Warning: Permanently added '[localhost]:24550' (ECDSA) to the list of known hosts. 2025/08/30 01:29:56 fuzzer started 2025/08/30 01:29:57 dialing manager at localhost:43077 syzkaller login: [ 59.705968] cgroup: Unknown subsys name 'net' [ 59.788605] cgroup: Unknown subsys name 'cpuset' [ 59.809257] cgroup: Unknown subsys name 'rlimit' 2025/08/30 01:30:07 syscalls: 2214 2025/08/30 01:30:07 code coverage: enabled 2025/08/30 01:30:07 comparison tracing: enabled 2025/08/30 01:30:07 extra coverage: enabled 2025/08/30 01:30:07 setuid sandbox: enabled 2025/08/30 01:30:07 namespace sandbox: enabled 2025/08/30 01:30:07 Android sandbox: enabled 2025/08/30 01:30:07 fault injection: enabled 2025/08/30 01:30:07 leak checking: enabled 2025/08/30 01:30:07 net packet injection: enabled 2025/08/30 01:30:07 net device setup: enabled 2025/08/30 01:30:07 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/08/30 01:30:07 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/08/30 01:30:07 USB emulation: enabled 2025/08/30 01:30:07 hci packet injection: enabled 2025/08/30 01:30:07 wifi device emulation: enabled 2025/08/30 01:30:07 802.15.4 emulation: enabled 2025/08/30 01:30:07 fetching corpus: 50, signal 16690/18533 (executing program) 2025/08/30 01:30:07 fetching corpus: 100, signal 31816/35216 (executing program) 2025/08/30 01:30:07 fetching corpus: 150, signal 37025/41965 (executing program) 2025/08/30 01:30:07 fetching corpus: 200, signal 42756/49103 (executing program) 2025/08/30 01:30:07 fetching corpus: 250, signal 49864/57499 (executing program) 2025/08/30 01:30:08 fetching corpus: 300, signal 54045/62969 (executing program) 2025/08/30 01:30:08 fetching corpus: 350, signal 58814/68899 (executing program) 2025/08/30 01:30:08 fetching corpus: 400, signal 62578/73821 (executing program) 2025/08/30 01:30:08 fetching corpus: 450, signal 67119/79367 (executing program) 2025/08/30 01:30:08 fetching corpus: 500, signal 70576/83913 (executing program) 2025/08/30 01:30:08 fetching corpus: 550, signal 73625/87957 (executing program) 2025/08/30 01:30:08 fetching corpus: 600, signal 76474/91858 (executing program) 2025/08/30 01:30:08 fetching corpus: 650, signal 79576/95865 (executing program) 2025/08/30 01:30:08 fetching corpus: 700, signal 83269/100295 (executing program) 2025/08/30 01:30:08 fetching corpus: 750, signal 85771/103631 (executing program) 2025/08/30 01:30:08 fetching corpus: 800, signal 88663/107270 (executing program) 2025/08/30 01:30:09 fetching corpus: 850, signal 90942/110310 (executing program) 2025/08/30 01:30:09 fetching corpus: 900, signal 92944/113066 (executing program) 2025/08/30 01:30:09 fetching corpus: 950, signal 94855/115720 (executing program) 2025/08/30 01:30:09 fetching corpus: 1000, signal 96975/118552 (executing program) 2025/08/30 01:30:09 fetching corpus: 1050, signal 98448/120770 (executing program) 2025/08/30 01:30:09 fetching corpus: 1100, signal 99876/122948 (executing program) 2025/08/30 01:30:09 fetching corpus: 1150, signal 100988/124885 (executing program) 2025/08/30 01:30:09 fetching corpus: 1200, signal 102985/127489 (executing program) 2025/08/30 01:30:09 fetching corpus: 1250, signal 104249/129521 (executing program) 2025/08/30 01:30:09 fetching corpus: 1300, signal 105244/131264 (executing program) 2025/08/30 01:30:10 fetching corpus: 1350, signal 106162/132972 (executing program) 2025/08/30 01:30:10 fetching corpus: 1400, signal 107126/134666 (executing program) 2025/08/30 01:30:10 fetching corpus: 1450, signal 108254/136500 (executing program) 2025/08/30 01:30:10 fetching corpus: 1500, signal 109952/138745 (executing program) 2025/08/30 01:30:10 fetching corpus: 1550, signal 111027/140506 (executing program) 2025/08/30 01:30:10 fetching corpus: 1600, signal 112095/142239 (executing program) 2025/08/30 01:30:10 fetching corpus: 1650, signal 112969/143798 (executing program) 2025/08/30 01:30:10 fetching corpus: 1700, signal 115136/146133 (executing program) 2025/08/30 01:30:11 fetching corpus: 1750, signal 116367/147940 (executing program) 2025/08/30 01:30:11 fetching corpus: 1800, signal 117863/149870 (executing program) 2025/08/30 01:30:11 fetching corpus: 1850, signal 119358/151739 (executing program) 2025/08/30 01:30:11 fetching corpus: 1900, signal 120416/153350 (executing program) 2025/08/30 01:30:11 fetching corpus: 1950, signal 121867/155209 (executing program) 2025/08/30 01:30:11 fetching corpus: 2000, signal 123264/157018 (executing program) 2025/08/30 01:30:11 fetching corpus: 2050, signal 124060/158411 (executing program) 2025/08/30 01:30:11 fetching corpus: 2100, signal 125360/160085 (executing program) 2025/08/30 01:30:11 fetching corpus: 2150, signal 126191/161400 (executing program) 2025/08/30 01:30:11 fetching corpus: 2200, signal 126929/162663 (executing program) 2025/08/30 01:30:12 fetching corpus: 2250, signal 127865/164009 (executing program) 2025/08/30 01:30:12 fetching corpus: 2300, signal 128690/165319 (executing program) 2025/08/30 01:30:12 fetching corpus: 2350, signal 129794/166780 (executing program) 2025/08/30 01:30:12 fetching corpus: 2400, signal 130861/168088 (executing program) 2025/08/30 01:30:12 fetching corpus: 2450, signal 131901/169420 (executing program) 2025/08/30 01:30:12 fetching corpus: 2500, signal 132292/170432 (executing program) 2025/08/30 01:30:12 fetching corpus: 2550, signal 133304/171715 (executing program) 2025/08/30 01:30:12 fetching corpus: 2600, signal 134030/172818 (executing program) 2025/08/30 01:30:12 fetching corpus: 2650, signal 134948/174012 (executing program) 2025/08/30 01:30:12 fetching corpus: 2700, signal 135484/175022 (executing program) 2025/08/30 01:30:13 fetching corpus: 2750, signal 136297/176195 (executing program) 2025/08/30 01:30:13 fetching corpus: 2800, signal 136922/177273 (executing program) 2025/08/30 01:30:13 fetching corpus: 2850, signal 137790/178392 (executing program) 2025/08/30 01:30:13 fetching corpus: 2900, signal 138599/179460 (executing program) 2025/08/30 01:30:13 fetching corpus: 2950, signal 139398/180536 (executing program) 2025/08/30 01:30:13 fetching corpus: 3000, signal 139995/181520 (executing program) 2025/08/30 01:30:13 fetching corpus: 3050, signal 140895/182580 (executing program) 2025/08/30 01:30:13 fetching corpus: 3100, signal 141344/183435 (executing program) 2025/08/30 01:30:13 fetching corpus: 3150, signal 141956/184360 (executing program) 2025/08/30 01:30:13 fetching corpus: 3200, signal 142533/185263 (executing program) 2025/08/30 01:30:14 fetching corpus: 3250, signal 143033/186134 (executing program) 2025/08/30 01:30:14 fetching corpus: 3300, signal 143709/187051 (executing program) 2025/08/30 01:30:14 fetching corpus: 3350, signal 144172/187863 (executing program) 2025/08/30 01:30:14 fetching corpus: 3400, signal 144726/188724 (executing program) 2025/08/30 01:30:14 fetching corpus: 3450, signal 145388/189572 (executing program) 2025/08/30 01:30:14 fetching corpus: 3500, signal 146198/190540 (executing program) 2025/08/30 01:30:14 fetching corpus: 3550, signal 146902/191435 (executing program) 2025/08/30 01:30:14 fetching corpus: 3600, signal 147279/192210 (executing program) 2025/08/30 01:30:14 fetching corpus: 3650, signal 147725/192988 (executing program) 2025/08/30 01:30:14 fetching corpus: 3700, signal 148257/193739 (executing program) 2025/08/30 01:30:14 fetching corpus: 3750, signal 148742/194464 (executing program) 2025/08/30 01:30:14 fetching corpus: 3800, signal 149308/195259 (executing program) 2025/08/30 01:30:14 fetching corpus: 3850, signal 149633/195967 (executing program) 2025/08/30 01:30:15 fetching corpus: 3900, signal 150017/196674 (executing program) 2025/08/30 01:30:15 fetching corpus: 3950, signal 150627/197467 (executing program) 2025/08/30 01:30:15 fetching corpus: 4000, signal 151267/198202 (executing program) 2025/08/30 01:30:15 fetching corpus: 4050, signal 151830/198946 (executing program) 2025/08/30 01:30:15 fetching corpus: 4100, signal 152580/199758 (executing program) 2025/08/30 01:30:15 fetching corpus: 4150, signal 153176/200388 (executing program) 2025/08/30 01:30:15 fetching corpus: 4200, signal 153674/201053 (executing program) 2025/08/30 01:30:15 fetching corpus: 4250, signal 154522/201782 (executing program) 2025/08/30 01:30:15 fetching corpus: 4300, signal 154936/202406 (executing program) 2025/08/30 01:30:15 fetching corpus: 4350, signal 155577/203129 (executing program) 2025/08/30 01:30:15 fetching corpus: 4400, signal 156017/203766 (executing program) 2025/08/30 01:30:15 fetching corpus: 4450, signal 156506/204414 (executing program) 2025/08/30 01:30:16 fetching corpus: 4500, signal 157158/205035 (executing program) 2025/08/30 01:30:16 fetching corpus: 4550, signal 157945/205671 (executing program) 2025/08/30 01:30:16 fetching corpus: 4600, signal 158495/206282 (executing program) 2025/08/30 01:30:16 fetching corpus: 4650, signal 158929/206875 (executing program) 2025/08/30 01:30:16 fetching corpus: 4700, signal 159510/207460 (executing program) 2025/08/30 01:30:16 fetching corpus: 4750, signal 160045/207984 (executing program) 2025/08/30 01:30:16 fetching corpus: 4800, signal 160564/208552 (executing program) 2025/08/30 01:30:16 fetching corpus: 4850, signal 161066/209092 (executing program) 2025/08/30 01:30:16 fetching corpus: 4900, signal 161625/209620 (executing program) 2025/08/30 01:30:16 fetching corpus: 4950, signal 162147/210134 (executing program) 2025/08/30 01:30:16 fetching corpus: 5000, signal 162496/210613 (executing program) 2025/08/30 01:30:17 fetching corpus: 5050, signal 162855/211115 (executing program) 2025/08/30 01:30:17 fetching corpus: 5100, signal 163362/211601 (executing program) 2025/08/30 01:30:17 fetching corpus: 5150, signal 164001/212094 (executing program) 2025/08/30 01:30:17 fetching corpus: 5200, signal 164479/212596 (executing program) 2025/08/30 01:30:17 fetching corpus: 5250, signal 164914/212882 (executing program) 2025/08/30 01:30:17 fetching corpus: 5300, signal 165204/212900 (executing program) 2025/08/30 01:30:17 fetching corpus: 5350, signal 166367/212910 (executing program) 2025/08/30 01:30:17 fetching corpus: 5400, signal 166810/212926 (executing program) 2025/08/30 01:30:17 fetching corpus: 5450, signal 167032/212934 (executing program) 2025/08/30 01:30:17 fetching corpus: 5500, signal 167482/212952 (executing program) 2025/08/30 01:30:18 fetching corpus: 5550, signal 167933/212968 (executing program) 2025/08/30 01:30:18 fetching corpus: 5600, signal 168274/212982 (executing program) 2025/08/30 01:30:18 fetching corpus: 5650, signal 168593/213020 (executing program) 2025/08/30 01:30:18 fetching corpus: 5700, signal 169019/213020 (executing program) 2025/08/30 01:30:18 fetching corpus: 5750, signal 169347/213021 (executing program) 2025/08/30 01:30:18 fetching corpus: 5800, signal 169785/213022 (executing program) 2025/08/30 01:30:18 fetching corpus: 5850, signal 170146/213025 (executing program) 2025/08/30 01:30:18 fetching corpus: 5900, signal 170531/213028 (executing program) 2025/08/30 01:30:18 fetching corpus: 5950, signal 170900/213031 (executing program) 2025/08/30 01:30:18 fetching corpus: 6000, signal 171145/213041 (executing program) 2025/08/30 01:30:18 fetching corpus: 6050, signal 171599/213057 (executing program) 2025/08/30 01:30:18 fetching corpus: 6100, signal 171878/213074 (executing program) 2025/08/30 01:30:18 fetching corpus: 6150, signal 172528/213087 (executing program) 2025/08/30 01:30:19 fetching corpus: 6200, signal 172883/213091 (executing program) 2025/08/30 01:30:19 fetching corpus: 6250, signal 173376/213100 (executing program) 2025/08/30 01:30:19 fetching corpus: 6300, signal 173717/213104 (executing program) 2025/08/30 01:30:19 fetching corpus: 6350, signal 174211/213106 (executing program) 2025/08/30 01:30:19 fetching corpus: 6400, signal 174506/213114 (executing program) 2025/08/30 01:30:19 fetching corpus: 6450, signal 174748/213114 (executing program) 2025/08/30 01:30:19 fetching corpus: 6500, signal 175032/213120 (executing program) 2025/08/30 01:30:19 fetching corpus: 6550, signal 175299/213145 (executing program) 2025/08/30 01:30:19 fetching corpus: 6600, signal 175662/213164 (executing program) 2025/08/30 01:30:19 fetching corpus: 6650, signal 175938/213167 (executing program) 2025/08/30 01:30:19 fetching corpus: 6700, signal 176178/213169 (executing program) 2025/08/30 01:30:19 fetching corpus: 6750, signal 176517/213170 (executing program) 2025/08/30 01:30:20 fetching corpus: 6800, signal 176811/213187 (executing program) 2025/08/30 01:30:20 fetching corpus: 6850, signal 177265/213242 (executing program) 2025/08/30 01:30:20 fetching corpus: 6900, signal 177690/213244 (executing program) 2025/08/30 01:30:20 fetching corpus: 6950, signal 178019/213246 (executing program) 2025/08/30 01:30:20 fetching corpus: 7000, signal 178487/213274 (executing program) 2025/08/30 01:30:20 fetching corpus: 7050, signal 178754/213288 (executing program) 2025/08/30 01:30:20 fetching corpus: 7100, signal 179137/213290 (executing program) 2025/08/30 01:30:20 fetching corpus: 7150, signal 179461/213332 (executing program) 2025/08/30 01:30:20 fetching corpus: 7200, signal 179987/213338 (executing program) 2025/08/30 01:30:20 fetching corpus: 7250, signal 180425/213350 (executing program) 2025/08/30 01:30:20 fetching corpus: 7300, signal 180645/213353 (executing program) 2025/08/30 01:30:20 fetching corpus: 7350, signal 180885/213353 (executing program) 2025/08/30 01:30:21 fetching corpus: 7400, signal 181189/213369 (executing program) 2025/08/30 01:30:21 fetching corpus: 7450, signal 181518/213385 (executing program) 2025/08/30 01:30:21 fetching corpus: 7500, signal 181858/213446 (executing program) 2025/08/30 01:30:21 fetching corpus: 7550, signal 182222/213447 (executing program) 2025/08/30 01:30:21 fetching corpus: 7600, signal 182510/213487 (executing program) 2025/08/30 01:30:21 fetching corpus: 7650, signal 182752/213487 (executing program) 2025/08/30 01:30:21 fetching corpus: 7700, signal 183032/213502 (executing program) 2025/08/30 01:30:21 fetching corpus: 7750, signal 183456/213512 (executing program) 2025/08/30 01:30:21 fetching corpus: 7800, signal 183793/213513 (executing program) 2025/08/30 01:30:21 fetching corpus: 7850, signal 184068/213517 (executing program) 2025/08/30 01:30:21 fetching corpus: 7900, signal 184397/213543 (executing program) 2025/08/30 01:30:21 fetching corpus: 7950, signal 184664/213543 (executing program) 2025/08/30 01:30:22 fetching corpus: 8000, signal 184985/213543 (executing program) 2025/08/30 01:30:22 fetching corpus: 8050, signal 185250/213544 (executing program) 2025/08/30 01:30:22 fetching corpus: 8100, signal 185484/213547 (executing program) 2025/08/30 01:30:22 fetching corpus: 8150, signal 185905/213554 (executing program) 2025/08/30 01:30:22 fetching corpus: 8200, signal 186043/213556 (executing program) 2025/08/30 01:30:22 fetching corpus: 8250, signal 186231/213565 (executing program) 2025/08/30 01:30:22 fetching corpus: 8300, signal 186507/213568 (executing program) 2025/08/30 01:30:22 fetching corpus: 8350, signal 186840/213569 (executing program) 2025/08/30 01:30:22 fetching corpus: 8400, signal 187162/213569 (executing program) 2025/08/30 01:30:22 fetching corpus: 8450, signal 187402/213572 (executing program) 2025/08/30 01:30:23 fetching corpus: 8500, signal 187851/213578 (executing program) 2025/08/30 01:30:23 fetching corpus: 8550, signal 188238/213580 (executing program) 2025/08/30 01:30:23 fetching corpus: 8600, signal 188486/213592 (executing program) 2025/08/30 01:30:23 fetching corpus: 8650, signal 188756/213603 (executing program) 2025/08/30 01:30:23 fetching corpus: 8700, signal 188999/213606 (executing program) 2025/08/30 01:30:23 fetching corpus: 8750, signal 189295/213622 (executing program) 2025/08/30 01:30:23 fetching corpus: 8800, signal 189453/213637 (executing program) 2025/08/30 01:30:23 fetching corpus: 8850, signal 189683/213645 (executing program) 2025/08/30 01:30:23 fetching corpus: 8900, signal 189949/213652 (executing program) 2025/08/30 01:30:23 fetching corpus: 8950, signal 190145/213661 (executing program) 2025/08/30 01:30:23 fetching corpus: 9000, signal 190355/213662 (executing program) 2025/08/30 01:30:23 fetching corpus: 9050, signal 190586/213664 (executing program) 2025/08/30 01:30:24 fetching corpus: 9100, signal 190882/213665 (executing program) 2025/08/30 01:30:24 fetching corpus: 9150, signal 191161/213679 (executing program) 2025/08/30 01:30:24 fetching corpus: 9200, signal 191345/213679 (executing program) 2025/08/30 01:30:24 fetching corpus: 9250, signal 191528/213682 (executing program) 2025/08/30 01:30:24 fetching corpus: 9300, signal 191677/213686 (executing program) 2025/08/30 01:30:24 fetching corpus: 9350, signal 191945/213688 (executing program) 2025/08/30 01:30:24 fetching corpus: 9400, signal 192152/213691 (executing program) 2025/08/30 01:30:24 fetching corpus: 9450, signal 192428/213703 (executing program) 2025/08/30 01:30:24 fetching corpus: 9500, signal 192618/213706 (executing program) 2025/08/30 01:30:24 fetching corpus: 9550, signal 192906/213739 (executing program) 2025/08/30 01:30:24 fetching corpus: 9600, signal 193099/213747 (executing program) 2025/08/30 01:30:25 fetching corpus: 9650, signal 193344/213759 (executing program) 2025/08/30 01:30:25 fetching corpus: 9700, signal 193580/213770 (executing program) 2025/08/30 01:30:25 fetching corpus: 9750, signal 193805/213776 (executing program) 2025/08/30 01:30:25 fetching corpus: 9800, signal 193974/213777 (executing program) 2025/08/30 01:30:25 fetching corpus: 9850, signal 194692/213791 (executing program) 2025/08/30 01:30:25 fetching corpus: 9900, signal 194953/213791 (executing program) 2025/08/30 01:30:25 fetching corpus: 9950, signal 195215/213792 (executing program) 2025/08/30 01:30:25 fetching corpus: 10000, signal 195428/213807 (executing program) 2025/08/30 01:30:25 fetching corpus: 10050, signal 195603/213809 (executing program) 2025/08/30 01:30:25 fetching corpus: 10100, signal 195794/213812 (executing program) 2025/08/30 01:30:25 fetching corpus: 10150, signal 195972/213813 (executing program) 2025/08/30 01:30:25 fetching corpus: 10200, signal 196152/213831 (executing program) 2025/08/30 01:30:25 fetching corpus: 10250, signal 196367/213854 (executing program) 2025/08/30 01:30:25 fetching corpus: 10300, signal 196650/213854 (executing program) 2025/08/30 01:30:26 fetching corpus: 10350, signal 196816/213855 (executing program) 2025/08/30 01:30:26 fetching corpus: 10400, signal 197040/213860 (executing program) 2025/08/30 01:30:26 fetching corpus: 10450, signal 197179/213862 (executing program) 2025/08/30 01:30:26 fetching corpus: 10500, signal 197352/213866 (executing program) 2025/08/30 01:30:26 fetching corpus: 10550, signal 197644/213867 (executing program) 2025/08/30 01:30:26 fetching corpus: 10600, signal 197862/213883 (executing program) 2025/08/30 01:30:26 fetching corpus: 10650, signal 198017/213889 (executing program) 2025/08/30 01:30:26 fetching corpus: 10700, signal 198158/213890 (executing program) 2025/08/30 01:30:26 fetching corpus: 10750, signal 198491/213937 (executing program) 2025/08/30 01:30:26 fetching corpus: 10800, signal 198701/213948 (executing program) 2025/08/30 01:30:26 fetching corpus: 10850, signal 198896/213961 (executing program) 2025/08/30 01:30:27 fetching corpus: 10900, signal 199055/213963 (executing program) 2025/08/30 01:30:27 fetching corpus: 10950, signal 199289/213965 (executing program) 2025/08/30 01:30:27 fetching corpus: 11000, signal 199486/213967 (executing program) 2025/08/30 01:30:27 fetching corpus: 11050, signal 199642/213969 (executing program) 2025/08/30 01:30:27 fetching corpus: 11100, signal 199889/213974 (executing program) 2025/08/30 01:30:27 fetching corpus: 11150, signal 200107/213974 (executing program) 2025/08/30 01:30:27 fetching corpus: 11200, signal 200384/213975 (executing program) 2025/08/30 01:30:27 fetching corpus: 11250, signal 200699/213979 (executing program) 2025/08/30 01:30:27 fetching corpus: 11300, signal 200866/213989 (executing program) 2025/08/30 01:30:27 fetching corpus: 11350, signal 201047/213996 (executing program) 2025/08/30 01:30:27 fetching corpus: 11400, signal 201213/214000 (executing program) 2025/08/30 01:30:27 fetching corpus: 11450, signal 201433/214007 (executing program) 2025/08/30 01:30:28 fetching corpus: 11500, signal 201673/214023 (executing program) 2025/08/30 01:30:28 fetching corpus: 11550, signal 201885/214029 (executing program) 2025/08/30 01:30:28 fetching corpus: 11600, signal 202056/214033 (executing program) 2025/08/30 01:30:28 fetching corpus: 11650, signal 202197/214037 (executing program) 2025/08/30 01:30:28 fetching corpus: 11700, signal 202364/214038 (executing program) 2025/08/30 01:30:28 fetching corpus: 11750, signal 202549/214039 (executing program) 2025/08/30 01:30:28 fetching corpus: 11800, signal 202800/214043 (executing program) 2025/08/30 01:30:28 fetching corpus: 11815, signal 202852/214043 (executing program) 2025/08/30 01:30:28 fetching corpus: 11815, signal 202852/214043 (executing program) 2025/08/30 01:30:30 starting 8 fuzzer processes 01:30:30 executing program 0: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x581102, 0xc0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000080)) ioctl$BTRFS_IOC_QUOTA_RESCAN(r1, 0x4040942c, &(0x7f00000000c0)={0x0, 0x0, [0x1, 0xfffffffffffffe00, 0x1, 0x7, 0x10001, 0x7]}) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f0000000180)={0x0, 0xfb, 0x2f, 0x0, 0x81, "cf5318486a7eb58e55f48a41dedfaacb", "16e3f0be82ba94fad2c9c476d07525c1824aabbeaa98fc1fa905"}, 0x2f, 0x3) r2 = pidfd_open(0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r2, {r0}}, './file0\x00'}) ioctl$AUTOFS_IOC_READY(r1, 0x9360, 0xb4b) r3 = creat(&(0x7f0000000200)='./file1\x00', 0x0) faccessat2(r3, &(0x7f0000000240)='./file0\x00', 0x151, 0x0) r4 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(r3, 0x5000940f, &(0x7f00000002c0)={{r4}, "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"}) r5 = getgid() lchown(&(0x7f00000012c0)='./file0/file0\x00', 0xee00, r5) r6 = dup(r2) pidfd_send_signal(r6, 0x11, &(0x7f0000001300)={0x7, 0x10000, 0x3}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000001380)={{0x0, 0xffffffffffff8001, 0x1, 0x8, 0x80000001, 0x0, 0x8, 0x20, 0x9, 0x8000, 0x5, 0x4, 0x24f, 0x8, 0xfff}}) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000002380), 0x800, 0x0) r8 = pidfd_getfd(r7, r6, 0x0) fcntl$setflags(r8, 0x2, 0x0) 01:30:30 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24, 0xc4b87249, @mcast1, 0x3}, 0x1c) r1 = dup2(r0, r0) r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0xff) ioctl$KDSKBLED(r2, 0x4b65, 0x3) write(r0, &(0x7f0000000080)="6fba73c03887d563392670b6119d9b2b5ddd4eee3cef62f1539ab81ffc2990fab215fc6dd71cc99423be3cac26681da570ca55948cadeb6b0d67640fdeac198957e3dbfc656007ee440d4b4d02555c34c9e5efca0789668eefb7cb96c87b74c367525066e9406fe3784c7849cb905c554885a0f0331d35f5d54af4ffb0185cada4ec188aab373845cfe0db3f6380a7ebf2f6954d52886bc38eedaf7afbd9995b293d0e2a9f63ce6400d467a0766b8be1dfeca9b64e76be8527c3cf9decd0b2bd1d8bfcda0576b8c8e7", 0xc9) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='fd\x00') ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f00000005c0)={0x133, 0x19, &(0x7f00000001c0)}) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r2, 0x40189429, &(0x7f0000000600)={0x1, 0x2, 0x2}) openat$cgroup_type(r0, &(0x7f0000000640), 0x2, 0x0) ioctl$KDSIGACCEPT(r1, 0x4b4e, 0xa) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000900)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000008c0)={&(0x7f00000006c0)={0x1f4, 0x0, 0x500, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x800}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3f}]}, @TIPC_NLA_MEDIA={0x40, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_LINK={0x54, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_NODE={0xd0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xc9, 0x3, "f3d055cc0efecd6c29c0667bce6c9e06f8d23a4b7ae3f8e8ffe08b1759e00bb971a84f2ba77f62b6792ce101ac52d1d58695db90ed9dea4ae608189719f0b70257e01cadb6f0a02ee71d168db83728d42edb667b48ded4309a161551147e2a7f9a15da26ffede103b750a228dcb6f7bb19d904faacbd85f5568a64da63abbd69ca19553b7f24956a57cb734d706323cf45aa359ccc6438d8535a495c6efa49239ec108a3dbf1776e8e9ac4f3358c25b683e9d1b1e8c3c768426b91df3fdae659c355336389"}]}, @TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}]}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x1}, 0x40008c5) ioctl$KDFONTOP_COPY(r2, 0x4b72, &(0x7f0000000d40)={0x3, 0x0, 0x1e, 0xf, 0x127, &(0x7f0000000940)}) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000d80)={0xffffffff, 0x6, 0x8001, 0x8, 0xfe, "f6f0010283dc392f6f7feae2dd22f857749928", 0x2, 0xfffffff7}) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDGKBLED(r2, 0x4b64, &(0x7f0000000dc0)) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000e40), r0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001100)={'erspan0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x1, 0x40, 0x0, 0x857c, {{0x38, 0x4, 0x2, 0x4, 0xe0, 0x67, 0x0, 0x20, 0x29, 0x0, @multicast2, @loopback, {[@ssrr={0x89, 0x17, 0xe6, [@rand_addr=0x64010100, @multicast1, @rand_addr=0x64010102, @private=0xa010101, @multicast1]}, @cipso={0x86, 0x48, 0x0, [{0x0, 0x6, "f78c4f8b"}, {0x6, 0x7, "5d4174c5fd"}, {0x6, 0xe, "c47bbf932c2eb224c14309cb"}, {0x6, 0x9, "5bfb77357e4cb7"}, {0x2, 0x8, "13a76812431d"}, {0x2, 0xd, "e5c5e23966945144d17dab"}, {0x1, 0x9, "342815044f3790"}]}, @noop, @ssrr={0x89, 0x23, 0x15, [@private=0xa010102, @multicast2, @private=0xa010102, @empty, @multicast1, @multicast2, @remote, @remote]}, @ssrr={0x89, 0xb, 0x25, [@multicast2, @multicast2]}, @cipso={0x86, 0x3c, 0x3, [{0x0, 0xe, "e319040b37f9846dc9641d36"}, {0x2, 0xe, "d5475530dba9e5eff8fefdae"}, {0x5, 0xf, "2ce8ec2f0e799a0a850e5e168a"}, {0xea7bc9b55dfc1b59, 0xb, "aa1f36b5752feda03e"}]}]}}}}}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f00000011c0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x2c, r5, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000091}, 0x80) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) 01:30:30 executing program 1: r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@caif=@util, &(0x7f0000000080)=0x80) setsockopt$inet_int(r0, 0x0, 0x0, &(0x7f00000000c0)=0x8, 0x4) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/module/pcieportdrv', 0x4080, 0x2) setsockopt$inet_int(r1, 0x0, 0x31, &(0x7f0000000140)=0x4, 0x4) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file0\x00'}) setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f00000001c0)={{0x4c, @private=0xa010101, 0x4e22, 0x2, 'lc\x00', 0x9, 0x8, 0x18}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x2000, 0x3, 0x401, 0x28000}}, 0x44) recvmsg$unix(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)=""/120, 0x78}], 0x1, &(0x7f0000000300)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa0}, 0x40000002) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000400)=0x48040440) r5 = accept4$unix(r1, &(0x7f0000000440), &(0x7f00000004c0)=0x6e, 0x40000) clock_gettime(0x0, &(0x7f00000061c0)={0x0, 0x0}) recvmmsg(r5, &(0x7f0000005fc0)=[{{&(0x7f0000000500)=@hci, 0x80, &(0x7f0000000640)=[{&(0x7f0000000580)=""/166, 0xa6}], 0x1, &(0x7f0000000680)=""/37, 0x25}, 0x8}, {{&(0x7f00000006c0)=@qipcrtr, 0x80, &(0x7f0000000880)=[{&(0x7f0000000740)=""/86, 0x56}, {&(0x7f00000007c0)=""/98, 0x62}, {&(0x7f0000000840)=""/33, 0x21}], 0x3, &(0x7f00000008c0)=""/172, 0xac}, 0x101}, {{&(0x7f0000000980)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000a00)=""/22, 0x16}, {&(0x7f0000000a40)=""/190, 0xbe}], 0x2, &(0x7f0000000b40)}, 0x5}, {{&(0x7f0000000b80)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000003080)=[{&(0x7f0000000c00)=""/37, 0x25}, {&(0x7f0000000c40)=""/243, 0xf3}, {&(0x7f0000000d40)=""/46, 0x2e}, {&(0x7f0000000d80)=""/202, 0xca}, {&(0x7f0000000e80)=""/163, 0xa3}, {&(0x7f0000000f40)=""/4096, 0x1000}, {&(0x7f0000001f40)=""/4096, 0x1000}, {&(0x7f0000002f40)}, {&(0x7f0000002f80)=""/204, 0xcc}], 0x9, &(0x7f0000003140)=""/4096, 0x1000}, 0x8001}, {{&(0x7f0000004140)=@ethernet={0x0, @broadcast}, 0x80, &(0x7f0000004380)=[{&(0x7f00000041c0)=""/25, 0x19}, {&(0x7f0000004200)=""/205, 0xcd}, {&(0x7f0000004300)=""/123, 0x7b}], 0x3, &(0x7f00000043c0)=""/224, 0xe0}, 0x6}, {{&(0x7f00000044c0)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x80, &(0x7f0000005900)=[{&(0x7f0000004540)=""/211, 0xd3}, {&(0x7f0000004640)=""/99, 0x63}, {&(0x7f00000046c0)=""/19, 0x13}, {&(0x7f0000004700)=""/162, 0xa2}, {&(0x7f00000047c0)=""/58, 0x3a}, {&(0x7f0000004800)=""/4096, 0x1000}, {&(0x7f0000005800)=""/57, 0x39}, {&(0x7f0000005840)=""/135, 0x87}], 0x8, &(0x7f0000005980)=""/153, 0x99}, 0xdaa8}, {{&(0x7f0000005a40)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000005c00)=[{&(0x7f0000005ac0)}, {&(0x7f0000005b00)=""/239, 0xef}], 0x2, &(0x7f0000005c40)=""/56, 0x38}, 0x8}, {{&(0x7f0000005c80)=@l2tp, 0x80, &(0x7f0000005f40)=[{&(0x7f0000005d00)=""/42, 0x2a}, {&(0x7f0000005d40)=""/80, 0x50}, {&(0x7f0000005dc0)=""/140, 0x8c}, {&(0x7f0000005e80)=""/150, 0x96}], 0x4, &(0x7f0000005f80)=""/56, 0x38}, 0x8}], 0x8, 0x2000, &(0x7f0000006200)={r6, r7+10000000}) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000006240)={r3, 0x4, 0x7fff, 0x4}) recvmmsg$unix(r2, &(0x7f0000008a00)=[{{&(0x7f0000006280)=@abs, 0x6e, &(0x7f0000006580)=[{&(0x7f0000006300)=""/212, 0xd4}, {&(0x7f0000006400)=""/3, 0x3}, {&(0x7f0000006440)=""/6, 0x6}, {&(0x7f0000006480)=""/57, 0x39}, {&(0x7f00000064c0)=""/164, 0xa4}], 0x5, &(0x7f0000006600)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x110}}, {{0x0, 0x0, &(0x7f0000006800)=[{&(0x7f0000006740)=""/171, 0xab}], 0x1, &(0x7f0000006840)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000006880), 0x6e, &(0x7f0000006bc0)=[{&(0x7f0000006900)=""/16, 0x10}, {&(0x7f0000006940)=""/232, 0xe8}, {&(0x7f0000006a40)=""/155, 0x9b}, {&(0x7f0000006b00)=""/184, 0xb8}], 0x4, &(0x7f0000006c00)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}, {{&(0x7f0000006cc0), 0x6e, &(0x7f0000007f40)=[{&(0x7f0000006d40)=""/214, 0xd6}, {&(0x7f0000006e40)=""/4096, 0x1000}, {&(0x7f0000007e40)=""/81, 0x51}, {&(0x7f0000007ec0)=""/65, 0x41}], 0x4, &(0x7f0000007f80)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x38}}, {{&(0x7f0000007fc0), 0x6e, &(0x7f0000008140)=[{&(0x7f0000008040)=""/89, 0x59}, {&(0x7f00000080c0)=""/123, 0x7b}], 0x2}}, {{&(0x7f0000008180)=@abs, 0x6e, &(0x7f00000083c0)=[{&(0x7f0000008200)=""/245, 0xf5}, {&(0x7f0000008300)=""/152, 0x98}], 0x2, &(0x7f0000008400)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x150}}, {{&(0x7f0000008580), 0x6e, &(0x7f0000008900)=[{&(0x7f0000008600)=""/101, 0x65}, {&(0x7f0000008680)=""/131, 0x83}, {&(0x7f0000008740)=""/90, 0x5a}, {&(0x7f00000087c0)=""/113, 0x71}, {&(0x7f0000008840)=""/173, 0xad}], 0x5, &(0x7f0000008980)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}}], 0x7, 0x52, &(0x7f0000008bc0)={0x77359400}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r8, 0xc0189372, &(0x7f0000008c00)={{0x1, 0x1, 0x18, r11, {0x5d28}}, './file0\x00'}) r12 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGARP(r12, 0x8954, &(0x7f0000008c40)={{0x2, 0x4e22, @broadcast}, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}}, 0x20, {0x2, 0x4e22, @loopback}, 'batadv_slave_1\x00'}) r13 = creat(&(0x7f0000008cc0)='./file0/file0\x00', 0x100) ioctl$AUTOFS_DEV_IOCTL_VERSION(r13, 0xc0189371, &(0x7f0000008d00)={{0x1, 0x1, 0x18, r9}, './file0/file0\x00'}) syz_genetlink_get_family_id$ethtool(&(0x7f0000008d40), r10) sendto$inet(0xffffffffffffffff, &(0x7f0000008dc0)="0f04680d6fffc5cc246fa5af11b1d6452d742107b757733c00411e1a426ec38ca8f0743c185067f4995f92a73ddf2398bbfacf44aa1dd1cddf856977ef7d05f561255d51832a2b3fa4270d041a4a1758caa0796220c7276df069eae1905d1e8a562633c562e6b9e03529ba3bf5c5639f6e49b3cbf23f5526f635e5a290c8c0268769c1adbdc7db5467d74c77b0e6bd6368e5475373e3abb63a087db62bf3148264fda97f936730e840b31bd766c7ee5b89b6c4dee27b679781531db1ca4f362af4a659c7ee2d56fbd956a080e531585cb68163afa6a4dadcca73e8b0f3cb8f7cb9992fe26581c80883f97e2be8a22e212a7e513e869ca14a", 0xf8, 0x24000081, &(0x7f0000008ec0)={0x2, 0x4e21, @private=0xa010101}, 0x10) 01:30:30 executing program 2: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x70, r0, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0002}}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000000}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0102}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20004040}, 0x4008004) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, r1, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x19}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, r2, 0xc00, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004801}, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1008200}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0xffffffff}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x40) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_MODE(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r3, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x40010) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0xb0, r3, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_LEVEL={0x1c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x4}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SEC_LEVEL={0x3c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x9f}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x5}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0xb0}, 0x1, 0x0, 0x0, 0x20000080}, 0x1) stat(&(0x7f0000000840)='./file0\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000900)=@newsa={0x440, 0x10, 0x8, 0x70bd29, 0x25dfdbfb, {{@in6=@mcast2, @in=@multicast2, 0x4e22, 0x2, 0x4e21, 0x5, 0xa, 0x80, 0x0, 0x3c, 0x0, 0xee00}, {@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d3, 0xff}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, {0x7ff, 0x7f, 0x8000, 0x1153, 0x2, 0x7}, {0x2, 0x0, 0x1e, 0x3}, {0xf2e7, 0x4}, 0x70bd29, 0x0, 0x2, 0x0, 0x6}, [@coaddr={0x14, 0xe, @in6=@private1}, @algo_auth_trunc={0xf5, 0x14, {{'sha512-ce\x00'}, 0x548, 0x80, "1f1df7513fc0ac45e0e96bedfa7c6344acfecce2e8974edb35f7583b5ac0cfcbf103190353f7d5a52ffc3dca72f2d3d8af461d4f6a048e904dc12e8e1f732bc1c37c0a3182f8422af707cdf83436e8e062fd0b334001097410db062724078d5f124b3d2b1fab7f92b09bed3296e48362d2d8c25164cb2a86fd983a64e990c395f5cf9d662b73f397aaea2fea8db46f6c867fad6a07df08d4eae17b9d8051e89558304de9708f8d10c2"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x5}, @tmpl={0x144, 0x5, [{{@in=@private=0xa010102, 0x4d4, 0x32}, 0x60ce9a344cce5c11, @in6=@loopback, 0x3503, 0x2, 0x3, 0x0, 0x8, 0x80000000, 0x7fffffff}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d6, 0x6c}, 0x2, @in=@rand_addr=0x64010102, 0x3507, 0x2, 0x2, 0x81, 0x4, 0x210b5687, 0x80}, {{@in=@multicast1, 0x4d5, 0xff}, 0x2, @in6=@loopback, 0x3501, 0x3, 0x2, 0x6, 0x7f, 0x3ff, 0x7f}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x27}, 0x4d3}, 0x2, @in=@local, 0x3500, 0x2, 0x0, 0x2, 0xfffffffa, 0x620060b8, 0xffffffff}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d6, 0xff}, 0x2, @in=@private=0xa010100, 0x3507, 0x4, 0x1, 0x3f, 0x80000001, 0x101, 0xfffffff7}]}, @extra_flags={0x8, 0x18, 0x2}, @lastused={0xc}, @sa={0xe4, 0x6, {{@in6=@local, @in=@rand_addr=0x64010100, 0x4e23, 0x0, 0x4e24, 0x8000, 0xa, 0x80, 0x80, 0x2c, 0x0, r5}, {@in=@rand_addr=0x64010101, 0x4d2, 0x33}, @in=@multicast2, {0x2, 0x8, 0x4, 0x9, 0x10000, 0x7082, 0x2, 0x9}, {0x4, 0x200, 0x7400000000000, 0x3}, {0x10000, 0x7fffffff}, 0x70bd2b, 0x3503, 0xa, 0x1, 0x67, 0x80}}]}, 0x440}}, 0x40000) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CHANNEL(r6, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x3c, r3, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000ec0)={'wpan1\x00'}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000f40), r7) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r8, &(0x7f0000001000)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x28, r9, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040) 01:30:30 executing program 3: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x2b, 0x1, 0xff, 0x5, 0x40, @loopback, @empty, 0x7800, 0x8000, 0x3ff, 0x1f}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000340)={'syztnl0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x29, 0x3, 0x0, 0xc129, 0x5d, @mcast1, @ipv4={'\x00', '\xff\xff', @local}, 0x40, 0x8000, 0x58, 0x8}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000440)={'syztnl2\x00', &(0x7f0000000380)={'gre0\x00', 0x0, 0x8, 0x700, 0x0, 0xff, {{0x1c, 0x4, 0x3, 0x4, 0x70, 0x67, 0x0, 0x1, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x28}, @dev={0xac, 0x14, 0x14, 0x2e}, {[@rr={0x7, 0xf, 0x86, [@broadcast, @multicast1, @private=0xa010100]}, @timestamp={0x44, 0x18, 0x7c, 0x0, 0x2, [0x800, 0x9, 0xfff, 0x6, 0x5]}, @end, @generic={0x83, 0x11, "91ebbc757b1d0cf3d269d1f64035da"}, @noop, @rr={0x7, 0xf, 0x85, [@dev={0xac, 0x14, 0x14, 0xa}, @broadcast, @broadcast]}, @ra={0x94, 0x4}, @generic={0x89, 0xe, "93ba3ca7d7d73c48dd325b17"}]}}}}}) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0xb8, r0, 0x108, 0x70bd29, 0x25dfdbfb, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000000) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000600)={'syztnl1\x00', &(0x7f00000005c0)={'ip_vti0\x00', r1, 0x10, 0x20, 0x6, 0xfffffffc, {{0x6, 0x4, 0x0, 0x16, 0x18, 0x64, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@generic={0x89, 0x4, "835c"}]}}}}}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000640)={@private0, 0x34, r4}) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x400, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f00000006c0)={@private2, r1}, 0x14) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r5, 0xc0189373, &(0x7f0000000700)={{0x1, 0x1, 0x18, r5, {0x1}}, './file0\x00'}) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000740)={@dev={0xfe, 0x80, '\x00', 0x1f}, r4}, 0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000800)={'ip6_vti0\x00', &(0x7f0000000780)={'ip6_vti0\x00', r1, 0x4, 0xff, 0xd1, 0x3, 0x70, @local, @dev={0xfe, 0x80, '\x00', 0x41}, 0x80, 0x8, 0x7, 0x7fff}}) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000840), 0xa0000, 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(r8, 0xc0109428, &(0x7f0000000880)={0x3, 0x81}) sendmsg$GTP_CMD_GETPDP(r5, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x34, 0x0, 0x800, 0x70bd29, 0x25dfdbff, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004080}, 0x8000) r9 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000009c0), 0x4000, 0x0) sendmsg$NL80211_CMD_SET_CHANNEL(r9, &(0x7f0000000ac0)={&(0x7f0000000a00), 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8, 0x16}}}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x50b0}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004044}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x7) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000b40), r8) sendmsg$ETHTOOL_MSG_PAUSE_GET(r10, &(0x7f0000001000)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000e40)={0x158, r11, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x158}, 0x1, 0x0, 0x0, 0x7d00d0dc33c0a872}, 0x4040) [ 92.984743] audit: type=1400 audit(1756517430.610:7): avc: denied { execmem } for pid=274 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 01:30:30 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r1, 0x0, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x1f}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x38}}, 0x0) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r0) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000280)={&(0x7f0000000140), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x5c, r2, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000000}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8080}, 0x404c044) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), r0) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x20, r3, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x40800}, 0x20004040) sendmsg$IEEE802154_START_REQ(r0, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x3c, r1, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0xffff}, @IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x7f}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x6}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x2}, @IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0xb5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40084}, 0xc813) sendmsg$AUDIT_TTY_SET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x9000030}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x18, 0x3f9, 0x20, 0x70bd2c, 0x25dfdbfc, {0x0, 0x1}, ["", "", "", "", "", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x8000) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r4, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x28, r3, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xffff}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000001}, 0x80) sendmsg$IEEE802154_START_REQ(r0, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x24, r3, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x1}, @IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r4) sendmsg$IEEE802154_LIST_IFACE(r5, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x28, r6, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x801}, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LIST_IFACE(r7, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, r3, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x800) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a80), r7) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x20, r8, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x40080}, 0x4008410) 01:30:30 executing program 5: r0 = dup(0xffffffffffffffff) ioctl$INCFS_IOC_CREATE_FILE(r0, 0xc058671e, &(0x7f00000003c0)={{'\x00', 0x1}, {0xffff}, 0x194, 0x0, 0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)="6a634e5ca35a45c6262c617e2a94731abd717842b9926edee8c0ef3a35234de7112531cc1c69e48a0f13483b136cb6309436236331a89403bca62c0cff80b6c30b5a4533d812a80d33de7000f9dcb1ca745d1c601c6aae6c8c43d0f31825448f53fa9150c27ec46a2ae5749deb19761efb861289bfd0e43f066cb5327296e6a693687b2903e2ef88789c05af7aaefba3d1bd5373e4a9143baf12b2c2b73c02ae3779a5327ed8f6a99465be13a84d05379f62baace5e5a9800bb824cd764e6a14c3f773da1726ac7d932f272b4a8023bbebd3613963eb1106a75140e3c6", 0xdd, 0x0, &(0x7f0000000180)={0x2, 0x113, {0x1, 0xc, 0xa7, "b55b6e2147b6e3e2e6624a25ed726b076b06beb0950c12dc37190c33e736453177476935d821aba48f60b880070299f2acb98a12f92fb19daa4e7b10dd17ba9a71e7878bfbed17c65ed8507d484f71d61cbd5350d79fd731894517fe7cd6dd07a3f5d0938fd11dea9f5030e62b039a74d52c2465ebcd20e87df5aa33f541859c252c5da8274c48a8bae6b87cfb8a720c09a123f7379d10bc312d0d116c44556f1f036cabbf8ed2", 0x5f, "5966c661803902bdfad5ba38d318bad586b69ea34e6eae0614841fdb40c7dd1ace6815f661bf1f5a6be10ccf2ddeb5a33a11f5d7ad3d8e2d44c8cb35d99c3fd41124645ab16bdca7bc8791af8237a6ca9924a303294ac4e7bd557e51bf678c"}, 0xe6, "1e3f294929c36755e2be0f81a23bea0db49aab86665aeb6aae9ebf4c890d30d3e48b685aec735a915e01d82c7796b8a9e77098fea810bd3f0e2abf544fb6414ca206debaac1fd9fa9e3472db9de49ed0f67bcef409f030999e5b25c234931b6d2b146e022032e750cb4bb19a620455029e8d8a8549609a018da28f7f413ba5ee6eeded87b06484e51b97de4a9930bae0178598646efd1c1cea5e0aa35441506850704314d8582bc53079ab3f459503ba9f999e742846369b6bd6b31484e32e33a316bb0efddb3b49e5783801855730145fb9d775262a4a40e07ff7e8a3fdb12a4d9bb5a8927d"}, 0x205}) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000440)=""/4096) pipe2$9p(&(0x7f0000001440)={0xffffffffffffffff}, 0x80000) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r1, 0xf501, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001480), 0x200002, 0x0) ioctl$TUNGETIFF(r2, 0x800454d2, &(0x7f00000014c0)={'veth1\x00'}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001600)={'bond0\x00', &(0x7f0000001500)=@ethtool_drvinfo={0x3, "9130e665a38e7b140eb79dd02847bea38f066a078ab88a4b595032828b0b20d3", "b70f80f1f0ad343ddb12b13052f661627b471ce6eb56bd8446e8f5e3ed39fc74", "3367389f6cad28a0134ab334987a5086a46c5c3ff2640e83a68f2378f51a2514", "1cec8a20ff4b04a822214c0c701785f511f8080a5d5fd4093b8abb706cc2fde2", "6867cd47201b7c4dfc59c04bc82ae4e533a1ca9c39e8fe735a0156a3d4fd01d8", "5841aa220798f20dc481a93f", 0x4, 0x1, 0x3, 0x10001, 0x1}}) r3 = creat(&(0x7f0000001640)='./file0\x00', 0x0) setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000001680)=0x1, 0x2) r4 = accept4$unix(r0, 0x0, &(0x7f00000016c0), 0x0) recvmsg$unix(r4, &(0x7f0000001900)={&(0x7f0000001700)=@abs, 0x6e, &(0x7f0000001880)=[{&(0x7f0000001780)=""/44, 0x2c}, {&(0x7f00000017c0)=""/178, 0xb2}], 0x2, &(0x7f00000018c0)}, 0x40) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000001940)=""/45) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000001980)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) r6 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000019c0)='./binderfs2/binder-control\x00', 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r5, 0xc0189373, &(0x7f0000001a00)={{0x1, 0x1, 0x18, r6, {0x8001}}, './file0\x00'}) r7 = getpgid(0x0) r8 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000001a40)) kcmp(0xffffffffffffffff, r7, 0x6, r3, r8) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) 01:30:30 executing program 6: r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, r0, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'erspan0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6gre0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x1) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, r1, 0x100, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x11) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x4c, 0x0, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xffff}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7ff}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x20}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}]}, 0x4c}, 0x1, 0x0, 0x0, 0x810}, 0x480c0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000440)={{{@in6=@private2, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@ipv4={""/10, ""/2, @loopback}}}, &(0x7f0000000540)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000600)={'ip6_vti0\x00', &(0x7f0000000580)={'ip6_vti0\x00', 0x0, 0x2f, 0x8, 0x8, 0xfff, 0x6d, @private0={0xfc, 0x0, '\x00', 0x1}, @private1, 0x1, 0x700, 0x6b9e, 0x4d}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000006c0)={'ip6tnl0\x00', &(0x7f0000000640)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x1c, 0x5, 0xc, @mcast2, @empty, 0x20, 0x7, 0x7fffffff, 0x7}}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000c80)={&(0x7f0000000700)={0x580, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [{{0x8}, {0x1ec, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6c}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffff}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}]}}, {{0x8}, {0x13c, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x30000000}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x1ac, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r4}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8000}}, {0x8}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x7, 0xff, 0x1b, 0x1ff}, {0x3, 0x2, 0x4, 0x8}, {0xd3f5, 0x5, 0x2, 0x2}, {0x72, 0x0, 0x2, 0x800}, {0xff81, 0x7, 0x9, 0x3}, {0x1, 0x6, 0x5, 0x7}, {0x7e, 0x3, 0x1, 0x24e}]}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}]}, 0x580}, 0x1, 0x0, 0x0, 0x1080}, 0x2400c0b2) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000d00)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6}}, './file0\x00'}) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d80), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000f40)={'ip6_vti0\x00', &(0x7f0000000ec0)={'ip6tnl0\x00', r3, 0x29, 0xff, 0xef, 0x3, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}, @empty, 0x7800, 0x20, 0x6b, 0x7}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001080)={'syztnl0\x00', &(0x7f0000000fc0)={'ip_vti0\x00', r2, 0x80, 0x700, 0x7f, 0x1ff, {{0x22, 0x4, 0x3, 0x6, 0x88, 0x68, 0x0, 0x13, 0x2f, 0x0, @multicast1, @multicast1, {[@cipso={0x86, 0x32, 0xffffffffffffffff, [{0x6, 0x4, "b1f0"}, {0x0, 0x10, "38cfe0db104f39eb30ff55d87c61"}, {0x7, 0x7, "a7cd60541a"}, {0x0, 0x11, "837a8b129231fda43a2e251de88357"}]}, @ssrr={0x89, 0x13, 0x6f, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x22}, @local]}, @timestamp={0x44, 0x28, 0x10, 0x0, 0xb, [0x3f, 0x3, 0x1, 0xffffffff, 0x100, 0x101, 0x800, 0x80000000, 0x1]}, @ra={0x94, 0x4, 0x1}]}}}}}) recvmsg(0xffffffffffffffff, &(0x7f0000002300)={&(0x7f00000010c0)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000002240)=[{&(0x7f0000001140)=""/87, 0x57}, {&(0x7f00000011c0)=""/4096, 0x1000}, {&(0x7f00000021c0)=""/80, 0x50}], 0x3, &(0x7f0000002280)=""/70, 0x46}, 0x40000002) sendmsg$ETHTOOL_MSG_EEE_GET(r5, &(0x7f0000002500)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000024c0)={&(0x7f0000002340)={0x150, r6, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nbd(&(0x7f0000002580), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(r10, &(0x7f0000002640)={&(0x7f0000002540)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002600)={&(0x7f00000025c0)={0x2c, r11, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x21}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x27}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0xc004000) r12 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000002680), 0x404000, 0x0) fsetxattr$trusted_overlay_opaque(r12, &(0x7f00000026c0), &(0x7f0000002700), 0x2, 0x2) [ 94.124135] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 94.126168] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 94.130594] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 94.138024] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 94.140254] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 94.187338] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 94.190078] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 94.192655] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 94.199541] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 94.203900] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 94.248821] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 94.250900] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 94.255573] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 94.259068] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 94.261531] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 94.262537] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 94.271082] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 94.272984] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 94.274644] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 94.282730] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 94.310670] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 94.318666] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 94.322037] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 94.326576] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 94.337701] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 94.341267] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 94.342098] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 94.343668] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 94.349519] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 94.355122] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 94.378281] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 94.387641] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 94.388447] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 94.390555] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 94.391941] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 94.393881] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 94.396643] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 94.401857] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 94.415498] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 94.418373] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 96.160951] Bluetooth: hci0: command tx timeout [ 96.225590] Bluetooth: hci1: command tx timeout [ 96.352892] Bluetooth: hci2: command tx timeout [ 96.353593] Bluetooth: hci3: command tx timeout [ 96.418426] Bluetooth: hci5: command tx timeout [ 96.419182] Bluetooth: hci4: command tx timeout [ 96.480480] Bluetooth: hci6: command tx timeout [ 96.481128] Bluetooth: hci7: command tx timeout [ 98.208501] Bluetooth: hci0: command tx timeout [ 98.273450] Bluetooth: hci1: command tx timeout [ 98.400878] Bluetooth: hci2: command tx timeout [ 98.401313] Bluetooth: hci3: command tx timeout [ 98.465463] Bluetooth: hci5: command tx timeout [ 98.465909] Bluetooth: hci4: command tx timeout [ 98.528548] Bluetooth: hci7: command tx timeout [ 98.528978] Bluetooth: hci6: command tx timeout [ 100.256533] Bluetooth: hci0: command tx timeout [ 100.320502] Bluetooth: hci1: command tx timeout [ 100.451491] Bluetooth: hci3: command tx timeout [ 100.451924] Bluetooth: hci2: command tx timeout [ 100.513485] Bluetooth: hci4: command tx timeout [ 100.513897] Bluetooth: hci5: command tx timeout [ 100.577583] Bluetooth: hci6: command tx timeout [ 100.578022] Bluetooth: hci7: command tx timeout [ 102.304557] Bluetooth: hci0: command tx timeout [ 102.369438] Bluetooth: hci1: command tx timeout [ 102.496478] Bluetooth: hci2: command tx timeout [ 102.496908] Bluetooth: hci3: command tx timeout [ 102.560458] Bluetooth: hci5: command tx timeout [ 102.560910] Bluetooth: hci4: command tx timeout [ 102.625601] Bluetooth: hci7: command tx timeout [ 102.625995] Bluetooth: hci6: command tx timeout [ 129.640886] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.641563] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.776469] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.777080] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.125498] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.126114] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.361258] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.362041] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.720078] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.720714] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 01:31:08 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_SCAN_REQ(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, 0x0, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DURATION={0x5, 0x15, 0x8}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x2}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x10}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x8}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x63}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001240), r2) sendmsg$IEEE802154_START_REQ(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, r3, 0x109, 0x0, 0x0, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}]}, 0x24}}, 0x0) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x70, r4, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x2400c005}, 0x0) [ 130.869971] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.870614] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.051265] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.051890] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.124973] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.125581] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.181834] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.182473] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.294744] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.294782] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.295363] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.296070] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.341934] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.342624] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.585699] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.586314] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.644722] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.645327] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.688884] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.689503] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.740508] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.741090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 01:31:17 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000001800), 0x0) r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f0000000000)=0x12f1) r2 = fork() r3 = fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs$namespace(r3, &(0x7f0000000000)='ns/pid_for_children\x00') ioprio_get$pid(0x2, r3) ptrace(0x10, r2) ptrace$setregs(0xe, r2, 0x0, &(0x7f00000009c0)) wait4(0x0, 0x0, 0x2, &(0x7f0000000300)) r4 = memfd_secret(0x80000) fcntl$lock(r4, 0x25, &(0x7f0000000080)={0x2, 0x2, 0x3aa8, 0x6, r2}) ptrace$poke(0x5, r2, &(0x7f00000000c0), 0x80000000) clone3(&(0x7f00000002c0)={0x1720e0180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 01:31:17 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='hugetlbfs\x00', 0x0, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0x100003c) umount2(&(0x7f0000000180)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmmsg$unix(r1, 0x0, 0x0, 0x40001061, 0x0) 01:31:17 executing program 6: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x10, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000100), 0x0, 0x4) kcmp(0x0, 0x0, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) r3 = fork() ptrace(0xffffffffffffffff, r3) ioctl$sock_netdev_private(r1, 0x89f0, &(0x7f0000000140)="7c7ca1aa1bc34dba2bdccbbd3f9c9dc164e7d1a3e996c004efa472ad93e581b334baafcbcd5fc08499733d79fa308e1bb5725f9dbc7d308205716334eb747dd334d47e83e94701ed54d2b52284e5590cf015d39cab3b4e7ce6150351823bbcd839a47f322834e96410e30593c2f4a45c7d8e6895e9e8b5366f233233a9f5a051dffe8fa4c07e752bf029a5e41ccddb3c1c407641867729ed5d305725cb8f92939ad9d7a8813a2529e1be443ff3bd86fd2fd2d2f59f476068676802353836de90f567887297d9a5b71117cc0b3bf40e1c0134209a1d7615") kcmp(r3, 0x0, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) msgsnd(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0004"], 0x8, 0x0) msgrcv(0x0, &(0x7f0000000280)={0x0, ""/96}, 0x68, 0x0, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x3, 0x0, 0xffffffffffffffff, 0xee01, 0x0, 0x8, 0xb1dc}, 0x0, 0x0, 0x6, 0x80, 0x2e, 0x7fffffff, 0x3ff, 0x5c1e, 0x400, 0x3, 0x0, r3}) 01:31:17 executing program 5: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/user\x00') mount_setattr(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x100, &(0x7f0000000180)={0x100070, 0x70, 0x140000, {r0}}, 0x20) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)={0x34, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @nested={0x18, 0x0, 0x0, 0x1, [@typed={0x14, 0x0, 0x0, 0x0, @ipv6=@local}]}]}, 0x34}], 0x1}, 0x0) sendmsg$netlink(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)={0x24, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x8, 0x6e, 0x0, 0x0, @fd=r4}]}, 0x24}], 0x1, 0x0, 0x0, 0x4000}, 0x0) sendfile(r0, r3, &(0x7f00000001c0)=0xffffffff, 0x7) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r6 = dup2(r5, r2) syz_open_dev$sg(&(0x7f0000000200), 0x2, 0x2000) write$binfmt_aout(r6, &(0x7f0000000080)=ANY=[], 0x2e) ioctl$SG_IO(r6, 0x2285, &(0x7f00000022c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x6, 0x0}, &(0x7f0000001240)="05ae46670f9d", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$NS_GET_PARENT(r6, 0xb702, 0x0) write$binfmt_script(r1, 0x0, 0x144) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000000)) 01:31:17 executing program 1: r0 = syz_mount_image$tmpfs(&(0x7f0000000640), &(0x7f0000000680)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)) mknodat$loop(r0, &(0x7f0000000080)='./file0/file0\x00', 0x10, 0x1) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/reboot', 0x4000, 0x0) faccessat2(r1, &(0x7f0000000040)='./file0/file0\x00', 0x80, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x2092020, &(0x7f0000000500)='huge=,ever') 01:31:17 executing program 3: recvmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xfed0, &(0x7f0000000000)=[{&(0x7f0000003b00)=""/4097, 0x1000}], 0x1}, 0x0) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000001140)={0x1f, 0x3, 0x5, 0x7, 0x4, [{0x7, 0x6, 0x5, '\x00', 0x81}, {0xfd, 0xffff, 0x5c, '\x00', 0xb8e}, {0x1, 0x5, 0x7, '\x00', 0x380e}, {0xffff, 0x5, 0x80000000, '\x00', 0x208}]}) ioctl$SG_IO(r1, 0x2285, &(0x7f00000010c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x2, 0x1000, &(0x7f0000000000)=""/4096}, &(0x7f0000001000)="93a0cb4eef85", 0x0, 0x0, 0x0, 0x0, 0x0}) 01:31:17 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = accept$inet6(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)=0x1c) signalfd(r0, &(0x7f0000000240)={[0x10001]}, 0x8) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='cgroup2\x00', 0x0, 0x0) setxattr$security_selinux(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000180)='system_u:object_r:selinux_config_t:s0\x00', 0x26, 0x0) 01:31:17 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000022c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x6, 0x0}, &(0x7f0000001240)="05ae46670f9d", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000140)={0x1f, 0xa3a, @none, 0x3, 0x2}, 0xe) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe) r1 = dup(r0) listen(r1, 0x0) shutdown(r1, 0x1) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r6 = dup2(r5, r4) write$binfmt_aout(r6, &(0x7f0000000080)=ANY=[], 0x2e) ioctl$SG_IO(r6, 0x2285, &(0x7f00000022c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x6, 0x0}, &(0x7f0000001240)="05ae46670f9d", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$bt_l2cap(r6, &(0x7f0000000100)={0x1f, 0x3f, @none, 0x7fff}, 0xe) r7 = dup2(r3, r2) write$binfmt_aout(r7, &(0x7f0000000080)=ANY=[], 0x2e) ioctl$SG_IO(r7, 0x2285, &(0x7f00000022c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x6, 0x0}, &(0x7f0000001240)="05ae46670f9d", 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$bt_l2cap_L2CAP_OPTIONS(r7, 0x6, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0xc) [ 140.279321] audit: type=1400 audit(1756517477.904:8): avc: denied { open } for pid=3923 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 140.294318] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 140.299858] sg_write: data in/out 7497039/4 bytes for SCSI command 0x0-- guessing data in; [ 140.299858] program syz-executor.5 not setting count and/or reply_len properly [ 140.306548] audit: type=1400 audit(1756517477.904:9): avc: denied { kernel } for pid=3923 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 140.351988] sg_write: data in/out 7497039/4 bytes for SCSI command 0x0-- guessing data in; [ 140.351988] program syz-executor.5 not setting count and/or reply_len properly [ 140.361979] audit: type=1400 audit(1756517477.986:10): avc: denied { watch_reads } for pid=3929 comm="syz-executor.0" path="/syzkaller-testdir925823046/syzkaller.BxNvCT/1/file0" dev="hugetlbfs" ino=5709 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:hugetlbfs_t:s0 tclass=dir permissive=1 [ 140.390040] audit: type=1400 audit(1756517478.015:11): avc: denied { watch_reads } for pid=3929 comm="syz-executor.0" path="/syzkaller-testdir925823046/syzkaller.BxNvCT/1/file0" dev="sda" ino=16005 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 [ 140.405334] audit: type=1400 audit(1756517478.029:12): avc: denied { associate } for pid=3933 comm="syz-executor.4" name="ssh.service" dev="cgroup2" ino=1208 scontext=system_u:object_r:selinux_config_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=filesystem permissive=1 01:31:18 executing program 3: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}, 0x0, 0x0, 0x4, 0x5, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x5}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = inotify_init1(0x0) move_mount(r1, &(0x7f0000000000)='./file0/../file0\x00', 0xffffffffffffffff, &(0x7f00000000c0)='./file0/../file0\x00', 0x32) inotify_add_watch(r2, &(0x7f0000000040)='./file0/../file0\x00', 0x401) r3 = inotify_init() ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0, 0x3}) creat(&(0x7f00000001c0)='./file0/../file1\x00', 0x102) inotify_add_watch(r3, &(0x7f0000000040)='./file0\x00', 0xd400080b) [ 140.428256] tmpfs: Bad value for 'huge' 01:31:18 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xa3, 0x0, &(0x7f0000002600), 0x0, &(0x7f0000000140)) [ 140.457827] tmpfs: Bad value for 'huge' 01:31:18 executing program 0: perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44024, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x220, 0x1, 0x9, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x4, 0x0, 0x80}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x2000000) write$cgroup_netprio_ifpriomap(r0, 0x0, 0xd) close(r0) [ 140.556358] I/O error, dev loop5, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 140.557891] EXT4-fs (loop5): unable to read superblock [ 140.580606] I/O error, dev loop5, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 140.582032] EXT4-fs (loop5): unable to read superblock 01:31:27 executing program 1: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x300, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366805d8600080801000240004000f801", 0x17}], 0x0, &(0x7f0000010d00)) mknodat$loop(r0, &(0x7f0000000040)='./file1\x00', 0x4, 0x1) 01:31:27 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000022c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x6, 0x0}, &(0x7f0000001240)="05ae46670f9d", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000140)={0x1f, 0xa3a, @none, 0x3, 0x2}, 0xe) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe) r1 = dup(r0) listen(r1, 0x0) shutdown(r1, 0x1) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r6 = dup2(r5, r4) write$binfmt_aout(r6, &(0x7f0000000080)=ANY=[], 0x2e) ioctl$SG_IO(r6, 0x2285, &(0x7f00000022c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x6, 0x0}, &(0x7f0000001240)="05ae46670f9d", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$bt_l2cap(r6, &(0x7f0000000100)={0x1f, 0x3f, @none, 0x7fff}, 0xe) r7 = dup2(r3, r2) write$binfmt_aout(r7, &(0x7f0000000080)=ANY=[], 0x2e) ioctl$SG_IO(r7, 0x2285, &(0x7f00000022c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x6, 0x0}, &(0x7f0000001240)="05ae46670f9d", 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$bt_l2cap_L2CAP_OPTIONS(r7, 0x6, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0xc) 01:31:27 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4442, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x100000b, 0x13, r0, 0x0) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x17) 01:31:27 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @multicast1}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) syz_emit_ethernet(0x165, &(0x7f00000000c0)={@random="e0e15c5c5281", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @val={@val={0x9100, 0x1, 0x1, 0x4}, {0x8100, 0x5, 0x1, 0x1}}, {@ipv4={0x800, @igmp={{0x15, 0x4, 0x0, 0x1, 0x14f, 0x64, 0x0, 0x3, 0x2, 0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x44, 0x3c, 0xc0, 0x1, 0x3, [{@loopback, 0x7}, {@rand_addr=0x64010100, 0x5d}, {@remote}, {@local, 0x8}, {@empty, 0x5}, {@loopback, 0x3c5}, {@remote, 0x7}]}, @noop]}}, {0x12, 0x4, 0x0, @multicast2, "79b864f98d8bd4ef868126affb3a152020a0f5b05be6e2a6b8543384111c8aed30ae26446f498e74f75efa6c4d5823edfb5b48da2ecd54e2e486b95ed222e33988364b5b1235c39ed8916032e3415a7a6549b888990cf9fc0bdd2358437b6a88ef094c2fc4eff21c16b40e9384be42150ffdad2b03d462355922e00cacd7c228e9a1961019cac3372e39484d2d21ef73648984d25694031be26786eeba644d2c14ff72c4b6e7f87749293a1d7417986b624c316230e421d67454dbe9a69e5f17e06bf7bbeb4728d8cbfbe2bcedd2fe52ea2b416a897e544046b92097c61570ac60b1889dc495b9cccc6f36096fce5fa024b575"}}}}}, &(0x7f0000000000)={0x1, 0x3, [0x2bc, 0xb5d, 0x117, 0x4bd]}) 01:31:27 executing program 3: syz_usb_connect(0x6, 0x24, &(0x7f0000000080)=ANY=[@ANYRES16, @ANYRESHEX, @ANYRESDEC=0x0], 0x0) io_setup(0x7, &(0x7f0000000000)) 01:31:27 executing program 0: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000080)={0x7, &(0x7f0000000040)=[{0x4, 0x2, 0x0, 0x401}, {0x3b90, 0x3f, 0x7, 0x10b}, {0x200, 0x9, 0x90, 0xc0}, {0x7, 0x80, 0x6, 0x1}, {0x7, 0x8, 0x9, 0x2}, {0x0, 0x80, 0x2, 0x7}, {0x6, 0x80, 0x6, 0x5}]}, 0x10) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}}, 0x0, 0x4, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f0000000000)) 01:31:27 executing program 6: waitid(0x1, 0xffffffffffffffff, 0x0, 0x2, 0x0) io_uring_setup(0x1a35, &(0x7f0000000100)={0x0, 0x5430, 0x20, 0x3, 0x3d5}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000200)={{0x1, 0x1, 0x18}, './file0\x00'}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/hid_apple', 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280), 0x8800, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000000300), 0x80002, 0x0) 01:31:27 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000001800), 0x0) r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f0000000000)=0x12f1) r2 = fork() r3 = fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs$namespace(r3, &(0x7f0000000000)='ns/pid_for_children\x00') ioprio_get$pid(0x2, r3) ptrace(0x10, r2) ptrace$setregs(0xe, r2, 0x0, &(0x7f00000009c0)) wait4(0x0, 0x0, 0x2, &(0x7f0000000300)) r4 = memfd_secret(0x80000) fcntl$lock(r4, 0x25, &(0x7f0000000080)={0x2, 0x2, 0x3aa8, 0x6, r2}) ptrace$poke(0x5, r2, &(0x7f00000000c0), 0x80000000) clone3(&(0x7f00000002c0)={0x1720e0180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 149.608224] loop1: detected capacity change from 0 to 1 [ 149.633342] FAT-fs (loop1): unable to read boot sector (logical sector size = 2048) [ 149.657858] loop1: detected capacity change from 0 to 1 [ 149.670115] FAT-fs (loop1): unable to read boot sector (logical sector size = 2048) 01:31:27 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000022c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x6, 0x0}, &(0x7f0000001240)="05ae46670f9d", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000140)={0x1f, 0xa3a, @none, 0x3, 0x2}, 0xe) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe) r1 = dup(r0) listen(r1, 0x0) shutdown(r1, 0x1) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r6 = dup2(r5, r4) write$binfmt_aout(r6, &(0x7f0000000080)=ANY=[], 0x2e) ioctl$SG_IO(r6, 0x2285, &(0x7f00000022c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x6, 0x0}, &(0x7f0000001240)="05ae46670f9d", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$bt_l2cap(r6, &(0x7f0000000100)={0x1f, 0x3f, @none, 0x7fff}, 0xe) r7 = dup2(r3, r2) write$binfmt_aout(r7, &(0x7f0000000080)=ANY=[], 0x2e) ioctl$SG_IO(r7, 0x2285, &(0x7f00000022c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x6, 0x0}, &(0x7f0000001240)="05ae46670f9d", 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$bt_l2cap_L2CAP_OPTIONS(r7, 0x6, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0xc) 01:31:27 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000001800), 0x0) r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f0000000000)=0x12f1) r2 = fork() r3 = fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs$namespace(r3, &(0x7f0000000000)='ns/pid_for_children\x00') ioprio_get$pid(0x2, r3) ptrace(0x10, r2) ptrace$setregs(0xe, r2, 0x0, &(0x7f00000009c0)) wait4(0x0, 0x0, 0x2, &(0x7f0000000300)) r4 = memfd_secret(0x80000) fcntl$lock(r4, 0x25, &(0x7f0000000080)={0x2, 0x2, 0x3aa8, 0x6, r2}) ptrace$poke(0x5, r2, &(0x7f00000000c0), 0x80000000) clone3(&(0x7f00000002c0)={0x1720e0180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 01:31:27 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) finit_module(r0, &(0x7f00000002c0)='PPPPPP', 0x2) prlimit64(0x0, 0xf, &(0x7f0000000000)={0x451a}, 0x0) sync() clock_gettime(0x0, &(0x7f0000000100)) prlimit64(0xffffffffffffffff, 0x2, &(0x7f0000000300)={0x98, 0x40}, 0x0) select(0x40, &(0x7f0000000040)={0x4, 0x10001, 0x100000000, 0x2e, 0x401, 0x4cf1}, &(0x7f0000000080)={0x9, 0x7, 0x2, 0x8, 0x1, 0x0, 0x10000000000000, 0x3}, &(0x7f00000000c0)={0xce, 0x2, 0x0, 0x2, 0x8, 0x3, 0x0, 0x50d8fa6d}, &(0x7f0000000140)={0x0, 0xea60}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='P\x00 \x00', @ANYRES16=0x0, @ANYBLOB="00032dbd7000ffdbdf257f0000000c009900ff7f00000000000014003400521a9337fb0e549ff7ad40daad35d9040a00f5005050505050500000060048004b0000000600480039000000"], 0x50}}, 0x20000080) 01:31:27 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4442, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x100000b, 0x13, r0, 0x0) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x17) [ 149.847886] kmemleak: Found object by alias at 0x607f1a638efc [ 149.847915] CPU: 1 UID: 0 PID: 3995 Comm: syz-executor.2 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 149.847944] Tainted: [W]=WARN [ 149.847950] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 149.847962] Call Trace: [ 149.847968] [ 149.847975] dump_stack_lvl+0xca/0x120 [ 149.848013] __lookup_object+0x94/0xb0 [ 149.848040] delete_object_full+0x27/0x70 [ 149.848066] free_percpu+0x30/0x1160 [ 149.848092] ? arch_uprobe_clear_state+0x16/0x140 [ 149.848124] futex_hash_free+0x38/0xc0 [ 149.848147] mmput+0x2d3/0x390 [ 149.848188] do_exit+0x79d/0x2970 [ 149.848223] ? lock_release+0xc8/0x290 [ 149.848247] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 149.848282] ? __pfx_do_exit+0x10/0x10 [ 149.848305] ? find_held_lock+0x2b/0x80 [ 149.848333] ? get_signal+0x835/0x2340 [ 149.848366] do_group_exit+0xd3/0x2a0 [ 149.848390] get_signal+0x2315/0x2340 [ 149.848428] ? __pfx_get_signal+0x10/0x10 [ 149.848454] ? do_futex+0x135/0x370 [ 149.848477] ? __pfx_do_futex+0x10/0x10 [ 149.848502] arch_do_signal_or_restart+0x80/0x790 [ 149.848531] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 149.848558] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 149.848591] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 149.848623] ? __pfx___x64_sys_futex+0x10/0x10 [ 149.848645] ? __sys_getsockopt+0x146/0x1b0 [ 149.848680] exit_to_user_mode_loop+0x8b/0x110 [ 149.848702] do_syscall_64+0x2f7/0x360 [ 149.848721] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.848741] RIP: 0033:0x7fc879d83b19 [ 149.848756] Code: Unable to access opcode bytes at 0x7fc879d83aef. [ 149.848764] RSP: 002b:00007fc8772f9218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 149.848782] RAX: fffffffffffffe00 RBX: 00007fc879e96f68 RCX: 00007fc879d83b19 [ 149.848795] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fc879e96f68 [ 149.848807] RBP: 00007fc879e96f60 R08: 0000000000000000 R09: 0000000000000000 [ 149.848818] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc879e96f6c [ 149.848829] R13: 00007ffc42a3fb8f R14: 00007fc8772f9300 R15: 0000000000022000 [ 149.848855] [ 149.848862] kmemleak: Object (percpu) 0x607f1a638ef8 (size 8): [ 149.848873] kmemleak: comm "syz-executor.1", pid 3981, jiffies 4294816455 [ 149.848884] kmemleak: min_count = 1 [ 149.848890] kmemleak: count = 0 [ 149.848896] kmemleak: flags = 0x21 [ 149.848902] kmemleak: checksum = 0 [ 149.848909] kmemleak: backtrace: [ 149.848914] pcpu_alloc_noprof+0x87a/0x1170 [ 149.848938] __alloc_workqueue+0x74b/0x1820 [ 149.848967] alloc_workqueue_noprof+0xc7/0x200 [ 149.848982] loop_configure+0xf73/0x1590 [ 149.849005] lo_ioctl+0x66d/0x1c70 [ 149.849025] blkdev_ioctl+0x27c/0x6c0 [ 149.849054] __x64_sys_ioctl+0x18f/0x210 [ 149.849079] do_syscall_64+0xbf/0x360 [ 149.849093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.867560] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 149.909784] kmemleak: Cannot insert 0x607f1a638efc into the object search tree (overlaps existing) [ 149.909810] CPU: 1 UID: 0 PID: 3986 Comm: syz-executor.7 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 149.909847] Tainted: [W]=WARN [ 149.909854] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 149.909866] Call Trace: [ 149.909873] [ 149.909882] dump_stack_lvl+0xca/0x120 [ 149.909925] __link_object+0x190/0x210 [ 149.909956] __create_object+0x48/0x80 [ 149.909990] pcpu_alloc_noprof+0x87a/0x1170 [ 149.910040] alloc_netdev_mqs+0x131/0x1360 [ 149.910073] ? __pfx_ipip6_tunnel_setup+0x10/0x10 [ 149.910113] sit_init_net+0x19e/0x630 [ 149.910132] ? __pfx_sit_init_net+0x10/0x10 [ 149.910153] ops_init+0x1e1/0x650 [ 149.910190] setup_net+0x10d/0x320 [ 149.910222] ? lockdep_init_map_type+0x4b/0x240 [ 149.910249] ? __pfx_setup_net+0x10/0x10 [ 149.910286] ? debug_mutex_init+0x37/0x70 [ 149.910326] copy_net_ns+0x2e3/0x650 [ 149.910351] create_new_namespaces+0x3f6/0xab0 [ 149.910405] copy_namespaces+0x45c/0x580 [ 149.910444] copy_process+0x2649/0x73c0 [ 149.910471] ? lock_release+0xc8/0x290 [ 149.910511] ? __pfx_copy_process+0x10/0x10 [ 149.910534] ? __might_fault+0xe0/0x190 [ 149.910566] ? _copy_from_user+0x5b/0xd0 [ 149.910598] kernel_clone+0xea/0x7f0 [ 149.910621] ? perf_trace_run_bpf_submit+0xef/0x180 [ 149.910653] ? __pfx_kernel_clone+0x10/0x10 [ 149.910694] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 149.910740] __do_sys_clone3+0x1f5/0x280 [ 149.910782] ? __pfx___do_sys_clone3+0x10/0x10 [ 149.910824] ? perf_trace_preemptirq_template+0x259/0x430 [ 149.910862] ? __x64_sys_futex+0x1c9/0x4d0 [ 149.910887] ? __x64_sys_futex+0x1d2/0x4d0 [ 149.910912] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 149.910961] ? xfd_validate_state+0x55/0x180 [ 149.911012] do_syscall_64+0xbf/0x360 [ 149.911033] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.911054] RIP: 0033:0x7f5e18704b19 [ 149.911071] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 149.911090] RSP: 002b:00007f5e15c7a188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 149.911109] RAX: ffffffffffffffda RBX: 00007f5e18817f60 RCX: 00007f5e18704b19 [ 149.911123] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200002c0 [ 149.911135] RBP: 00007f5e1875ef6d R08: 0000000000000000 R09: 0000000000000000 [ 149.911147] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 149.911159] R13: 00007ffd01d7fcbf R14: 00007f5e15c7a300 R15: 0000000000022000 [ 149.911187] [ 149.912269] kmemleak: Kernel memory leak detector disabled [ 149.912277] kmemleak: Object (percpu) 0x607f1a638ef8 (size 8): [ 149.912289] kmemleak: comm "syz-executor.1", pid 3981, jiffies 4294816455 [ 149.912301] kmemleak: min_count = 1 [ 149.912308] kmemleak: count = 0 [ 149.912314] kmemleak: flags = 0x21 [ 149.912321] kmemleak: checksum = 0 [ 149.912327] kmemleak: backtrace: [ 149.912332] pcpu_alloc_noprof+0x87a/0x1170 [ 149.912359] __alloc_workqueue+0x74b/0x1820 [ 149.912390] alloc_workqueue_noprof+0xc7/0x200 [ 149.912406] loop_configure+0xf73/0x1590 [ 149.912428] lo_ioctl+0x66d/0x1c70 [ 149.912450] blkdev_ioctl+0x27c/0x6c0 [ 149.912479] __x64_sys_ioctl+0x18f/0x210 [ 149.912505] do_syscall_64+0xbf/0x360 [ 149.912520] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.975654] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list 01:31:27 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)={0x34, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @nested={0x18, 0x0, 0x0, 0x1, [@typed={0x14, 0x0, 0x0, 0x0, @ipv6=@local}]}]}, 0x34}], 0x1}, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8982, &(0x7f0000000080)={0x7, '\x00', {0x7ff}, 0x5}) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000040)=0x3, 0x4) sendmmsg$inet6(r0, &(0x7f0000001400)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @remote}, 0x1c, 0x0}}], 0x1, 0x0) [ 149.982231] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 149.992255] kmemleak: Automatic memory scanning thread ended [ 150.099091] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. 01:31:27 executing program 5: sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8c101, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000) truncate(&(0x7f0000000040)='./file0\x00', 0x10f2) SYZFAIL: failed to write(kmemleak, "scan") (errno 1: Operation not permitted) BUG: leak checking failed VM DIAGNOSIS: 01:31:28 Registers: info registers vcpu 0 RAX=dffffc0000000000 RBX=ffff888017acff40 RCX=ffffffff867ed102 RDX=1ffff11002f59f3c RSI=0000000000000000 RDI=ffff888017acf9e0 RBP=ffff888017acfa30 RSP=ffff888017acf968 R8 =ffffffff867ed106 R9 =ffff888017acfa18 R10=000000000003be53 R11=0000000000008817 R12=ffff888017acfa38 R13=ffff888017acfa20 R14=ffff888017acff40 R15=ffff888017acf9d8 RIP=ffffffff81359afc RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 000000c000030790 00000000 00000000 GS =0000 ffff8880e55dd000 00000000 00000000 LDT=0000 fffffe5100000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000c00f871000 CR3=000000001f90a000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000003fd3333333333333 XMM01=00000000000000003fd159c81245144a XMM02=000000000000000041abe2a90a000000 XMM03=000000c000f548100000000000000000 XMM04=000000c000f544b0000000c000f53cc0 XMM05=000000c000f544e0000000c000f54630 XMM06=000000c0015c2560000000c000f54510 XMM07=000000c000f545d0000000c000f53d80 XMM08=000000c000f54690000000c000f54390 XMM09=000000c000f543f0000000c000f543c0 XMM10=000000c000f53cc0000000c0015c24e0 XMM11=000000c000f54630000000c000f544b0 XMM12=000000c000f54510000000c000f544e0 XMM13=000000c000f53d80000000c0015c2560 XMM14=000000c000f54600000000c000f545d0 XMM15=000000c000f546c0000000c000f54660 info registers vcpu 1 RAX=0000000000000000 RBX=ffff88800972b700 RCX=dfb8078e475e76a4 RDX=0000000085cb9a3e RSI=000000008301a466 RDI=0000000081125d94 RBP=ffff88800972c158 RSP=ffff888009747720 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=ffff88800972c180 R13=0000000008cd3ea4 R14=0000000000000000 R15=dfb8078e475e76a4 RIP=ffffffff8151c012 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e56dd000 00000000 00000000 LDT=0000 fffffe1600000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f4080592720 CR3=000000001efba000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=b0f013a2233e450df637d1e838af1806 XMM02=8e13230fa93647c343ddc6785da0fd83 XMM03=ffb9dbe3132ae3fb1768b3ba0e6693c4 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=0d0c0f0e09080b0a0504070601000302 XMM07=0e0d0c0f0a09080b0605040702010003 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000