Warning: Permanently added '[localhost]:32418' (ECDSA) to the list of known hosts.
2025/08/29 15:49:35 fuzzer started
2025/08/29 15:49:35 dialing manager at localhost:43077
syzkaller login: [   58.419668] cgroup: Unknown subsys name 'net'
[   58.501616] cgroup: Unknown subsys name 'cpuset'
[   58.516600] cgroup: Unknown subsys name 'rlimit'
2025/08/29 15:49:46 syscalls: 2214
2025/08/29 15:49:46 code coverage: enabled
2025/08/29 15:49:46 comparison tracing: enabled
2025/08/29 15:49:46 extra coverage: enabled
2025/08/29 15:49:46 setuid sandbox: enabled
2025/08/29 15:49:46 namespace sandbox: enabled
2025/08/29 15:49:46 Android sandbox: enabled
2025/08/29 15:49:46 fault injection: enabled
2025/08/29 15:49:46 leak checking: enabled
2025/08/29 15:49:46 net packet injection: enabled
2025/08/29 15:49:46 net device setup: enabled
2025/08/29 15:49:46 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/08/29 15:49:46 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/08/29 15:49:46 USB emulation: enabled
2025/08/29 15:49:46 hci packet injection: enabled
2025/08/29 15:49:46 wifi device emulation: enabled
2025/08/29 15:49:46 802.15.4 emulation: enabled
2025/08/29 15:49:46 fetching corpus: 50, signal 20745/22568 (executing program)
2025/08/29 15:49:46 fetching corpus: 100, signal 33632/37004 (executing program)
2025/08/29 15:49:46 fetching corpus: 150, signal 40452/45299 (executing program)
2025/08/29 15:49:46 fetching corpus: 200, signal 48928/55038 (executing program)
2025/08/29 15:49:46 fetching corpus: 250, signal 54762/62110 (executing program)
2025/08/29 15:49:46 fetching corpus: 300, signal 60164/68679 (executing program)
2025/08/29 15:49:46 fetching corpus: 350, signal 64020/73676 (executing program)
2025/08/29 15:49:47 fetching corpus: 400, signal 67316/78087 (executing program)
2025/08/29 15:49:47 fetching corpus: 450, signal 70903/82710 (executing program)
2025/08/29 15:49:47 fetching corpus: 500, signal 73684/86539 (executing program)
2025/08/29 15:49:47 fetching corpus: 550, signal 77128/90921 (executing program)
2025/08/29 15:49:47 fetching corpus: 600, signal 79700/94429 (executing program)
2025/08/29 15:49:47 fetching corpus: 650, signal 82009/97719 (executing program)
2025/08/29 15:49:47 fetching corpus: 700, signal 85566/102032 (executing program)
2025/08/29 15:49:47 fetching corpus: 750, signal 88043/105348 (executing program)
2025/08/29 15:49:47 fetching corpus: 800, signal 91884/109706 (executing program)
2025/08/29 15:49:47 fetching corpus: 850, signal 93140/111852 (executing program)
2025/08/29 15:49:47 fetching corpus: 900, signal 95066/114544 (executing program)
2025/08/29 15:49:48 fetching corpus: 950, signal 97315/117438 (executing program)
2025/08/29 15:49:48 fetching corpus: 1000, signal 98878/119703 (executing program)
2025/08/29 15:49:48 fetching corpus: 1050, signal 100619/122144 (executing program)
2025/08/29 15:49:48 fetching corpus: 1100, signal 102104/124356 (executing program)
2025/08/29 15:49:48 fetching corpus: 1150, signal 103420/126475 (executing program)
2025/08/29 15:49:48 fetching corpus: 1200, signal 105168/128880 (executing program)
2025/08/29 15:49:48 fetching corpus: 1250, signal 107169/131342 (executing program)
2025/08/29 15:49:48 fetching corpus: 1300, signal 108575/133346 (executing program)
2025/08/29 15:49:48 fetching corpus: 1350, signal 110023/135346 (executing program)
2025/08/29 15:49:48 fetching corpus: 1400, signal 111376/137261 (executing program)
2025/08/29 15:49:48 fetching corpus: 1450, signal 112481/138985 (executing program)
2025/08/29 15:49:49 fetching corpus: 1500, signal 113685/140776 (executing program)
2025/08/29 15:49:49 fetching corpus: 1550, signal 114894/142535 (executing program)
2025/08/29 15:49:49 fetching corpus: 1600, signal 115680/143938 (executing program)
2025/08/29 15:49:49 fetching corpus: 1650, signal 116967/145711 (executing program)
2025/08/29 15:49:49 fetching corpus: 1700, signal 117870/147192 (executing program)
2025/08/29 15:49:49 fetching corpus: 1750, signal 119143/148907 (executing program)
2025/08/29 15:49:49 fetching corpus: 1800, signal 120876/150888 (executing program)
2025/08/29 15:49:49 fetching corpus: 1850, signal 121971/152420 (executing program)
2025/08/29 15:49:49 fetching corpus: 1900, signal 123486/154191 (executing program)
2025/08/29 15:49:49 fetching corpus: 1950, signal 124732/155731 (executing program)
2025/08/29 15:49:49 fetching corpus: 2000, signal 125777/157177 (executing program)
2025/08/29 15:49:49 fetching corpus: 2050, signal 126566/158445 (executing program)
2025/08/29 15:49:49 fetching corpus: 2100, signal 127210/159638 (executing program)
2025/08/29 15:49:50 fetching corpus: 2150, signal 127972/160865 (executing program)
2025/08/29 15:49:50 fetching corpus: 2200, signal 128920/162191 (executing program)
2025/08/29 15:49:50 fetching corpus: 2250, signal 129483/163251 (executing program)
2025/08/29 15:49:50 fetching corpus: 2300, signal 129995/164262 (executing program)
2025/08/29 15:49:50 fetching corpus: 2350, signal 130704/165389 (executing program)
2025/08/29 15:49:50 fetching corpus: 2400, signal 131688/166639 (executing program)
2025/08/29 15:49:50 fetching corpus: 2450, signal 132728/167917 (executing program)
2025/08/29 15:49:50 fetching corpus: 2500, signal 133530/169079 (executing program)
2025/08/29 15:49:50 fetching corpus: 2550, signal 134223/170128 (executing program)
2025/08/29 15:49:50 fetching corpus: 2600, signal 135047/171233 (executing program)
2025/08/29 15:49:50 fetching corpus: 2650, signal 135614/172184 (executing program)
2025/08/29 15:49:50 fetching corpus: 2700, signal 136271/173198 (executing program)
2025/08/29 15:49:51 fetching corpus: 2750, signal 137080/174287 (executing program)
2025/08/29 15:49:51 fetching corpus: 2800, signal 137726/175274 (executing program)
2025/08/29 15:49:51 fetching corpus: 2850, signal 138398/176258 (executing program)
2025/08/29 15:49:51 fetching corpus: 2900, signal 138975/177120 (executing program)
2025/08/29 15:49:51 fetching corpus: 2950, signal 139722/178089 (executing program)
2025/08/29 15:49:51 fetching corpus: 3000, signal 140406/178997 (executing program)
2025/08/29 15:49:51 fetching corpus: 3050, signal 141083/179930 (executing program)
2025/08/29 15:49:51 fetching corpus: 3100, signal 141560/180753 (executing program)
2025/08/29 15:49:51 fetching corpus: 3150, signal 142528/181776 (executing program)
2025/08/29 15:49:51 fetching corpus: 3200, signal 143130/182610 (executing program)
2025/08/29 15:49:52 fetching corpus: 3250, signal 143917/183496 (executing program)
2025/08/29 15:49:52 fetching corpus: 3300, signal 144563/184272 (executing program)
2025/08/29 15:49:52 fetching corpus: 3350, signal 144962/185015 (executing program)
2025/08/29 15:49:52 fetching corpus: 3400, signal 145481/185840 (executing program)
2025/08/29 15:49:52 fetching corpus: 3450, signal 146086/186643 (executing program)
2025/08/29 15:49:52 fetching corpus: 3500, signal 146580/187369 (executing program)
2025/08/29 15:49:52 fetching corpus: 3550, signal 147269/188183 (executing program)
2025/08/29 15:49:52 fetching corpus: 3600, signal 147762/188906 (executing program)
2025/08/29 15:49:52 fetching corpus: 3650, signal 148684/189788 (executing program)
2025/08/29 15:49:52 fetching corpus: 3700, signal 149419/190626 (executing program)
2025/08/29 15:49:52 fetching corpus: 3750, signal 149923/191361 (executing program)
2025/08/29 15:49:52 fetching corpus: 3800, signal 150424/192014 (executing program)
2025/08/29 15:49:53 fetching corpus: 3850, signal 150882/192675 (executing program)
2025/08/29 15:49:53 fetching corpus: 3900, signal 151826/193430 (executing program)
2025/08/29 15:49:53 fetching corpus: 3950, signal 152290/194079 (executing program)
2025/08/29 15:49:53 fetching corpus: 4000, signal 152803/194712 (executing program)
2025/08/29 15:49:53 fetching corpus: 4050, signal 153267/195365 (executing program)
2025/08/29 15:49:53 fetching corpus: 4100, signal 153900/196019 (executing program)
2025/08/29 15:49:53 fetching corpus: 4150, signal 154284/196587 (executing program)
2025/08/29 15:49:53 fetching corpus: 4200, signal 154830/197378 (executing program)
2025/08/29 15:49:53 fetching corpus: 4250, signal 155279/197951 (executing program)
2025/08/29 15:49:53 fetching corpus: 4300, signal 155681/198543 (executing program)
2025/08/29 15:49:53 fetching corpus: 4350, signal 156174/199122 (executing program)
2025/08/29 15:49:53 fetching corpus: 4400, signal 156648/199692 (executing program)
2025/08/29 15:49:53 fetching corpus: 4450, signal 157116/200244 (executing program)
2025/08/29 15:49:54 fetching corpus: 4500, signal 157631/200849 (executing program)
2025/08/29 15:49:54 fetching corpus: 4550, signal 158166/201416 (executing program)
2025/08/29 15:49:54 fetching corpus: 4600, signal 158768/201912 (executing program)
2025/08/29 15:49:54 fetching corpus: 4650, signal 159201/202424 (executing program)
2025/08/29 15:49:54 fetching corpus: 4700, signal 159632/202923 (executing program)
2025/08/29 15:49:54 fetching corpus: 4750, signal 160171/203452 (executing program)
2025/08/29 15:49:54 fetching corpus: 4800, signal 160664/203936 (executing program)
2025/08/29 15:49:54 fetching corpus: 4850, signal 161133/204468 (executing program)
2025/08/29 15:49:54 fetching corpus: 4900, signal 161610/204959 (executing program)
2025/08/29 15:49:54 fetching corpus: 4950, signal 161947/205437 (executing program)
2025/08/29 15:49:54 fetching corpus: 5000, signal 162463/205935 (executing program)
2025/08/29 15:49:55 fetching corpus: 5049, signal 162880/206261 (executing program)
2025/08/29 15:49:55 fetching corpus: 5099, signal 163394/206261 (executing program)
2025/08/29 15:49:55 fetching corpus: 5149, signal 163761/206274 (executing program)
2025/08/29 15:49:55 fetching corpus: 5199, signal 164200/206293 (executing program)
2025/08/29 15:49:55 fetching corpus: 5249, signal 164547/206301 (executing program)
2025/08/29 15:49:55 fetching corpus: 5299, signal 165138/206311 (executing program)
2025/08/29 15:49:55 fetching corpus: 5349, signal 165582/206320 (executing program)
2025/08/29 15:49:55 fetching corpus: 5399, signal 165895/206346 (executing program)
2025/08/29 15:49:55 fetching corpus: 5449, signal 166507/206346 (executing program)
2025/08/29 15:49:55 fetching corpus: 5499, signal 166902/206348 (executing program)
2025/08/29 15:49:55 fetching corpus: 5549, signal 167487/206514 (executing program)
2025/08/29 15:49:55 fetching corpus: 5599, signal 167785/206516 (executing program)
2025/08/29 15:49:56 fetching corpus: 5649, signal 168046/206516 (executing program)
2025/08/29 15:49:56 fetching corpus: 5699, signal 168542/206521 (executing program)
2025/08/29 15:49:56 fetching corpus: 5749, signal 168917/206529 (executing program)
2025/08/29 15:49:56 fetching corpus: 5799, signal 169505/206530 (executing program)
2025/08/29 15:49:56 fetching corpus: 5849, signal 169879/206532 (executing program)
2025/08/29 15:49:56 fetching corpus: 5899, signal 170249/206554 (executing program)
2025/08/29 15:49:56 fetching corpus: 5949, signal 170719/206558 (executing program)
2025/08/29 15:49:56 fetching corpus: 5999, signal 170960/206561 (executing program)
2025/08/29 15:49:56 fetching corpus: 6049, signal 171378/206573 (executing program)
2025/08/29 15:49:56 fetching corpus: 6099, signal 171673/206592 (executing program)
2025/08/29 15:49:56 fetching corpus: 6149, signal 172032/206613 (executing program)
2025/08/29 15:49:56 fetching corpus: 6199, signal 172484/206618 (executing program)
2025/08/29 15:49:57 fetching corpus: 6249, signal 172767/206620 (executing program)
2025/08/29 15:49:57 fetching corpus: 6299, signal 173415/206749 (executing program)
2025/08/29 15:49:57 fetching corpus: 6349, signal 173747/206750 (executing program)
2025/08/29 15:49:57 fetching corpus: 6399, signal 174010/206765 (executing program)
2025/08/29 15:49:57 fetching corpus: 6449, signal 174236/206771 (executing program)
2025/08/29 15:49:57 fetching corpus: 6499, signal 174564/206771 (executing program)
2025/08/29 15:49:57 fetching corpus: 6549, signal 174871/206796 (executing program)
2025/08/29 15:49:57 fetching corpus: 6599, signal 175177/206800 (executing program)
2025/08/29 15:49:57 fetching corpus: 6649, signal 175504/206814 (executing program)
2025/08/29 15:49:57 fetching corpus: 6699, signal 175716/206814 (executing program)
2025/08/29 15:49:57 fetching corpus: 6749, signal 175969/206821 (executing program)
2025/08/29 15:49:57 fetching corpus: 6799, signal 176298/206821 (executing program)
2025/08/29 15:49:58 fetching corpus: 6849, signal 176571/206825 (executing program)
2025/08/29 15:49:58 fetching corpus: 6899, signal 176856/206835 (executing program)
2025/08/29 15:49:58 fetching corpus: 6949, signal 177113/206840 (executing program)
2025/08/29 15:49:58 fetching corpus: 6999, signal 177510/206844 (executing program)
2025/08/29 15:49:58 fetching corpus: 7049, signal 177794/206846 (executing program)
2025/08/29 15:49:58 fetching corpus: 7099, signal 177997/206855 (executing program)
2025/08/29 15:49:58 fetching corpus: 7149, signal 178485/206860 (executing program)
2025/08/29 15:49:58 fetching corpus: 7199, signal 178844/206872 (executing program)
2025/08/29 15:49:58 fetching corpus: 7249, signal 179149/206881 (executing program)
2025/08/29 15:49:58 fetching corpus: 7299, signal 179424/206888 (executing program)
2025/08/29 15:49:58 fetching corpus: 7349, signal 179647/206888 (executing program)
2025/08/29 15:49:58 fetching corpus: 7399, signal 179885/206888 (executing program)
2025/08/29 15:49:59 fetching corpus: 7449, signal 180166/206891 (executing program)
2025/08/29 15:49:59 fetching corpus: 7499, signal 180387/206902 (executing program)
2025/08/29 15:49:59 fetching corpus: 7549, signal 180719/206914 (executing program)
2025/08/29 15:49:59 fetching corpus: 7599, signal 181059/206916 (executing program)
2025/08/29 15:49:59 fetching corpus: 7649, signal 181439/206919 (executing program)
2025/08/29 15:49:59 fetching corpus: 7699, signal 181833/206936 (executing program)
2025/08/29 15:49:59 fetching corpus: 7749, signal 182062/206947 (executing program)
2025/08/29 15:49:59 fetching corpus: 7799, signal 182424/206947 (executing program)
2025/08/29 15:49:59 fetching corpus: 7849, signal 182668/206955 (executing program)
2025/08/29 15:49:59 fetching corpus: 7899, signal 182958/207003 (executing program)
2025/08/29 15:49:59 fetching corpus: 7949, signal 183108/207012 (executing program)
2025/08/29 15:50:00 fetching corpus: 7999, signal 183367/207012 (executing program)
2025/08/29 15:50:00 fetching corpus: 8049, signal 183638/207019 (executing program)
2025/08/29 15:50:00 fetching corpus: 8099, signal 184114/207021 (executing program)
2025/08/29 15:50:00 fetching corpus: 8149, signal 184542/207026 (executing program)
2025/08/29 15:50:00 fetching corpus: 8199, signal 184785/207073 (executing program)
2025/08/29 15:50:00 fetching corpus: 8249, signal 185011/207077 (executing program)
2025/08/29 15:50:00 fetching corpus: 8299, signal 185485/207082 (executing program)
2025/08/29 15:50:00 fetching corpus: 8349, signal 185849/207095 (executing program)
2025/08/29 15:50:00 fetching corpus: 8399, signal 186065/207104 (executing program)
2025/08/29 15:50:00 fetching corpus: 8449, signal 186309/207108 (executing program)
2025/08/29 15:50:00 fetching corpus: 8499, signal 186520/207117 (executing program)
2025/08/29 15:50:00 fetching corpus: 8549, signal 186724/207118 (executing program)
2025/08/29 15:50:01 fetching corpus: 8599, signal 186953/207122 (executing program)
2025/08/29 15:50:01 fetching corpus: 8649, signal 187299/207122 (executing program)
2025/08/29 15:50:01 fetching corpus: 8699, signal 187707/207122 (executing program)
2025/08/29 15:50:01 fetching corpus: 8749, signal 187914/207129 (executing program)
2025/08/29 15:50:01 fetching corpus: 8799, signal 188176/207129 (executing program)
2025/08/29 15:50:01 fetching corpus: 8849, signal 188490/207132 (executing program)
2025/08/29 15:50:01 fetching corpus: 8899, signal 188642/207145 (executing program)
2025/08/29 15:50:01 fetching corpus: 8949, signal 188892/207148 (executing program)
2025/08/29 15:50:01 fetching corpus: 8999, signal 189730/207173 (executing program)
2025/08/29 15:50:01 fetching corpus: 9049, signal 189996/207185 (executing program)
2025/08/29 15:50:01 fetching corpus: 9099, signal 190315/207186 (executing program)
2025/08/29 15:50:01 fetching corpus: 9149, signal 190596/207188 (executing program)
2025/08/29 15:50:01 fetching corpus: 9199, signal 190810/207195 (executing program)
2025/08/29 15:50:02 fetching corpus: 9249, signal 191081/207197 (executing program)
2025/08/29 15:50:02 fetching corpus: 9299, signal 191359/207199 (executing program)
2025/08/29 15:50:02 fetching corpus: 9349, signal 191578/207202 (executing program)
2025/08/29 15:50:02 fetching corpus: 9399, signal 191835/207216 (executing program)
2025/08/29 15:50:02 fetching corpus: 9449, signal 192162/207216 (executing program)
2025/08/29 15:50:02 fetching corpus: 9499, signal 192347/207221 (executing program)
2025/08/29 15:50:02 fetching corpus: 9549, signal 192541/207222 (executing program)
2025/08/29 15:50:02 fetching corpus: 9599, signal 192753/207226 (executing program)
2025/08/29 15:50:02 fetching corpus: 9649, signal 193075/207231 (executing program)
2025/08/29 15:50:02 fetching corpus: 9699, signal 193254/207244 (executing program)
2025/08/29 15:50:02 fetching corpus: 9749, signal 193581/207245 (executing program)
2025/08/29 15:50:02 fetching corpus: 9799, signal 193804/207251 (executing program)
2025/08/29 15:50:02 fetching corpus: 9849, signal 194008/207270 (executing program)
2025/08/29 15:50:02 fetching corpus: 9899, signal 194357/207275 (executing program)
2025/08/29 15:50:02 fetching corpus: 9949, signal 194585/207281 (executing program)
2025/08/29 15:50:03 fetching corpus: 9999, signal 194816/207292 (executing program)
2025/08/29 15:50:03 fetching corpus: 10049, signal 195144/207292 (executing program)
2025/08/29 15:50:03 fetching corpus: 10099, signal 195307/207299 (executing program)
2025/08/29 15:50:03 fetching corpus: 10149, signal 195552/207301 (executing program)
2025/08/29 15:50:03 fetching corpus: 10199, signal 195808/207320 (executing program)
2025/08/29 15:50:03 fetching corpus: 10249, signal 196059/207362 (executing program)
2025/08/29 15:50:03 fetching corpus: 10299, signal 196363/207369 (executing program)
2025/08/29 15:50:03 fetching corpus: 10349, signal 196566/207398 (executing program)
2025/08/29 15:50:03 fetching corpus: 10399, signal 196804/207421 (executing program)
2025/08/29 15:50:03 fetching corpus: 10449, signal 197191/207442 (executing program)
2025/08/29 15:50:03 fetching corpus: 10499, signal 197419/207447 (executing program)
2025/08/29 15:50:03 fetching corpus: 10549, signal 197688/207448 (executing program)
2025/08/29 15:50:03 fetching corpus: 10599, signal 197898/207470 (executing program)
2025/08/29 15:50:03 fetching corpus: 10649, signal 198191/207474 (executing program)
2025/08/29 15:50:03 fetching corpus: 10699, signal 198382/207474 (executing program)
2025/08/29 15:50:03 fetching corpus: 10749, signal 198677/207494 (executing program)
2025/08/29 15:50:03 fetching corpus: 10799, signal 198917/207510 (executing program)
2025/08/29 15:50:03 fetching corpus: 10849, signal 199213/207514 (executing program)
2025/08/29 15:50:03 fetching corpus: 10899, signal 199381/207522 (executing program)
2025/08/29 15:50:03 fetching corpus: 10949, signal 199634/207524 (executing program)
2025/08/29 15:50:04 fetching corpus: 10999, signal 199826/207525 (executing program)
2025/08/29 15:50:04 fetching corpus: 11049, signal 200081/207530 (executing program)
2025/08/29 15:50:04 fetching corpus: 11099, signal 200264/207544 (executing program)
2025/08/29 15:50:04 fetching corpus: 11149, signal 200465/207555 (executing program)
2025/08/29 15:50:04 fetching corpus: 11199, signal 200693/207562 (executing program)
2025/08/29 15:50:04 fetching corpus: 11249, signal 200894/207570 (executing program)
2025/08/29 15:50:04 fetching corpus: 11299, signal 201063/207571 (executing program)
2025/08/29 15:50:04 fetching corpus: 11349, signal 201254/207575 (executing program)
2025/08/29 15:50:04 fetching corpus: 11399, signal 201477/207581 (executing program)
2025/08/29 15:50:04 fetching corpus: 11449, signal 201622/207582 (executing program)
2025/08/29 15:50:04 fetching corpus: 11499, signal 201873/207591 (executing program)
2025/08/29 15:50:04 fetching corpus: 11527, signal 201968/207591 (executing program)
2025/08/29 15:50:04 fetching corpus: 11527, signal 201968/207591 (executing program)
2025/08/29 15:50:07 starting 8 fuzzer processes
15:50:07 executing program 0:
r0 = syz_io_uring_setup(0x329f, &(0x7f0000000000)={0x0, 0xe51c, 0x2, 0x2, 0x1e0}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f00000000c0))
syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x1, 0x0, @fd, 0x0, 0x0, 0x0, {0x200}, 0x1}, 0xfffffff7)
r2 = signalfd4(r0, &(0x7f0000000140)={[0xf800000000000000]}, 0x8, 0x800)
r3 = syz_open_dev$usbmon(&(0x7f0000000180), 0x1000, 0x200400)
r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x20100, 0x190)
io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000200)=[r0, r2, r0, r3, r4, r0, r5, r0], 0x8)
pread64(r0, &(0x7f0000000240)=""/4096, 0x1000, 0x4)
rmdir(&(0x7f0000001240)='./file0\x00')
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000001280)={{0x1, 0x1, 0x18, <r6=>r3, {0x2}}, './file0/file0\x00'})
sendmsg$802154_raw(r6, &(0x7f0000001400)={&(0x7f00000012c0)={0x24, @short}, 0x14, &(0x7f00000013c0)={&(0x7f0000001300)="c5a6f949d50210094f788c78931b1fc374639eb077b9f96a593bad740137f0c27c2b91321fae6be484ea5100699b4b9241443f0b5496ee810e3ac28156897446d368ce43c5dbe51068099fa6aa3509ed2bb6d70d4414d0a0df852e7afa3cdfc6fd306c28a02f1ef92925a5178dd1b1b2f4d571b22a527f2e80b25f0130cced148f353cff85b0fd866dd293237c99097484941c7eb1b98d585eddfcac52c6e54b4f06010a80ef161a1aead3161f3aa228eada", 0xb2}, 0x1, 0x0, 0x0, 0x24040840}, 0x24000040)
recvfrom(r2, &(0x7f0000001440)=""/68, 0x44, 0x10100, &(0x7f00000014c0)=@can, 0x80)
r7 = syz_open_dev$tty20(0xc, 0x4, 0x0)
r8 = openat$autofs(0xffffffffffffff9c, &(0x7f0000002a80), 0x200, 0x0)
close_range(r7, r8, 0x0)
r9 = socket$nl_audit(0x10, 0x3, 0x9)
r10 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
recvfrom(r9, &(0x7f0000002ac0)=""/172, 0xac, 0x12023, &(0x7f0000002b80)=@pppol2tpv3={0x18, 0x1, {0x0, r10, {0x2, 0x4e24, @loopback}, 0x2, 0x2, 0x2, 0x1}}, 0x80)
r11 = openat$bsg(0xffffffffffffff9c, &(0x7f0000002c00), 0x200000, 0x0)
write$P9_RSTATu(r11, &(0x7f0000002d80)={0x73, 0x7d, 0x2, {{0x0, 0x51, 0x4, 0x3, {0x4, 0x4, 0x6}, 0x340c0000, 0x0, 0x5, 0x93e, 0xd, '/dev/usbmon#\x00', 0x4, '#\\.-', 0xc, '/dev/autofs\x00', 0x1, '\x00'}, 0xd, '/dev/usbmon#\x00', 0xee01, 0xee00}}, 0x73)

15:50:07 executing program 1:
ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x3, 'wg2\x00', {0x4}, 0x101})
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x104001}, 0xc, &(0x7f00000008c0)={&(0x7f00000000c0)={0x7fc, r0, 0x20, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_NAN_FUNC={0x144, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_RX_MATCH_FILTER={0x134, 0xd, 0x0, 0x1, [{0xa2, 0x0, "994ebeb8ef359beaee472075f92e33a693bdce2ebbc6afd4fbbba58bc3ca2ff316db4eac0c8f9d18e6f80052b4b2fbdd450a18367290a04c63712632ffa7c5c9302f3dfda2047b74f6ff458c6a3d28cfd29df640ebe0a2967150d44927b9ef57d6375255c32f27f43ddee91b7a1e7ad998ecdf107f24946975de87b3a5fd812978fb23fc747864869bb52b598a6b440481407925c02c4497bd384d9f10bb"}, {0x28, 0x0, "1f213d8499c66e31515c22d850c80c86cdce9bbad26224ac92d073029743dea97cb29aab"}, {0x64, 0x0, "4ee55bc027fa7fa2b69a0f1ab494d7ced5812424e63769332f9d38dc7760c8c35c48f3f5585f8e771d0e5a5d94cdce7f615e27341545a0d11671a3a9656281d177cf1e4b447744301757484e2482ee2b319f236d9f8e4517081a42f024a7fef0"}]}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @device_b}]}, @NL80211_ATTR_NAN_FUNC={0x20, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "569cb219337d"}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x8}]}, @NL80211_ATTR_NAN_FUNC={0x238, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SRF={0x120, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0xfe}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x9}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x40}]}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0xec, 0xe, 0x0, 0x1, [{0x22, 0x0, "c54dedfabdbf80ebae6d56477fb027cb9932d7bb61c1b50f9a9da6840618"}, {0xc2, 0x0, "f270650200620bdfedbbe23ea02bcb5f822eebfdb67b71e0e6651609f15f36dcc270544a48243ed4c566b5b2043034146e9febcd8e95462dad10a120dc18b47ee1c24533af2109ff4341bf3bd2a712255653c0c2a383c0f7d74c62e56bf8877d764fd088b24d849d99b4647fe1a947e9c30808ff2592f78ba6c79a9c82a8788155b9b2f72b8c2685a061bf1f6d35fc7f5bdb332a663821c15b454f9d560e4f387bdf9fd0569ce91393ba532fd338ff97437528597ae35003be09cb84672f"}]}, @NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x1}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x1}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x8}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x5}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x5}]}, @NL80211_ATTR_NAN_FUNC={0x44c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0x3a8, 0xe, 0x0, 0x1, [{0x103, 0x0, "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"}, {0xf3, 0x0, "b15e51992ca89e378e07d31223c81be06739a6fb2098c06d70e062934f83c327586168e00413f916601c16dca7b2f899d0553e84f163f0653d98896d58c3110f5ed589f3f60c786ce3cdab1911a27b22e2beda7a70612b8e8d8b799c6d1df3b3757336004643916eea4bc37dce7e460714e1cd89ea32114a51424242a558d3bc96029251b5dad0de86c1a1ed950f223ac26f0831f681d2ca663f53dfbf3fb876ffdfa86b1b588ad82653ea2397a41e6618b4085af8c4e1355d0fb9de825f3306291f8d48c05d4f44509efe42f32464bf0c1ae4e7434c8379cf139ed2b43f0435b5bdd21c04bf4d697cdd1b1c9eaba2"}, {0x47, 0x0, "fe43dce752d4c78e9821b8c399f4a526564817a2b3f7168b50560571482c42a19debb169bbf63674fc9dc4ab7f3737530b45d1d9c33e7186d168b7beea3036ad1f759b"}, {0x6e, 0x0, "bd34c8336c61d408b45bf936c376d94636545d0ee26b134711edaa94ce24cdc1f277bba54600595c8f2692c0e5eddb0c55f6457ec721140c6b47df9044a1696a103f358c1bacdb633c1e228a0e71ad0b96f536bd981ca257497197d2ef6dfb8808f73cd17aa038e5556c"}, {0xf3, 0x0, "7e610cb32a4af446fe41a7043571d8c2e53cb3bb49b830be54052c0c321869d84f41eaaaec743c01a2b2e9310cb508209ec5421a4531f7e3b9aa6c91e6b3fa54fcc8e40b34bc17d9e7651daaceab8e4f6ae74402b34d90a291d8d2bb81a9a9d8b072cec226035d1768c13618d5f6ae0178e80763f9c338e4e75d7b1f425e152820bf7f5c56f275b6563fb5a341bfe35dc14d6435f2290b6d1d44b82a19e9ba04fc43e1fd673ca9a3896502df1d144f2fedd57e440f6c34053fefaf25389ca237f08a0d5822deecfc7af4509303a047802b90191d9de030021920645d3fad5a7d101c09d805e15931cdc72c835f2398"}]}, @NL80211_NAN_FUNC_SERVICE_INFO={0x9c, 0xb, "63c2dd7ba09a860c2a831a1f90541aa84780fb43dd56405d9b55c0289d80f58d42d315ee813555916482bacf2b86b9a88716775d745aac7ea814a741ee068db67d82c7b7ce56f5b6ade87cdcb43a29d93a7d36f72607d9133b805a0b146482f440eff5d12295b2e60e06ab1a6755ea9a56ba08199162875a0fa5d5eb4690a5d8c6107a6873f4f1f59c4dc67014a8202833e1f5ef56fce7dc"}]}]}, 0x7fc}, 0x1, 0x0, 0x0, 0x800}, 0x20008834)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000940), 0x6e, &(0x7f0000000a00)=[{&(0x7f00000009c0)=""/46, 0x2e}], 0x1}, 0x40010000)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x800210}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x74, r0, 0x200, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x53}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x97b}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x120}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_MAC_HINT={0xa, 0xc8, @random="c49b442567a9"}, @NL80211_ATTR_MAC_HINT={0xa, 0xc8, @random="26aaf0c762ec"}]}, 0x74}, 0x1, 0x0, 0x0, 0x40000}, 0x10)
r1 = openat(0xffffffffffffffff, &(0x7f0000000bc0)='./file0\x00', 0x208001, 0xc2)
mkdirat(r1, &(0x7f0000000c00)='./file0\x00', 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c80), r1)
sendmsg$NL80211_CMD_SET_PMKSA(r1, &(0x7f0000000d80)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x5c, r2, 0x4, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x1}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x6}, @NL80211_ATTR_PMKID={0x14, 0x55, "c7e708dd779705eab392a03c221c06e6"}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x4}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x62}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x29}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4044054}, 0x4008000)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000001000)={0x53, 0xfffffffffffffffb, 0x9a, 0xb6, @buffer={0x0, 0xdf, &(0x7f0000000dc0)=""/223}, &(0x7f0000000ec0)="7bea05ce32063ec0617a2ee95adcedfc8050b5feb0da8aaeea86674a419fb394473290d09c48ccbceeafc4be34301c770cd5abe1ede6ce907d5f615454eeec890bcfa8cfb5e2463534acad21715f40cb6939994c10a1a952c58f330b40114d17e85be549c914133a3974de33549b67fcb970decc810ddb8225c53b9b400ce3f6cdd063a795447b36c331dd851d05c2daa95bbf0310438b9bf1a2", &(0x7f0000000f80)=""/46, 0x8, 0x10015, 0xffffffffffffffff, &(0x7f0000000fc0)})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001080)={'macvlan0\x00'})
close(r1)
clone3(&(0x7f0000001280)={0x20208000, &(0x7f00000010c0), &(0x7f0000001100)=<r3=>0x0, &(0x7f0000001140), {0x1a}, &(0x7f0000001180)=""/64, 0x40, &(0x7f00000011c0)=""/102, &(0x7f0000001240)=[0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x6, {r1}}, 0x58)
ptrace$getregset(0x4204, r3, 0x2, &(0x7f0000001400)={&(0x7f0000001300)=""/196, 0xc4})
r4 = clone3(&(0x7f00000015c0)={0x80000, &(0x7f0000001440), &(0x7f0000001480), &(0x7f00000014c0), {0xb}, &(0x7f0000001500)=""/53, 0x35, &(0x7f0000001540)=""/35, &(0x7f0000001580)=[r3], 0x1, {r1}}, 0x58)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
pwrite64(r5, &(0x7f0000001640)="5f76672cf18af3b06cf10e08bed9c45922ea43f7a3467fe0bdb0de8edcbc24e36d8ef4c193d824a61cd5a54169a531930b23dcafaf5db4022f8be6b2e7c45c899298f0fd286bce1da65033fa9526de0746370cd56334f2996826c75ddd6184ccba3ebdd7dbea0275890ee185720ff6bec612ba43748b8d8800b94a123ddba02d13836584ee25dd10e55979054efc29e4abaf53259fc37f7cf3265f5c15e3", 0x9e, 0x1)
r6 = getpid()
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000001940)={{0x1, 0x1, 0x18, <r7=>r5, {0x5}}, './file0\x00'})
clone3(&(0x7f0000001980)={0x200305100, &(0x7f0000001700), &(0x7f0000001740), &(0x7f0000001780), {0xc}, &(0x7f00000017c0)=""/195, 0xc3, &(0x7f00000018c0)=""/30, &(0x7f0000001900)=[r6, r4], 0x2, {r7}}, 0x58)

15:50:07 executing program 2:
prctl$PR_SET_KEEPCAPS(0x8, 0x0)
prctl$PR_SET_KEEPCAPS(0x8, 0x0)
prctl$PR_SET_KEEPCAPS(0x8, 0x0)
prctl$PR_SET_KEEPCAPS(0x8, 0x0)
prctl$PR_SET_KEEPCAPS(0x8, 0x1)
prctl$PR_SET_KEEPCAPS(0x8, 0x0)
prctl$PR_SET_KEEPCAPS(0x8, 0x0)
prctl$PR_SET_KEEPCAPS(0x8, 0x1)
prctl$PR_SET_KEEPCAPS(0x8, 0x1)
prctl$PR_SET_KEEPCAPS(0x8, 0x0)
prctl$PR_SET_KEEPCAPS(0x8, 0x1)
prctl$PR_SET_KEEPCAPS(0x8, 0x1)
prctl$PR_SET_KEEPCAPS(0x8, 0x1)
prctl$PR_SET_KEEPCAPS(0x8, 0x0)
prctl$PR_SET_KEEPCAPS(0x8, 0x0)
prctl$PR_SET_KEEPCAPS(0x8, 0x1)
prctl$PR_SET_KEEPCAPS(0x8, 0x1)
prctl$PR_SET_KEEPCAPS(0x8, 0x1)
prctl$PR_SET_KEEPCAPS(0x8, 0x0)
prctl$PR_SET_KEEPCAPS(0x8, 0x0)

15:50:07 executing program 4:
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x2}}, './file0\x00'})
ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x0)
ppoll(&(0x7f0000000040)=[{r0, 0x8540}, {0xffffffffffffffff, 0x52c2}, {r0, 0x1000}], 0x3, &(0x7f0000000080)={0x0, 0x3938700}, &(0x7f00000000c0)={[0x41d]}, 0x8)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000100)=0x5)
r1 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x2, 0x2, 0xf7, 0x0, 0x0, 0x525b, 0x442a0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0xc0, 0x0, @perf_config_ext={0x4, 0x80000000}, 0x48158, 0xfffffffffffffff8, 0x5, 0x1, 0x9576, 0x7, 0x5, 0x0, 0xaf, 0x0, 0x932}, 0x0, 0xb, r0, 0x1)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x20000, 0x0)
fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f00000001c0)='&/\x00', 0x0, r2)
ioctl$FIBMAP(r2, 0x1, &(0x7f0000000240)=0x6)
fstat(r1, &(0x7f0000000280))
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x2e, 0x4, 0xf9, 0xf1, 0x0, 0x5, 0x84001, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x2, @perf_bp={&(0x7f0000000300), 0x2}, 0x0, 0x7, 0x0, 0x5, 0x101, 0xffffffff, 0x43, 0x0, 0xfffffff9}, 0x0, 0xa, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000003c0)=0x2a2)
r3 = getpid()
r4 = perf_event_open(&(0x7f0000000400)={0x5, 0x80, 0x1, 0xff, 0x7, 0x1, 0x0, 0xfffffffffffffffc, 0x10, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3, @perf_config_ext={0x3dfe}, 0x0, 0x6, 0x10001, 0x9, 0xfffffffffffffffc, 0x9f, 0x1, 0x0, 0x8, 0x0, 0x81}, r3, 0x10, r2, 0xa)
r5 = perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xfc, 0x1, 0x9, 0xff, 0x0, 0x6, 0x4000, 0x5, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_config_ext={0x10000, 0x400}, 0x210, 0x4, 0x4, 0x1, 0x5, 0x2, 0x0, 0x0, 0x5, 0x0, 0x7}, r3, 0xf, 0xffffffffffffffff, 0x3)
ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f00000005c0)=<r6=>0x0)
perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x3, 0x0, 0x1, 0x6, 0x0, 0x2f, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, @perf_bp={&(0x7f0000000500)}, 0x0, 0x4, 0x2, 0x0, 0xffffffffffffff75, 0x1000, 0x1000, 0x0, 0x1, 0x0, 0x4}, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0x4)
r7 = openat$cgroup_subtree(r2, &(0x7f0000000600), 0x2, 0x0)
r8 = openat$cgroup_int(r2, &(0x7f0000000640)='blkio.throttle.read_bps_device\x00', 0x2, 0x0)
r9 = perf_event_open$cgroup(&(0x7f00000006c0)={0x0, 0x80, 0x0, 0x7, 0x90, 0x3f, 0x0, 0x3, 0x21, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={&(0x7f0000000680), 0xc}, 0x203, 0x1ff, 0x9, 0x9, 0x2, 0x6b2, 0x6, 0x0, 0x3, 0x0, 0x47}, r2, 0xb, 0xffffffffffffffff, 0x4)
ppoll(&(0x7f0000000740)=[{r5, 0x91}, {r7, 0x4088}, {r4, 0x15a2}, {r4, 0x2000}, {r8, 0x200}, {r1, 0x11}, {r9, 0x200}, {r0, 0xa0b4}], 0x8, &(0x7f0000000780)={0x77359400}, &(0x7f00000007c0)={[0x7ff]}, 0x8)

15:50:07 executing program 3:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8982, &(0x7f0000000000)={0x7, 'veth1_to_bond\x00', {0x20}, 0x5})
r1 = dup3(r0, r0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6gre0\x00', <r2=>0x0, 0x29, 0x3, 0x8, 0x80, 0x1, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7, 0x1, 0x1, 0x400}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x40, 0x0, 0x20, 0x70bd26, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000010}, 0x4008)
r3 = syz_open_dev$vcsu(&(0x7f00000019c0), 0xffffffff, 0x200000)
r4 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000001a00)='ns/pid_for_children\x00')
r5 = openat$full(0xffffffffffffff9c, &(0x7f0000001a40), 0x1, 0x0)
r6 = socket(0x1f, 0x2, 0x8000)
ppoll(&(0x7f0000001a80)=[{r1, 0x8020}, {r3}, {r4, 0x10c}, {r1, 0xefb52f5d7f3a30aa}, {r0}, {r5, 0xc}, {r6, 0x100}, {r1, 0x8040}], 0x8, &(0x7f0000001ac0)={0x77359400}, &(0x7f0000001b00)={[0x8]}, 0x8)
r7 = accept4$inet6(r3, &(0x7f0000001b40)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000001b80)=0x1c, 0x80800)
bind(r7, &(0x7f0000001bc0)=@hci={0x1f, 0x0, 0x2}, 0x80)
r8 = signalfd4(r1, &(0x7f0000001c40)={[0x6]}, 0x8, 0x80800)
bind$bt_hci(r8, &(0x7f0000001c80)={0x1f, 0x1}, 0x6)
r9 = openat$incfs(r5, &(0x7f0000001cc0)='.log\x00', 0x2, 0xa0)
r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001d40), r5)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r9, &(0x7f0000001e40)={&(0x7f0000001d00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001e00)={&(0x7f0000001d80)={0x50, r10, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xfe}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x87}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0x50}, 0x1, 0x0, 0x0, 0x4044040}, 0x40)
r11 = fcntl$dupfd(r7, 0x0, r5)
sendmsg$ETHTOOL_MSG_COALESCE_GET(r11, &(0x7f0000001f80)={&(0x7f0000001e80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001f40)={&(0x7f0000001ec0)={0x58, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}]}, 0x58}}, 0x800)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r11, &(0x7f0000002000)={0x8})

15:50:07 executing program 5:
ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, &(0x7f0000000000)=0x1)
getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0xc)
stat(&(0x7f00000017c0)='./file0\x00', &(0x7f0000001800)={0x0, 0x0, 0x0, 0x0, 0x0, <r0=>0x0})
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001c40)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {<r2=>0xffffffffffffffff, <r3=>0xee01}}, './file0\x00'})
r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r7 = openat$null(0xffffffffffffff9c, &(0x7f0000001c80), 0x200000, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001d80)=[{{&(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000015c0)=[{&(0x7f0000000140)="c71c7af3a2567bc28827f29d545068e4f2157955a4a37eeaaeb7459d2597ad5f2e757c1000fc066ce9df7aa41f11d672d42e5d6ed36b1b14b36e78c63c43d18ed0208dc116150fdac66a6ac14e4565ec290962953228ac743098dc8b9a37b6e98532cb007bf05b3725040b079fbd12b336499fccddb5ed97ca81401511facaec0fd12fadd46dc59119f35fd625a3e5e7b71e7ee1a4f5442d14bf408d1781180750ed9c2c3cc0a139a5bee0c412568918dc7c4586e62ac9e7a6a3121e", 0xbc}, {&(0x7f0000000200)="d615183a9755e64f5fc024c2c55eeed9bd5030016961e7d4496e5dc3b0d3bf365228a9282c6e0ccc79b20a27c95f6d86a5c344f116b85b4b3ccff4f3a0df9a3ac87dceeb5d168abd58f431cdaecae8b57e5faecbdd3160c5dbff0ff192723a6b29e240f1ebe420c96e23898d41ce1349fcd0be61c2b41c8c7c5166f8", 0x7c}, {&(0x7f0000000280)="d6e2f9e73f6711f5fdf3f404bc8f3bf7b81e28975078fec729c82599315a857be681b5cf98c537187519dba2eef8da972d224232a956ca9b32c5c05a5796ad3f77ddc893db0d92fc1806320ad636cef67b7e4cd2db431b8c31502820e8513a48c2a2884ab676e244f75b573ff86f47acca6d633a8e4c81d2e63a5c6b8b871da313a192c288adda427b7016c85ee3470e72ca09c99210fe", 0x97}, {&(0x7f0000000340)="0d894aa9da4f2a42d1c4f63ff41af05294dbbad44640901256ff631f45156351e56ca359e5aa5880d1a76cc77826404c066cee1dd425e7ac80937efb0f1999f4e7ebbcc5440db50d8231cc19a3abac6090e6fb4c25ed90a3c980fdaad8f8dba5651ba942697f9bd24da512c52a235758da298d8a415bba79d29dad82fbc9ca", 0x7f}, {&(0x7f00000003c0)="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", 0x1000}, {&(0x7f00000013c0)="3b91de7ccbda38f4004938eaa79808b3a94db5e0d4dbc00b95623ce7477883664c80f8e8b8e45e464a5f6cdd3f3348d882bec978a69b0b0610ca8d7ecc6e3037a7c6956aead39a0cca38c25c0b398eedde369e0c874e806129f157cc055686d37032a2ba39e0906e72aab82eb96a", 0x6e}, {&(0x7f0000001440)="7b6958d73a74256bdb546bc1c81f43b14a768287fc1535a280db6a2dc4c23f33cc2a1122c51d7729faa2e12acdfae31e572957d27d06844cec5cdca2b90e84dcdc77a194378d564f2b0dd0ad1145478a20336a193ded2a7943dba46b41e7c02d7aa22a30cf5296d591a5e4850fb0067d7d0b79dd3c6a44686d5db308e1d70fa744717e6e1c61e75eebcf0846dfd52e8f9ca2acff03f6d905320377ba6c835c4028e8dc167229fdb426fa2dc8b66ad0db02dc38bd062994258ad20ec982a11b2a097f98d362902ce0804dd04a1419c35b3c21a50e15b9fb63a7236d1e78c4f91f3afa5cc49861ceca370a0d8012489d37adb587da78ee0fdcba", 0xf9}, {&(0x7f0000001540)="b788320a3c142aa7e13eee96d9f1e6fd57898d5a1da70d1ae3d678850875125abeaf39a515f2155f9ea39e0cc6202eed970d3c898c4b018bf2026a1a51e4b406b626dd07cfd263b1042880e13adb232ededc09ed98dbdc9f09de8c14d69534bcff992837dd0e16baa0ef5a842a2a31aa0964274dae502e21", 0x78}], 0x8, 0x0, 0x0, 0x2400d0c0}}, {{&(0x7f0000001640)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001780)=[{&(0x7f00000016c0)="db268e8baef8568bf544a892f4c3eb8e62217aa00139d5530b8044474aa86da8ca1776e26d76db88356766bcd5e753dd5e3c3396ce05f6b7556ae254017dfc5bc5c3b44c8027b41f3c16cecbcb06f6bb1fe7ff8bfdb7c537fc8d62170322b2a588c5f2eaed8e89629b84847218a2fa89fb1ed4b30225cc0e0628884e03b7311a452f0b4c24964da826e9e743128641808af557003a7fdde8f9aa6ed6cf232b677c85eb722898d3500b532b5c711de90b8d899710a98a0b4441729b2b", 0xbc}], 0x1, &(0x7f0000001880)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee01, r0}}}], 0x20, 0x840}}, {{&(0x7f00000018c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000001c00)=[{&(0x7f0000001940)="d67d86c67be76e75252a5a869aaf0912c9e9740d637c93f1fbe0ebc55b3b21ae8f070223b0aebe1911947820beeb6d982e2d75234ff4432b6aa4a5a156d5ec2e2e7c59d195f3eee75418f379cfd31a89ef34b46ee478084d7413193cc9cd2409c4dc31f35250ee2d26b815161b00ce43c0623e7b272874dacd3860fa41891230eb681059a0f4c6264b908c2fa90e44276b7c2a1749de339bf82e9e3209089bd4014533098b486dcaa56262224d8e6780a5b945841592fa9743764ac775a5e1dca33eb019bd9928af734c3e1a30e60f8296a193bf94d324d431ed823009751d8065ec16f25af32c630c96ee8d", 0xec}, {&(0x7f0000001a40)="7b9b16ad15e86066c3c034b66ee257fc8e82f003a9d22340794b65f6a9a6700524f38ca463ce4bb9d2262953db67d58a2c40a7c67dfafb57709105bf77da31d1566a8fa12a5a8ebdd5d4b283d3a4e8169f4338919d71fe45714c7e99cc6d60819db912d9e916b2469b3a5666b52605fb4aee78bb548a34dfb1aae31f2a50a7af1ac6a002c07f014844b91bfdbda810c4bad22383b81b2862492dd9b8a4418c317fd9b580863b0e6aa2ae81f7f2ec7ff69704c9b95eae18e429534d9981860a859830c709e7550c6f22e9e17930ee18955d3cc4a145101349c0ce4003", 0xdc}, {&(0x7f0000001b40)="c893812c03a204aa27b2120fd0c38d48880a0b92bf677397f8f0e337160a7f0d2c4e9aab1c223f7f8a790c337fd5d0c7da1efc250c041522e043abb9df2445b17b28f5fe75ef1cfabc13ca56b92105178eef2f80163b7378d5c516689cef06013e1fbaa5a89d0251ec0a88a5340ade4373295346d2ed9d08", 0x78}, {&(0x7f0000001bc0)}], 0x4, &(0x7f0000001cc0)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee00, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee01, r3}}}, @rights={{0x2c, 0x1, 0x1, [r4, 0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r6]}}, @rights={{0x14, 0x1, 0x1, [r7]}}], 0xb0, 0x20040000}}], 0x3, 0x24004004)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000001e80)={{{@in6=@empty, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000001f80)=0xe8)
stat(&(0x7f0000001fc0)='./file0\x00', &(0x7f0000002000)={0x0, 0x0, 0x0, 0x0, <r9=>0x0, <r10=>0x0})
chown(&(0x7f0000001e40)='./file0\x00', r8, r10)
sendmmsg(r5, &(0x7f00000026c0)=[{{&(0x7f0000002080)=@in={0x2, 0x4e23, @remote}, 0x80, &(0x7f0000002240)=[{&(0x7f0000002100)="66a518338845a92f5f0971e908149a2490c240ab0f974c07b39999a66424", 0x1e}, {&(0x7f0000002140)="d19803912eb5f8a07632e95d", 0xc}, {&(0x7f0000002180)="3f005cbb4e03cbaf89a013696cab", 0xe}, {&(0x7f00000021c0)="9859524cd263091d5b34b028f30140e5bfa2a7a08b564e95187045d6f05c586cfbe0801a288fb6e0500c83ac37c8c0cdc4f31e412c13ef0d5c05e0a4bfb4ec2b79e5b7d1f2d0a04b889fe86ffccb7372d61c9dc8c0c53016225721ccc251", 0x5e}], 0x4, &(0x7f0000002280)=[{0x100, 0x108, 0x0, "77213a5d8189f3b2d7bd9fa6f6772e7844335bf0cfce1bf0b1d37cd1677182687d18c1b3016d80f43a912bf9c76974bd409458212ad0863eb803f12a99b312f59db50bb4dacf3210569e44e5f99583437886b935dfcf8864bda261cd92ba104a6a471cdeaff7bb3e30ccfe31901fa5b6502ab44208872f3fc9a318b390721c4f29f3d7821ba8c12b204b02b037d9ba344b0471de2e47776869c5581be7d388fed488754c08e62d5fd77d39c8b6e230c1fcfa161f75506cb632077747141017fd1598e2d20632175c145aebc61f601b07a0b191263081fd949470b5e5222d4a9caca277a08fab352b5640"}], 0x100}}, {{&(0x7f0000002380)=@ax25={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x8}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @null, @null, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null]}, 0x80, &(0x7f0000002400), 0x0, &(0x7f0000002440)=[{0x88, 0x10b, 0xfffffffc, "77dc6225ee9366b54fe96076bf17e1ba449cbcee6abf4daa8cc76eb5ef9292eba9c02921ef01583202ad342df6de6a0f87830df3c91a529c3ee32873b0f8ee4fee70aa3208eccf01424e55fe8241f43e23f6c8b79f03d7537745b7a2d00fdee7af233a5a7eaa9ed0a184a6dc6059705a75f9a6b1a9e8b734"}, {0x60, 0x10a, 0x5, "852f81edaf3af8b6b1fbde6d9b819852016ceabe8f7faa06392d160710baf6374537d1c0854e62db73f302a709ad6b7c04054fd86c9bc9b81ce89618291187ffd28d8efeb8a7852ea01b"}, {0x110, 0x10d, 0x8, "dd6078228ce3f5ffee4a0398c8915f066980c6fe3aa555f2cb78773ec2a33639faacae3cf3813a65c00671af704ab36a8334141f0aac97cb6cbd8c67e9be2bce3725693b15d95c76e8d38be4e8458e522f4976ff3944d18c5b53b1dad64b7911ce1a83f90cbc3ab9b0207797c0698aa32350631acda095ea556fd8e22282efa792c67970c79931de32c40c3ee6798a1bd43ec5f9ae34bb91c2df552f1774eca9a466391542e770b97a9a2afb385eb59a1250e7a7b4a3a010863854fe5bdbcec5d3a8d07bf92a8298a27b5120b7be0e4c8b223aba50a47533e5c0b2b2767603cff2166d0892c31db6e911359bbbcda9688bfc0de50846db6d9a44ba482bf3"}, {0x40, 0x115, 0xc3, "dc68487462001ac5340021616b6b4cf73031f8a00e98cf2063f7bf369f6b1140c9e4f5f5abad800ebdc53a08191d"}, {0x40, 0x111, 0x38, "26ab5e28f19d3e89fb7d2fe0b45953b4d8c27cd317787ec10f3e851b18ec9e5cb28570beae4b803b9fca6f3662b3a109"}], 0x278}}], 0x2, 0x4810)
r11 = openat2$dir(0xffffffffffffff9c, &(0x7f0000002740)='./file0\x00', &(0x7f0000002780)={0x101801, 0xb}, 0x18)
fchmodat(r11, &(0x7f00000027c0)='./file0\x00', 0x20)
r12 = memfd_create(&(0x7f0000002800)='&\x00', 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000002840)={{0x1, 0x1, 0x18, r12, {0x1}}, './file0\x00'})
socketpair(0xf, 0x1, 0xf9, &(0x7f0000002880)={<r13=>0xffffffffffffffff})
setsockopt$WPAN_SECURITY(r13, 0x0, 0x1, &(0x7f00000028c0), 0x4)
setxattr$system_posix_acl(&(0x7f0000002900)='./file0\x00', &(0x7f0000002940)='system.posix_acl_access\x00', &(0x7f0000002a00)={{}, {0x1, 0x4}, [{0x2, 0x6}, {0x2, 0x7, r2}, {0x2, 0x1, 0xffffffffffffffff}, {0x2, 0x4, r9}, {}], {0x4, 0x5}, [{0x8, 0x7, r3}, {0x8, 0x1, r3}, {0x8, 0x1, r10}, {0x8, 0x2, r10}], {0x10, 0x2}, {0x20, 0x1}}, 0x6c, 0x0)

15:50:07 executing program 7:
sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x0, 0x20, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x1ff}, @NL80211_ATTR_PMKID={0x14, 0x55, "5a9754666e8c15e9d5ab7433a2f97b79"}]}, 0x38}}, 0x0)
sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x0, 0x4, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8, 0x28}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x24000000)
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f0000000240)={0x1d0, 0x0, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x200}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80000001}]}, @TIPC_NLA_MEDIA={0x84, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffeff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x30}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}]}, @TIPC_NLA_NODE={0x100, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1cdd}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "1f06853de4aecb95d2c37925e9570705c62c805d"}}, @TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "ddcea6db8630be0e9dd9fb495eb99a7acc595840e944bdb2be084b7a7ddf"}}, @TIPC_NLA_NODE_ID={0x6f, 0x3, "90334d4876683c3aee5673afaab1315659d6f1941d49a7b0600ad894c2469421f363551d0c0dd6f11b0dc42dcb0ffefd84f9fb763b36c0c6dadbc9152488c23078b23a104c7a49dbe60d12730e3ffef6a007d12317e5cddaca27edf415073850e77842e9a62be796fed9c0"}]}, @TIPC_NLA_LINK={0x4}]}, 0x1d0}}, 0x2890)
r1 = dup(r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000500)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x28, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x9, 0x71}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x8804)
r3 = syz_mount_image$tmpfs(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x59, 0xa, &(0x7f0000001b00)=[{&(0x7f0000000680)="97722ad0ffe3cc72911b9bec76a673ff60f57f62a1a36d4e186018aa524e4835e103c1be9965c1ca9165a109f384c96117a36771171a3be3ae716e1733b3de1227341b81191af7ce2d3251a2b6386a0ff4b2f1cdcc99c12f32267365843c28f54de083922617ae07ef47cd7fa00d93b73da7395429a62ff84dec435d5c9aa87726af14d6567b631e054c0f920d02a01fab5c8c23b12b63917ebb1bd8bc3eff60c347f2026d3b2a539dedfc775e13607d2ab86d786e20e13fdc2ec4d2a098fe2265475deff24d4e5f4c1461dd5aad6f27e48417b375605adc58ece99fb00714e63990918c6909b8b3d733b453e24e428a45519cbc8f1112b6de0a02c5d6588e1abff6afb05c9ae53e32a176f785e1f8440b344c261a5e9c66ec5e74f42d5feb31b11ffecadd1f8298dd233a8e16e381957e586bfef988bb34793b16d25f4c5abbf535ec0f227824137771b70338271634303341f2723527bbfbf9414f9f3b32658630e8b193a6758a4557ae3595fcee6206995bcd6e0c24c17bfd86cc76401465da548d062ff4ce1ced62f37bad4313eb60ccdafc6d545423dc74f0e4dc774dc18ac1cd313daa1ad0de2e3ca1beb8c8ad70f8df1f11424d655a4e6e56ff56d10901e52ad8d4ddd96a3aa72c85241a734974b924212a86afebf4024b7275ef19ab91ac3bd2b0130f412f7cb2e43050afec948279de0be7d0d15108ee1873e0717b687f8cf72597b4ebc47e03ef284f14848822fdf6fa7b97311a8d518dd6b83067993d85784edfc4b5736ee9c7f3f5fa02cdc1c51c46576798f77a0069ca1ceaee836f52aa4d3641dddf370ca735f9ae1c801576b55df5f9e9bbc91b12cabe23ada75b0441d63fa7b9d697e6b7f6133a935b05938a5400f48eea5d020184de32d065c858f4322fd6b5261c067a513fa22c0942c5a5216ad87c8d5c7a272f8c563a1f7c4ef416652282552d16a61d468741737b8e99cbfeda4df75193c0dde7ad168ef48b0537c04a3cac28ce0f64930d0eb13a3a537e03d526577e048920cd9199f889907a9c8da4b53703945875160fc4081ed0edfe14a58efd4a546f232fb173348784e61a363a6ebf4d7f4c2bd45e9b33d6f8fa1707d6911a8850a48826727acce612f04449dbe3457b6bac3a46e015ecb1f0fad8a8bb1ca15c0d99ce08db33935f4d2f26fe0a3fcbabcde2b80da630401f2ce1bc60ec1fe7e1fce200c3146d1330c5d34f43332b8a32c0a1f4c2022ee2f4811f9f72a593174a8b1317e245ecb25acf70aad699d2b125eb18e40574b028d1c6517cee6350f13cef66c6abfb9861f651e71e457d50ed455fb34e46c0876e616fc1293e201e7c977db6e14fac0d715c2c214040891fa4a68729bdcc49b4afe9c1f9125b81c53a33f5445078f8e8633e4169474d20c2894bfab1cd33b9f266d385fecef1b0802927e871d0c2d79986d54f0e9818e483bc39ec1327ecdd216c13a69628689b95bd2ea47ea3fcde60805daeccd7f0711138460e75befb70e634f0073c76f334cfe590eee09b54f271c22783a10ee8eaeb9853413dea7ef470b60c3d5916f6d05b47b9c341c229880fafcc165179704bb09dead1253215489c901127bf4ee7744db9dcbf975a252a9c6c676ccffe6428190201127f0811e512ad787616c7116f904cb28fb634cff4f7207b7b1387becb4387fde4256075c87badd7abaedd172e39190957297172f468e273a34500d1f7f7b5624e74ca1ce2081204e7812235ce747da6a70b07f09caf7c08def328e810a7e241ad4684f2a5022a28e462d31fc9ad1e0372293d236dd86eb4c79c63f17405ae40ce05b757034a15146f1a0c7366dcd54ff9c9fad5026b15f819dd5672a548be8b3d0812b10b8f9abbb12dd0ad17c98f3dd02e424f946870c46aa4c91ba86bd37ae963f6ab19fa90921582b5b376e736edc3656d9bf229f73af25890516490a8c606ef1521c4bce6a7c72e5850026539ed8f594ba58f1483a2016b092acbb9c92488fadd3a3a164d5c614578ba80c9750f9ae087e4457871faa79c15d1513b3b1a9447c3dbff34174c5c377373ddb22584e0e4e874e3dcac72abfbf11043b96cd9aa4cec73a0d65c649242b8a6650e42417666560f089563e2749158bb07809969be8c117ca1c58143595be18c3901e4d2a874f2808a06f87c1002a8516fb7f27eb7c16ffeabdc3add76f1da840ff19c2cf7b055646474a74236af5b96930a825d79b7964489b254d7f12c39d837df7bb3d08e810a996ecedc24f87af070a01489ee9d61fb41fb3cf5c239967a9cd293bcebb925cd449fd0dfa0ae9a9a3732202201ea514abd5f3c9ed01ac02ce622be4c45a9ecf381451a94749e1fca613bac47634d54bc8bc3048ade785f3efab14ab705244ecfacfc3ed1fd6f2d63a5191db74d845f7c54fb85af54be93e62d98f5ff5b57714cebaf012e9dd6a8bf247a9df7a912f9301073edd332fae2655efd962c700471170f0d3dc93490a6e0bf670f54c17f783b21b50dd9f93ba3c74c5432281ff35c0674c140fc56e019add0c0ffc8f708e9bbfb37dea42aed19d78b88c04aa8283363678d4fdd2376c3d27bc553eba0c1cc376c77798ec358e4290a10b02a6981a733f406ba33ca1a144a80192128fa5580260dc497b23ff818439e8fa487b32cc1cfd4b0af0491252a0a804a1361c1a31029185ab43ffaad2101760c821aecfbbf53b6d357567c278d6574a4adfc55585af7831c01cbc1454c3793f0787c76a59ce924fb886f2fa89308aace2b331bfbcf67c93c8f5353b323a34adb06e01cbb2052a54b367707e40ff876d55ffbee71783509d157c85df626ab245e682c51f5b789459415ef3f3b24ae1f28211e264e3fab2d5d699f0ead4a27a93577aa354863bdb493b0b5760e0df402886fc770e3ce5c3a8b0e9d34ca54f660f545dfaddf7ccd97a8aa899f1cfe5d91f7626b96959cd43ac4f2e120db1d28e1bd06ca52f6d0d5cccf5aee1f1b14ecaaa3796fb67afd48f87549138eaca64d4c64ebc99cecd50b2d0641a8b4e84987fb910d5b48222b6cab0f8e26f56ca93afb1d760a121707759dbf9ceaef5543b40bf969fbd1824049050baa4982b5ffc545ef577d8ad662f46651f825c43b36bcd8a87a6719d7a1dee461f14aa8c5222fdb3d8a17ed40c91406991c2f02ee4d5ad56afe08ca6d06deb1e2ea0792c810f51a3422a5a5db65fa7b2365cb677dc187e6d0a6cb79a6b1434c4a1ef4679e7a1e5f69e02642741deca86b2e670f3b10f040c6ecc42f95c5b8b9394305730af43a8cf887ca1fe130b90b3cbaac74dd897971fdeceef2a7108d41847bdc8382825c5a2723d37008acace1778d2672c7bbdc8ff012c749ca32f28adaa9532ac2e36041ddcc99621381710a3972a0f4a75a770e4b2de3d186a7d0430caa6b96cebfd510bcdcb5847b8692fafbecb19cb93e25ff4f0816ccde4f74ed174d6043d47f4dc5bb23d27c78b5354fc03e756397ff80de661751d20afc70b9fe03381edc7fd44b7c2f2d93daa7768f94658370d3d0a27aee9f4cbbfe69e16ebbd917dd23efc3675884ea048ac1bcb10839662e202d859ac73077fdffd2e8167dee2711b3b455785e4d1c71168fd63fd5b94e9cfba624ec8b9dfb2212dce72937bf811a32df5acc47a609804fe76a04f0b14be983026b10ecf3763c9717398b620418a39a88aed7da2a3ee3aa3056215674ba18a830a1857c464a21b0b4d9094a179cd3bdee6512069b4710ad87e7863b8f206237b6e6e8b0a43d7c306fbbfd18d7a66b499dba6c532adac24e543f79ed954988942b51cc7327734a214fc056ecdd0d8cb9e11fe3051a5b0d9cb41c4447056d7c58c12af13e2bda4d7ac1aeaa99d4cc220ae54be4ca30b43ea7162a76faa6b82067647a6659d87750bf4752851dba5bf01a0dccbff1f9b163c37407a10ba5c96d20d7fabcd153566d44d3c7c75c51bb1b2ee57374f245bb4e60f439390fa2b36347708cfdf2c567f413f57437311f6114be2a826177a28a3ceb26e3814667c16f678db4c5ca4f7176862d984deef74413fa791da033919851a192935df02e6c9564226f7f7da5a4e495ee7da0404bdb5892c78f0b65a389bf3f9c5c4538b226d8e3ae2f2bffcbcadcd5654121c940032b577243de707bc31eacea7af8b8c44b84f5c20fb859421d81d3db95c4f4c919cb0af18679f046987bf7cd3038e4124fd448967110f5cd6325408f3ef6ee9b2f2f5fb80207bed78dedceeccbe71c39c8747c81f49611ad013be678593620663c86e03d7536430f5df3d652414e72cf57142f3f0d1cc808c590b237611fef6be99eed6e9db6e0a4d0ce2379238706d1b5531baec4d98c4418c64bd0ad373d47c08fe21cbc092c1f59429b8984099cb49035e461a57000c35d89a6cd949e5b5d44e55f2bf40d4ab553fb3842dfa186542565417f13e5d1ab8e982489a8104c183f1f49b99acdcd9917bb746b2d52598ee7d6ffb6b41aa860c59b9b26c59305b9cc59b73e7a76d2084b1ac3406931d3152a862dc2822fd2e7b75b36e675ddfcd067e50da399e9e29725c7b229fcec38aee1c2fbac7602bf3b68482fd1d77b4f81e60dc3ada978ac3dde11ad28157a850ffd67e646a1b3acfb54bd5c8ae9e4bfc3a5111236ee48c1ec704f8f25f146cc6aeed1b2310ae85eb65a7e4397a92d2b7f5b11f64e22133623156244ce7ca9245ce7415f1760dbe1baf14b90d124bd5bd3f4bf3866938e0a4182c0dc7546a7ddf56728f45d8315e1a46f1989ee0fa2c3f8a4aa42b120966ab22620fdae6e9f4324cb65bd59e7c560a02298cfff0a3bf24270544ab4f4052a8cf9ef8d5ec3b7b3ff7b8790d5b78d93348d2bb0e8a35e72bba2a60181182bbd339cb1c17ea70cfbc72934e66c0345c6437fd2485c8e5828182925ff4b62b5c16a3958eec943660c6865cc077c23178f877cbbb52fc93c37140774898bb7dba648faa7e58c170f2e7559cabcf2d9a844771ab377ee49dfba883a54d92a24112e701a01a8d782a1a90a489ad321ee478adf6e442b24e9e610e535f8c238aafa2ff732514b73cf8d407b54a4a8675f18e09a4956f183c46b44548c47fa621e1eb36ea8c0375cb941f6244770402cfda53c0b7c693936ab670d1a7b47656993c6243f97466bca3c81711b0cd3e94fcde99e2f42d8585fcd5e0b2dc3b8d35a10c869316f4612f286110da8958b030e8e8049435244bf3a9500fe748e5da34cdee3aced7729b535f1401302f08707a6f219ee1bbd427e561c03693fac895fdb794efb193fb71528fd14ac4e7d6aa51230336050035de296d98f7e4b88ae85a24af0b0a742f026e38223cb1fea072a3da5603c6be496ceab1f1cc9facf10083668acb09091def4e0201cf4e40f68165b59f6f9e6cc50e71db47f7211ef553d6d0ad1dfb0a6206e27102294f2a831a4393b6a36973f622223ef1f0e2689175151e00b55beabf67e06fd4a7a41bb738d9c16ca1a082c054b214078059c3559a72e74bf91ad5b0b8e2b7c77d1fbeb2d796f51f27c7ebddade14f86701cd2c02220c62040cb49186a7d508f1bbf36f22cf3336f1825b7d001737afe2e40167cef1969d98c1cc032eb906e273f6669c82ba2661c0881c060017c4d7b538b8ac3338273c5ccb143cbaf0edf6602734a56ae247a0daee1eb20eb62063f0571da3c81f99185abf5a3f90bba54d8d8ef9d318843d2fdd243ed2f3d8ca42f4de6ec5ec8943686294d91da51476b71be3f22eb57c0c7c2fef3062da3a823948351d0a0eb379111b61323eba192b83c0e8", 0x1000, 0x101}, {&(0x7f0000001680)="6b5c50376447369c6631bc5c15e1b3303f24ee39321d9568f045092bf924826f7223e5c8e6b7d3b595949db1ae443a3409d5dccdc3ea824d36097a9676ff9e00f2872f78118d5d06f4ae66236a80e9aecf094eaea238e35571d46a", 0x5b, 0xfffffffffffffffb}, {&(0x7f0000001700)="6c414c46473a6a85ed", 0x9, 0x10abc000000000}, {&(0x7f0000001740)="a7fbef3bdaa43e353d65646eef8d71ad02ec4eed86ff206371cb544648d0458c96820611db8c0ded9419be4b018eeaed78c4f30f0a0b5e64c5013d317198eca8a6d6ae1a629e129effca51a64c011d5777656320dccb9b678728ca0a56f7cef5cc927b5c577e511b9bfb3179215a907b8e91", 0x72, 0x3}, {&(0x7f00000017c0)="023897e597b288af20e3ad726b64902150f3bb020c718663991b5035409b4b923fd35a306721a3916e62bd514d97c60dd00e56fb186478f97b72d7aab4144e670305e5da9ce21dacf0f7a8a72a0685f1f2914d35fb72a27476856755af452060af409aa67f053899e7a28ea1182910f22c3ecdb05f6c6c", 0x77, 0x2}, {&(0x7f0000001840)="4c898907b6bb8e01bbc7069bb86cf18d3067d59d497e433c8519d670aecd880049c468e1dc3feb789f26723d416904bcfb4185c3bc4715fc47afa2e50a1d8f1d94956a21b006f4fd0dbc", 0x4a}, {&(0x7f00000018c0)="7bfcb1201672ffbb9a3d7447dc2ea1415706acc49cb29da0119dc623a9f9d19c7f4cff80420ea3012ef4cfd8276cba0b0c89f191a15500fa5ed531cf4995fb3d9e976528ee023a7aa848393e6dccabf54cc79e8049fbdf890ba0c9f87573", 0x5e}, {&(0x7f0000001940)="9e2c0d2dd4d7c5512a6a3ddb8387293aee471af505f8a1c7db16ee88ea3c4e1af8a6f0d026011309d969c09e1c7651350dd96973d5fb1ec0", 0x38, 0x3}, {&(0x7f0000001980)="d042e637f4f6fc8442d2574efe2c5e5c621950b176ee1f6e11e9746d31516fbe8a7024955979b4e0f3a1fb620c359987cccc7945ffaf4c6f4ccd7a87793c796f3a46e026064addbe2b18d4c649f027fc9f9c86d1b232c729a9739aa09e01ab6ef64e2f6792aaffe445bd823eba4c75582641e4a7b689784fec1a64dea6bc749c520e5fa08c608a4d", 0x88, 0x4}, {&(0x7f0000001a40)="4750879b3a843505aa6435594f25cad4f3208c4378bf51e43cdba7f9c03fdcc9d6c1dbabe05156639bdc7f6aaabf9d6dea81675256ef6ec1a5c411db9bb6ef66d8bf0794f9a0a9312e43a34606380cfda884ca6ad5abeb5f6feaf6c28ef1c18122e5cc805611b4d3737e6e698a1192d7785ea6943d038f26305f5bfdade144f244eff1e678a657b34ed1d998641e0d825a74c7", 0x93, 0x7ff}], 0x22150b0, &(0x7f0000001c00)={[{@huge_never}, {@nr_blocks={'nr_blocks', 0x3d, [0x70, 0x25, 0x65, 0x35, 0x6d]}}, {@huge_never}, {@gid={'gid', 0x3d, 0xee01}}, {@huge_within_size}], [{@fowner_lt={'fowner<', 0xffffffffffffffff}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'eth\x00'}}, {@uid_lt}]})
fcntl$setstatus(r3, 0x4, 0x45800)
openat$dir(0xffffffffffffff9c, &(0x7f0000001cc0)='./file0\x00', 0x105600, 0x96)
r4 = fsmount(r0, 0x1, 0x8)
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r4, &(0x7f0000001f80)={&(0x7f0000001d00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001f40)={&(0x7f0000001d40)={0x1cc, 0x0, 0xa14, 0x70bd2c, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0x1}, {0xc, 0x90, 0x4}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x8}, {0xc, 0x90, 0xffffffffffffffff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0x1e2}, {0xc, 0x90, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0x2}, {0xc, 0x90, 0x80}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x4}, {0xc, 0x90, 0xf3b2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc}, {0xc, 0x90, 0x734b}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x20000}, {0xc, 0x90, 0x1}}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x8000}, 0x81)
unlink(&(0x7f0000001fc0)='./file0\x00')
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002000)='/proc/partitions\x00', 0x0, 0x0)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_CHANNEL(r5, &(0x7f0000002140)={&(0x7f0000002040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002100)={&(0x7f00000020c0)={0x1c, r6, 0x2, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3de}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000805}, 0xc000001)
r7 = accept4$packet(r5, 0x0, &(0x7f0000002180), 0x0)
shutdown(r7, 0x0)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CALIPSO_C_REMOVE(r8, &(0x7f0000002280)={&(0x7f00000021c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002240)={&(0x7f0000002200)={0x24, 0x0, 0x2, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x8001}, 0x4000000)

[   89.938229] audit: type=1400 audit(1756482607.443:7): avc:  denied  { execmem } for  pid=275 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
15:50:07 executing program 6:
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0x1})
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x131000, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000080)={0x4})
r1 = gettid()
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000680)='/proc/locks\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000f00)={{0x1, 0x1, 0x18, <r3=>r0, {0x10001}}, './file0\x00'})
r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
r5 = mq_open(&(0x7f0000000f40)='\x00', 0x2, 0x40, &(0x7f0000000f80)={0x8, 0x0, 0x29a48193, 0x10001})
r6 = openat$incfs(0xffffffffffffffff, &(0x7f0000000fc0)='.log\x00', 0x2, 0x80)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001000)=<r7=>0x0)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000001040)=<r8=>0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000001080)='./file0\x00', &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0, <r9=>0x0}, 0x400)
sendmsg$netlink(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f00000000c0)=@kern={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000e80)=[{&(0x7f0000000100)={0x3e4, 0x34, 0x800, 0x70bd2d, 0x25dfdbfd, "", [@nested={0xec, 0x8b, 0x0, 0x1, [@typed={0x8, 0x46, 0x0, 0x0, @fd}, @typed={0xc, 0x77, 0x0, 0x0, @u64=0x200}, @typed={0x5, 0x72, 0x0, 0x0, @str='\x00'}, @generic="a7b3175cfc51129050fb5355b1a3b629e92578a3c02689177f67f1b1a7e26f2d12f1181cc71c52b17d14c3744759555c9d77195b8c063e99748538f7cf5d023945aeb688a189f5b4d3b135ab5fba9e8071e8d777922c46d16a422ff22092b039f02ffe577eec2ffb31887932f39cee4e8858fa8c5d273b06cb6961976f1e0b3bbe94fddc832e67b0997fcbcd6e9461de97e55d2d26fd9422f50a0251d9278d373d4c3a1f2d8aad07f266b4d1308ab13fb70d468320807579c1ae1f75cfe29d8f13b89b63a4eb2fc03f1d9aeb"]}, @typed={0x10, 0x96, 0x0, 0x0, @str='/dev/rfkill\x00'}, @typed={0x10, 0x87, 0x0, 0x0, @str='/dev/rfkill\x00'}, @generic="6019435624b4f3289f4bbd02489c577e337c57de73cf39d7d4d761a97cf21b67e5b2b62310e86f6afdc382bc76cd517d0fcb08", @generic="e28a01ff1363a0b93d5fde1e5901fe520aed897c45574304ed54562cbb5e445d2ab21582c55bad843b4bba3d42c44b4824b7861cac67071b4f6a392769be3b28a66a8b", @generic="5f843c82d834d881837d360fa132f1d85d222999ca4b7a8cea1d45dfa3973390dee07a37bdfe9e8f6ea4091451ba0398d5a42e5880bb686cc9d840186f21", @nested={0x213, 0x96, 0x0, 0x1, [@generic="68c869103c9b62d79c013a2da9212c880412c5c87603d6c9be18281893c27296dff08c97b9895de290b4f019", @generic="8c7f105ddc4a9f5fe9c111fc4ab0c729e00e8c55fc3be049b74126b925781863b233d852dbd3e203710fba368aa98391687a6f6f88b38b5936fafc7060e55535af98c02fa9cc8cd2ef912c546661a5f4ab68102ebb3d165f02143721bc8d678118482520d952b682e33acefdddc8ada367dd706c44812be751e3ffd29a3e155dd875b2d9725e0abd45398fb2cb29e4c43f26d27c491c20ceb24f74f150a09dd52fb42365a63932b27ec711", @typed={0x8, 0x6b, 0x0, 0x0, @ipv4=@broadcast}, @generic="40196459ddc58765625373259f415733fb9910aaab5b9e14f57c47dc9ecbf628432b69e95df1429c03d98ab05ff5fcc78ad15d32546d735d37940e12875215059bc22923305fbb5a054eeb3b7a75111d3f3ebecd818913aeb6722d97270d4c1b783a7431d27441262dc692896f4f6c3c45f98ddd73e2f7c7abb5809385c7569a2f95b351a8980a", @typed={0x8, 0x46, 0x0, 0x0, @pid=0xffffffffffffffff}, @generic="e6aeacc3b6828d9c1e511dc32c6c659ea092622d7a78e1415aa9b894e22321ee0e0116b625db5198e67a3cb4d116c074474e3695b5f5aa2785c7d5383596e82b5c3b550498a7336dc74f4125e5e0e9d55d2d916dcdf24ff3a8c3b93169bde93d1f07d5f3cc41eb65bcdacc3c2a363d87292dd4fc2938d2883d1be0fa72ee6c7ea3dd5ec7aa166f233f7b3543d0dc747ab9cab5d2a377acc162", @typed={0x8, 0x2c, 0x0, 0x0, @pid=r1}]}]}, 0x3e4}, {&(0x7f0000000500)={0x58, 0x17, 0x300, 0x70bd29, 0x25dfdbfc, "", [@generic="5a20c88ef8d28b566767ddfa3b847dc28f9d2e8aaa7c165e728191ef39aa6ecb827e3eacaddfe95da12b9242342fc4e4178fefb50b3c842f8b794fd24d3599784282a7bfa8"]}, 0x58}, {&(0x7f0000000580)={0x100, 0x2d, 0x20, 0x70bd2c, 0x25dfdbfe, "", [@generic="e20060eaab3d84a11aaa414aa6f59a4be0d61d8804e20122ba1bed68a96afa4d281830606fe023f649d87264b22a5a59d00bf0e8d90abb746c215ad5d2d194ef8ecd9a4b3981ab6224d90c2ca696674e3060b2ceb96cd0f92ac4dc6d1192d4", @typed={0x10, 0xe, 0x0, 0x0, @str='/dev/rfkill\x00'}, @generic="f0179df1361c4daba5ca345e51781ad95fd1a1b17ba4f21d31ce2c430e31bed89aa903fc50c5a7a2cf1c86136ada17f8c32a32dbb8547a8d37bf93842115b7c051c5ce3cd788564c40fd24867106e7bba4d6ff6396e202d9940691c1b27bab86c45cf2fd8e3512d0530a65c6297cc3ee59fbd9e5fbec0ca5d9aab50cc487a1bee8"]}, 0x100}, {&(0x7f00000006c0)={0x448, 0x37, 0x800, 0x70bd2b, 0x25dfdbfc, "", [@nested={0x175, 0x94, 0x0, 0x1, [@generic="d7ddc59a0969c7b11e2cf7966b7935f38ddc46c197db3ba0df2a0c9cb47ac385cbfc2ca9826d3711fbae222cd509094e1c4f411fa9730fa2e29c418ed3f836eb035055fc566519e105b8c641c384a58b329276c25a70bd770b997236bd45a94806ae205a6cb27abd019f3dddd7b42c0dcce8b82c1c4b", @generic="7ce1bafbf47aa376eabc434b802ee3302ad9fd5773f96d02b72ccf3357ec9236fccdd61939dd55b157d0ae5970baa8940f22aefef87bc2a068d2f9111f648d826626bc78c439475452bedf8e150e404444109543c5", @generic="e241472c6d68a388981aee089be38a259d5c7ccb0ec26fac3cb70a6eb012a11be79d9deac56593c4fc441290a576dd28b9eb10c0efd0d0a1", @typed={0x14, 0x4, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @typed={0x8, 0x7e, 0x0, 0x0, @uid=0xee01}, @typed={0xc, 0x46, 0x0, 0x0, @u64=0x40}, @generic="f4b58ca1f15ccaebbeb6987de82265f1803bcd0573101743cec34bff06ee59f3e4146c5589bf9accd570a266f34341ae2d8253c1238d", @typed={0x10, 0x1a, 0x0, 0x0, @str='/dev/rfkill\x00'}]}, @generic="ac61bdcb121baec2341046e4e60827ed3f7605250d61bdc0abfaefb36ffb3c9593b579114fc730d6ce8bcda57c5424a518fa0c2afb0ecf9a2c3d455af02bdf4ba89bb424ff5721c836971afa60afaa9b22ab1e5c09586df871578d5cce7eec00edc49e4fda40cd6a1f62adf4a9bcc83249e0b32473af44", @nested={0x248, 0xc, 0x0, 0x1, [@typed={0x8, 0x13, 0x0, 0x0, @u32=0x3}, @generic="bbfc46590e997dfae0c76735354727349761397743a122082edca9bbb08cbeda74f9b376a00fec880bef853c6bc32f2039d52fe9bb84d2f1778f4f4d636e0404c42a675819929f7c79dff5edef439571688fe771f1b317219bd66db49aae03a7be0534f87f806ba6fbb2d884fbb1c364d6b4c01bb5d096f55015cb5a49a24b9f0a5299c68465433a4c2108f2f83c46e8910649f33e70b10edfb9b4a12c27afcf947079dc7dac28122fcee1a6b838e901af3add6615f671763b31aaa1257d6e20f3d1c53e21545d45e1dd", @generic="851cb47c51dbfb28845d90256a7e37e9927568141d221b77325c4e1a7771c6580362236c2b0650de0af7fc96967ed98d6cfd20901034ecc62a3d5ad1710b99dc0bb31a90529b7f3b50e0aa68", @typed={0x8, 0x85, 0x0, 0x0, @fd=r2}, @generic="8b879bcf5e3eadd64e71824a38afd5c0c5afb357a2a79493e04860f1603fd00570383d14c96e9abd2ea24fb4", @generic="a80ac0389b661aa82e9a302d6086560094eabbd3287981d2754625372b4e09b6f09acb694cbda62d60e00ecc63d731c5b0908b8d67cbf7765a7e1ae454f2fe2ba0dc761bb649c8304cdbb42a56071f6bf17ec2f3cd9ea039a3d9b71b713c47049473afa06cdd60d3779fb2de0b5ef08f8acfb505d685053a656cce1d04d171937d723dfdd6eadcf359cdbbfe33b0fae13c99eaecaee91dafb072bf906bd282ff70f20657449638fa23dce23e1a8eb26c54425847cb06c18bec046c94b7b739140b8888c4f20d981e5e9669362f8e1c2a76fd3a9a4d0c0949dab6483a2d0a1cdc47713bfed3cd49b5dec7a598c88be17bacad"]}]}, 0x448}, {&(0x7f0000000b40)={0x14, 0x40, 0x400, 0x70bd25, 0x25dfdbfc, "", [@nested={0x4, 0x90}]}, 0x14}, {&(0x7f0000000b80)={0x2d4, 0x1f, 0x10, 0x70bd2c, 0x25dfdbff, "", [@typed={0x8, 0x38, 0x0, 0x0, @str='\\}#\x00'}, @generic="932fc3e80c6960e9cb224868c4040bc729f6b2bb724d09463456b23b162300abdb4833cb553d7455248d6b0d27aeaa8f9adc687c8a3cc940878775c11541175a2484bb303c469cebd212815c2a5b60c976ad13c6695a112fde7f546648a3bc84afabd06d6d3a07af355486836397fcd3", @typed={0xe4, 0x13, 0x0, 0x0, @binary="3cd3ed905c6483ed776a2944c914a01fc204853e942056128069576452270e93306c3f4872778bdcdec5454c74457e263588010bbde149eb4af2c7346969cebd65c2529ade9d36cd9c8df0d2c4f085a5d431c96b05f4a14c1b5b7738c8589ae3468472bbfd296d90b1e53c584fe7169a52c43eef9f792157cc662277ee5021bc6fa2e1a6c2180cad159528a29289287a398a307a53685f4f26128f84fc50a9ef1b059fb2e4c9db35f41f7e8d598edd8a20daf045a6b18088fb6ad536335acfe458735a20256ad04782b223bea26bc9b3146cb7369ba072790477e8c6873dd764"}, @generic="e0640994b508959ac5a290a850f75e4b3c4bce0e7f4fe83392e2542687a2152bdd1d6d5ac9733ae8970952cf515fce5a3a6ec96ac3f600c7475019a4411f2980ce3f2f2f1ac923e293e1162fdc324fcabc2215d9e8222eb35f0cd9a1dc436404ad4facd5dfcca0fd2085f67aceda23a3904366bbec863bfa1f14c1ffa8c7a6a041ae5665362d810285a4ff23cce3f7fbfd3bd967c403fde7b0a27bcd70ec4cc4", @generic="2f5d80adceab30f4792fe45d5464b9f37f10ad386a0e2414d41539be8be39cd849e99ac8e82f97354c7b2d50163d149bfffde359bb30cc0949cab70f5bd65118920fc6668f8aa1c08efd36180911cbb2f6a25e31a940613b85ffe7fa84acdbd9ee420b0ff001dc6f12f048f9f4132e6e4fc90cbbd1b1e8a23b84982b29a07ac024330cbaf55b408ce4c1630a91b619e6ade251e8fcfed821adf4d51bfe96810ab53dd6785cf2a3b1e21aee32efe929505e0d991e892b379d9ade8702bd37f629c50f3da8b2"]}, 0x2d4}], 0x6, &(0x7f0000001140)=[@rights={{0x38, 0x1, 0x1, [r0, r3, r4, r0, r0, r0, r0, r5, r6, r0]}}, @cred={{0x1c, 0x1, 0x2, {r7, r8, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r9}}}], 0x78, 0x40}, 0x4000000)
r10 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000001200), 0x244101, 0x0)
ioctl$EXT4_IOC_GETSTATE(r10, 0x40046629, &(0x7f0000001240))
truncate(&(0x7f0000001280)='./file0\x00', 0x40)
getsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f00000012c0)=0x80000001, &(0x7f0000001300)=0x4)
r11 = syz_genetlink_get_family_id$gtp(&(0x7f0000001380), r3)
sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x9e74f8e3421e6739}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x1c, r11, 0xa3f05a4e65e40550, 0x70bd25, 0x25dfdbfc, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000010)
setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f00000014c0)=0x37, 0x4)

[   91.082513] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   91.086241] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   91.088218] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   91.095101] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   91.098804] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   91.151953] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   91.158740] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   91.160738] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   91.164378] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   91.169990] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   91.237746] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   91.242474] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   91.247594] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   91.252028] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   91.265978] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   91.271754] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   91.273918] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   91.277473] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   91.279078] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   91.282680] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   91.284657] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   91.287003] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   91.288663] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   91.290099] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   91.296122] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   91.300779] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[   91.312917] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[   91.314713] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[   91.320014] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   91.321734] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[   91.329731] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   91.332135] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   91.337978] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[   91.353687] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   91.364903] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   91.366412] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[   91.387562] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[   91.392477] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[   91.396509] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[   91.401829] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[   93.178904] Bluetooth: hci0: command tx timeout
[   93.242427] Bluetooth: hci1: command tx timeout
[   93.370393] Bluetooth: hci2: command tx timeout
[   93.371056] Bluetooth: hci5: command tx timeout
[   93.371106] Bluetooth: hci4: command tx timeout
[   93.500381] Bluetooth: hci7: command tx timeout
[   93.500554] Bluetooth: hci6: command tx timeout
[   93.501781] Bluetooth: hci3: command tx timeout
[   95.226445] Bluetooth: hci0: command tx timeout
[   95.290386] Bluetooth: hci1: command tx timeout
[   95.417452] Bluetooth: hci4: command tx timeout
[   95.419367] Bluetooth: hci2: command tx timeout
[   95.419776] Bluetooth: hci5: command tx timeout
[   95.545423] Bluetooth: hci3: command tx timeout
[   95.545940] Bluetooth: hci7: command tx timeout
[   95.547405] Bluetooth: hci6: command tx timeout
[   97.273548] Bluetooth: hci0: command tx timeout
[   97.339328] Bluetooth: hci1: command tx timeout
[   97.465376] Bluetooth: hci5: command tx timeout
[   97.465826] Bluetooth: hci2: command tx timeout
[   97.466201] Bluetooth: hci4: command tx timeout
[   97.594402] Bluetooth: hci7: command tx timeout
[   97.594844] Bluetooth: hci6: command tx timeout
[   97.595225] Bluetooth: hci3: command tx timeout
[   99.322374] Bluetooth: hci0: command tx timeout
[   99.386498] Bluetooth: hci1: command tx timeout
[   99.514410] Bluetooth: hci4: command tx timeout
[   99.514845] Bluetooth: hci2: command tx timeout
[   99.515220] Bluetooth: hci5: command tx timeout
[   99.642466] Bluetooth: hci3: command tx timeout
[   99.642904] Bluetooth: hci6: command tx timeout
[   99.643281] Bluetooth: hci7: command tx timeout
[  131.331613] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  131.332278] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  131.488067] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  131.488702] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  131.704743] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  131.705381] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  131.761359] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  131.761995] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  131.866348] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  131.866955] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  132.060894] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  132.061533] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  132.166836] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  132.167482] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  132.282433] audit: type=1400 audit(1756482649.786:8): avc:  denied  { open } for  pid=3784 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[  132.285033] audit: type=1400 audit(1756482649.787:9): avc:  denied  { kernel } for  pid=3784 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[  132.321843] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  132.323021] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  132.595173] loop7: detected capacity change from 0 to 176128
[  132.644745] loop7: detected capacity change from 0 to 176128
[  133.363033] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  133.363712] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  133.591907] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  133.592986] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  133.710475] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  133.711114] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  133.786629] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  133.787220] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  133.876771] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  133.877380] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  133.912800] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  133.913452] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  134.153781] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  134.154556] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  134.185914] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  134.186526] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
15:51:04 executing program 1:
r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x7f]}, 0x8, 0x800)
sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0xd, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4c014}, 0x20000044)
ioperm(0x85, 0x1, 0xfffffffffffffffd)
syz_open_dev$vcsn(&(0x7f0000000000), 0x1ff, 0x0)

15:51:04 executing program 7:
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
getsockopt$sock_linger(r1, 0x1, 0x5, 0x0, &(0x7f0000000140))
copy_file_range(r1, &(0x7f0000000040)=0xffffffffffff0000, r0, &(0x7f0000000080)=0x3ff, 0xb, 0x0)
r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
pwrite64(r2, 0x0, 0x0, 0x0)

15:51:04 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000180)={'wpan0\x00', <r3=>0x0})
sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x40, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_EXTENDED_ADDR={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan1\x00'}]}, 0x40}}, 0x0)
sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x5c, 0x0, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x6}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0xf}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x9}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000054)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_tcp(&(0x7f0000000700), &(0x7f0000000740)='./file0\x00', &(0x7f0000000780), 0x0, &(0x7f00000007c0)={'trans=tcp,', {}, 0x2c, {[{@version_L}, {@posixacl}], [{@dont_appraise}, {@permit_directio}]}})

15:51:04 executing program 4:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
getsockopt$sock_linger(r2, 0x1, 0x5, 0x0, &(0x7f0000000140))
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140), 0x400c0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@loose}, {@debug={'debug', 0x3d, 0x5}}, {@uname={'uname', 0x3d, 'nodevmap'}}, {@cache_fscache}, {@fscache}, {@version_u}, {@mmap}, {@loose}], [{@seclabel}]}})
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@nodevmap}]}})

15:51:04 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x1b, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000dc0000000f000000010000000000000000000000002000000020000020000000d8f4655fd8f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000001000028020000028401001b0000000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e35333334383534323200"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000dced220ba9804d58a8dffc387fa17f8a010000000c00000000000000d7f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000100000000000000000000000000000000000000000000002500000000000000", 0x40, 0x540}, {&(0x7f0000010300)="0000000000000000000000000000000000000000010400"/32, 0x20, 0x640}, {&(0x7f0000010400)="030000000400000005000000dc000f000300040000000000000000000f004582", 0x20, 0x800}, {&(0x7f0000010500)="ffffffff07000000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0100ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000d7f4655fd7f4655fd7f4655f00"/2080, 0x820, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd8f4655fd8f4655f00000000000004000200000000000000050000000d00"/64, 0x40, 0x1500}, {&(0x7f0000010f00)="20000000181166091811660900000000d7f4655f00"/32, 0x20, 0x1580}, {&(0x7f0000011000)="c0410000002c0000d7f4655fd7f4655fd7f4655f00000000000002001600000000000000000000000e0000000f000000100000001100000012000000130000001400000015000000160000001700000018000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000d7f4655f000000000000000000000000000002ea00"/192, 0xc0, 0x1e00}, {&(0x7f0000011100)="ed4100003c000000d8f4655fd8f4655fd8f4655f0000000000000200000000000000001003000000020000000d0000001000050166696c65300000000e0000002800050766696c65310000000000000000000000000000000000000000000000000000007782994400000000000000000000000000000000000000000000000020000000181166091811660918116609d8f4655f181166090000000000000000000002ea04070000000000000000000000000000646174610000000000000000", 0xc0, 0x1f00}, {&(0x7f0000011200)="ed8100001a040000d8f4655fd8f4655fd8f4655f0000000000000100040000000000000001000000190000001a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000567a372d00000000000000000000000000000000000000000000000020000000181166091811660918116609d8f4655f181166090000000000000000", 0xa0, 0x2000}, {&(0x7f0000011300)="ffa1000026000000d8f4655fd8f4655fd8f4655f00000000000001000000000000000000010000002f746d702f73797a2d696d61676567656e3533333438353432322f66696c65302f66696c653000000000000000000000000000000000000000000000ae16d32f00000000000000000000000000000000000000000000000020000000181166091811660918116609d8f4655f181166090000000000000000", 0xa0, 0x2100}, {&(0x7f0000011400)="ed8100000a000000d8f4655fd8f4655fd8f4655f000000000000010000000000000000100100000073797a6b616c6c6572730000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000689b39ec00000000000000000000000000000000000000000000000020000000181166091811660918116609d8f4655f181166090000000000000000000002ea040700000000000000000000000000006461746106015400000000000600000000000000786174747231000006014c000000000006000000000000007861747472320000000000000000000078617474723200007861747472310000ed81000028230000d8f4655fd8f4655fd8f4655f00000000000002001200000000000000010000001b0000001c0000001d0000001e0000001f000000200000002100000022000000230000000000000000000000000000000000000000000000000000008838fb5400000000000000000000000000000000000000000000000020000000181166091811660918116609d8f4655f181166090000000000000000", 0x1a0, 0x2200}, {&(0x7f0000011600)="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", 0x100, 0x2400}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531000000100000001000050166696c6532000000100000001000050166696c6533000000110000009403090166696c652e636f6c64000000", 0x80, 0x3400}, {&(0x7f0000011800)="0b0000000c0001022e000000020000000c0002022e2e000000000000e8030000", 0x20, 0x3800}, {&(0x7f0000011900)="00000000000400"/32, 0x20, 0x3c00}, {&(0x7f0000011a00)="00000000000400"/32, 0x20, 0x4000}, {&(0x7f0000011b00)="00000000000400"/32, 0x20, 0x4400}, {&(0x7f0000011c00)="00000000000400"/32, 0x20, 0x4800}, {&(0x7f0000011d00)="00000000000400"/32, 0x20, 0x4c00}, {&(0x7f0000011e00)="00000000000400"/32, 0x20, 0x5000}, {&(0x7f0000011f00)="00000000000400"/32, 0x20, 0x5400}, {&(0x7f0000012000)="00000000000400"/32, 0x20, 0x5800}, {&(0x7f0000012100)="00000000000400"/32, 0x20, 0x5c00}, {&(0x7f0000012200)="00000000000400"/32, 0x20, 0x6000}, {&(0x7f0000012300)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x6400}], 0x0, &(0x7f0000012800))
openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x4002, 0x100)

15:51:04 executing program 5:
clock_gettime(0x0, &(0x7f00000000c0))

15:51:04 executing program 6:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000019040)='/proc/mdstat\x00', 0x0, 0x0)
pread64(r0, &(0x7f0000019080)=""/102398, 0x18ffe, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'})
openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0)
r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r3 = syz_open_dev$vcsa(&(0x7f0000000340), 0x0, 0x66040)
sendfile(r2, r3, 0x0, 0x1f)
r4 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r5 = syz_open_dev$vcsa(&(0x7f0000000340), 0x0, 0x66040)
sendfile(r4, r5, 0x0, 0x1f)
ioctl$SIOCGIFHWADDR(r1, 0x800454e1, 0x0)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000400)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="74000000030701020000000001000000050000090c0003400000000000000002080005400000000114000780080001400000000108000140000000000c00064000000000800000010c000640000000000000008f0900010073797a31000008000540e377"], 0x74}, 0x1, 0x0, 0x0, 0x44085}, 0xc000)

15:51:04 executing program 0:
r0 = syz_io_uring_setup(0x329f, &(0x7f0000000000)={0x0, 0xe51c, 0x2, 0x2, 0x1e0}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f00000000c0))
syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x1, 0x0, @fd, 0x0, 0x0, 0x0, {0x200}, 0x1}, 0xfffffff7)
r2 = signalfd4(r0, &(0x7f0000000140)={[0xf800000000000000]}, 0x8, 0x800)
r3 = syz_open_dev$usbmon(&(0x7f0000000180), 0x1000, 0x200400)
r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x20100, 0x190)
io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000200)=[r0, r2, r0, r3, r4, r0, r5, r0], 0x8)
pread64(r0, &(0x7f0000000240)=""/4096, 0x1000, 0x4)
rmdir(&(0x7f0000001240)='./file0\x00')
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000001280)={{0x1, 0x1, 0x18, <r6=>r3, {0x2}}, './file0/file0\x00'})
sendmsg$802154_raw(r6, &(0x7f0000001400)={&(0x7f00000012c0)={0x24, @short}, 0x14, &(0x7f00000013c0)={&(0x7f0000001300)="c5a6f949d50210094f788c78931b1fc374639eb077b9f96a593bad740137f0c27c2b91321fae6be484ea5100699b4b9241443f0b5496ee810e3ac28156897446d368ce43c5dbe51068099fa6aa3509ed2bb6d70d4414d0a0df852e7afa3cdfc6fd306c28a02f1ef92925a5178dd1b1b2f4d571b22a527f2e80b25f0130cced148f353cff85b0fd866dd293237c99097484941c7eb1b98d585eddfcac52c6e54b4f06010a80ef161a1aead3161f3aa228eada", 0xb2}, 0x1, 0x0, 0x0, 0x24040840}, 0x24000040)
recvfrom(r2, &(0x7f0000001440)=""/68, 0x44, 0x10100, &(0x7f00000014c0)=@can, 0x80)
r7 = syz_open_dev$tty20(0xc, 0x4, 0x0)
r8 = openat$autofs(0xffffffffffffff9c, &(0x7f0000002a80), 0x200, 0x0)
close_range(r7, r8, 0x0)
r9 = socket$nl_audit(0x10, 0x3, 0x9)
r10 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
recvfrom(r9, &(0x7f0000002ac0)=""/172, 0xac, 0x12023, &(0x7f0000002b80)=@pppol2tpv3={0x18, 0x1, {0x0, r10, {0x2, 0x4e24, @loopback}, 0x2, 0x2, 0x2, 0x1}}, 0x80)
r11 = openat$bsg(0xffffffffffffff9c, &(0x7f0000002c00), 0x200000, 0x0)
write$P9_RSTATu(r11, &(0x7f0000002d80)={0x73, 0x7d, 0x2, {{0x0, 0x51, 0x4, 0x3, {0x4, 0x4, 0x6}, 0x340c0000, 0x0, 0x5, 0x93e, 0xd, '/dev/usbmon#\x00', 0x4, '#\\.-', 0xc, '/dev/autofs\x00', 0x1, '\x00'}, 0xd, '/dev/usbmon#\x00', 0xee01, 0xee00}}, 0x73)

[  146.960677] 9pnet_fd: p9_fd_create_tcp (3932): problem connecting socket to 127.0.0.1
[  146.969103] loop3: detected capacity change from 0 to 512
[  146.982242] 9pnet_fd: p9_fd_create_tcp (3942): problem connecting socket to 127.0.0.1
[  147.005956] =======================================================
[  147.005956] WARNING: The mand mount option has been deprecated and
[  147.005956]          and is ignored by this kernel. Remove the mand
[  147.005956]          option from the mount to silence this warning.
[  147.005956] =======================================================
15:51:04 executing program 0:
r0 = syz_io_uring_setup(0x329f, &(0x7f0000000000)={0x0, 0xe51c, 0x2, 0x2, 0x1e0}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f00000000c0))
syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x1, 0x0, @fd, 0x0, 0x0, 0x0, {0x200}, 0x1}, 0xfffffff7)
r2 = signalfd4(r0, &(0x7f0000000140)={[0xf800000000000000]}, 0x8, 0x800)
r3 = syz_open_dev$usbmon(&(0x7f0000000180), 0x1000, 0x200400)
r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x20100, 0x190)
io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000200)=[r0, r2, r0, r3, r4, r0, r5, r0], 0x8)
pread64(r0, &(0x7f0000000240)=""/4096, 0x1000, 0x4)
rmdir(&(0x7f0000001240)='./file0\x00')
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000001280)={{0x1, 0x1, 0x18, <r6=>r3, {0x2}}, './file0/file0\x00'})
sendmsg$802154_raw(r6, &(0x7f0000001400)={&(0x7f00000012c0)={0x24, @short}, 0x14, &(0x7f00000013c0)={&(0x7f0000001300)="c5a6f949d50210094f788c78931b1fc374639eb077b9f96a593bad740137f0c27c2b91321fae6be484ea5100699b4b9241443f0b5496ee810e3ac28156897446d368ce43c5dbe51068099fa6aa3509ed2bb6d70d4414d0a0df852e7afa3cdfc6fd306c28a02f1ef92925a5178dd1b1b2f4d571b22a527f2e80b25f0130cced148f353cff85b0fd866dd293237c99097484941c7eb1b98d585eddfcac52c6e54b4f06010a80ef161a1aead3161f3aa228eada", 0xb2}, 0x1, 0x0, 0x0, 0x24040840}, 0x24000040)
recvfrom(r2, &(0x7f0000001440)=""/68, 0x44, 0x10100, &(0x7f00000014c0)=@can, 0x80)
r7 = syz_open_dev$tty20(0xc, 0x4, 0x0)
r8 = openat$autofs(0xffffffffffffff9c, &(0x7f0000002a80), 0x200, 0x0)
close_range(r7, r8, 0x0)
r9 = socket$nl_audit(0x10, 0x3, 0x9)
r10 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
recvfrom(r9, &(0x7f0000002ac0)=""/172, 0xac, 0x12023, &(0x7f0000002b80)=@pppol2tpv3={0x18, 0x1, {0x0, r10, {0x2, 0x4e24, @loopback}, 0x2, 0x2, 0x2, 0x1}}, 0x80)
r11 = openat$bsg(0xffffffffffffff9c, &(0x7f0000002c00), 0x200000, 0x0)
write$P9_RSTATu(r11, &(0x7f0000002d80)={0x73, 0x7d, 0x2, {{0x0, 0x51, 0x4, 0x3, {0x4, 0x4, 0x6}, 0x340c0000, 0x0, 0x5, 0x93e, 0xd, '/dev/usbmon#\x00', 0x4, '#\\.-', 0xc, '/dev/autofs\x00', 0x1, '\x00'}, 0xd, '/dev/usbmon#\x00', 0xee01, 0xee00}}, 0x73)

[  147.032477] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
15:51:04 executing program 2:
mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000, 0x6, &(0x7f0000ffd000/0x2000)=nil)
r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0, <r2=>0x0, <r3=>0x0}, &(0x7f0000000080)=0xc)
newfstatat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, <r4=>0x0}, 0x1000)
lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r5=>0x0})
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000000)={0x0, <r7=>0x0}, &(0x7f0000000040)=0x5)
setuid(r7)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000380)={{{@in6=@private2, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0}}, {{@in6=@ipv4={""/10, ""/2, @remote}}, 0x0, @in6=@loopback}}, &(0x7f0000000480)=0xe8)
r9 = geteuid()
r10 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000000)={0x0, <r11=>0x0}, &(0x7f0000000040)=0x5)
geteuid()
setuid(r11)
lstat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, <r12=>0x0})
stat(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r13=>0x0})
fsetxattr$system_posix_acl(r0, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f0000000780)=ANY=[@ANYBLOB="020000000100020000000700000006008529d4b5e25bb288c4bcdc9506d536ec5859fbb5cbcda0afe58c80e1f5265c0de6346a8d129c13619beae7c5be0dccdc175423043281b52b8f80d475721003af2a5b0942b4af698b00000000a677", @ANYRES32=r2, @ANYBLOB="02000200", @ANYRES32=r4, @ANYBLOB="02000600", @ANYRES32=r5, @ANYBLOB="02000300", @ANYRES32=r7, @ANYBLOB="02000200", @ANYRES32=r8, @ANYBLOB="02000400", @ANYRES32=r9, @ANYBLOB="02000a00", @ANYRES32=r11, @ANYBLOB="040000000000000008000500", @ANYRES32=r12, @ANYBLOB="08000400", @ANYRES32=r13, @ANYBLOB="10000400000000002000000000000000"], 0x6c, 0x2)
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000010001000000000002000400", @ANYRES32=0xee00, @ANYBLOB="040000000000000008000600", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=r3, @ANYBLOB="1000040000000000000000617958bfd9cfd6776a99246654a5b1bb8072163e3b947a0423121e9d0db690ca061f6d635e63f40665eab10f998883a3de934d13e4057666cdf8fd476d54f72d4fe36a4a71b9af8b9481ff8f0e6ab8b335abe66c8d1bc5a8844b6a11fdb2a1d263563f41267be88d4679917659576de9f3aed1cd0ea375e261b0ae94150c50f53d6556f23ffb640f"], 0x3c, 0x0)
mkdirat(r0, &(0x7f0000000100)='./file0\x00', 0x0)

15:51:04 executing program 1:
syz_mount_image$msdos(0x0, 0x0, 0x0, 0x1, &(0x7f0000000280)=[{0x0, 0x0, 0x100}], 0x0, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff)
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r2 = dup(r1)
setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0xf, 0x0, 0x0)
getdents(r2, &(0x7f0000000080)=""/156, 0x9c)
r3 = fork()
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x12, 0xffffffffffffffff, 0x0)
r4 = io_uring_setup(0x68e4, &(0x7f0000000440)={0x0, 0x8a30, 0x1, 0x0, 0x5b})
kcmp$KCMP_EPOLL_TFD(0x0, r3, 0x7, r0, &(0x7f00000004c0)={0xffffffffffffffff, r4, 0xd4000000})
ptrace(0x8, 0x0)
wait4(0x0, &(0x7f0000000240), 0x8, &(0x7f0000000180))
ptrace(0x10, r3)
ptrace(0x8, r3)
wait4(r3, &(0x7f0000000240), 0x8, &(0x7f0000000280))
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
socket$netlink(0x10, 0x3, 0x5)
socket$nl_generic(0x10, 0x3, 0x10)

15:51:04 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
io_setup(0xfff, &(0x7f0000000040)=<r1=>0x0)
io_getevents(r1, 0x1, 0x0, 0x0, 0x0)
io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}])
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x103483)
io_setup(0x572, &(0x7f0000000140)=<r3=>0x0)
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
dup2(r2, r4)
io_submit(r3, 0x3, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x0, r4, 0x0}])
r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
io_submit(r3, 0x1, &(0x7f00000002c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0xd545, r5, &(0x7f0000000400)="6fa3bbf7f334cbb13a7d4128f1c0aa468a9e8beaad821a8f1dd8dad03a3589cb5fda1b1c93ad6b63b1a964efb4aef3602b774e800c787bafa06ad3e43ba66a2cbed8ccc7d953fd3c8d39d25a66fd5cbb53999b42f6aaf89ffe8f604faf09c68be51b1a9add7e86f4f291a6bcc2adeeab8209c8a7a3e42424a83242554e65f57392fde921bdbf2b109698be769aeedd8ab30e4205eb9a486be0a85ce8fc8faf48f019e4aa76ca3bc6a7d52ae4473920e8cc12374117ea44e04b2c956bea1fe329bd184021ac49f889da8ad15439c29d301386fa569240a7d7e5d29048436a4d36e4f4aba3acae43ee9cf18046bfaccec6f705d3bb6c", 0xf5, 0xfff, 0x0, 0x2}])
r6 = memfd_secret(0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000200)=0xffffffffffffffff, 0x4)
io_pgetevents(0x0, 0x0, 0x3, &(0x7f00000000c0)=[{}, {}, {}], 0x0, &(0x7f0000000180)={&(0x7f0000000140)={[0x1f2]}, 0x8})

15:51:04 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
r2 = dup2(r1, r0)
ioctl$SG_IO(r2, 0x2285, &(0x7f00000022c0)={0x53, 0xfffffffc, 0x6, 0x0, @buffer={0x0, 0xaa, &(0x7f0000000480)=""/170}, &(0x7f0000001240)="05ae46670f9d", 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r4 = syz_open_dev$vcsa(&(0x7f0000000340), 0x0, 0x66040)
sendfile(r3, r4, 0x0, 0x1f)
ioctl$SG_SET_TIMEOUT(r3, 0x2201, &(0x7f0000000040)=0x2)

[  147.123870] loop1: detected capacity change from 0 to 1
[  147.152110] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
15:51:04 executing program 6:
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$usbmon(&(0x7f0000000200), 0x9, 0x40042)
r1 = memfd_create(&(0x7f0000000180)=':^/\x00l?4\a_\xf1\x10\xd0\x84\xba\xcd_\x91\x8c\x17\xf1+\xcc\xe3b\x06\xf2W\x1b\x1b\xa8\xd6\xd0\xbd\x85\x82vX\x8c\t7\x9b\xcbJ\xe9\x9fK5S\xd1\x15\x8e\x9b\xf1\xc1\xfd\x91\x04\x88>\xffy~wk \x02\xf6CE\xb4m\r\xb3*\xf6\xcc\xff\xf4^e\x12\x84\x84@X\xa2\xa0\x8f\xe2', 0x1)
ftruncate(r1, 0x8800000)
read(r0, &(0x7f00000003c0)=""/154, 0x9a)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x7})
fsetxattr$security_capability(r0, &(0x7f0000000000), &(0x7f00000002c0)=@v1={0x1000000, [{0xb684, 0x800}]}, 0xc, 0x3)
r2 = perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0xa1, 0x3, 0x80, 0x1f, 0x0, 0x3, 0x30, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000000080), 0x2}, 0x281, 0x6, 0x0, 0x3, 0xfffffffffffff001, 0x7, 0x9, 0x0, 0x8000, 0x0, 0xe3e}, 0x0, 0x6, r0, 0xa)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000140)=0x5)
lseek(r1, 0x0, 0x4)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000240)={<r3=>0xffffffffffffffff, 0x8000, 0x0, 0x9})
ioctl$MON_IOCT_RING_SIZE(r3, 0x9204, 0x101a37)

15:51:04 executing program 2:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/snd_seq', 0x200, 0x41)
r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x4, 0x5}}, './file0\x00'})
lsetxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=@known='security.selinux\x00', &(0x7f00000001c0)='\x00', 0x700, 0x0)

[  147.295089] audit: type=1400 audit(1756482664.800:10): avc:  denied  { read } for  pid=3964 comm="syz-executor.6" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[  147.303760] audit: type=1400 audit(1756482664.805:11): avc:  denied  { write } for  pid=3964 comm="syz-executor.6" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[  147.380312] SELinux:  Context  is not valid (left unmapped).
[  149.829222] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  149.832151] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  149.834255] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  149.840868] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  149.843711] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  151.865394] Bluetooth: hci4: command tx timeout
[  153.914125] Bluetooth: hci4: command tx timeout
[  155.962455] Bluetooth: hci4: command tx timeout
[  158.009431] Bluetooth: hci4: command tx timeout
[  167.101502] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  167.102751] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  167.158129] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  167.159629] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
15:51:35 executing program 0:
r0 = syz_io_uring_setup(0x329f, &(0x7f0000000000)={0x0, 0xe51c, 0x2, 0x2, 0x1e0}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f00000000c0))
syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x1, 0x0, @fd, 0x0, 0x0, 0x0, {0x200}, 0x1}, 0xfffffff7)
r2 = signalfd4(r0, &(0x7f0000000140)={[0xf800000000000000]}, 0x8, 0x800)
r3 = syz_open_dev$usbmon(&(0x7f0000000180), 0x1000, 0x200400)
r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x20100, 0x190)
io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000200)=[r0, r2, r0, r3, r4, r0, r5, r0], 0x8)
pread64(r0, &(0x7f0000000240)=""/4096, 0x1000, 0x4)
rmdir(&(0x7f0000001240)='./file0\x00')
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000001280)={{0x1, 0x1, 0x18, <r6=>r3, {0x2}}, './file0/file0\x00'})
sendmsg$802154_raw(r6, &(0x7f0000001400)={&(0x7f00000012c0)={0x24, @short}, 0x14, &(0x7f00000013c0)={&(0x7f0000001300)="c5a6f949d50210094f788c78931b1fc374639eb077b9f96a593bad740137f0c27c2b91321fae6be484ea5100699b4b9241443f0b5496ee810e3ac28156897446d368ce43c5dbe51068099fa6aa3509ed2bb6d70d4414d0a0df852e7afa3cdfc6fd306c28a02f1ef92925a5178dd1b1b2f4d571b22a527f2e80b25f0130cced148f353cff85b0fd866dd293237c99097484941c7eb1b98d585eddfcac52c6e54b4f06010a80ef161a1aead3161f3aa228eada", 0xb2}, 0x1, 0x0, 0x0, 0x24040840}, 0x24000040)
recvfrom(r2, &(0x7f0000001440)=""/68, 0x44, 0x10100, &(0x7f00000014c0)=@can, 0x80)
r7 = syz_open_dev$tty20(0xc, 0x4, 0x0)
r8 = openat$autofs(0xffffffffffffff9c, &(0x7f0000002a80), 0x200, 0x0)
close_range(r7, r8, 0x0)
r9 = socket$nl_audit(0x10, 0x3, 0x9)
r10 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
recvfrom(r9, &(0x7f0000002ac0)=""/172, 0xac, 0x12023, &(0x7f0000002b80)=@pppol2tpv3={0x18, 0x1, {0x0, r10, {0x2, 0x4e24, @loopback}, 0x2, 0x2, 0x2, 0x1}}, 0x80)
r11 = openat$bsg(0xffffffffffffff9c, &(0x7f0000002c00), 0x200000, 0x0)
write$P9_RSTATu(r11, &(0x7f0000002d80)={0x73, 0x7d, 0x2, {{0x0, 0x51, 0x4, 0x3, {0x4, 0x4, 0x6}, 0x340c0000, 0x0, 0x5, 0x93e, 0xd, '/dev/usbmon#\x00', 0x4, '#\\.-', 0xc, '/dev/autofs\x00', 0x1, '\x00'}, 0xd, '/dev/usbmon#\x00', 0xee01, 0xee00}}, 0x73)

15:51:35 executing program 4:
r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101000, 0x100)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f00000000c0)={0x15})

15:51:35 executing program 7:
syz_mount_image$msdos(0x0, 0x0, 0x0, 0x1, &(0x7f0000000280)=[{0x0, 0x0, 0x100}], 0x0, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff)
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r2 = dup(r1)
setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0xf, 0x0, 0x0)
getdents(r2, &(0x7f0000000080)=""/156, 0x9c)
r3 = fork()
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x12, 0xffffffffffffffff, 0x0)
r4 = io_uring_setup(0x68e4, &(0x7f0000000440)={0x0, 0x8a30, 0x1, 0x0, 0x5b})
kcmp$KCMP_EPOLL_TFD(0x0, r3, 0x7, r0, &(0x7f00000004c0)={0xffffffffffffffff, r4, 0xd4000000})
ptrace(0x8, 0x0)
wait4(0x0, &(0x7f0000000240), 0x8, &(0x7f0000000180))
ptrace(0x10, r3)
ptrace(0x8, r3)
wait4(r3, &(0x7f0000000240), 0x8, &(0x7f0000000280))
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
socket$netlink(0x10, 0x3, 0x5)
socket$nl_generic(0x10, 0x3, 0x10)

15:51:35 executing program 1:
syz_mount_image$msdos(0x0, 0x0, 0x0, 0x1, &(0x7f0000000280)=[{0x0, 0x0, 0x100}], 0x0, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff)
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r2 = dup(r1)
setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0xf, 0x0, 0x0)
getdents(r2, &(0x7f0000000080)=""/156, 0x9c)
r3 = fork()
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x12, 0xffffffffffffffff, 0x0)
r4 = io_uring_setup(0x68e4, &(0x7f0000000440)={0x0, 0x8a30, 0x1, 0x0, 0x5b})
kcmp$KCMP_EPOLL_TFD(0x0, r3, 0x7, r0, &(0x7f00000004c0)={0xffffffffffffffff, r4, 0xd4000000})
ptrace(0x8, 0x0)
wait4(0x0, &(0x7f0000000240), 0x8, &(0x7f0000000180))
ptrace(0x10, r3)
ptrace(0x8, r3)
wait4(r3, &(0x7f0000000240), 0x8, &(0x7f0000000280))
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
socket$netlink(0x10, 0x3, 0x5)
socket$nl_generic(0x10, 0x3, 0x10)

15:51:35 executing program 6:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0xa4, &(0x7f00000001c0)={@local, @dev, @val={@void}, {@ipv4={0x800, @dccp={{0xe, 0x4, 0x2, 0x17, 0x92, 0x64, 0x0, 0x8, 0x21, 0x0, @empty, @private=0xa010102, {[@timestamp_prespec={0x44, 0x24, 0x48, 0x3, 0x9, [{@multicast1, 0x9}, {@loopback, 0xfffffff7}, {@local, 0x11}, {@local, 0x7}]}]}}, {{0x4e21, 0x4e22, 0x4, 0x1, 0x1, 0x0, 0x0, 0x8, 0x1, "d91e95", 0x9, "f6941f"}, "ac1dc1f980bc87c271a929647c2d59dbbc45e36c72c12dba3de305cc8f4b5e7beb588dbc41a89e8d63d9138caea152d0f46e11641b0d4817413cddb2a2620776a0fc5ca8ac467c1abddc"}}}}}, 0x0)
getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000080)={'filter\x00', 0x0, [0x5, 0x2, 0x7, 0x0, 0x3]}, &(0x7f0000000180)=0x54)

15:51:35 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x17, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001000028020000028401001b0000000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e35313233303831343700"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000b00cb2cc029f49d8b90449a7ecd54d49010000000c00000000000000dff4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000100000000000000000000000000000000000000000000002e00000000000000", 0x40, 0x540}, {&(0x7f0000010300)="0000000000000000000000000000000000000000010400"/32, 0x20, 0x640}, {&(0x7f0000010400)="0200000003000000040000006a000f000300040000000000000000000f00bc0f", 0x20, 0x800}, {&(0x7f0000010500)="ffff3f00000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0100ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000dff4655fdff4655fdff4655f00"/4128, 0x1020, 0x1000}, {&(0x7f0000011600)="ed41000000080000dff4655fe0f4655fe0f4655f00000000000004000400000000000000050000000800"/64, 0x40, 0x2100}, {&(0x7f0000011700)="20000000b45b976cb45b976c00000000dff4655f00"/32, 0x20, 0x2180}, {&(0x7f0000011800)="c041000000380000dff4655fdff4655fdff4655f00000000000002001c0000000000000000000000090000000a0000000b0000000c0000000d0000000e0000000f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000dff4655f000000000000000000000000000002ea00"/192, 0xc0, 0x2a00}, {&(0x7f0000011900)="ed4100003c000000e0f4655fe0f4655fe0f4655f0000000000000200000000000000001003000000020000000d0000001000050166696c65300000000e0000002800050766696c653100000000000000000000000000000000000000000000000000000024a8270e00000000000000000000000000000000000000000000000020000000b45b976cb45b976cb45b976ce0f4655fb45b976c0000000000000000000002ea04070000000000000000000000000000646174610000000000000000", 0xc0, 0x2b00}, {&(0x7f0000011a00)="ed8100001a040000e0f4655fe0f4655fe0f4655f000000000000010004000000000000000100000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000038ac705900000000000000000000000000000000000000000000000020000000b45b976cb45b976cb45b976ce0f4655fb45b976c0000000000000000", 0xa0, 0x2c00}, {&(0x7f0000011b00)="ffa1000026000000e0f4655fe0f4655fe0f4655f00000000000001000000000000000000010000002f746d702f73797a2d696d61676567656e3531323330383134372f66696c65302f66696c653000000000000000000000000000000000000000000000ae39138600000000000000000000000000000000000000000000000020000000b45b976cb45b976cb45b976ce0f4655fb45b976c0000000000000000", 0xa0, 0x2d00}, {&(0x7f0000011c00)="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", 0x1a0, 0x2e00}, {&(0x7f0000011e00)="ed81000064000000e0f4655fe0f4655fe0f4655f000000000000010000000000000000100100000073797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c412e2ee000000000000000000000000000000000000000000000000020000000b45b976cb45b976cb45b976ce0f4655fb45b976c0000000000000000000002ea040734000000000028000000000000006461746100000000000000000000000000000000000000000000000000000000000000006c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273", 0x100, 0x3000}, {&(0x7f0000011f00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531000000100000001000050166696c6532000000100000001000050166696c6533000000110000009407090166696c652e636f6c64000000", 0x80, 0x4000}, {&(0x7f0000012000)="0b0000000c0001022e000000020000000c0002022e2e000000000000e8070000", 0x20, 0x4800}, {&(0x7f0000012100)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x5000}, {&(0x7f0000012200)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x5800}, {&(0x7f0000012300)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x6000}, {&(0x7f0000012400)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x6800}, {&(0x7f0000012500)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x7000}, {&(0x7f0000012600)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x7800}, {&(0x7f0000012700)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x8000}], 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="006c9952a9543b8d9a0778c6ba4f18799b94ad590fffd6aa0ea1748814562fd01f893ebb870000000000000000c7f535236c5e418c9a4bc6bd89a396d2752c9d"])

15:51:35 executing program 2:
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x6}}, './file0\x00'})
r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x21)
r2 = dup3(r1, r0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, {0x6}}, './file0\x00'})
ioctl$INCFS_IOC_PERMIT_FILL(r0, 0x40046721, &(0x7f0000000100)={r1})
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = gettid()
process_vm_writev(r3, &(0x7f0000001900)=[{&(0x7f000001a500)=""/102400, 0x19000}], 0x1, &(0x7f0000002b00)=[{&(0x7f0000001940)=""/4096, 0x1000}], 0x1, 0x0)
getpgrp(0x0)

15:51:35 executing program 3:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x400005})
pwritev2(r0, &(0x7f0000000040)=[{&(0x7f00000008c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
sendfile(r2, r3, 0x0, 0xa0103)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1)
sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r4, 0x4, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_BSS_BASIC_RATES={0xa, 0x24, [{0x9}, {0x16, 0x1}, {0x2, 0x1}, {0x48}, {0x9, 0x1}, {0x36, 0x1}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x20004040)

[  177.896976] EXT4-fs warning (device sda): verify_group_input:136: Cannot add at group 21 (only 16 groups)
[  177.939773] loop7: detected capacity change from 0 to 1
[  177.947639] EXT4-fs warning (device sda): verify_group_input:136: Cannot add at group 21 (only 16 groups)
[  178.022984] loop5: detected capacity change from 0 to 512
[  178.109617] kmemleak: Found object by alias at 0x607f1a639944
[  178.109650] CPU: 1 UID: 0 PID: 4455 Comm: syz-executor.6 Tainted: G        W           6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) 
[  178.109682] Tainted: [W]=WARN
[  178.109689] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  178.109701] Call Trace:
[  178.109708]  <TASK>
[  178.109717]  dump_stack_lvl+0xca/0x120
[  178.109757]  __lookup_object+0x94/0xb0
[  178.109786]  delete_object_full+0x27/0x70
[  178.109815]  free_percpu+0x30/0x1160
[  178.109843]  ? arch_uprobe_clear_state+0x16/0x140
[  178.109889]  futex_hash_free+0x38/0xc0
[  178.109914]  mmput+0x2d3/0x390
[  178.109946]  do_exit+0x79d/0x2970
[  178.109970]  ? lock_release+0xc8/0x290
[  178.109996]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  178.110033]  ? __pfx_do_exit+0x10/0x10
[  178.110058]  ? find_held_lock+0x2b/0x80
[  178.110088]  ? get_signal+0x835/0x2340
[  178.110123]  do_group_exit+0xd3/0x2a0
[  178.110150]  get_signal+0x2315/0x2340
[  178.110190]  ? __pfx_get_signal+0x10/0x10
[  178.110219]  ? do_futex+0x135/0x370
[  178.110244]  ? __pfx_do_futex+0x10/0x10
[  178.110271]  arch_do_signal_or_restart+0x80/0x790
[  178.110302]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  178.110331]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  178.110367]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  178.110402]  ? __pfx___x64_sys_futex+0x10/0x10
[  178.110427]  ? __sys_setsockopt+0x13f/0x1a0
[  178.110464]  exit_to_user_mode_loop+0x8b/0x110
[  178.110486]  do_syscall_64+0x2f7/0x360
[  178.110507]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  178.110528] RIP: 0033:0x7fc313d54b19
[  178.110544] Code: Unable to access opcode bytes at 0x7fc313d54aef.
[  178.110553] RSP: 002b:00007fc3112ca218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  178.110573] RAX: 0000000000000000 RBX: 00007fc313e67f68 RCX: 00007fc313d54b19
[  178.110586] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fc313e67f68
[  178.110599] RBP: 00007fc313e67f60 R08: 0000000000000000 R09: 0000000000000000
[  178.110611] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc313e67f6c
[  178.110624] R13: 00007ffd007759ff R14: 00007fc3112ca300 R15: 0000000000022000
[  178.110652]  </TASK>
[  178.110659] kmemleak: Object (percpu) 0x607f1a639940 (size 8):
[  178.110671] kmemleak:   comm "syz-executor.7", pid 3992, jiffies 4294816618
[  178.110683] kmemleak:   min_count = 1
[  178.110690] kmemleak:   count = 1
[  178.110697] kmemleak:   flags = 0x21
[  178.110703] kmemleak:   checksum = 0
[  178.110710] kmemleak:   backtrace:
[  178.110716]  pcpu_alloc_noprof+0x87a/0x1170
[  178.110742]  alloc_vfsmnt+0x135/0x6e0
[  178.110766]  clone_mnt+0x6c/0xb70
[  178.110791]  copy_tree+0x34b/0xaf0
[  178.110808]  copy_mnt_ns+0x1ab/0xab0
[  178.110827]  create_new_namespaces+0xd6/0xab0
[  178.110856]  unshare_nsproxy_namespaces+0xc0/0x200
[  178.110885]  ksys_unshare+0x468/0xa10
[  178.110904]  __x64_sys_unshare+0x31/0x40
[  178.110924]  do_syscall_64+0xbf/0x360
[  178.110940]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  178.195078] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
15:51:35 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
creat(&(0x7f00000000c0)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GETSTATE(r0, 0x541b, &(0x7f0000002a00))
r1 = memfd_secret(0x0)
open_tree(r0, &(0x7f0000000080)='./file0\x00', 0x8000)
ioctl$NS_GET_USERNS(r1, 0xb701, 0x0)

[  178.262463] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
15:51:35 executing program 2:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0)
poll(&(0x7f0000000400)=[{r0}, {}, {}, {0xffffffffffffffff, 0x100}], 0x4, 0x2009)
getsockopt$inet6_udp_int(r0, 0x11, 0x65, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
ioctl$CDROMVOLCTRL(r0, 0x530a, &(0x7f0000000080)={0x80, 0x9, 0x20, 0x7})

15:51:35 executing program 4:
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r2 = syz_open_dev$vcsa(&(0x7f0000000340), 0x0, 0x66040)
setxattr$trusted_overlay_opaque(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000080), 0x2, 0x0)
sendfile(r1, r2, 0x0, 0x1f)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xc, 0x4000010, r1, 0x0)
ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x0)

15:51:35 executing program 0:
r0 = syz_io_uring_setup(0x329f, &(0x7f0000000000)={0x0, 0xe51c, 0x2, 0x2, 0x1e0}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f00000000c0))
syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x1, 0x0, @fd, 0x0, 0x0, 0x0, {0x200}, 0x1}, 0xfffffff7)
r2 = signalfd4(r0, &(0x7f0000000140)={[0xf800000000000000]}, 0x8, 0x800)
r3 = syz_open_dev$usbmon(&(0x7f0000000180), 0x1000, 0x200400)
r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x20100, 0x190)
io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000200)=[r0, r2, r0, r3, r4, r0, r5, r0], 0x8)
pread64(r0, &(0x7f0000000240)=""/4096, 0x1000, 0x4)
rmdir(&(0x7f0000001240)='./file0\x00')
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000001280)={{0x1, 0x1, 0x18, <r6=>r3, {0x2}}, './file0/file0\x00'})
sendmsg$802154_raw(r6, &(0x7f0000001400)={&(0x7f00000012c0)={0x24, @short}, 0x14, &(0x7f00000013c0)={&(0x7f0000001300)="c5a6f949d50210094f788c78931b1fc374639eb077b9f96a593bad740137f0c27c2b91321fae6be484ea5100699b4b9241443f0b5496ee810e3ac28156897446d368ce43c5dbe51068099fa6aa3509ed2bb6d70d4414d0a0df852e7afa3cdfc6fd306c28a02f1ef92925a5178dd1b1b2f4d571b22a527f2e80b25f0130cced148f353cff85b0fd866dd293237c99097484941c7eb1b98d585eddfcac52c6e54b4f06010a80ef161a1aead3161f3aa228eada", 0xb2}, 0x1, 0x0, 0x0, 0x24040840}, 0x24000040)
recvfrom(r2, &(0x7f0000001440)=""/68, 0x44, 0x10100, &(0x7f00000014c0)=@can, 0x80)
r7 = syz_open_dev$tty20(0xc, 0x4, 0x0)
r8 = openat$autofs(0xffffffffffffff9c, &(0x7f0000002a80), 0x200, 0x0)
close_range(r7, r8, 0x0)
r9 = socket$nl_audit(0x10, 0x3, 0x9)
r10 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
recvfrom(r9, &(0x7f0000002ac0)=""/172, 0xac, 0x12023, &(0x7f0000002b80)=@pppol2tpv3={0x18, 0x1, {0x0, r10, {0x2, 0x4e24, @loopback}, 0x2, 0x2, 0x2, 0x1}}, 0x80)
openat$bsg(0xffffffffffffff9c, &(0x7f0000002c00), 0x200000, 0x0)

15:51:35 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = syz_open_dev$vcsa(&(0x7f0000000340), 0x0, 0x66040)
sendfile(r0, r1, 0x0, 0x1f)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x10, 0x8, 0x43, 0xdd, 0x0, 0x9, 0x1420, 0x9, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8, 0x4, @perf_bp={&(0x7f0000000000), 0x3}, 0x2009, 0x3, 0x401, 0xe, 0x8, 0x6, 0xffff, 0x0, 0x2, 0x0, 0xffff})
io_setup(0x572, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
io_submit(r2, 0x2, &(0x7f00000001c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x600}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}])

15:51:35 executing program 3:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x400005})
pwritev2(r0, &(0x7f0000000040)=[{&(0x7f00000008c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
sendfile(r2, r3, 0x0, 0xa0103)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1)
sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r4, 0x4, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_BSS_BASIC_RATES={0xa, 0x24, [{0x9}, {0x16, 0x1}, {0x2, 0x1}, {0x48}, {0x9, 0x1}, {0x36, 0x1}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x20004040)

[  178.414474] kmemleak: Found object by alias at 0x607f1a639944
[  178.414498] CPU: 0 UID: 0 PID: 4482 Comm: syz-executor.6 Tainted: G        W           6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) 
[  178.414526] Tainted: [W]=WARN
[  178.414533] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  178.414544] Call Trace:
[  178.414549]  <TASK>
[  178.414557]  dump_stack_lvl+0xca/0x120
[  178.414594]  __lookup_object+0x94/0xb0
[  178.414620]  delete_object_full+0x27/0x70
[  178.414651]  free_percpu+0x30/0x1160
[  178.414676]  ? arch_uprobe_clear_state+0x16/0x140
[  178.414707]  futex_hash_free+0x38/0xc0
[  178.414729]  mmput+0x2d3/0x390
[  178.414758]  do_exit+0x79d/0x2970
[  178.414783]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  178.414816]  ? __pfx_do_exit+0x10/0x10
[  178.414837]  ? find_held_lock+0x2b/0x80
[  178.414865]  ? get_signal+0x835/0x2340
[  178.414896]  do_group_exit+0xd3/0x2a0
[  178.414919]  get_signal+0x2315/0x2340
[  178.414946]  ? __might_fault+0x151/0x190
[  178.414969]  ? do_vfs_ioctl+0x125/0x1470
[  178.414998]  ? __pfx_get_signal+0x10/0x10
[  178.415023]  ? do_futex+0x135/0x370
[  178.415045]  ? __pfx_do_futex+0x10/0x10
[  178.415063]  ? file_has_perm+0x187/0x270
[  178.415085]  arch_do_signal_or_restart+0x80/0x790
[  178.415112]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  178.415138]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  178.415169]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  178.415200]  ? __pfx___x64_sys_futex+0x10/0x10
[  178.415221]  ? xfd_validate_state+0x55/0x180
[  178.415254]  exit_to_user_mode_loop+0x8b/0x110
[  178.415274]  do_syscall_64+0x2f7/0x360
[  178.415293]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  178.415312] RIP: 0033:0x7fc313d54b19
[  178.415326] Code: Unable to access opcode bytes at 0x7fc313d54aef.
[  178.415334] RSP: 002b:00007fc3112ca218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  178.415351] RAX: fffffffffffffe00 RBX: 00007fc313e67f68 RCX: 00007fc313d54b19
[  178.415363] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fc313e67f68
[  178.415374] RBP: 00007fc313e67f60 R08: 0000000000000000 R09: 0000000000000000
[  178.415385] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc313e67f6c
[  178.415396] R13: 00007ffd007759ff R14: 00007fc3112ca300 R15: 0000000000022000
[  178.415421]  </TASK>
[  178.415427] kmemleak: Object (percpu) 0x607f1a639940 (size 8):
[  178.415438] kmemleak:   comm "syz-executor.7", pid 3992, jiffies 4294816618
[  178.415449] kmemleak:   min_count = 1
[  178.415455] kmemleak:   count = 1
[  178.415461] kmemleak:   flags = 0x21
[  178.415467] kmemleak:   checksum = 0
[  178.415473] kmemleak:   backtrace:
[  178.415478]  pcpu_alloc_noprof+0x87a/0x1170
[  178.415501]  alloc_vfsmnt+0x135/0x6e0
[  178.415522]  clone_mnt+0x6c/0xb70
[  178.415544]  copy_tree+0x34b/0xaf0
[  178.415560]  copy_mnt_ns+0x1ab/0xab0
[  178.415577]  create_new_namespaces+0xd6/0xab0
[  178.415602]  unshare_nsproxy_namespaces+0xc0/0x200
[  178.415627]  ksys_unshare+0x468/0xa10
[  178.415644]  __x64_sys_unshare+0x31/0x40
[  178.415662]  do_syscall_64+0xbf/0x360
[  178.415675]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
15:51:36 executing program 0:
r0 = syz_io_uring_setup(0x329f, &(0x7f0000000000)={0x0, 0xe51c, 0x2, 0x2, 0x1e0}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f00000000c0))
syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x1, 0x0, @fd, 0x0, 0x0, 0x0, {0x200}, 0x1}, 0xfffffff7)
r2 = signalfd4(r0, &(0x7f0000000140)={[0xf800000000000000]}, 0x8, 0x800)
r3 = syz_open_dev$usbmon(&(0x7f0000000180), 0x1000, 0x200400)
r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x20100, 0x190)
io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000200)=[r0, r2, r0, r3, r4, r0, r5, r0], 0x8)
pread64(r0, &(0x7f0000000240)=""/4096, 0x1000, 0x4)
rmdir(&(0x7f0000001240)='./file0\x00')
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000001280)={{0x1, 0x1, 0x18, <r6=>r3, {0x2}}, './file0/file0\x00'})
sendmsg$802154_raw(r6, &(0x7f0000001400)={&(0x7f00000012c0)={0x24, @short}, 0x14, &(0x7f00000013c0)={&(0x7f0000001300)="c5a6f949d50210094f788c78931b1fc374639eb077b9f96a593bad740137f0c27c2b91321fae6be484ea5100699b4b9241443f0b5496ee810e3ac28156897446d368ce43c5dbe51068099fa6aa3509ed2bb6d70d4414d0a0df852e7afa3cdfc6fd306c28a02f1ef92925a5178dd1b1b2f4d571b22a527f2e80b25f0130cced148f353cff85b0fd866dd293237c99097484941c7eb1b98d585eddfcac52c6e54b4f06010a80ef161a1aead3161f3aa228eada", 0xb2}, 0x1, 0x0, 0x0, 0x24040840}, 0x24000040)
recvfrom(r2, &(0x7f0000001440)=""/68, 0x44, 0x10100, &(0x7f00000014c0)=@can, 0x80)
r7 = syz_open_dev$tty20(0xc, 0x4, 0x0)
r8 = openat$autofs(0xffffffffffffff9c, &(0x7f0000002a80), 0x200, 0x0)
close_range(r7, r8, 0x0)
r9 = socket$nl_audit(0x10, 0x3, 0x9)
r10 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
recvfrom(r9, &(0x7f0000002ac0)=""/172, 0xac, 0x12023, &(0x7f0000002b80)=@pppol2tpv3={0x18, 0x1, {0x0, r10, {0x2, 0x4e24, @loopback}, 0x2, 0x2, 0x2, 0x1}}, 0x80)

15:51:45 executing program 2:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
getsockopt$sock_linger(r0, 0x1, 0x5, 0x0, &(0x7f0000000140))
ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x80089419, &(0x7f0000000000))
syz_emit_ethernet(0x82, &(0x7f00000000c0)={@local, @broadcast, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @source_quench={0xb, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @dev, @loopback, {[@cipso={0x86, 0x3d, 0x0, [{0x0, 0xc, "ba4906dca0ac3f21ee4d"}, {0x0, 0xa, "0b1bb9011e61db13"}, {0x0, 0xe, "9fb8dedc4ea32f0be3c4157e"}, {0x0, 0x6, "3f70cd62"}, {0x0, 0xd, "20126d234d2862265a340c"}]}]}}}}}}}, 0x0)

15:51:45 executing program 4:
r0 = syz_io_uring_setup(0x329f, &(0x7f0000000000)={0x0, 0xe51c, 0x2, 0x2, 0x1e0}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f00000000c0))
syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x1, 0x0, @fd, 0x0, 0x0, 0x0, {0x200}, 0x1}, 0xfffffff7)
r2 = signalfd4(r0, &(0x7f0000000140)={[0xf800000000000000]}, 0x8, 0x800)
r3 = syz_open_dev$usbmon(&(0x7f0000000180), 0x1000, 0x200400)
r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x20100, 0x190)
io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000200)=[r0, r2, r0, r3, r4, r0, r5, r0], 0x8)
pread64(r0, &(0x7f0000000240)=""/4096, 0x1000, 0x4)
rmdir(&(0x7f0000001240)='./file0\x00')
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000001280)={{0x1, 0x1, 0x18, <r6=>r3, {0x2}}, './file0/file0\x00'})
sendmsg$802154_raw(r6, &(0x7f0000001400)={&(0x7f00000012c0)={0x24, @short}, 0x14, &(0x7f00000013c0)={&(0x7f0000001300)="c5a6f949d50210094f788c78931b1fc374639eb077b9f96a593bad740137f0c27c2b91321fae6be484ea5100699b4b9241443f0b5496ee810e3ac28156897446d368ce43c5dbe51068099fa6aa3509ed2bb6d70d4414d0a0df852e7afa3cdfc6fd306c28a02f1ef92925a5178dd1b1b2f4d571b22a527f2e80b25f0130cced148f353cff85b0fd866dd293237c99097484941c7eb1b98d585eddfcac52c6e54b4f06010a80ef161a1aead3161f3aa228eada", 0xb2}, 0x1, 0x0, 0x0, 0x24040840}, 0x24000040)
recvfrom(r2, &(0x7f0000001440)=""/68, 0x44, 0x10100, &(0x7f00000014c0)=@can, 0x80)
r7 = syz_open_dev$tty20(0xc, 0x4, 0x0)
r8 = openat$autofs(0xffffffffffffff9c, &(0x7f0000002a80), 0x200, 0x0)
close_range(r7, r8, 0x0)
r9 = socket$nl_audit(0x10, 0x3, 0x9)
r10 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
recvfrom(r9, &(0x7f0000002ac0)=""/172, 0xac, 0x12023, &(0x7f0000002b80)=@pppol2tpv3={0x18, 0x1, {0x0, r10, {0x2, 0x4e24, @loopback}, 0x2, 0x2, 0x2, 0x1}}, 0x80)
openat$bsg(0xffffffffffffff9c, &(0x7f0000002c00), 0x200000, 0x0)

15:51:45 executing program 1:
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@empty, 0x6, 0x1, 0x2, 0x8, 0x1ff, 0x6}, 0x20)
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = syz_open_dev$vcsa(&(0x7f0000000340), 0x0, 0x66040)
sendfile(r0, r1, 0x0, 0x1f)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001700)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x307, 0x2, 0x3, 0x4, 0x100, 0x9}, 0x20)
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x5c000, 0x2, &(0x7f0000000440)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802000001000001010053500701beef005252050181505824016d4100000000416d03000000000000030000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a0843451c0119", 0x71, 0xb800}], 0x0, &(0x7f0000000400))
write$binfmt_script(r0, &(0x7f0000001740)=ANY=[@ANYBLOB="2324202e2f66696c65302066736d61676963600a3a2891a7695128d7644647e1d41b29c4d54917c0289c1cde21ff166ae1766565a2424ff8c7d3dfd58256cb19f6212c3978a933e1d150f5e8fce4d66ccde713a0bb134188effe3c8b2b85f66befdc46566187935f3570ad3356202959a19730a354c4d8a5"], 0x78)
syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x6, 0x7, &(0x7f00000015c0)=[{&(0x7f0000000140)="15de838643a1e75f91e85cd6f1eb31fa4f79292a16aa3e57f6279e1e98c10ca8023928450f9e20334170d03d0dd69688479967b3c258e5f3028182848934", 0x3e, 0x4}, {&(0x7f0000000180)="919c8ee2a19d1fcc20c6e7108aa4cfa1e880c69ad2b008e83f053cc8ab0c49e0e3d67f4f180feda7f568fc3c94a0b9d0801230e9bbbc42115a78bfb0b611b4d8fc567eeca06d2c4c89c2c01797bbfa44f1f5d06dfef83a77b5e74c85623a2cdf5536b6cefbee438b7b1648e58aa68a9f16a32eb1932db526ed47f0322b7f47e5d477afa10a45b2fe98ed62feab6d5663a5ce85a8d1f0d2581349407f717bf9dc53d6076e3a3e54e570693104539b9c34bc7e548aa5bc2efb48d05a44a09da9d98d505818", 0xc4, 0x3}, {&(0x7f0000000480)="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", 0x1000, 0x10000}, {&(0x7f0000000280)="7335e5b14a128058d80deeeb22054f6581aada39fe139a995c42535da21294cbccfe5c405c87d7dd0af8c4ad8de306d6df6a6c9ea8b36f568fb572a10907f8bd728e908f88555abfa59fd3e2ddbe4ef73ba0d623ff2a40419e4b350f44c76907b2761a532664e0a2630e5054e03419341d3adb9a69a62d984410d456eba7cefa900f55c7ca4065b1893ed0c16545055cc5c6b8fe1702d34a952e36bcdb246ecd79f8af95fea35c4b9f943f883516f6da", 0xb0, 0x62cd}, {&(0x7f0000000340)="9825070fc514a82fdc5ab89384c10a8c96e6b2fc30445fd1a9b139456386188e5abaeb53754e60ed638a41838315f9efdfe6888982f1f87efcfcefaa74fc9224dd56020c859fbae9a32d1033b2843a59ae07012afd09bcaca0d34ab97c569c0ac9b812e0889868e7cc272a3d6fb3ac45bdb576dc61892c23a69e4c280d89218194f953a72ef53f32f9237ed71a4a2febfe61f86148415fd768189389e69c9ad9ca886afca61dd5c21a0b2de9b41ce9b370fc9b6dfc", 0xb5, 0x1400000000000000}, {&(0x7f0000001480)="a63a8bb0956b2b7fbbd977a7ea490cf8f109208f8be8add0a3ba70eb795260eddeeb1b834f34c061d053923233e0f7db14449923c835c7b060994108f0f16dd633dd5edf7d921420cd74bea94e9fda2ad5295c17c7c7ccbb743545f9be541e0a227a614c1b85e5a22ffb42c370482ae31b20dfd193e4ab19dc3140ca1c5625aec6adb90fa45a2e863cb6006ac6be3a1c581b60d4d09ea3bb2fb8a1b0", 0x9c, 0x1}, {&(0x7f0000001540)="1f48bb5f616d016185cde76255c220a91b121d5c00a7043614c8223b29dba4493d9d7c3ed64a64633481adf35922c73135c2ff3a36b6d22b64db03d093a5e4baff9ba8d57e2710217a99ec62f38b85fcd0", 0x51, 0xfff}], 0xa00000, &(0x7f0000001680)={[{@mpol={'mpol', 0x3d, {'local', '=static', @void}}}, {@huge_always}, {@huge_advise}], [{@subj_role={'subj_role', 0x3d, '\x00'}}, {@measure}, {@smackfsroot={'smackfsroot', 0x3d, 'iso9660\x00'}}, {@fsmagic={'fsmagic', 0x3d, 0x7c9b8e90}}]})

15:51:45 executing program 3:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x80)
fcntl$setstatus(r0, 0x4, 0x44000)
io_setup(0xfff, &(0x7f0000000040)=<r1=>0x0)
r2 = fcntl$dupfd(r0, 0x0, r0)
ioctl$LOOP_CHANGE_FD(r2, 0x4c06, 0xffffffffffffffff)
io_submit(r1, 0x3, &(0x7f0000000880)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000001280)="ed", 0x1}, 0x0, 0x0])

15:51:45 executing program 0:
r0 = syz_io_uring_setup(0x329f, &(0x7f0000000000)={0x0, 0xe51c, 0x2, 0x2, 0x1e0}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f00000000c0))
syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x1, 0x0, @fd, 0x0, 0x0, 0x0, {0x200}, 0x1}, 0xfffffff7)
r2 = signalfd4(r0, &(0x7f0000000140)={[0xf800000000000000]}, 0x8, 0x800)
r3 = syz_open_dev$usbmon(&(0x7f0000000180), 0x1000, 0x200400)
r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x20100, 0x190)
io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000200)=[r0, r2, r0, r3, r4, r0, r5, r0], 0x8)
pread64(r0, &(0x7f0000000240)=""/4096, 0x1000, 0x4)
rmdir(&(0x7f0000001240)='./file0\x00')
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000001280)={{0x1, 0x1, 0x18, <r6=>r3, {0x2}}, './file0/file0\x00'})
sendmsg$802154_raw(r6, &(0x7f0000001400)={&(0x7f00000012c0)={0x24, @short}, 0x14, &(0x7f00000013c0)={&(0x7f0000001300)="c5a6f949d50210094f788c78931b1fc374639eb077b9f96a593bad740137f0c27c2b91321fae6be484ea5100699b4b9241443f0b5496ee810e3ac28156897446d368ce43c5dbe51068099fa6aa3509ed2bb6d70d4414d0a0df852e7afa3cdfc6fd306c28a02f1ef92925a5178dd1b1b2f4d571b22a527f2e80b25f0130cced148f353cff85b0fd866dd293237c99097484941c7eb1b98d585eddfcac52c6e54b4f06010a80ef161a1aead3161f3aa228eada", 0xb2}, 0x1, 0x0, 0x0, 0x24040840}, 0x24000040)
recvfrom(r2, &(0x7f0000001440)=""/68, 0x44, 0x10100, &(0x7f00000014c0)=@can, 0x80)
r7 = syz_open_dev$tty20(0xc, 0x4, 0x0)
r8 = openat$autofs(0xffffffffffffff9c, &(0x7f0000002a80), 0x200, 0x0)
close_range(r7, r8, 0x0)
r9 = socket$nl_audit(0x10, 0x3, 0x9)
recvfrom(r9, &(0x7f0000002ac0)=""/172, 0xac, 0x12023, &(0x7f0000002b80)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e24, @loopback}, 0x2, 0x2, 0x2, 0x1}}, 0x80)

15:51:45 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = syz_open_dev$vcsa(&(0x7f0000000340), 0x0, 0x66040)
sendfile(r0, r1, 0x0, 0x1f)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x10, 0x8, 0x43, 0xdd, 0x0, 0x9, 0x1420, 0x9, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8, 0x4, @perf_bp={&(0x7f0000000000), 0x3}, 0x2009, 0x3, 0x401, 0xe, 0x8, 0x6, 0xffff, 0x0, 0x2, 0x0, 0xffff})
io_setup(0x572, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
io_submit(r2, 0x2, &(0x7f00000001c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x600}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}])

15:51:45 executing program 7:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x400005})
pwritev2(r0, &(0x7f0000000040)=[{&(0x7f00000008c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
sendfile(r2, r3, 0x0, 0xa0103)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1)
sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r4, 0x4, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_BSS_BASIC_RATES={0xa, 0x24, [{0x9}, {0x16, 0x1}, {0x2, 0x1}, {0x48}, {0x9, 0x1}, {0x36, 0x1}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x20004040)

15:51:45 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
creat(&(0x7f00000000c0)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GETSTATE(r0, 0x541b, &(0x7f0000002a00))
r1 = memfd_secret(0x0)
open_tree(r0, &(0x7f0000000080)='./file0\x00', 0x8000)
ioctl$NS_GET_USERNS(r1, 0xb701, 0x0)

15:51:45 executing program 2:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x2200)
r2 = dup2(r1, r0)
ioctl$SG_SET_RESERVED_SIZE(r2, 0x2275, &(0x7f0000000040))

15:51:45 executing program 0:
r0 = syz_io_uring_setup(0x329f, &(0x7f0000000000)={0x0, 0xe51c, 0x2, 0x2, 0x1e0}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f00000000c0))
syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x1, 0x0, @fd, 0x0, 0x0, 0x0, {0x200}, 0x1}, 0xfffffff7)
r2 = signalfd4(r0, &(0x7f0000000140)={[0xf800000000000000]}, 0x8, 0x800)
r3 = syz_open_dev$usbmon(&(0x7f0000000180), 0x1000, 0x200400)
r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x20100, 0x190)
io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000200)=[r0, r2, r0, r3, r4, r0, r5, r0], 0x8)
pread64(r0, &(0x7f0000000240)=""/4096, 0x1000, 0x4)
rmdir(&(0x7f0000001240)='./file0\x00')
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000001280)={{0x1, 0x1, 0x18, <r6=>r3, {0x2}}, './file0/file0\x00'})
sendmsg$802154_raw(r6, &(0x7f0000001400)={&(0x7f00000012c0)={0x24, @short}, 0x14, &(0x7f00000013c0)={&(0x7f0000001300)="c5a6f949d50210094f788c78931b1fc374639eb077b9f96a593bad740137f0c27c2b91321fae6be484ea5100699b4b9241443f0b5496ee810e3ac28156897446d368ce43c5dbe51068099fa6aa3509ed2bb6d70d4414d0a0df852e7afa3cdfc6fd306c28a02f1ef92925a5178dd1b1b2f4d571b22a527f2e80b25f0130cced148f353cff85b0fd866dd293237c99097484941c7eb1b98d585eddfcac52c6e54b4f06010a80ef161a1aead3161f3aa228eada", 0xb2}, 0x1, 0x0, 0x0, 0x24040840}, 0x24000040)
recvfrom(r2, &(0x7f0000001440)=""/68, 0x44, 0x10100, &(0x7f00000014c0)=@can, 0x80)
r7 = syz_open_dev$tty20(0xc, 0x4, 0x0)
r8 = openat$autofs(0xffffffffffffff9c, &(0x7f0000002a80), 0x200, 0x0)
close_range(r7, r8, 0x0)
recvfrom(0xffffffffffffffff, &(0x7f0000002ac0)=""/172, 0xac, 0x12023, &(0x7f0000002b80)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e24, @loopback}, 0x2, 0x2, 0x2, 0x1}}, 0x80)

15:51:45 executing program 7:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001)
r2 = dup2(r1, r0)
pipe2(&(0x7f0000000040)={<r3=>0xffffffffffffffff}, 0x800)
write$binfmt_aout(r3, &(0x7f00000003c0)={{0xcc, 0x1, 0x7, 0x38c, 0x3b7, 0x0, 0x371, 0x1f}, "0523fe03b2f78f2e11b97a933aec4543fecc85ce15c2bc6c52601fb1c6cee3e653ec40020eceb187ee7d7f5b0c8b0540ff01879f4f8038185a4a5e35a3d207358e5b224304993cdad40a355804fa4c347682ac8989ed387da9fc229b7863eb17cb30a900d963907c73a1cead0b4713e206c3bd2949e974092ad488bf48361bf380af7fd94e9f36df9e1b581bd335d29e676ff10276ffc11d7c2cbe4d312dfbd3aeaecb76187794b69e9102cfc35a30d6159cebb9e1e7d6e5a462fcea4c137dc4bdef094519404c684295c71e2d3e62d1de69f6cfbfab6fb7962853dc291588bbf77ecf3e02879914", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x608)
fsmount(r3, 0x0, 0x1)
write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[], 0x2e)

15:51:45 executing program 1:
r0 = syz_io_uring_setup(0x329f, &(0x7f0000000000)={0x0, 0xe51c, 0x2, 0x2, 0x1e0}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f00000000c0))
syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x1, 0x0, @fd, 0x0, 0x0, 0x0, {0x200}, 0x1}, 0xfffffff7)
r2 = signalfd4(r0, &(0x7f0000000140)={[0xf800000000000000]}, 0x8, 0x800)
r3 = syz_open_dev$usbmon(&(0x7f0000000180), 0x1000, 0x200400)
r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x20100, 0x190)
io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000200)=[r0, r2, r0, r3, r4, r0, r5, r0], 0x8)
pread64(r0, &(0x7f0000000240)=""/4096, 0x1000, 0x4)
rmdir(&(0x7f0000001240)='./file0\x00')
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000001280)={{0x1, 0x1, 0x18, <r6=>r3, {0x2}}, './file0/file0\x00'})
sendmsg$802154_raw(r6, &(0x7f0000001400)={&(0x7f00000012c0)={0x24, @short}, 0x14, &(0x7f00000013c0)={&(0x7f0000001300)="c5a6f949d50210094f788c78931b1fc374639eb077b9f96a593bad740137f0c27c2b91321fae6be484ea5100699b4b9241443f0b5496ee810e3ac28156897446d368ce43c5dbe51068099fa6aa3509ed2bb6d70d4414d0a0df852e7afa3cdfc6fd306c28a02f1ef92925a5178dd1b1b2f4d571b22a527f2e80b25f0130cced148f353cff85b0fd866dd293237c99097484941c7eb1b98d585eddfcac52c6e54b4f06010a80ef161a1aead3161f3aa228eada", 0xb2}, 0x1, 0x0, 0x0, 0x24040840}, 0x24000040)
recvfrom(r2, &(0x7f0000001440)=""/68, 0x44, 0x10100, &(0x7f00000014c0)=@can, 0x80)
r7 = syz_open_dev$tty20(0xc, 0x4, 0x0)
r8 = openat$autofs(0xffffffffffffff9c, &(0x7f0000002a80), 0x200, 0x0)
close_range(r7, r8, 0x0)
recvfrom(0xffffffffffffffff, &(0x7f0000002ac0)=""/172, 0xac, 0x12023, &(0x7f0000002b80)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e24, @loopback}, 0x2, 0x2, 0x2, 0x1}}, 0x80)

15:51:45 executing program 0:
r0 = syz_io_uring_setup(0x329f, &(0x7f0000000000)={0x0, 0xe51c, 0x2, 0x2, 0x1e0}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f00000000c0))
syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x1, 0x0, @fd, 0x0, 0x0, 0x0, {0x200}, 0x1}, 0xfffffff7)
r2 = signalfd4(r0, &(0x7f0000000140)={[0xf800000000000000]}, 0x8, 0x800)
r3 = syz_open_dev$usbmon(&(0x7f0000000180), 0x1000, 0x200400)
r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x20100, 0x190)
io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000200)=[r0, r2, r0, r3, r4, r0, r5, r0], 0x8)
pread64(r0, &(0x7f0000000240)=""/4096, 0x1000, 0x4)
rmdir(&(0x7f0000001240)='./file0\x00')
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000001280)={{0x1, 0x1, 0x18, <r6=>r3, {0x2}}, './file0/file0\x00'})
sendmsg$802154_raw(r6, &(0x7f0000001400)={&(0x7f00000012c0)={0x24, @short}, 0x14, &(0x7f00000013c0)={&(0x7f0000001300)="c5a6f949d50210094f788c78931b1fc374639eb077b9f96a593bad740137f0c27c2b91321fae6be484ea5100699b4b9241443f0b5496ee810e3ac28156897446d368ce43c5dbe51068099fa6aa3509ed2bb6d70d4414d0a0df852e7afa3cdfc6fd306c28a02f1ef92925a5178dd1b1b2f4d571b22a527f2e80b25f0130cced148f353cff85b0fd866dd293237c99097484941c7eb1b98d585eddfcac52c6e54b4f06010a80ef161a1aead3161f3aa228eada", 0xb2}, 0x1, 0x0, 0x0, 0x24040840}, 0x24000040)
recvfrom(r2, &(0x7f0000001440)=""/68, 0x44, 0x10100, &(0x7f00000014c0)=@can, 0x80)
r7 = syz_open_dev$tty20(0xc, 0x4, 0x0)
r8 = openat$autofs(0xffffffffffffff9c, &(0x7f0000002a80), 0x200, 0x0)
close_range(r7, r8, 0x0)
recvfrom(0xffffffffffffffff, &(0x7f0000002ac0)=""/172, 0xac, 0x12023, &(0x7f0000002b80)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e24, @loopback}, 0x2, 0x2, 0x2, 0x1}}, 0x80)

[  188.468284] kmemleak: Found object by alias at 0x607f1a639944
[  188.468320] CPU: 0 UID: 0 PID: 4527 Comm: syz-executor.6 Tainted: G        W           6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) 
[  188.468365] Tainted: [W]=WARN
[  188.468373] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  188.468386] Call Trace:
[  188.468393]  <TASK>
[  188.468402]  dump_stack_lvl+0xca/0x120
[  188.468447]  __lookup_object+0x94/0xb0
[  188.468478]  delete_object_full+0x27/0x70
[  188.468510]  free_percpu+0x30/0x1160
[  188.468540]  ? arch_uprobe_clear_state+0x16/0x140
[  188.468579]  futex_hash_free+0x38/0xc0
[  188.468606]  mmput+0x2d3/0x390
[  188.468642]  do_exit+0x79d/0x2970
[  188.468674]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  188.468715]  ? __pfx_do_exit+0x10/0x10
[  188.468742]  ? find_held_lock+0x2b/0x80
[  188.468776]  ? get_signal+0x835/0x2340
[  188.468815]  do_group_exit+0xd3/0x2a0
[  188.468845]  get_signal+0x2315/0x2340
[  188.468879]  ? trace_irq_enable.constprop.0+0xc2/0x100
[  188.468912]  ? __pfx_get_signal+0x10/0x10
[  188.468943]  ? __schedule+0xe91/0x3590
[  188.468983]  arch_do_signal_or_restart+0x80/0x790
[  188.469017]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  188.469049]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  188.469092]  ? __pfx___x64_sys_futex+0x10/0x10
[  188.469116]  ? selinux_file_ioctl+0xb9/0x280
[  188.469157]  exit_to_user_mode_loop+0x8b/0x110
[  188.469182]  do_syscall_64+0x2f7/0x360
[  188.469206]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  188.469229] RIP: 0033:0x7fc313d54b19
[  188.469245] Code: Unable to access opcode bytes at 0x7fc313d54aef.
[  188.469256] RSP: 002b:00007fc3112ca218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  188.469277] RAX: 0000000000000001 RBX: 00007fc313e67f68 RCX: 00007fc313d54b19
[  188.469292] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fc313e67f6c
[  188.469305] RBP: 00007fc313e67f60 R08: 0000000000000019 R09: 0000000000000000
[  188.469319] R10: ffffffffffffffff R11: 0000000000000246 R12: 00007fc313e67f6c
[  188.469333] R13: 00007ffd007759ff R14: 00007fc3112ca300 R15: 0000000000022000
[  188.469367]  </TASK>
[  188.469374] kmemleak: Object (percpu) 0x607f1a639940 (size 8):
[  188.469387] kmemleak:   comm "syz-executor.7", pid 3992, jiffies 4294816618
[  188.469401] kmemleak:   min_count = 1
[  188.469408] kmemleak:   count = 1
[  188.469415] kmemleak:   flags = 0x21
[  188.469422] kmemleak:   checksum = 0
[  188.469430] kmemleak:   backtrace:
[  188.469435]  pcpu_alloc_noprof+0x87a/0x1170
[  188.469464]  alloc_vfsmnt+0x135/0x6e0
[  188.469489]  clone_mnt+0x6c/0xb70
[  188.469517]  copy_tree+0x34b/0xaf0
[  188.469535]  copy_mnt_ns+0x1ab/0xab0
[  188.469556]  create_new_namespaces+0xd6/0xab0
[  188.469587]  unshare_nsproxy_namespaces+0xc0/0x200
[  188.469618]  ksys_unshare+0x468/0xa10
[  188.469639]  __x64_sys_unshare+0x31/0x40
[  188.469661]  do_syscall_64+0xbf/0x360
[  188.469677]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
15:51:46 executing program 3:
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="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"])
r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x20000)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000240)={@id={0x2, 0x0, @a}, 0x7, 0x0, '\x00', @auto=[0x18, 0x2a, 0x40, 0x2a, 0x18, 0x1e, 0x2d]})
link(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file1\x00')
setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f00000002c0)=@routing={0xee, 0x6, 0x2, 0xa8, 0x0, [@dev={0xfe, 0x80, '\x00', 0x44}, @loopback, @loopback]}, 0x38)

15:51:46 executing program 0:
r0 = syz_io_uring_setup(0x329f, &(0x7f0000000000)={0x0, 0xe51c, 0x2, 0x2, 0x1e0}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f00000000c0))
syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x1, 0x0, @fd, 0x0, 0x0, 0x0, {0x200}, 0x1}, 0xfffffff7)
r2 = signalfd4(r0, &(0x7f0000000140)={[0xf800000000000000]}, 0x8, 0x800)
r3 = syz_open_dev$usbmon(&(0x7f0000000180), 0x1000, 0x200400)
r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x20100, 0x190)
io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000200)=[r0, r2, r0, r3, r4, r0, r5, r0], 0x8)
pread64(r0, &(0x7f0000000240)=""/4096, 0x1000, 0x4)
rmdir(&(0x7f0000001240)='./file0\x00')
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000001280)={{0x1, 0x1, 0x18, <r6=>r3, {0x2}}, './file0/file0\x00'})
sendmsg$802154_raw(r6, &(0x7f0000001400)={&(0x7f00000012c0)={0x24, @short}, 0x14, &(0x7f00000013c0)={&(0x7f0000001300)="c5a6f949d50210094f788c78931b1fc374639eb077b9f96a593bad740137f0c27c2b91321fae6be484ea5100699b4b9241443f0b5496ee810e3ac28156897446d368ce43c5dbe51068099fa6aa3509ed2bb6d70d4414d0a0df852e7afa3cdfc6fd306c28a02f1ef92925a5178dd1b1b2f4d571b22a527f2e80b25f0130cced148f353cff85b0fd866dd293237c99097484941c7eb1b98d585eddfcac52c6e54b4f06010a80ef161a1aead3161f3aa228eada", 0xb2}, 0x1, 0x0, 0x0, 0x24040840}, 0x24000040)
recvfrom(r2, &(0x7f0000001440)=""/68, 0x44, 0x10100, &(0x7f00000014c0)=@can, 0x80)
r7 = syz_open_dev$tty20(0xc, 0x4, 0x0)
r8 = openat$autofs(0xffffffffffffff9c, &(0x7f0000002a80), 0x200, 0x0)
close_range(r7, r8, 0x0)
recvfrom(0xffffffffffffffff, &(0x7f0000002ac0)=""/172, 0xac, 0x12023, &(0x7f0000002b80)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e24, @loopback}, 0x2, 0x2, 0x2, 0x1}}, 0x80)

15:51:46 executing program 5:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='mnt', 0x0, 0x0)
r1 = creat(&(0x7f0000000080)='./mnt\x00', 0x1)
r2 = socket$inet_icmp(0x2, 0x2, 0x1)
mount$9p_fd(0x0, &(0x7f0000000000)='mnt\x00', &(0x7f0000000040), 0x400, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [{@smackfsfloor={'smackfsfloor', 0x3d, '[)@]\x1f'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '-'}}, {@fscontext={'fscontext', 0x3d, 'system_u'}}, {@seclabel}, {@context={'context', 0x3d, 'user_u'}}, {@subj_role={'subj_role', 0x3d, '\\.'}}]}})
fadvise64(r0, 0x0, 0x0, 0x6)

15:51:46 executing program 6:
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0xf0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext}, 0x0, 0x0, r0, 0x0)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

15:51:46 executing program 4:
r0 = syz_io_uring_setup(0x329f, &(0x7f0000000000)={0x0, 0xe51c, 0x2, 0x2, 0x1e0}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f00000000c0))
syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x1, 0x0, @fd, 0x0, 0x0, 0x0, {0x200}, 0x1}, 0xfffffff7)
r2 = signalfd4(r0, &(0x7f0000000140)={[0xf800000000000000]}, 0x8, 0x800)
r3 = syz_open_dev$usbmon(&(0x7f0000000180), 0x1000, 0x200400)
r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x20100, 0x190)
io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000200)=[r0, r2, r0, r3, r4, r0, r5, r0], 0x8)
pread64(r0, &(0x7f0000000240)=""/4096, 0x1000, 0x4)
rmdir(&(0x7f0000001240)='./file0\x00')
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000001280)={{0x1, 0x1, 0x18, <r6=>r3, {0x2}}, './file0/file0\x00'})
sendmsg$802154_raw(r6, &(0x7f0000001400)={&(0x7f00000012c0)={0x24, @short}, 0x14, &(0x7f00000013c0)={&(0x7f0000001300)="c5a6f949d50210094f788c78931b1fc374639eb077b9f96a593bad740137f0c27c2b91321fae6be484ea5100699b4b9241443f0b5496ee810e3ac28156897446d368ce43c5dbe51068099fa6aa3509ed2bb6d70d4414d0a0df852e7afa3cdfc6fd306c28a02f1ef92925a5178dd1b1b2f4d571b22a527f2e80b25f0130cced148f353cff85b0fd866dd293237c99097484941c7eb1b98d585eddfcac52c6e54b4f06010a80ef161a1aead3161f3aa228eada", 0xb2}, 0x1, 0x0, 0x0, 0x24040840}, 0x24000040)
recvfrom(r2, &(0x7f0000001440)=""/68, 0x44, 0x10100, &(0x7f00000014c0)=@can, 0x80)
r7 = syz_open_dev$tty20(0xc, 0x4, 0x0)
r8 = openat$autofs(0xffffffffffffff9c, &(0x7f0000002a80), 0x200, 0x0)
close_range(r7, r8, 0x0)
r9 = socket$nl_audit(0x10, 0x3, 0x9)
r10 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
recvfrom(r9, &(0x7f0000002ac0)=""/172, 0xac, 0x12023, &(0x7f0000002b80)=@pppol2tpv3={0x18, 0x1, {0x0, r10, {0x2, 0x4e24, @loopback}, 0x2, 0x2, 0x2, 0x1}}, 0x80)
openat$bsg(0xffffffffffffff9c, &(0x7f0000002c00), 0x200000, 0x0)

15:51:46 executing program 0:
r0 = syz_io_uring_setup(0x329f, &(0x7f0000000000)={0x0, 0xe51c, 0x2, 0x2, 0x1e0}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f00000000c0))
syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x1, 0x0, @fd, 0x0, 0x0, 0x0, {0x200}, 0x1}, 0xfffffff7)
r2 = signalfd4(r0, &(0x7f0000000140)={[0xf800000000000000]}, 0x8, 0x800)
r3 = syz_open_dev$usbmon(&(0x7f0000000180), 0x1000, 0x200400)
r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x20100, 0x190)
io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000200)=[r0, r2, r0, r3, r4, r0, r5, r0], 0x8)
pread64(r0, &(0x7f0000000240)=""/4096, 0x1000, 0x4)
rmdir(&(0x7f0000001240)='./file0\x00')
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000001280)={{0x1, 0x1, 0x18, <r6=>r3, {0x2}}, './file0/file0\x00'})
sendmsg$802154_raw(r6, &(0x7f0000001400)={&(0x7f00000012c0)={0x24, @short}, 0x14, &(0x7f00000013c0)={&(0x7f0000001300)="c5a6f949d50210094f788c78931b1fc374639eb077b9f96a593bad740137f0c27c2b91321fae6be484ea5100699b4b9241443f0b5496ee810e3ac28156897446d368ce43c5dbe51068099fa6aa3509ed2bb6d70d4414d0a0df852e7afa3cdfc6fd306c28a02f1ef92925a5178dd1b1b2f4d571b22a527f2e80b25f0130cced148f353cff85b0fd866dd293237c99097484941c7eb1b98d585eddfcac52c6e54b4f06010a80ef161a1aead3161f3aa228eada", 0xb2}, 0x1, 0x0, 0x0, 0x24040840}, 0x24000040)
recvfrom(r2, &(0x7f0000001440)=""/68, 0x44, 0x10100, &(0x7f00000014c0)=@can, 0x80)
syz_open_dev$tty20(0xc, 0x4, 0x0)
openat$autofs(0xffffffffffffff9c, &(0x7f0000002a80), 0x200, 0x0)
r7 = socket$nl_audit(0x10, 0x3, 0x9)
recvfrom(r7, &(0x7f0000002ac0)=""/172, 0xac, 0x12023, &(0x7f0000002b80)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e24, @loopback}, 0x2, 0x2, 0x2, 0x1}}, 0x80)

15:51:46 executing program 3:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r0 = perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0x30, 0x9, 0x7e, 0x3, 0x0, 0x1f, 0x125, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf1ef, 0x2, @perf_config_ext={0x100}, 0x6004, 0x7, 0x1000, 0x3, 0x1f, 0x3f, 0x7, 0x0, 0x1000, 0x0, 0x134c}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x1)
uname(&(0x7f0000000400))
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={<r1=>0x0}, &(0x7f0000000380)=0xc)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x3, 0x1, 0x7, 0x3, 0x0, 0x3, 0x12, 0x8, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x2, @perf_bp={&(0x7f0000000240), 0x7}, 0x415e, 0x732, 0x80000000, 0x2, 0x5, 0x9, 0x7, 0x0, 0x3, 0x0, 0x4}, r1, 0xffffffffffffffff, r0, 0x9)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
connect(r2, &(0x7f00000003c0)=@rxrpc=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e22, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}}, 0x80)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x6}}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x1ff)
clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x3}, 0x0, 0x0, &(0x7f0000000080)=""/22, 0x0}, 0x58)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)

[  188.708067] kmemleak: Found object by alias at 0x607f1a639944
[  188.708085] CPU: 1 UID: 0 PID: 4558 Comm: syz-executor.6 Tainted: G        W           6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) 
[  188.708103] Tainted: [W]=WARN
[  188.708106] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  188.708114] Call Trace:
[  188.708118]  <TASK>
[  188.708122]  dump_stack_lvl+0xca/0x120
[  188.708150]  __lookup_object+0x94/0xb0
[  188.708168]  delete_object_full+0x27/0x70
[  188.708184]  free_percpu+0x30/0x1160
[  188.708200]  ? arch_uprobe_clear_state+0x16/0x140
[  188.708220]  futex_hash_free+0x38/0xc0
[  188.708235]  mmput+0x2d3/0x390
[  188.708253]  do_exit+0x79d/0x2970
[  188.708269]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  188.708294]  ? __pfx_do_exit+0x10/0x10
[  188.708307]  ? find_held_lock+0x2b/0x80
[  188.708326]  ? get_signal+0x835/0x2340
[  188.708354]  do_group_exit+0xd3/0x2a0
[  188.708368]  get_signal+0x2315/0x2340
[  188.708384]  ? trace_irq_enable.constprop.0+0xc2/0x100
[  188.708396]  ? __call_rcu_common.constprop.0+0x4c1/0x960
[  188.708415]  ? __pfx_get_signal+0x10/0x10
[  188.708430]  ? __schedule+0xe91/0x3590
[  188.708450]  arch_do_signal_or_restart+0x80/0x790
[  188.708468]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  188.708484]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  188.708503]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  188.708523]  ? __pfx___x64_sys_futex+0x10/0x10
[  188.708536]  ? xfd_validate_state+0x55/0x180
[  188.708557]  exit_to_user_mode_loop+0x8b/0x110
[  188.708570]  do_syscall_64+0x2f7/0x360
[  188.708582]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  188.708594] RIP: 0033:0x7fc313d54b19
[  188.708603] Code: Unable to access opcode bytes at 0x7fc313d54aef.
[  188.708608] RSP: 002b:00007fc3112ca218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  188.708619] RAX: 0000000000000001 RBX: 00007fc313e67f68 RCX: 00007fc313d54b19
[  188.708626] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fc313e67f6c
[  188.708634] RBP: 00007fc313e67f60 R08: 000000000000000e R09: 0000000000000000
[  188.708641] R10: 0000000000000003 R11: 0000000000000246 R12: 00007fc313e67f6c
[  188.708647] R13: 00007ffd007759ff R14: 00007fc3112ca300 R15: 0000000000022000
[  188.708663]  </TASK>
[  188.708667] kmemleak: Object (percpu) 0x607f1a639940 (size 8):
[  188.708674] kmemleak:   comm "syz-executor.7", pid 3992, jiffies 4294816618
[  188.708681] kmemleak:   min_count = 1
[  188.708684] kmemleak:   count = 1
[  188.708688] kmemleak:   flags = 0x21
[  188.708692] kmemleak:   checksum = 0
[  188.708695] kmemleak:   backtrace:
[  188.708699]  pcpu_alloc_noprof+0x87a/0x1170
[  188.708713]  alloc_vfsmnt+0x135/0x6e0
[  188.708727]  clone_mnt+0x6c/0xb70
[  188.708741]  copy_tree+0x34b/0xaf0
[  188.708751]  copy_mnt_ns+0x1ab/0xab0
[  188.708761]  create_new_namespaces+0xd6/0xab0
[  188.708778]  unshare_nsproxy_namespaces+0xc0/0x200
[  188.708793]  ksys_unshare+0x468/0xa10
[  188.708804]  __x64_sys_unshare+0x31/0x40
[  188.708815]  do_syscall_64+0xbf/0x360
[  188.708823]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  188.751975] SELinux: security_context_str_to_sid (system_u) failed with errno=-22
[  188.775665] SELinux: security_context_str_to_sid (system_u) failed with errno=-22
15:51:58 executing program 2:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x2200)
r2 = dup2(r1, r0)
ioctl$SG_SET_RESERVED_SIZE(r2, 0x2275, &(0x7f0000000040))

15:51:58 executing program 1:
r0 = memfd_create(&(0x7f0000000000)='{*\'),\x00', 0x5)
r1 = eventfd(0x101)
r2 = openat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x80000, 0x116}, 0x18)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
fsetxattr$security_selinux(r3, &(0x7f0000000180), &(0x7f00000001c0)='system_u:object_r:systemd_systemctl_exec_t:s0\x00', 0x2e, 0x1)
write$eventfd(r2, &(0x7f0000000100)=0x3, 0x8)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x80)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3, 0x4000010, r0, 0x4)

15:51:58 executing program 4:
r0 = syz_io_uring_setup(0x329f, &(0x7f0000000000)={0x0, 0xe51c, 0x2, 0x2, 0x1e0}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f00000000c0))
syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x1, 0x0, @fd, 0x0, 0x0, 0x0, {0x200}, 0x1}, 0xfffffff7)
r2 = signalfd4(r0, &(0x7f0000000140)={[0xf800000000000000]}, 0x8, 0x800)
r3 = syz_open_dev$usbmon(&(0x7f0000000180), 0x1000, 0x200400)
r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x20100, 0x190)
io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000200)=[r0, r2, r0, r3, r4, r0, r5, r0], 0x8)
pread64(r0, &(0x7f0000000240)=""/4096, 0x1000, 0x4)
rmdir(&(0x7f0000001240)='./file0\x00')
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000001280)={{0x1, 0x1, 0x18, <r6=>r3, {0x2}}, './file0/file0\x00'})
sendmsg$802154_raw(r6, &(0x7f0000001400)={&(0x7f00000012c0)={0x24, @short}, 0x14, &(0x7f00000013c0)={&(0x7f0000001300)="c5a6f949d50210094f788c78931b1fc374639eb077b9f96a593bad740137f0c27c2b91321fae6be484ea5100699b4b9241443f0b5496ee810e3ac28156897446d368ce43c5dbe51068099fa6aa3509ed2bb6d70d4414d0a0df852e7afa3cdfc6fd306c28a02f1ef92925a5178dd1b1b2f4d571b22a527f2e80b25f0130cced148f353cff85b0fd866dd293237c99097484941c7eb1b98d585eddfcac52c6e54b4f06010a80ef161a1aead3161f3aa228eada", 0xb2}, 0x1, 0x0, 0x0, 0x24040840}, 0x24000040)
recvfrom(r2, &(0x7f0000001440)=""/68, 0x44, 0x10100, &(0x7f00000014c0)=@can, 0x80)
r7 = syz_open_dev$tty20(0xc, 0x4, 0x0)
r8 = openat$autofs(0xffffffffffffff9c, &(0x7f0000002a80), 0x200, 0x0)
close_range(r7, r8, 0x0)
r9 = socket$nl_audit(0x10, 0x3, 0x9)
r10 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
recvfrom(r9, &(0x7f0000002ac0)=""/172, 0xac, 0x12023, &(0x7f0000002b80)=@pppol2tpv3={0x18, 0x1, {0x0, r10, {0x2, 0x4e24, @loopback}, 0x2, 0x2, 0x2, 0x1}}, 0x80)
openat$bsg(0xffffffffffffff9c, &(0x7f0000002c00), 0x200000, 0x0)

15:51:58 executing program 0:
r0 = syz_io_uring_setup(0x329f, &(0x7f0000000000)={0x0, 0xe51c, 0x2, 0x2, 0x1e0}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f00000000c0))
syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x1, 0x0, @fd, 0x0, 0x0, 0x0, {0x200}, 0x1}, 0xfffffff7)
r2 = signalfd4(r0, &(0x7f0000000140)={[0xf800000000000000]}, 0x8, 0x800)
r3 = syz_open_dev$usbmon(&(0x7f0000000180), 0x1000, 0x200400)
r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x20100, 0x190)
io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000200)=[r0, r2, r0, r3, r4, r0, r5, r0], 0x8)
pread64(r0, &(0x7f0000000240)=""/4096, 0x1000, 0x4)
rmdir(&(0x7f0000001240)='./file0\x00')
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000001280)={{0x1, 0x1, 0x18, <r6=>r3, {0x2}}, './file0/file0\x00'})
sendmsg$802154_raw(r6, &(0x7f0000001400)={&(0x7f00000012c0)={0x24, @short}, 0x14, &(0x7f00000013c0)={&(0x7f0000001300)="c5a6f949d50210094f788c78931b1fc374639eb077b9f96a593bad740137f0c27c2b91321fae6be484ea5100699b4b9241443f0b5496ee810e3ac28156897446d368ce43c5dbe51068099fa6aa3509ed2bb6d70d4414d0a0df852e7afa3cdfc6fd306c28a02f1ef92925a5178dd1b1b2f4d571b22a527f2e80b25f0130cced148f353cff85b0fd866dd293237c99097484941c7eb1b98d585eddfcac52c6e54b4f06010a80ef161a1aead3161f3aa228eada", 0xb2}, 0x1, 0x0, 0x0, 0x24040840}, 0x24000040)
recvfrom(r2, &(0x7f0000001440)=""/68, 0x44, 0x10100, &(0x7f00000014c0)=@can, 0x80)
syz_open_dev$tty20(0xc, 0x4, 0x0)
r7 = socket$nl_audit(0x10, 0x3, 0x9)
recvfrom(r7, &(0x7f0000002ac0)=""/172, 0xac, 0x12023, &(0x7f0000002b80)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e24, @loopback}, 0x2, 0x2, 0x2, 0x1}}, 0x80)

15:51:58 executing program 6:
r0 = gettid()
rt_sigqueueinfo(r0, 0x21, &(0x7f0000000000)={0x0, 0x0, 0x7})
waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x8, 0x0)

15:51:58 executing program 5:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r1 = dup2(r0, r0)
r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r3 = syz_open_dev$vcsa(&(0x7f0000000340), 0x0, 0x66040)
sendfile(r2, r3, 0x0, 0x1f)
connect$bt_sco(r3, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8)
ioctl$FIONREAD(r1, 0x8901, &(0x7f0000001a00))
migrate_pages(0x0, 0x4, &(0x7f0000000040)=0x7, &(0x7f0000000080)=0x9)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
getsockopt$sock_linger(r4, 0x1, 0x5, 0x0, &(0x7f0000000140))
ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r4, 0x80286722, &(0x7f00000001c0)={&(0x7f00000000c0)=""/209, 0xd1, 0x8000, 0x9})

15:51:58 executing program 3:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r0 = perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0x30, 0x9, 0x7e, 0x3, 0x0, 0x1f, 0x125, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf1ef, 0x2, @perf_config_ext={0x100}, 0x6004, 0x7, 0x1000, 0x3, 0x1f, 0x3f, 0x7, 0x0, 0x1000, 0x0, 0x134c}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x1)
uname(&(0x7f0000000400))
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={<r1=>0x0}, &(0x7f0000000380)=0xc)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x3, 0x1, 0x7, 0x3, 0x0, 0x3, 0x12, 0x8, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x2, @perf_bp={&(0x7f0000000240), 0x7}, 0x415e, 0x732, 0x80000000, 0x2, 0x5, 0x9, 0x7, 0x0, 0x3, 0x0, 0x4}, r1, 0xffffffffffffffff, r0, 0x9)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
connect(r2, &(0x7f00000003c0)=@rxrpc=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e22, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}}, 0x80)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x6}}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x1ff)
clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x3}, 0x0, 0x0, &(0x7f0000000080)=""/22, 0x0}, 0x58)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)

15:51:58 executing program 7:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001)
r2 = dup2(r1, r0)
pipe2(&(0x7f0000000040)={<r3=>0xffffffffffffffff}, 0x800)
write$binfmt_aout(r3, &(0x7f00000003c0)={{0xcc, 0x1, 0x7, 0x38c, 0x3b7, 0x0, 0x371, 0x1f}, "0523fe03b2f78f2e11b97a933aec4543fecc85ce15c2bc6c52601fb1c6cee3e653ec40020eceb187ee7d7f5b0c8b0540ff01879f4f8038185a4a5e35a3d207358e5b224304993cdad40a355804fa4c347682ac8989ed387da9fc229b7863eb17cb30a900d963907c73a1cead0b4713e206c3bd2949e974092ad488bf48361bf380af7fd94e9f36df9e1b581bd335d29e676ff10276ffc11d7c2cbe4d312dfbd3aeaecb76187794b69e9102cfc35a30d6159cebb9e1e7d6e5a462fcea4c137dc4bdef094519404c684295c71e2d3e62d1de69f6cfbfab6fb7962853dc291588bbf77ecf3e02879914", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x608)
fsmount(r3, 0x0, 0x1)
write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[], 0x2e)

[  200.699007] SELinux:  Context system_u:object_r:systemd_systemctl_exec_t:s0 is not valid (left unmapped).
[  200.708585] audit: type=1400 audit(1756482718.210:12): avc:  denied  { associate } for  pid=4583 comm="syz-executor.1" name="ptmx" dev="devtmpfs" ino=94 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=filesystem permissive=1 srawcon="system_u:object_r:systemd_systemctl_exec_t:s0"
[  200.762268] kmemleak: Cannot insert 0x607f1a639944 into the object search tree (overlaps existing)
[  200.762310] CPU: 0 UID: 0 PID: 4600 Comm: syz-executor.0 Tainted: G        W           6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) 
[  200.762350] Tainted: [W]=WARN
[  200.762358] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  200.762373] Call Trace:
[  200.762381]  <TASK>
[  200.762390]  dump_stack_lvl+0xca/0x120
[  200.762437]  __link_object+0x190/0x210
[  200.762475]  __create_object+0x48/0x80
[  200.762513]  pcpu_alloc_noprof+0x87a/0x1170
[  200.762565]  __percpu_counter_init_many+0x44/0x360
[  200.762597]  ? kasan_save_track+0x14/0x30
[  200.762633]  io_uring_alloc_task_context+0xce/0x650
[  200.762670]  ? file_init_path+0x506/0x770
[  200.762706]  ? __pfx_io_uring_alloc_task_context+0x10/0x10
[  200.762746]  ? alloc_file_pseudo+0x1a9/0x220
[  200.762788]  __io_uring_add_tctx_node+0x291/0x4c0
[  200.762825]  ? __pfx___io_uring_add_tctx_node+0x10/0x10
[  200.762868]  ? __anon_inode_getfile+0x177/0x280
[  200.762908]  io_uring_setup+0x1527/0x2000
[  200.762939]  ? __pfx_io_uring_setup+0x10/0x10
[  200.762992]  ? access_error+0x17d/0x380
[  200.763034]  __x64_sys_io_uring_setup+0xc8/0x170
[  200.763064]  do_syscall_64+0xbf/0x360
[  200.763090]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  200.763116] RIP: 0033:0x7fc90c1f6b19
[  200.763135] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  200.763160] RSP: 002b:00007fc90976c108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[  200.763185] RAX: ffffffffffffffda RBX: 00007fc90c309f60 RCX: 00007fc90c1f6b19
[  200.763203] RDX: 0000000020ffa000 RSI: 0000000020000000 RDI: 000000000000329f
[  200.763219] RBP: 0000000020000000 R08: 00000000200000c0 R09: 00000000200000c0
[  200.763234] R10: 0000000020000080 R11: 0000000000000202 R12: 00000000200000c0
[  200.763250] R13: 0000000020ffa000 R14: 0000000020000080 R15: 0000000020ff9000
[  200.763284]  </TASK>
[  200.764236] kmemleak: Kernel memory leak detector disabled
[  200.764244] kmemleak: Object (percpu) 0x607f1a639940 (size 8):
[  200.764259] kmemleak:   comm "syz-executor.7", pid 3992, jiffies 4294816618
[  200.764275] kmemleak:   min_count = 1
[  200.764284] kmemleak:   count = 1
[  200.764292] kmemleak:   flags = 0x21
[  200.764300] kmemleak:   checksum = 0
[  200.764308] kmemleak:   backtrace:
[  200.764315]  pcpu_alloc_noprof+0x87a/0x1170
[  200.764349]  alloc_vfsmnt+0x135/0x6e0
[  200.764378]  clone_mnt+0x6c/0xb70
[  200.764409]  copy_tree+0x34b/0xaf0
[  200.764431]  copy_mnt_ns+0x1ab/0xab0
[  200.764470]  create_new_namespaces+0xd6/0xab0
[  200.764506]  unshare_nsproxy_namespaces+0xc0/0x200
[  200.764543]  ksys_unshare+0x468/0xa10
[  200.764568]  __x64_sys_unshare+0x31/0x40
[  200.764593]  do_syscall_64+0xbf/0x360
[  200.764612]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  200.820165] kmemleak: Found object by alias at 0x607f1a639944
[  200.820192] CPU: 1 UID: 0 PID: 4597 Comm: syz-executor.6 Tainted: G        W           6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) 
[  200.820225] Tainted: [W]=WARN
[  200.820231] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  200.820243] Call Trace:
15:51:58 executing program 6:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001)
r2 = dup2(r1, r0)
pipe2(&(0x7f0000000040)={<r3=>0xffffffffffffffff}, 0x800)
write$binfmt_aout(r3, &(0x7f00000003c0)={{0xcc, 0x1, 0x7, 0x38c, 0x3b7, 0x0, 0x371, 0x1f}, "0523fe03b2f78f2e11b97a933aec4543fecc85ce15c2bc6c52601fb1c6cee3e653ec40020eceb187ee7d7f5b0c8b0540ff01879f4f8038185a4a5e35a3d207358e5b224304993cdad40a355804fa4c347682ac8989ed387da9fc229b7863eb17cb30a900d963907c73a1cead0b4713e206c3bd2949e974092ad488bf48361bf380af7fd94e9f36df9e1b581bd335d29e676ff10276ffc11d7c2cbe4d312dfbd3aeaecb76187794b69e9102cfc35a30d6159cebb9e1e7d6e5a462fcea4c137dc4bdef094519404c684295c71e2d3e62d1de69f6cfbfab6fb7962853dc291588bbf77ecf3e02879914", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x608)
fsmount(r3, 0x0, 0x1)
write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[], 0x2e)

[  200.820250]  <TASK>
[  200.820258]  dump_stack_lvl+0xca/0x120
[  200.820304]  __lookup_object+0x94/0xb0
[  200.820333]  delete_object_full+0x27/0x70
[  200.820362]  free_percpu+0x30/0x1160
[  200.820390]  ? arch_uprobe_clear_state+0x16/0x140
[  200.820426]  futex_hash_free+0x38/0xc0
[  200.820464]  mmput+0x2d3/0x390
[  200.820496]  do_exit+0x79d/0x2970
[  200.820520]  ? lock_release+0xc8/0x290
[  200.820547]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  200.820584]  ? __pfx_do_exit+0x10/0x10
[  200.820609]  ? find_held_lock+0x2b/0x80
[  200.820639]  ? get_signal+0x835/0x2340
[  200.820674]  do_group_exit+0xd3/0x2a0
[  200.820701]  get_signal+0x2315/0x2340
[  200.820733]  ? trace_irq_enable.constprop.0+0xc2/0x100
[  200.820761]  ? __pfx_get_signal+0x10/0x10
[  200.820790]  ? do_futex+0x135/0x370
[  200.820815]  ? __pfx_do_futex+0x10/0x10
[  200.820842]  arch_do_signal_or_restart+0x80/0x790
[  200.820873]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  200.820903]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  200.820939]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  200.820975]  ? __pfx___x64_sys_futex+0x10/0x10
[  200.820999]  ? xfd_validate_state+0x55/0x180
[  200.821036]  exit_to_user_mode_loop+0x8b/0x110
[  200.821059]  do_syscall_64+0x2f7/0x360
[  200.821080]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  200.821102] RIP: 0033:0x7fc313d54b19
[  200.821117] Code: Unable to access opcode bytes at 0x7fc313d54aef.
[  200.821126] RSP: 002b:00007fc3112ca218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  200.821146] RAX: fffffffffffffe00 RBX: 00007fc313e67f68 RCX: 00007fc313d54b19
[  200.821160] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fc313e67f68
[  200.821173] RBP: 00007fc313e67f60 R08: 0000000000000000 R09: 0000000000000000
[  200.821185] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc313e67f6c
[  200.821197] R13: 00007ffd007759ff R14: 00007fc3112ca300 R15: 0000000000022000
15:51:58 executing program 2:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r0 = perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0x30, 0x9, 0x7e, 0x3, 0x0, 0x1f, 0x125, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf1ef, 0x2, @perf_config_ext={0x100}, 0x6004, 0x7, 0x1000, 0x3, 0x1f, 0x3f, 0x7, 0x0, 0x1000, 0x0, 0x134c}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x1)
uname(&(0x7f0000000400))
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={<r1=>0x0}, &(0x7f0000000380)=0xc)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x3, 0x1, 0x7, 0x3, 0x0, 0x3, 0x12, 0x8, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x2, @perf_bp={&(0x7f0000000240), 0x7}, 0x415e, 0x732, 0x80000000, 0x2, 0x5, 0x9, 0x7, 0x0, 0x3, 0x0, 0x4}, r1, 0xffffffffffffffff, r0, 0x9)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
connect(r2, &(0x7f00000003c0)=@rxrpc=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e22, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}}, 0x80)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x6}}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x1ff)
clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x3}, 0x0, 0x0, &(0x7f0000000080)=""/22, 0x0}, 0x58)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)

[  200.821226]  </TASK>
[  200.821233] kmemleak: Object (percpu) 0x607f1a639940 (size 8):
[  200.821245] kmemleak:   comm "syz-executor.7", pid 3992, jiffies 4294816618
[  200.821257] kmemleak:   min_count = 1
[  200.821264] kmemleak:   count = 1
[  200.821271] kmemleak:   flags = 0x21
[  200.821278] kmemleak:   checksum = 0
[  200.821284] kmemleak:   backtrace:
[  200.821290]  pcpu_alloc_noprof+0x87a/0x1170
[  200.821317]  alloc_vfsmnt+0x135/0x6e0
[  200.821340]  clone_mnt+0x6c/0xb70
[  200.821366]  copy_tree+0x34b/0xaf0
[  200.821383]  copy_mnt_ns+0x1ab/0xab0
[  200.821402]  create_new_namespaces+0xd6/0xab0
[  200.821431]  unshare_nsproxy_namespaces+0xc0/0x200
[  200.821460]  ksys_unshare+0x468/0xa10
[  200.821479]  __x64_sys_unshare+0x31/0x40
[  200.821500]  do_syscall_64+0xbf/0x360
[  200.821515]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  200.845131] kmemleak: Automatic memory scanning thread ended
15:51:58 executing program 1:
r0 = memfd_create(&(0x7f0000000000)='{*\'),\x00', 0x5)
r1 = eventfd(0x101)
r2 = openat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x80000, 0x116}, 0x18)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
fsetxattr$security_selinux(r3, &(0x7f0000000180), &(0x7f00000001c0)='system_u:object_r:systemd_systemctl_exec_t:s0\x00', 0x2e, 0x1)
write$eventfd(r2, &(0x7f0000000100)=0x3, 0x8)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x80)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3, 0x4000010, r0, 0x4)

15:51:58 executing program 7:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001)
r2 = dup2(r1, r0)
pipe2(&(0x7f0000000040)={<r3=>0xffffffffffffffff}, 0x800)
write$binfmt_aout(r3, &(0x7f00000003c0)={{0xcc, 0x1, 0x7, 0x38c, 0x3b7, 0x0, 0x371, 0x1f}, "0523fe03b2f78f2e11b97a933aec4543fecc85ce15c2bc6c52601fb1c6cee3e653ec40020eceb187ee7d7f5b0c8b0540ff01879f4f8038185a4a5e35a3d207358e5b224304993cdad40a355804fa4c347682ac8989ed387da9fc229b7863eb17cb30a900d963907c73a1cead0b4713e206c3bd2949e974092ad488bf48361bf380af7fd94e9f36df9e1b581bd335d29e676ff10276ffc11d7c2cbe4d312dfbd3aeaecb76187794b69e9102cfc35a30d6159cebb9e1e7d6e5a462fcea4c137dc4bdef094519404c684295c71e2d3e62d1de69f6cfbfab6fb7962853dc291588bbf77ecf3e02879914", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x608)
fsmount(r3, 0x0, 0x1)
write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[], 0x2e)

15:51:58 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), r1)
sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000075e6fc214407fda498d5aa0a56eca1ae64a02ad7757b8b3ca5cf0f9abcf7ffffffbbd5db1d8618a0b72c66bce49370863703ba76c3a110a30bf52eb0fa6f60fd864b30c265244b47142da2593789674abe29eeb7f7afd0756e73c1e08d4802ca598b48c1bab63130ae8dcf3df6bb1e7cca7c081e1e3bdbb0f903998a0dbdcf19a628e12ff46d8718deb7e216f04cf72ab8", @ANYRES16=r2, @ANYBLOB="010000000000000000000100000008000200020000000800010005000000"], 0x24}}, 0x0)

15:51:58 executing program 0:
r0 = syz_io_uring_setup(0x329f, &(0x7f0000000000)={0x0, 0xe51c, 0x2, 0x2, 0x1e0}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f00000000c0))
syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x1, 0x0, @fd, 0x0, 0x0, 0x0, {0x200}, 0x1}, 0xfffffff7)
r2 = signalfd4(r0, &(0x7f0000000140)={[0xf800000000000000]}, 0x8, 0x800)
r3 = syz_open_dev$usbmon(&(0x7f0000000180), 0x1000, 0x200400)
r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x20100, 0x190)
io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000200)=[r0, r2, r0, r3, r4, r0, r5, r0], 0x8)
pread64(r0, &(0x7f0000000240)=""/4096, 0x1000, 0x4)
rmdir(&(0x7f0000001240)='./file0\x00')
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000001280)={{0x1, 0x1, 0x18, <r6=>r3, {0x2}}, './file0/file0\x00'})
sendmsg$802154_raw(r6, &(0x7f0000001400)={&(0x7f00000012c0)={0x24, @short}, 0x14, &(0x7f00000013c0)={&(0x7f0000001300)="c5a6f949d50210094f788c78931b1fc374639eb077b9f96a593bad740137f0c27c2b91321fae6be484ea5100699b4b9241443f0b5496ee810e3ac28156897446d368ce43c5dbe51068099fa6aa3509ed2bb6d70d4414d0a0df852e7afa3cdfc6fd306c28a02f1ef92925a5178dd1b1b2f4d571b22a527f2e80b25f0130cced148f353cff85b0fd866dd293237c99097484941c7eb1b98d585eddfcac52c6e54b4f06010a80ef161a1aead3161f3aa228eada", 0xb2}, 0x1, 0x0, 0x0, 0x24040840}, 0x24000040)
recvfrom(r2, &(0x7f0000001440)=""/68, 0x44, 0x10100, &(0x7f00000014c0)=@can, 0x80)
r7 = socket$nl_audit(0x10, 0x3, 0x9)
recvfrom(r7, &(0x7f0000002ac0)=""/172, 0xac, 0x12023, &(0x7f0000002b80)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e24, @loopback}, 0x2, 0x2, 0x2, 0x1}}, 0x80)

15:51:58 executing program 4:
r0 = syz_io_uring_setup(0x329f, &(0x7f0000000000)={0x0, 0xe51c, 0x2, 0x2, 0x1e0}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f00000000c0))
syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x1, 0x0, @fd, 0x0, 0x0, 0x0, {0x200}, 0x1}, 0xfffffff7)
r2 = signalfd4(r0, &(0x7f0000000140)={[0xf800000000000000]}, 0x8, 0x800)
r3 = syz_open_dev$usbmon(&(0x7f0000000180), 0x1000, 0x200400)
r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x20100, 0x190)
io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000200)=[r0, r2, r0, r3, r4, r0, r5, r0], 0x8)
pread64(r0, &(0x7f0000000240)=""/4096, 0x1000, 0x4)
rmdir(&(0x7f0000001240)='./file0\x00')
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000001280)={{0x1, 0x1, 0x18, <r6=>r3, {0x2}}, './file0/file0\x00'})
sendmsg$802154_raw(r6, &(0x7f0000001400)={&(0x7f00000012c0)={0x24, @short}, 0x14, &(0x7f00000013c0)={&(0x7f0000001300)="c5a6f949d50210094f788c78931b1fc374639eb077b9f96a593bad740137f0c27c2b91321fae6be484ea5100699b4b9241443f0b5496ee810e3ac28156897446d368ce43c5dbe51068099fa6aa3509ed2bb6d70d4414d0a0df852e7afa3cdfc6fd306c28a02f1ef92925a5178dd1b1b2f4d571b22a527f2e80b25f0130cced148f353cff85b0fd866dd293237c99097484941c7eb1b98d585eddfcac52c6e54b4f06010a80ef161a1aead3161f3aa228eada", 0xb2}, 0x1, 0x0, 0x0, 0x24040840}, 0x24000040)
recvfrom(r2, &(0x7f0000001440)=""/68, 0x44, 0x10100, &(0x7f00000014c0)=@can, 0x80)
r7 = syz_open_dev$tty20(0xc, 0x4, 0x0)
r8 = openat$autofs(0xffffffffffffff9c, &(0x7f0000002a80), 0x200, 0x0)
close_range(r7, r8, 0x0)
r9 = socket$nl_audit(0x10, 0x3, 0x9)
r10 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
recvfrom(r9, &(0x7f0000002ac0)=""/172, 0xac, 0x12023, &(0x7f0000002b80)=@pppol2tpv3={0x18, 0x1, {0x0, r10, {0x2, 0x4e24, @loopback}, 0x2, 0x2, 0x2, 0x1}}, 0x80)

15:51:58 executing program 6:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1, 0x4, 0x301, 0x0, 0x0, {0xb}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x1c}}, 0x0)
sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000040)={&(0x7f0000000240)={0x9c, 0x2, 0x1, 0x401, 0x0, 0x0, {0x5, 0x0, 0x6}, [@CTA_SYNPROXY={0x44, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x80000000}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x26}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x3}, @CTA_SYNPROXY_ISN={0xfffffffffffffcc8, 0x1, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x0, 0x3, 0x1, 0x0, 0x5}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0xff}]}, @CTA_TUPLE_MASTER={0x20, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0x9, 0x1, 'pptp\x00'}}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xf, 0x1, 'tftp-20000\x00'}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40040}, 0x20000880)

SYZFAIL: failed to write(kmemleak, "scan")
 (errno 1: Operation not permitted)
BUG: leak checking failed

VM DIAGNOSIS:
15:51:59  Registers:
info registers vcpu 0
RAX=0000000000000001 RBX=ffff8880095f7c00 RCX=ffffffff8689611c RDX=ffff8880095f8001
RSI=0000000000000000 RDI=ffff8880095f78c0 RBP=ffff8880095f0000 RSP=ffff8880095f7840
R8 =ffffffff86896120 R9 =ffff8880095f78f0 R10=000000000003be53 R11=0000000000024ac7
R12=ffff8880095f7901 R13=ffff8880095f78f8 R14=ffff8880095f7c00 R15=ffff8880095f78b0
RIP=ffffffff81358e2b RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e55dd000 00000000 00000000
LDT=0000 fffffe2400000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f55f3909018 CR3=000000000dd90000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=000000c001bc0780000000c001457ac0
XMM02=000000c001bc0800000000c001bc07c0 XMM03=000000c001bc1b80000000c001bc1940
XMM04=000000c001457ac0000000c001457e00 XMM05=000000c001bc07c0000000c001bc0780
XMM06=000000c001bc1940000000c001bc0800 XMM07=000000c001593140000000c001bc1b80
XMM08=00000000019734c000000000019734c0 XMM09=0000000001975a400000000001975a40
XMM10=00000000019a5a4000000000019a5a40 XMM11=00000000019d37c000000000019d37c0
XMM12=00000000019d868000000000019d8680 XMM13=00000000019ea80000000000019ea800
XMM14=00000000019eaec000000000019eaec0 XMM15=0000000001a1c7800000000001a1c780
info registers vcpu 1
RAX=ffffffff8689f109 RBX=0000000000000001 RCX=ffffffff8689f104 RDX=0000000000000002
RSI=0000000000000001 RDI=ffffffff865132c0 RBP=ffff888018dc7710 RSP=ffff888018dc7648
R8 =ffffffff8689f104 R9 =0000000000000000 R10=000000000003be53 R11=00000000000262c8
R12=ffff888018dc7718 R13=ffff888018dc7700 R14=ffff888018dc76f9 R15=ffff888018dc76b8
RIP=ffffffff81358795 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007f0e3ae208c0 00000000 00000000
GS =0000 ffff8880e56dd000 00000000 00000000
LDT=0000 fffffe4f00000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000562db1c7c2e8 CR3=000000000acfb000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=000000000000002f002f2e2e2f002e2e XMM01=0000000000000000696c61766e49002f
XMM02=ffffffffffffff0f0e0d0c0b0a090807 XMM03=00000000000000006c6175747269762f
XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=0000562db1c7dd700000562db1cbc210
XMM06=0000562db1c57c20ffffffff00000002 XMM07=00000000000000000000000000000000
XMM08=2f63697361622f6372732f2e2e000d0a XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000