10450, signal 196939/214487 (executing program)
2025/08/30 03:00:03 fetching corpus: 10500, signal 197125/214494 (executing program)
2025/08/30 03:00:03 fetching corpus: 10550, signal 197354/214502 (executing program)
2025/08/30 03:00:03 fetching corpus: 10600, signal 197513/214514 (executing program)
2025/08/30 03:00:03 fetching corpus: 10650, signal 197702/214516 (executing program)
2025/08/30 03:00:03 fetching corpus: 10700, signal 197888/214532 (executing program)
2025/08/30 03:00:03 fetching corpus: 10750, signal 198140/214532 (executing program)
2025/08/30 03:00:03 fetching corpus: 10800, signal 198313/214536 (executing program)
2025/08/30 03:00:03 fetching corpus: 10850, signal 198749/214536 (executing program)
2025/08/30 03:00:03 fetching corpus: 10900, signal 198942/214540 (executing program)
2025/08/30 03:00:04 fetching corpus: 10950, signal 199332/214549 (executing program)
2025/08/30 03:00:04 fetching corpus: 11000, signal 199641/214549 (executing program)
2025/08/30 03:00:04 fetching corpus: 11050, signal 199810/214549 (executing program)
2025/08/30 03:00:04 fetching corpus: 11100, signal 200067/214550 (executing program)
2025/08/30 03:00:04 fetching corpus: 11150, signal 200285/214567 (executing program)
2025/08/30 03:00:04 fetching corpus: 11200, signal 200528/214570 (executing program)
2025/08/30 03:00:04 fetching corpus: 11250, signal 200726/214573 (executing program)
2025/08/30 03:00:04 fetching corpus: 11300, signal 200899/214576 (executing program)
2025/08/30 03:00:04 fetching corpus: 11350, signal 201055/214584 (executing program)
2025/08/30 03:00:04 fetching corpus: 11400, signal 201245/214586 (executing program)
2025/08/30 03:00:05 fetching corpus: 11450, signal 201446/214662 (executing program)
2025/08/30 03:00:05 fetching corpus: 11500, signal 201643/214662 (executing program)
2025/08/30 03:00:05 fetching corpus: 11550, signal 201782/214664 (executing program)
2025/08/30 03:00:05 fetching corpus: 11600, signal 201940/214665 (executing program)
2025/08/30 03:00:05 fetching corpus: 11650, signal 202186/214667 (executing program)
2025/08/30 03:00:05 fetching corpus: 11700, signal 202336/214672 (executing program)
2025/08/30 03:00:05 fetching corpus: 11750, signal 202527/214675 (executing program)
2025/08/30 03:00:05 fetching corpus: 11800, signal 202714/214675 (executing program)
2025/08/30 03:00:05 fetching corpus: 11850, signal 202886/214676 (executing program)
2025/08/30 03:00:05 fetching corpus: 11864, signal 202945/214679 (executing program)
2025/08/30 03:00:05 fetching corpus: 11864, signal 202945/214679 (executing program)
2025/08/30 03:00:07 starting 8 fuzzer processes
03:00:07 executing program 0:
r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x13c, 0x0, 0x8, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x9}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x8c, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="6f845ef112e4"}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x5}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0xc, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x7f}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0xff}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x4}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0xc, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x7fffffff}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x2c, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x3}, @NL80211_BAND_5GHZ={0x8}, @NL80211_BAND_6GHZ={0x8}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x80000001}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x1}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}]}, @NL80211_ATTR_SCAN_SSIDS={0x68, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}, {0x16, 0x0, @random="5a39e9f87dbe0305a44327ea4365ba9b28e3"}, {0xc, 0x0, @random="689aa08a8d779740"}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ap_ssid}, {0x1c, 0x0, @random="923f4087d19d043302b1be1693d35131891557d1b6e23081"}]}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x2412}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x1c, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac=@broadcast}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x20000011}, 0x20004005)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0xbc, r1, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1e}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x36}], @NL80211_ATTR_CSA_C_OFFSETS_TX={0x8, 0xcd, [0x1490, 0x8000]}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x36, 0x33, @action_no_ack={@wo_ht={{0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x81}, @broadcast, @broadcast, @from_mac=@broadcast, {0xd}}, @vht_group_id={0x15, 0x1, {0x10001, "56bd29895386426139fa9591bb607f85"}}}}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_FRAME={0x29, 0x33, @auth={@with_ht={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x45c7}, @broadcast, @broadcast, @from_mac=@device_b, {0xa}}, @ver_80211n={0x0, 0x1f, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x0, 0x0, 0x19, @val={0x10, 0x1, 0x22}}}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0xbc}, 0x1, 0x0, 0x0, 0x40}, 0x4)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x38, r1, 0x20, 0x70bd2d, 0x4, {{}, {@void, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x24, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}, {0x11, 0x0, @random="dc5a38a406017ee7d404da5493"}]}]}, 0x38}, 0x1, 0x0, 0x0, 0xc084}, 0x80)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000740)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000700)={&(0x7f00000005c0)={0x108, r1, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xffffffff, 0x59}}}}, [@NL80211_ATTR_FRAME={0xd7, 0x33, @auth={@wo_ht={{0x0, 0x0, 0xb, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x4}, @device_a, @device_a, @random="9bf8b621bef2", {0x0, 0x7}}, 0x1, 0x3, 0x46, @val={0x10, 0x1, 0x7c}, [{0xdd, 0xb0, "472054fe980d239b7ac4d40ed7dc9c250ddb1486efc0bad0c2b34137c5e83e91ddeb54c71cd465dbf45d3b46fbfbaac79646db6a0911e20ec83027d05db6ff916cef69e35d1b3fb011a5152eab98103b5386be4d0f7b2526a36b7cc4024209804176d155df1f628ee3c4de0df9cdb8f2f01f07900c0938be121e5a888550d18f01aa39a2c021f2aad1ddf8c92bf99bb46c7b7788cf6259a2eba69fef7c3902a7394fae9aac47add044eea958869dd4f6"}]}}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x108}, 0x1, 0x0, 0x0, 0x20000800}, 0x800)
ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000780)={0x0, 0x8, 0x1, [0x0, 0x1f, 0x1c1, 0x3, 0x3], [0x1000, 0x7, 0x401, 0x29f2, 0x95, 0x1ff, 0x100, 0x8, 0x0, 0x0, 0x100000000, 0xfffffffffffff800, 0x3a, 0x3, 0x4, 0x3, 0x8, 0x8, 0x5, 0x1, 0xe, 0x1, 0xffffffffffffffff, 0x8001, 0x3, 0x599, 0x1, 0x10000, 0x0, 0x40, 0x7fff, 0x9d4, 0x1, 0x0, 0x200000, 0x4, 0x5, 0x0, 0x826, 0x61, 0x3ff000000000000, 0x72ae, 0x7ff, 0xffff000000000, 0x8, 0x5, 0x4, 0x400, 0xff, 0xff, 0x4976, 0x23d5, 0x0, 0x1ff, 0x9, 0x7, 0x81, 0x3, 0x8001, 0x1e, 0x9, 0x7, 0x8, 0x2, 0x8, 0x100000000, 0x0, 0x5, 0x4, 0x6, 0x9, 0x0, 0x4, 0x80000000, 0x62a940eb, 0x6, 0xfffffffffffffe00, 0x1000, 0x0, 0x9, 0x719b, 0x4, 0x101, 0x2, 0x29c0000000, 0x3, 0xffffffff, 0x3, 0x7, 0x1, 0x7fff, 0x4, 0x0, 0x3, 0xe06, 0x1ff, 0x7, 0x558, 0xffff, 0x0, 0x0, 0x7, 0xfffffffffffffffb, 0x8000, 0x10001, 0x6, 0x4, 0x81, 0x4, 0x101, 0x4, 0xdb87, 0x538, 0x6, 0x0, 0x5, 0x8, 0x9, 0xbf25, 0x6000000000000000, 0x1926]})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000bc0), r0)
r5 = syz_open_dev$vcsa(&(0x7f0000000c00), 0x100, 0x101)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c80), r0)
sendmsg$NL80211_CMD_GET_MPP(r5, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x2c, r6, 0x4, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x8, 0x15}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000001}, 0x40)
syz_open_dev$vcsa(&(0x7f0000000d80), 0x3, 0xe0200)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x30, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x80)
r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000ec0), 0x401, 0x0)
sendmsg$NL80211_CMD_REGISTER_FRAME(r7, &(0x7f0000001080)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001040)={&(0x7f0000000f40)={0xc8, r4, 0x200, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0xa4, 0x5b, "82a4f65dae21d452d8bfbec85f07c56b5c0dcfb08179221877f0eea51f1ea1895a9a8b508e895ab1e05886d86a8b21102f04715d91ebcb64811dc7ec6fbcf1dd58a73e0be37dec6b8099ecdf1cf85bad304c3a3137b05874d4bb780e85165f9ef1b76119104e743a03b1c67f29b1de8b46499417e2682ece3af24a65d9fc06486cc59e741fcb5f017c91eecd0350e107005e7b142a1e109a10edd05a46515c2f"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x4}]}, 0xc8}}, 0x0)
recvmmsg$unix(r7, &(0x7f0000005480)=[{{&(0x7f00000010c0), 0x6e, &(0x7f0000001300)=[{&(0x7f0000001140)=""/172, 0xac}, {&(0x7f0000001200)=""/49, 0x31}, {&(0x7f0000001240)=""/129, 0x81}], 0x3, &(0x7f0000001340)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x38}}, {{&(0x7f0000001380)=@abs, 0x6e, &(0x7f0000002400)=[{&(0x7f0000001400)=""/4096, 0x1000}], 0x1}}, {{&(0x7f0000002440)=@abs, 0x6e, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/248, 0xf8}, {&(0x7f00000035c0)=""/165, 0xa5}], 0x3, &(0x7f00000036c0)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x140}}, {{&(0x7f0000003800)=@abs, 0x6e, &(0x7f0000004a40)=[{&(0x7f0000003880)=""/159, 0x9f}, {&(0x7f0000003940)=""/8, 0x8}, {&(0x7f0000003980)=""/102, 0x66}, {&(0x7f0000003a00)=""/12, 0xc}, {&(0x7f0000003a40)=""/4096, 0x1000}], 0x5, &(0x7f0000004ac0)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r8=>0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x170}}, {{&(0x7f0000004c40)=@abs, 0x6e, &(0x7f0000004fc0)=[{&(0x7f0000004cc0)=""/101, 0x65}, {&(0x7f0000004d40)=""/172, 0xac}, {&(0x7f0000004e00)=""/73, 0x49}, {&(0x7f0000004e80)=""/175, 0xaf}, {&(0x7f0000004f40)=""/115, 0x73}], 0x5, &(0x7f0000005040)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x38}}, {{&(0x7f0000005080)=@abs, 0x6e, &(0x7f0000005380)=[{&(0x7f0000005100)=""/59, 0x3b}, {&(0x7f0000005140)=""/137, 0x89}, {&(0x7f0000005200)=""/251, 0xfb}, {&(0x7f0000005300)=""/109, 0x6d}], 0x4, &(0x7f00000053c0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x98}}], 0x6, 0x2002, &(0x7f0000005600)={0x77359400})
close_range(r0, r8, 0x2)
fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f0000005700), &(0x7f0000005740), 0x2, 0x2)

03:00:07 executing program 1:
writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000000)="ee7d5fd773f8f7cd9e7691517cd73187a250584e151ef02347ba004d90571ee3304a660dfb5ab09c5ba1b64f25993bd369842328b98c2447edbe34f2adb465948b3f362834b5bbcf287227e784683d21ee7b12244f562a93eb8ea59239da2079aa26843f25075bf2a48987fb94ed396d79d0654dcf2bcee7eaf3a6da2575c999c32bc4a974a5f6abec", 0x89}, {&(0x7f00000000c0)="17adc57f62564b5a34acd97122fc892d793c185e37bedc990a7d3c1ec8565d666a9ead0c59ad2ce62102ec93d681a313fdbc0cbdafecfca6350ec9203e67ac237a3b89405853dd577101e8c67b13b2c7e2b555794fa3d05a8c9f0c11a809dc8c98615061ad6a4f3cb0e4bbfb3d5888b53c75d0c36785c2ab8f33b1c9de2fc925707a34a3f27411dd84288ee2e31aaccf3857e10c65600b728a50ea0bea84775c1538836b1f6389d7008ff44a3e96e160aaf129e68a52cb302305f2561dfe7e460b50934288d671ed4d8071b6ee76a775dc74171f30908d089e4d3c55b4dd", 0xde}], 0x2)
setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000200)=@ccm_128={{0x304}, "59b040aff16b394d", "2faab7f4c65e15afefc7c6fd809c4529", "d6235a97", "9f50affd208f17a6"}, 0x28)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00', <r0=>0x0})
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, 0x0, 0x20, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x1583, 0x30}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x4004817}, 0x4054)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
sendmsg$IPSET_CMD_TEST(r1, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)={0x108, 0xb, 0x6, 0x301, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x5c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private2}}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x53}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0xfffffffffffff1d5}, @IPSET_ATTR_ETHER={0xa, 0x11, @remote}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x36}}}, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x1f}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x60, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x98f}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x10000}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'geneve0\x00'}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz1\x00'}}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x108}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000580)={{0x1, 0x1, 0x18, <r2=>r1, {0x1}}, './file0\x00'})
ioctl(r2, 0xfff, &(0x7f00000005c0)="22e1c3dbe6da9ea3d4b6c410a087ca1013511b412fe60efd33a2d3b574715d803a2d7d0b6b5b37157f86cb542bc2")
ioctl$BLKBSZGET(r1, 0x80081270, &(0x7f0000000600))
pipe(&(0x7f0000000640)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendfile(r4, r2, &(0x7f0000000680)=0xffff, 0x7)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r4)
r6 = syz_open_dev$vcsa(&(0x7f0000000700), 0x0, 0x0)
sendmsg$IPVS_CMD_ZERO(r6, &(0x7f00000008c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000880)={&(0x7f0000000780)={0xf4, 0x0, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2f}, @IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4c}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xfff}, @IPVS_DEST_ATTR_INACT_CONNS={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7fffffff}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2b}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7fffffff}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x73}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0xc}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80000000}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7f}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}]}, 0xf4}, 0x1, 0x0, 0x0, 0x20000081}, 0x10000)
r7 = accept4(r3, &(0x7f0000000900)=@l2tp={0x2, 0x0, @private}, &(0x7f0000000980)=0x80, 0x80800)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000a00)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_GET_SCAN(r7, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x28, r5, 0x400, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x6, 0x5}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8004}, 0x40800)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000cc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000b40)={0x120, 0x9, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0x2}, [@IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e24}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz1\x00'}}]}, @IPSET_ATTR_ADT={0x40, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x800}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x60}}]}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR2={0x5}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x7}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1f}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0xffffffff}}]}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_ETHER={0xa}, @IPSET_ATTR_COMMENT={0x5, 0x1a, '\x00'}, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x7}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0xffff}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0xac}, @IPSET_ATTR_IFACE={0x14, 0x17, 'wg1\x00'}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x4000040}, 0x4040)
sendmsg$NL80211_CMD_START_P2P_DEVICE(r2, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, r5, 0x100, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20000000)
sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x34, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x10000}, 0x20008010)

03:00:07 executing program 5:
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x4}}, './file0\x00'})
r1 = memfd_create(&(0x7f0000000040)='\x00', 0x4)
r2 = socket$unix(0x1, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6gre0\x00'})
bind$unix(r2, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth1_virt_wifi\x00', <r3=>0x0})
ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000180)=0x8)
write(r2, &(0x7f00000001c0)="f340c07f6e96ba348e60ae782c9016bfc92fd8dda27b461c4b7c063a82a7308815a12f53a5e9844e0ca534c6f72fe93a70196245e196b09d9156a2005c7ed71e72b86ea88edc1e85555443129d5f389317f8b881a159275a3d0b58a92fcee305dd265dcee263abcf84b7b40eb5eed07581cd4c30c947232bba7ecb21bc56c5e2e8a8b5a6f5", 0x85)
r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000480), 0x12081, 0x0)
ioctl$SNAPSHOT_ATOMIC_RESTORE(r4, 0x3304)
r5 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x8, 0x8400)
setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000500)={r3, 0x1, 0x6, @broadcast}, 0x10)
sendfile(r1, r1, &(0x7f0000000540)=0x5, 0x1)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$SO_BINDTODEVICE_wg(r6, 0x1, 0x19, &(0x7f0000000580)='wg1\x00', 0x4)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000005c0), 0x40, 0x0)
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000600)=0xee)
accept$packet(r4, &(0x7f0000000640)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000680)=0x14)
setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000006c0)={r7, 0x1, 0x6, @broadcast}, 0x10)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000780)={0x2, 0x80, 0x0, 0x5, 0xbc, 0x3, 0x0, 0x6, 0x8, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x6, 0x6, @perf_bp={&(0x7f0000000740), 0x2}, 0x8001, 0xff, 0x9, 0x1, 0x9, 0xaa, 0x8, 0x0, 0xd0b5, 0x0, 0x4})

03:00:07 executing program 2:
pread64(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0x1000, 0x2)
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000001000), 0x6c2040, 0x0)
kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000001040)={0xffffffffffffffff, r0, 0x4})
r1 = dup2(r0, r0)
sendmsg$IPSET_CMD_GET_BYINDEX(r1, &(0x7f0000001180)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001140)={&(0x7f00000010c0)={0x4c, 0xf, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_INDEX={0x6, 0xb, 0xffffffffffffffff}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x2}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x40)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000011c0), 0x22802)
lseek(r2, 0x2ca, 0x2)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001200)='/proc/tty/drivers\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r3, 0xc058534f, &(0x7f0000001240)={{0x1, 0x29}, 0x0, 0x7, 0x6d77, {0x8, 0x7}, 0x8, 0xffff})
r4 = accept(r0, 0x0, &(0x7f00000012c0))
fcntl$setstatus(r4, 0x4, 0x2000)
r5 = open(&(0x7f0000001640)='./file0\x00', 0x200000, 0x20)
getsockopt$packet_buf(r5, 0x107, 0x16, &(0x7f0000001680)=""/4096, &(0x7f0000002680)=0x1000)
r6 = openat$incfs(r5, &(0x7f00000026c0)='.log\x00', 0x189001, 0x22)
ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r6, 0x40505330, &(0x7f0000002700)={{0x81, 0x8}, {0x3, 0x9}, 0x1, 0x0, 0x5})
getsockname(r0, &(0x7f0000002780)=@pppol2tpin6={0x18, 0x1, {0x0, <r7=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, &(0x7f0000002800)=0x80)
close_range(r6, r7, 0x2)
creat(&(0x7f0000002840)='./file0\x00', 0x144)
ioctl$AUTOFS_IOC_SETTIMEOUT(r7, 0x80049367, &(0x7f0000002880)=0x1ff)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x4058534c, &(0x7f00000028c0)={0x39f8536c, 0x0, 0x101, 0x800, 0x1})

03:00:07 executing program 7:
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/sr_mod', 0x2082, 0x80)
ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0)
ioctl$AUTOFS_IOC_FAIL(r0, 0x9361, 0x9)
r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x428400, 0x2)
r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2)
sendmsg$AUDIT_GET(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3e8, 0x0, 0x70bd28, 0x25dfdbfd, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x24008004}, 0x801)
getsockopt$netlink(r1, 0x10e, 0xa, &(0x7f0000000180)=""/138, &(0x7f0000000240)=0x8a)
ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, r2)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
close(0xffffffffffffffff)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
sendfile(r3, r0, 0x0, 0x6)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f00000005c0)={'ip6gre0\x00', &(0x7f0000000540)={'ip6gre0\x00', <r4=>0x0, 0x29, 0x8, 0x2, 0x8000, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, 0x7, 0x7, 0x1, 0x7}})
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000600)={@private2, 0x6d, r4})
fchmod(0xffffffffffffffff, 0x80)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000800)={'ip6gre0\x00', &(0x7f0000000780)={'sit0\x00', 0x0, 0x2f, 0x9, 0x0, 0x20, 0x28, @loopback, @remote, 0x700, 0x8000, 0xc8e, 0x95}})

03:00:07 executing program 6:
ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, &(0x7f0000000000)={'batadv0\x00', {0x2, 0x0, @remote}})
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)=@abs, 0x6e, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/50, 0x32}, {&(0x7f0000000100)=""/32, 0x20}], 0x2, &(0x7f0000000180)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff, 0xffffffffffffffff, <r3=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r4=>0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x158}, 0x20)
ioctl$sock_SIOCBRADDBR(r4, 0x89a0, &(0x7f0000000340)='ip6gretap0\x00')
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r3, &(0x7f00000006c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2010}, 0xc, &(0x7f0000000680)={&(0x7f00000003c0)={0x288, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x9}, {0x6, 0x16, 0x4}, {0x5}, {0x6, 0x11, 0x1000}, {0x8, 0xb, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x80000001}, {0x6, 0x16, 0x81}, {0x5}, {0x6, 0x11, 0x8}, {0x8, 0xb, 0x8000}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x6}, {0x6, 0x16, 0x895}, {0x5}, {0x6, 0x11, 0x44a}, {0x8, 0xb, 0x3980000}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xe603}, {0x6, 0x16, 0x4}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0xffff}, {0x8, 0xb, 0x9}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x401}, {0x6, 0x16, 0x7fff}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0xdce3}, {0x8, 0xb, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x1}, {0x6, 0x16, 0x100}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x9fd}, {0x8, 0xb, 0x49eb}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xb8}, {0x6, 0x16, 0x5}, {0x5}, {0x6, 0x11, 0x66}, {0x8, 0xb, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0xf14}, {0x6, 0x16, 0x14}, {0x5, 0x12, 0x1}, {0x6}, {0x8, 0xb, 0x1}}]}, 0x288}, 0x1, 0x0, 0x0, 0x410}, 0x60040840)
ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000700))
r8 = fspick(r5, &(0x7f0000000740)='./file0\x00', 0x1)
write$binfmt_script(r8, &(0x7f0000000780)={'#! ', './file0', [{0x20, 'netdevsim'}, {0x20, '%[,]-.'}, {0x20, 'netdevsim\x00'}, {0x20, 'pci\x00'}], 0xa, "593f198e93a390605581e4eb93062fda273b2ba7255ecaeef2b99cc5ed6ed8ee8f43bcf80e58b2f5696604a00850809c4aeb0bab066d138965a655a2729707b027e8d9bc053c6412b9a64266c017c8"}, 0x7b)
ioctl$sock_SIOCOUTQ(r2, 0x5411, &(0x7f0000000800))
symlink(&(0x7f0000000840)='./file0/file0\x00', &(0x7f0000000880)='./file0\x00')
sendmsg$IPVS_CMD_DEL_SERVICE(r3, &(0x7f0000000ac0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000900)={0x16c, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3ff}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@empty}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x23}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x800}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x100}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x32}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x20}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x6c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xeb}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'erspan0\x00'}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x6800}, 0x20000000)
r9 = creat(&(0x7f0000000b00)='./file0/file0\x00', 0x100)
fspick(r9, &(0x7f0000000b40)='./file0\x00', 0x0)
r10 = openat$cgroup_subtree(r6, &(0x7f0000000b80), 0x2, 0x0)
fcntl$setstatus(r10, 0x4, 0x4000)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r7, 0xc0189373, &(0x7f0000001000)={{0x1, 0x1, 0x18, <r11=>r1, {0xe76}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r11, 0xc0189373, &(0x7f0000001040)={{0x1, 0x1, 0x18, r5, {0x3ff}}, './file0\x00'})
r12 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001080), 0x400, 0x0)
r13 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r12, 0xc0189372, &(0x7f00000010c0)={{0x1, 0x1, 0x18, r13, {0x4}}, './file0\x00'})
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001100)='./cgroup.net/syz0\x00', 0x200002, 0x0)

03:00:07 executing program 3:
r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffa)
r1 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8)
r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, r0)
keyctl$read(0xb, r1, &(0x7f0000000180)=""/4096, 0x1000)
r3 = add_key(&(0x7f0000001240)='blacklist\x00', &(0x7f0000001280)={'syz', 0x0}, &(0x7f00000012c0)="c8daabfbc05df3213368267480b206151b3116c8c882d03c17ed2ff5d1c4377aaecf6b17703909500590c900e948786241039d4523d558353b2cf947c283a8bff210247952e490ffe37ce0dac7d05b0a3ccc17e586fa5322c4c8954d165707c05f80b61e", 0x64, 0x0)
add_key$user(&(0x7f0000001180), &(0x7f00000011c0)={'syz', 0x3}, &(0x7f0000001200)="69c65e8172f39f8196035b706068fc9e520f25d0c024ff81f2d68abc801377cf4ef6fa63d6ea05c34f10fbd4f7da767e69b004c642eac4a36ccd27", 0x3b, r3)
r4 = add_key$keyring(&(0x7f0000001340), &(0x7f0000001380)={'syz', 0x1}, 0x0, 0x0, r2)
keyctl$assume_authority(0x10, r2)
r5 = add_key$fscrypt_v1(&(0x7f00000013c0), &(0x7f0000001400)={'fscrypt:', @desc1}, &(0x7f0000001440)={0x0, "54d859ea2dcc0b052871d0ffd0c6d5466b680b1ec488209e57b3579803fd53c39544df653c22ad9e9f51022fb8f13fbf6959ccdaa52f215e0c62ec46977f5c83", 0x27}, 0x48, r3)
keyctl$reject(0x13, r5, 0x9, 0x952d, 0xffffffffffffffff)
r6 = request_key(&(0x7f0000001580)='cifs.idmap\x00', &(0x7f00000015c0)={'syz', 0x1}, &(0x7f0000001600)='.^\x00', r4)
r7 = request_key(&(0x7f00000014c0)='rxrpc\x00', &(0x7f0000001500)={'syz', 0x1}, &(0x7f0000001540)='keyring\x00', r6)
r8 = add_key$keyring(&(0x7f00000016c0), &(0x7f0000001700)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$search(0xa, r4, &(0x7f0000001640)='rxrpc_s\x00', &(0x7f0000001680)={'syz', 0x1}, r8)
r9 = add_key(&(0x7f0000001800)='id_resolver\x00', &(0x7f0000001840)={'syz', 0x3}, &(0x7f0000001880)="459b3ce23aaae7ad18fb7ce6f6f0ba728400edceb4b2537c7ec3f6592acd1943198bf48d0fbc44369a58ac56f2c92f332d182f850af7067ceed547659abd1dab4e61bb209963ef4f42275512ff86cb0be55de927ff33321e438ebef4de57e09a0dda31e3504617f0c78fe83b4c", 0x6d, 0xfffffffffffffffa)
request_key(&(0x7f0000001740)='trusted\x00', &(0x7f0000001780)={'syz', 0x3}, &(0x7f00000017c0)='user\x00', r9)
r10 = add_key$keyring(&(0x7f0000001900), &(0x7f0000001940)={'syz', 0x2}, 0x0, 0x0, r7)
keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000001980)={r10, 0x72, 0xbd}, &(0x7f00000019c0)={'enc=', 'pkcs1', ' hash=', {'hmac(sha256-avx2)\x00'}}, &(0x7f0000001a40)="a5e19c05fe8183bdb21e2edfaa807a81a3ddf1d09af2596fee9e2fd8a5203410ba62991fada89722440204825b7e048616469f7ebcec5d37fd8c795e8caa991e1d9cc9ab7090fe7c838e2bc89d2f9b44988e9588c9fe6ec0d213e9f86fc52eb50ba7b6f291b8c92f607834e9e1d104a1c2c0", &(0x7f0000001ac0)=""/189)
add_key$keyring(&(0x7f0000001b80), &(0x7f0000001bc0)={'syz', 0x0}, 0x0, 0x0, r9)
add_key$keyring(&(0x7f0000001c00), &(0x7f0000001c40)={'syz', 0x2}, 0x0, 0x0, r6)

03:00:07 executing program 4:
r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x6c, r0, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x427b163f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xc0000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2000000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xd30}]}, @TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40045}, 0x20000084)
r1 = syz_genetlink_get_family_id$gtp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x64, r1, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_NET_NS_FD={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast1}, @GTPA_VERSION={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_VERSION={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}]}, 0x64}, 0x1, 0x0, 0x0, 0x14}, 0x4000080)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000380)={0x274, r2, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x1000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x20}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8001}]}, @TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "9d6ad5b233bb905b0d7b69d7cf17104544adc6a240bc85d993f15ea6c40afd9e1a527828"}}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}]}, @TIPC_NLA_LINK={0x28, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_BEARER={0x80, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x74}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'eth', 0x3a, 'wg0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}]}, @TIPC_NLA_LINK={0x80, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffc0}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xbcc8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80000000}]}, @TIPC_NLA_NET={0x40, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x80000001}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7f}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xb772}]}]}, 0x274}, 0x1, 0x0, 0x0, 0x20000000}, 0xc0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000006c0)={{{@in6=@private1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0, <r4=>0x0}}, {{@in6=@loopback}, 0x0, @in6}}, &(0x7f00000007c0)=0xe8)
sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x74, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x8}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private2}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_IFINDEX={0x8, 0xb, r3}, @FOU_ATTR_IFINDEX={0x8}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000000}, 0x8080)
sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x1c, 0x0, 0x8, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200000c0}, 0xc805)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000a00)={{0x1, 0x1, 0x18, <r5=>0xffffffffffffffff}, './file0\x00'})
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000a80)={@loopback, @remote, <r6=>0x0}, &(0x7f0000000ac0)=0xc)
ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000b80)={'syztnl2\x00', &(0x7f0000000b00)={'sit0\x00', <r7=>r3, 0x29, 0x7, 0x0, 0x0, 0x0, @local, @empty, 0x1, 0x7, 0x4, 0x2}})
[   84.684565] audit: type=1400 audit(1756522807.917:7): avc:  denied  { execmem } for  pid=273 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000001fc0)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001f80)={&(0x7f0000000bc0)={0x1390, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x40}, @ETHTOOL_A_LINKMODES_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x4}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0xfe}, @ETHTOOL_A_LINKMODES_OURS={0x1340, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x1004, 0x5, "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"}, @ETHTOOL_A_BITSET_BITS={0x4c, 0x3, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x474}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'wg0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '+\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'wg0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_VALUE={0xc7, 0x4, "1bf8bbdfa43e4be1fd2babe20c0a8453fe53800587fb26453bcddd973bd966ec065063c7eb24338b15601d85453cca2431838778d3e3a96090c640df5036e615f788ef8b7725a9edc483303cbe46f7db530ffc40b91dfc470c7ff54d37383343fb6b667e74aa0e10b140f23fda113772f10566d1ed759e80de1d82b5790363304eb89de38d40de0b31d39cdeb3986a0e141aeab5d4818134cec6dcb27da47e483367758d6ade43946de0b4daf89b20fd3d2741250dfd89a450e9cd5b87c5e03862f07c"}, @ETHTOOL_A_BITSET_VALUE={0xe6, 0x4, "f668fb7c152a2980b3b51edc154ba9f69ec7b21ef164ba816c0826a88dbeaa384b0e8cc089661390302c7e519b23fa318d64e1f575f5dde7855ccbc6b86c0e5bb18b10f424c54bd4fa6806e1d3ed26c4b4e13aa3977d07a17f853ef6d95065bbf8ff81883712506dac455699bf10c2afc50960ad7d3ac3b05692bf9ce27a684fc23fc71939a5eadbfcf1df9a702462759cbc1c2d90445a6d56300f8885502e7bfc5917a5c14f3868dda01ee115192c8815fb7ab483d8e43143aeaef0ef40d7c75440bddacc375966a10df6ee3bc785c21bd19f99d56c71cae9e7fdf1caa8ded1126f"}, @ETHTOOL_A_BITSET_BITS={0x124, 0x3, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'gcm(aes)\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\\\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fffffff}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xab}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'gcm(aes)\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3a}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '-]-:\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'wg0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '.*\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\\,\x00'}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'gtp\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'gcm(aes)\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '.\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'udp:syz1\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '{--\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x13}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x100}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x100}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x5}]}, 0x1390}, 0x1, 0x0, 0x0, 0x8004}, 0x1)
sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000002640)={&(0x7f0000002000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002600)={&(0x7f0000002040)={0x58c, 0x0, 0x2, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7, 0x4d}}}}, [@NL80211_ATTR_TX_RATES={0x29c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x2c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xef77, 0x6, 0xff5c, 0x7fff, 0xff, 0xff5c, 0x245, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xb3c, 0x3, 0xbaf0, 0x1ff, 0x1, 0xff, 0x9, 0x7]}}]}, @NL80211_BAND_5GHZ={0xac, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x13, 0x1, [0xb, 0xb, 0x5, 0x12, 0xb, 0x9, 0x5, 0x48, 0x2, 0x36, 0x0, 0x18, 0x0, 0x2, 0x1]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4c, 0x6, 0x7, 0x99, 0xe457, 0x7, 0x7079, 0x1f]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x43c2, 0x4, 0x56, 0xfffb, 0x2, 0x7, 0x401, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xf894, 0xfff, 0x0, 0x101, 0x200, 0x8000, 0x7, 0xff7f]}}, @NL80211_TXRATE_HT={0x41, 0x2, [{0x0, 0x7}, {0x1, 0x8}, {0x6, 0x1}, {0x6, 0x6}, {0x6, 0x5}, {0x2}, {0x1}, {0x7, 0x2}, {0x6, 0x2}, {0x0, 0x9}, {0x2, 0x1}, {0x6, 0x8}, {0x2, 0x7}, {0x1, 0x6}, {0x5, 0x2}, {0x3, 0x9}, {0x4, 0x2}, {0x2}, {0x0, 0xa}, {0x1, 0x3}, {0x1, 0x1}, {0x5, 0x2}, {0x0, 0x8}, {0x6, 0x6}, {0x2, 0x7}, {0x0, 0x7}, {0x5}, {0x7, 0x8}, {0x0, 0x5}, {0x3, 0x9}, {0x0, 0x7}, {0x2, 0x2}, {0x7, 0x4}, {0x3, 0x2}, {0x2, 0x9}, {0x5, 0x5}, {0x3, 0x5}, {0x6, 0x9}, {0x5, 0x9}, {0x1}, {0x4, 0x2}, {0x7}, {0x3, 0x2}, {0x6, 0x1}, {}, {0x2, 0x2}, {0x5, 0x7}, {0x2, 0x6}, {0x1, 0x6}, {0x5, 0x5}, {0x3, 0x9}, {0x6, 0x2}, {0x7, 0x7}, {0x2}, {0x4, 0x1}, {0x3, 0x3}, {0x1, 0x6}, {0x7, 0x8}, {0x1, 0x8}, {0x0, 0x9}, {0x0, 0x3}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x101, 0x44, 0x6, 0x7, 0x7f, 0xfff7, 0x1ff]}}]}, @NL80211_BAND_60GHZ={0x60, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x9, 0x2, [{0x1, 0x6}, {0x0, 0x6}, {0x0, 0xa}, {0x7, 0x4}, {0x6, 0x6}]}, @NL80211_TXRATE_HT={0x33, 0x2, [{0x2, 0x6}, {0x1, 0x3}, {0x6, 0x2}, {0x6, 0x2}, {0x7, 0x9}, {0x7, 0x1}, {}, {0x1}, {0x0, 0x5}, {0x4, 0x5}, {0x3, 0x8}, {0x4, 0x4}, {0x2, 0x6}, {0x0, 0x8}, {0x4}, {0x7}, {0x6, 0x3}, {0x0, 0x7}, {0x2, 0x1}, {0x7, 0x7}, {0x4, 0x6}, {0x5, 0x1}, {0x7}, {0x1, 0x5}, {0x7, 0xa}, {0x1, 0x7}, {0x0, 0x7}, {0x5, 0x1}, {0x7, 0x7}, {0x3, 0x13}, {0x5, 0x7}, {0x5, 0x3}, {0x3, 0x8}, {0x1, 0x8}, {0x5, 0x7}, {0x5, 0x9}, {0x3, 0x4}, {0x3, 0x1}, {0x5, 0x7}, {0x0, 0x9}, {0x4, 0x7}, {0x1, 0x6}, {0x6, 0xa}, {0x3, 0x1}, {0x1, 0x7}, {0x4}, {0x0, 0x3}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0xffff, 0xee0, 0xb3, 0x6, 0x9, 0xec2]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0x90, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x7, 0x1, [0x1b, 0x5, 0x4e]}, @NL80211_TXRATE_HT={0x1e, 0x2, [{}, {0x5, 0x8}, {0x2, 0x8}, {0x4, 0x1}, {0x5, 0x8}, {0x5, 0x4}, {0x5}, {0x3, 0x4}, {0x5, 0x4}, {0x4, 0x7}, {0x4, 0x1}, {0x5, 0x1}, {0x6, 0x4}, {0x7, 0x6}, {0x7, 0x4}, {0x1}, {0x1, 0xa}, {0x7, 0x2}, {0x7, 0x8}, {0x3, 0x6}, {0x4, 0x1}, {0x4, 0x1}, {0x3}, {0x5, 0x1}, {0x5, 0x8}, {0x0, 0x7}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x452f2018b3861580}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x8000, 0xff7f, 0x8, 0x7, 0xb974, 0x0, 0x255f]}}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xc7, 0x470, 0x1, 0x6, 0x200, 0x8, 0x2, 0x1ff]}}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x48, 0x24, 0x1, 0xb, 0x1, 0x9, 0x16, 0x18, 0x29, 0x24, 0x4, 0x48, 0x30, 0x30, 0x9, 0x2, 0x12, 0x48, 0x30, 0x9, 0x57, 0x48, 0x3, 0x30, 0x12]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x88, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x30, 0x2, 0x9, 0x18, 0x24, 0x36, 0x60, 0x60, 0x3c, 0x2, 0x60, 0x0, 0x1, 0x2, 0x60, 0x18, 0xc, 0x3f, 0x4, 0x3, 0x36, 0x18, 0x3]}, @NL80211_TXRATE_HT={0x13, 0x2, [{0x0, 0xa}, {0x6, 0x6}, {0x3}, {0x7, 0x4}, {0x6}, {0x7}, {0x7, 0x1}, {0x7, 0x2}, {0x5, 0x3}, {0x5, 0x7}, {0x7, 0x9}, {0x3, 0x4}, {0x4, 0x3}, {0x1, 0x6}, {0x4, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7fff, 0x3, 0x200, 0x9, 0x4000, 0x0, 0x0, 0x6863]}}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x36, 0x5, 0x12, 0x36, 0x6c, 0x24, 0x1, 0x48, 0x1b, 0x4, 0x2, 0x5, 0x60, 0x9, 0x18, 0x9, 0x60, 0x18, 0x6c, 0x24]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x1000, 0x8, 0x1, 0x81, 0xb13, 0x6, 0x8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0x3ff, 0x8, 0x67, 0x9, 0xff, 0x2, 0x8]}}]}, @NL80211_BAND_2GHZ={0x14, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0xf, 0x2, [{0x1}, {0x7, 0x3}, {0x6, 0x9}, {0x1}, {0x0, 0x4}, {}, {0x4, 0x8}, {0x2, 0x6}, {0x0, 0x2}, {0x3, 0x8}, {0x0, 0x2}]}]}, @NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x7fff, 0xe2, 0xb241, 0x1, 0x5, 0x4, 0x3f]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x500e, 0x96, 0x3, 0x0, 0x4338, 0x0, 0x0, 0x81]}}]}]}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb9}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_TX_RATES={0x274, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xe4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x8, 0x3ff, 0x0, 0x1f, 0x1, 0x98, 0x4]}}, @NL80211_TXRATE_HT={0x4a, 0x2, [{0x1, 0x6}, {0x5, 0x8}, {0x2, 0x9}, {0x3}, {0x1, 0x5}, {0x2, 0x2}, {0x7, 0x1}, {0x2, 0x3}, {0x6, 0xa}, {0x1, 0x5}, {0x5}, {0x5, 0x3}, {0x1, 0x1}, {0x3, 0x4}, {0x2}, {0x5, 0x8}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x1}, {0x3, 0x4}, {0x4}, {0x0, 0x4}, {0x0, 0x2}, {0x7, 0x6}, {0x6, 0x8}, {0x1, 0x4}, {0x4}, {0x3, 0xa}, {0x5}, {0x7, 0xa}, {0x6, 0x9}, {0x0, 0x6}, {0x3, 0x9}, {0x2, 0x1}, {0x4, 0x7}, {0x0, 0x5}, {0x7, 0xa}, {0x2, 0x7}, {0x2, 0x5}, {0x7, 0x2}, {0x0, 0x9}, {0x4, 0x2}, {0x3, 0x3}, {0x6, 0x3}, {0x1, 0x7}, {0x3, 0xa}, {0x3, 0x4}, {0x1, 0x3}, {0x0, 0x9}, {0x2, 0x9}, {0x4}, {0x0, 0x5}, {0x4, 0x6}, {0x2, 0x6}, {0x0, 0x9}, {0x3}, {0x3, 0x5}, {0x7}, {0x0, 0x6}, {0x5, 0x4}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x6, 0x8}, {0x1, 0x7}, {0x7, 0x9}, {0x5, 0x9}, {0x4, 0x4}, {0x5, 0x3}, {0x3}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x40, 0x1, 0x1, 0x8, 0x3ff, 0xfe01, 0x20]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffd, 0x431f, 0xfe00, 0xff, 0x2, 0x94f9, 0x1, 0x4]}}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x6c, 0xc, 0x24, 0x5, 0x16, 0x18, 0x24, 0xe]}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x32, 0x28, 0x12, 0x6c, 0xc, 0x31, 0x24, 0x3, 0x60, 0xb, 0x5, 0xb, 0xb, 0x1, 0x3, 0x30, 0x2, 0x3, 0x18, 0x24, 0x12, 0xc, 0x18, 0x6, 0x5, 0x24, 0x9, 0x48, 0x0, 0x2, 0x2]}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0xc, 0x6, 0x1b, 0x16, 0x30, 0x5, 0x48, 0x1b, 0x3, 0x3, 0x30, 0x5, 0x9, 0x2, 0x6, 0x3, 0xb, 0xc, 0x24, 0x5, 0x8, 0x18, 0x1b, 0x0, 0x10, 0x18, 0x2, 0x24, 0x6c, 0x18, 0x4e, 0x16]}, @NL80211_TXRATE_LEGACY={0x4}]}, @NL80211_BAND_2GHZ={0x134, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x9, 0x8, 0x0, 0x200, 0x3, 0x8, 0x6]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x5, 0x9}, {0x4, 0x9}, {0x3, 0x4}, {0x0, 0x9}, {0x2, 0x7}, {0x3, 0x4}, {0x7, 0x6}, {0x6}, {0x2, 0x4}, {0x1, 0x9}, {0x1, 0x1}, {0x7}, {0x0, 0xa}, {0x4, 0x8}, {0x1, 0x7}, {0x2, 0x6}, {0x0, 0x1}, {0x6, 0x9}, {0x7, 0xa}, {0x2, 0x8}, {0x1, 0x6}, {0x4, 0x4}, {0x5, 0x7}, {0x0, 0x5}, {0x7, 0x5}, {0x0, 0x2}, {0x1, 0x6}, {0x6, 0x3}, {0x6, 0x5}, {0x7, 0x1}, {0x7}, {0x1, 0x9}, {0x0, 0x7}, {0x0, 0x7}, {0x3, 0x4}, {0x1, 0x1}, {0x2, 0x7}, {0x1, 0x9}, {0x5, 0x1}, {0x0, 0x5}, {0x4, 0x8}, {0x5, 0x3}, {0x0, 0x8}, {0x0, 0x2}, {0x0, 0x9}, {0x3, 0x1}, {0x0, 0x3}, {0x1, 0x9}, {0x7, 0x3}, {0x0, 0x4}, {0x1, 0x6}, {0x5, 0x6}, {0x4, 0x8}, {0x0, 0x2}, {0x5, 0x4}, {0x7}, {0x7, 0x1}, {0x6, 0x1}, {0x1, 0x9}, {0x4, 0x4}, {0x7, 0x3}, {0x4, 0x5}, {0x7, 0x5}, {0x3, 0x9}, {0x1, 0x8}, {0x0, 0x7}, {0x4}, {0x0, 0x7}, {0x2, 0x4}, {0x5, 0x3}, {0x5, 0x3}, {0x7, 0x6}, {0x2, 0x6}, {0x6, 0x7}, {0x7, 0xa}, {0x4, 0x1}, {0x1}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xcf8, 0x400, 0x6, 0x40, 0x9, 0x6, 0x3, 0x8]}}, @NL80211_TXRATE_HT={0x4d, 0x2, [{0x0, 0x2}, {0x0, 0x4}, {0x6, 0x7}, {0x2, 0x8}, {0x4, 0x2}, {0x4}, {}, {0x2, 0x5}, {0x0, 0x8}, {}, {0x3, 0x7}, {0x3}, {0x1, 0xa}, {0x1, 0x2}, {0x5, 0x2}, {0x2, 0x3}, {0x0, 0x5}, {0x1, 0x9}, {0x0, 0x5}, {0x1, 0x9}, {0x0, 0x1}, {0x5, 0x6}, {0x4, 0x3}, {0x7, 0x5}, {0x0, 0xa}, {0x0, 0x7}, {0x6, 0x7}, {0x3, 0x1}, {0x4, 0x9}, {0x0, 0x1}, {0x4, 0x3}, {0x1, 0x5}, {0x3, 0xa}, {0x1, 0x6}, {0x1, 0x5}, {0x4, 0x3}, {0x1, 0x2}, {0x5, 0x5}, {0x1, 0x2}, {0x5, 0x1}, {0x4, 0x3}, {0x7, 0x1}, {0x6, 0x3}, {0x4, 0x1}, {0x1, 0x2}, {0x3, 0x6}, {0x6, 0x5}, {0x3, 0x4}, {0x2, 0xa}, {0x0, 0x3}, {0x6, 0x9}, {0x4, 0x8}, {0x4, 0x1}, {0x1, 0x6}, {0x0, 0x5}, {}, {0x7, 0x4}, {0x3, 0x4}, {0x6, 0x2}, {0x3, 0x8}, {0x5, 0x6}, {0x5, 0x6}, {0x1, 0x6}, {0x1, 0x3}, {0x5, 0x8}, {0x1, 0xa}, {0x7, 0x7}, {0x2, 0x2}, {0x1, 0x9}, {0x1, 0x2}, {0x4, 0x4}, {0x3, 0x7}, {0x2, 0x2}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x40, 0x2, [{0x1, 0x8}, {0x6, 0x6}, {0x1, 0x8}, {0x2, 0x7}, {0x7, 0x1}, {0x1, 0x6}, {0x5}, {0x0, 0x2}, {0x0, 0x2}, {0x1, 0x6}, {0x0, 0x3}, {0x2, 0xa}, {0x4, 0x7}, {0x3, 0x9}, {0x5, 0x7}, {0x4, 0x6}, {0x4, 0x3}, {0x0, 0x1}, {0x7, 0x4}, {0x7, 0x2}, {0x0, 0x8}, {0x7, 0x6}, {0x5, 0x1}, {0x6, 0x7}, {0x7, 0x3}, {0x0, 0xa}, {0x1, 0x5}, {0x5, 0x4}, {0x1, 0x6}, {0x1, 0x2}, {0x2, 0x4}, {0x3, 0x5}, {0x5, 0xa}, {0x7, 0x3}, {0x2, 0x1}, {0x2, 0x8}, {0x2, 0x5}, {0x2, 0x9}, {0x5, 0x7}, {0x3, 0x4}, {0x0, 0x2}, {0x0, 0x5}, {0x2, 0x4}, {0x4, 0x2}, {0x2, 0x7}, {0x1, 0x5}, {0x3, 0x1}, {0x3, 0x8}, {0x0, 0x8}, {0x4, 0x4}, {0x1, 0x3}, {0x1, 0x7}, {0x6, 0x8}, {0x7, 0x8}, {0x6, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x3, 0x7}, {0x6, 0x5}, {0x6, 0x5}]}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x48, 0x5, 0x3, 0xb, 0x18, 0x0, 0x24, 0x4]}]}, @NL80211_BAND_60GHZ={0x58, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x24, 0x1, 0x24, 0x30, 0x1b, 0x36, 0x1b, 0x6, 0x24, 0x18, 0xb, 0x19, 0x17, 0x36, 0x16, 0x12, 0x60, 0x6, 0x60, 0x6c, 0x60, 0x48, 0x18]}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x18, 0x4, 0x48, 0x36, 0xb, 0x36]}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x48, 0x1, 0x2, 0x24, 0x1b, 0x12, 0x30, 0x4, 0x52, 0x6, 0x16, 0x12, 0xb, 0x48, 0x12]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x1000}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x3f}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x20dd}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0x23}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0x4}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x8}, @NL80211_MESHCONF_HOLDING_TIMEOUT={0x6, 0x3, 0x38}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x4}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x2}]}, 0x58c}, 0x1, 0x0, 0x0, 0x20000400}, 0x20000005)
setsockopt$IP_VS_SO_SET_ZERO(r5, 0x0, 0x48f, &(0x7f0000002680)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x0, 'rr\x00', 0x10, 0x8, 0x1e}, 0x2c)
getsockopt$IPT_SO_GET_REVISION_TARGET(r5, 0x0, 0x43, &(0x7f00000026c0)={'icmp6\x00'}, &(0x7f0000002700)=0x1e)
fsetxattr$security_capability(r5, &(0x7f0000002740), &(0x7f0000002780)=@v1={0x1000000, [{0x9, 0xffffffff}]}, 0xc, 0x1)
r8 = syz_mount_image$iso9660(&(0x7f00000027c0), &(0x7f0000002800)='./file0\x00', 0x9, 0x7, &(0x7f0000002d00)=[{&(0x7f0000002840)="6b9d58df48818c0af802e153c0ecce5eb033bb9dca0b976c324fb1b00a84a0aaab2e020988b742ad606e98caa44d015d3508ec1cef41f03c3599a3392f987e43f0226f3ab3eec166b215894bdcffbf6a757e0f8054be2fdb6beb61509077654f373a2ee827aa7c9574c3f15fe3d67933c7099a0840b8f74e8abd338c48162807f83e44ab1f9ecee0e68b80cb6d2b6f1ca419c45a48f3035d5fe87de828188dba34964e89be8daef8b2ccfb811b0fa9fc742cdb8a73dcf9521ee75b94416a1fef06d925ea83361fb78fcbcf5d166d603f0e28751df761ecde691011ab5093d632999674f087974235ee3398eb5c23a8", 0xef, 0x4}, {&(0x7f0000002940)="7b4d8cf76e6f758cfbb171055271b8b29bd71e1b5f75b4cabc429bc5a09682525073af6d09e9f012e96bf44003ad75206c13b2c01ef2ab6f8407cbfa611320e03b50ff0e65eddc05c9c9cbe929eee1a661b9f1b6071ec6bb3d1f9c92f9ed521ee6b6adee39a2487b740b4cddb862faeb314b7204577259b6ac196aeaeb45fcd050a17fdbb69b0d419d8c74543c9cc42bb5e3db0d0826ccd953f5439c4e29b9a85c37621c9495870d2f9ab56a4ba92e1c82e400f30d0ca2a50f84", 0xba, 0x800}, {&(0x7f0000002a00)="a6a60c072bdd13592e9a5170f8842aa8be2ffef00116f0b2610056de812afbab9783682ba1076074e44d80e8b0f58394252011a44c8298441f07e5981ed75ffbddce50f6e5213b088da8d95a1818886f87fc56cea263894eb1880da83a8bc5f44032f90686921b4c1d551f01b53fcce4a39eb87797770b09159368f77a6310a53b80fe", 0x83, 0x3}, {&(0x7f0000002ac0)="e593c85a6bc66379a7591276683c7112ff91be73ec5ee5b9437fdaaaa8bcf472416edf29deb98e41fa8f16da243e087a836e9257639b24b462f6f96158486cf373fc3f7db11018a55ae90f9fd29461702cdeb467ea7d7f4638bf4a1c4418b3d602187a0e0e4dec6770954778a419c4eaa0685ef8edcf61439e8308f447bfafc47162ee25ed7574068ae3805fa51df437da0a68460ee7db4b781518080e2ef70c20f5ac6211862c63f1949bbeac7a383f9674eb0e556c120d48293107b72f92a9c57346178a2bf65ee9609fe19568e3171bb6546a3670ca1c3dc0", 0xda, 0xa46}, {&(0x7f0000002bc0), 0x0, 0x3}, {&(0x7f0000002c00)="c6a044c13a4d81ee94a8ddf54eee4c4ec911a17e051b0039af51433e27dd2206d500986d201f9f0f16e76335d3ee3454c3e76d8ee3cab12d969108bd5a6d0e3b1d456d5d8bf494bf53d94cc277320c7882ce6542b5f0a3daa50a24b91760d17a012c52a97f14", 0x66, 0x7ff}, {&(0x7f0000002c80)="b3d96abcbd5052d3406e58a0859d0df3fc69b8d712a02920fe31bcfc868fb0ec0952c582d227e48b99a96bf227d49c5430215e31aaf4c141b390a5c82c1014cc800cd4f95a91fc05bf4c211cf0011751690e4cab7c21c5c851e4c52d1ac2ebfe", 0x60, 0x80000001}], 0x841, &(0x7f0000002dc0)={[{@dmode={'dmode', 0x3d, 0x3}}, {@sbsector={'sbsector', 0x3d, 0x7}}, {@overriderock}], [{@euid_lt={'euid<', r4}}, {@mask={'mask', 0x3d, '^MAY_READ'}}, {@smackfshat={'smackfshat', 0x3d, 'wg0\x00'}}, {@measure}, {@measure}, {@audit}]})
syz_genetlink_get_family_id$tipc2(&(0x7f0000002e80), 0xffffffffffffffff)
fsetxattr$trusted_overlay_origin(r8, &(0x7f0000002ec0), &(0x7f0000002f00), 0x2, 0x2)

[   85.913041] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   85.914995] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   85.919823] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   85.924020] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   85.928228] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   85.984394] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   85.989339] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   85.991323] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   85.992973] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   85.995791] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   85.997386] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   85.999550] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   86.000944] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   86.007861] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   86.013966] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   86.038981] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   86.045003] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   86.046816] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   86.047984] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   86.049332] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   86.050955] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   86.053609] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[   86.056560] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   86.058431] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   86.062317] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[   86.067782] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   86.069604] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   86.070982] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[   86.075922] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   86.106318] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   86.110823] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[   86.112089] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   86.127429] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[   86.128659] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[   86.146221] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[   86.147796] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   86.162682] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   86.185534] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[   86.200298] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[   86.207257] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[   87.944783] Bluetooth: hci0: command tx timeout
[   88.073151] Bluetooth: hci2: command tx timeout
[   88.073185] Bluetooth: hci1: command tx timeout
[   88.137170] Bluetooth: hci5: command tx timeout
[   88.137927] Bluetooth: hci3: command tx timeout
[   88.200162] Bluetooth: hci6: command tx timeout
[   88.264211] Bluetooth: hci4: command tx timeout
[   88.329109] Bluetooth: hci7: command tx timeout
[   89.992239] Bluetooth: hci0: command tx timeout
[   90.120154] Bluetooth: hci2: command tx timeout
[   90.120203] Bluetooth: hci1: command tx timeout
[   90.185233] Bluetooth: hci3: command tx timeout
[   90.185653] Bluetooth: hci5: command tx timeout
[   90.248197] Bluetooth: hci6: command tx timeout
[   90.312599] Bluetooth: hci4: command tx timeout
[   90.376482] Bluetooth: hci7: command tx timeout
[   92.040113] Bluetooth: hci0: command tx timeout
[   92.168179] Bluetooth: hci2: command tx timeout
[   92.168277] Bluetooth: hci1: command tx timeout
[   92.232456] Bluetooth: hci5: command tx timeout
[   92.232840] Bluetooth: hci3: command tx timeout
[   92.296126] Bluetooth: hci6: command tx timeout
[   92.360162] Bluetooth: hci4: command tx timeout
[   92.424210] Bluetooth: hci7: command tx timeout
[   94.088235] Bluetooth: hci0: command tx timeout
[   94.216698] Bluetooth: hci2: command tx timeout
[   94.217818] Bluetooth: hci1: command tx timeout
[   94.280251] Bluetooth: hci3: command tx timeout
[   94.281126] Bluetooth: hci5: command tx timeout
[   94.344133] Bluetooth: hci6: command tx timeout
[   94.408221] Bluetooth: hci4: command tx timeout
[   94.472265] Bluetooth: hci7: command tx timeout
[  121.995130] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  121.995811] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  122.190102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  122.190717] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  122.263952] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  122.264604] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  122.414434] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  122.415261] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  122.560364] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  122.560989] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  122.696929] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  122.698146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  122.856098] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  122.856731] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  122.981142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  122.981785] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  123.669019] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  123.669763] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  123.675123] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  123.682424] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  123.682943] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  123.691277] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  123.696857] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  123.697432] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  123.701230] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  123.704903] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  123.705757] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  123.709682] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  123.711593] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  123.712749] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  123.716466] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  123.718231] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[  123.718750] Bluetooth: hci6: Opcode 0x0406 failed: -4
[  123.722482] Bluetooth: hci6: Opcode 0x0406 failed: -4
[  123.725439] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  123.725929] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  123.729316] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  123.731887] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[  123.732760] Bluetooth: hci7: Opcode 0x0406 failed: -4
[  123.735436] Bluetooth: hci7: Opcode 0x0406 failed: -4
[  123.762840] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  123.763439] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  123.803600] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  123.804226] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  123.824726] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  123.825495] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  123.901312] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  123.901884] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  123.939625] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  123.941028] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  123.982995] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  123.983610] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  124.031967] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  124.032619] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  124.149672] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  124.151175] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  124.291280] loop4: detected capacity change from 0 to 264192
[  124.300648] =======================================================
[  124.300648] WARNING: The mand mount option has been deprecated and
[  124.300648]          and is ignored by this kernel. Remove the mand
[  124.300648]          option from the mount to silence this warning.
[  124.300648] =======================================================
[  124.324297] iso9660: Unknown parameter 'euid<00000000000000000000'
[  124.458304] loop4: detected capacity change from 0 to 264192
[  124.462913] iso9660: Unknown parameter 'euid<00000000000000000000'
[  124.872198] Bluetooth: hci0: command 0x0c1a tx timeout
[  125.704179] Bluetooth: hci3: command 0x0c1a tx timeout
[  125.704199] Bluetooth: hci1: command 0x0c1a tx timeout
[  125.704246] Bluetooth: hci2: command 0x0c1a tx timeout
[  125.768140] Bluetooth: hci7: command 0x0c1a tx timeout
[  125.769374] Bluetooth: hci4: command 0x0c1a tx timeout
[  125.770525] Bluetooth: hci6: command 0x0c1a tx timeout
[  125.771656] Bluetooth: hci5: command 0x0c1a tx timeout
[  126.920128] Bluetooth: hci0: command 0x0c1a tx timeout
[  127.752194] Bluetooth: hci2: command 0x0c1a tx timeout
[  127.752238] Bluetooth: hci3: command 0x0c1a tx timeout
[  127.753302] Bluetooth: hci1: command 0x0c1a tx timeout
[  127.816565] Bluetooth: hci4: command 0x0c1a tx timeout
[  127.817683] Bluetooth: hci5: command 0x0c1a tx timeout
[  127.817728] Bluetooth: hci6: command 0x0c1a tx timeout
[  127.818715] Bluetooth: hci7: command 0x0c1a tx timeout
[  128.968136] Bluetooth: hci0: command 0x0c1a tx timeout
[  129.800206] Bluetooth: hci3: command 0x0c1a tx timeout
[  129.801398] Bluetooth: hci2: command 0x0c1a tx timeout
[  129.802492] Bluetooth: hci1: command 0x0c1a tx timeout
[  129.864191] Bluetooth: hci6: command 0x0c1a tx timeout
[  129.865355] Bluetooth: hci5: command 0x0c1a tx timeout
[  129.866433] Bluetooth: hci4: command 0x0c1a tx timeout
[  129.866460] Bluetooth: hci7: command 0x0c1a tx timeout
03:00:59 executing program 7:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x156b}, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x404000, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_tcp(&(0x7f0000000700), &(0x7f0000000740)='./file0\x00', &(0x7f0000000780), 0x0, &(0x7f00000007c0)={'trans=tcp,', {}, 0x2c, {[{@version_L}, {@posixacl}], [{@dont_appraise}, {@permit_directio}]}})

03:00:59 executing program 1:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d0020002000200020002000200020002000200020002000000000000000004f0200000000024f252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000011800)="22001e0000000000001e00080000000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000013500)=ANY=[@ANYBLOB='\x00'])
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)='./file0\x00')
r1 = socket$netlink(0x10, 0x3, 0xa)
sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x14}, 0x14}}, 0x0)
mknodat$loop(r0, &(0x7f00000000c0)='./file0\x00', 0x40, 0x1)
r2 = fork()
ptrace(0x10, r2)
r3 = getpgid(0x0)
setpriority(0x1, r3, 0xff)
ptrace$pokeuser(0x6, r3, 0x18000000000, 0x40)
ptrace$setsig(0x4203, r2, 0xffffffffffffffe0, &(0x7f0000000340)={0x15, 0x9, 0xfffffffc})
sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)={0x1c, 0x0, 0x200, 0x70bd2d, 0x10000, {}, [""]}, 0x1c}}, 0x0)

03:00:59 executing program 2:
munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000)
mremap(&(0x7f0000871000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffd000/0x1000)=nil)
mbind(&(0x7f0000872000/0x4000)=nil, 0x4000, 0x2, 0x0, 0x0, 0x6)
mlock2(&(0x7f0000871000/0x4000)=nil, 0x4000, 0x1)

03:00:59 executing program 3:
r0 = creat(&(0x7f00000000c0)='./file1\x00', 0x80)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000200)='vfat\x00', &(0x7f0000000240)='vfat\x00', 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000500)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="401c6d6b616ff3668fed23982c20ef350400004000f8", 0x16}, {&(0x7f0000000140)="1b66e08d9cbdfb707e6a8e229519a0920cab0e865cc138976bc5439a258f22e77739a5c4a5761534b285c37adf4214ff003d6caef5af2abd4f710721d9465b50da14b045eefc80d3cc27f554c76a744776265f6ce3cb98443a6ce4ffacb16a4b1be7abed77629899a3293f9ceec0627bad41441f61d64521ab7ad2a87f165a4caa8d74b5d4f8c01f3142214a384bfa3693ed1c40a4a0daa4e150e94c5435ddf177e91733602192", 0xa7, 0x100000000}], 0x0, &(0x7f0000000680)=ANY=[])
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x5460, &(0x7f0000000000))
mknodat$loop(r1, &(0x7f0000000040)='./file0\x00', 0x8000, 0x0)

03:00:59 executing program 5:
utimensat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x4de581, 0xd4)
openat$incfs(r0, &(0x7f0000000040)='.log\x00', 0x200000, 0x80)
syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x4, 0x0, &(0x7f0000000800), 0x0, 0x0)
openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
fchownat(0xffffffffffffffff, &(0x7f0000000c40)='./file0\x00', 0xffffffffffffffff, 0x0, 0x0)

03:00:59 executing program 0:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x200000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f73662a7b3b00088001000240000004f801002000400000000000000000008000"/64, 0x40}, {&(0x7f0000010100)="f8ffff00f0ffffffffffffff00"/32, 0x20, 0x800}, {&(0x7f0000010200)="f8ffff00f0ffffffffffffff00"/32, 0x20, 0x9}, {&(0x7f0000010300)="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", 0x120, 0x1800}, {&(0x7f0000010500)="2e20202020202020202020100016e870325132510000e87032510300000000002e2e202020202020202020100016e870325132510000e870325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020200016e870325132510000e870325104001a040000", 0x80, 0x42000}, {&(0x7f0000010600)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x82000}, {&(0x7f0000010b00)='syzkallers\x00'/32, 0x20, 0xc2000}, {&(0x7f0000010c00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x142000}], 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="e02f3516cf51a2abcb10be38218f62792e8cefa204000cddd53d73d3ba4a9eeea833070b68a3a379e674c3c981da1255bdfdd503e3be186f7eabb9"])

03:00:59 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x40000, 0x18, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002000028020000028400001b0000000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e37313539353330323300"/192, 0xc0, 0x400}, {&(0x7f0000010100)="0000000000000000000000006a641059655a4e10bf1130ee7fdbd1e0010000000c00000000000000d9f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000100000000000000000000000000000000000000000000003000000000000000", 0x40, 0x540}, {&(0x7f0000010300)="02000000030000000400000066000f000300040000000000000000000f007f5c", 0x20, 0x800}, {&(0x7f0000010400)="ffffff03000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0100ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000d9f4655fd9f4655fd9f4655f00"/4128, 0x1020, 0x1000}, {&(0x7f00000000c0)="ed41000000080000d9f4655fdaf4655fdaf4655f00000000000004000400000000000000050000000c00"/64, 0x40, 0x2200}, {&(0x7f0000011600)="200000007412ab417412ab4100000000d9f4655f00"/32, 0x20, 0x2280}, {&(0x7f0000011700)="c041000000380000d9f4655fd9f4655fd9f4655f00000000000002001c00000000000000000000000d0000000e0000000f0000001000000011000000120000001300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000d9f4655f000000000000000000000000000002ea00"/192, 0xc0, 0x3400}, {&(0x7f0000011800)="ed4100003c000000daf4655fdaf4655fdaf4655f0000000000000200000000000000001003000000020000000d0000001000050166696c65300000000e0000002800050766696c653100000000000000000000000000000000000000000000000000000002010b1b000000000000000000000000000000000000000000000000200000007412ab417412ab417412ab41daf4655f7412ab410000000000000000000002ea04070000000000000000000000000000646174610000000000000000", 0xc0, 0x3600}, {&(0x7f0000011900)="ed8100001a040000daf4655fdaf4655fdaf4655f000000000000010004000000000000000100000014000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000039c34d38000000000000000000000000000000000000000000000000200000007412ab417412ab417412ab41daf4655f7412ab410000000000000000", 0xa0, 0x3800}, {&(0x7f0000011a00)="ffa1000026000000daf4655fdaf4655fdaf4655f00000000000001000000000000000000010000002f746d702f73797a2d696d61676567656e3731353935333032332f66696c65302f66696c65300000000000000000000000000000000000000000000026908b44000000000000000000000000000000000000000000000000200000007412ab417412ab417412ab41daf4655f7412ab410000000000000000", 0xa0, 0x3a00}, {&(0x7f0000011b00)="ed8100000a000000daf4655fdaf4655fdaf4655f000000000000010000000000000000100100000073797a6b616c6c6572730000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aa02805e000000000000000000000000000000000000000000000000200000007412ab417412ab417412ab41daf4655f7412ab410000000000000000000002ea040700000000000000000000000000006461746106015401000000000600000000000000786174747231000006014c0100000000060000000000000078617474723200"/256, 0x100, 0x3c00}, {&(0x7f0000011c00)="0000000000000000000000000000000078617474723200007861747472310000ed81000028230000daf4655fdaf4655fdaf4655f0000000000000200140000000000000001000000150000001600000017000000180000001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000cb34f3d3000000000000000000000000000000000000000000000000200000007412ab417412ab417412ab41daf4655f7412ab410000000000000000", 0xc0, 0x3de0}, {&(0x7f0000011d00)="ed81000064000000daf4655fdaf4655fdaf4655f000000000000010000000000000000100100000073797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c91b90e27000000000000000000000000000000000000000000000000200000007412ab417412ab417412ab41daf4655f7412ab410000000000000000000002ea04073401000000002800000000000000646174610000000000000000", 0xc0, 0x4000}, {&(0x7f0000011e00)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lersyzkallersyzkallersyzkallersyzkallers', 0x40, 0x41c0}, {&(0x7f0000011f00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531000000100000001000050166696c6532000000100000001000050166696c6533000000110000009407090166696c652e636f6c64000000", 0x80, 0x6000}, {&(0x7f0000012000)="0b0000000c0001022e000000020000000c0002022e2e000000000000e8070000", 0x20, 0x6800}, {&(0x7f0000012100)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x7000}, {&(0x7f0000012200)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x7800}, {&(0x7f0000012300)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x8000}, {&(0x7f0000012400)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x8800}, {&(0x7f0000012500)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x9000}, {&(0x7f0000012600)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x9800}, {&(0x7f0000012700)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0xa000}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="d74a510e337154b8708468e2168b4a31043595472edafbf3e79543fc62c713e416a4efaf71052676ca4fcd50a532f660"])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x5460, &(0x7f0000000000))
r1 = openat$incfs(r0, &(0x7f0000000040)='.log\x00', 0x10202, 0x20)
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000440)={{r1}, 0x0, 0x10, @unused=[0x6e, 0x7, 0x8, 0x4], @subvolid=0x2})

03:00:59 executing program 4:
syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
getdents(r0, 0x0, 0x18)
getdents64(r0, 0x0, 0x0)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000080)={0xa0000018})
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000140)={0x0, 0x0, {0x0, @struct, <r2=>0x0}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000540)={0x1b, 0x3, {0xf8c, @usage, 0x0, 0x1ca3, 0x232d17d1, 0x22, 0x8001, 0x2, 0x40, @usage=0xffffffff, 0x5, 0xfffffffa, [0x3f, 0x2, 0x5, 0x1, 0xffffffff, 0xffffffffffff416e]}, {0x9, @struct={0x5, 0x7fff}, r2, 0x5, 0x1, 0x5, 0x3f, 0x3, 0x40, @struct, 0x1bdb4501, 0x7, [0x2, 0x3, 0x4000400000000000, 0x2f, 0x100000000, 0x101]}, {0x3f, @usage=0x74bd, 0x0, 0x7, 0x4, 0x7fff, 0x29, 0x1f, 0x40, @usage, 0xfffff462, 0x8, [0x8000, 0x10000, 0x3, 0x1a, 0x7, 0x1]}, {0xffffffffffffffcc, 0x72, 0x6}})

[  136.569213] loop0: detected capacity change from 0 to 5152
[  136.577513] vfat: Unknown parameter '�/5�Q����8!�by.��'
[  136.578774] loop3: detected capacity change from 0 to 264192
[  136.581189] audit: type=1400 audit(1756522859.814:8): avc:  denied  { open } for  pid=3928 comm="syz-executor.7" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[  136.586239] loop6: detected capacity change from 0 to 512
[  136.589885] audit: type=1400 audit(1756522859.815:9): avc:  denied  { kernel } for  pid=3928 comm="syz-executor.7" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[  136.602643] ext4: Unknown parameter '�JQ3qT�p�h��J15�G.����C�b����q&v�O�P�2�`'
[  136.606768] loop1: detected capacity change from 0 to 240
[  136.609312] 9pnet_fd: p9_fd_create_tcp (3935): problem connecting socket to 127.0.0.1
[  136.617161] FAT-fs (loop3): bogus logical sector size 11416
[  136.618326] FAT-fs (loop3): Can't find a valid FAT filesystem
[  136.628531] loop0: detected capacity change from 0 to 5152
[  136.629447] vfat: Unknown parameter '�/5�Q����8!�by.��'
[  136.630847] 9pnet_fd: p9_fd_create_tcp (3935): problem connecting socket to 127.0.0.1
[  136.636011] loop6: detected capacity change from 0 to 512
[  136.647223] ext4: Unknown parameter '�JQ3qT�p�h��J15�G.����C�b����q&v�O�P�2�`'
[  136.650003] loop3: detected capacity change from 0 to 264192
[  136.660674] FAT-fs (loop3): bogus logical sector size 11416
[  136.661524] FAT-fs (loop3): Can't find a valid FAT filesystem
03:00:59 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x7, 0x2b, 0xca, 0x80, 0x0, 0x10001, 0x80, 0x4, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_bp={&(0x7f00000000c0), 0x2}, 0x80d4, 0xcbe9, 0x1, 0x7, 0x1, 0xff, 0x1ff, 0x0, 0x2, 0x0, 0x4}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{&(0x7f0000000080)={0xa, 0x4e22, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000016000029000000370000060000000000000000"], 0x18}}], 0x1, 0x0)

03:00:59 executing program 5:
write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6e834b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f08a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c4690bca329e3b00"/82], 0x52)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000280)={0xf, 0x7, 0x0, {0x6, 'vcan0\x00'}}, 0xf)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'})
close(r0)

[  136.722008] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
03:00:59 executing program 0:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmmsg$inet6(r0, &(0x7f00000017c0)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1100000000000000290000003600"/24], 0x18}}], 0x1, 0x0)

03:01:00 executing program 6:
sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x0, 0x300, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x9, 0x11}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008405}, 0x600440c4)
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x80})
pwritev2(r2, &(0x7f0000000040)=[{&(0x7f00000008c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0)
fcntl$setstatus(r0, 0x4, 0x44000)
sendfile(r0, r1, 0x0, 0xfdef)

03:01:00 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0x0, {0xa}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0x2c}}, 0x0)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0)
accept$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000140)=0x14)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000180)={{{@in, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in6=@remote}, 0x0, @in=@multicast1}}, &(0x7f0000000280)=0xe8)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000380)={'ip6_vti0\x00', <r5=>0x0, 0x4, 0xff, 0x5, 0x400, 0x32, @loopback, @empty, 0x10, 0x1, 0x4, 0x200}})
r6 = socket$packet(0x11, 0x2, 0x300)
r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'wlan1\x00', <r8=>0x0})
sendto$packet(r6, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @link_local}, 0x14)
sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xec, r2, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0xec}}, 0x841)

[  136.882201] kmemleak: Found object by alias at 0x607f1a638ab4
[  136.882232] CPU: 1 UID: 0 PID: 3958 Comm: syz-executor.6 Tainted: G        W           6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) 
[  136.882263] Tainted: [W]=WARN
[  136.882270] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  136.882282] Call Trace:
[  136.882294]  <TASK>
[  136.882303]  dump_stack_lvl+0xca/0x120
[  136.882342]  __lookup_object+0x94/0xb0
[  136.882370]  delete_object_full+0x27/0x70
[  136.882398]  free_percpu+0x30/0x1160
[  136.882427]  ? arch_uprobe_clear_state+0x16/0x140
[  136.882461]  futex_hash_free+0x38/0xc0
[  136.882485]  mmput+0x2d3/0x390
[  136.882518]  do_exit+0x79d/0x2970
[  136.882542]  ? lock_release+0xc8/0x290
[  136.882571]  ? __pfx_do_exit+0x10/0x10
[  136.882596]  ? find_held_lock+0x2b/0x80
[  136.882626]  ? get_signal+0x835/0x2340
[  136.882662]  do_group_exit+0xd3/0x2a0
[  136.882688]  get_signal+0x2315/0x2340
[  136.882723]  ? find_held_lock+0x2b/0x80
[  136.882757]  ? __pfx_get_signal+0x10/0x10
[  136.882785]  ? do_futex+0x135/0x370
[  136.882810]  ? __pfx_do_futex+0x10/0x10
[  136.882837]  arch_do_signal_or_restart+0x80/0x790
[  136.882867]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  136.882896]  ? __x64_sys_futex+0x1c9/0x4d0
[  136.882918]  ? __x64_sys_futex+0x1d2/0x4d0
[  136.882943]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  136.882979]  ? __pfx___x64_sys_futex+0x10/0x10
[  136.883001]  ? selinux_file_ioctl+0xb9/0x280
[  136.883027]  ? xfd_validate_state+0x55/0x180
[  136.883064]  exit_to_user_mode_loop+0x8b/0x110
[  136.883087]  do_syscall_64+0x2f7/0x360
[  136.883107]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  136.883128] RIP: 0033:0x7f7ed42b9b19
[  136.883143] Code: Unable to access opcode bytes at 0x7f7ed42b9aef.
[  136.883152] RSP: 002b:00007f7ed180e218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  136.883173] RAX: fffffffffffffe00 RBX: 00007f7ed43cd028 RCX: 00007f7ed42b9b19
[  136.883186] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f7ed43cd028
[  136.883199] RBP: 00007f7ed43cd020 R08: 0000000000000000 R09: 0000000000000000
[  136.883211] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7ed43cd02c
[  136.883224] R13: 00007ffd1901d42f R14: 00007f7ed180e300 R15: 0000000000022000
[  136.883252]  </TASK>
[  136.883259] kmemleak: Object (percpu) 0x607f1a638aa8 (size 16):
[  136.883271] kmemleak:   comm "syz-executor.1", pid 3952, jiffies 4294803523
[  136.883284] kmemleak:   min_count = 1
[  136.883290] kmemleak:   count = 0
[  136.883297] kmemleak:   flags = 0x21
[  136.883304] kmemleak:   checksum = 0
[  136.883310] kmemleak:   backtrace:
[  136.883316]  pcpu_alloc_noprof+0x87a/0x1170
[  136.883343]  mm_init+0x99b/0x1170
[  136.883358]  copy_process+0x3ab7/0x73c0
[  136.883375]  kernel_clone+0xea/0x7f0
[  136.883393]  __do_sys_fork+0x94/0xd0
[  136.883412]  do_syscall_64+0xbf/0x360
[  136.883427]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
03:01:10 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d0020002000200020002000200020002000200020002000000000000000004f0200000000024f252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000011800)="22001e0000000000001e00080000000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000013500)=ANY=[@ANYBLOB='\x00'])
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)='./file0\x00')
r1 = socket$netlink(0x10, 0x3, 0xa)
sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x14}, 0x14}}, 0x0)
mknodat$loop(r0, &(0x7f00000000c0)='./file0\x00', 0x40, 0x1)
r2 = fork()
ptrace(0x10, r2)
r3 = getpgid(0x0)
setpriority(0x1, r3, 0xff)
ptrace$pokeuser(0x6, r3, 0x18000000000, 0x40)
ptrace$setsig(0x4203, r2, 0xffffffffffffffe0, &(0x7f0000000340)={0x15, 0x9, 0xfffffffc})
sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)={0x1c, 0x0, 0x200, 0x70bd2d, 0x10000, {}, [""]}, 0x1c}}, 0x0)

03:01:10 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d0020002000200020002000200020002000200020002000000000000000004f0200000000024f252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000011800)="22001e0000000000001e00080000000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000013500)=ANY=[@ANYBLOB='\x00'])
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)='./file0\x00')
r1 = socket$netlink(0x10, 0x3, 0xa)
sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x14}, 0x14}}, 0x0)
mknodat$loop(r0, &(0x7f00000000c0)='./file0\x00', 0x40, 0x1)
r2 = fork()
ptrace(0x10, r2)
r3 = getpgid(0x0)
setpriority(0x1, r3, 0xff)
ptrace$pokeuser(0x6, r3, 0x18000000000, 0x40)
ptrace$setsig(0x4203, r2, 0xffffffffffffffe0, &(0x7f0000000340)={0x15, 0x9, 0xfffffffc})
sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)={0x1c, 0x0, 0x200, 0x70bd2d, 0x10000, {}, [""]}, 0x1c}}, 0x0)

03:01:10 executing program 0:
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x2, 0x9, &(0x7f0000001b00)=0x1)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6f, 0x80000001, &(0x7f0000000000))

03:01:10 executing program 5:
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0/file0\x00')
r2 = epoll_create(0x6)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)={0x10000000})
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000040))
close_range(r0, 0xffffffffffffffff, 0x0)
epoll_create(0xfffff800)
r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f0000000080)={0xa0000018})
fsync(r4)
r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0), 0x40002, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r2, &(0x7f0000000200)={0x10})
r6 = getpgrp(0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x4e, 0x6, 0x9, 0x40, 0x0, 0xdd, 0x2000, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000240), 0x1}, 0x10000, 0x3, 0x4, 0x8, 0x1, 0xffffffff, 0x5f6c, 0x0, 0xffffffff, 0x0, 0x80000001}, r6, 0x8, r0, 0x2)
epoll_create(0x8000)

03:01:10 executing program 1:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d0020002000200020002000200020002000200020002000000000000000004f0200000000024f252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000011800)="22001e0000000000001e00080000000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000013500)=ANY=[@ANYBLOB='\x00'])
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)='./file0\x00')
r1 = socket$netlink(0x10, 0x3, 0xa)
sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x14}, 0x14}}, 0x0)
mknodat$loop(r0, &(0x7f00000000c0)='./file0\x00', 0x40, 0x1)
r2 = fork()
ptrace(0x10, r2)
r3 = getpgid(0x0)
setpriority(0x1, r3, 0xff)
ptrace$pokeuser(0x6, r3, 0x18000000000, 0x40)
ptrace$setsig(0x4203, r2, 0xffffffffffffffe0, &(0x7f0000000340)={0x15, 0x9, 0xfffffffc})
sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)={0x1c, 0x0, 0x200, 0x70bd2d, 0x10000, {}, [""]}, 0x1c}}, 0x0)

03:01:10 executing program 7:
syz_mount_image$msdos(0x0, 0x0, 0x0, 0x1, &(0x7f0000000280)=[{0x0, 0x0, 0x100}], 0x0, 0x0)
r0 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
r1 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x12, 0xffffffffffffffff, 0x10000000)
syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x1, 0x0, @fd_index=0x8, 0x0, 0x0, 0x0, {0x4}, 0x0, {0x0, r0}}, 0x2f5a)
syz_io_uring_submit(0x0, r1, &(0x7f0000000000), 0x8)
syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
socket$netlink(0x10, 0x3, 0x5)

03:01:10 executing program 2:
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000400)={0x2c, &(0x7f00000000c0)={0x20, 0x22, 0xf1, {0xf1, 0x0, "a5eba11aac418db1adaebb55a96ca5a4fcaeaa46261dd8c9f0bf5580bf75b226e5fc95127b09e295e75365d583ea31869fcf5624d667e56782eb3cdca9affbf6d9e3d1aa3e147dd706bbfb7e1c947fa727bae1df25ab7046908a0f8d67afb4acf84c35373850941b903d59d3b048222d87c0a2af404d3592c883bb4770e6a3f41953770ef178320eda0171cebe119e3894a3ae82c2502a96a93bd844c385ca38d83dc1bdd3be26f1cf7301ef79f2d8a15884244d5b54226d3acfadc41db1e6db06c19194bcf5f1723e254733b5cc787bbb00cc41d4be93092938f5986ca59bb87d5669736229ebb2f87d4598af515e"}}, &(0x7f00000001c0)={0x0, 0x3, 0x101, @string={0x101, 0x3, "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"}}, &(0x7f0000000300)={0x0, 0xf, 0x48, {0x5, 0xf, 0x48, 0x3, [@ssp_cap={0x1c, 0x10, 0xa, 0x3, 0x4, 0x4, 0xf000, 0x6f6, [0xff3f00, 0xff1f8f, 0x3f, 0xffc000]}, @ssp_cap={0x1c, 0x10, 0xa, 0x7, 0x4, 0x800, 0xff00, 0x8, [0xc000, 0x0, 0x3f00, 0xff3f00]}, @wireless={0xb, 0x10, 0x1, 0x8, 0x8, 0x4, 0xff, 0x8, 0x3}]}}, &(0x7f0000000380)={0x20, 0x29, 0xf, {0xf, 0x29, 0x80, 0x80, 0x9, 0x20, "6b0d31b3", "1b3420a4"}}, &(0x7f00000003c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x18, 0xed, 0x1, 0x7b, 0x8, 0x1000}}}, &(0x7f0000000840)={0x84, &(0x7f0000000440)={0x20, 0x31, 0x39, "8bb1fffee106078fa7a0f21c7a1a3a80c350c3501a0c6b9117d7cabfe70a4e226c2285654f6f7abfd79095186aba0ba22bbd8ca0e6097f9512"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x20}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0xf9}, &(0x7f0000000500)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000000540)={0x20, 0x0, 0x8, {0x120, 0x1, [0xff]}}, &(0x7f0000000580)={0x40, 0x7, 0x2, 0x5}, &(0x7f00000005c0)={0x40, 0x9, 0x1, 0x1f}, &(0x7f0000000600)={0x40, 0xb, 0x2, "d36e"}, &(0x7f0000000640)={0x40, 0xf, 0x2, 0x2}, &(0x7f0000000680)={0x40, 0x13, 0x6, @link_local}, &(0x7f00000006c0)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000700)={0x40, 0x19, 0x2, "777f"}, &(0x7f0000000740)={0x40, 0x1a, 0x2, 0xff}, &(0x7f0000000780)={0x40, 0x1c, 0x1, 0x20}, &(0x7f00000007c0)={0x40, 0x1e, 0x1, 0x5}, &(0x7f0000000800)={0x40, 0x21, 0x1, 0x3f}})
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x2000, 0x1)
creat(&(0x7f0000000000)='./file0\x00', 0x1)
acct(&(0x7f0000000040)='./file0\x00')
acct(0x0)
syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f00000009c0)={0x14, &(0x7f0000000900)={0x20, 0x21, 0x4b, {0x4b, 0x23, "5dae47ecf1ae096f41ccf80a7ec1c681c20a1bf884e3217aab75f9bd41d23e0674404a69bed5e6db5c7f6c6f8c9e07c3d1bb40db794695482283b4d71c42a755a9e83682ed3e9eb7b2"}}, &(0x7f0000000980)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42b}}}, &(0x7f0000000c40)={0x44, &(0x7f0000000a00)={0x40, 0xb, 0x68, "17b652c0f124078eac0ee5ce3467561ed7368fb0e4d4f98b32c57329da21c61508690b35b34bd41e83db555809eb17cae5364b635b5e99e7b3e3b7b429f1b253e6f4f8e7a71ba08720eab65882ff4ae8bc37cceaba1ef9d68357c04076e457606415001ceacb7080"}, &(0x7f0000000a80)={0x0, 0xa, 0x1, 0x7f}, &(0x7f0000000ac0)={0x0, 0x8, 0x1, 0x1f}, &(0x7f0000000b00)={0x20, 0x81, 0x1, "b3"}, &(0x7f0000000b40)={0x20, 0x82, 0x3, "0a1b8c"}, &(0x7f0000000b80)={0x20, 0x83, 0x2, "29ae"}, &(0x7f0000000bc0)={0x20, 0x84, 0x4, "a49352dc"}, &(0x7f0000000c00)={0x20, 0x85, 0x3, "0c4cb9"}})

03:01:10 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x7, 0x2b, 0xca, 0x80, 0x0, 0x10001, 0x80, 0x4, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_bp={&(0x7f00000000c0), 0x2}, 0x80d4, 0xcbe9, 0x1, 0x7, 0x1, 0xff, 0x1ff, 0x0, 0x2, 0x0, 0x4}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{&(0x7f0000000080)={0xa, 0x4e22, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000016000029000000370000060000000000000000"], 0x18}}], 0x1, 0x0)

03:01:10 executing program 0:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GETSTATE(r1, 0x40086602, &(0x7f0000002a00))
write$binfmt_script(r0, &(0x7f0000000140)={'#! ', './file0'}, 0xb)
chmod(&(0x7f00000000c0)='./file0\x00', 0x2)
ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000440)={0x0, 0x1000})
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mknodat$loop(r2, &(0x7f0000000080)='./file0\x00', 0x40, 0x1)
syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0)

[  147.520802] BUG: unable to handle page fault for address: ffffed10212c9106
[  147.521401] #PF: supervisor read access in kernel mode
[  147.521831] #PF: error_code(0x0000) - not-present page
[  147.522258] PGD 7ffd4067 P4D 7ffd4067 PUD 7ffd3067 PMD 0 
[  147.522725] Oops: Oops: 0000 [#1] SMP KASAN NOPTI
[  147.523127] CPU: 0 UID: 0 PID: 3981 Comm: syz-executor.5 Tainted: G        W           6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) 
[  147.525421] Tainted: [W]=WARN
[  147.526207] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  147.528575] RIP: 0010:perf_tp_event+0x175/0xe70
[  147.529603] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[  147.533042] RSP: 0018:ffff888017e77800 EFLAGS: 00010216
[  147.533480] RAX: 1ffff110212c9106 RBX: ffff888109648640 RCX: ffffc90004e10000
[  147.534048] RDX: 0000000000040000 RSI: ffffffff818995b7 RDI: ffff888109648830
[  147.534619] RBP: ffff888017e77a70 R08: ffff88806ce31340 R09: ffffe8ffffc15aa8
[  147.535190] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
[  147.535761] R13: 000000000000002c R14: ffff88806ce31340 R15: dffffc0000000000
[  147.536336] FS:  00007f7be5c9d700(0000) GS:ffff8880e55dd000(0000) knlGS:0000000000000000
[  147.536981] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  147.537459] CR2: ffffed10212c9106 CR3: 000000000d43a000 CR4: 0000000000350ef0
[  147.538032] Call Trace:
[  147.538245]  <TASK>
[  147.538435]  ? perf_swevent_event+0x63/0x3f0
[  147.538803]  ? __pfx_perf_tp_event+0x10/0x10
[  147.539169]  ? tracing_gen_ctx_irq_test+0x167/0x1f0
[  147.539579]  ? perf_swevent_event+0x63/0x3f0
[  147.539943]  ? tracing_gen_ctx_irq_test+0x167/0x1f0
[  147.540351]  ? perf_swevent_event+0x63/0x3f0
[  147.540714]  ? perf_tp_event+0x807/0xe70
[  147.541045]  ? __lock_acquire+0xc65/0x1b70
[  147.541406]  ? __pfx_perf_tp_event+0x10/0x10
[  147.541766]  ? lock_acquire+0x15e/0x2f0
[  147.542092]  ? find_held_lock+0x2b/0x80
[  147.542434]  ? perf_trace_run_bpf_submit+0xef/0x180
[  147.542840]  perf_trace_run_bpf_submit+0xef/0x180
[  147.543244]  perf_trace_lock+0x337/0x5d0
[  147.543579]  ? __pfx_perf_trace_lock+0x10/0x10
[  147.543960]  ? lock_acquire+0x15e/0x2f0
[  147.544286]  ? futex_ref_get+0x48/0x300
[  147.544614]  ? futex_ref_get+0x114/0x300
[  147.544943]  ? futex_hash+0x15c/0x390
[  147.545257]  lock_release+0x1ab/0x290
[  147.545580]  ? futex_hash+0x15c/0x390
[  147.545897]  futex_ref_get+0x119/0x300
[  147.546216]  ? futex_hash+0x15c/0x390
[  147.546528]  futex_hash+0x70/0x390
[  147.546824]  futex_wake+0x143/0x540
[  147.547130]  ? __pfx_perf_trace_lock+0x10/0x10
[  147.547516]  ? __pfx_futex_wake+0x10/0x10
[  147.547859]  ? __do_sys_perf_event_open+0x44d/0x2c20
[  147.548273]  ? lock_release+0xc8/0x290
[  147.548594]  do_futex+0x26d/0x370
[  147.548888]  ? __pfx_do_futex+0x10/0x10
[  147.549216]  ? __pfx___do_sys_perf_event_open+0x10/0x10
[  147.549673]  ? find_held_lock+0x2b/0x80
[  147.550010]  __x64_sys_futex+0x1c9/0x4d0
[  147.550345]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  147.550830]  ? __pfx___x64_sys_futex+0x10/0x10
[  147.551209]  ? xfd_validate_state+0x55/0x180
[  147.551586]  do_syscall_64+0xbf/0x360
[  147.551906]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  147.552322] RIP: 0033:0x7f7be8727b19
[  147.552628] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  147.554099] RSP: 002b:00007f7be5c9d218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  147.554713] RAX: ffffffffffffffda RBX: 00007f7be883af68 RCX: 00007f7be8727b19
[  147.555286] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f7be883af6c
[  147.555858] RBP: 00007f7be883af60 R08: 000000000000000e R09: 0000000000000000
[  147.556439] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f7be883af6c
[  147.557012] R13: 00007fff0f46084f R14: 00007f7be5c9d300 R15: 0000000000022000
[  147.557598]  </TASK>
[  147.557790] Modules linked in:
[  147.558058] CR2: ffffed10212c9106
[  147.558341] ---[ end trace 0000000000000000 ]---
[  147.558345] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000032: 0000 [#2] SMP KASAN NOPTI
[  147.558721] RIP: 0010:perf_tp_event+0x175/0xe70
[  147.560355] KASAN: null-ptr-deref in range [0x0000000000000190-0x0000000000000197]
[  147.560724] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[  147.561829] CPU: 1 UID: 0 PID: 3985 Comm: syz-executor.3 Tainted: G      D W           6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) 
[  147.563268] RSP: 0018:ffff888017e77800 EFLAGS: 00010216
[  147.564977] Tainted: [D]=DIE, [W]=WARN
[  147.565404] RAX: 1ffff110212c9106 RBX: ffff888109648640 RCX: ffffc90004e10000
[  147.565961] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  147.566526] RDX: 0000000000040000 RSI: ffffffff818995b7 RDI: ffff888109648830
[  147.567711] RIP: 0010:perf_tp_event+0x175/0xe70
[  147.568278] RBP: ffff888017e77a70 R08: ffff88806ce31340 R09: ffffe8ffffc15aa8
[  147.568954] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[  147.569526] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
[  147.572142] RSP: 0018:ffff888016a8f800 EFLAGS: 00010212
[  147.572713] R13: 000000000000002c R14: ffff88806ce31340 R15: dffffc0000000000
[  147.572717] 
[  147.572726] FS:  00007f7be5c9d700(0000) GS:ffff8880e55dd000(0000) knlGS:0000000000000000
[  147.573497] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: 0000000000000002
[  147.574112] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  147.574374] RDX: ffff88801693b700 RSI: ffffffff818995b7 RDI: 0000000000000191
[  147.575065] CR2: ffffed10212c9106 CR3: 000000000d43a000 CR4: 0000000000350ef0
[  147.576142] RBP: ffff888016a8fa70 R08: ffff88806cf31340 R09: ffffe8ffffd15aa8
[  147.576646] note: syz-executor.5[3981] exited with irqs disabled
[  147.577732] R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000
[  147.581420] R13: 000000000000002c R14: ffff88806cf31340 R15: dffffc0000000000
[  147.582517] FS:  0000555587518400(0000) GS:ffff8880e56dd000(0000) knlGS:0000000000000000
[  147.583742] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  147.584638] CR2: 0000555587519c18 CR3: 000000000da72000 CR4: 0000000000350ef0
[  147.585743] Call Trace:
[  147.586146]  <TASK>
[  147.586507]  ? arch_scale_cpu_capacity+0x17/0xa0
[  147.587255]  ? __pfx_perf_tp_event+0x10/0x10
[  147.587948]  ? __asan_memset+0x24/0x50
[  147.588577]  ? __pfx_perf_trace_lock+0x10/0x10
[  147.589296]  ? __pfx___mutex_lock+0x10/0x10
[  147.589980]  ? perf_trace_lock+0xb5/0x5d0
[  147.590632]  ? kvm_sched_clock_read+0x16/0x30
[  147.591336]  ? sched_clock+0x37/0x60
[  147.591931]  ? sched_clock_cpu+0x6c/0x4e0
[  147.592586]  ? perf_trace_run_bpf_submit+0xef/0x180
[  147.593372]  perf_trace_run_bpf_submit+0xef/0x180
[  147.594127]  perf_trace_lock+0x337/0x5d0
[  147.594765]  ? __pfx_perf_trace_lock+0x10/0x10
[  147.595486]  ? __pfx_perf_trace_lock+0x10/0x10
[  147.596200]  ? get_futex_key+0x592/0x14a0
[  147.596846]  ? futex_ref_get+0x114/0x300
[  147.597483]  ? futex_hash+0x15c/0x390
[  147.598072]  lock_release+0x1ab/0x290
[  147.598672]  ? futex_hash+0x15c/0x390
[  147.599265]  futex_ref_get+0x119/0x300
[  147.599866]  ? futex_hash+0x15c/0x390
[  147.600453]  futex_hash+0x70/0x390
[  147.601007]  futex_wake+0x143/0x540
[  147.601593]  ? put_pid+0x1f/0x30
[  147.602122]  ? kernel_clone+0x204/0x7f0
[  147.602740]  ? __pfx_futex_wake+0x10/0x10
[  147.603392]  ? __pfx_kernel_clone+0x10/0x10
[  147.604060]  ? perf_trace_lock+0xb5/0x5d0
[  147.604708]  ? __pfx___handle_mm_fault+0x10/0x10
[  147.605462]  do_futex+0x26d/0x370
[  147.606008]  ? __pfx_do_futex+0x10/0x10
[  147.606633]  ? __pfx___do_sys_clone+0x10/0x10
[  147.607327]  ? handle_mm_fault+0x590/0x9b0
[  147.608002]  __x64_sys_futex+0x1c9/0x4d0
[  147.608637]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  147.609559]  ? __pfx___x64_sys_futex+0x10/0x10
[  147.610284]  do_syscall_64+0xbf/0x360
[  147.610880]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  147.611673] RIP: 0033:0x7f630832fb19
[  147.612249] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  147.615028] RSP: 002b:00007ffce14f4738 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  147.616194] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f630832fb19
[  147.617296] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f6308442f68
[  147.618387] RBP: 00007f6308442f60 R08: 00007f63058a5700 R09: 0000000000000000
[  147.619474] R10: 00007f63058a5700 R11: 0000000000000246 R12: 00007f6308447a68
[  147.620568] R13: 00007ffce14f4840 R14: 00007f6308442f60 R15: 0000000000023f8c
[  147.621682]  </TASK>
[  147.622045] Modules linked in:
[  147.622556] BUG: unable to handle page fault for address: ffffed10212c9106
[  147.623161] #PF: supervisor read access in kernel mode
[  147.623619] #PF: error_code(0x0000) - not-present page
[  147.624073] PGD 7ffd4067 P4D 7ffd4067 PUD 7ffd3067 PMD 0 
[  147.624563] Oops: Oops: 0000 [#3] SMP KASAN NOPTI
[  147.624988] CPU: 0 UID: 0 PID: 3981 Comm: syz-executor.5 Tainted: G      D W           6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) 
[  147.626036] Tainted: [D]=DIE, [W]=WARN
[  147.626361] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  147.627071] RIP: 0010:perf_tp_event+0x175/0xe70
[  147.627486] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[  147.629065] RSP: 0018:ffff88806ce08a80 EFLAGS: 00010016
[  147.629529] RAX: 1ffff110212c9106 RBX: ffff888109648640 RCX: 0000000000000002
[  147.630151] RDX: ffff8880178c8000 RSI: ffffffff818995b7 RDI: ffff888109648830
[  147.630768] RBP: ffff88806ce08cf0 R08: ffff88806ce31490 R09: ffffe8ffffc15aa8
[  147.631388] R10: 0000000000000000 R11: 746e756f63716573 R12: dffffc0000000000
[  147.632004] R13: 000000000000002c R14: ffff88806ce31490 R15: dffffc0000000000
[  147.632624] FS:  00007f7be5c9d700(0000) GS:ffff8880e55dd000(0000) knlGS:0000000000000000
[  147.633322] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  147.633814] CR2: ffffed10212c9106 CR3: 000000000d43a000 CR4: 0000000000350ef0
[  147.634419] Call Trace:
[  147.634643]  <IRQ>
[  147.634835]  ? __pfx_perf_tp_event+0x10/0x10
[  147.635222]  ? sched_clock_cpu+0x6c/0x4e0
[  147.635580]  ? trace_pelt_se_tp+0xdf/0x130
[  147.635936]  ? __update_load_avg_se+0x428/0xa40
[  147.636349]  ? lock_is_held_type+0x9e/0x120
[  147.636717]  ? perf_trace_lock+0xb5/0x5d0
[  147.637073]  ? perf_trace_lock+0xb5/0x5d0
[  147.637434]  ? __resched_curr+0x2a2/0x330
[  147.637793]  ? __pfx_perf_trace_lock+0x10/0x10
[  147.638184]  ? __pfx_perf_trace_lock+0x10/0x10
[  147.638573]  ? lock_is_held_type+0x9e/0x120
[  147.638946]  ? perf_trace_run_bpf_submit+0xef/0x180
[  147.639374]  perf_trace_run_bpf_submit+0xef/0x180
[  147.639791]  perf_trace_lock+0x337/0x5d0
[  147.640147]  ? __pfx_perf_trace_lock+0x10/0x10
[  147.640540]  ? find_held_lock+0x2b/0x80
[  147.640889]  ? hrtimer_interrupt+0x114/0x830
[  147.641272]  lock_release+0x1ab/0x290
[  147.641609]  ktime_get_update_offsets_now+0xab/0x3c0
[  147.642053]  ? hrtimer_interrupt+0x114/0x830
[  147.642426]  ? __pfx_lapic_next_deadline+0x10/0x10
[  147.642849]  hrtimer_interrupt+0x114/0x830
[  147.643215]  __sysvec_apic_timer_interrupt+0xbb/0x330
[  147.643655]  sysvec_apic_timer_interrupt+0x6b/0x80
[  147.644070]  </IRQ>
[  147.644266]  <TASK>
[  147.644456]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  147.644898] RIP: 0010:make_task_dead+0xa2/0x3b0
[  147.645305] Code: 38 00 85 db 0f 84 21 01 00 00 e8 d9 96 38 00 9c 5b 81 e3 00 02 00 00 31 ff 48 89 de e8 27 92 38 00 48 85 db 0f 84 17 01 00 00 <e8> b9 96 38 00 31 ff 65 8b 1d 60 df 48 06 81 e3 ff ff ff 7f 89 de
[  147.646842] RSP: 0018:ffff888017e77f28 EFLAGS: 00000246
[  147.647297] RAX: 0000000000000001 RBX: ffff8880178c8000 RCX: ffffffff817c2b86
[  147.647891] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff813b5234
[  147.648488] RBP: 0000000000000009 R08: 0000000000000000 R09: 0000000000000000
[  147.649051] R10: ffffffff8643ac57 R11: 3030303030302043 R12: ffff8880178c8000
[  147.649617] R13: 0000000000000009 R14: ffff888017e777e0 R15: 0000000000000000
[  147.650186]  ? trace_irq_enable.constprop.0+0x26/0x100
[  147.650608]  ? make_task_dead+0x214/0x3b0
[  147.650945]  ? make_task_dead+0x214/0x3b0
[  147.651284]  ? do_syscall_64+0xbf/0x360
[  147.651606]  rewind_stack_and_make_dead+0x16/0x20
[  147.652002] RIP: 0033:0x7f7be8727b19
[  147.652297] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  147.653735] RSP: 002b:00007f7be5c9d218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  147.654328] RAX: ffffffffffffffda RBX: 00007f7be883af68 RCX: 00007f7be8727b19
[  147.654885] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f7be883af6c
[  147.655442] RBP: 00007f7be883af60 R08: 000000000000000e R09: 0000000000000000
[  147.656013] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f7be883af6c
[  147.656571] R13: 00007fff0f46084f R14: 00007f7be5c9d300 R15: 0000000000022000
[  147.657141]  </TASK>
[  147.657343] Modules linked in:
[  147.657603] CR2: ffffed10212c9106
[  147.657875] ---[ end trace 0000000000000000 ]---
[  147.657879] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000032: 0000 [#4] SMP KASAN NOPTI
[  147.658242] RIP: 0010:perf_tp_event+0x175/0xe70
[  147.659808] KASAN: null-ptr-deref in range [0x0000000000000190-0x0000000000000197]
[  147.660180] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[  147.661237] CPU: 1 UID: 0 PID: 3985 Comm: syz-executor.3 Tainted: G      D W           6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) 
[  147.662659] RSP: 0018:ffff888017e77800 EFLAGS: 00010216
[  147.664333] Tainted: [D]=DIE, [W]=WARN
[  147.664745] RAX: 1ffff110212c9106 RBX: ffff888109648640 RCX: ffffc90004e10000
[  147.665300] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  147.665861] RDX: 0000000000040000 RSI: ffffffff818995b7 RDI: ffff888109648830
[  147.667015] RIP: 0010:perf_tp_event+0x175/0xe70
[  147.667575] RBP: ffff888017e77a70 R08: ffff88806ce31340 R09: ffffe8ffffc15aa8
[  147.668234] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[  147.668797] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
[  147.671343] RSP: 0018:ffff88806cf08a80 EFLAGS: 00010012
[  147.671902] R13: 000000000000002c R14: ffff88806ce31340 R15: dffffc0000000000
[  147.671906] 
[  147.671915] FS:  00007f7be5c9d700(0000) GS:ffff8880e55dd000(0000) knlGS:0000000000000000
[  147.672658] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: 0000000000000002
[  147.673219] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  147.673491] RDX: ffff88801693b700 RSI: ffffffff818995b7 RDI: 0000000000000191
[  147.674110] CR2: ffffed10212c9106 CR3: 000000000d43a000 CR4: 0000000000350ef0
[  147.675139] RBP: ffff88806cf08cf0 R08: ffff88806cf31490 R09: ffffe8ffffd15aa8
[  147.675596] Kernel panic - not syncing: Fatal exception in interrupt
[  148.716953] Shutting down cpus with NMI
[  148.719135] Kernel Offset: disabled
[  148.719423] ---[ end Kernel panic - not syncing: Fatal exception in interrupt ]---

VM DIAGNOSIS:
03:01:11  Registers:
info registers vcpu 0
RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd
RSI=ffffffff828e3230 RDI=ffffffff88724180 RBP=ffffffff88724140 RSP=ffff888017e76ff0
R8 =0000000000000000 R9 =ffffed10016dc046 R10=00000000000fe503 R11=6572617764726148
R12=0000000000000823 R13=0000000000000020 R14=fffffbfff10e4882 R15=dffffc0000000000
RIP=ffffffff828e3285 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007f7be5c9d700 00000000 00000000
GS =0000 ffff8880e55dd000 00000000 00000000
LDT=0000 fffffe3a00000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=ffffed10212c9106 CR3=000000000d43a000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00007f7be880e7c000007f7be880e7c8
XMM02=00007f7be880e7e000007f7be880e7c0 XMM03=00007f7be880e7c800007f7be880e7c0
XMM04=ffffffff0000ff00000000ff00000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000002 RBX=0000000000000008 RCX=00007efd623768e1 RDX=00007fff1ab7a880
RSI=0000000000000000 RDI=0000000000000000 RBP=00007fff1ab7a90c RSP=00007fff1ab7a838
R8 =0000000000000000 R9 =00007efd62441000 R10=0000000000000000 R11=0000000000000293
R12=0000000000000032 R13=0000000000023f80 R14=0000000000000000 R15=00007fff1ab7a970
RIP=00007efd623750e0 RFL=00000246 [---Z-P-] CPL=3 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0033 0000000000000000 ffffffff 00a0fb00 DPL=3 CS64 [-RA]
SS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 000055556b494400 00000000 00000000
GS =0000 0000000000000000 00000000 00000000
LDT=0000 fffffe4f00000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b2d220000 CR3=000000004196e000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=ff00000000ff000000000000000000ff XMM01=25252525252525252525252525252525
XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000
XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000