Warning: Permanently added '[localhost]:11775' (ECDSA) to the list of known hosts. 2025/08/30 23:11:18 fuzzer started 2025/08/30 23:11:18 dialing manager at localhost:43077 syzkaller login: [ 50.819805] cgroup: Unknown subsys name 'net' [ 50.896287] cgroup: Unknown subsys name 'cpuset' [ 50.922255] cgroup: Unknown subsys name 'rlimit' 2025/08/30 23:11:28 syscalls: 2214 2025/08/30 23:11:28 code coverage: enabled 2025/08/30 23:11:28 comparison tracing: enabled 2025/08/30 23:11:28 extra coverage: enabled 2025/08/30 23:11:28 setuid sandbox: enabled 2025/08/30 23:11:28 namespace sandbox: enabled 2025/08/30 23:11:28 Android sandbox: enabled 2025/08/30 23:11:28 fault injection: enabled 2025/08/30 23:11:28 leak checking: enabled 2025/08/30 23:11:28 net packet injection: enabled 2025/08/30 23:11:28 net device setup: enabled 2025/08/30 23:11:28 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/08/30 23:11:28 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/08/30 23:11:28 USB emulation: enabled 2025/08/30 23:11:28 hci packet injection: enabled 2025/08/30 23:11:28 wifi device emulation: enabled 2025/08/30 23:11:28 802.15.4 emulation: enabled 2025/08/30 23:11:28 fetching corpus: 50, signal 17154/18975 (executing program) 2025/08/30 23:11:28 fetching corpus: 100, signal 25482/28982 (executing program) 2025/08/30 23:11:28 fetching corpus: 150, signal 35732/40751 (executing program) 2025/08/30 23:11:28 fetching corpus: 200, signal 43093/49481 (executing program) 2025/08/30 23:11:28 fetching corpus: 250, signal 46991/54780 (executing program) 2025/08/30 23:11:28 fetching corpus: 300, signal 53993/62914 (executing program) 2025/08/30 23:11:28 fetching corpus: 350, signal 57770/67990 (executing program) 2025/08/30 23:11:28 fetching corpus: 400, signal 62744/74092 (executing program) 2025/08/30 23:11:28 fetching corpus: 450, signal 68248/80585 (executing program) 2025/08/30 23:11:29 fetching corpus: 500, signal 71848/85239 (executing program) 2025/08/30 23:11:29 fetching corpus: 550, signal 75191/89632 (executing program) 2025/08/30 23:11:29 fetching corpus: 600, signal 76889/92475 (executing program) 2025/08/30 23:11:29 fetching corpus: 650, signal 80960/97405 (executing program) 2025/08/30 23:11:29 fetching corpus: 700, signal 82924/100378 (executing program) 2025/08/30 23:11:29 fetching corpus: 750, signal 86078/104347 (executing program) 2025/08/30 23:11:29 fetching corpus: 800, signal 88029/107199 (executing program) 2025/08/30 23:11:29 fetching corpus: 850, signal 92766/112356 (executing program) 2025/08/30 23:11:29 fetching corpus: 900, signal 93933/114505 (executing program) 2025/08/30 23:11:29 fetching corpus: 950, signal 95969/117326 (executing program) 2025/08/30 23:11:29 fetching corpus: 1000, signal 97814/119964 (executing program) 2025/08/30 23:11:30 fetching corpus: 1050, signal 99629/122526 (executing program) 2025/08/30 23:11:30 fetching corpus: 1100, signal 101063/124798 (executing program) 2025/08/30 23:11:30 fetching corpus: 1150, signal 102603/127101 (executing program) 2025/08/30 23:11:30 fetching corpus: 1200, signal 103508/128922 (executing program) 2025/08/30 23:11:30 fetching corpus: 1250, signal 104633/130877 (executing program) 2025/08/30 23:11:30 fetching corpus: 1300, signal 105640/132640 (executing program) 2025/08/30 23:11:30 fetching corpus: 1350, signal 106662/134480 (executing program) 2025/08/30 23:11:30 fetching corpus: 1400, signal 108169/136587 (executing program) 2025/08/30 23:11:30 fetching corpus: 1450, signal 109356/138503 (executing program) 2025/08/30 23:11:30 fetching corpus: 1500, signal 110502/140317 (executing program) 2025/08/30 23:11:31 fetching corpus: 1550, signal 112229/142568 (executing program) 2025/08/30 23:11:31 fetching corpus: 1600, signal 113695/144615 (executing program) 2025/08/30 23:11:31 fetching corpus: 1650, signal 115593/146981 (executing program) 2025/08/30 23:11:31 fetching corpus: 1700, signal 116640/148661 (executing program) 2025/08/30 23:11:31 fetching corpus: 1750, signal 117956/150492 (executing program) 2025/08/30 23:11:31 fetching corpus: 1800, signal 118790/151983 (executing program) 2025/08/30 23:11:31 fetching corpus: 1850, signal 119923/153678 (executing program) 2025/08/30 23:11:31 fetching corpus: 1900, signal 120971/155295 (executing program) 2025/08/30 23:11:31 fetching corpus: 1950, signal 122619/157288 (executing program) 2025/08/30 23:11:31 fetching corpus: 2000, signal 123757/158907 (executing program) 2025/08/30 23:11:32 fetching corpus: 2050, signal 124851/160541 (executing program) 2025/08/30 23:11:32 fetching corpus: 2100, signal 125624/161900 (executing program) 2025/08/30 23:11:32 fetching corpus: 2150, signal 126691/163370 (executing program) 2025/08/30 23:11:32 fetching corpus: 2200, signal 127619/164787 (executing program) 2025/08/30 23:11:32 fetching corpus: 2250, signal 128934/166467 (executing program) 2025/08/30 23:11:32 fetching corpus: 2300, signal 129642/167793 (executing program) 2025/08/30 23:11:32 fetching corpus: 2350, signal 130301/168983 (executing program) 2025/08/30 23:11:32 fetching corpus: 2400, signal 131258/170327 (executing program) 2025/08/30 23:11:32 fetching corpus: 2450, signal 131811/171463 (executing program) 2025/08/30 23:11:32 fetching corpus: 2500, signal 132786/172783 (executing program) 2025/08/30 23:11:32 fetching corpus: 2550, signal 133447/173985 (executing program) 2025/08/30 23:11:33 fetching corpus: 2600, signal 134245/175211 (executing program) 2025/08/30 23:11:33 fetching corpus: 2650, signal 135126/176546 (executing program) 2025/08/30 23:11:33 fetching corpus: 2700, signal 135715/177611 (executing program) 2025/08/30 23:11:33 fetching corpus: 2750, signal 136418/178764 (executing program) 2025/08/30 23:11:33 fetching corpus: 2800, signal 137045/179833 (executing program) 2025/08/30 23:11:33 fetching corpus: 2850, signal 137641/180915 (executing program) 2025/08/30 23:11:33 fetching corpus: 2900, signal 138382/182011 (executing program) 2025/08/30 23:11:33 fetching corpus: 2950, signal 138988/183053 (executing program) 2025/08/30 23:11:33 fetching corpus: 3000, signal 139646/184110 (executing program) 2025/08/30 23:11:33 fetching corpus: 3050, signal 140304/185092 (executing program) 2025/08/30 23:11:33 fetching corpus: 3100, signal 141001/186106 (executing program) 2025/08/30 23:11:34 fetching corpus: 3150, signal 141582/187105 (executing program) 2025/08/30 23:11:34 fetching corpus: 3200, signal 142313/188141 (executing program) 2025/08/30 23:11:34 fetching corpus: 3250, signal 143140/189204 (executing program) 2025/08/30 23:11:34 fetching corpus: 3300, signal 143669/190116 (executing program) 2025/08/30 23:11:34 fetching corpus: 3350, signal 144198/191024 (executing program) 2025/08/30 23:11:34 fetching corpus: 3400, signal 144739/191886 (executing program) 2025/08/30 23:11:34 fetching corpus: 3450, signal 145486/192910 (executing program) 2025/08/30 23:11:34 fetching corpus: 3500, signal 146370/193880 (executing program) 2025/08/30 23:11:34 fetching corpus: 3550, signal 147194/194802 (executing program) 2025/08/30 23:11:34 fetching corpus: 3600, signal 147649/195629 (executing program) 2025/08/30 23:11:34 fetching corpus: 3650, signal 148256/196555 (executing program) 2025/08/30 23:11:35 fetching corpus: 3700, signal 148819/197357 (executing program) 2025/08/30 23:11:35 fetching corpus: 3750, signal 149285/198167 (executing program) 2025/08/30 23:11:35 fetching corpus: 3800, signal 149683/198932 (executing program) 2025/08/30 23:11:35 fetching corpus: 3850, signal 150150/199770 (executing program) 2025/08/30 23:11:35 fetching corpus: 3900, signal 150487/200523 (executing program) 2025/08/30 23:11:35 fetching corpus: 3950, signal 151011/201316 (executing program) 2025/08/30 23:11:35 fetching corpus: 4000, signal 151642/202134 (executing program) 2025/08/30 23:11:35 fetching corpus: 4050, signal 152038/202900 (executing program) 2025/08/30 23:11:35 fetching corpus: 4100, signal 152836/203734 (executing program) 2025/08/30 23:11:35 fetching corpus: 4150, signal 153344/204490 (executing program) 2025/08/30 23:11:35 fetching corpus: 4200, signal 153811/205212 (executing program) 2025/08/30 23:11:36 fetching corpus: 4250, signal 154073/205877 (executing program) 2025/08/30 23:11:36 fetching corpus: 4300, signal 154725/206626 (executing program) 2025/08/30 23:11:36 fetching corpus: 4350, signal 155370/207471 (executing program) 2025/08/30 23:11:36 fetching corpus: 4400, signal 155910/208173 (executing program) 2025/08/30 23:11:36 fetching corpus: 4450, signal 156314/208884 (executing program) 2025/08/30 23:11:36 fetching corpus: 4500, signal 156714/209548 (executing program) 2025/08/30 23:11:36 fetching corpus: 4550, signal 157267/210266 (executing program) 2025/08/30 23:11:36 fetching corpus: 4600, signal 158329/211029 (executing program) 2025/08/30 23:11:36 fetching corpus: 4650, signal 158852/211751 (executing program) 2025/08/30 23:11:36 fetching corpus: 4700, signal 159302/212417 (executing program) 2025/08/30 23:11:36 fetching corpus: 4750, signal 159744/213061 (executing program) 2025/08/30 23:11:37 fetching corpus: 4800, signal 160229/213681 (executing program) 2025/08/30 23:11:37 fetching corpus: 4850, signal 160723/214272 (executing program) 2025/08/30 23:11:37 fetching corpus: 4900, signal 161026/214909 (executing program) 2025/08/30 23:11:37 fetching corpus: 4950, signal 161734/215533 (executing program) 2025/08/30 23:11:37 fetching corpus: 5000, signal 162046/216128 (executing program) 2025/08/30 23:11:37 fetching corpus: 5050, signal 162357/216701 (executing program) 2025/08/30 23:11:37 fetching corpus: 5100, signal 162810/217243 (executing program) 2025/08/30 23:11:37 fetching corpus: 5150, signal 163103/217776 (executing program) 2025/08/30 23:11:37 fetching corpus: 5200, signal 163448/218348 (executing program) 2025/08/30 23:11:37 fetching corpus: 5250, signal 163946/218892 (executing program) 2025/08/30 23:11:37 fetching corpus: 5300, signal 164558/219413 (executing program) 2025/08/30 23:11:38 fetching corpus: 5350, signal 165117/219957 (executing program) 2025/08/30 23:11:38 fetching corpus: 5400, signal 165517/220475 (executing program) 2025/08/30 23:11:38 fetching corpus: 5450, signal 166544/220898 (executing program) 2025/08/30 23:11:38 fetching corpus: 5500, signal 166996/220923 (executing program) 2025/08/30 23:11:38 fetching corpus: 5550, signal 167336/220926 (executing program) 2025/08/30 23:11:38 fetching corpus: 5600, signal 167744/220932 (executing program) 2025/08/30 23:11:38 fetching corpus: 5650, signal 168312/220935 (executing program) 2025/08/30 23:11:38 fetching corpus: 5700, signal 168691/220937 (executing program) 2025/08/30 23:11:38 fetching corpus: 5750, signal 169268/220939 (executing program) 2025/08/30 23:11:38 fetching corpus: 5800, signal 169730/220944 (executing program) 2025/08/30 23:11:38 fetching corpus: 5850, signal 170140/220949 (executing program) 2025/08/30 23:11:39 fetching corpus: 5900, signal 170475/220996 (executing program) 2025/08/30 23:11:39 fetching corpus: 5950, signal 170851/221028 (executing program) 2025/08/30 23:11:39 fetching corpus: 6000, signal 171160/221028 (executing program) 2025/08/30 23:11:39 fetching corpus: 6050, signal 171466/221029 (executing program) 2025/08/30 23:11:39 fetching corpus: 6100, signal 171752/221034 (executing program) 2025/08/30 23:11:39 fetching corpus: 6150, signal 172033/221045 (executing program) 2025/08/30 23:11:39 fetching corpus: 6200, signal 172326/221046 (executing program) 2025/08/30 23:11:39 fetching corpus: 6250, signal 172623/221048 (executing program) 2025/08/30 23:11:39 fetching corpus: 6300, signal 172891/221058 (executing program) 2025/08/30 23:11:39 fetching corpus: 6350, signal 173230/221058 (executing program) 2025/08/30 23:11:39 fetching corpus: 6400, signal 173541/221063 (executing program) 2025/08/30 23:11:39 fetching corpus: 6450, signal 173817/221068 (executing program) 2025/08/30 23:11:39 fetching corpus: 6500, signal 174185/221077 (executing program) 2025/08/30 23:11:40 fetching corpus: 6550, signal 174544/221094 (executing program) 2025/08/30 23:11:40 fetching corpus: 6600, signal 174802/221097 (executing program) 2025/08/30 23:11:40 fetching corpus: 6650, signal 175147/221108 (executing program) 2025/08/30 23:11:40 fetching corpus: 6700, signal 175420/221114 (executing program) 2025/08/30 23:11:40 fetching corpus: 6750, signal 175791/221125 (executing program) 2025/08/30 23:11:40 fetching corpus: 6800, signal 175964/221134 (executing program) 2025/08/30 23:11:40 fetching corpus: 6850, signal 176313/221136 (executing program) 2025/08/30 23:11:40 fetching corpus: 6900, signal 176773/221148 (executing program) 2025/08/30 23:11:40 fetching corpus: 6950, signal 177118/221160 (executing program) 2025/08/30 23:11:40 fetching corpus: 7000, signal 178053/221168 (executing program) 2025/08/30 23:11:40 fetching corpus: 7050, signal 178327/221172 (executing program) 2025/08/30 23:11:40 fetching corpus: 7100, signal 178555/221178 (executing program) 2025/08/30 23:11:41 fetching corpus: 7150, signal 178861/221178 (executing program) 2025/08/30 23:11:41 fetching corpus: 7200, signal 179196/221180 (executing program) 2025/08/30 23:11:41 fetching corpus: 7250, signal 179533/221184 (executing program) 2025/08/30 23:11:41 fetching corpus: 7300, signal 179931/221193 (executing program) 2025/08/30 23:11:41 fetching corpus: 7350, signal 180211/221199 (executing program) 2025/08/30 23:11:41 fetching corpus: 7400, signal 180539/221208 (executing program) 2025/08/30 23:11:41 fetching corpus: 7450, signal 181105/221318 (executing program) 2025/08/30 23:11:41 fetching corpus: 7500, signal 181353/221318 (executing program) 2025/08/30 23:11:41 fetching corpus: 7550, signal 181541/221320 (executing program) 2025/08/30 23:11:41 fetching corpus: 7600, signal 181827/221320 (executing program) 2025/08/30 23:11:41 fetching corpus: 7650, signal 182094/221330 (executing program) 2025/08/30 23:11:41 fetching corpus: 7700, signal 182475/221330 (executing program) 2025/08/30 23:11:41 fetching corpus: 7750, signal 182693/221333 (executing program) 2025/08/30 23:11:42 fetching corpus: 7800, signal 183173/221341 (executing program) 2025/08/30 23:11:42 fetching corpus: 7850, signal 183479/221343 (executing program) 2025/08/30 23:11:42 fetching corpus: 7900, signal 183864/221346 (executing program) 2025/08/30 23:11:42 fetching corpus: 7950, signal 184100/221346 (executing program) 2025/08/30 23:11:42 fetching corpus: 8000, signal 184630/221348 (executing program) 2025/08/30 23:11:42 fetching corpus: 8050, signal 184997/221381 (executing program) 2025/08/30 23:11:42 fetching corpus: 8100, signal 185159/221388 (executing program) 2025/08/30 23:11:42 fetching corpus: 8150, signal 185724/221393 (executing program) 2025/08/30 23:11:42 fetching corpus: 8200, signal 185916/221397 (executing program) 2025/08/30 23:11:42 fetching corpus: 8250, signal 186270/221402 (executing program) 2025/08/30 23:11:42 fetching corpus: 8300, signal 186450/221405 (executing program) 2025/08/30 23:11:42 fetching corpus: 8350, signal 186784/221420 (executing program) 2025/08/30 23:11:42 fetching corpus: 8400, signal 187028/221445 (executing program) 2025/08/30 23:11:43 fetching corpus: 8450, signal 187316/221449 (executing program) 2025/08/30 23:11:43 fetching corpus: 8500, signal 187596/221452 (executing program) 2025/08/30 23:11:43 fetching corpus: 8550, signal 187892/221456 (executing program) 2025/08/30 23:11:43 fetching corpus: 8600, signal 188208/221458 (executing program) 2025/08/30 23:11:43 fetching corpus: 8650, signal 188368/221458 (executing program) 2025/08/30 23:11:43 fetching corpus: 8700, signal 188826/221470 (executing program) 2025/08/30 23:11:43 fetching corpus: 8750, signal 189086/221470 (executing program) 2025/08/30 23:11:43 fetching corpus: 8800, signal 189279/221471 (executing program) 2025/08/30 23:11:43 fetching corpus: 8850, signal 189511/221479 (executing program) 2025/08/30 23:11:43 fetching corpus: 8900, signal 189847/221570 (executing program) 2025/08/30 23:11:43 fetching corpus: 8950, signal 190047/221570 (executing program) 2025/08/30 23:11:43 fetching corpus: 9000, signal 190205/221574 (executing program) 2025/08/30 23:11:43 fetching corpus: 9050, signal 190397/221574 (executing program) 2025/08/30 23:11:44 fetching corpus: 9100, signal 190615/221585 (executing program) 2025/08/30 23:11:44 fetching corpus: 9150, signal 190790/221594 (executing program) 2025/08/30 23:11:44 fetching corpus: 9200, signal 191040/221607 (executing program) 2025/08/30 23:11:44 fetching corpus: 9250, signal 191282/221623 (executing program) 2025/08/30 23:11:44 fetching corpus: 9300, signal 191528/221624 (executing program) 2025/08/30 23:11:44 fetching corpus: 9350, signal 191851/221625 (executing program) 2025/08/30 23:11:44 fetching corpus: 9400, signal 192037/221626 (executing program) 2025/08/30 23:11:44 fetching corpus: 9450, signal 192301/221629 (executing program) 2025/08/30 23:11:44 fetching corpus: 9500, signal 192590/221640 (executing program) 2025/08/30 23:11:44 fetching corpus: 9550, signal 192806/221652 (executing program) 2025/08/30 23:11:44 fetching corpus: 9600, signal 193222/221672 (executing program) 2025/08/30 23:11:44 fetching corpus: 9650, signal 193706/221675 (executing program) 2025/08/30 23:11:44 fetching corpus: 9700, signal 193907/221675 (executing program) 2025/08/30 23:11:44 fetching corpus: 9750, signal 194139/221684 (executing program) 2025/08/30 23:11:45 fetching corpus: 9800, signal 194356/221686 (executing program) 2025/08/30 23:11:45 fetching corpus: 9850, signal 194612/221687 (executing program) 2025/08/30 23:11:45 fetching corpus: 9900, signal 194827/221687 (executing program) 2025/08/30 23:11:45 fetching corpus: 9950, signal 195124/221687 (executing program) 2025/08/30 23:11:45 fetching corpus: 10000, signal 195336/221704 (executing program) 2025/08/30 23:11:45 fetching corpus: 10050, signal 195550/221728 (executing program) 2025/08/30 23:11:45 fetching corpus: 10100, signal 195808/221728 (executing program) 2025/08/30 23:11:45 fetching corpus: 10150, signal 195973/221729 (executing program) 2025/08/30 23:11:45 fetching corpus: 10200, signal 196204/221758 (executing program) 2025/08/30 23:11:45 fetching corpus: 10250, signal 196384/221765 (executing program) 2025/08/30 23:11:45 fetching corpus: 10300, signal 196578/221770 (executing program) 2025/08/30 23:11:45 fetching corpus: 10350, signal 196714/221784 (executing program) 2025/08/30 23:11:45 fetching corpus: 10400, signal 197002/221784 (executing program) 2025/08/30 23:11:45 fetching corpus: 10450, signal 197200/221784 (executing program) 2025/08/30 23:11:46 fetching corpus: 10500, signal 197360/221789 (executing program) 2025/08/30 23:11:46 fetching corpus: 10550, signal 197628/221837 (executing program) 2025/08/30 23:11:46 fetching corpus: 10600, signal 197763/221847 (executing program) 2025/08/30 23:11:46 fetching corpus: 10650, signal 198086/221858 (executing program) 2025/08/30 23:11:46 fetching corpus: 10700, signal 198445/221858 (executing program) 2025/08/30 23:11:46 fetching corpus: 10750, signal 198632/221863 (executing program) 2025/08/30 23:11:46 fetching corpus: 10800, signal 198850/221868 (executing program) 2025/08/30 23:11:46 fetching corpus: 10850, signal 199096/221913 (executing program) 2025/08/30 23:11:46 fetching corpus: 10900, signal 199296/221953 (executing program) 2025/08/30 23:11:46 fetching corpus: 10950, signal 199543/221986 (executing program) 2025/08/30 23:11:46 fetching corpus: 11000, signal 199732/221989 (executing program) 2025/08/30 23:11:46 fetching corpus: 11050, signal 199887/221999 (executing program) 2025/08/30 23:11:46 fetching corpus: 11100, signal 200010/222002 (executing program) 2025/08/30 23:11:47 fetching corpus: 11150, signal 200208/222002 (executing program) 2025/08/30 23:11:47 fetching corpus: 11200, signal 200363/222004 (executing program) 2025/08/30 23:11:47 fetching corpus: 11250, signal 200529/222007 (executing program) 2025/08/30 23:11:47 fetching corpus: 11300, signal 200727/222030 (executing program) 2025/08/30 23:11:47 fetching corpus: 11350, signal 200879/222031 (executing program) 2025/08/30 23:11:47 fetching corpus: 11400, signal 201117/222049 (executing program) 2025/08/30 23:11:47 fetching corpus: 11450, signal 201334/222053 (executing program) 2025/08/30 23:11:47 fetching corpus: 11500, signal 201518/222055 (executing program) 2025/08/30 23:11:47 fetching corpus: 11550, signal 201661/222056 (executing program) 2025/08/30 23:11:47 fetching corpus: 11600, signal 201887/222056 (executing program) 2025/08/30 23:11:47 fetching corpus: 11650, signal 202026/222060 (executing program) 2025/08/30 23:11:47 fetching corpus: 11700, signal 202235/222065 (executing program) 2025/08/30 23:11:48 fetching corpus: 11750, signal 202492/222066 (executing program) 2025/08/30 23:11:48 fetching corpus: 11800, signal 202619/222068 (executing program) 2025/08/30 23:11:48 fetching corpus: 11850, signal 202764/222069 (executing program) 2025/08/30 23:11:48 fetching corpus: 11900, signal 203086/222071 (executing program) 2025/08/30 23:11:48 fetching corpus: 11950, signal 203261/222078 (executing program) 2025/08/30 23:11:48 fetching corpus: 12000, signal 203409/222082 (executing program) 2025/08/30 23:11:48 fetching corpus: 12050, signal 203607/222083 (executing program) 2025/08/30 23:11:48 fetching corpus: 12100, signal 203979/222092 (executing program) 2025/08/30 23:11:48 fetching corpus: 12143, signal 204133/222097 (executing program) 2025/08/30 23:11:48 fetching corpus: 12143, signal 204133/222097 (executing program) 2025/08/30 23:11:50 starting 8 fuzzer processes 23:11:50 executing program 0: ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a85352, &(0x7f0000000000)={{0xff, 0x1}, 'port1\x00', 0x0, 0x10000, 0x5, 0x8001, 0x1, 0x3, 0x1, 0x0, 0x2, 0x80}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f00000000c0)={{0xfb, 0x7}, {0x9, 0x1}, 0x5, 0x1, 0x1}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000140)={{0x20, 0x81}, {0x0, 0x4}, 0x4, 0x1, 0x8}) r0 = socket$inet6(0xa, 0x6, 0x4d) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) write$binfmt_script(r0, &(0x7f00000001c0)={'#! ', './file0', [{0x20, '..'}, {0x20, '/'}, {}], 0xa, "ae7b8e43b361039798c173517904e99e0f07399a1217728fe7ee3527f081b783ce915ff9089e07c23c3f1a998002cb1f9ab19ba272b7e0d31ed06c0412d86447449be5cfd7594bf397a7dcfbd942703987a0d3c1d014a3bd74e5e6335d5900f7389d0658beaaa6be95338fefa4eedd2e255f9dded3cebf29de392922892e19abe87d10119181c54b6abc006fbb9329b4b560d5dc3728f72c8e3d7a3ae07faa3a6b776ee8bf7dfd6e2e0635b875bef836a4a9c0af1407ccfaf374e83107bbd9"}, 0xd0) fcntl$getown(r0, 0x9) r1 = openat(0xffffffffffffffff, &(0x7f00000002c0)='./file0/file0\x00', 0x111002, 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f0000000300)={{0x8, 0x53}, {0x7f, 0x7f}, 0x80, 0x3, 0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc0a85352, &(0x7f0000000380)={{0x3f, 0x5d}, 'port0\x00', 0x28, 0x51c37, 0x0, 0x6, 0x401, 0x3f, 0x9, 0x0, 0x2}) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f0000000440)) recvmmsg(r0, &(0x7f0000002440)=[{{&(0x7f0000000480)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000500)=""/218, 0xda}, {&(0x7f0000000600)=""/105, 0x69}, {&(0x7f0000000680)=""/30, 0x1e}, {&(0x7f00000006c0)}, {&(0x7f0000000700)=""/130, 0x82}, {&(0x7f00000007c0)=""/57, 0x39}], 0x6, &(0x7f0000000880)=""/47, 0x2f}, 0x10000}, {{&(0x7f00000008c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000940)=""/250, 0xfa}], 0x1, &(0x7f0000000a80)=""/4096, 0x1000}}, {{&(0x7f0000001a80)=@ieee802154, 0x80, &(0x7f0000001bc0)=[{&(0x7f0000001b00)=""/153, 0x99}], 0x1, &(0x7f0000001c00)=""/44, 0x2c}, 0x8}, {{&(0x7f0000001c40)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001cc0)=""/186, 0xba}, {&(0x7f0000001d80)=""/197, 0xc5}], 0x2, &(0x7f0000001ec0)=""/197, 0xc5}, 0x101}, {{0x0, 0x0, &(0x7f0000002300)=[{&(0x7f0000001fc0)=""/128, 0x80}, {&(0x7f0000002040)=""/161, 0xa1}, {&(0x7f0000002100)=""/67, 0x43}, {&(0x7f0000002180)=""/92, 0x5c}, {&(0x7f0000002200)=""/179, 0xb3}, {&(0x7f00000022c0)=""/57, 0x39}], 0x6, &(0x7f0000002380)=""/141, 0x8d}, 0x100}], 0x5, 0x0, &(0x7f0000002580)={0x77359400}) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000002600), r1) sendmsg$GTP_CMD_GETPDP(r2, &(0x7f00000026c0)={&(0x7f00000025c0)={0x10, 0x0, 0x0, 0x80000080}, 0xc, &(0x7f0000002680)={&(0x7f0000002640)={0x34, r3, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x34}}, 0x4014) ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f0000002700)={0x3, 0xf3}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000002740)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r4, 0xc0505350, &(0x7f0000002780)={{0x4, 0xa4}, {0x1f, 0x4}, 0x100, 0x4, 0x5}) lseek(r4, 0x1, 0x4) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000002800)={'ip6erspan0\x00'}) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000002840)=@generic={0x2, 0x9, 0xfff}) 23:11:50 executing program 1: getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000040)={{{@in6=@mcast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@multicast2}}, &(0x7f0000000140)=0xe8) lchown(&(0x7f0000000000)='./file0\x00', r1, 0xee01) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000180)={@rand_addr=0x64010101, @broadcast, r0}, 0xc) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x101}}, './file0\x00'}) r3 = socket$nl_audit(0x10, 0x3, 0x9) recvmmsg(r3, &(0x7f0000006cc0)=[{{&(0x7f0000000200)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x80, &(0x7f0000001700)=[{&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000001280)=""/86, 0x56}, {&(0x7f0000001300)=""/48, 0x30}, {&(0x7f0000001340)=""/172, 0xac}, {&(0x7f0000001400)=""/254, 0xfe}, {&(0x7f0000001500)=""/246, 0xf6}, {&(0x7f0000001600)=""/246, 0xf6}], 0x7, &(0x7f0000001780)=""/120, 0x78}, 0x6}, {{&(0x7f0000001800)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000001b00)=[{&(0x7f0000001880)=""/57, 0x39}, {&(0x7f00000018c0)=""/224, 0xe0}, {&(0x7f00000019c0)=""/42, 0x2a}, {&(0x7f0000001a00)=""/236, 0xec}], 0x4, &(0x7f0000001b40)=""/197, 0xc5}, 0x4}, {{&(0x7f0000001c40)=@caif, 0x80, &(0x7f0000002d00)=[{&(0x7f0000001cc0)=""/63, 0x3f}, {&(0x7f0000001d00)=""/4096, 0x1000}], 0x2, &(0x7f0000002d40)=""/139, 0x8b}, 0xfffffffc}, {{0x0, 0x0, &(0x7f0000005240)=[{&(0x7f0000002e00)=""/117, 0x75}, {&(0x7f0000002e80)=""/224, 0xe0}, {&(0x7f0000002f80)=""/111, 0x6f}, {&(0x7f0000003000)}, {&(0x7f0000003040)=""/4096, 0x1000}, {&(0x7f0000004040)=""/4096, 0x1000}, {&(0x7f0000005040)=""/149, 0x95}, {&(0x7f0000005100)=""/39, 0x27}, {&(0x7f0000005140)=""/117, 0x75}, {&(0x7f00000051c0)=""/96, 0x60}], 0xa, &(0x7f0000005300)=""/214, 0xd6}, 0x7ff}, {{&(0x7f0000005400)=@in={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000005500)=[{&(0x7f0000005480)=""/67, 0x43}], 0x1, &(0x7f0000005540)=""/188, 0xbc}, 0x6}, {{&(0x7f0000005600)=@un=@abs, 0x80, &(0x7f00000069c0)=[{&(0x7f0000005680)=""/49, 0x31}, {&(0x7f00000056c0)=""/142, 0x8e}, {&(0x7f0000005780)=""/95, 0x5f}, {&(0x7f0000005800)=""/4096, 0x1000}, {&(0x7f0000006800)=""/162, 0xa2}, {&(0x7f00000068c0)=""/68, 0x44}, {&(0x7f0000006940)=""/114, 0x72}], 0x7}, 0xf0ca}, {{&(0x7f0000006a40)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000006bc0)=[{&(0x7f0000006ac0)=""/44, 0x2c}, {&(0x7f0000006b00)=""/166, 0xa6}], 0x2, &(0x7f0000006c00)=""/149, 0x95}, 0x20000000}], 0x7, 0x21, &(0x7f0000006e80)) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000006ec0), 0x280000, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r5, 0xc0189375, &(0x7f0000006f00)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) setxattr$security_evm(&(0x7f0000006f40)='./file0\x00', &(0x7f0000006f80), &(0x7f0000006fc0)=@sha1={0x1, "783df4b6052bcb63ece7ad4d5a44a2217b5a01b4"}, 0x15, 0x2) syz_mount_image$tmpfs(&(0x7f0000007000), &(0x7f0000007040)='./file0\x00', 0x3, 0x5, &(0x7f0000007300)=[{&(0x7f0000007080)="ba62dd6aa49aa0553913f7ee8abc2b58457239b41c494c915bdf2d23d8849310c250ac58d23d7e7b8abdf97a4f6f85d1d7c104ef370ca3192ad82c24088801ddacd40665312cd6459f7b8fcbdab9a86957cb3575a81fe20e71aa6db1334c7e655c5cfc6985d00bcab545e5534096", 0x6e, 0x4214b219}, {&(0x7f0000007100)="84283cad25b05eec3f3a69222aec5bae1e9e71dda14a8f7256df9a759c59ebc7de30681d1aa3d2f28e2a8f625b0b1c204532b4e8aab4f46637cdd54b41a1f9031e1943e000ea3e5e8020ab2d2ea85f80619e6c3106efd534", 0x58, 0x42ce}, {&(0x7f0000007180)="26bcf6347458af9949e3885ccc", 0xd, 0x58789f1}, {&(0x7f00000071c0)="a23fd12def431831f60e8b0437ea7ce55e8093ee583ef07e6b8842b6606d17037e70ec50fad44c77d86d9c100eadf2fc06bac5cac298e791982f83c44065d758b66e3b0ad081708e715936d44a0740bb5561e78446670118987ac2e7b68d1b9d8f8f6cc30424ac553cf236d71d3d5772c2d23a094e7e0227a0fcc90ab49f54a537fe2d49bc50baf97f217d453cf0d4517f2578bc7aeb26a1d159cfd883d9b5f1e983787656857979aac10bf935fb5fbb6d825c0c2fb862742497aad8bf4904ec8bf8334b7a51d8f743fde714086bc2c0e2ee22493d66af8b604d951bb34a6ce356a6cf177361db", 0xe7, 0xffffffff}, {&(0x7f00000072c0)="b4eb090bd7bcb02c439111fe7ce3c4652794caf6a0", 0x15, 0x3}], 0x3200000, &(0x7f0000007380)={[{@huge_always}, {@huge_always}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'security.evm\x00'}}]}) setsockopt$inet_mreqn(r6, 0x0, 0x23, &(0x7f00000073c0)={@empty, @dev={0xac, 0x14, 0x14, 0x23}}, 0xc) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f0000007400)={{0x1, 0x1, 0x18, r4, {0xcd8f}}, './file1\x00'}) ioctl$AUTOFS_IOC_EXPIRE(r6, 0x810c9365, &(0x7f0000007440)={{0x1, 0xcd7}, 0x100, './file0/file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r7, 0xc0189378, &(0x7f0000007580)={{0x1, 0x1, 0x18, r2, {r6}}, './file1\x00'}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000075c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r8, 0xc018937c, &(0x7f0000007600)={{0x1, 0x1, 0x18, r9}, './file2\x00'}) syz_mount_image$vfat(&(0x7f0000007640), &(0x7f0000007680)='./file0\x00', 0x80000001, 0x1, &(0x7f00000086c0)=[{&(0x7f00000076c0)="c818f1e6505333522b62c56b7107db4f90cdb79c6996c1a3fc0735bcb289bd96c2e89060a4198d3ec943765933c479c7057bce66a25db011ab815beeb48f0d43027e3611d3b9b175ed71895b6b22b10dd7d0e90724ce46e663038ca67327c132b0ea3bd30bf402bd130d0327fda66d25c38818a778a043ab0a11891ad9cb35f9f6adbb6fad90123fc4b940f75c73432605874a14156c80d8d3c28dc6297b19fda07bd41a36abc4f68ee840f86caa38a63f5f32b4ab3612415a431c83530587269c12f0156f2701c6aa49ea619675302481e07a2474eaa4ae7858293c54f72e81d8262fd00d390a2ff84df132baaf941ec04a3977443c639fd93d5b48fc346d45a7840a96bfa8aaecbaec09c828ce768a83cd3d9d3b8d456a2a499f1ddd33da1658df4cb9c309928aaeb1a78961e988eae07f394a59233a0b8406334baab3e9f2837f67f50874b780e92f5b10df9d1286b95803af8b7d7bbc6f236de817d8a40e1a06884c7c4965f1bf234d9193fe1ff47e2b3c14ca4ef2ead21b78c5e7e094906f01eec833d9edd9c7bd5bf6fd307205106a0f977ed8ee1172408aec0c105f4c32dc44fb4158fd92d74fa6522c500fe3f340d3e0723eca6ac2e7119b24f074bda0ce94f2f76b02c54b5471ba8ba49cb4806d545021bf1686ffda874b522d06e45b27e8bfe85689f1e490e85a71c93addfca815931b8cb9e70017d2f92c8fc0050e5bc4797bfa926ed0e0ab024f8fe128f7cc75c70e439c93690480008860ff5c305bca50d34df68fe673a1909199413eac405aed946f3d9e1609139fb0459f01a2e7350454c2292d5f8b47125708d52895182677243247edfd96ba9af7fd5ddb9fab3e5402bfd0a71e358edef0f22835dcd1a3f2e23ded62f9f4dfff1b5094e1dc0e8be02d588cbc2d4974ac8a61a7990b3d679125e4ea995b22ac10850b737483467ce350304edc83fb9bf60fbd1e371c1ce468c9873f619663f61979ed83c0ce2f13ded575fcdd78c50f0e4192163746b8750c923b170cd6d46e4a86c19d93623cdc02e033feda3f40d1e4be95530b6ca63bfd2b692f5cb4715711d68ac7da59d1c24b3fdf8247d040103fa465350064411070af8e3cedb1ed64fe08d7b67e3be8e2e4ef100a47dc53651776b985813cab803e3a78fb6fe810aff688c01a1a65db1068279e9e36ec083ccd4e44635f4cdc5e7941b862026bbbd44346c54d7dada0aee51fce1f01da065ee2696e88e1a8dc4979e1482afaf0be536c12ca088014288b67fc75c89b14a07e41e9a33a75611659e504686310c260951e5f73532a1972326f05dc64d4c8b6338bae98922dcc87f60760ccecbefff1e3b2cfb3cc393ea56860b22f79ff84e3f5891799e202ec0a44de2cc760cef8f08bf6efd62285383481a9e68014deca32cb6c7bf8c6aefd72d35bdbcf45711aca2cddf51de286e7b0a27d5629fb07ab5ac48462e56eba1b2cb2358a0a4a452fe1db35301923d6cef83307dcb153874123a7efa2a58c37eb8f3803a305960a21649eb8447c9de1a8246a6994c469dfffd06b21bfc29d17c27a6f2cf4e0859e4ebf01685d0f4971bb1155da74d42732e216be23d328ed454a2267bc29bc6188055a07e74368cab83d722c1dc6d7d8116e924ee5065409b5c16f161fd73914dea5273f2e8688a4dd5c961baea82d96c29c0a73ed27359be8423fea57a24cca616a82502b890b7331d80bdbf9c731730bf38ed0d4a5f7e9a80be1974b9e9f9272f364e210daac7abf1077ea7136b9838e186d9c155896702dc2a0c6a68dd0196f0176425077ef6d4af47955248b29abc86cb6c13b9b1454fea2cc196c04958a916ba2733e71e6a63cea2f0b87ab86e7c20a3ef01dc74651698f4405c642f3bd295caf6e2db04038ee73c8911937a2dfd64af3495c4e98870987e42296d2c4201d5157e241ac869df7e885c6af0b772856df5ffea6ce9210aeb3cb810568b0c1d81f4715c6fb89a6282e2c0656cd33033edb6b717da0c8e90663bdb06795c247c0211e88d7a5206e6f90d2d83dbd767000e6e1f58e73eae8f1b9bb105c660a2f017e714db9b275b24888f0250925c24ea468c965ba9911ed1b0d2184bd41f22c63ca47fbe29fad78fed1964993c0663ba61271a6cbb31521dcd56a5defda99ca46efad8cfc88abc189a0f510cb83f1a5e2253502f0e8091c3ad2eb81b5f078e8abba506990ef674e93a30a2ccb9b7e950e75602c8ad753e892462e0d384f0c55e0b39635dff3e9cc899e10edeb4657d1885b271ce92677ee366046236ce97c13faa177d03f7a301e6fba2a6178bfcecbcc7716db44261a41b8249abb50b956bc5737ba942fbff169dfa7e7d35eb6bb3803fcc736b76b87c092b86730a95b633e25a37a23b5fa3ea9912bce27452bfea247918c3f4899433831ea00fecc1e4315bfbfe84a529ebd5ca4030f9585318d3d12183c9521e1a0bafd6af0ad4ec5874a54ff6fb1a82263c92a8e3a3e4b9419039af6192c0137a9623a6de7b520cdd445e0ce529f2c5458f27e72f018061d705c6750629ab331249404c98a4cb2184e53106476608bfc5c3bf545ade449e76383dc3a8a240f88d81059743a56cb6a2ef08873577006375212f90a31a043f1d39a6d4d50ab8d7663178f2a64b77bbc60c6d3fe9e7793d894c1e2afb66aae9695457fb162b36c53cf2fc03bd396660e4960376eeb544c2acd562ce72f2266d6a119c79527d85b76115af823adad165174e594b36af5e7f7a476345a4a81684c3b3a8818ecd6724e824831764d65fa0a4b1cf49e73cdebce373a21b6b0b00a444699f41fbe8f18e5ae6b0f708514fe36f3665d592d0290ab88c9e92a71467b82c9c526bf71ed51700c692de83fa2d40edcda24b87ef0d222a618f30c462573963ed52cc1c4e112173d49ac39834d7f114d71dad89e1b4d28e46d1cf5ee94717467f3bbd9ca31f99de9784917ca6a253b13c74e23356dc3bd00d6e1efbece1731a5d503fa1923241b582ee76367217addbc19891ada4c343838ecb8843a303b6d6142ec08008f609df4cf94ce316b5a267e4000cf1bf3a2d4a262d2ca689e32e4a358d5979a762ca0135f9d5af46772732b82cc5dca07cb45429af8081198f46d23fc41bbcf531c5ee5dad77a7eb66ae55f36dbffe92c51a26cf1025bd7c625c8d617940a79b8f40510ef5fbc72016a61009dd0afb3ed4f094f8d12f643e3cbb96ef6622590e46e186c1a82505b1aa2dfc0ee69a0e327e7901a9e95fb0f85cdd3b0236bb0f7c689155ad703f40b1243b6abfd94150c177fcf73e14dbccf097e0c4e5f89166dbffdede3e2d70da33d5af9bfbbf22b8a73535c671406835616ff3f3eaebd675036a46c203a44c8a5df9beb7786a3569a46787c0ed6a1d87c6e3eea392369ecb48d7e58cc3cb643d0ed4889c071a763688c8bbdd9e91441b27b53beaa5a7b8bf32a7b7be4fbd70d21330860d52ccc2d08a0ad7fb30c69cefa3859450d99d01c09587d2f5cd1c55cc08c555534f6fadf33632bb020c88a8de52c4d002bdfe73eb3558021d12c2dd5f23dd46f290d867f5fc6e3c15c3cd78fded9d70b7ac833f8870f63606347b1bfa45a343f9e02a9cc1a77dc128ea075ccd1c367de1949075677557569d84b14e361098f19efa4c1df7ee395c0507b8eb4a416578a50a01c52a424fd2e3b8252d2d0cd3f7173acb9b619fe6a85b7cc0c48531ebf23bfe57a6318dce460c694fc46252a24db1963663b5722584a8513478aed1876d9c1a3476838ad5db5c6bb102525fb7f8b5c14fc070702b662c5e932a4d74261b07c7c4b7194612975352201dfacd7b66685f87eb0f8b7e77b52c6eb96db3865ae35d927e5502cbb06ae9b70d1ef7515165e97b3aa693d90b61c1455ff8cfbf9b79720fefb6e9400207fb496bcf94053cc402bae023155292284a4f79674242178c7fea420f58b67f621f997ccf6504c038e4626fe005354a5fb5c50c35899c7573be0be782036d5c2ed651bf3823ca8c614f549f082c9f7e15bdba7eba986d2663184ae3b9772e9a5b0af3700b50e775727214fd03ff32e4cbb4e7996b59b86ad68d5d1499b8716d6a0391d6763f6fd801228865d8a006cfefe5b900ccbf3fdd4fe85145e01e037b3228808529d31cf22d755b9547fb77dd1971377df2ea407cdebe62a6ac705f099449df6d5e2313b216b6fa7d6e4e8be908a3ba657f5ac17f514425fcee79d2407b6978f91757724dd34d92fc12cc9a8cadd4f73ec402e604f3ac8846838e7965df2d25826ecd584ba293e846788fa51da0a94f649374cfefe27bcb6a22cacd10e1e5bb118ca7d84f7a5942cacc1a30b1a038bc8920550955a9c5e632f567e82b177c0b81050aeeefb4d36bff2db4be7f68a77f30020d03cd3a6fb33fc4602eac90d89b099297ef5fb73b7040e017b3445e2883e16d98c1af2205b1ad7dfa35492936d0e1df0e9db25b011a2ebc1789aa5771505ef2acad416ca1a7efdb20069454a133ff1165b0ded79c065924196a1882eb13cad68f4bb1fc2f4a85d797ce5b853eae648ac6e167a7aa49d4368318aa76651e64af3a155fb06e5d3c0b2c84885258782cc81198730587b7eb7f13fe8a91bfd227ca9eb51e5807c41686e8a7f6f85ed7599e7bfb9bd6336cf8b6aee4a5c4724772f694e85013675b018c8b27086fc0b73a221edb383f7a56caf5a142823d409f18d50302bbad0cc797dd97da9b9b6745cb8071a67f4f15009cc6ce6349ec6cdbf450c4965851c4c322e86dc6c66aa2134ec40749c7dff54fe655270246e6d041f24bd4bf7bcfa18d8f99a6971553f7a5535662690a93846591a2a34494feee43067b6b84117056f89c222973a870a9209882bd391e90c140b00c7aae1c520f1ffe877e8c13e7128fbfc052b3c523865b2f1bce04ce34112c5e851a7c9a107cd809be4331b7e504bee39ca7f082ae084b84a41f12268238d435ec01fc747e1b5934dbf7eee86b66dd97f9729f20b322350bfae790d283a3ad1c11fec5b1782fccca43def8da5a38da196905a888ef93dfa5961a46ff170de4b95018743fac2a262694e38e3c7c65774534c7e1bdfba639b6704740d6093008da6468147860929609de7686aa1bc76b841b4034426711ef3ac1b90048fc4a0b3bb29d8b676fba16a6b393f72c339b5f72b11237f42ca1e1deaa142429c5026c5999ca58375e0080c5a86fc802d089c75b098ade5c010a7f58115a4b48f4dc561650e098dc4fffe92295867a737e43f105103b173ef4ed08b28676ce335f67536fc7839701fda777b8c7ed7d26c3e5be9a48ba63a5d0f15ea7085bf58cc8ff236b0b165247f40e673e2141508ed82a28af65e2a64115b20a6a9a8cd6b67461bff1b1639b121bc6fd1b9b46999cf1de3974a3e05a4af0168457812536a074941d109c81b02eedfdf88eefbb7a076d7439ffe5e4a0c6882446fe382d6693c43440e6593352836dcdce0445255598eddd568fc30c6f1cc737ec2485ca025cdd88c01232ffe5f8b4be84d5dfaa1913b0475b97c6d995fb3826f438b59ecc36a68a565523f3a47544cbcac6d1acdfd1268caa49e16465e39e93dc11474edf1727d1169e297cc4bab8dd0ec01ca7b2ad0db80f3e8427a7038e633ead39df5e4a68ce3a463c22720e0f46ef549745e29de4dcf6fd065e98fb09a30ace2b20f800bb3987514d9d4f52841407ca028c6d65e3c19b55847ebec2f11496f9eb6a6fe14018da251a03ff084025a091d926a0cdd8f41180446538ce9866e618d99004cdae2e2cbe9f207a7ab7c8104", 0x1000, 0x1f}], 0x100400c, &(0x7f0000008700)={[{@utf8no}, {@shortname_win95}, {@fat=@dos1xfloppy}, {@shortname_mixed}], [{@fsmagic={'fsmagic', 0x3d, 0x5}}, {@euid_lt={'euid<', r1}}, {@appraise_type}]}) setsockopt$inet_pktinfo(r7, 0x0, 0x8, &(0x7f0000008780)={r0, @multicast2, @local}, 0xc) mount$9p_unix(&(0x7f00000087c0)='./file0/file0\x00', &(0x7f0000008800)='./file2\x00', &(0x7f0000008840), 0x1000004, &(0x7f0000008880)={'trans=unix,', {[{@cache_mmap}, {@access_any}, {@cachetag={'cachetag', 0x3d, '$'}}, {@cache_mmap}], [{@smackfstransmute={'smackfstransmute', 0x3d, ')+'}}, {@obj_user}, {@appraise_type}, {@smackfsfloor={'smackfsfloor', 0x3d, ')}*'}}, {@pcr={'pcr', 0x3d, 0x21}}]}}) mount$tmpfs(0x0, &(0x7f0000008940)='./file1\x00', &(0x7f0000008980), 0x44080, &(0x7f00000089c0)={[{@mpol={'mpol', 0x3d, {'bind', '=relative', @void}}}, {@nr_inodes={'nr_inodes', 0x3d, [0x30, 0x38, 0x6d, 0x67, 0x36, 0x34]}}, {@huge_within_size}], [{@context={'context', 0x3d, 'staff_u'}}, {@appraise}, {@subj_type={'subj_type', 0x3d, '#/'}}, {@subj_role={'subj_role', 0x3d, '()\xc6>'}}, {@subj_type={'subj_type', 0x3d, 'smackfsfloor'}}]}) 23:11:50 executing program 5: ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9}}, './file0\x00'}) sendfile(0xffffffffffffffff, r0, &(0x7f0000000040)=0x80000001, 0xffffffffffffff01) sendfile(r0, r0, 0x0, 0x81) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)=',#],]\x00') sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x0, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x2c}}}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x18e}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000001}, 0x20000800) r1 = accept(r0, &(0x7f00000001c0)=@caif=@dgm, &(0x7f0000000240)=0x80) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r0) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x48, r2, 0x300, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0xd9072ecb1eb9d607}]}, 0x48}, 0x1, 0x0, 0x0, 0x488c0}, 0x20000800) r3 = socket(0x1a, 0x800, 0x4) clock_gettime(0x0, &(0x7f0000002980)={0x0, 0x0}) recvmmsg(r3, &(0x7f0000002740)=[{{&(0x7f0000000400)=@generic, 0x80, &(0x7f0000000580)=[{&(0x7f0000000480)=""/155, 0x9b}, {&(0x7f0000000540)=""/43, 0x2b}], 0x2, &(0x7f00000005c0)=""/163, 0xa3}, 0x8}, {{&(0x7f0000000680)=@pptp={0x18, 0x2, {0x0, @loopback}}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000700)=""/129, 0x81}, {&(0x7f00000007c0)=""/126, 0x7e}, {&(0x7f0000000840)=""/114, 0x72}, {&(0x7f00000008c0)=""/96, 0x60}, {&(0x7f0000000940)=""/116, 0x74}, {&(0x7f00000009c0)=""/127, 0x7f}, {&(0x7f0000000a40)=""/197, 0xc5}], 0x7, &(0x7f0000000bc0)=""/253, 0xfd}, 0x1}, {{&(0x7f0000000cc0)=@can={0x1d, 0x0}, 0x80, &(0x7f0000001280)=[{&(0x7f0000000d40)=""/218, 0xda}, {&(0x7f0000000e40)=""/207, 0xcf}, {&(0x7f0000000f40)=""/237, 0xed}, {&(0x7f0000001040)=""/192, 0xc0}, {&(0x7f0000001100)=""/171, 0xab}, {&(0x7f00000011c0)=""/50, 0x32}, {&(0x7f0000001200)=""/127, 0x7f}], 0x7, &(0x7f0000001300)=""/230, 0xe6}, 0x5}, {{&(0x7f0000001400)=@ax25={{0x3, @netrom}, [@rose, @default, @remote, @rose, @default, @rose, @rose, @bcast]}, 0x80, &(0x7f00000016c0)=[{&(0x7f0000001480)=""/182, 0xb6}, {&(0x7f0000001540)=""/13, 0xd}, {&(0x7f0000001580)=""/127, 0x7f}, {&(0x7f0000001600)=""/184, 0xb8}], 0x4, &(0x7f0000001700)=""/51, 0x33}, 0x7fff}, {{&(0x7f0000001740)=@l2tp6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f00000018c0)=[{&(0x7f00000017c0)=""/91, 0x5b}, {&(0x7f0000001840)=""/115, 0x73}], 0x2, &(0x7f0000001900)=""/116, 0x74}, 0x5}, {{&(0x7f0000001980)=@nfc, 0x80, &(0x7f0000001d00)=[{&(0x7f0000001a00)=""/179, 0xb3}, {&(0x7f0000001ac0)=""/68, 0x44}, {&(0x7f0000001b40)=""/169, 0xa9}, {&(0x7f0000001c00)=""/243, 0xf3}], 0x4}, 0xfff}, {{&(0x7f0000001d40)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000001ec0)=[{&(0x7f0000001dc0)=""/250, 0xfa}], 0x1}, 0x6}, {{&(0x7f0000001f00)=@generic, 0x80, &(0x7f0000002200)=[{&(0x7f0000001f80)=""/52, 0x34}, {&(0x7f0000001fc0)=""/140, 0x8c}, {&(0x7f0000002080)=""/229, 0xe5}, {&(0x7f0000002180)=""/122, 0x7a}], 0x4, &(0x7f0000002240)=""/60, 0x3c}, 0x80000000}, {{&(0x7f0000002280)=@in={0x2, 0x0, @loopback}, 0x80, &(0x7f0000002600)=[{&(0x7f0000002300)=""/21, 0x15}, {&(0x7f0000002340)=""/186, 0xba}, {&(0x7f0000002400)=""/181, 0xb5}, {&(0x7f00000024c0)=""/153, 0x99}, {&(0x7f0000002580)=""/127, 0x7f}], 0x5, &(0x7f0000002680)=""/180, 0xb4}, 0x8001}], 0x9, 0x40000000, &(0x7f00000029c0)={r4, r5+10000000}) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000002b00)={&(0x7f0000002a00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002ac0)={&(0x7f0000002a40)={0x54, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000081}, 0x40000) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f000000a700)={'syztnl2\x00', &(0x7f000000a680)={'ip6gre0\x00', r6, 0x4, 0x77, 0x6, 0x2040, 0x42, @private1={0xfc, 0x1, '\x00', 0x1}, @private1, 0x700, 0x80, 0x3}}) sendmsg$FOU_CMD_GET(r1, &(0x7f000000a800)={&(0x7f0000002b40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f000000a7c0)={&(0x7f000000a740)={0x78, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r7}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_IFINDEX={0x8, 0xb, r6}, @FOU_ATTR_PEER_V6={0x14, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_PEER_V6={0x14, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000840) openat$full(0xffffffffffffff9c, &(0x7f000000a840), 0x80000, 0x0) r8 = accept$inet(r1, &(0x7f000000a880)={0x2, 0x0, @remote}, &(0x7f000000a8c0)=0x10) sendmmsg$sock(r8, &(0x7f000000c440)=[{{0x0, 0x0, &(0x7f000000abc0)=[{&(0x7f000000a900)="223073fcf62b295183a196e8dca24fbb27467939c883f7806cfa67057d800fbf1f55fe0b1d5dd42e61073e650a671979f92b7956e5f018085f2280769c894b578588ac7a70b9e43d8e9753969503cb58ba567fe84cbb218e64211b0e6cb45e71822e12a1d24777396655c67799dd110e8186389d82ba95172d1582053634286069d47c23f5504c1c4c8aad5f4cbf8450a984e22bf68d89eafcc6033e944669128a3a51b9eefe08a93e1d8ecf51649cc00783e61cf5087f1f32bcdb9fd3e2e5a098ef53", 0xc3}, {&(0x7f000000aa00)="4c18c1f57e49f9fcb9719444b011f5d04ac8a6df70f0eca1f752d29daebff74ba624e922dad9a499c70341402aacc3fe14083d161ca59717dc480e8c46856abe8732efe731ceff85d245633d12da6fd9dc9179fa101f8e3b2d0a49abaea9bfe2e28c7480c424211ad5395de2fdb512864a0483feb892e0a86cb5082b010117ceeed045ea3f6037b96ae867deebad2a2b45d71b7fbf9ac1f5529a225ff239306539d09ba3dcc67c7e5739fafb7482169404432ce379bf8191d42e7e4a47e2fa07cfce59be638beef8d1303df44ab79b52f617ef", 0xd3}, {&(0x7f000000ab00)="cf08484e9f302f84fbffc270260cd4a4e8c075fc60f7eecf006c88d6184abf988fe49a6fe5a30b6b728376ea25b8596ae4b59c4d7a494bef81817bba40806a73b375a829fe2d14371f96cf67fe6bf6e33ff7c3c03a32f9dd208d339fb69116e923442f5919ebdd2fbf49349114da3eb40508d3deceb1e22b5ff16f1a7c6a40b3929d465bfe5f31a52075a5a46438e5b74ae3fb3beef46a37ce63", 0x9a}], 0x3, &(0x7f000000ac00)=[@timestamping={{0x14, 0x1, 0x25, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0x5}}, @mark={{0x14, 0x1, 0x24, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x400}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}, @mark={{0x14, 0x1, 0x24, 0x3}}, @mark={{0x14, 0x1, 0x24, 0x2}}], 0xc0}}, {{&(0x7f000000acc0)=@ax25={{0x3, @default, 0x4}, [@null, @bcast, @null, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast]}, 0x80, &(0x7f000000b240)=[{&(0x7f000000ad40)="468b3e768ff80692e0eac3664a6b4884279a0bcd5af8a12dd3120f2ef1da34ff143a4f56b9e96eba70809085af43c7c79e9b6102a51f187b3f1d8d2792421b40594731f72b7399c01778a6ef2cdfc25976a1f31bf61e418e2608", 0x5a}, {&(0x7f000000adc0)}, {&(0x7f000000ae00)="9f0c150621f66c403fcd9ec744eddfb73237c651aee1590ac4a980cc2d01aa8a2aa90a4efa8cebe7db293672bd4560684dbf0436dcff08d3383e68674def7a1196eaa86cce227d0dfeac09310ffbb439af4b0edb9faf7027766a3e4b84d528d1594235ced89cb3618275873cc4544991aee473b154cfbe41162a0be69d8aec77d3c609c0dd3ba9d70b456740a31bf2", 0x8f}, {&(0x7f000000aec0)="14e0c92cb54abbb4e5f6c28ad2f6d76b1bfa259045589da0b35a269027ca741bc49b598dae19182aee476402fd292d935014f95cf9b8fcc1e35518303b6cb97e23b634a49699e6b657ac046edd88bdf0358362985949e079ee28cb6e0897bfb0802cf3a0f5af551cbbd3d3a69e43eb4acf71663e013b96f5d6f4626332ac88703d53fa6cad089336e58ef87788afbf7b866682de6555098719a7d801a692", 0x9e}, {&(0x7f000000af80)="6b46e95bec5464004fbd7cddf04ce82feadae86b7b56ae298e1fa6595ec6333722b51911ff8f7a674ab27a6e67af58750d08b4e690bd45d13cb77ab968c91d036f00d17ad4efb5143eceda3d6cd5dd3e8c9c32ff7e8b4bbb20c0db3ff17fa7a5d872bf6708c87b5fe4aae4cf858e55fa133ffbd1d5c060594a2ea7411dd9d2a609ef90c713bbf1412ec913a5443ae4306aadd7a4c31cc1b15c8e44bfe8eadfe4453765a9b6", 0xa5}, {&(0x7f000000b040)="cd7909ba073a360a3c9110866fed627ed15f6c0a1a986f6a161ffa521670c61fb92b74c94f22fd271025f932d59a1982063e1c2bc6def6182a6a076bd44ea624c8cf976247e6d7c6f63c69271e8824bb94d1bf3f264a217e2c869b59a57296afaceaf442ffd97d97d1dedfaa7364fa542c2e7fd654913f0425081b779183", 0x7e}, {&(0x7f000000b0c0)="35dd36f86bdc395918225a50cd2d42ac389131a19f75a924ee62beab393e11ff3e6105e411d36bfdfb", 0x29}, {&(0x7f000000b100)="fe2528d2842f428b2cda131b8ca50537bcf4b2080f3bedd6dc281474fbefcc66b4d2ac6fdf5e1d7ed19c309ac2af224740ffacdd1f57799b5f0ea17ea6a3f24988432e068313a45329ae9685396b19bbed27a74ee77b", 0x56}, {&(0x7f000000b180)="f49fc280e03cb5fc558d22e96cfac9a64e16d468475a4124d258415b3263e186b36a90a76452f0b624204549533f3e6be798809dd3124a008960e6093b4558592e0a118663c0679632fb3cf90a031cc5098efb9bd3020dd4dfd0c002af47fc1780a4e0c4dfe43a1f61bf7a1af38c01b05aaa8a71d48f008f1fce28d3cdc2c19e61b16a630a570d865ae6b58c688abe69a83033c5c62aed87b2bc3a23c041f11c25dc2b0254b8c83353e5ea01e4f451", 0xaf}], 0x9, &(0x7f000000b300)=[@txtime={{0x18, 0x1, 0x3d, 0x100}}, @mark={{0x14, 0x1, 0x24, 0x6}}, @timestamping={{0x14, 0x1, 0x25, 0x8}}, @mark={{0x14, 0x1, 0x24, 0x8}}, @mark={{0x14, 0x1, 0x24, 0x6}}, @timestamping={{0x14, 0x1, 0x25, 0x3ff}}], 0x90}}, {{0x0, 0x0, &(0x7f000000c3c0)=[{&(0x7f000000b3c0)="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", 0x1000}], 0x1, &(0x7f000000c400)=[@mark={{0x14, 0x1, 0x24, 0x5}}], 0x18}}], 0x3, 0x11) clock_gettime(0x0, &(0x7f000000c540)={0x0, 0x0}) ppoll(&(0x7f000000c500)=[{r1, 0x400}, {r8, 0x865d}, {r3, 0x40}], 0x3, &(0x7f000000c580)={r9, r10+10000000}, &(0x7f000000c5c0)={[0x9140]}, 0x8) ppoll(&(0x7f000000c7c0)=[{0xffffffffffffffff, 0x8000}, {0xffffffffffffffff, 0x4100}, {r3, 0xeb06f14b9a46e7b1}, {0xffffffffffffffff, 0x2120}, {0xffffffffffffffff, 0x8100}, {0xffffffffffffffff, 0x80}, {0xffffffffffffffff, 0x80}, {r3}, {0xffffffffffffffff, 0x208}, {0xffffffffffffffff, 0x3314}], 0xa, &(0x7f000000c880), &(0x7f000000c8c0)={[0x4]}, 0x8) 23:11:50 executing program 2: sched_rr_get_interval(0x0, &(0x7f0000000000)) pselect6(0x40, &(0x7f0000000040)={0x4, 0x4, 0x4b06, 0x2, 0x7fff, 0x10000, 0x7, 0x2}, &(0x7f0000000080)={0xf01, 0x3f, 0xfb7e, 0x100000001, 0x1, 0x0, 0x3, 0x1000}, &(0x7f00000000c0)={0x0, 0x7, 0x7ff, 0x5, 0xceb, 0x7, 0x1, 0x1f}, &(0x7f0000000100)={0x0, 0x989680}, &(0x7f0000000180)={&(0x7f0000000140)={[0xffff]}, 0x8}) r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000009, 0x2010, 0xffffffffffffffff, 0x10000000) r1 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(0x0, r0, &(0x7f0000001680)=@IORING_OP_RECVMSG={0xa, 0x1, 0x0, r1, 0x0, &(0x7f0000001640)={&(0x7f00000001c0)=@un=@abs, 0x80, &(0x7f00000014c0)=[{&(0x7f0000000240)=""/165, 0xa5}, {&(0x7f0000000300)=""/34, 0x22}, {&(0x7f0000000340)=""/222, 0xde}, {&(0x7f0000000440)=""/73, 0x49}, {&(0x7f00000004c0)=""/4096, 0x1000}], 0x5, &(0x7f0000001540)=""/199, 0xc7}, 0x0, 0x21}, 0x80) r2 = socket$inet(0x2, 0x80002, 0xffffff00) ioctl$sock_SIOCDELRT(r2, 0x890c, &(0x7f0000001700)={0x0, @ethernet={0x1, @remote}, @hci={0x1f, 0x4, 0x1}, @hci={0x1f, 0x2, 0x2}, 0x4, 0x0, 0x0, 0x0, 0xff62, &(0x7f00000016c0)='veth1_to_bond\x00', 0x8, 0x7e82, 0x100}) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001780), 0x440200, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f00000017c0)={{0x1, 0x1, 0x18, r3, {0x6}}, './file0\x00'}) sendmsg$TIPC_CMD_SET_NETID(r4, &(0x7f00000018c0)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001880)={&(0x7f0000001840)={0x24, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {{}, {}, {0x8, 0x2, 0x1}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4040805}, 0x80) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001940), r4) sendmsg$NL80211_CMD_FLUSH_PMKSA(r4, &(0x7f0000001a00)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x14, r5, 0x300, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x8080) newfstatat(0xffffffffffffff9c, &(0x7f0000001a40)='./file0\x00', &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) setresgid(0xffffffffffffffff, r6, 0x0) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001b40), r3) sendmsg$IPVS_CMD_GET_CONFIG(r4, &(0x7f0000001c80)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001c40)={&(0x7f0000001b80)={0x9c, r7, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1f}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_vlan\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_hsr\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macsec0\x00'}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20040804}, 0x40040) syz_io_uring_setup(0x1729, &(0x7f0000001cc0)={0x0, 0xee01, 0x2, 0x1, 0x25b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000001d40), &(0x7f0000001d80)) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000001dc0)={@local, @multicast1}, 0xc) 23:11:50 executing program 4: write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)={'#! ', './file0', [{0x20, '.'}, {0x20, '&)*]+'}], 0xa, "fd8ee8a6d817f8e953e23e0236cb4640b66a7af9db5862245f3d7fcf98e48c8c7c7a0359373545a4a0383b4403ebe65e2d79bb834b85db0f530e17c1ab564fe3e18e2d8fde8f835e54061022d7ff0c64948d5684943181d493df1ad46b1554771c46622a8102e40cf367df94dc62cde2925208a4f93c91d93177a1fc4ecd304b1d5d999b3a4fd029cc3eed5ff7661e465942991caa71e7146e85a28efceb95d77f46b4064226d37debbe42061e4fe795ea4e3bb091eb04c4437fa79710a94679354b23e940c042988476bedf78d7cf00"}, 0xe3) r0 = dup(0xffffffffffffffff) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000180)={0x264, 0x0, 0x800, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "68ec2d9e0e10afa73a6df085dcb48d1413128131c838c10c"}], @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "920fb187278ead6a298d8b6e0bafb8b09c324c6bc36b69cb"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "f5f1941b6431baa61b61c90a08ffba95e86ddea65963c46a"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "f45725438bf60a3d5c6cb1104c540660e09e259f8c579ef6"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}], @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "dc7165f70b25cebe926d2f831a031787cf495353be47e01c"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "9429230e8eeb9f97b3c356f561cf01f774b4a9ae38226f51"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}], @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "be10099bb90926b68f2d05abaafdb75774db57cf919bebdc"}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d68ff842f603855f0cdd85bc9bbd4e2a77db95829058e165"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "17ef4f372a06989461536d18ce707cc569782d492a5a89fa"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}]}, 0x264}, 0x1, 0x0, 0x0, 0x4804}, 0x80) syz_mount_image$vfat(&(0x7f0000000480), &(0x7f00000004c0)='./file0\x00', 0x6, 0x4, &(0x7f00000008c0)=[{&(0x7f0000000500)="f33769232a7e3d7e74b1694e5fd3de4816ce9e6eb83542cbe558f41f18ed77161c1e01e2181cace1525d6f30be4232ddd6c866d965c7e013c9db0c5f6388be3f6bcaa563ccaafe834461a56b70d2bb6b915658733c1aa3f3b726bf964af720b7bd7e4b77010c6e12792c1bb95469a65802fbf17114767808d57d414e3c3057940894f6c88bf71ba06807bbcfdb06522d18e6aba79b9636ba05f45693a136754124642db53ccded0dc2bb798f9609f0c3af0a1501340ee7f6d7998e0821ab7484fbdc0ae85820ce88a61fd7713dfe858cb984", 0xd2, 0x800}, {&(0x7f0000000600)="7d4390b834146cba02c460b266c4d9124b56cd82ac642678157f3430401305109a6e0b7c1f8ff6db98660d8aa817fa99127546112f1a3ee07a115bbc39974f1e5491315d2bee8c1c468907fe1b789a9a6c87e2fd7de3f88f66d923417a9fe5cb9fb3d9454964a512b92c240ec03082e8cb2206f2f7edf0a8c83361d32192d24d440223951260f226596ab0cf4da2f0482fe7ae0b3869fc035f9b85f7de540bdc4c3c890502cd568504c4142c41930318914b6f1292e5cc1994ff9948caf50ded96733e95d1ebb2f56be47a32e57b31f0a9214a416c650db8cffac1bbab1ecc573299bcc080f1b5", 0xe7, 0x3}, {&(0x7f0000000700)="2f681fa40c889585d3d2e59fc6ce2f281431d3bb6b5bd74ff341b31623bd2bac5663d4a77a83270ba465fdf9c8e51173a15fcfe7131cac2340bbfaa5d815953dd2cd4234ef3c940fdf2e059efea1ecfb85136883f10b7aa847870bd59a55f9be5662297c5b855795dd85d4989452522348ee10ba72bab170e2e09c73b8b029ceb1c2b525e890a0c1ff4d8e926d32eed7052b898994d9e62f5714d34770e048d3fb21ac18e06bace1ff61df8ead7cb5a5960f601c5ec528566adf1b7b4766493cc33b9b8e6f67dccb332febcba527f61da063", 0xd2}, {&(0x7f0000000800)="2fe53efe1d8d2c9b785d692fa9262843253186876eea0b3ac83ba14102feebb084b9dc68d434d73986ab9c4015c37ce326cb3677f53bd9147ea54ffba0902a7b9b5ddcba673636e3e40dd90e9974befb9adc4a4dddc32003ea050a1dbba78c395aa1cbe6d5a8cded31f5d9d8d7ccb73942f0098dcfed2fccdaeeeea974387019c786256c87480bd2f65066", 0x8b}], 0x20000, &(0x7f0000000940)={[{@uni_xlateno}, {@utf8no}], [{@uid_gt={'uid>', 0xee00}}, {@obj_role={'obj_role', 0x3d, '#! '}}, {@seclabel}]}) execveat(r2, &(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00), &(0x7f0000000ac0)=[&(0x7f0000000a40)='\xff\xff\xff\xff\xff\xff', &(0x7f0000000a80)='\xff\xff\xff\xff\xff\xff'], 0x1000) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40800) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000b00)={{0x1, 0x1, 0x18, r0, {0xffff}}, './file0\x00'}) execveat(r3, &(0x7f0000000b40)='./file0\x00', &(0x7f0000000c00)=[&(0x7f0000000b80)='uni_xlate=0', &(0x7f0000000bc0)=',\x00'], &(0x7f0000000dc0)=[&(0x7f0000000c40)='$/X/})-\x00', &(0x7f0000000c80)='\'}&,#S\xe9]\x00', &(0x7f0000000cc0)='uid>', &(0x7f0000000d00)='.', &(0x7f0000000d40)='&)*]+', &(0x7f0000000d80)='(\xe7\x00'], 0x800) openat(r2, &(0x7f0000000e00)='./file0\x00', 0x101600, 0x18a) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000f40)={0x5, 0xe9, &(0x7f0000000e40)="a21c98eb7efb763efa0b43fe664df49cb05d3ca5b2bcc2e0ceb8401f987645a1fa5a407a7b203d5c9b3e2a4dd9121b5c6eb98b057b58fbe9415e93e39c38e6393696fd218121fd3617ffc5a236b33e0810cefbda9b91dc156c3aac1ba7c184fc68cdfa1bcc0e63cda138bed2de7f39deec3d3e50bd08fecb4c8b01814371f0e691b8f1bc88d805757acbd06d7fc941c83e5da38ff41a5cf330f483d89ad3275bf3ab8126f75aecab23097b2d2b3e5e0b7aa6eab4850eaed5cfd6da0b8b68a61d83ed7b5015329c7e0e1648ecb3910758d628a26ec0d2c3e0ea108c294e9914b2b1f8bc81e387f49507"}) openat(r2, &(0x7f0000000f80)='./file0\x00', 0x20000, 0x0) r4 = creat(&(0x7f0000000fc0)='./file0\x00', 0x13) execveat(r4, &(0x7f0000001000)='./file0/../file0\x00', &(0x7f0000001100)=[&(0x7f0000001040)='.{$\x00', &(0x7f0000001080)='(\xe7\x00', &(0x7f00000010c0)='obj_role'], &(0x7f0000001240)=[&(0x7f0000001140)=',\x00', &(0x7f0000001180)='\xc3-^*$#\x00', &(0x7f00000011c0)='\'-\\:\x00', &(0x7f0000001200)='\x00'], 0x1000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r5, 0x8983, &(0x7f0000001280)={0x3, 'ip6gre0\x00', {0xfffff9dc}, 0xfff7}) pwrite64(r3, &(0x7f00000012c0)="a335826252e76ab4167005227d2ae0250d176384099cde8bb0af7543", 0x1c, 0x45c) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000001400)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000013c0)={&(0x7f0000001340)={0x60, 0x1, 0x4, 0x5, 0x0, 0x0, {0x2}, [@NFULA_CFG_MODE={0xa, 0x2, {0x100, 0x1}}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x8}, @NFULA_CFG_MODE={0xa, 0x2, {0x7fffffff}}, @NFULA_CFG_MODE={0xa, 0x2, {0x6, 0x1}}, @NFULA_CFG_CMD={0x5, 0x1, 0x4}, @NFULA_CFG_NLBUFSIZ={0x8}, @NFULA_CFG_CMD={0x5, 0x1, 0x4}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000001480)=@FILEID_NILFS_WITH_PARENT={0x20, 0x62, {0xffff, 0xa4, 0x0, 0x8, 0x80}}, 0x581000) 23:11:50 executing program 3: mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x600a0, &(0x7f0000000080)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@afid={'afid', 0x3d, 0xfffffffffffffffb}}, {@nodevmap}, {@cachetag}, {@nodevmap}, {@version_u}], [{@fsname}]}}) lgetxattr(&(0x7f0000000140)='./file1\x00', &(0x7f0000000180)=@known='system.advise\x00', &(0x7f00000001c0)=""/27, 0x1b) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xee00}}, './file0\x00'}) recvfrom$unix(r0, &(0x7f0000000240)=""/60, 0x3c, 0x22040, &(0x7f0000000280)=@abs={0x1, 0x0, 0x4e21}, 0x6e) stat(&(0x7f00000003c0)='./file1\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_unix(&(0x7f0000000300)='./file1\x00', &(0x7f0000000340)='./file0/file0\x00', &(0x7f0000000380), 0x1000, &(0x7f0000000480)={'trans=unix,', {[{@access_user}], [{@subj_role={'subj_role', 0x3d, '$#'}}, {@uid_lt={'uid<', r1}}, {@audit}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@seclabel}, {@context={'context', 0x3d, 'staff_u'}}, {@uid_gt={'uid>', r3}}]}}) mknodat$null(r0, &(0x7f0000000540)='./file0/file0\x00', 0x200, 0x103) r4 = socket$unix(0x1, 0x5, 0x0) getsockname$unix(r4, &(0x7f0000000580)=@abs, &(0x7f0000000600)=0x6e) r5 = dup2(r0, 0xffffffffffffffff) r6 = syz_io_uring_complete(0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000640)={{0x1, 0x1, 0x18, r6, {r1, r2}}, './file0\x00'}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000006c0)=@IORING_OP_OPENAT={0x12, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000680)='./file0/file0\x00', 0xe9, 0x10802, 0x23456}, 0x1) bind$unix(r4, &(0x7f0000000700)=@file={0x0, './file1\x00'}, 0x6e) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000780), 0x4000, 0x0) connect$unix(r7, &(0x7f00000007c0)=@file={0x1, './file0\x00'}, 0x6e) recvfrom$unix(r5, &(0x7f0000000840)=""/44, 0x2c, 0x40012020, &(0x7f0000000880)=@file={0x8c64ee844c88d394, './file0/file0\x00'}, 0x6e) bind$unix(r5, &(0x7f0000000900)=@file={0x0, './file0\x00'}, 0x6e) r8 = accept4$bt_l2cap(r0, &(0x7f0000000980), &(0x7f00000009c0)=0xe, 0x80800) getpeername(r8, &(0x7f0000000a00)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000a80)=0x80) 23:11:50 executing program 7: getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000000)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@mcast1}}, &(0x7f0000000100)=0xe8) fstat(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f00000001c0)={0xa0, 0x19, 0x1, {0x112, {0x0, 0x3, 0x4}, 0x8, r1, r3, 0x100000001, 0x6f, 0x0, 0x1, 0x22e, 0x8, 0x2, 0x0, 0x5, 0x0, 0x6, 0x2a2, 0x2, 0x4, 0x9}}, 0xa0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x202100, 0x52) write$P9_RLOPEN(r4, &(0x7f00000002c0)={0x18, 0xd, 0x1, {{0x10, 0x2, 0x1}, 0x62521205}}, 0x18) r5 = geteuid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000000300)={{0x1, 0x1, 0x18, r4, {r2, r3}}, './file0\x00'}) write$P9_RGETATTR(r4, &(0x7f0000000340)={0xa0, 0x19, 0x2, {0x4, {0x38, 0x0, 0x1}, 0x0, r5, r7, 0x8, 0x7f, 0x4, 0x200, 0x0, 0x4, 0x100000000, 0xfff, 0xfffffffffffffff7, 0x2, 0x7, 0x1, 0x8001, 0x40, 0x40}}, 0xa0) write$P9_RGETATTR(r6, &(0x7f0000000400)={0xa0, 0x19, 0x1, {0x4400, {0x80, 0x2, 0x7}, 0x42, r5, r3, 0x100, 0xffffffff, 0x6, 0x8, 0x6, 0x2, 0x3e4, 0x3ff, 0x20, 0x79, 0x1, 0x8000, 0x4, 0xdfee, 0x2}}, 0xa0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000540)={'gretap0\x00', &(0x7f00000004c0)={'syztnl1\x00', r0, 0x40, 0x700, 0x1, 0x80, {{0xd, 0x4, 0x0, 0x5, 0x34, 0x66, 0x0, 0x20, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, {[@lsrr={0x83, 0x1f, 0x4e, [@loopback, @multicast2, @multicast1, @private=0xa010100, @empty, @multicast1, @dev={0xac, 0x14, 0x14, 0x3f}]}]}}}}}) write$P9_RGETATTR(r6, &(0x7f0000000580)={0xa0, 0x19, 0x1, {0x10, {0x8, 0x3, 0x5}, 0x28, r2, r7, 0x4, 0x1, 0x3, 0x3, 0xb0, 0x7, 0x10000, 0x6, 0x1000, 0x7, 0x3, 0x8001, 0x2, 0x3f, 0x2}}, 0xa0) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000640)={r0, 0x1, 0x6, @local}, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl2\x00', 0x0, 0x4, 0xf8, 0x4, 0x7a7, 0x2, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1, 0x20, 0x3, 0x9}}) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000740)={r8, 0x1, 0x6, @remote}, 0x10) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000780)={r0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x10) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f00000007c0)=0x1) r9 = syz_open_dev$rtc(&(0x7f0000000800), 0x2, 0x10b000) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r9, &(0x7f0000000840)={0xd0000000}) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000880)={{{@in6=@mcast1, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@remote}}, &(0x7f0000000980)=0xe8) write$P9_RGETATTR(r6, &(0x7f00000009c0)={0xa0, 0x19, 0x1, {0xc0, {0x2, 0x0, 0x7}, 0x25, r10, r7, 0x7, 0x0, 0x7, 0x7fff, 0x4000000, 0x1f, 0x3ff, 0x3, 0x8000, 0x3, 0x8, 0xfffffffffffffffe, 0x2, 0x2, 0x3}}, 0xa0) 23:11:50 executing program 6: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0xfffffffffffffffb, 0x400000) r1 = signalfd4(r0, &(0x7f0000000040)={[0x7]}, 0x8, 0x800) ioctl$BINDER_GET_FROZEN_INFO(r0, 0xc00c620f, &(0x7f0000000080)={0xffffffffffffffff}) rt_sigsuspend(&(0x7f00000000c0)={[0xa57]}, 0x8) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r1, 0x942e, 0x0) r2 = openat(r0, &(0x7f0000000100)='./file0\x00', 0x0, 0xd0) r3 = dup2(r0, r2) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000140)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000180)=0x400) fspick(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x1) r5 = perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x5, 0x0, 0x5, 0x1f, 0x0, 0x80000000, 0x1402, 0x6, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x5, 0x993dba95306ee160, @perf_config_ext={0x3ff}, 0x40, 0x101, 0x1, 0x1, 0x200, 0x5, 0x6f, 0x0, 0xea92, 0x0, 0x81}, 0x0, 0x3, 0xffffffffffffffff, 0x2) rt_sigsuspend(&(0x7f0000000280)={[0x4]}, 0x8) sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0xc0100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x84, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r0}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000000}, 0x400c841) r6 = epoll_create(0xfffffdc2) epoll_pwait(r6, &(0x7f0000000440)=[{}, {}, {}, {}], 0x4, 0x7, &(0x7f0000000480)={[0xb3]}, 0x8) socket$inet6_udp(0xa, 0x2, 0x0) r7 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs2/binder-control\x00', 0x2, 0x0) close_range(r7, r5, 0x0) r8 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000500), 0x143040, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r8, &(0x7f0000000540)) [ 83.377717] audit: type=1400 audit(1756595511.034:7): avc: denied { execmem } for pid=273 comm="syz-executor.7" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 84.582216] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.584351] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 84.586791] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 84.589141] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.590953] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 84.591308] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.596011] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 84.597524] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 84.599952] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 84.603975] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.606064] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 84.610707] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 84.610734] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 84.614922] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 84.620510] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 84.639167] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 84.650894] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 84.650987] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 84.659400] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 84.661636] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 84.663117] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 84.664860] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 84.666106] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 84.669139] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 84.671707] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 84.673330] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 84.680255] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 84.681794] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 84.683739] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 84.685747] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 84.728155] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 84.735710] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 84.742155] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 84.744857] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 84.760976] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 84.764786] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 84.769038] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 84.770160] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 84.783139] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 84.787172] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 86.661120] Bluetooth: hci2: command tx timeout [ 86.724558] Bluetooth: hci5: command tx timeout [ 86.725129] Bluetooth: hci0: command tx timeout [ 86.725166] Bluetooth: hci3: command tx timeout [ 86.725860] Bluetooth: hci4: command tx timeout [ 86.726473] Bluetooth: hci1: command tx timeout [ 86.854476] Bluetooth: hci7: command tx timeout [ 86.855160] Bluetooth: hci6: command tx timeout [ 88.708961] Bluetooth: hci2: command tx timeout [ 88.772943] Bluetooth: hci4: command tx timeout [ 88.773369] Bluetooth: hci0: command tx timeout [ 88.774335] Bluetooth: hci3: command tx timeout [ 88.774736] Bluetooth: hci5: command tx timeout [ 88.775154] Bluetooth: hci1: command tx timeout [ 88.901864] Bluetooth: hci6: command tx timeout [ 88.902310] Bluetooth: hci7: command tx timeout [ 90.757483] Bluetooth: hci2: command tx timeout [ 90.820604] Bluetooth: hci1: command tx timeout [ 90.821023] Bluetooth: hci5: command tx timeout [ 90.821400] Bluetooth: hci3: command tx timeout [ 90.822689] Bluetooth: hci0: command tx timeout [ 90.823075] Bluetooth: hci4: command tx timeout [ 90.948839] Bluetooth: hci7: command tx timeout [ 90.949027] Bluetooth: hci6: command tx timeout [ 92.804638] Bluetooth: hci2: command tx timeout [ 92.870498] Bluetooth: hci3: command tx timeout [ 92.870521] Bluetooth: hci4: command tx timeout [ 92.870556] Bluetooth: hci0: command tx timeout [ 92.871278] Bluetooth: hci5: command tx timeout [ 92.871742] Bluetooth: hci1: command tx timeout [ 92.997152] Bluetooth: hci7: command tx timeout [ 92.998156] Bluetooth: hci6: command tx timeout [ 121.891628] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.892313] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.116099] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.117200] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.621557] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 122.972040] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.972691] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 23:12:30 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) ioctl$BLKIOMIN(r1, 0x40081271, &(0x7f00000029c0)) [ 123.095973] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.096622] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 23:12:30 executing program 2: setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)="d9543038a1b282d50a0127a3fe787904192e365d99dfc335cf588132eba1a51d12f95180d319ee1e7666ca07423b043d77f268a4db33451cf00ae47cb045f9bc4e0385ab32e07ac5000000000000000032", 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x101400, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) r1 = fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r3 = dup(r2) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) setsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000200)={r4, r5/1000+10000}, 0x10) sendmmsg$inet6(r3, &(0x7f0000001e00)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f00000002c0)={0xa, 0x0, 0xffffffc0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c, 0x0}}], 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'ip6erspan0\x00'}) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f00000000c0)) 23:12:31 executing program 2: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0xe8, 0x0, 0x0, 0xff, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x841d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x40002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0x400c6615, &(0x7f00000000c0)={0x0, @aes128, 0x0, @desc2}) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r3 = memfd_secret(0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, r2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r2) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r2) fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') syz_open_procfs(0x0, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) syz_open_procfs(0x0, 0x0) r5 = add_key(&(0x7f0000000500)='id_legacy\x00', 0x0, &(0x7f0000000780)="d8", 0x1, 0xffffffffffffffff) keyctl$get_security(0x3, r5, 0x0, 0x0) [ 123.495579] audit: type=1400 audit(1756595551.147:8): avc: denied { open } for pid=3667 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 123.510439] audit: type=1400 audit(1756595551.147:9): avc: denied { kernel } for pid=3667 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 124.189860] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.190489] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.301104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.301856] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.426489] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.427124] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.505927] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.506676] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.505262] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.505983] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.570819] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.571822] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.790803] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.791462] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.856821] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.857680] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.967991] loop4: detected capacity change from 0 to 8 [ 126.017194] loop4: detected capacity change from 0 to 8 [ 126.359295] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.359948] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.381931] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.382919] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.408633] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.409205] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.445406] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.446187] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 23:12:47 executing program 0: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x80811501, &(0x7f0000000240)) r1 = accept$inet(r0, 0x0, &(0x7f0000000000)) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000040)={0x7, 0xe422, 0x2, 0x101, 0x1, [0x6, 0x800, 0x401, 0xee]}) 23:12:47 executing program 1: recvmmsg$unix(0xffffffffffffffff, &(0x7f00000010c0)=[{{&(0x7f0000000000), 0x6e, &(0x7f00000003c0)=[{&(0x7f0000000080)=""/137, 0x89}, {&(0x7f0000000140)=""/1, 0x1}, {&(0x7f0000000180)=""/133, 0x85}, {&(0x7f0000000240)=""/123, 0x7b}, {&(0x7f00000002c0)=""/231, 0xe7}], 0x5, &(0x7f0000000440)=[@rights={{0x10}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x70}}, {{&(0x7f0000000500)=@abs, 0x6e, &(0x7f0000000980)}}, {{&(0x7f0000000a00), 0x6e, &(0x7f0000000a80)=[{&(0x7f0000001440)=""/225, 0xe1}, {&(0x7f0000000c80)=""/185, 0xb9}], 0x2, &(0x7f0000000d40)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x158}}, {{&(0x7f0000000ec0), 0x6e, &(0x7f0000001080)}}], 0x4, 0x40002143, &(0x7f00000011c0)={0x0, 0x3938700}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000001540)) openat$hpet(0xffffffffffffff9c, &(0x7f0000001400), 0x40000, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r4 = dup(r3) sendmmsg$inet6(r4, &(0x7f0000001e00)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f00000002c0)={0xa, 0x0, 0xffffffc0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c, 0x0}}], 0x2, 0x0) timerfd_settime(r4, 0x0, &(0x7f0000000580)={{0x77359400}, {0x77359400}}, &(0x7f00000005c0)) syz_mount_image$tmpfs(&(0x7f00000007c0), &(0x7f0000000800)='./file0\x00', 0xfffffffffffff52f, 0x4, &(0x7f0000000ac0)=[{&(0x7f0000000840)="ab", 0x1}, {&(0x7f00000008c0)="1b", 0x1}, {0x0}, {0x0, 0x0, 0x6}], 0x8, &(0x7f0000000b40)=ANY=[@ANYBLOB='size=1,huge=advise,defcontex4=sysadm_u,\x00']) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000600)={0x0, 0x1, 0x6, @broadcast}, 0x10) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r2, 0x40089413, &(0x7f00000004c0)=0xffff) 23:12:47 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6d6, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r1 = openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000001c0)=ANY=[@ANYBLOB='2']) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000640)) listxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)=""/199, 0xc7) syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f0000001480), 0x0, &(0x7f0000001540)={[{@session={'session', 0x3d, 0x4a}}, {@overriderock}, {@session}]}) fspick(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x0) mount(&(0x7f0000000300)=@loop={'/dev/loop', 0x0}, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='dax\x00', 0x2300088, &(0x7f00000003c0)='%[\x00') io_setup(0x9b7f, &(0x7f0000000080)) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) syz_mount_image$tmpfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x800, 0x2, &(0x7f0000000540)=[{&(0x7f0000000480)="c67c", 0x2, 0x3}, {&(0x7f00000004c0)="a7db6a5e67f9557c74be6c96b8785f3b87367d749f91b0571f5799f485b1983c3ba0703d9e007364937ce533ab00f7e62d94cc0c0197c3e0b173484ce3ee325b6ce7ebfade728c2cefb59f0cdc6cb40ab0e65cda16e82ef41c0d1e8fdba06c3eb44003bf3faa342b894ca9e45e7dd54374945369baf77db4", 0x78, 0x2}], 0x10a4, &(0x7f0000000580)={[{@size={'size', 0x3d, [0x33]}}, {@huge_within_size}, {@mode={'mode', 0x3d, 0x1}}, {@huge_never}, {@nr_inodes={'nr_inodes', 0x3d, [0x38, 0x37, 0x65, 0x38, 0x2d]}}, {@huge_never}, {@huge_advise}], [{@obj_type={'obj_type', 0x3d, ']&[^[^\x88'}}, {@fsmagic={'fsmagic', 0x3d, 0xffffffffffffff01}}]}) 23:12:47 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x2, 0x40080, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/10, 0xa}], 0x1) sync() sync() epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, 0x0) dup2(r1, r2) 23:12:47 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = eventfd2(0x0, 0x0) io_setup(0x2, &(0x7f0000000080)=0x0) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='ramfs\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000040)='./file0/file0\x00', 0x0) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x11) perf_event_open(&(0x7f0000000c80)={0x3, 0x80, 0x7, 0x5, 0x8, 0x6, 0x0, 0x5, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0xefe, 0x2, @perf_config_ext={0x7fff, 0x436f}, 0x80, 0x57ff, 0x1, 0x3, 0x4, 0x4, 0xf39, 0x0, 0x10000, 0x0, 0x7}, 0xffffffffffffffff, 0x6, r3, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', &(0x7f00000001c0), 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) io_submit(r1, 0x2, &(0x7f0000003f40)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f00000003c0)="c41fc8df8e306a88296dc1454c1de06e0156618c150a161b5d391c17c7a06c29bed22099377ea0c7016a4b5107a4add21a22c780d656e5e7fda8236c9690c15a17aec72c33da656f652b75b6203bd78576e3e64acb159f5756db3d303754db1d33c9810378f6e61a8c7cf02f3c3e3101e937457fe6e32d2b6dca962f70fc8eb1536845e613c8f52f0bfbb17b4c879006c9665a87f975d7f87826", 0x9a, 0x0, 0x0, 0x1, r0}, 0x0]) r5 = accept(r2, &(0x7f0000000240)=@in6={0xa, 0x0, 0x0, @dev}, &(0x7f0000000140)=0x80) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r4, 0xc400941d, &(0x7f0000000480)={0x0, 0x80000000, 0x8, 0x1}) ioctl$BTRFS_IOC_BALANCE_V2(r5, 0xc4009420, &(0x7f0000000880)={0xc, 0x2, {0x0, @struct={0x6, 0xcd1}, r6, 0x0, 0x10000, 0x7ed3, 0x0, 0x4, 0x4a7, @usage=0x1, 0x6, 0xd7, [0x1, 0x9, 0xbc, 0x26ac, 0x3, 0x27c9]}, {0x7fffffff, @struct={0xfffffc00, 0x1}, 0x0, 0xffffffffffff1074, 0x0, 0x1, 0x1, 0xffffffffffffff80, 0x60, @struct={0x1, 0x1}, 0xfa000000, 0x80000001, [0x3f, 0x9, 0x10001, 0x5, 0x3, 0xffffffff]}, {0x8, @usage=0x1, 0x0, 0x80000001, 0x4, 0xbc1, 0x0, 0x7, 0x80, @usage=0x7, 0x8001, 0xc5, [0x1, 0x7, 0x100000000, 0x3999, 0x10001, 0x58a]}, {0x2, 0x81, 0x8}}) 23:12:47 executing program 3: r0 = syz_mount_image$msdos(&(0x7f0000000980), &(0x7f00000009c0)='./file1\x00', 0x0, 0x0, &(0x7f0000000e80), 0x0, &(0x7f0000000f40)) symlinkat(&(0x7f0000000000)='./file1\x00', r0, &(0x7f0000000040)='./file1\x00') 23:12:47 executing program 4: perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffff81202c80}, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0x0) close(r0) 23:12:47 executing program 2: r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)="0dff10df0af30654470ae171d49d21dba7c0bcab3420d2d0bf4172a26739cc587771ab2da9c58c8c2cff0efa6b74d94bee32476eff8506a658ed46b41b8fbbf23a05f957c35163a9b0af885543d97bba28db5ec181135ec876ddbdd0e314ed59e4857f51c708371039307794ac07885d3c31ad910a40b004b171051ab4628794353a8953296967a19d4a38c36a5ba1d2cfdbc460ca5b0f5e608073b5013eeada1c08778dd2ea5512a58dea6cf13d8b765ae42a1d046ca6051db7a066f55f14f15dc1338f546cb817b96412afad0342c02e5d1775ab3df397028e7567eef1a8545352dce0c28b0b9d362b7a", 0xeb, 0xfffffffffffffffc) keyctl$assume_authority(0x10, r0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x1a81022, &(0x7f0000000240)={[], [{@uid_eq={'uid', 0x3d, 0xee01}}]}) [ 139.983291] I/O error, dev loop5, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 139.984139] isofs_fill_super: bread failed, dev=loop5, iso_blknum=16, block=32 [ 140.019974] loop5: detected capacity change from 0 to 4 [ 140.050972] kmemleak: Found object by alias at 0x607f1a638234 [ 140.050989] CPU: 0 UID: 0 PID: 3956 Comm: syz-executor.0 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 140.051007] Tainted: [W]=WARN [ 140.051010] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 140.051017] Call Trace: [ 140.051021] [ 140.051026] dump_stack_lvl+0xca/0x120 [ 140.051048] __lookup_object+0x94/0xb0 [ 140.051064] delete_object_full+0x27/0x70 [ 140.051080] free_percpu+0x30/0x1160 [ 140.051095] ? arch_uprobe_clear_state+0x16/0x140 [ 140.051115] futex_hash_free+0x38/0xc0 [ 140.051129] mmput+0x2d3/0x390 [ 140.051147] do_exit+0x79d/0x2970 [ 140.051161] ? signal_wake_up_state+0x85/0x120 [ 140.051177] ? zap_other_threads+0x2b9/0x3a0 [ 140.051193] ? __pfx_do_exit+0x10/0x10 [ 140.051205] ? do_group_exit+0x1c3/0x2a0 [ 140.051218] ? lock_release+0xc8/0x290 [ 140.051235] do_group_exit+0xd3/0x2a0 [ 140.051250] __x64_sys_exit_group+0x3e/0x50 [ 140.051264] x64_sys_call+0x18c5/0x18d0 [ 140.051278] do_syscall_64+0xbf/0x360 [ 140.051294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.051306] RIP: 0033:0x7ff1bcfb1b19 [ 140.051315] Code: Unable to access opcode bytes at 0x7ff1bcfb1aef. [ 140.051320] RSP: 002b:00007ffe0e63fa38 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 140.051331] RAX: ffffffffffffffda RBX: 000000000000001e RCX: 00007ff1bcfb1b19 [ 140.051338] RDX: 00007ff1bcf6472b RSI: ffffffffffffffbc RDI: 0000000000000000 [ 140.051346] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000001 [ 140.051352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 140.051359] R13: 0000000000000001 R14: 0000000000000001 R15: 00007ffe0e63fb20 [ 140.051375] [ 140.051379] kmemleak: Object (percpu) 0x607f1a638230 (size 8): [ 140.051385] kmemleak: comm "syz-executor.1", pid 286, jiffies 4294790983 [ 140.051392] kmemleak: min_count = 1 [ 140.051396] kmemleak: count = 1 [ 140.051400] kmemleak: flags = 0x21 [ 140.051404] kmemleak: checksum = 0 [ 140.051407] kmemleak: backtrace: [ 140.051411] pcpu_alloc_noprof+0x87a/0x1170 [ 140.051425] __alloc_workqueue+0x74b/0x1820 [ 140.051442] alloc_workqueue_noprof+0xc7/0x200 [ 140.051451] ieee80211_register_hw+0x1ec5/0x3e00 [ 140.051463] mac80211_hwsim_new_radio+0x2758/0x4ef0 [ 140.051476] hwsim_new_radio_nl+0xb0d/0x1250 [ 140.051487] genl_family_rcv_msg_doit+0x1fe/0x2f0 [ 140.051497] genl_rcv_msg+0x532/0x7e0 [ 140.051506] netlink_rcv_skb+0x147/0x430 [ 140.051521] genl_rcv+0x28/0x40 [ 140.051529] netlink_unicast+0x5a7/0x870 [ 140.051544] netlink_sendmsg+0x8ac/0xd80 [ 140.051559] __sys_sendto+0x506/0x570 [ 140.051573] __x64_sys_sendto+0xe1/0x1c0 [ 140.051586] do_syscall_64+0xbf/0x360 [ 140.051594] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.078896] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 140.079661] FAT-fs (loop3): unable to read boot sector [ 140.094926] kmemleak: Cannot insert 0x607f1a638234 into the object search tree (overlaps existing) [ 140.094940] CPU: 0 UID: 0 PID: 3948 Comm: syz-executor.5 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 140.094961] Tainted: [W]=WARN [ 140.094965] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 140.094972] Call Trace: [ 140.094976] [ 140.094980] dump_stack_lvl+0xca/0x120 [ 140.095005] __link_object+0x190/0x210 [ 140.095022] __create_object+0x48/0x80 [ 140.095040] pcpu_alloc_noprof+0x87a/0x1170 [ 140.095063] __percpu_init_rwsem+0x2d/0x160 [ 140.095079] ? security_sb_alloc+0x75/0x140 [ 140.095097] alloc_super+0x29e/0xb80 [ 140.095112] ? __pfx_super_s_dev_test+0x10/0x10 [ 140.095129] sget_fc+0xfe/0xb80 [ 140.095140] ? __pfx_super_s_dev_set+0x10/0x10 [ 140.095159] get_tree_bdev_flags+0x1b8/0x620 [ 140.095170] ? __pfx_isofs_fill_super+0x10/0x10 [ 140.095187] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 140.095199] ? cap_capable+0xdb/0x3b0 [ 140.095216] ? security_capable+0x2f/0x90 [ 140.095232] vfs_get_tree+0x93/0x340 [ 140.095250] path_mount+0x132d/0x1dd0 [ 140.095265] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 140.095280] ? __pfx_path_mount+0x10/0x10 [ 140.095293] ? kmem_cache_free+0x2a1/0x540 [ 140.095304] ? putname.part.0+0x11b/0x160 [ 140.095321] ? getname_flags.part.0+0x1c6/0x540 [ 140.095339] ? putname.part.0+0x11b/0x160 [ 140.095357] __x64_sys_mount+0x27b/0x300 [ 140.095371] ? __pfx___x64_sys_mount+0x10/0x10 [ 140.095390] do_syscall_64+0xbf/0x360 [ 140.095401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.095413] RIP: 0033:0x7f6bfbb9904a [ 140.095422] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 140.095434] RSP: 002b:00007f6bf910cfa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 140.095445] RAX: ffffffffffffffda RBX: 0000000020001480 RCX: 00007f6bfbb9904a [ 140.095453] RDX: 00000000200000c0 RSI: 0000000020000140 RDI: 00007f6bf910d000 [ 140.095461] RBP: 00007f6bf910d040 R08: 00007f6bf910d040 R09: 00000000200000c0 [ 140.095469] R10: 0000000000000001 R11: 0000000000000206 R12: 00000000200000c0 [ 140.095476] R13: 0000000020000140 R14: 00007f6bf910d000 R15: 0000000020001540 [ 140.095492] [ 140.095935] kmemleak: Kernel memory leak detector disabled [ 140.095939] kmemleak: Object (percpu) 0x607f1a638230 (size 8): [ 140.095946] kmemleak: comm "syz-executor.1", pid 286, jiffies 4294790983 [ 140.095953] kmemleak: min_count = 1 [ 140.095957] kmemleak: count = 1 [ 140.095961] kmemleak: flags = 0x21 [ 140.095964] kmemleak: checksum = 0 [ 140.095968] kmemleak: backtrace: [ 140.095971] pcpu_alloc_noprof+0x87a/0x1170 [ 140.095987] __alloc_workqueue+0x74b/0x1820 [ 140.096005] alloc_workqueue_noprof+0xc7/0x200 [ 140.096014] ieee80211_register_hw+0x1ec5/0x3e00 [ 140.096026] mac80211_hwsim_new_radio+0x2758/0x4ef0 [ 140.096039] hwsim_new_radio_nl+0xb0d/0x1250 [ 140.096050] genl_family_rcv_msg_doit+0x1fe/0x2f0 [ 140.096060] genl_rcv_msg+0x532/0x7e0 [ 140.096069] netlink_rcv_skb+0x147/0x430 [ 140.096085] genl_rcv+0x28/0x40 [ 140.096093] netlink_unicast+0x5a7/0x870 [ 140.096108] netlink_sendmsg+0x8ac/0xd80 [ 140.096124] __sys_sendto+0x506/0x570 [ 140.096138] __x64_sys_sendto+0xe1/0x1c0 [ 140.096151] do_syscall_64+0xbf/0x360 [ 140.096160] entry_SYSCALL_64_after_hwframe+0x77/0x7f 23:12:47 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000000580)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000540)={&(0x7f00000000c0)={0x458, r1, 0x102, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0xb8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa2f}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe8d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xafdc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3b}]}]}, @TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x100}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffffffff}]}, @TIPC_NLA_BEARER={0xf0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'ipvlan0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @broadcast}}, {0x14, 0x2, @in={0x2, 0x4e20, @remote}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x6, @private1, 0x8}}, {0x14, 0x2, @in={0x2, 0x4e24, @private=0xa010100}}}}, @TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'ip6gretap0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @empty}}, {0x14, 0x2, @in={0x2, 0x4e23, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'xfrm0\x00'}}]}, @TIPC_NLA_NODE={0xe8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xdb, 0x3, "a26e20fdae600ede97f400ab2e69e1ba0433be92f3e3346ffa6321bb59d999acefad82101f273a4b56bc791dec0b3b2948bada092cc16901310dcb5d8a4627ef7ae8a025c23bb1f639dcad7421a8f9ad5017d203aef4751df755e1dc60852b6ec005257bf1b6a274ebbe397a55ca2d7a24dcfef77042658bd4d568b6e6430a53f653c625fc617e72ea95eef86fcf540e9973369608aa11c10da4a69c77d05d211113e191ed161d67009b7129c5bbbca06ff09de3f78da011d6be237a965b664b9cd3fd478d9c0035f64ecba6afd95523bd68b101604d0a"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1ca}]}, @TIPC_NLA_MEDIA={0x7c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}]}, @TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x80}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3f}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8001}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x10001}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8001}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x101}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffffff7f}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xf}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffffffd}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x10001}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}]}, @TIPC_NLA_NODE={0x1c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffffff20}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xfff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}]}, 0x458}, 0x1, 0x0, 0x0, 0x490c0}, 0x1) r2 = syz_io_uring_setup(0x2e5, &(0x7f00000005c0)={0x0, 0x0, 0x2, 0x0, 0x1b8}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r2, 0x0) [ 140.135553] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 23:12:47 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r1, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@NL80211_ATTR_DFS_REGION={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c054}, 0x14000) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)={0x2c, r1, 0x5, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_SUPP_RATES={0xffffffffffffff8e, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_6GHZ={0x5, 0x3, "ae"}]}]}, 0x2c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001b000100060021006159"], 0x2c}}, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000125bd7000fddbdf25690000003603000001000000344000000500d34004010000"], 0x28}, 0x1, 0x0, 0x0, 0x4014}, 0x20000000) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_STRSET_GET(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x20, r5, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x20}}, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) sendmsg$NL80211_CMD_SET_WIPHY(r6, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x1c, r9, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004011}, 0x40090) 23:12:47 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x140, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) syz_read_part_table(0x10000000000000, 0xaaaaaaaaaaaaa50, &(0x7f0000000180)=[{&(0x7f00000000c0)="82446e35b09e1b61a79203f8daeda5aea3698c48a61fd42afd2ee1ab90492756b1dcb4f4fd", 0xfffffffe}]) [ 140.137445] FAT-fs (loop3): unable to read boot sector [ 140.158743] kmemleak: Automatic memory scanning thread ended [ 140.228137] I/O error, dev loop5, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 140.231621] isofs_fill_super: bread failed, dev=loop5, iso_blknum=16, block=32 [ 140.258723] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 140.325797] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 140.463405] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. SYZFAIL: failed to write(kmemleak, "scan") (errno 1: Operation not permitted) BUG: leak checking failed VM DIAGNOSIS: 23:12:49 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=ffff888009617960 RCX=ffff8880096177cc RDX=0000000000000000 RSI=ffffffff85c1c760 RDI=ffff888009601f7c RBP=dffffc0000000000 RSP=ffff888009617878 R8 =0000000000000001 R9 =ffff888009617908 R10=000000000003be53 R11=0000000000004433 R12=ffffed10012c2f1b R13=ffffed10012c2f1a R14=ffff888009617910 R15=ffff8880096178c8 RIP=ffffffff8135adce RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e55dd000 00000000 00000000 LDT=0000 fffffe4c00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fd0c3147308 CR3=000000000d21a000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=91ee4f0744dae8fe4c16ac3191e7a215 XMM02=b236525e32509a5dcab9ffc7902d040a XMM03=c67fb1bed675f8ddfe5d542451a601c7 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=0d0c0f0e09080b0a0504070601000302 XMM07=0e0d0c0f0a09080b0605040702010003 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=ffffffff87aa3330 RBX=ffff888045d1b700 RCX=0000000000000100 RDX=0000000000000008 RSI=ffff888045d1c180 RDI=ffff888045d1c158 RBP=ffff888045d1c158 RSP=ffff888047b7fb58 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=ffff888045d1c180 R13=464c55cfb5d6152c R14=0000000000000001 R15=0000000000000001 RIP=ffffffff8151c464 RFL=00000086 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fd0c2b758c0 00000000 00000000 GS =0000 ffff8880e56dd000 00000000 00000000 LDT=0000 fffffe1600000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055b7385f0aa8 CR3=0000000045911000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=372f6b636f6c622f7665642f7379732f XMM01=00323a372f6b636f6c622f7665642f73 XMM02=00ff0000000000000000000000000000 XMM03=696e656420737365636341002f737973 XMM04=000055b7385768a0000055b738581430 XMM05=00ff000000ff02020000000100000008 XMM06=0000000900000003000055b73857e420 XMM07=00000000000000000000000000000000 XMM08=610064253a64252f6b636f6c622f7665 XMM09=00000000000000000000000000000000 XMM10=00000000000020000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000