Warning: Permanently added '[localhost]:50789' (ECDSA) to the list of known hosts. 2025/09/01 21:54:42 fuzzer started 2025/09/01 21:54:42 dialing manager at localhost:35473 syzkaller login: [ 58.623241] cgroup: Unknown subsys name 'net' [ 58.712066] cgroup: Unknown subsys name 'cpuset' [ 58.729119] cgroup: Unknown subsys name 'rlimit' 2025/09/01 21:54:54 syscalls: 2214 2025/09/01 21:54:54 code coverage: enabled 2025/09/01 21:54:54 comparison tracing: enabled 2025/09/01 21:54:54 extra coverage: enabled 2025/09/01 21:54:54 setuid sandbox: enabled 2025/09/01 21:54:54 namespace sandbox: enabled 2025/09/01 21:54:54 Android sandbox: enabled 2025/09/01 21:54:54 fault injection: enabled 2025/09/01 21:54:54 leak checking: enabled 2025/09/01 21:54:54 net packet injection: enabled 2025/09/01 21:54:54 net device setup: enabled 2025/09/01 21:54:54 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/09/01 21:54:54 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/09/01 21:54:54 USB emulation: enabled 2025/09/01 21:54:54 hci packet injection: enabled 2025/09/01 21:54:54 wifi device emulation: enabled 2025/09/01 21:54:54 802.15.4 emulation: enabled 2025/09/01 21:54:54 fetching corpus: 50, signal 18674/20493 (executing program) 2025/09/01 21:54:54 fetching corpus: 100, signal 30911/34292 (executing program) 2025/09/01 21:54:54 fetching corpus: 150, signal 35408/40307 (executing program) 2025/09/01 21:54:54 fetching corpus: 200, signal 41471/47791 (executing program) 2025/09/01 21:54:54 fetching corpus: 250, signal 46475/54131 (executing program) 2025/09/01 21:54:54 fetching corpus: 300, signal 52939/61755 (executing program) 2025/09/01 21:54:55 fetching corpus: 350, signal 55847/65952 (executing program) 2025/09/01 21:54:55 fetching corpus: 400, signal 62780/73845 (executing program) 2025/09/01 21:54:55 fetching corpus: 450, signal 65661/77891 (executing program) 2025/09/01 21:54:55 fetching corpus: 500, signal 69447/82654 (executing program) 2025/09/01 21:54:55 fetching corpus: 550, signal 71764/86027 (executing program) 2025/09/01 21:54:55 fetching corpus: 600, signal 74056/89338 (executing program) 2025/09/01 21:54:55 fetching corpus: 650, signal 76140/92479 (executing program) 2025/09/01 21:54:55 fetching corpus: 700, signal 77797/95144 (executing program) 2025/09/01 21:54:55 fetching corpus: 750, signal 80021/98280 (executing program) 2025/09/01 21:54:55 fetching corpus: 800, signal 82395/101520 (executing program) 2025/09/01 21:54:55 fetching corpus: 850, signal 84713/104623 (executing program) 2025/09/01 21:54:55 fetching corpus: 900, signal 86285/107092 (executing program) 2025/09/01 21:54:56 fetching corpus: 950, signal 87419/109196 (executing program) 2025/09/01 21:54:56 fetching corpus: 1000, signal 88924/111525 (executing program) 2025/09/01 21:54:56 fetching corpus: 1050, signal 91323/114579 (executing program) 2025/09/01 21:54:56 fetching corpus: 1100, signal 92278/116451 (executing program) 2025/09/01 21:54:56 fetching corpus: 1150, signal 94004/118883 (executing program) 2025/09/01 21:54:56 fetching corpus: 1200, signal 95359/121046 (executing program) 2025/09/01 21:54:56 fetching corpus: 1250, signal 96635/123078 (executing program) 2025/09/01 21:54:56 fetching corpus: 1300, signal 97860/125044 (executing program) 2025/09/01 21:54:56 fetching corpus: 1350, signal 98858/126796 (executing program) 2025/09/01 21:54:56 fetching corpus: 1400, signal 100862/129326 (executing program) 2025/09/01 21:54:56 fetching corpus: 1450, signal 102106/131267 (executing program) 2025/09/01 21:54:56 fetching corpus: 1500, signal 103395/133190 (executing program) 2025/09/01 21:54:57 fetching corpus: 1550, signal 105245/135485 (executing program) 2025/09/01 21:54:57 fetching corpus: 1600, signal 106869/137629 (executing program) 2025/09/01 21:54:57 fetching corpus: 1650, signal 108945/140023 (executing program) 2025/09/01 21:54:57 fetching corpus: 1700, signal 110169/141794 (executing program) 2025/09/01 21:54:57 fetching corpus: 1750, signal 111618/143675 (executing program) 2025/09/01 21:54:57 fetching corpus: 1800, signal 112651/145343 (executing program) 2025/09/01 21:54:57 fetching corpus: 1850, signal 113859/147034 (executing program) 2025/09/01 21:54:57 fetching corpus: 1900, signal 114703/148468 (executing program) 2025/09/01 21:54:57 fetching corpus: 1950, signal 115805/150052 (executing program) 2025/09/01 21:54:57 fetching corpus: 2000, signal 116917/151657 (executing program) 2025/09/01 21:54:58 fetching corpus: 2050, signal 117857/153088 (executing program) 2025/09/01 21:54:58 fetching corpus: 2100, signal 119344/154831 (executing program) 2025/09/01 21:54:58 fetching corpus: 2150, signal 120545/156334 (executing program) 2025/09/01 21:54:58 fetching corpus: 2200, signal 122525/158286 (executing program) 2025/09/01 21:54:58 fetching corpus: 2250, signal 123370/159622 (executing program) 2025/09/01 21:54:58 fetching corpus: 2300, signal 124057/160863 (executing program) 2025/09/01 21:54:58 fetching corpus: 2350, signal 124846/162125 (executing program) 2025/09/01 21:54:58 fetching corpus: 2400, signal 125815/163395 (executing program) 2025/09/01 21:54:58 fetching corpus: 2450, signal 126826/164671 (executing program) 2025/09/01 21:54:58 fetching corpus: 2500, signal 127633/165848 (executing program) 2025/09/01 21:54:59 fetching corpus: 2550, signal 128417/167042 (executing program) 2025/09/01 21:54:59 fetching corpus: 2600, signal 129322/168222 (executing program) 2025/09/01 21:54:59 fetching corpus: 2650, signal 129921/169262 (executing program) 2025/09/01 21:54:59 fetching corpus: 2700, signal 131198/170632 (executing program) 2025/09/01 21:54:59 fetching corpus: 2750, signal 132003/171746 (executing program) 2025/09/01 21:54:59 fetching corpus: 2800, signal 132559/172731 (executing program) 2025/09/01 21:54:59 fetching corpus: 2850, signal 133434/173864 (executing program) 2025/09/01 21:54:59 fetching corpus: 2900, signal 134042/174796 (executing program) 2025/09/01 21:54:59 fetching corpus: 2950, signal 134757/175793 (executing program) 2025/09/01 21:54:59 fetching corpus: 3000, signal 135274/176705 (executing program) 2025/09/01 21:54:59 fetching corpus: 3050, signal 135956/177664 (executing program) 2025/09/01 21:55:00 fetching corpus: 3100, signal 136652/178624 (executing program) 2025/09/01 21:55:00 fetching corpus: 3150, signal 137456/179597 (executing program) 2025/09/01 21:55:00 fetching corpus: 3200, signal 138147/180529 (executing program) 2025/09/01 21:55:00 fetching corpus: 3250, signal 138772/181427 (executing program) 2025/09/01 21:55:00 fetching corpus: 3300, signal 139350/182325 (executing program) 2025/09/01 21:55:00 fetching corpus: 3350, signal 140206/183294 (executing program) 2025/09/01 21:55:00 fetching corpus: 3400, signal 140890/184200 (executing program) 2025/09/01 21:55:00 fetching corpus: 3450, signal 141570/185136 (executing program) 2025/09/01 21:55:00 fetching corpus: 3500, signal 142031/185890 (executing program) 2025/09/01 21:55:00 fetching corpus: 3550, signal 142853/186720 (executing program) 2025/09/01 21:55:01 fetching corpus: 3600, signal 143474/187558 (executing program) 2025/09/01 21:55:01 fetching corpus: 3650, signal 143947/188313 (executing program) 2025/09/01 21:55:01 fetching corpus: 3700, signal 144244/189009 (executing program) 2025/09/01 21:55:01 fetching corpus: 3750, signal 144715/189694 (executing program) 2025/09/01 21:55:01 fetching corpus: 3800, signal 145281/190444 (executing program) 2025/09/01 21:55:01 fetching corpus: 3850, signal 145827/191165 (executing program) 2025/09/01 21:55:01 fetching corpus: 3900, signal 146301/191920 (executing program) 2025/09/01 21:55:01 fetching corpus: 3950, signal 146746/192587 (executing program) 2025/09/01 21:55:01 fetching corpus: 4000, signal 147663/193380 (executing program) 2025/09/01 21:55:01 fetching corpus: 4050, signal 148280/194116 (executing program) 2025/09/01 21:55:01 fetching corpus: 4100, signal 148747/194813 (executing program) 2025/09/01 21:55:01 fetching corpus: 4150, signal 149191/195490 (executing program) 2025/09/01 21:55:02 fetching corpus: 4200, signal 149616/196144 (executing program) 2025/09/01 21:55:02 fetching corpus: 4250, signal 150165/196757 (executing program) 2025/09/01 21:55:02 fetching corpus: 4300, signal 150873/197434 (executing program) 2025/09/01 21:55:02 fetching corpus: 4350, signal 151240/198035 (executing program) 2025/09/01 21:55:02 fetching corpus: 4400, signal 152277/198781 (executing program) 2025/09/01 21:55:02 fetching corpus: 4450, signal 152707/199375 (executing program) 2025/09/01 21:55:02 fetching corpus: 4500, signal 153357/199983 (executing program) 2025/09/01 21:55:02 fetching corpus: 4550, signal 153680/200561 (executing program) 2025/09/01 21:55:02 fetching corpus: 4600, signal 154320/201122 (executing program) 2025/09/01 21:55:02 fetching corpus: 4650, signal 154762/201774 (executing program) 2025/09/01 21:55:02 fetching corpus: 4700, signal 155351/202314 (executing program) 2025/09/01 21:55:02 fetching corpus: 4750, signal 155840/202883 (executing program) 2025/09/01 21:55:03 fetching corpus: 4800, signal 156483/203412 (executing program) 2025/09/01 21:55:03 fetching corpus: 4850, signal 157307/203909 (executing program) 2025/09/01 21:55:03 fetching corpus: 4900, signal 157878/204412 (executing program) 2025/09/01 21:55:03 fetching corpus: 4950, signal 158393/204934 (executing program) 2025/09/01 21:55:03 fetching corpus: 5000, signal 158750/205397 (executing program) 2025/09/01 21:55:03 fetching corpus: 5050, signal 159228/205876 (executing program) 2025/09/01 21:55:03 fetching corpus: 5100, signal 159870/206335 (executing program) 2025/09/01 21:55:03 fetching corpus: 5150, signal 160229/206378 (executing program) 2025/09/01 21:55:03 fetching corpus: 5200, signal 160596/206386 (executing program) 2025/09/01 21:55:03 fetching corpus: 5250, signal 161140/206421 (executing program) 2025/09/01 21:55:03 fetching corpus: 5300, signal 162055/206428 (executing program) 2025/09/01 21:55:03 fetching corpus: 5350, signal 162413/206434 (executing program) 2025/09/01 21:55:03 fetching corpus: 5400, signal 162745/206435 (executing program) 2025/09/01 21:55:04 fetching corpus: 5450, signal 163255/206437 (executing program) 2025/09/01 21:55:04 fetching corpus: 5500, signal 163849/206446 (executing program) 2025/09/01 21:55:04 fetching corpus: 5550, signal 164239/206459 (executing program) 2025/09/01 21:55:04 fetching corpus: 5600, signal 164780/206465 (executing program) 2025/09/01 21:55:04 fetching corpus: 5650, signal 165489/206466 (executing program) 2025/09/01 21:55:04 fetching corpus: 5700, signal 165888/206500 (executing program) 2025/09/01 21:55:04 fetching corpus: 5750, signal 166200/206501 (executing program) 2025/09/01 21:55:04 fetching corpus: 5800, signal 166582/206513 (executing program) 2025/09/01 21:55:04 fetching corpus: 5850, signal 166859/206517 (executing program) 2025/09/01 21:55:04 fetching corpus: 5900, signal 167157/206518 (executing program) 2025/09/01 21:55:04 fetching corpus: 5950, signal 167427/206526 (executing program) 2025/09/01 21:55:04 fetching corpus: 6000, signal 167672/206546 (executing program) 2025/09/01 21:55:04 fetching corpus: 6050, signal 167966/206562 (executing program) 2025/09/01 21:55:04 fetching corpus: 6100, signal 168343/206568 (executing program) 2025/09/01 21:55:05 fetching corpus: 6150, signal 168714/206572 (executing program) 2025/09/01 21:55:05 fetching corpus: 6200, signal 169050/206596 (executing program) 2025/09/01 21:55:05 fetching corpus: 6250, signal 169438/206601 (executing program) 2025/09/01 21:55:05 fetching corpus: 6300, signal 169881/206618 (executing program) 2025/09/01 21:55:05 fetching corpus: 6350, signal 170457/206632 (executing program) 2025/09/01 21:55:05 fetching corpus: 6400, signal 171083/206632 (executing program) 2025/09/01 21:55:05 fetching corpus: 6450, signal 171559/206736 (executing program) 2025/09/01 21:55:05 fetching corpus: 6500, signal 171983/206740 (executing program) 2025/09/01 21:55:05 fetching corpus: 6550, signal 172333/206744 (executing program) 2025/09/01 21:55:05 fetching corpus: 6600, signal 172663/206838 (executing program) 2025/09/01 21:55:06 fetching corpus: 6650, signal 173204/206842 (executing program) 2025/09/01 21:55:06 fetching corpus: 6700, signal 173441/206842 (executing program) 2025/09/01 21:55:06 fetching corpus: 6750, signal 173700/206862 (executing program) 2025/09/01 21:55:06 fetching corpus: 6800, signal 174019/206862 (executing program) 2025/09/01 21:55:06 fetching corpus: 6850, signal 174258/206862 (executing program) 2025/09/01 21:55:06 fetching corpus: 6900, signal 174612/206876 (executing program) 2025/09/01 21:55:06 fetching corpus: 6950, signal 174881/206952 (executing program) 2025/09/01 21:55:06 fetching corpus: 7000, signal 175166/206959 (executing program) 2025/09/01 21:55:06 fetching corpus: 7050, signal 175491/206965 (executing program) 2025/09/01 21:55:06 fetching corpus: 7100, signal 175776/206975 (executing program) 2025/09/01 21:55:06 fetching corpus: 7150, signal 176161/206994 (executing program) 2025/09/01 21:55:06 fetching corpus: 7200, signal 176468/206996 (executing program) 2025/09/01 21:55:06 fetching corpus: 7250, signal 176745/206996 (executing program) 2025/09/01 21:55:06 fetching corpus: 7300, signal 177033/207053 (executing program) 2025/09/01 21:55:07 fetching corpus: 7350, signal 177330/207062 (executing program) 2025/09/01 21:55:07 fetching corpus: 7400, signal 177569/207062 (executing program) 2025/09/01 21:55:07 fetching corpus: 7450, signal 177890/207063 (executing program) 2025/09/01 21:55:07 fetching corpus: 7500, signal 178172/207071 (executing program) 2025/09/01 21:55:07 fetching corpus: 7550, signal 178692/207081 (executing program) 2025/09/01 21:55:07 fetching corpus: 7600, signal 179069/207081 (executing program) 2025/09/01 21:55:07 fetching corpus: 7650, signal 179390/207081 (executing program) 2025/09/01 21:55:07 fetching corpus: 7700, signal 179634/207091 (executing program) 2025/09/01 21:55:07 fetching corpus: 7750, signal 179829/207104 (executing program) 2025/09/01 21:55:07 fetching corpus: 7800, signal 180225/207112 (executing program) 2025/09/01 21:55:07 fetching corpus: 7850, signal 180503/207114 (executing program) 2025/09/01 21:55:07 fetching corpus: 7900, signal 180722/207115 (executing program) 2025/09/01 21:55:08 fetching corpus: 7950, signal 181025/207124 (executing program) 2025/09/01 21:55:08 fetching corpus: 8000, signal 181403/207127 (executing program) 2025/09/01 21:55:08 fetching corpus: 8050, signal 181777/207136 (executing program) 2025/09/01 21:55:08 fetching corpus: 8100, signal 182088/207137 (executing program) 2025/09/01 21:55:08 fetching corpus: 8150, signal 182729/207137 (executing program) 2025/09/01 21:55:08 fetching corpus: 8200, signal 182950/207140 (executing program) 2025/09/01 21:55:08 fetching corpus: 8250, signal 183281/207140 (executing program) 2025/09/01 21:55:08 fetching corpus: 8300, signal 183506/207150 (executing program) 2025/09/01 21:55:08 fetching corpus: 8350, signal 183803/207154 (executing program) 2025/09/01 21:55:08 fetching corpus: 8400, signal 183970/207156 (executing program) 2025/09/01 21:55:08 fetching corpus: 8450, signal 184306/207156 (executing program) 2025/09/01 21:55:09 fetching corpus: 8500, signal 184641/207161 (executing program) 2025/09/01 21:55:09 fetching corpus: 8550, signal 184888/207168 (executing program) 2025/09/01 21:55:09 fetching corpus: 8600, signal 185065/207168 (executing program) 2025/09/01 21:55:09 fetching corpus: 8650, signal 185356/207171 (executing program) 2025/09/01 21:55:09 fetching corpus: 8700, signal 185608/207175 (executing program) 2025/09/01 21:55:09 fetching corpus: 8750, signal 185938/207177 (executing program) 2025/09/01 21:55:09 fetching corpus: 8800, signal 186238/207179 (executing program) 2025/09/01 21:55:09 fetching corpus: 8850, signal 186529/207179 (executing program) 2025/09/01 21:55:09 fetching corpus: 8900, signal 186922/207196 (executing program) 2025/09/01 21:55:09 fetching corpus: 8950, signal 187238/207201 (executing program) 2025/09/01 21:55:10 fetching corpus: 9000, signal 187549/207207 (executing program) 2025/09/01 21:55:10 fetching corpus: 9050, signal 187987/207208 (executing program) 2025/09/01 21:55:10 fetching corpus: 9100, signal 188287/207216 (executing program) 2025/09/01 21:55:10 fetching corpus: 9150, signal 188778/207236 (executing program) 2025/09/01 21:55:10 fetching corpus: 9200, signal 189039/207236 (executing program) 2025/09/01 21:55:10 fetching corpus: 9250, signal 189295/207236 (executing program) 2025/09/01 21:55:10 fetching corpus: 9300, signal 189471/207241 (executing program) 2025/09/01 21:55:10 fetching corpus: 9350, signal 189707/207242 (executing program) 2025/09/01 21:55:10 fetching corpus: 9400, signal 190133/207250 (executing program) 2025/09/01 21:55:10 fetching corpus: 9450, signal 190288/207259 (executing program) 2025/09/01 21:55:11 fetching corpus: 9500, signal 190545/207270 (executing program) 2025/09/01 21:55:11 fetching corpus: 9550, signal 190841/207274 (executing program) 2025/09/01 21:55:11 fetching corpus: 9600, signal 191579/207275 (executing program) 2025/09/01 21:55:11 fetching corpus: 9650, signal 192026/207275 (executing program) 2025/09/01 21:55:11 fetching corpus: 9700, signal 192243/207277 (executing program) 2025/09/01 21:55:11 fetching corpus: 9750, signal 192625/207296 (executing program) 2025/09/01 21:55:11 fetching corpus: 9800, signal 192772/207300 (executing program) 2025/09/01 21:55:11 fetching corpus: 9850, signal 193001/207302 (executing program) 2025/09/01 21:55:11 fetching corpus: 9900, signal 193212/207312 (executing program) 2025/09/01 21:55:11 fetching corpus: 9950, signal 193406/207333 (executing program) 2025/09/01 21:55:11 fetching corpus: 10000, signal 193621/207333 (executing program) 2025/09/01 21:55:11 fetching corpus: 10050, signal 193841/207338 (executing program) 2025/09/01 21:55:12 fetching corpus: 10100, signal 194024/207338 (executing program) 2025/09/01 21:55:12 fetching corpus: 10150, signal 194193/207340 (executing program) 2025/09/01 21:55:12 fetching corpus: 10200, signal 196254/207394 (executing program) 2025/09/01 21:55:12 fetching corpus: 10250, signal 196474/207395 (executing program) 2025/09/01 21:55:12 fetching corpus: 10288, signal 196598/207396 (executing program) 2025/09/01 21:55:12 fetching corpus: 10288, signal 196598/207396 (executing program) 2025/09/01 21:55:13 starting 8 fuzzer processes 21:55:13 executing program 1: r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x142, 0x1) r1 = open_tree(r0, &(0x7f0000000040)='./file0\x00', 0x1900) getdents(0xffffffffffffff9c, &(0x7f0000000080)=""/239, 0xef) getdents64(r0, &(0x7f0000000180)=""/117, 0x75) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r1, 0xc038943b, &(0x7f0000000280)={0x9, 0x48, '\x00', 0x1, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000300), 0x400180, 0x0) move_mount(r1, &(0x7f00000002c0)='./file0\x00', r2, &(0x7f0000000340)='./file0\x00', 0x1) accept(r2, &(0x7f0000000380)=@generic, &(0x7f0000000400)=0x80) recvmsg$unix(r2, &(0x7f0000001640)={&(0x7f0000000440)=@abs, 0x6e, &(0x7f0000001580)=[{&(0x7f00000004c0)=""/3, 0x3}, {&(0x7f0000000500)=""/117, 0x75}, {&(0x7f0000000580)=""/4096, 0x1000}], 0x3, &(0x7f00000015c0)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x70}, 0x2000) fcntl$setsig(r4, 0xa, 0x32) r6 = syz_mount_image$msdos(&(0x7f0000001680), &(0x7f00000016c0)='./file0\x00', 0xffffffffffffff80, 0x7, &(0x7f0000001c00)=[{&(0x7f0000001700)="05e941e83091ee1a43b7a97e53a52d148ce667eb707a301d9702ea6846aa11122abca4ab86555ee16077bcc998301ed881141af78de4377a058ab916589d1ac0630bbb0d7115623995c4647a6edfbdec9c32c860f2f6ac7d732214af013986595f2af14281fd3efd059fb1759436cf244981a3d0cd487166b1e0b9f46a693913a03ac3bc8af48924d251", 0x8a, 0xa61c}, {&(0x7f00000017c0)="cb013721b29a8df2054cc6a0d43d178086ed9e65a4", 0x15, 0xb725}, {&(0x7f0000001800)="44163573a44d48d5dcc000895d5a4a1b41113153682fe018e32f8a5ecbc8d62a90f3b47433870a01800247a18871777bc816d38e68dc1b121a6056ce1194f78e27ffc729ded61038b3a769428158136692a72e7b979272ef74c47e83513960d17374fce60c7b19f74fc1fdfcc45df101895733757cea5b0e96a10a2b6c8d678544ec26583c8776f35fc27208bb8c058e7632f72aad682e8af36afc6b40af292797286e7507509dddc9929965004f0e02ff45951fd7cb563923df74cebb015fa2f3a79e61273f76f74c0003", 0xcb, 0x7}, {&(0x7f0000001900)="5fc3f28b94172aa8ca970ffcf1a839f5b6ea0f9bd570b68ec69c4c6bc552fa05742befb5f9436de55cd0ac9bc5433ba4b8322598a82f083d4ea9dfcf65bdbb3f117eaf5b3deb6051328f743d3d177abf733a9d6e9a32bdb9d8cfd873c75e562d456f22efad4141d99b735c833e6b5fdfe0d9b46d517773ff79ce778ba703b4cfcc440cc00426a8418694e480ba55ae1ddc120392dda4b0358bd38a4b352b3de3fa00bd5df1be4d2e76c82ee0869a018fff03f742579dcde259e244c54518a54297092aa9a689e5e52b93f42722d77a363dd5b93ed4db", 0xd6, 0x2}, {&(0x7f0000001a00)="ba16b26c251f86a4420add1f7fccecc088321cdd970a4011004b360930726688b401d507151df1d7a716248217491e47221890dcea7d08e33131eb0bd5521d6d060b728b7a4e890ab42da22bf965ac5ebcff787997409eb733cac74487c2ef1cc38139aa57e39b2ddefe2d87d04cb09dad2f22f0f137a4c5a72573f16c5331c831a19e91c57e3390f644dbceef503e8992608d4ef80ab0e2b38d07796fb17404c559fe4484540efb49139079f7fd2357eb19ea4271915595e0e7a8cae4ef2f9cfc67e0704442e4aac1d33a93569b6176c51ff1582e88c85f71c095cffe39a55c", 0xe0, 0x4}, {&(0x7f0000001b00)="5472fe23b06a763b546c176c6b76df3be15931", 0x13, 0x4}, {&(0x7f0000001b40)="7fa9b2d5682c2e499f2701c21f0dfa542f129878a1387ef30408dae4ddbded49e066925981664ea8a2566176bedaeccca1272d449d94e43769882d3da44eacbd5510ba8953ac93d79c2e564c857b44052f79e893caec67d347c7072c4973af5d029498506396d7db123f95ff892191106a1f9ad2975a9279df025cae8a8a91b2838ee6e37dccbbf04ff00b016845da01275788a16154a446850b781a5b16908398d4b93dad03f44f98ead8260b76b83f6a12306a", 0xb4, 0xc8}], 0x2000, &(0x7f0000001cc0)={[{}, {@nodots}, {@dots}, {@dots}, {@nodots}, {@fat=@errors_continue}, {@fat=@errors_continue}, {@dots}, {@nodots}, {@dots}], [{@obj_role={'obj_role', 0x3d, '/dev/vcsa\x00'}}]}) getdents64(r6, &(0x7f0000001d40)=""/97, 0x61) getdents(r1, &(0x7f0000001dc0)=""/188, 0xbc) rename(&(0x7f0000001e80)='./file0\x00', &(0x7f0000001ec0)='./file0\x00') pipe(&(0x7f0000001f00)={0xffffffffffffffff, 0xffffffffffffffff}) inotify_add_watch(r7, &(0x7f0000001f40)='./file0\x00', 0x0) execveat(r5, &(0x7f0000001f80)='./file0\x00', &(0x7f00000020c0)=[&(0x7f0000001fc0)='dots', &(0x7f0000002000)='/dev/vcsa\x00', &(0x7f0000002040)='&&&&\x00', &(0x7f0000002080)='\x00'], &(0x7f0000002180)=[&(0x7f0000002100)='\'.\x00', &(0x7f0000002140)='\x00'], 0x1000) openat$incfs(r3, &(0x7f00000021c0)='.log\x00', 0x101000, 0x2) fsetxattr(r3, &(0x7f0000002200)=@known='trusted.overlay.nlink\x00', &(0x7f0000002240)=',@:\xd6&)\x00', 0x7, 0x2) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000002280)={0x9, 0xc0000}) 21:55:13 executing program 7: r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000002, 0x10010, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000000), 0xfffffffffffffff8, 0x800) syz_io_uring_submit(r0, 0x0, &(0x7f0000001340)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4007, @fd=r1, 0x97d, &(0x7f00000012c0)=[{&(0x7f0000000040)=""/238, 0xee}, {&(0x7f0000000140)=""/217, 0xd9}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/48, 0x30}, {&(0x7f0000001280)=""/24, 0x18}], 0x5, 0xa}, 0x9) r2 = syz_io_uring_setup(0x575b, &(0x7f0000001380)={0x0, 0xa55b, 0x9, 0x2, 0x352}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000001400)=0x0, &(0x7f0000001440)=0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r3, 0x118, &(0x7f0000001480), 0x0, 0x4) syz_io_uring_submit(r0, r4, &(0x7f00000014c0)=@IORING_OP_NOP={0x0, 0xcf97aecef238bdf8}, 0x5) r5 = syz_io_uring_setup(0x594b, &(0x7f0000001500)={0x0, 0x59ac, 0x0, 0x3, 0x24c, 0x0, r2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001580)=0x0, &(0x7f00000015c0)) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000008, 0x4010, r2, 0x10000000) syz_io_uring_submit(r6, r7, &(0x7f0000001600)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0x2}, 0x401) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000001640)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) open_tree(r8, &(0x7f0000001680)='./file0\x00', 0x84800) r9 = accept4$packet(r8, &(0x7f00000016c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001700)=0x14, 0x0) close_range(r5, r9, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, &(0x7f0000001c00)={{{@in=@empty, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@private2}}, &(0x7f0000001d00)=0xe8) getresuid(&(0x7f0000001d80)=0x0, &(0x7f0000001dc0), &(0x7f0000001e00)) syz_mount_image$tmpfs(&(0x7f0000001740), &(0x7f0000001780)='./file0\x00', 0x5, 0x5, &(0x7f0000001b00)=[{&(0x7f00000017c0)="f91eb5e510f03b8ebbca6cf0762f3781ebbcaaf09a07bfaf2622f35687c864f3ac32f9af2f6da4f1f4600a25a4de8a0ae1d66dca0324ff53b0daa5fb63407d9e3b4afacb502fa6fba072eff0a481d32da08e35", 0x53, 0x3ff}, {&(0x7f0000001840)="87444baa44019720a20760121e1adfa2bef45ea5fe83dc66a2aa6c37e3615476febe8af7d89caa113752b8d72b92539e09daa0d758dee21ebfe9c6409562df11ac6eed5c0abe94214146554d21c096cecc608236db23afe85f50474f53623962591a1514496adfa64d403575f71e44828bde32e2d56811ed19868526904ac272af795529be6781f51a16342b893ca3954216a7b0c5bb4c", 0x97, 0x8}, {&(0x7f0000001900)="a586496bfb6a30078610d489ce039845bb94cf79524bb7b65f35ee461c59fe1fa56f2076d71bc8a5b44e1ea0d293b32ff03328d2", 0x34, 0xadc8}, {&(0x7f0000001940)="d194a903f7005d0ebf7104281f57c8167d6d8b7680fb1278186de8996fdb3e9210f5f796a7e8f3a12e965257cc08209427c5ad883aa504d3ad31fc45ec63c2e9fe0876e4de68a5a91064def61a5e5680577bd064ed4ee8e3bb6ecd7552ecd035c95f1295bf23f32d70e30bcf215a5c23baedc446889cc981fa3abdd6fa911b90c4f179afbe4b73f5761d6f6a5a8dafba8e4be5ad5a03bf8e1866018fffd92b6dfea435db377e87442ed5a9268e2a0c673031f3974a033a480bc241ea9e651295179a2deedc9a35bfa10a657197da02540a07872311c87e18fa2090169b95a5e40bd413fd3ed5a10140b8af71aa338e7d3306224c6e", 0xf5, 0x4}, {&(0x7f0000001a40)="d8b9de70a859d441d0bfe2e69d0fe3ca308b3d0deec51ed16b9bb9c12d97a998c8cfb0ed30530ff775d3f4302efd7ed9d4fe9609fe016c27cd28d4af4b1e315a177c2f43887e4d76ec2e5237cd5c6169eadd5723f423ad556ee84a7c16da6802f66e0e312652df10e28b8932de87bffc1c4e8d4325b9049469edc48263a2fd9707e7456adf5275089133e0cb191adcc5370db0366f67af6e0d634af6d1dcc01ad69271110e0549a43851db5c392a9e5447d705bdc19dae0f", 0xb8, 0x7ff}], 0x0, &(0x7f0000001e40)={[{@huge_within_size}, {@nr_inodes={'nr_inodes', 0x3d, [0x30, 0x70]}}, {@uid={'uid', 0x3d, r10}}, {@mode={'mode', 0x3d, 0x7}}], [{@measure}, {@fsuuid={'fsuuid', 0x3d, {[0x30, 0x32, 0x36, 0x39, 0x62, 0x0, 0x35, 0x32], 0x2d, [0x34, 0x62, 0x65], 0x2d, [0x61, 0x64, 0x63, 0x61], 0x2d, [0x35, 0x38, 0x34, 0x30], 0x2d, [0x65, 0x63, 0x9, 0x61, 0x37, 0x30, 0x37, 0x62]}}}, {@uid_eq={'uid', 0x3d, r11}}, {@smackfsfloor={'smackfsfloor', 0x3d, '-])\xde}'}}]}) r12 = socket$inet_tcp(0x2, 0x1, 0x0) pread64(r12, &(0x7f0000001f00)=""/4096, 0x1000, 0xffff) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r8, 0x7, &(0x7f0000002f00)=r8, 0x1) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000002f80)={{0x1, 0x1, 0x18, r8, {0x72}}, './file0\x00'}) 21:55:13 executing program 2: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000000c0)='memory.swap.events\x00', 0x0, 0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000380)={0x0, 0x0}) r4 = clone3(&(0x7f0000000400)={0x0, &(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0, {0xe}, &(0x7f00000001c0)=""/184, 0xb8, &(0x7f0000000280)=""/255, &(0x7f00000003c0)=[0xffffffffffffffff, r3], 0x2}, 0x58) clone3(&(0x7f0000001900)={0x144222000, &(0x7f0000000740), &(0x7f0000000780), &(0x7f00000007c0)=0x0, {0x11}, &(0x7f0000000800)=""/4096, 0x1000, &(0x7f0000001800)=""/152, &(0x7f00000018c0)=[r5, r4, r5, r4], 0x4, {r0}}, 0x58) fcntl$getownex(r0, 0x10, &(0x7f0000001980)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f00000019c0)={0x0, 0x0}) r10 = fork() ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000001a40)={0x0, 0x0}) r12 = syz_io_uring_complete(0x0) clone3(&(0x7f0000001b00)={0x4090000, &(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500), {0x8}, &(0x7f0000000540)=""/220, 0xdc, &(0x7f0000000640)=""/213, &(0x7f0000001ac0)=[r7, r4, r8, r6, r9, r5, r10, r11, r3, r6], 0xa, {r12}}, 0x58) perf_event_open(&(0x7f0000001b80)={0x5, 0x80, 0x4, 0x7, 0xb8, 0x3, 0x0, 0x7fffffff, 0x8000, 0x8, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x5}, 0x40, 0x7ff, 0xfffeffff, 0x3, 0xe4, 0x401, 0x9, 0x0, 0x2, 0x0, 0x5}, r9, 0x8, r2, 0x0) r13 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001c00)='/sys/module/cpuidle', 0x800, 0x18) ioctl$TIOCL_SETVESABLANK(r13, 0x541c, &(0x7f0000001c40)) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000001c80), &(0x7f0000001cc0)={0x0, 0xfb, 0x83, 0x5, 0x3, "0d07a54ad7bc2b0ddcf7db4192c7881b", "f7458bbe710b96a595339f11f25319fa2559a3b7d7c38d74825587c5c7044d755d5369baa96154498cd0847a82576cfaa2f26e56401a665062c5f59a25c70319cddf2c281e6c60a4fd58078bcee38782b83d442693fdfe8dc72dcc2ceabcc9d2efea37df9f6d964fc136c9ac160c"}, 0x83, 0x1) ioctl$AUTOFS_IOC_CATATONIC(r1, 0x9362, 0x0) creat(&(0x7f0000001d80)='./file0\x00', 0x40) pipe(&(0x7f0000001dc0)) 21:55:13 executing program 0: vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x7) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/hid_cherry', 0x201, 0x122) ioctl$INCFS_IOC_PERMIT_FILL(0xffffffffffffffff, 0x40046721, &(0x7f0000000080)) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$VFAT_IOCTL_READDIR_BOTH(r1, 0x82307201, &(0x7f00000000c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$VT_DISALLOCATE(r0, 0x5608) io_setup(0x8000, &(0x7f0000000300)=0x0) r3 = ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) r4 = open(&(0x7f0000000600)='./file0\x00', 0x10602, 0x80) io_submit(r2, 0x2, &(0x7f0000000680)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x6, 0x7, r1, &(0x7f0000000340)="fb353178aa842a7f472dd3af0c3395e5ef17ebcdbf93a1a37a3ef2907c045dddbd6599e97828046a7bbc7c40d6e46a7c1d759e8e5e6283cc880df98f2aebe438da934eb4863849dbe5e5afdb51e0160394382f5202aeb63ffb5d97df0b3ee0d2c886c0e29466bd8dc0b6d7ce9912c841f84b040b48cd35a528e0b944adcbad3b72670eb7f432bbc6ab3b3b4bf5eb87900060c3f40196676bcf13a09f02eafb9c31bec81d18a6b563576bc37cba6e0dad9986223feee0dfbe430d95918c21301573856b5ab89a39c890ddac6c83bea8c22e22de61903ca37312", 0xd9, 0x8, 0x0, 0x2}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x6, r3, &(0x7f0000000540)="7b811318b21538c0c293559ecd4d036e44654583dfcfd45ce0c055d21284328753d7529bace78efba0db3adeb10eebdc873db24fac5ce56582d632d8fd05c4d8c9642d554477cb12e3b1d39992c01a0967051ab0ff4c59c97d2589d379d342c3ad918950f9166ae6d5d6e1f11d753f91e0fb71e9ea8a81032e987ffbce475eedd34481c1dfde346dcb", 0x89, 0x5, 0x0, 0x1, r4}]) ioctl$KDDELIO(r0, 0x4b35, 0x4) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f00000006c0), 0x20000, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r5, 0x4004662b, &(0x7f0000000700)=0x6) ioctl$BTRFS_IOC_DEV_INFO(r3, 0xd000941e, &(0x7f0000000740)={0x0, "5a3ef6e7526c5c5c8e15f469499e90c4"}) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r4, 0x29, 0xd3, &(0x7f0000001740)={{0xa, 0x4e24, 0x18000, @dev={0xfe, 0x80, '\x00', 0x29}, 0x197a}, {0xa, 0x4e23, 0xffff, @mcast1, 0x7f}, 0x8000, [0x650, 0x2, 0xd18, 0x80000001, 0x40, 0x2, 0x3, 0x9]}, 0x5c) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f00000017c0), 0x400, 0x0) fsetxattr$security_capability(r5, &(0x7f0000001800), &(0x7f0000001840)=@v3={0x3000000, [{0x3, 0x40}, {0x9, 0x2f56147}], 0xffffffffffffffff}, 0x18, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000001880)={{0x1, 0x1, 0x18, r6, {0x0, 0xee00}}, './file0\x00'}) ioctl$KDGETKEYCODE(r7, 0x4b4c, &(0x7f00000018c0)={0x0, 0x9}) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f0000001900)={0x7fff, {{0xa, 0x4e23, 0x8, @mcast2, 0x9}}}, 0x88) 21:55:13 executing program 3: sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000040)={0x18c, 0x3, 0x1, 0x3, 0x0, 0x0, {0x2, 0x0, 0x7}, [@CTA_PROTOINFO={0x38, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x34, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x3ff}, @CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x3}, @CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x7f}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0xffffffff}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x9}]}}, @CTA_TUPLE_MASTER={0x70, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @loopback}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x7}, @CTA_SEQ_ADJ_REPLY={0x3c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xfffff68a}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9322}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xe4}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x6}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x100}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xffffffff}]}, @CTA_TUPLE_ORIG={0x38, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_TUPLE_ORIG={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @mcast2}}}]}, @CTA_ZONE={0x6}, @CTA_ID={0x8}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x802}, @CTA_SEQ_ADJ_ORIG={0xc, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}]}]}, 0x18c}, 0x1, 0x0, 0x0, 0x4008802}, 0x40) r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000002, 0x80010, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000000280)=@IORING_OP_FALLOCATE={0x11, 0x2, 0x0, @fd_index=0x8, 0x2, 0x0, 0x81}, 0xaeb07855) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x408000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, 0x0, 0xb5c40ef303f55069, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x14, 0x19, {0x61e, 0x2, 0x7, 0x3ff}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x20000040) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400), r1) sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000008}, 0x80) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x38, 0x0, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x100}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x20}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x4000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$NL80211_CMD_NOTIFY_RADAR(r1, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x64, r3, 0x4, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x324}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xe3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3d2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3cf}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x30008810) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000800)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000a40)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000a00)={&(0x7f0000000840)={0x1a4, r4, 0x400, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x5, 0x4}, {0x3, 0x6}, {0x7c, 0x1}, {0x5, 0x2}, {0x40, 0x3}, {0x8, 0x4}, {0x7, 0x3}, {0x6}, {0x3f, 0x3}, {0x0, 0x2}, {0x0, 0x4}, {0xf8, 0x7}, {0xc1, 0x7}, {0x7f}, {0x2, 0x1}, {0x1, 0x3}, {0x7, 0x3}, {0x9, 0x5}], "1b2987220b59ddb7"}}, @NL80211_ATTR_QOS_MAP={0x1a, 0xc7, {[{0x0, 0x5}, {0xf7, 0x2}, {0x1, 0x2}, {0x20}, {0x2, 0x7}, {0x0, 0x2}, {0x4a, 0x7}], "a3b52ef1b5ff59ba"}}, @NL80211_ATTR_QOS_MAP={0x34, 0xc7, {[{0x5}, {0x1}, {0x1, 0x5}, {}, {0x9, 0x6}, {0xfd}, {0x5, 0x1}, {0x1, 0x2}, {0x9, 0x7}, {0xae, 0x7}, {0x6, 0x4}, {0x3, 0x7}, {0x0, 0x4}, {0x0, 0x2}, {0x0, 0x3}, {0x1, 0x6}, {0x2, 0x3}, {0x0, 0x7}, {0x0, 0x5}, {0x24, 0x6}], "fec8091411322b7c"}}, @NL80211_ATTR_QOS_MAP={0x26, 0xc7, {[{0x7, 0x1}, {0x4, 0x3}, {0x3, 0x1}, {0x7f, 0x6}, {0xa9, 0x4}, {0x8, 0x2}, {0x20, 0x6}, {0xfe, 0x4}, {0xfc, 0x6}, {0x0, 0x5}, {0x75, 0x3}, {0x7f}, {0x75, 0x2}], "38d566752747183c"}}, @NL80211_ATTR_QOS_MAP={0x2e, 0xc7, {[{0x2, 0x7}, {0xff, 0x3}, {0x1}, {0x8, 0x1}, {0x5}, {0x2, 0x1}, {0x7f, 0x2}, {0x0, 0x1}, {}, {0x40}, {0x1, 0x2}, {0x3, 0x3}, {0x1f, 0x5}, {0x1, 0x5}, {0x1, 0x2}, {}, {0x6, 0x1}], "3ea75fa5d0155fce"}}, @NL80211_ATTR_QOS_MAP={0x34, 0xc7, {[{0x3f, 0x2}, {0x0, 0x4}, {0x0, 0x7}, {0x1, 0x7}, {0x5}, {0x41, 0x2}, {0x0, 0x7}, {0x7f, 0x6}, {0xf, 0x1}, {0x0, 0x6}, {0xfd, 0x1}, {0x2, 0x2}, {0x7, 0x2}, {0x1, 0x6}, {0xff, 0x4}, {0x20, 0x3}, {0x5, 0x6}, {0x5, 0x7}, {0x1f}, {0x1, 0x1}], "25c594c1dd9acfc8"}}, @NL80211_ATTR_QOS_MAP={0x18, 0xc7, {[{0x9, 0x5}, {0x3, 0x7}, {0xfa, 0x3}, {0x1, 0x3}, {0x9, 0x7}, {0x0, 0x1}], "eb00695f5a363a26"}}, @NL80211_ATTR_QOS_MAP={0xe, 0xc7, {[{0x8, 0x6}], "7e5ca179077c3d74"}}, @NL80211_ATTR_QOS_MAP={0x2c, 0xc7, {[{0x0, 0x5}, {0xff, 0x7}, {0xc0, 0x6}, {0xfc, 0x6}, {0xbd, 0x2}, {0x9c, 0x3}, {0x9b, 0x7}, {0xfb, 0x1}, {0xff, 0x4}, {0xd, 0x1}, {0x5, 0x6}, {0x7f, 0x1}, {0x9, 0x5}, {0x0, 0x1}, {0x40, 0x4}, {0xfe, 0x7}], "d4e1b0dddf9682c2"}}, @NL80211_ATTR_QOS_MAP={0x26, 0xc7, {[{0xff, 0x6}, {0x0, 0x6}, {0x3, 0x5}, {0x74, 0x4}, {0x0, 0x1}, {0x8, 0x2}, {0x20, 0x2}, {0x1f, 0x7}, {0x40, 0x5}, {0x1f, 0x1}, {0x40, 0x1}, {0x7, 0x5}, {0x4e, 0x5}], "01d020a45ccce698"}}]}, 0x1a4}}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x8c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_DAEMON={0x60, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xff}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7fff}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000080}, 0x1) r6 = creat(&(0x7f0000000c00)='./file0\x00', 0x5) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000f40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000c80)={0x26c, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xa71}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80}]}, @TIPC_NLA_BEARER={0x194, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'veth0_to_batadv\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x6, @loopback, 0x3e88}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x1f, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x10000}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0xd8b, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1d}}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1d}}}}}, @TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'eth', 0x3a, 'batadv_slave_1\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x2000000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x101, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffffc}}}}, @TIPC_NLA_BEARER_NAME={0xb, 0x1, @l2={'eth', 0x3a, 'lo\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x0, @empty, 0x6}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x3, @rand_addr=' \x01\x00', 0x3}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_BEARER={0x9c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffc00}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x14e}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x5, @remote, 0x4}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}]}]}, @TIPC_NLA_NET={0x4}]}, 0x26c}, 0x1, 0x0, 0x0, 0x2004000}, 0x40000) sendmsg$NL80211_CMD_DISCONNECT(r1, &(0x7f0000001040)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x20, r4, 0x9181de026ea861a4, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3, 0x3e}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x4000040}, 0x8000) sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f0000001140)={&(0x7f0000001080), 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x20, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@ETHTOOL_A_RINGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x801}, 0x20004001) sendmsg$NL80211_CMD_SET_REG(r6, &(0x7f0000001240)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x4c34000}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x20, r4, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 21:55:13 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, r0, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0xada}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x4c}, 0x1, 0x0, 0x0, 0x6a632229c4b08fbf}, 0x50) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80008100}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x4c, 0x0, 0xa00, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xc52, 0x80}}}}, [@NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x2, 0x1, 0x4, 0x0, {0x0, 0xd9, 0x0, 0x7, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x1, 0x7ff, 0x1}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x14) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r0, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x9, 0x57}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x8000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}]}, 0x24}, 0x1, 0x0, 0x0, 0x2400c099}, 0x4000) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000f00)=[{{&(0x7f0000000800), 0x6e, &(0x7f0000000e40)=[{&(0x7f0000000880)=""/147, 0x93}, {&(0x7f0000000940)}, {&(0x7f0000000980)=""/196, 0xc4}, {&(0x7f0000000a80)=""/98, 0x62}, {&(0x7f0000000b00)=""/123, 0x7b}, {&(0x7f0000000b80)=""/161, 0xa1}, {&(0x7f0000000c40)=""/219, 0xdb}, {&(0x7f0000000d40)=""/204, 0xcc}], 0x8, &(0x7f0000000ec0)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x30}}], 0x1, 0x3, &(0x7f0000000f40)={0x77359400}) sendmsg$BATADV_CMD_SET_HARDIF(r6, &(0x7f0000001040)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x2c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x401}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000082}, 0x8890) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r4, &(0x7f0000001140)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x41}, 0x4004) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r4, &(0x7f0000001300)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000012c0)={&(0x7f00000011c0)={0x100, 0x0, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r1}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r1}, @NL80211_ATTR_MESH_CONFIG={0x4c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x1}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x5}, @NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5, 0x8, 0xfd}, @NL80211_MESHCONF_POWER_MODE={0x8, 0x1a, 0x3}, @NL80211_MESHCONF_HOLDING_TIMEOUT={0x6, 0x3, 0xf5}, @NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0x6014}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x2d}, @NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}]}, @NL80211_ATTR_MESH_CONFIG={0x54, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x7f}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x1f}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x7f}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x4d}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x2}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x5}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0x9}, @NL80211_MESHCONF_HT_OPMODE={0x6, 0x16, 0x10}, @NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x8, 0x15, 0xd3}, @NL80211_MESHCONF_TTL={0x5, 0x6, 0x4}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x44}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xb4c9cf4, 0x5a}}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x1}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x1}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x5}, @NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5, 0x8, 0x20}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x200440c0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001340)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r8, &(0x7f0000001480)={&(0x7f0000001380), 0x6e, &(0x7f0000001400), 0x0, &(0x7f0000001440)=[@rights={{0x10}}], 0x10}, 0x40) r9 = dup3(r7, r6, 0x80000) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001500), r5) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r9, &(0x7f0000001700)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001540)={0x178, r10, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x15c, 0x2a, [@gcr_ga={0xbd, 0x6}, @fast_bss_trans={0x37, 0xeb, {0x40, 0x8, "52a6e2af079604d03e91fd7f8e599f3d", "99272b74f0fe20ce838b70006f31d215dc2be8f56d656b20fb960a75a5bbc29e", "81479af2c87d85550cede80ae63c09a17ef9803e419163b3184c580130f7afad", [{0x3, 0x6, "14671809a350"}, {0x1, 0x24, "0a3a2adde9895225409aae87a2d246dfeeb8b88f70b30f62f229a1f32cd6a4d14c16910e"}, {0x2, 0xa, "6622e6889af59f16d89c"}, {0x1, 0x1a, "df18000dbbf919a9ecf2fe1cfa14cfd1be6a234847bb80b621b0"}, {0x4, 0x2, "f4b2"}, {0x2, 0x1a, "96c64a5213d3d9000b91c8550ac67ef50d1b4d75a5ed073535ea"}, {0x4, 0x4, "bd56d8e0"}, {0x1, 0x1b, "c1afb252ca14b9ba272a968d8ae4502f11bb8edd4c7ba2bd0d1ae7"}]}}, @link_id={0x65, 0x12, {@random="0cc8137f5625", @device_b, @device_b}}, @chsw_timing={0x68, 0x4, {0x7, 0x7fff}}, @cf={0x4, 0x6, {0xe0, 0x4, 0xfff, 0x9}}, @random={0x0, 0x1b, "644254509495466cb9ff1352cb86496d544ea8948caac57aeee1ad"}, @supported_rates={0x1, 0x6, [{0x36, 0x1}, {0x60}, {0x10, 0x1}, {0x0, 0x1}, {0x1b}, {0x6, 0x1}]}, @ht={0x2d, 0x1a, {0x400, 0x2, 0x2, 0x0, {0x7, 0x7, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x300, 0x6, 0x1}}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000800) r11 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000001740), 0x20000, 0x0) flock(r11, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r5, 0xc0189373, &(0x7f0000001780)={{0x1, 0x1, 0x18, r3, {0xffffffc1}}, './file0\x00'}) sendmsg$NL80211_CMD_CONNECT(r9, &(0x7f0000001880)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001840)={&(0x7f0000001800)={0x34, r0, 0x300, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x800, {0x7e8, 0x4, 0x6, 0x6}}}, @NL80211_ATTR_USE_RRM={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000) 21:55:14 executing program 5: ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, &(0x7f0000000000)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000240)={0xf482, 0x9, 0x3, 0x7, 0x4, 0x14a}) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000280), 0x40, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x6c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xe8}, {0x6, 0x11, 0x7}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040010) write$binfmt_aout(r0, &(0x7f0000000400)={{0x108, 0xc1, 0x80, 0x3b6, 0x1b4, 0x1ff, 0x96, 0x1}, "74292f1d6fa0017cb05a12dba1179adbd8e404f49d546d6adf413489d485d2189d2f94f1e49879dabadfec82fd4c0cf3c5254ee30e923c34c44b766f8c9363ab573cd3fe4e375a14f092fdbb59122677764cab441acb48bced0d7c43b6c0a3d65e9c9cb0b7766a0b7526ce8bfb42e85bf29baab2cea862bd8de076533718b8bd3ac5d2d4dd", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x9a5) openat$cgroup_devices(r0, &(0x7f0000000dc0)='devices.allow\x00', 0x2, 0x0) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, &(0x7f0000000e00)=0x4) r1 = fspick(r0, &(0x7f0000000e40)='./file0\x00', 0x1) fsmount(r1, 0x0, 0x1) ioctl$TCGETS(r0, 0x5401, &(0x7f0000000e80)) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000ec0)='posixacl\x00', 0x0, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000f00), 0x18680, 0x0) r3 = creat(&(0x7f0000000f40)='./file0\x00', 0xc8) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000fc0), r2) sendmsg$NL80211_CMD_GET_INTERFACE(r3, &(0x7f0000001080)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001040)={&(0x7f0000001000)={0x20, r4, 0x800, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xff, 0x61}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x4048081}, 0x8000) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000001380)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001340)={&(0x7f0000001100)={0x220, 0x0, 0x4, 0x70bd29, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x220}, 0x1, 0x0, 0x0, 0xc080}, 0x20004001) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001400)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in6}}, &(0x7f0000001500)=0xe8) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000001640)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001540)={0xb0, 0x0, 0x300, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x40}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x34}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}]}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0xb0}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) openat$vcs(0xffffffffffffff9c, &(0x7f0000001680), 0x203, 0x0) ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) [ 89.544606] audit: type=1400 audit(1756763714.023:7): avc: denied { execmem } for pid=272 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 21:55:14 executing program 6: fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)={0x0, 0xfb, 0x10c, 0x0, 0x3f, "ea5b97eedfefaae78fda5689425edbb1", "1d8d7b107cd095fea42bcd4c3badeacaadd7c6c86744d38aab7ee7cfe01e9ec146d49be694d64c2a1e0cfb8212068094fede711a01394b55ae4a20d7fa11639a479ce3df76544196bb02cfd02b0564e6f04563182734a0811813d45cdd5dad64d5e582c8878ae3be0b82829677ecd831f0dbe19dba548f0ee9b40f43c07d4297bcfc086a6d53babb538b5e6bbad79ded0f4b5571bc04c16d7085a4603d055032100a0a4879df857400fcd19ba139baba687ba326fb1e5562d48e7634bf72958b0b2bf1b23a51629024cd805967ac74e0ec743b6083b9e0a50a3e826b58dc7829a38e3930a364eeae19c1af997cf5ca78da1d1685515053"}, 0x10c, 0x2) r0 = syz_mount_image$msdos(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000500)=[{&(0x7f0000000200)="d0ea89a47a8e14ff696e9330640f8c978bd1ed75e6fc109dda08d4c2e90132e1bd744678050e5a2b32ef41b9ba014d0b687471f380868c4de602ec4e3be0b8d90f3df4a951d9454a1743f7cb40dc79d6a42d290539187452b83fbd", 0x5b, 0xf6}, {&(0x7f0000000280)="d74ce1774073d759fa0e466b3c170bc2229a289a49fd0b35db3bff474b448756abef2a6b704144056eb5a3c8b9c240e97c7d4bacdc54290d3db0ddd77c39f976cac5ef298cd9b0ed7e04b08ea0df21ecc41564a1bb713294bae0a3312219c4fd5d3bf065630d46bd8621494071d9297d7b0c617d82e112b1fb5d361970b87ad352fed0fc92698310d3cb7969d5b5c70d22c676606ea472cd01a5a0afed5246452117058e7873cd91bd4e32d58cc2977e80c137b05566d6", 0xb7, 0x157}, {&(0x7f0000000340)="845b1c29fc0e01722355da064320214c19064586c9dd21a965e8dce5befdb4515c38d044048f675eb8b04ed7b369c2f58d862f14c51abe94a8204d614fab11d419361313fe1358fa0f71f870dda0b339e952610c3e514874fc4792c1eb622c9a1cac8b34919aee15519041dd06475627d6f58e516087a71d96e9434ad1d5144559da", 0x82, 0x2}, {&(0x7f0000000400)="3bc09687bb7c0c42b2c75a7db4918a3859409c899330308492a739776d3afe28335ded75a5236918128e5372589b2e43260bade15ecdddb911b1b093eb1df9743cbb8d70b44b6ff4388ab7fae42737ceeaceccaa443d42e2380bec7ad0647f3bf60340111fc79f89c37a6e65e708f24108137a97001ae9d89eafdaf8f510ef7fe6905a0a3fd6cbff7a2694041a2487c374a887b43f0c9b74e443544325c2bf5762c2c0695d0627d3cc7c008cc1df2ea81381396058e450098cf09da7f57fcd203fac1e4ec4", 0xc5, 0xffff}], 0x2000000, &(0x7f0000000580)={[{@dots}, {@nodots}, {@nodots}, {@nodots}, {@fat=@nocase}, {@fat=@fmask={'fmask', 0x3d, 0x8e}}], [{@fsmagic}, {@uid_eq={'uid', 0x3d, 0xee01}}]}) ioctl$BTRFS_IOC_SYNC(r0, 0x9408, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000600)={'wg2\x00', @random}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x43, 0x0) lseek(r0, 0xff, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000680), 0x4000, 0x0) fcntl$notify(r2, 0x402, 0x20) fcntl$notify(r1, 0x402, 0x80000001) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000006c0)={{0x1, 0x1, 0x18, r1, {0x8001, 0x7fffffff}}, './file0\x00'}) recvmsg$unix(r3, &(0x7f0000000a40)={&(0x7f0000000700), 0x6e, &(0x7f0000000a00)=[{&(0x7f0000000780)=""/29, 0x1d}, {&(0x7f00000007c0)=""/125, 0x7d}, {&(0x7f0000000840)=""/238, 0xee}, {&(0x7f0000000940)=""/180, 0xb4}], 0x4}, 0x2) bind$bt_sco(r3, &(0x7f0000000a80)={0x1f, @none}, 0x8) ioctl$HCIINQUIRY(r3, 0x800448f0, &(0x7f0000000ac0)={0x0, 0x6, "d212d5", 0x1f, 0x1}) close_range(r0, r1, 0x0) getdents64(r1, &(0x7f0000000b00)=""/4096, 0x1000) r4 = accept4(r3, &(0x7f0000001b00)=@pppoe={0x18, 0x0, {0x0, @link_local}}, &(0x7f0000001b80)=0x80, 0x0) ioctl$HCIINQUIRY(r4, 0x800448f0, &(0x7f0000001bc0)={0xffffffffffffffff, 0x1, "2f70a1", 0x81, 0x4}) r5 = syz_open_dev$vcsu(&(0x7f0000001c00), 0x7, 0x40000) ioctl$HCIINQUIRY(r5, 0x800448f0, &(0x7f0000001c40)={0x3, 0x3f, "4b27c0", 0x9, 0xf0}) setsockopt$bt_hci_HCI_TIME_STAMP(r4, 0x0, 0x3, &(0x7f0000001c80)=0x2, 0x4) [ 90.733556] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 90.735862] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 90.738176] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 90.739649] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 90.743944] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 90.745331] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 90.749968] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 90.752600] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 90.756782] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 90.758245] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 90.792519] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 90.796814] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 90.802422] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 90.807262] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 90.810348] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 90.859539] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 90.861596] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 90.865202] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 90.869551] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 90.876463] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 90.881789] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 90.883519] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 90.890457] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 90.897767] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 90.906284] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 90.907909] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 90.909523] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 90.912873] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 90.918121] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 90.919458] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 90.924239] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 90.925217] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 90.925388] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 90.928175] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 90.933730] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 90.935699] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 90.938322] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 90.939590] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 90.943470] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 90.954566] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 92.823112] Bluetooth: hci1: command tx timeout [ 92.823673] Bluetooth: hci0: command tx timeout [ 92.886129] Bluetooth: hci2: command tx timeout [ 92.950802] Bluetooth: hci3: command tx timeout [ 93.014554] Bluetooth: hci6: command tx timeout [ 93.015074] Bluetooth: hci4: command tx timeout [ 93.015530] Bluetooth: hci5: command tx timeout [ 93.015969] Bluetooth: hci7: command tx timeout [ 94.869066] Bluetooth: hci0: command tx timeout [ 94.869501] Bluetooth: hci1: command tx timeout [ 94.933164] Bluetooth: hci2: command tx timeout [ 94.998334] Bluetooth: hci3: command tx timeout [ 95.061161] Bluetooth: hci7: command tx timeout [ 95.061553] Bluetooth: hci5: command tx timeout [ 95.061931] Bluetooth: hci4: command tx timeout [ 95.063079] Bluetooth: hci6: command tx timeout [ 96.918091] Bluetooth: hci1: command tx timeout [ 96.918535] Bluetooth: hci0: command tx timeout [ 96.983001] Bluetooth: hci2: command tx timeout [ 97.046052] Bluetooth: hci3: command tx timeout [ 97.111026] Bluetooth: hci4: command tx timeout [ 97.111416] Bluetooth: hci6: command tx timeout [ 97.111801] Bluetooth: hci5: command tx timeout [ 97.112231] Bluetooth: hci7: command tx timeout [ 98.966211] Bluetooth: hci1: command tx timeout [ 98.966657] Bluetooth: hci0: command tx timeout [ 99.030027] Bluetooth: hci2: command tx timeout [ 99.095004] Bluetooth: hci3: command tx timeout [ 99.158055] Bluetooth: hci7: command tx timeout [ 99.158450] Bluetooth: hci5: command tx timeout [ 99.158827] Bluetooth: hci6: command tx timeout [ 99.159910] Bluetooth: hci4: command tx timeout [ 128.629235] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.629900] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.754711] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.755373] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.818775] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.819902] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.893540] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.894165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.001853] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.002638] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.029037] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.029603] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.100890] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.101525] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.127524] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.128230] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.151645] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.152239] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 21:55:53 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) r1 = fcntl$dupfd(r0, 0x406, r0) connect$inet6(r1, &(0x7f00000005c0)={0xa, 0x4e24, 0xffff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfffffffc}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000880)=[{{&(0x7f0000000380)={0xa, 0x4e21, 0x40, @local}, 0x1c, &(0x7f0000000800)=[{&(0x7f00000003c0)="a1f92c6ca28b8ff0f8188a31b04b7d17a26b45ac78537196dd85b12e7bfd8c74702371dfda9a3365f10a121eda15ba2a49910339ca4b350b63c9de5fa5b7772d0ffe481c8fdbdd5792807c91bb8ddee1eef9f79dd8f6d6a1b42fe2edb6e79424570a20baea0e8e0e6307a2d488971883afe0e879032e97847a5013f23158019bd86cce03eef98b8494b6d53ef790b19d76d7086692200f98e55e143c46c7150b5fdac5cb6501a7a87cee969fffa47c75ca979dfc61aa0fadec0cb4dcc08062ab3d1687ab11884679e60e8f835fb7d8b29cb20781b212a1e97d", 0xd9}, {&(0x7f00000004c0)="e7a9c8c35d5b39f8467abffb0da7cb3b64575d208b672678ce7a87748f44eccc691ce65aaaf8677afc24b5bed77273b3d6ee194e092e47e62304a2bc98c9eb", 0x3f}, {&(0x7f0000000540)="1ff3f51c5b8170feb4191ec8010aa84cde5d04b36cfa09c1ecc5fc7052e0319c496001ea8b86832dc76b48556c61862d7d3289a2c6fa3026ae808e5eeac9cbcdb25faeaeb54e933d2c57c57bbeb17b35a72e2715646f766a809ead399ca871b1b9834562f549022299d44a9943db91f3f3ad737146d2b0f7aa", 0x79}, {&(0x7f0000000640)="8ed61c078d369d0b1e0c3dd1ed8ee1b26001da9da7b1da20a4a9fc6ff47ba3f5fe535dfe94c5b71666ac2df94ac3513adaa7a3247a258ee3b34bb6213850037a2e005bb4a9aea41f20748df723cf53cd21d07938d092c09ec78845d32ddb75fd36557fac05fa0dc91c750bdcf015f83ed7681881e0f28bae537eacd2c81138e00a4dab0050fc7943013ba98fdad305e98c86a376ab8427a03852be463c5fc8e48f091bcb2b1bb20685accfb6bbc79dc33514dabdead62590f571375efd69cd7abc644123071f2cb50f6985bf17a79918909a1548e454caf35a2da204d409dd77a93aaf08aa175198f43f0aaad072a9", 0xef}, {&(0x7f0000000780)="bd2bdc0214489bc094372efc9d28f9e893092003acbc8dd6ad8d4f3dafb2804963fae87c3095a8f7021473a1bdc39f17e86ec2ffbcfbda8fb88b7e588246ca87ea768243a6a09069dbc57ec413652c0b00a4c052925de6a14442a5cc06d9b925900d522085ac86b2959c8f082e680a67978e432f6d85", 0x76}, {&(0x7f00000005c0)}], 0x6}}], 0x1, 0x4000) setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000080)=0x3, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e20, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x38}}, 0x6}}, 0x0, 0x0, 0x3a, 0x0, "56a7b57114a342b2147bc7dde08839cfdc47de1dde7ea7e3f4ef230ee94a2bf7064d2a838225d0fc1c769d4f4bfdac2ad176fd3ab2c795691504a35aecce5c6aa2ebf13f05e308d112826ff638b12f8c"}, 0xd8) sendmmsg$inet6(r0, &(0x7f0000003040)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="db", 0x1}], 0x1}}], 0x1, 0x40) sendmmsg$inet6(r0, &(0x7f0000003dc0)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000340)='\'', 0x1}], 0x1}}], 0x1, 0x1) poll(&(0x7f00000000c0)=[{r0}], 0x1, 0x0) r2 = fcntl$dupfd(r0, 0x0, r0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x3f, @private1, 0xd39}, 0x1c) r3 = dup(r2) sendto$inet6(r3, &(0x7f0000000100)="28216ac1b21560881e6a3cc51ff2c79ec29aacd799d903ac09b1a2b15ad800dd10fd85ff944703d73fcd7e48cc02ec9e57e09ccfc0c9e43109f2d3fb7910bcbeffef49424bce0e31989fb3a44dcef3c763f9c3e2a59cc30a10af0a8a941f70d855f2d5f1836d6d0b44112e6a500d93395126c9fc416b4e4d8db21b79ef8e8a4347ad9dec3db44e920d758d84af937c4c17c30b31045b1632d5a45b7a08", 0x9d, 0x4, &(0x7f0000000300)={0xa, 0x4e20, 0xb43, @remote, 0x6}, 0x1c) [ 129.203775] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.204425] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 21:55:53 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', 0x0, 0x44) r1 = eventfd2(0x3, 0x80000) readv(r1, &(0x7f0000002540)=[{&(0x7f0000000080)=""/221, 0xdd}, {&(0x7f0000000180)=""/207, 0xcf}, {&(0x7f0000000280)=""/92, 0x5c}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/127, 0x7f}, {&(0x7f0000001380)=""/59, 0x3b}, {&(0x7f00000013c0)=""/115, 0x73}, {&(0x7f0000001440)=""/252, 0xfc}, {&(0x7f0000001540)=""/4096, 0x1000}], 0x9) open_by_handle_at(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="080000000100010002"], 0x0) [ 129.240861] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.241477] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 21:55:53 executing program 0: syz_emit_ethernet(0x2a, &(0x7f0000000140)={@multicast, @link_local, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @empty, @private, @random="645b467e8bd0", @rand_addr=0x7f000000}}}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) clock_gettime(0x0, &(0x7f0000004f40)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000004d40)=[{{&(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/59, 0x3b}], 0x1, &(0x7f0000000180)=""/199, 0xc7}}, {{&(0x7f0000000280)=@can, 0x80, &(0x7f0000000400)=[{&(0x7f0000000300)=""/243, 0xf3}], 0x1, &(0x7f0000000440)=""/216, 0xd8}, 0xffffffff}, {{&(0x7f0000000540)=@generic, 0x80, &(0x7f00000005c0), 0x0, &(0x7f0000000600)=""/195, 0xc3}, 0x800}, {{&(0x7f0000000700)=@generic, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000780)=""/155, 0x9b}, {&(0x7f0000000840)=""/31, 0x1f}, {&(0x7f0000000880)=""/95, 0x5f}, {&(0x7f0000000900)=""/141, 0x8d}, {&(0x7f00000009c0)=""/230, 0xe6}, {&(0x7f0000000ac0)=""/244, 0xf4}], 0x6, &(0x7f0000000c40)=""/219, 0xdb}, 0xfff}, {{&(0x7f0000000d40)=@l2tp, 0x80, &(0x7f0000001f00)=[{&(0x7f0000000dc0)=""/67, 0x43}, {&(0x7f0000000e40)=""/78, 0x4e}, {&(0x7f0000000ec0)=""/30, 0x1e}, {&(0x7f0000000f00)=""/4096, 0x1000}], 0x4, &(0x7f0000001f40)=""/82, 0x52}}, {{&(0x7f0000001fc0)=@nfc, 0x80, &(0x7f00000023c0)=[{&(0x7f0000002040)=""/250, 0xfa}, {&(0x7f0000002140)=""/233, 0xe9}, {&(0x7f0000002240)=""/250, 0xfa}, {&(0x7f0000002340)=""/71, 0x47}], 0x4}, 0x80000001}, {{&(0x7f0000002400)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000003680)=[{&(0x7f0000002480)=""/227, 0xe3}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000003580)=""/163, 0xa3}, {&(0x7f0000003640)=""/10, 0xa}], 0x4, &(0x7f00000036c0)=""/255, 0xff}, 0x645}, {{&(0x7f00000037c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x80, &(0x7f0000004c40)=[{&(0x7f0000003840)=""/11, 0xb}, {&(0x7f0000003880)=""/4096, 0x1000}, {&(0x7f0000004880)=""/122, 0x7a}, {&(0x7f0000004900)=""/51, 0x33}, {&(0x7f0000004940)=""/182, 0xb6}, {&(0x7f0000004a00)=""/97, 0x61}, {&(0x7f0000004a80)=""/28, 0x1c}, {&(0x7f0000004ac0)=""/24, 0x18}, {&(0x7f0000004b00)=""/106, 0x6a}, {&(0x7f0000004b80)=""/187, 0xbb}], 0xa, &(0x7f0000004d00)=""/23, 0x17}, 0x1}], 0x8, 0x12000, &(0x7f0000004f80)={r1, r2+60000000}) [ 129.280698] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.281304] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 21:55:53 executing program 0: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f00000001c0)={0x80000001, 0x8, 0x0, 'queue1\x00'}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000002c0)={0x2, &(0x7f0000000280)=[{0x4}, {0x6}]}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYRES32=0xee00, @ANYRES32, @ANYBLOB='./f@le0\x00']) openat$autofs(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) [ 129.326324] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.326911] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.338214] audit: type=1326 audit(1756763753.815:8): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=3879 comm="syz-executor.0" exe="/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f962c564b19 code=0x0 [ 129.357834] loop6: detected capacity change from 0 to 255 [ 129.358320] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.358363] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.361741] msdos: Unknown parameter 'fsmagic' [ 129.368211] loop6: detected capacity change from 0 to 255 [ 129.370147] msdos: Unknown parameter 'fsmagic' 21:55:53 executing program 6: newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setresuid(0x0, r0, 0x0) r1 = fork() fork() newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040), 0x0) chdir(&(0x7f0000000000)='./file0\x00') tkill(r1, 0x0) [ 129.449843] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.450643] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.505938] audit: type=1400 audit(1756763753.984:9): avc: denied { open } for pid=3887 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 21:55:54 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/cgroup', 0x0, 0x0) close(r1) io_uring_setup(0x2764, &(0x7f0000000080)) sendmmsg$unix(r0, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r1, @ANYBLOB="000000009a07a043ed778226186eaa7a6980a0b8170f3f5d9e0450cfecd16f798806cab8eda07ccd3fe58c10d544c97b737230832ef53931e29a107566ea55bbc90eaa5eabdf764dfbcd5779d2253c900edd5b6c040b3f1a41087ff89e1dd6e9755c58f00e9ffeda714be610db6146b04f14473cb4ea10041c47c33959136c63f4f7cfd6dafaab3cd7c66b21a6ccf2c7c4bddc661dae3f7348bb797fdc265c23271dfc33567816835f0f1b25591377733722"], 0x18}}], 0x2, 0x0) 21:55:54 executing program 6: creat(&(0x7f00000003c0)='./file0\x00', 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x2) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) preadv2(r2, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/220, 0xdc}], 0x1, 0x0, 0x0, 0xb) [ 129.558940] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.560171] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.566699] kmemleak: Found object by alias at 0x607f1a631c0c [ 129.566716] CPU: 0 UID: 0 PID: 65 Comm: kworker/u8:1 Tainted: G W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) [ 129.566735] Tainted: [W]=WARN [ 129.566739] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 129.566747] Workqueue: netns cleanup_net [ 129.566767] Call Trace: [ 129.566771] [ 129.566777] dump_stack_lvl+0xca/0x120 [ 129.566801] __lookup_object+0x94/0xb0 [ 129.566819] delete_object_full+0x27/0x70 [ 129.566837] free_percpu+0x30/0x1160 [ 129.566859] percpu_counter_destroy_many+0x188/0x2b0 [ 129.566878] ? __pfx_xfrm4_net_exit+0x10/0x10 [ 129.566897] ops_undo_list+0x2d5/0xa50 [ 129.566919] ? __pfx_ops_undo_list+0x10/0x10 [ 129.566938] ? lock_release+0xc8/0x290 [ 129.566952] ? idr_destroy+0x62/0x2c0 [ 129.566977] cleanup_net+0x38d/0x770 [ 129.566988] ? lock_acquire+0x15e/0x2f0 [ 129.567002] ? __pfx_cleanup_net+0x10/0x10 [ 129.567014] ? lock_release+0xc8/0x290 [ 129.567031] process_one_work+0x8e1/0x19c0 [ 129.567054] ? __pfx_process_one_work+0x10/0x10 [ 129.567068] ? move_linked_works+0x172/0x270 [ 129.567090] ? assign_work+0x196/0x240 [ 129.567106] worker_thread+0x67e/0xe90 [ 129.567121] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 129.567139] ? __pfx_worker_thread+0x10/0x10 [ 129.567154] kthread+0x3c8/0x740 [ 129.567169] ? __pfx_kthread+0x10/0x10 [ 129.567181] ? ret_from_fork+0x23/0x430 [ 129.567200] ? lock_release+0xc8/0x290 [ 129.567215] ? __pfx_kthread+0x10/0x10 [ 129.567228] ret_from_fork+0x34b/0x430 [ 129.567245] ? __pfx_kthread+0x10/0x10 [ 129.567258] ret_from_fork_asm+0x1a/0x30 [ 129.567283] [ 129.567287] kmemleak: Object (percpu) 0x607f1a631c08 (size 8): [ 129.567294] kmemleak: comm "syz-executor.5", pid 282, jiffies 4294796347 [ 129.567302] kmemleak: min_count = 1 [ 129.567306] kmemleak: count = 0 [ 129.567309] kmemleak: flags = 0x21 [ 129.567313] kmemleak: checksum = 0 [ 129.567317] kmemleak: backtrace: [ 129.567321] pcpu_alloc_noprof+0x87a/0x1170 [ 129.567337] blkcg_css_alloc+0x92/0x7e0 [ 129.567351] cgroup_apply_control_enable+0x446/0x9f0 [ 129.567366] cgroup_mkdir+0x86e/0x1110 [ 129.567379] kernfs_iop_mkdir+0x111/0x190 [ 129.567395] vfs_mkdir+0x59a/0x8d0 [ 129.567412] do_mkdirat+0x19f/0x3d0 [ 129.567423] __x64_sys_mkdir+0xf3/0x140 [ 129.567435] do_syscall_64+0xbf/0x360 [ 129.567445] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.625119] kmemleak: Cannot insert 0x607f1a631c0c into the object search tree (overlaps existing) [ 129.625138] CPU: 1 UID: 0 PID: 286 Comm: syz-executor.7 Tainted: G W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) [ 129.625156] Tainted: [W]=WARN [ 129.625160] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 129.625168] Call Trace: [ 129.625173] [ 129.625178] dump_stack_lvl+0xca/0x120 [ 129.625213] __link_object+0x190/0x210 [ 129.625232] __create_object+0x48/0x80 [ 129.625254] pcpu_alloc_noprof+0x87a/0x1170 [ 129.625283] __percpu_counter_init_many+0x44/0x360 [ 129.625303] fprop_local_init_percpu+0x2b/0xb0 [ 129.625322] wb_init+0x583/0x740 [ 129.625334] wb_get_create+0x225/0x1120 [ 129.625349] ? __inode_attach_wb+0x2c8/0xc70 [ 129.625365] ? lock_release+0xc8/0x290 [ 129.625383] __inode_attach_wb+0x2e2/0xc70 [ 129.625402] __mark_inode_dirty+0xae3/0xd00 [ 129.625419] ext4_mb_new_blocks+0x5f5/0x45b0 [ 129.625438] ? kasan_save_track+0x14/0x30 [ 129.625454] ? __kasan_kmalloc+0x7f/0x90 [ 129.625469] ? trace_kmalloc+0x1f/0xb0 [ 129.625484] ? __kmalloc_noprof+0x29d/0x6e0 [ 129.625502] ? ext4_find_extent+0x7f5/0xa00 [ 129.625518] ? __pfx_ext4_mb_new_blocks+0x10/0x10 [ 129.625532] ? ext4_ext_search_right+0x2e8/0xbd0 [ 129.625548] ? ext4_inode_to_goal_block+0x323/0x430 [ 129.625565] ext4_ext_map_blocks+0x1c4b/0x5f70 [ 129.625588] ? lock_acquire+0x15e/0x2f0 [ 129.625601] ? fs_reclaim_acquire+0xae/0x150 [ 129.625617] ? lock_is_held_type+0x9e/0x120 [ 129.625639] ? __pfx_ext4_ext_map_blocks+0x10/0x10 [ 129.625659] ? look_up_lock_class+0x56/0x150 [ 129.625678] ? lock_acquire+0x15e/0x2f0 [ 129.625691] ? ext4_map_blocks+0x55b/0x14a0 [ 129.625711] ? __pfx_down_write+0x10/0x10 [ 129.625723] ? ext4_es_lookup_extent+0xc8/0xb30 [ 129.625746] ext4_map_blocks+0x624/0x14a0 [ 129.625760] ? __up_read+0x197/0x750 [ 129.625776] ? __pfx_ext4_map_blocks+0x10/0x10 [ 129.625787] ? __pfx___up_read+0x10/0x10 [ 129.625803] ? lock_release+0xc8/0x290 [ 129.625820] ? ext4_map_blocks+0x1e0/0x14a0 [ 129.625835] ext4_getblk+0x682/0x8e0 [ 129.625848] ? __pfx_ext4_getblk+0x10/0x10 [ 129.625859] ? __pfx_security_inode_init_security+0x10/0x10 [ 129.625877] ? crc32c+0x1ae/0x350 [ 129.625893] ext4_bread+0x2e/0x1a0 [ 129.625906] ext4_append+0x224/0x530 [ 129.625922] ? __pfx_ext4_append+0x10/0x10 [ 129.625937] ? __pfx___ext4_new_inode+0x10/0x10 [ 129.625956] ext4_init_new_dir+0x13c/0x240 [ 129.625972] ? __pfx_ext4_init_new_dir+0x10/0x10 [ 129.625999] ext4_mkdir+0x3c5/0xb30 [ 129.626018] ? __pfx_ext4_mkdir+0x10/0x10 [ 129.626034] ? security_inode_permission+0x72/0xe0 [ 129.626056] vfs_mkdir+0x59a/0x8d0 [ 129.626078] do_mkdirat+0x19f/0x3d0 [ 129.626093] ? __pfx_do_mkdirat+0x10/0x10 [ 129.626111] __x64_sys_mkdir+0xf3/0x140 [ 129.626125] do_syscall_64+0xbf/0x360 [ 129.626138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.626152] RIP: 0033:0x7fae0d08dc27 [ 129.626161] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 129.626173] RSP: 002b:00007ffc3ada7588 EFLAGS: 00000206 ORIG_RAX: 0000000000000053 [ 129.626185] RAX: ffffffffffffffda RBX: 00007ffc3ada7610 RCX: 00007fae0d08dc27 [ 129.626193] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 00007ffc3ada7610 [ 129.626200] RBP: 0000000000000003 R08: 0000000000000000 R09: 0000000000000003 [ 129.626207] R10: 00007ffc3ada7327 R11: 0000000000000206 R12: 0000000000000003 [ 129.626215] R13: 00007fae0d16e140 R14: 00007fae0d16ee48 R15: 00007ffc3ada7650 [ 129.626232] [ 129.626539] kmemleak: Kernel memory leak detector disabled [ 129.626543] kmemleak: Object (percpu) 0x607f1a631c08 (size 8): [ 129.626550] kmemleak: comm "syz-executor.5", pid 282, jiffies 4294796347 [ 129.626558] kmemleak: min_count = 1 [ 129.626562] kmemleak: count = 0 [ 129.626565] kmemleak: flags = 0x21 [ 129.626569] kmemleak: checksum = 0 [ 129.626573] kmemleak: backtrace: [ 129.626577] pcpu_alloc_noprof+0x87a/0x1170 [ 129.626593] blkcg_css_alloc+0x92/0x7e0 [ 129.626606] cgroup_apply_control_enable+0x446/0x9f0 [ 129.626621] cgroup_mkdir+0x86e/0x1110 [ 129.626634] kernfs_iop_mkdir+0x111/0x190 [ 129.626650] vfs_mkdir+0x59a/0x8d0 [ 129.626665] do_mkdirat+0x19f/0x3d0 [ 129.626676] __x64_sys_mkdir+0xf3/0x140 [ 129.626687] do_syscall_64+0xbf/0x360 [ 129.626697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.642371] kmemleak: Found object by alias at 0x607f1a631c0c [ 129.642389] CPU: 0 UID: 0 PID: 3889 Comm: syz-executor.2 Tainted: G W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) [ 129.642408] Tainted: [W]=WARN [ 129.642412] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 129.642419] Call Trace: [ 129.642423] [ 129.642428] dump_stack_lvl+0xca/0x120 [ 129.642454] __lookup_object+0x94/0xb0 [ 129.642472] delete_object_full+0x27/0x70 [ 129.642489] free_percpu+0x30/0x1160 [ 129.642507] ? arch_uprobe_clear_state+0x16/0x140 [ 129.642529] futex_hash_free+0x38/0xc0 [ 129.642545] mmput+0x2d3/0x390 [ 129.642571] copy_process+0x273d/0x73c0 [ 129.642583] ? lock_release+0xc8/0x290 [ 129.642606] ? __pfx_copy_process+0x10/0x10 [ 129.642620] ? __might_fault+0xe0/0x190 [ 129.642638] ? _copy_from_user+0x5b/0xd0 [ 129.642658] kernel_clone+0xea/0x7f0 [ 129.642673] ? __pfx_kernel_clone+0x10/0x10 [ 129.642691] ? __pfx_futex_wake+0x10/0x10 [ 129.642711] __do_sys_clone3+0x1f5/0x280 [ 129.642724] ? __pfx___do_sys_clone3+0x10/0x10 [ 129.642745] ? __pfx___schedule+0x10/0x10 [ 129.642765] ? __x64_sys_futex+0x1c9/0x4d0 [ 129.642778] ? __x64_sys_futex+0x1d2/0x4d0 [ 129.642793] ? __x64_sys_openat+0x142/0x200 [ 129.642812] ? __pfx___x64_sys_futex+0x10/0x10 [ 129.642827] ? xfd_validate_state+0x55/0x180 [ 129.642851] do_syscall_64+0xbf/0x360 [ 129.642865] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.642878] RIP: 0033:0x7f8c6ede6b19 [ 129.642888] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 129.642900] RSP: 002b:00007f8c6c35c188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 129.642913] RAX: ffffffffffffffda RBX: 00007f8c6eef9f60 RCX: 00007f8c6ede6b19 [ 129.642921] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000400 [ 129.642929] RBP: 00007f8c6ee40f6d R08: 0000000000000000 R09: 0000000000000000 [ 129.642937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 129.642945] R13: 00007ffeccdd361f R14: 00007f8c6c35c300 R15: 0000000000022000 [ 129.642961] [ 129.642965] kmemleak: Object (percpu) 0x607f1a631c08 (size 8): [ 129.642972] kmemleak: comm "syz-executor.5", pid 282, jiffies 4294796347 [ 129.642980] kmemleak: min_count = 1 [ 129.642984] kmemleak: count = 0 [ 129.642988] kmemleak: flags = 0x21 [ 129.642992] kmemleak: checksum = 0 [ 129.642996] kmemleak: backtrace: [ 129.643000] pcpu_alloc_noprof+0x87a/0x1170 [ 129.643016] blkcg_css_alloc+0x92/0x7e0 [ 129.643031] cgroup_apply_control_enable+0x446/0x9f0 [ 129.643044] cgroup_mkdir+0x86e/0x1110 [ 129.643057] kernfs_iop_mkdir+0x111/0x190 [ 129.643074] vfs_mkdir+0x59a/0x8d0 [ 129.643091] do_mkdirat+0x19f/0x3d0 [ 129.643102] __x64_sys_mkdir+0xf3/0x140 [ 129.643113] do_syscall_64+0xbf/0x360 [ 129.643124] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.734128] loop7: detected capacity change from 0 to 173 [ 129.735620] tmpfs: Unsupported parameter 'huge' 21:55:54 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/cgroup', 0x0, 0x0) close(r1) io_uring_setup(0x2764, &(0x7f0000000080)) sendmmsg$unix(r0, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r1, @ANYBLOB="000000009a07a043ed778226186eaa7a6980a0b8170f3f5d9e0450cfecd16f798806cab8eda07ccd3fe58c10d544c97b737230832ef53931e29a107566ea55bbc90eaa5eabdf764dfbcd5779d2253c900edd5b6c040b3f1a41087ff89e1dd6e9755c58f00e9ffeda714be610db6146b04f14473cb4ea10041c47c33959136c63f4f7cfd6dafaab3cd7c66b21a6ccf2c7c4bddc661dae3f7348bb797fdc265c23271dfc33567816835f0f1b25591377733722"], 0x18}}], 0x2, 0x0) [ 129.757617] loop1: detected capacity change from 0 to 264192 [ 129.775129] loop1: detected capacity change from 0 to 264192 [ 130.166127] audit: type=1326 audit(1756763754.644:10): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=3879 comm="syz-executor.0" exe="/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f962c564b19 code=0x0 [ 130.182704] kmemleak: Automatic memory scanning thread ended 21:55:54 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001ec0), 0x410480, 0x0) r1 = io_uring_setup(0x6aff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x10000}) close_range(r1, 0xffffffffffffffff, 0x0) pread64(r0, &(0x7f0000000000)=""/30, 0xffffff18, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) dup3(r3, r1, 0x80000) r4 = getpid() r5 = gettid() kcmp(r4, r5, 0x0, 0xffffffffffffffff, r2) kcmp(0x0, r4, 0x2, r0, r0) 21:55:54 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/cgroup', 0x0, 0x0) close(r1) io_uring_setup(0x2764, &(0x7f0000000080)) sendmmsg$unix(r0, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r1, @ANYBLOB="000000009a07a043ed778226186eaa7a6980a0b8170f3f5d9e0450cfecd16f798806cab8eda07ccd3fe58c10d544c97b737230832ef53931e29a107566ea55bbc90eaa5eabdf764dfbcd5779d2253c900edd5b6c040b3f1a41087ff89e1dd6e9755c58f00e9ffeda714be610db6146b04f14473cb4ea10041c47c33959136c63f4f7cfd6dafaab3cd7c66b21a6ccf2c7c4bddc661dae3f7348bb797fdc265c23271dfc33567816835f0f1b25591377733722"], 0x18}}], 0x2, 0x0) 21:55:54 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect(r0, &(0x7f00000001c0)=@in={0x2, 0x0, @remote}, 0x80) syz_emit_ethernet(0x3e, &(0x7f0000000240)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb0800450000300000000000019078ac1414bbac1414aa05009078000000004500002100000000000000007f000001e0000001"], 0x0) recvmsg(r0, &(0x7f0000000440)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000080)=""/233, 0xe9}, {&(0x7f0000000280)=""/103, 0x67}, {&(0x7f0000000180)=""/14, 0xe}, {&(0x7f0000000300)=""/92, 0x5c}], 0x4, &(0x7f00000003c0)=""/112, 0x70}, 0x40000100) 21:55:54 executing program 6: r0 = semget$private(0x0, 0x4, 0x0) semctl$SEM_STAT(r0, 0x0, 0x12, &(0x7f0000001500)=""/234) semtimedop(r0, &(0x7f0000000300)=[{0x2, 0x2, 0x1000}], 0x1, &(0x7f0000000440)={0x0, 0x3938700}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, &(0x7f0000000080)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/meminfo\x00', 0x0, 0x0) r2 = syz_open_dev$rtc(&(0x7f0000000800), 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') r4 = perf_event_open(&(0x7f00000003c0)={0x3, 0x80, 0x2, 0x5, 0x0, 0x6, 0x0, 0x401, 0x8000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x20, 0x1, @perf_config_ext={0x1, 0x3}, 0x2000, 0x28, 0x8001, 0x5703bfad7a39a574, 0x8ee000000000, 0x0, 0x2039, 0x0, 0x7b, 0x0, 0x49f}, 0x0, 0xc, r1, 0x9) r5 = getpid() r6 = gettid() kcmp(r5, r6, 0x0, 0xffffffffffffffff, r3) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') r8 = getpid() r9 = gettid() kcmp(r8, r9, 0x0, 0xffffffffffffffff, r7) io_submit(0x0, 0x1, &(0x7f0000000500)=[&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x5, 0x1000, r4, &(0x7f0000000480)="33a74350191f4fff4471b6", 0xb, 0xfffffffffffffffc, 0x0, 0x3, r7}]) signalfd(r3, &(0x7f00000002c0)={[0x2c2a4c68]}, 0x8) syz_open_procfs(r5, &(0x7f0000000540)='net/netfilter\x00') ioctl$RTC_SET_TIME(r2, 0x8008700b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x9}) 21:55:54 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') r2 = getpid() r3 = gettid() kcmp(r2, r3, 0x0, 0xffffffffffffffff, r1) close_range(r0, r1, 0x2) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FICLONERANGE(r4, 0x4020940d, &(0x7f0000000040)={{r0}}) 21:55:54 executing program 3: sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x280, 0x0, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x9}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x5}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x2}, @ETHTOOL_A_LINKMODES_OURS={0xd4, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x24, 0x5, "bde8e85cafa078300db5fde720d810be8f98681f7f88c6e2b30756b28b09f2ca"}, @ETHTOOL_A_BITSET_MASK={0xaa, 0x5, "0ccba8e86b9879ae725d9e7e011e3f2a708f94df7c9c2f3cc706401969a22199128ec2f17793396bdb03540fbe5796f236b232a1115278c00033059aabdb5f33070926560fbd29c903151b8fe6b807fcfc29972c0551ebe4a6dc89202320d053d85bd97e256e76f506618da5a55cb659895186ecd6c28c2341ad3860cdf3f7ef93463e14442f0c7ea36c35ddebe92beb879695694c934149f504e2f80394b481d5ee467d9850"}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5}, @ETHTOOL_A_LINKMODES_OURS={0x170, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6}, @ETHTOOL_A_BITSET_BITS={0x78, 0x3, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '\x18}_-/.\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '!%\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '{/$\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\xd7\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\xd7\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffff7}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_VALUE={0xe1, 0x4, "db69b60b1983729edf1b9e9127211db6576c658840fef923e5cab0c75f6e6739f4515cb9065d6473fa6921423f53b1fe6918ad5567cc1f9d74a5a292b8d89f98e415dedbea282aa7fa86676e8f7e1009edb923b5e61ac7ac420bdab820ec4379a1e07428f890be7df302f20a5604f2dbf9ccdaf5e9d4d8a4da6c6f1861b855791eb3c226b2dc9ce8381e4ef7ae843dcf1f2bc3cfaa26baac521747249d77142251c2d0508fb1e345101905a271d5a27c5658494b9641ec1f6e68ec2eb62fe7f1eff0de92604b76311c770ab04a06b2b200a616dfb4406c842f01f42e2a"}]}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0xff}]}, 0x280}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r0 = perf_event_open$cgroup(&(0x7f0000003400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') r2 = getpid() gettid() r3 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') r4 = getpid() r5 = gettid() kcmp(r4, r5, 0x0, 0xffffffffffffffff, r3) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') r7 = getpid() r8 = gettid() kcmp(r7, r8, 0x0, 0xffffffffffffffff, r6) openat$rtc(0xffffffffffffff9c, &(0x7f0000000500), 0x101000, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') r10 = getpid() r11 = gettid() kcmp(r10, r11, 0x0, 0xffffffffffffffff, r9) kcmp(r2, r10, 0x0, r3, r0) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xf8, 0x12, 0x8, 0x70bd28, 0x25dfdbfb, {0x10, 0x0, 0x1f, 0x8c, {0x4e24, 0x4, [0x4, 0xe8, 0xbf7, 0x7], [0x1, 0x400, 0x89, 0x729], 0x0, [0xfffffffa, 0x4]}, 0x6, 0x2}, [@INET_DIAG_REQ_BYTECODE={0xab, 0x1, "8cab4c0d24597dcdcf5b86e68cf80ade95911a8610ae0d4680490ddda8e08937251605f04cb1999b52192eb860061fb14adb9e101d521f663cff5b4f46f0ce3c980258fe79fef46e03955d6bf9391526849f1bb2b3e52a47885e71efd8e5148caddb836eabc0349bc87210d8410f677819cd12015680128d8db3a1fe9760ed0eb765aa7646f943ab43e3d5466cdfc0bb0d1c8df91580e322b199499bf7ba94ff19b21aec983962"}]}, 0xf8}, 0x1, 0x0, 0x0, 0x4000010}, 0x100) 21:55:54 executing program 5: r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000002, 0x10010, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000000), 0xfffffffffffffff8, 0x800) syz_io_uring_submit(r0, 0x0, &(0x7f0000001340)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4007, @fd=r1, 0x97d, &(0x7f00000012c0)=[{&(0x7f0000000040)=""/238, 0xee}, {&(0x7f0000000140)=""/217, 0xd9}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/48, 0x30}, {&(0x7f0000001280)=""/24, 0x18}], 0x5, 0xa}, 0x9) r2 = syz_io_uring_setup(0x575b, &(0x7f0000001380)={0x0, 0xa55b, 0x9, 0x2, 0x352}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000001400)=0x0, &(0x7f0000001440)=0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r3, 0x118, &(0x7f0000001480), 0x0, 0x4) syz_io_uring_submit(r0, r4, &(0x7f00000014c0)=@IORING_OP_NOP={0x0, 0xcf97aecef238bdf8}, 0x5) r5 = syz_io_uring_setup(0x594b, &(0x7f0000001500)={0x0, 0x59ac, 0x0, 0x3, 0x24c, 0x0, r2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001580)=0x0, &(0x7f00000015c0)) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000008, 0x4010, r2, 0x10000000) syz_io_uring_submit(r6, r7, &(0x7f0000001600)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0x2}, 0x401) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000001640)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) open_tree(r8, &(0x7f0000001680)='./file0\x00', 0x84800) r9 = accept4$packet(r8, &(0x7f00000016c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001700)=0x14, 0x0) close_range(r5, r9, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, &(0x7f0000001c00)={{{@in=@empty, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@private2}}, &(0x7f0000001d00)=0xe8) getresuid(&(0x7f0000001d80)=0x0, &(0x7f0000001dc0), &(0x7f0000001e00)) syz_mount_image$tmpfs(&(0x7f0000001740), &(0x7f0000001780)='./file0\x00', 0x5, 0x5, &(0x7f0000001b00)=[{&(0x7f00000017c0)="f91eb5e510f03b8ebbca6cf0762f3781ebbcaaf09a07bfaf2622f35687c864f3ac32f9af2f6da4f1f4600a25a4de8a0ae1d66dca0324ff53b0daa5fb63407d9e3b4afacb502fa6fba072eff0a481d32da08e35", 0x53, 0x3ff}, {&(0x7f0000001840)="87444baa44019720a20760121e1adfa2bef45ea5fe83dc66a2aa6c37e3615476febe8af7d89caa113752b8d72b92539e09daa0d758dee21ebfe9c6409562df11ac6eed5c0abe94214146554d21c096cecc608236db23afe85f50474f53623962591a1514496adfa64d403575f71e44828bde32e2d56811ed19868526904ac272af795529be6781f51a16342b893ca3954216a7b0c5bb4c", 0x97, 0x8}, {&(0x7f0000001900)="a586496bfb6a30078610d489ce039845bb94cf79524bb7b65f35ee461c59fe1fa56f2076d71bc8a5b44e1ea0d293b32ff03328d2", 0x34, 0xadc8}, {&(0x7f0000001940)="d194a903f7005d0ebf7104281f57c8167d6d8b7680fb1278186de8996fdb3e9210f5f796a7e8f3a12e965257cc08209427c5ad883aa504d3ad31fc45ec63c2e9fe0876e4de68a5a91064def61a5e5680577bd064ed4ee8e3bb6ecd7552ecd035c95f1295bf23f32d70e30bcf215a5c23baedc446889cc981fa3abdd6fa911b90c4f179afbe4b73f5761d6f6a5a8dafba8e4be5ad5a03bf8e1866018fffd92b6dfea435db377e87442ed5a9268e2a0c673031f3974a033a480bc241ea9e651295179a2deedc9a35bfa10a657197da02540a07872311c87e18fa2090169b95a5e40bd413fd3ed5a10140b8af71aa338e7d3306224c6e", 0xf5, 0x4}, {&(0x7f0000001a40)="d8b9de70a859d441d0bfe2e69d0fe3ca308b3d0deec51ed16b9bb9c12d97a998c8cfb0ed30530ff775d3f4302efd7ed9d4fe9609fe016c27cd28d4af4b1e315a177c2f43887e4d76ec2e5237cd5c6169eadd5723f423ad556ee84a7c16da6802f66e0e312652df10e28b8932de87bffc1c4e8d4325b9049469edc48263a2fd9707e7456adf5275089133e0cb191adcc5370db0366f67af6e0d634af6d1dcc01ad69271110e0549a43851db5c392a9e5447d705bdc19dae0f", 0xb8, 0x7ff}], 0x0, &(0x7f0000001e40)={[{@huge_within_size}, {@nr_inodes={'nr_inodes', 0x3d, [0x30, 0x70]}}, {@uid={'uid', 0x3d, r10}}, {@mode={'mode', 0x3d, 0x7}}], [{@measure}, {@fsuuid={'fsuuid', 0x3d, {[0x30, 0x32, 0x36, 0x39, 0x62, 0x0, 0x35, 0x32], 0x2d, [0x34, 0x62, 0x65], 0x2d, [0x61, 0x64, 0x63, 0x61], 0x2d, [0x35, 0x38, 0x34, 0x30], 0x2d, [0x65, 0x63, 0x9, 0x61, 0x37, 0x30, 0x37, 0x62]}}}, {@uid_eq={'uid', 0x3d, r11}}, {@smackfsfloor={'smackfsfloor', 0x3d, '-])\xde}'}}]}) r12 = socket$inet_tcp(0x2, 0x1, 0x0) pread64(r12, &(0x7f0000001f00)=""/4096, 0x1000, 0xffff) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r8, 0x7, &(0x7f0000002f00)=r8, 0x1) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000002f80)={{0x1, 0x1, 0x18, r8, {0x72}}, './file0\x00'}) 21:55:54 executing program 7: r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000002, 0x10010, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000000), 0xfffffffffffffff8, 0x800) syz_io_uring_submit(r0, 0x0, &(0x7f0000001340)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4007, @fd=r1, 0x97d, &(0x7f00000012c0)=[{&(0x7f0000000040)=""/238, 0xee}, {&(0x7f0000000140)=""/217, 0xd9}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/48, 0x30}, {&(0x7f0000001280)=""/24, 0x18}], 0x5, 0xa}, 0x9) r2 = syz_io_uring_setup(0x575b, &(0x7f0000001380)={0x0, 0xa55b, 0x9, 0x2, 0x352}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000001400)=0x0, &(0x7f0000001440)=0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r3, 0x118, &(0x7f0000001480), 0x0, 0x4) syz_io_uring_submit(r0, r4, &(0x7f00000014c0)=@IORING_OP_NOP={0x0, 0xcf97aecef238bdf8}, 0x5) r5 = syz_io_uring_setup(0x594b, &(0x7f0000001500)={0x0, 0x59ac, 0x0, 0x3, 0x24c, 0x0, r2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001580)=0x0, &(0x7f00000015c0)) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000008, 0x4010, r2, 0x10000000) syz_io_uring_submit(r6, r7, &(0x7f0000001600)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0x2}, 0x401) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000001640)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) open_tree(r8, &(0x7f0000001680)='./file0\x00', 0x84800) r9 = accept4$packet(r8, &(0x7f00000016c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001700)=0x14, 0x0) close_range(r5, r9, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, &(0x7f0000001c00)={{{@in=@empty, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@private2}}, &(0x7f0000001d00)=0xe8) getresuid(&(0x7f0000001d80)=0x0, &(0x7f0000001dc0), &(0x7f0000001e00)) syz_mount_image$tmpfs(&(0x7f0000001740), &(0x7f0000001780)='./file0\x00', 0x5, 0x5, &(0x7f0000001b00)=[{&(0x7f00000017c0)="f91eb5e510f03b8ebbca6cf0762f3781ebbcaaf09a07bfaf2622f35687c864f3ac32f9af2f6da4f1f4600a25a4de8a0ae1d66dca0324ff53b0daa5fb63407d9e3b4afacb502fa6fba072eff0a481d32da08e35", 0x53, 0x3ff}, {&(0x7f0000001840)="87444baa44019720a20760121e1adfa2bef45ea5fe83dc66a2aa6c37e3615476febe8af7d89caa113752b8d72b92539e09daa0d758dee21ebfe9c6409562df11ac6eed5c0abe94214146554d21c096cecc608236db23afe85f50474f53623962591a1514496adfa64d403575f71e44828bde32e2d56811ed19868526904ac272af795529be6781f51a16342b893ca3954216a7b0c5bb4c", 0x97, 0x8}, {&(0x7f0000001900)="a586496bfb6a30078610d489ce039845bb94cf79524bb7b65f35ee461c59fe1fa56f2076d71bc8a5b44e1ea0d293b32ff03328d2", 0x34, 0xadc8}, {&(0x7f0000001940)="d194a903f7005d0ebf7104281f57c8167d6d8b7680fb1278186de8996fdb3e9210f5f796a7e8f3a12e965257cc08209427c5ad883aa504d3ad31fc45ec63c2e9fe0876e4de68a5a91064def61a5e5680577bd064ed4ee8e3bb6ecd7552ecd035c95f1295bf23f32d70e30bcf215a5c23baedc446889cc981fa3abdd6fa911b90c4f179afbe4b73f5761d6f6a5a8dafba8e4be5ad5a03bf8e1866018fffd92b6dfea435db377e87442ed5a9268e2a0c673031f3974a033a480bc241ea9e651295179a2deedc9a35bfa10a657197da02540a07872311c87e18fa2090169b95a5e40bd413fd3ed5a10140b8af71aa338e7d3306224c6e", 0xf5, 0x4}, {&(0x7f0000001a40)="d8b9de70a859d441d0bfe2e69d0fe3ca308b3d0deec51ed16b9bb9c12d97a998c8cfb0ed30530ff775d3f4302efd7ed9d4fe9609fe016c27cd28d4af4b1e315a177c2f43887e4d76ec2e5237cd5c6169eadd5723f423ad556ee84a7c16da6802f66e0e312652df10e28b8932de87bffc1c4e8d4325b9049469edc48263a2fd9707e7456adf5275089133e0cb191adcc5370db0366f67af6e0d634af6d1dcc01ad69271110e0549a43851db5c392a9e5447d705bdc19dae0f", 0xb8, 0x7ff}], 0x0, &(0x7f0000001e40)={[{@huge_within_size}, {@nr_inodes={'nr_inodes', 0x3d, [0x30, 0x70]}}, {@uid={'uid', 0x3d, r10}}, {@mode={'mode', 0x3d, 0x7}}], [{@measure}, {@fsuuid={'fsuuid', 0x3d, {[0x30, 0x32, 0x36, 0x39, 0x62, 0x0, 0x35, 0x32], 0x2d, [0x34, 0x62, 0x65], 0x2d, [0x61, 0x64, 0x63, 0x61], 0x2d, [0x35, 0x38, 0x34, 0x30], 0x2d, [0x65, 0x63, 0x9, 0x61, 0x37, 0x30, 0x37, 0x62]}}}, {@uid_eq={'uid', 0x3d, r11}}, {@smackfsfloor={'smackfsfloor', 0x3d, '-])\xde}'}}]}) r12 = socket$inet_tcp(0x2, 0x1, 0x0) pread64(r12, &(0x7f0000001f00)=""/4096, 0x1000, 0xffff) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r8, 0x7, &(0x7f0000002f00)=r8, 0x1) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000002f80)={{0x1, 0x1, 0x18, r8, {0x72}}, './file0\x00'}) [ 130.230046] audit: type=1400 audit(1756763754.703:11): avc: denied { kernel } for pid=3956 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 21:55:54 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/cgroup', 0x0, 0x0) close(r1) io_uring_setup(0x2764, &(0x7f0000000080)) sendmmsg$unix(r0, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r1, @ANYBLOB="000000009a07a043ed778226186eaa7a6980a0b8170f3f5d9e0450cfecd16f798806cab8eda07ccd3fe58c10d544c97b737230832ef53931e29a107566ea55bbc90eaa5eabdf764dfbcd5779d2253c900edd5b6c040b3f1a41087ff89e1dd6e9755c58f00e9ffeda714be610db6146b04f14473cb4ea10041c47c33959136c63f4f7cfd6dafaab3cd7c66b21a6ccf2c7c4bddc661dae3f7348bb797fdc265c23271dfc33567816835f0f1b25591377733722"], 0x18}}], 0x2, 0x0) 21:55:54 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') r1 = getpid() syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/time\x00') r2 = gettid() kcmp(r1, r2, 0x0, 0xffffffffffffffff, r0) openat$cgroup_pressure(r0, &(0x7f0000000000)='memory.pressure\x00', 0x2, 0x0) [ 130.260811] loop5: detected capacity change from 0 to 173 [ 130.269188] tmpfs: Unsupported parameter 'huge' [ 130.282485] loop7: detected capacity change from 0 to 173 [ 130.289267] tmpfs: Unsupported parameter 'huge' SYZFAIL: failed to write(kmemleak, "scan") (errno 1: Operation not permitted) BUG: leak checking failed VM DIAGNOSIS: 21:55:55 Registers: info registers vcpu 0 RAX=0000000000020000 RBX=ffff888015311b80 RCX=0000000000000000 RDX=0000000000020005 RSI=0000000000000000 RDI=ffffffff85c1c760 RBP=ffff8880153125d8 RSP=ffff888018cef7f0 R8 =0000000000000000 R9 =0000000000000005 R10=0000000000000001 R11=0000000000000000 R12=ffff8880153125d8 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff8151bacc RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f40d40c28c0 00000000 00000000 GS =0000 ffff8880e55d8000 00000000 00000000 LDT=0000 fffffe1900000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fffca51bff8 CR3=000000000b5ce000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=000000000000002f002f2e2e2f002e2e XMM01=0000000000000000696c61766e49002f XMM02=ffffffffffffff0f0e0d0c0b0a090807 XMM03=30706f6f6c2f6b636f6c622f6c617574 XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00005604e45f84e000005604e45baa70 XMM06=00005604e45e41600000000000000000 XMM07=00000000000000000000000000000000 XMM08=2f63697361622f6372732f2e2e000d0a XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=0000000000000000 RCX=ffff88800974781c RDX=1ffff110012e5760 RSI=ffffffff85c1c760 RDI=ffff88800972bb00 RBP=ffff88800972b700 RSP=ffff888009747828 R8 =ffffffff8682b202 R9 =ffff888009747908 R10=000000000003bea3 R11=0000000000012bb3 R12=ffff88800972b700 R13=ffff888009747910 R14=ffff888009747a00 R15=ffff8880097478c8 RIP=ffffffff815beb52 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e56d8000 00000000 00000000 LDT=0000 fffffe2400000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055556217ac58 CR3=000000000dc0e000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=061b477f102e189ff133d63fea22f576 XMM02=ea6e7db8388bc55d372e85dbd530472e XMM03=8de3f3e450cda3f3fbe91d8dcb8c7337 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=0d0c0f0e09080b0a0504070601000302 XMM07=0e0d0c0f0a09080b0605040702010003 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000