Warning: Permanently added '[localhost]:34676' (ECDSA) to the list of known hosts.
2025/09/01 01:38:17 fuzzer started
2025/09/01 01:38:17 dialing manager at localhost:43077
syzkaller login: [   50.979955] cgroup: Unknown subsys name 'net'
[   51.092846] cgroup: Unknown subsys name 'cpuset'
[   51.134194] cgroup: Unknown subsys name 'rlimit'
2025/09/01 01:38:28 syscalls: 2214
2025/09/01 01:38:28 code coverage: enabled
2025/09/01 01:38:28 comparison tracing: enabled
2025/09/01 01:38:28 extra coverage: enabled
2025/09/01 01:38:28 setuid sandbox: enabled
2025/09/01 01:38:28 namespace sandbox: enabled
2025/09/01 01:38:28 Android sandbox: enabled
2025/09/01 01:38:28 fault injection: enabled
2025/09/01 01:38:28 leak checking: enabled
2025/09/01 01:38:28 net packet injection: enabled
2025/09/01 01:38:28 net device setup: enabled
2025/09/01 01:38:28 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/09/01 01:38:28 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/09/01 01:38:28 USB emulation: enabled
2025/09/01 01:38:28 hci packet injection: enabled
2025/09/01 01:38:28 wifi device emulation: enabled
2025/09/01 01:38:28 802.15.4 emulation: enabled
2025/09/01 01:38:28 fetching corpus: 50, signal 17271/19117 (executing program)
2025/09/01 01:38:28 fetching corpus: 100, signal 30880/34337 (executing program)
2025/09/01 01:38:29 fetching corpus: 150, signal 37190/42213 (executing program)
2025/09/01 01:38:29 fetching corpus: 200, signal 43095/49533 (executing program)
2025/09/01 01:38:29 fetching corpus: 250, signal 50770/58499 (executing program)
2025/09/01 01:38:29 fetching corpus: 300, signal 54623/63708 (executing program)
2025/09/01 01:38:29 fetching corpus: 350, signal 58677/69044 (executing program)
2025/09/01 01:38:29 fetching corpus: 400, signal 61136/72800 (executing program)
2025/09/01 01:38:29 fetching corpus: 450, signal 65898/78623 (executing program)
2025/09/01 01:38:29 fetching corpus: 500, signal 70611/84378 (executing program)
2025/09/01 01:38:29 fetching corpus: 550, signal 73930/88716 (executing program)
2025/09/01 01:38:29 fetching corpus: 600, signal 76006/91914 (executing program)
2025/09/01 01:38:29 fetching corpus: 650, signal 78657/95610 (executing program)
2025/09/01 01:38:30 fetching corpus: 700, signal 80021/98125 (executing program)
2025/09/01 01:38:30 fetching corpus: 750, signal 81583/100773 (executing program)
2025/09/01 01:38:30 fetching corpus: 800, signal 84239/104367 (executing program)
2025/09/01 01:38:30 fetching corpus: 850, signal 85688/106825 (executing program)
2025/09/01 01:38:30 fetching corpus: 900, signal 87756/109795 (executing program)
2025/09/01 01:38:30 fetching corpus: 950, signal 91530/114148 (executing program)
2025/09/01 01:38:30 fetching corpus: 1000, signal 93535/116974 (executing program)
2025/09/01 01:38:30 fetching corpus: 1050, signal 94677/119124 (executing program)
2025/09/01 01:38:30 fetching corpus: 1100, signal 96410/121719 (executing program)
2025/09/01 01:38:30 fetching corpus: 1150, signal 97488/123694 (executing program)
2025/09/01 01:38:30 fetching corpus: 1200, signal 99131/126165 (executing program)
2025/09/01 01:38:30 fetching corpus: 1250, signal 101308/128978 (executing program)
2025/09/01 01:38:31 fetching corpus: 1300, signal 103231/131553 (executing program)
2025/09/01 01:38:31 fetching corpus: 1350, signal 104165/133354 (executing program)
2025/09/01 01:38:31 fetching corpus: 1400, signal 104959/135022 (executing program)
2025/09/01 01:38:31 fetching corpus: 1450, signal 106585/137340 (executing program)
2025/09/01 01:38:31 fetching corpus: 1500, signal 108154/139552 (executing program)
2025/09/01 01:38:31 fetching corpus: 1550, signal 109444/141509 (executing program)
2025/09/01 01:38:31 fetching corpus: 1600, signal 110750/143532 (executing program)
2025/09/01 01:38:31 fetching corpus: 1650, signal 112107/145547 (executing program)
2025/09/01 01:38:31 fetching corpus: 1700, signal 114044/147988 (executing program)
2025/09/01 01:38:31 fetching corpus: 1750, signal 115293/149867 (executing program)
2025/09/01 01:38:31 fetching corpus: 1800, signal 116003/151347 (executing program)
2025/09/01 01:38:31 fetching corpus: 1850, signal 117356/153302 (executing program)
2025/09/01 01:38:32 fetching corpus: 1900, signal 118501/155048 (executing program)
2025/09/01 01:38:32 fetching corpus: 1950, signal 119472/156685 (executing program)
2025/09/01 01:38:32 fetching corpus: 2000, signal 120900/158546 (executing program)
2025/09/01 01:38:32 fetching corpus: 2050, signal 122179/160333 (executing program)
2025/09/01 01:38:32 fetching corpus: 2100, signal 123383/162060 (executing program)
2025/09/01 01:38:32 fetching corpus: 2150, signal 124647/163858 (executing program)
2025/09/01 01:38:32 fetching corpus: 2200, signal 125186/165106 (executing program)
2025/09/01 01:38:32 fetching corpus: 2250, signal 126346/166737 (executing program)
2025/09/01 01:38:32 fetching corpus: 2300, signal 127238/168137 (executing program)
2025/09/01 01:38:32 fetching corpus: 2350, signal 128217/169520 (executing program)
2025/09/01 01:38:32 fetching corpus: 2400, signal 129030/170873 (executing program)
2025/09/01 01:38:32 fetching corpus: 2450, signal 129771/172185 (executing program)
2025/09/01 01:38:33 fetching corpus: 2500, signal 130653/173512 (executing program)
2025/09/01 01:38:33 fetching corpus: 2550, signal 131621/174885 (executing program)
2025/09/01 01:38:33 fetching corpus: 2600, signal 132270/176076 (executing program)
2025/09/01 01:38:33 fetching corpus: 2650, signal 132777/177165 (executing program)
2025/09/01 01:38:33 fetching corpus: 2700, signal 133838/178588 (executing program)
2025/09/01 01:38:33 fetching corpus: 2750, signal 134388/179721 (executing program)
2025/09/01 01:38:33 fetching corpus: 2800, signal 134939/180855 (executing program)
2025/09/01 01:38:33 fetching corpus: 2850, signal 135996/182300 (executing program)
2025/09/01 01:38:33 fetching corpus: 2900, signal 136743/183517 (executing program)
2025/09/01 01:38:33 fetching corpus: 2950, signal 137386/184609 (executing program)
2025/09/01 01:38:34 fetching corpus: 3000, signal 137975/185675 (executing program)
2025/09/01 01:38:34 fetching corpus: 3050, signal 138500/186693 (executing program)
2025/09/01 01:38:34 fetching corpus: 3100, signal 139462/187942 (executing program)
2025/09/01 01:38:34 fetching corpus: 3150, signal 140258/189084 (executing program)
2025/09/01 01:38:34 fetching corpus: 3200, signal 141024/190248 (executing program)
2025/09/01 01:38:34 fetching corpus: 3250, signal 141680/191361 (executing program)
2025/09/01 01:38:34 fetching corpus: 3300, signal 142698/192581 (executing program)
2025/09/01 01:38:34 fetching corpus: 3350, signal 143153/193524 (executing program)
2025/09/01 01:38:34 fetching corpus: 3400, signal 143659/194443 (executing program)
2025/09/01 01:38:34 fetching corpus: 3450, signal 144371/195506 (executing program)
2025/09/01 01:38:34 fetching corpus: 3500, signal 144896/196428 (executing program)
2025/09/01 01:38:35 fetching corpus: 3550, signal 145471/197381 (executing program)
2025/09/01 01:38:35 fetching corpus: 3600, signal 145970/198276 (executing program)
2025/09/01 01:38:35 fetching corpus: 3650, signal 146546/199249 (executing program)
2025/09/01 01:38:35 fetching corpus: 3700, signal 147036/200173 (executing program)
2025/09/01 01:38:35 fetching corpus: 3750, signal 147501/201056 (executing program)
2025/09/01 01:38:35 fetching corpus: 3800, signal 147905/201918 (executing program)
2025/09/01 01:38:35 fetching corpus: 3850, signal 148358/202784 (executing program)
2025/09/01 01:38:35 fetching corpus: 3900, signal 149430/203830 (executing program)
2025/09/01 01:38:35 fetching corpus: 3950, signal 150156/204734 (executing program)
2025/09/01 01:38:35 fetching corpus: 4000, signal 150687/205615 (executing program)
2025/09/01 01:38:35 fetching corpus: 4050, signal 151036/206414 (executing program)
2025/09/01 01:38:36 fetching corpus: 4100, signal 151447/207232 (executing program)
2025/09/01 01:38:36 fetching corpus: 4150, signal 151926/208053 (executing program)
2025/09/01 01:38:36 fetching corpus: 4200, signal 152401/208879 (executing program)
2025/09/01 01:38:36 fetching corpus: 4250, signal 153171/209744 (executing program)
2025/09/01 01:38:36 fetching corpus: 4300, signal 153574/210506 (executing program)
2025/09/01 01:38:36 fetching corpus: 4350, signal 154221/211306 (executing program)
2025/09/01 01:38:36 fetching corpus: 4400, signal 154803/212111 (executing program)
2025/09/01 01:38:36 fetching corpus: 4450, signal 155080/212792 (executing program)
2025/09/01 01:38:36 fetching corpus: 4500, signal 155515/213576 (executing program)
2025/09/01 01:38:36 fetching corpus: 4550, signal 156096/214345 (executing program)
2025/09/01 01:38:36 fetching corpus: 4600, signal 156479/215071 (executing program)
2025/09/01 01:38:37 fetching corpus: 4650, signal 156959/215831 (executing program)
2025/09/01 01:38:37 fetching corpus: 4700, signal 157324/216513 (executing program)
2025/09/01 01:38:37 fetching corpus: 4750, signal 157782/217259 (executing program)
2025/09/01 01:38:37 fetching corpus: 4800, signal 158173/217931 (executing program)
2025/09/01 01:38:37 fetching corpus: 4850, signal 158623/218602 (executing program)
2025/09/01 01:38:37 fetching corpus: 4900, signal 159116/219366 (executing program)
2025/09/01 01:38:37 fetching corpus: 4950, signal 159722/220078 (executing program)
2025/09/01 01:38:37 fetching corpus: 5000, signal 160131/220749 (executing program)
2025/09/01 01:38:37 fetching corpus: 5050, signal 160443/221417 (executing program)
2025/09/01 01:38:37 fetching corpus: 5100, signal 160858/222098 (executing program)
2025/09/01 01:38:37 fetching corpus: 5150, signal 161547/222764 (executing program)
2025/09/01 01:38:38 fetching corpus: 5200, signal 161998/223413 (executing program)
2025/09/01 01:38:38 fetching corpus: 5250, signal 162429/224035 (executing program)
2025/09/01 01:38:38 fetching corpus: 5300, signal 162879/224664 (executing program)
2025/09/01 01:38:38 fetching corpus: 5350, signal 163327/225256 (executing program)
2025/09/01 01:38:38 fetching corpus: 5400, signal 163906/225873 (executing program)
2025/09/01 01:38:38 fetching corpus: 5450, signal 164410/226472 (executing program)
2025/09/01 01:38:38 fetching corpus: 5500, signal 164954/227116 (executing program)
2025/09/01 01:38:38 fetching corpus: 5550, signal 165355/227782 (executing program)
2025/09/01 01:38:38 fetching corpus: 5600, signal 165679/228415 (executing program)
2025/09/01 01:38:38 fetching corpus: 5650, signal 166056/228895 (executing program)
2025/09/01 01:38:38 fetching corpus: 5700, signal 166388/228897 (executing program)
2025/09/01 01:38:38 fetching corpus: 5750, signal 166819/228897 (executing program)
2025/09/01 01:38:38 fetching corpus: 5800, signal 167153/228897 (executing program)
2025/09/01 01:38:39 fetching corpus: 5850, signal 167440/228899 (executing program)
2025/09/01 01:38:39 fetching corpus: 5900, signal 167997/228905 (executing program)
2025/09/01 01:38:39 fetching corpus: 5950, signal 168345/228905 (executing program)
2025/09/01 01:38:39 fetching corpus: 6000, signal 168758/228905 (executing program)
2025/09/01 01:38:39 fetching corpus: 6050, signal 169046/228907 (executing program)
2025/09/01 01:38:39 fetching corpus: 6100, signal 169325/228932 (executing program)
2025/09/01 01:38:39 fetching corpus: 6150, signal 169620/228935 (executing program)
2025/09/01 01:38:39 fetching corpus: 6200, signal 170044/228940 (executing program)
2025/09/01 01:38:39 fetching corpus: 6250, signal 170402/228944 (executing program)
2025/09/01 01:38:39 fetching corpus: 6300, signal 170581/228946 (executing program)
2025/09/01 01:38:39 fetching corpus: 6350, signal 171101/228947 (executing program)
2025/09/01 01:38:39 fetching corpus: 6400, signal 171356/228951 (executing program)
2025/09/01 01:38:39 fetching corpus: 6450, signal 171872/228956 (executing program)
2025/09/01 01:38:40 fetching corpus: 6500, signal 172263/228956 (executing program)
2025/09/01 01:38:40 fetching corpus: 6550, signal 172564/228956 (executing program)
2025/09/01 01:38:40 fetching corpus: 6600, signal 172989/228956 (executing program)
2025/09/01 01:38:40 fetching corpus: 6650, signal 173230/228956 (executing program)
2025/09/01 01:38:40 fetching corpus: 6700, signal 173579/228958 (executing program)
2025/09/01 01:38:40 fetching corpus: 6750, signal 173899/228975 (executing program)
2025/09/01 01:38:40 fetching corpus: 6800, signal 174398/228982 (executing program)
2025/09/01 01:38:40 fetching corpus: 6850, signal 174709/228983 (executing program)
2025/09/01 01:38:40 fetching corpus: 6900, signal 175021/228990 (executing program)
2025/09/01 01:38:40 fetching corpus: 6950, signal 175245/228990 (executing program)
2025/09/01 01:38:40 fetching corpus: 7000, signal 175856/228992 (executing program)
2025/09/01 01:38:40 fetching corpus: 7050, signal 176137/228998 (executing program)
2025/09/01 01:38:41 fetching corpus: 7100, signal 176478/229003 (executing program)
2025/09/01 01:38:41 fetching corpus: 7150, signal 176734/229020 (executing program)
2025/09/01 01:38:41 fetching corpus: 7200, signal 177019/229022 (executing program)
2025/09/01 01:38:41 fetching corpus: 7250, signal 177315/229022 (executing program)
2025/09/01 01:38:41 fetching corpus: 7300, signal 177807/229022 (executing program)
2025/09/01 01:38:41 fetching corpus: 7350, signal 178167/229032 (executing program)
2025/09/01 01:38:41 fetching corpus: 7400, signal 178515/229036 (executing program)
2025/09/01 01:38:41 fetching corpus: 7450, signal 178771/229078 (executing program)
2025/09/01 01:38:41 fetching corpus: 7500, signal 179075/229078 (executing program)
2025/09/01 01:38:41 fetching corpus: 7550, signal 179485/229079 (executing program)
2025/09/01 01:38:41 fetching corpus: 7600, signal 179815/229080 (executing program)
2025/09/01 01:38:41 fetching corpus: 7650, signal 180123/229094 (executing program)
2025/09/01 01:38:41 fetching corpus: 7700, signal 180385/229097 (executing program)
2025/09/01 01:38:42 fetching corpus: 7750, signal 180652/229100 (executing program)
2025/09/01 01:38:42 fetching corpus: 7800, signal 181113/229103 (executing program)
2025/09/01 01:38:42 fetching corpus: 7850, signal 181342/229104 (executing program)
2025/09/01 01:38:42 fetching corpus: 7900, signal 181612/229110 (executing program)
2025/09/01 01:38:42 fetching corpus: 7950, signal 181979/229110 (executing program)
2025/09/01 01:38:42 fetching corpus: 8000, signal 182395/229165 (executing program)
2025/09/01 01:38:42 fetching corpus: 8050, signal 182640/229166 (executing program)
2025/09/01 01:38:42 fetching corpus: 8100, signal 182990/229180 (executing program)
2025/09/01 01:38:42 fetching corpus: 8150, signal 183479/229288 (executing program)
2025/09/01 01:38:42 fetching corpus: 8200, signal 183803/229312 (executing program)
2025/09/01 01:38:42 fetching corpus: 8250, signal 184007/229317 (executing program)
2025/09/01 01:38:43 fetching corpus: 8300, signal 184298/229323 (executing program)
2025/09/01 01:38:43 fetching corpus: 8350, signal 184588/229325 (executing program)
2025/09/01 01:38:43 fetching corpus: 8400, signal 184767/229326 (executing program)
2025/09/01 01:38:43 fetching corpus: 8450, signal 185012/229326 (executing program)
2025/09/01 01:38:43 fetching corpus: 8500, signal 185233/229332 (executing program)
2025/09/01 01:38:43 fetching corpus: 8550, signal 185440/229334 (executing program)
2025/09/01 01:38:43 fetching corpus: 8600, signal 185683/229335 (executing program)
2025/09/01 01:38:43 fetching corpus: 8650, signal 186037/229342 (executing program)
2025/09/01 01:38:43 fetching corpus: 8700, signal 186253/229344 (executing program)
2025/09/01 01:38:43 fetching corpus: 8750, signal 186555/229361 (executing program)
2025/09/01 01:38:43 fetching corpus: 8800, signal 186769/229379 (executing program)
2025/09/01 01:38:44 fetching corpus: 8850, signal 186903/229379 (executing program)
2025/09/01 01:38:44 fetching corpus: 8900, signal 187104/229383 (executing program)
2025/09/01 01:38:44 fetching corpus: 8950, signal 187443/229391 (executing program)
2025/09/01 01:38:44 fetching corpus: 9000, signal 187721/229391 (executing program)
2025/09/01 01:38:44 fetching corpus: 9050, signal 187999/229396 (executing program)
2025/09/01 01:38:44 fetching corpus: 9100, signal 188231/229397 (executing program)
2025/09/01 01:38:44 fetching corpus: 9150, signal 188519/229402 (executing program)
2025/09/01 01:38:44 fetching corpus: 9200, signal 188739/229403 (executing program)
2025/09/01 01:38:44 fetching corpus: 9250, signal 189078/229409 (executing program)
2025/09/01 01:38:44 fetching corpus: 9300, signal 189331/229411 (executing program)
2025/09/01 01:38:44 fetching corpus: 9350, signal 189619/229419 (executing program)
2025/09/01 01:38:44 fetching corpus: 9400, signal 189967/229424 (executing program)
2025/09/01 01:38:45 fetching corpus: 9450, signal 190203/229484 (executing program)
2025/09/01 01:38:45 fetching corpus: 9500, signal 190490/229509 (executing program)
2025/09/01 01:38:45 fetching corpus: 9550, signal 190701/229510 (executing program)
2025/09/01 01:38:45 fetching corpus: 9600, signal 190933/229512 (executing program)
2025/09/01 01:38:45 fetching corpus: 9650, signal 191201/229515 (executing program)
2025/09/01 01:38:45 fetching corpus: 9700, signal 191377/229517 (executing program)
2025/09/01 01:38:45 fetching corpus: 9750, signal 191578/229519 (executing program)
2025/09/01 01:38:45 fetching corpus: 9800, signal 191807/229522 (executing program)
2025/09/01 01:38:45 fetching corpus: 9850, signal 192110/229523 (executing program)
2025/09/01 01:38:45 fetching corpus: 9900, signal 192480/229529 (executing program)
2025/09/01 01:38:45 fetching corpus: 9950, signal 192718/229530 (executing program)
2025/09/01 01:38:45 fetching corpus: 10000, signal 192984/229542 (executing program)
2025/09/01 01:38:46 fetching corpus: 10050, signal 193280/229579 (executing program)
2025/09/01 01:38:46 fetching corpus: 10100, signal 193445/229585 (executing program)
2025/09/01 01:38:46 fetching corpus: 10150, signal 193642/229590 (executing program)
2025/09/01 01:38:46 fetching corpus: 10200, signal 193836/229605 (executing program)
2025/09/01 01:38:46 fetching corpus: 10250, signal 194193/229607 (executing program)
2025/09/01 01:38:46 fetching corpus: 10300, signal 194481/229608 (executing program)
2025/09/01 01:38:46 fetching corpus: 10350, signal 194750/229609 (executing program)
2025/09/01 01:38:46 fetching corpus: 10400, signal 194880/229619 (executing program)
2025/09/01 01:38:46 fetching corpus: 10450, signal 195075/229620 (executing program)
2025/09/01 01:38:46 fetching corpus: 10500, signal 195290/229622 (executing program)
2025/09/01 01:38:46 fetching corpus: 10550, signal 195459/229623 (executing program)
2025/09/01 01:38:46 fetching corpus: 10600, signal 195690/229641 (executing program)
2025/09/01 01:38:46 fetching corpus: 10650, signal 195873/229641 (executing program)
2025/09/01 01:38:47 fetching corpus: 10700, signal 196190/229642 (executing program)
2025/09/01 01:38:47 fetching corpus: 10750, signal 196791/229657 (executing program)
2025/09/01 01:38:47 fetching corpus: 10800, signal 197008/229658 (executing program)
2025/09/01 01:38:47 fetching corpus: 10850, signal 197265/229658 (executing program)
2025/09/01 01:38:47 fetching corpus: 10900, signal 197462/229666 (executing program)
2025/09/01 01:38:47 fetching corpus: 10950, signal 197682/229669 (executing program)
2025/09/01 01:38:47 fetching corpus: 11000, signal 197948/229675 (executing program)
2025/09/01 01:38:47 fetching corpus: 11050, signal 198131/229678 (executing program)
2025/09/01 01:38:47 fetching corpus: 11100, signal 198320/229679 (executing program)
2025/09/01 01:38:47 fetching corpus: 11150, signal 198515/229693 (executing program)
2025/09/01 01:38:48 fetching corpus: 11200, signal 198688/229695 (executing program)
2025/09/01 01:38:48 fetching corpus: 11250, signal 198978/229703 (executing program)
2025/09/01 01:38:48 fetching corpus: 11300, signal 199183/229705 (executing program)
2025/09/01 01:38:48 fetching corpus: 11350, signal 199304/229705 (executing program)
2025/09/01 01:38:48 fetching corpus: 11400, signal 199570/229706 (executing program)
2025/09/01 01:38:48 fetching corpus: 11450, signal 199761/229707 (executing program)
2025/09/01 01:38:48 fetching corpus: 11500, signal 199920/229711 (executing program)
2025/09/01 01:38:48 fetching corpus: 11550, signal 200115/229711 (executing program)
2025/09/01 01:38:48 fetching corpus: 11600, signal 200357/229711 (executing program)
2025/09/01 01:38:48 fetching corpus: 11650, signal 200535/229713 (executing program)
2025/09/01 01:38:48 fetching corpus: 11700, signal 200771/229720 (executing program)
2025/09/01 01:38:48 fetching corpus: 11750, signal 201083/229730 (executing program)
2025/09/01 01:38:49 fetching corpus: 11800, signal 201355/229731 (executing program)
2025/09/01 01:38:49 fetching corpus: 11850, signal 201561/229739 (executing program)
2025/09/01 01:38:49 fetching corpus: 11900, signal 201795/229744 (executing program)
2025/09/01 01:38:49 fetching corpus: 11950, signal 201916/229746 (executing program)
2025/09/01 01:38:49 fetching corpus: 12000, signal 202203/229762 (executing program)
2025/09/01 01:38:49 fetching corpus: 12050, signal 202407/229773 (executing program)
2025/09/01 01:38:49 fetching corpus: 12100, signal 202613/229812 (executing program)
2025/09/01 01:38:49 fetching corpus: 12150, signal 202884/229815 (executing program)
2025/09/01 01:38:49 fetching corpus: 12200, signal 203069/229827 (executing program)
2025/09/01 01:38:49 fetching corpus: 12250, signal 203275/229831 (executing program)
2025/09/01 01:38:49 fetching corpus: 12300, signal 203403/229833 (executing program)
2025/09/01 01:38:49 fetching corpus: 12350, signal 203545/229837 (executing program)
2025/09/01 01:38:50 fetching corpus: 12400, signal 203708/229841 (executing program)
2025/09/01 01:38:50 fetching corpus: 12450, signal 203870/229843 (executing program)
2025/09/01 01:38:50 fetching corpus: 12500, signal 204095/229861 (executing program)
2025/09/01 01:38:50 fetching corpus: 12550, signal 204344/229862 (executing program)
2025/09/01 01:38:50 fetching corpus: 12600, signal 204490/229864 (executing program)
2025/09/01 01:38:50 fetching corpus: 12650, signal 204686/229870 (executing program)
2025/09/01 01:38:50 fetching corpus: 12700, signal 204910/229874 (executing program)
2025/09/01 01:38:50 fetching corpus: 12750, signal 205158/229881 (executing program)
2025/09/01 01:38:50 fetching corpus: 12800, signal 205348/229907 (executing program)
2025/09/01 01:38:50 fetching corpus: 12850, signal 205543/229907 (executing program)
2025/09/01 01:38:50 fetching corpus: 12883, signal 205642/229907 (executing program)
2025/09/01 01:38:50 fetching corpus: 12883, signal 205642/229907 (executing program)
2025/09/01 01:38:53 starting 8 fuzzer processes
01:38:53 executing program 0:
r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0)
sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x10, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008010)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff}, './file0\x00'})
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1f}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8000}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x48040)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000004c0)=[{&(0x7f0000000480)}], 0x1, &(0x7f0000000500)=[@cred={{0x1c, 0x1, 0x2, {<r2=>0x0, 0x0, <r3=>0x0}}}, @cred={{0x1c, 0x1, 0x2, {<r4=>0x0}}}], 0x40}, 0x42)
sendmmsg$unix(r1, &(0x7f0000000600)=[{{&(0x7f0000000280)=@file={0x62961356df27e43b, './file0\x00'}, 0x6e, &(0x7f00000003c0)=[{&(0x7f0000000300)="ca60e646045574847ee9c9abaef8b3d92996173ff19d1d82edd2eb2dddf74c52d66bb1e58dd8e1aa626560f0258902e6f2ef55623a4083061a98d8baaa6a4a3da0990e68024b4a3a96fb11937acb2c1aada354efb8490619d43cd9fe5835323343b3d1fa6a1bd4e8eac18fcb9737a3d87e13f38143fc0a3b7d702c359a76b3f0b93765bb5cea42064fe33ff4e56d2abef595f3187e420c1b16345498088bbf9d251cd0", 0xa3}], 0x1, &(0x7f0000000580)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, r3}}}], 0x60, 0x64004080}}], 0x1, 0x0)
clone3(&(0x7f0000001800)={0x110000, &(0x7f0000000640)=<r5=>0xffffffffffffffff, &(0x7f0000000680), &(0x7f00000006c0), {0x3b}, &(0x7f0000000700)=""/4096, 0x1000, &(0x7f0000001700)=""/137, &(0x7f00000017c0)=[r2, r4], 0x2, {r0}}, 0x58)
pread64(r5, &(0x7f0000001880)=""/224, 0xe0, 0x2)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f0000001980)=r1, 0x1)
eventfd2(0x5, 0x1)
ioctl$SCSI_IOCTL_START_UNIT(r1, 0x5)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000001a80)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001a40)={&(0x7f0000001a00)={0x30, 0x0, 0x20, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x63}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1029}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x44800)
sendmsg$NL80211_CMD_GET_MPATH(r0, &(0x7f0000001b80)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001b40)={&(0x7f0000001b00)={0x2c, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1, 0x72}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000010}, 0x10)
r6 = openat$bsg(0xffffffffffffff9c, &(0x7f0000001bc0), 0x12241, 0x0)
recvmmsg$unix(r6, &(0x7f0000008500)=[{{&(0x7f0000001c00), 0x6e, &(0x7f0000002e80)=[{&(0x7f0000001c80)=""/4096, 0x1000}, {&(0x7f0000002c80)=""/103, 0x67}, {&(0x7f0000002d00)=""/178, 0xb2}, {&(0x7f0000002dc0)=""/162, 0xa2}], 0x4, &(0x7f0000002ec0)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, <r7=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}}, {{&(0x7f0000002f40)=@abs, 0x6e, &(0x7f0000004300)=[{&(0x7f0000002fc0)=""/4096, 0x1000}, {&(0x7f0000003fc0)=""/83, 0x53}, {&(0x7f0000004040)=""/209, 0xd1}, {&(0x7f0000004140)=""/195, 0xc3}, {&(0x7f0000004240)=""/43, 0x2b}, {&(0x7f0000004280)=""/76, 0x4c}], 0x6, &(0x7f0000004380)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, <r8=>0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xe8}}, {{&(0x7f0000004480), 0x6e, &(0x7f0000004540)=[{&(0x7f0000004500)=""/26, 0x1a}], 0x1}}, {{&(0x7f0000004580), 0x6e, &(0x7f0000005a80)=[{&(0x7f0000004600)}, {&(0x7f0000004640)=""/33, 0x21}, {&(0x7f0000004680)=""/74, 0x4a}, {&(0x7f0000004700)=""/4096, 0x1000}, {&(0x7f0000005700)=""/133, 0x85}, {&(0x7f00000057c0)=""/182, 0xb6}, {&(0x7f0000005880)=""/6, 0x6}, {&(0x7f00000058c0)=""/20, 0x14}, {&(0x7f0000005900)=""/201, 0xc9}, {&(0x7f0000005a00)=""/72, 0x48}], 0xa, &(0x7f0000005b40)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}, {{&(0x7f0000005bc0), 0x6e, &(0x7f0000006f00)=[{&(0x7f0000005c40)=""/146, 0x92}, {&(0x7f0000005d00)=""/4096, 0x1000}, {&(0x7f0000006d00)=""/164, 0xa4}, {&(0x7f0000006dc0)=""/56, 0x38}, {&(0x7f0000006e00)=""/160, 0xa0}, {&(0x7f0000006ec0)}], 0x6}}, {{0x0, 0x0, &(0x7f0000007180)=[{&(0x7f0000006f80)=""/158, 0x9e}, {&(0x7f0000007040)=""/6, 0x6}, {&(0x7f0000007080)=""/242, 0xf2}], 0x3, &(0x7f00000071c0)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000007200)=@abs, 0x6e, &(0x7f0000007340)=[{&(0x7f0000007280)=""/150, 0x96}], 0x1, &(0x7f0000007380)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f00000073c0)=@abs, 0x6e, &(0x7f0000007980)=[{&(0x7f0000007440)=""/247, 0xf7}, {&(0x7f0000007540)=""/54, 0x36}, {&(0x7f0000007580)=""/229, 0xe5}, {&(0x7f0000007680)=""/216, 0xd8}, {&(0x7f0000007780)=""/118, 0x76}, {&(0x7f0000007800)=""/168, 0xa8}, {&(0x7f00000078c0)=""/130, 0x82}], 0x7, &(0x7f0000007a00)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000007a40)=@abs, 0x6e, &(0x7f0000008000)=[{&(0x7f0000007ac0)=""/220, 0xdc}, {&(0x7f0000007bc0)=""/52, 0x34}, {&(0x7f0000007c00)=""/245, 0xf5}, {&(0x7f0000007d00)=""/78, 0x4e}, {&(0x7f0000007d80)=""/95, 0x5f}, {&(0x7f0000007e00)=""/108, 0x6c}, {&(0x7f0000007e80)=""/70, 0x46}, {&(0x7f0000007f00)=""/197, 0xc5}], 0x8, &(0x7f0000008080)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, <r9=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xd0}}, {{0x0, 0x0, &(0x7f0000008440)=[{&(0x7f0000008180)=""/50, 0x32}, {&(0x7f00000081c0)=""/9, 0x9}, {&(0x7f0000008200)=""/72, 0x48}, {&(0x7f0000008280)=""/80, 0x50}, {&(0x7f0000008300)=""/246, 0xf6}, {&(0x7f0000008400)=""/26, 0x1a}], 0x6, &(0x7f00000084c0)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x38}}], 0xa, 0x40000022, &(0x7f0000008780)={0x0, 0x989680})
r10 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000008800), 0xffffffffffffffff)
sendmsg$NLBL_CALIPSO_C_LISTALL(0xffffffffffffffff, &(0x7f0000008900)={&(0x7f00000087c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000088c0)={&(0x7f0000008840)={0x44, r10, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x44}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r8, 0x89f9, &(0x7f0000008a00)={'ip6_vti0\x00', &(0x7f0000008980)={'ip6_vti0\x00', <r11=>0x0, 0x2f, 0x6, 0xd5, 0x4, 0xf7614383815577ae, @loopback, @private1, 0x7, 0x20, 0x1ff, 0x8000}})
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r9, 0x89fa, &(0x7f0000008ac0)={'syztnl0\x00', &(0x7f0000008a40)={'syztnl0\x00', <r12=>0x0, 0x2f, 0x7f, 0x80, 0x6f0c135a, 0x4, @ipv4={'\x00', '\xff\xff', @remote}, @empty, 0x40, 0x7800, 0x0, 0x9}})
sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r7, &(0x7f0000008dc0)={&(0x7f0000008940)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000008d80)={&(0x7f0000008b00)={0x250, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x250}, 0x1, 0x0, 0x0, 0x84}, 0x411)

01:38:53 executing program 1:
keyctl$revoke(0x3, 0x0)
keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000000)={0x0, 0xbb, 0xd5}, &(0x7f0000000040)={'enc=', 'pkcs1', ' hash=', {'sha224-avx\x00'}}, &(0x7f00000000c0)="c89783d4b16ef29e455f143af6cdd4e43b0a44cc8953fbfcc122f0406e7112abc9e043ad6a224ca687ec080d01853426006865997591526acb772db41d3436f09b17b1b0a1c0c7a73a91a6b223f69475f49f5576557426903faffdb1470125bcfafee1790934e065a5ffbd301ba94cf3d9ebb1a988000dfc1f1e5901d0f4edf4a317e0b5533dbc2ae731e0373bfae9e0e454cf575aee44612ef56f1ca2003d929b5792e19582e74fb7eaf3476c9a6bc6f0bbba3fe89f705bc3f9ec", &(0x7f0000000180)=""/213)
keyctl$get_keyring_id(0x0, 0x0, 0x1)
keyctl$update(0x2, 0x0, 0x0, 0x0)
keyctl$get_keyring_id(0x0, 0x0, 0x5)
r0 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc3}, &(0x7f0000000480)={0x0, "1f9bcff608353445037036dc37b0389e1c2af5003f79ba59e0df568008a0d497fa22202da5e4a1f55f90bffae7c1028bf72b11c3ee131949ca5a3c0cda6656f4", 0x29}, 0x48, 0xffffffffffffffff)
add_key$user(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000000300)="b4f0518fd7657c1c572c801c52f75999fdd15b552cd28c0deea2566885fe141bac85d413ed94324b4bce007adc0e518fd4c3621ce0d70114d61b3240b7e44899849f7e4682e7b57a197231cb9c66a62b86a085c5a6661d801bb58bd64b7fe2e17db491ff9b6ea83d1cf8f6495e1ae960ee2a1659d22f3354b44127415245dc8b98e3926a6769758a4be5d70bc046c281cd4d848a57916820fff0d911fde2cd29f5838c6cae0ad8a3c42ce3941c8f7b04f37c6d236051f0cd64b9b8ad570a8adcb830ef55723f6d16cac4b856d75ff0125ba0ef18805c76ecd836af8ce67c74145e4edbde46", 0xe5, r0)
keyctl$get_security(0x11, r0, &(0x7f0000000500)=""/223, 0xdf)
r1 = request_key(&(0x7f0000000600)='keyring\x00', &(0x7f0000000640)={'syz', 0x2}, &(0x7f0000000680)='e8dab99234bb312e', 0xfffffffffffffffa)
r2 = request_key(&(0x7f00000006c0)='logon\x00', &(0x7f0000000700)={'syz', 0x1}, &(0x7f0000000740)='keyring\x00', r1)
r3 = request_key(&(0x7f0000000780)='id_legacy\x00', &(0x7f00000007c0)={'syz', 0x1}, &(0x7f0000000800)='sha224-avx\x00', r2)
r4 = getuid()
keyctl$chown(0x4, r2, r4, 0xffffffffffffffff)
r5 = request_key(&(0x7f00000008c0)='blacklist\x00', &(0x7f0000000900)={'syz', 0x3}, &(0x7f0000000940)='id_legacy\x00', r2)
keyctl$search(0xa, r3, &(0x7f0000000840)='.dead\x00', &(0x7f0000000880)={'syz', 0x0}, r5)
syz_mount_image$ext4(&(0x7f0000000980)='ext2\x00', &(0x7f00000009c0)='./file0\x00', 0x7, 0x4, &(0x7f0000000c40)=[{&(0x7f0000000a00)="3726388dc1f962d32f33412ba6b344145ef1f7a3f15a4d2ea1f65f01322c567f94213d1f5dcbe97551d641691c908054bd801aa7078182a266d22e1e9c5f5cd8fe644f5c3b4cdae005bc82fcd3db321a6a507b0632021e152a57408d3625f59acd129a11a240b74df4387138158b88234ee516679a405067e51b4afee286325d4ef017a5a8c482db7a5abdde7b08efbd3a76abe6714373b176547e76193627992aacfeb7a2fec6d7b07792824f6ff20a81290b7bbe60373680d21bc3a3b6a5958fd374947d14d9a3afc803d48b9089e811ee3b996c634302bf638572817379fc8ba0451b887dc2cdf0c5f60f4893326177e10474282a89", 0xf7, 0x70ab}, {&(0x7f0000000b00)="c4b52aae5b717ff347c51a30877266df635485b742c1ee19943056bc0d16449146ace4199b9f737d82f8e5c597bde90a", 0x30, 0x39cd}, {&(0x7f0000000b40)="a01bd8e625a01a97e092808534fb23a129cb0ae2d60813881ee0f67080c0757840fe926c5a1edfbfeab0751fb534f8bd267a67da3b2864d65b978eace54acdd805a30880c5d1ef9d49cc37e35a2fa94dbe657852a95b6f929426277cc1da5b546b8b0e58096db31ca6897722ac30b52751d444c41fad3e305d57a7b707f79b232306ed2ca156b1605f5596c640cc0384a5419cc0a09663a8965da4fdebd5dd3ae18434a16fb0e191a605ff5e19ed5181da36de697b7925", 0xb7, 0x8}, {&(0x7f0000000c00)="14727aafdf509b73e58e0cb30116ae4d2760792efba8370a8226485f0e59a7f9033b15", 0x23, 0x80}], 0x1000000, &(0x7f0000000cc0)={[{@usrquota}, {@prjquota}], [{@permit_directio}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@uid_eq={'uid', 0x3d, r4}}, {@fowner_lt={'fowner<', r4}}, {@smackfsroot={'smackfsroot', 0x3d, 'keyring\x00'}}]})
r6 = add_key$fscrypt_v1(&(0x7f0000000dc0), &(0x7f0000000e00)={'fscrypt:', @desc2}, &(0x7f0000000e40)={0x0, "63c90cebf2102ab1ac6729bd555d8463fe0f3a0d19526b7fb6662514a50f89175a8530bfd1e965ee4f675e595a61889a6cd97120ec33091278cc08a99663dda1", 0x2b}, 0x48, r1)
request_key(&(0x7f0000000d40)='trusted\x00', &(0x7f0000000d80)={'syz', 0x0}, 0xffffffffffffffff, r6)
keyctl$update(0x2, 0x0, &(0x7f0000000ec0)="1ceca2565e31507ee8aa4cdf293f0d26ab4755d34309f0f1b0c73bb1113faf8ab602908dd7463f272a71d8febbc950e62a9ebeaa4c56222405577c54dd8f0688a974608b68331c239533b2ed0e407284648530095c173145c54334d33271f0de060fbdcf1dcb889600ec0ed65c7b8493c5fdbf319e4dea2a60ae27b73dfd5918076ffc4c8da5870ff1c816ddf30c6e2a1826cca54cb8e9d0d091a127175695b5b3925d5ee136c571fa2d60972e93b5ca32ea87e2956fe9804face029bee1022337d39aeeca10e329d6ac8ccfee779b2cbdd28e1935a05fbb0769", 0xda)
keyctl$search(0xa, 0x0, &(0x7f0000001080)='logon\x00', &(0x7f00000010c0)={'syz', 0x1}, r0)

01:38:53 executing program 3:
ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, &(0x7f0000000000)=0x401)
ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x482000, 0x2)
ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f0000000080)=0x2)
r1 = syz_open_dev$mouse(&(0x7f00000000c0), 0x1, 0x8000)
ioctl$TIOCNOTTY(r1, 0x5422)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
r3 = syz_open_dev$sg(&(0x7f0000001e00), 0xb9, 0x802)
ioctl$SG_EMULATED_HOST(r3, 0x2203, &(0x7f0000001e40))
fstat(r2, &(0x7f0000001f00)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
mount$9p_fd(0x0, &(0x7f0000001e80)='./file0\x00', &(0x7f0000001ec0), 0x8, &(0x7f0000001f80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '/dev/sg#\x00'}}, {@privport}, {@access_client}, {@mmap}, {@access_any}, {@noextend}, {@cache_none}, {@access_user}, {@dfltuid={'dfltuid', 0x3d, r4}}], [{@fscontext={'fscontext', 0x3d, 'user_u'}}, {@dont_appraise}]}})
ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000002080))
ioctl$SG_GET_PACK_ID(r2, 0x227c, &(0x7f00000020c0))
ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0)
write$P9_RVERSION(r0, &(0x7f0000002100)={0x15, 0x65, 0xffff, 0x4, 0x8, '9P2000.L'}, 0x15)
ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000002140))
write$P9_RREADDIR(r2, &(0x7f0000002180)={0x8d, 0x29, 0x1, {0xf69, [{{0x2, 0x2, 0x5}, 0x9, 0x9, 0x7, './file0'}, {{0x80, 0x4, 0x5}, 0x1f, 0xff, 0x7, './file0'}, {{0x0, 0x4, 0x2}, 0x0, 0xcf, 0xd, './file0/file0'}, {{0x20, 0x3, 0x8}, 0x7, 0x0, 0x7, './file0'}]}}, 0x8d)
syz_open_dev$sg(&(0x7f0000002240), 0x9, 0x80000)
creat(&(0x7f0000002280)='./file0/file0\x00', 0x12c)
ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000005940)={0x0, 0xfffffffffffffffd, 0x1000, 0x0, @scatter={0xa, 0x0, &(0x7f0000004800)=[{&(0x7f0000002300)=""/113, 0x71}, {&(0x7f0000002380)=""/229, 0xe5}, {&(0x7f0000002480)=""/4096, 0x1000}, {&(0x7f0000003480)=""/114, 0x72}, {&(0x7f0000003500)=""/99, 0x63}, {&(0x7f0000003580)=""/187, 0xbb}, {&(0x7f0000003640)=""/255, 0xff}, {&(0x7f0000003740)=""/39, 0x27}, {&(0x7f0000003780)=""/4096, 0x1000}, {&(0x7f0000004780)=""/103, 0x67}]}, &(0x7f00000048c0)="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", &(0x7f00000058c0)=""/59, 0x8, 0x10000, 0x3, &(0x7f0000005900)})

01:38:53 executing program 2:
r0 = getuid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={<r1=>0x0}, &(0x7f0000000040)=0xc)
msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000080)={{0x0, 0xffffffffffffffff, 0xee01, r0, 0x0, 0x40, 0x5}, 0x0, 0x0, 0x5, 0x20, 0x1ff, 0x7fffffff, 0x7fffffff, 0x0, 0x8, 0x200, r1})
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000140)=0x1c)
ioctl$sock_proto_private(0xffffffffffffffff, 0x89e8, &(0x7f0000000180)="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")
ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f0000001180))
ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f00000011c0)={'vcan0\x00', {0x2, 0x0, @local}})
ioctl$F2FS_IOC_START_ATOMIC_WRITE(0xffffffffffffffff, 0xf501, 0x0)
getsockname(0xffffffffffffffff, &(0x7f0000001200)=@in={0x2, 0x0, @local}, &(0x7f0000001280)=0x80)
r2 = accept4(0xffffffffffffffff, 0x0, &(0x7f00000012c0), 0x800)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000001300)={{0x1, 0x1, 0x18, <r3=>r2, {<r4=>r2}}, './file0\x00'})
mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x78)
getsockopt$sock_timeval(r2, 0x1, 0x42, &(0x7f0000001340), &(0x7f0000001380)=0x10)
ioctl$sock_ifreq(r4, 0x8925, &(0x7f00000013c0)={'wg2\x00', @ifru_mtu})
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001500)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001400)="bdba67d7f72631b8bf0eecf006d1531e4f7c58b9501417ae944086ce7a7adab4fd166df2d4aa659e14865288566ce9e1f0ebec9d409bcb36bf592cbf35045a3457d2b55a16f89eb2b00bdc14c291c862fcda8b50c03248d546d57fd3edb6d6662591c9cfaf19919876020ea4c4aa7895665787bc2c2c45803ead94db682f33c6ce1afad0ac7a106929b64d728ab22f289c601e1cb69833995209bc69db42ac0e32a43cc706da5799be8d6c135fce29f635eaad6a0af342de4b18d48abe542afa9e13cc21d0b83f0a9eba2567cde29ac24a3df44a1aca62954e6e3ada8448c577d6a7096ab0019526aff26ef3", 0xec, r4}, 0x68)
syz_mount_image$ext4(&(0x7f0000001580)='ext3\x00', &(0x7f00000015c0)='./file0\x00', 0x3, 0x4, &(0x7f0000001800)=[{&(0x7f0000001600)="8f52a150ea446e065ab5ce5f533d491a2f1b4c471c17832effb6a190d218ffae4040d41f58d6ba6f4cb6e382207f9b4590dac33cc05b92bb6cf2ac4e9b74b795c9b8af068357097fc3380d07bd96065b687c37d02474b650d925ae5d4fd60885bec51205fcc822b3fb8b6052", 0x6c, 0x6}, {&(0x7f0000001680)="2494fd3313e7818758ea539d97101d1c7fe546cdc5b2d66d8b5c3247b959da4fe7e395bf88d8c9e26a1d570999cbf65b8235db1793150bf06505a11426a7c582ee49766c8badd13406ce5b2a00d1784aad3ccb939f3395", 0x57, 0x86cd}, {&(0x7f0000001700)="40e1c99e3d1487b65af734b4439e761410a7975f8ae7a181c190e63e91da987240283fbc736a6d57b54b4a2bbac9e87ac77596fe1ff58f961fb91cdddd1c845eb5662ab17535834bf505b232a0a9ac717225c08be0064e1bd920309be8128d65f26e07baa952d180e4049bb43a790604530948d3a0040464ed", 0x79, 0x3}, {&(0x7f0000001780)="1c4ef63c7d9fe5ffe3c8be1b776927d7f6c7d4a0567d68ae64edb61afe4ce07f77a2d7b112f952260eea6550548de07b00e61403d36d2598861fd4566a49dbb5eaa1021c848cc7a154d1fa6964b763aa745d2185b354332a509fdfe0a1752f6febb17eb9a6d5c0151f32ad9caad326b2f3ef", 0x72, 0x2}], 0x811012, &(0x7f0000001880)={[{}, {}, {@grpid}], [{@subj_type={'subj_type', 0x3d, 'vcan0\x00'}}, {@obj_type={'obj_type', 0x3d, '['}}, {@smackfshat={'smackfshat', 0x3d, 'vcan0\x00'}}, {@subj_user={'subj_user', 0x3d, 'wg2\x00'}}]})
ioctl$sock_inet_SIOCGIFDSTADDR(r4, 0x8917, &(0x7f0000001900)={'ip6gretap0\x00'})
setsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000001940)={{{@in=@broadcast, @in=@loopback, 0x4e22, 0x0, 0x4e21, 0x40, 0x2, 0xc0, 0x80, 0x87, 0x0, r0}, {0x122, 0x8001, 0x32c1, 0x8, 0x8, 0x200, 0x3, 0x3}, {0x1, 0x3, 0x100000001, 0x6}, 0x2, 0x6e6bbd, 0x1, 0x0, 0x1, 0x2}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d3, 0x2b}, 0xa, @in6=@private2, 0x3507, 0x3, 0x0, 0x6, 0x800, 0x6, 0x6}}, 0xe8)
ioctl$PTP_PIN_GETFUNC(r4, 0xc0603d06, &(0x7f0000001a40)={'\x00', 0x200, 0x3, 0x3})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000001b00)={{{@in=@dev, @in6=@private2}}, {{}, 0x0, @in6=@mcast2}}, &(0x7f0000001c00)=0xe8)

01:38:53 executing program 4:
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000480)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x100, 0x2}}, './file0\x00'})
setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f00000004c0)={@empty, @multicast2, @multicast2}, 0xc)
clock_gettime(0x0, &(0x7f0000000c00)={<r1=>0x0, <r2=>0x0})
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000500)=""/169, 0xa9}, {&(0x7f00000005c0)=""/8, 0x8}, {&(0x7f0000000600)=""/238, 0xee}, {&(0x7f0000000700)=""/214, 0xd6}, {&(0x7f0000000800)=""/81, 0x51}, {&(0x7f0000000880)=""/16, 0x10}, {&(0x7f00000008c0)=""/249, 0xf9}, {&(0x7f00000009c0)=""/52, 0x34}, {&(0x7f0000000a00)=""/126, 0x7e}], 0x9, &(0x7f0000000b40)=[@rights={{0x34, 0x1, 0x1, [<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff, 0xffffffffffffffff, <r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}], 0x1, 0x40000040, &(0x7f0000000c40)={r1, r2+10000000})
getsockname(r4, &(0x7f0000000c80)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @initdev}}, &(0x7f0000000d00)=0x80)
ioctl$FS_IOC_READ_VERITY_METADATA(r3, 0xc0286687, &(0x7f0000000dc0)={0x3, 0x7, 0x7f, &(0x7f0000000d40)=""/127})
clock_gettime(0x0, &(0x7f0000000ec0)={<r9=>0x0, <r10=>0x0})
pselect6(0x40, &(0x7f0000000e00)={0x7, 0x8, 0x1344, 0x1, 0x8, 0x56b, 0x6, 0x4}, &(0x7f0000000e40)={0x2, 0x80000000, 0x10000, 0x6, 0x4, 0x9, 0x3, 0x8}, &(0x7f0000000e80)={0x3, 0x3, 0xa, 0x0, 0x8, 0xfffffffffffffff8, 0x8}, &(0x7f0000000f00)={r9, r10+60000000}, &(0x7f0000000f80)={&(0x7f0000000f40)={[0x40]}, 0x8})
clock_gettime(0x7, &(0x7f0000000fc0))
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r8, 0xc018937c, &(0x7f0000001000)={{0x1, 0x1, 0x18, <r11=>r6}, './file0\x00'})
mknodat$null(r11, &(0x7f0000001040)='./file0\x00', 0x400, 0x103)
ppoll(&(0x7f0000001080)=[{}, {r5, 0x4000}], 0x2, &(0x7f00000010c0), &(0x7f0000001100)={[0x8001]}, 0x8)
rt_sigtimedwait(&(0x7f0000001140)={[0x10000]}, &(0x7f0000001180), &(0x7f0000001200)={0x0, 0x3938700}, 0x8)
r12 = openat$sr(0xffffffffffffff9c, &(0x7f0000001240), 0x2000, 0x0)
ioctl$AUTOFS_IOC_EXPIRE(r12, 0x810c9365, &(0x7f0000001280)={{0x7ff, 0xffff}, 0x100, './file1\x00'})
clock_gettime(0x4, &(0x7f00000013c0))
setsockopt$inet_mreqsrc(r8, 0x0, 0x25, &(0x7f0000001400)={@remote, @multicast2, @remote}, 0xc)
r13 = openat$hpet(0xffffffffffffff9c, &(0x7f0000001440), 0x10002, 0x0)
r14 = syz_open_dev$usbmon(&(0x7f0000001480), 0xff, 0x20200)
io_uring_register$IORING_REGISTER_FILES(r13, 0x2, &(0x7f00000014c0)=[r14, r7, r8, r12, r11], 0x5)

01:38:53 executing program 5:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000000))
sendmsg$AUDIT_SET_FEATURE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x3fa, 0x10, 0x70bd27, 0x25dfdbff, {0x1, 0x0, 0x1, 0x1}, ["", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40114}, 0x400c000)
sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x60, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'gretap0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'nr0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x60}, 0x1, 0x0, 0x0, 0x24008801}, 0x40010)
setsockopt$inet6_int(r0, 0x29, 0x1, &(0x7f0000000280)=0x9000000, 0x4)
getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f00000002c0)={'ah\x00'}, &(0x7f0000000300)=0x1e)
r1 = signalfd(r0, &(0x7f0000000400)={[0x2]}, 0x8)
sendmsg$NL80211_CMD_DEL_TX_TS(r1, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4010000}, 0x200400c4)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
write$binfmt_aout(r2, &(0x7f0000000540)={{0x10b, 0x0, 0x1f, 0x266, 0x390, 0x1, 0x33b, 0x1f}, "d4ccab6fdb4a2b42a5ca4bbe0ad24bca4d8e60148d080a74ead37779644367fdd8edf169e0748c1381ce89fa1fe7a4c084ade248d3f1d458175c3e40cc87572187467a553cc45712d38c254af17e5f81fd62aa78ac14a8effe108e1d23042431e6f43f35fbbec9c62ea389600d29c8b3d7ceabb73dce40da6a88d1d324a692eb833333ae789cc90f54877defe5687c72ec32f33696020f84054fa60a6d389f39aa115bdb7d40a568356da08b75bd71ab175b651e1af6cc4e851627f3", ['\x00']}, 0x1dc)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x1001200}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24008080}, 0x10)
close(r1)
r3 = signalfd(0xffffffffffffffff, &(0x7f0000000840)={[0x8]}, 0x8)
getsockopt$IP6T_SO_GET_REVISION_MATCH(r1, 0x29, 0x44, &(0x7f0000000880)={'ipvs\x00'}, &(0x7f00000008c0)=0x1e)
sendmsg$NL80211_CMD_TDLS_MGMT(r3, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x44, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x4, 0x14}}}}, [@NL80211_ATTR_IE={0x7, 0x2a, [@challenge={0x10, 0x1, 0x15}]}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0xffffffe0}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x4}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x7fa}]}, 0x44}}, 0x8000)
ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000001b00)={{0x1, 0x1, 0x18, <r4=>r1, {0xfee}}, './file0\x00'})
getsockopt$IP6T_SO_GET_REVISION_MATCH(r4, 0x29, 0x44, &(0x7f0000001b40)={'HL\x00'}, &(0x7f0000001b80)=0x1e)
r5 = accept4$inet6(r1, &(0x7f0000001bc0)={0xa, 0x0, 0x0, @dev}, &(0x7f0000001c00)=0x1c, 0x580655a239fb7516)
signalfd(r5, &(0x7f0000001c40)={[0x8cd5]}, 0x8)
ioctl$EXT4_IOC_GROUP_EXTEND(r3, 0x40086607, &(0x7f0000001c80)=0x7)

[   87.032838] audit: type=1400 audit(1756690733.718:7): avc:  denied  { execmem } for  pid=272 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
01:38:53 executing program 6:
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={<r0=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000080)={r0, 0x7, 0xffffffffffffffff, 0x2, 0x80000})
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x40a00, 0x0)
r2 = fsmount(r1, 0x0, 0x1)
pread64(r2, &(0x7f0000000100)=""/62, 0x3e, 0x4)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000140)={<r3=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f00000001c0)={r3, 0x1, r1, 0x9, 0x80000})
ioctl$CDROM_GET_CAPABILITY(0xffffffffffffffff, 0x5331)
r4 = syz_open_dev$mouse(&(0x7f0000000200), 0xfffffffffffffffc, 0x410100)
ioctl$F2FS_IOC_RESIZE_FS(r4, 0x4008f510, &(0x7f0000000240)=0xad8a)
ioctl$FS_IOC_READ_VERITY_METADATA(r2, 0xc0286687, &(0x7f0000000340)={0x0, 0xa5b8, 0x96, &(0x7f0000000280)=""/150})
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000380)={{0x1, 0x1, 0x18, <r5=>r2, {0x10001}}, './file0\x00'})
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), r1)
sendmsg$TIPC_NL_BEARER_SET(r5, &(0x7f0000000600)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x150, r6, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0xc4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'ib', 0x3a, 'veth0_to_batadv\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'geneve1\x00'}}, @TIPC_NLA_BEARER_NAME={0x16, 0x1, @l2={'eth', 0x3a, 'veth1_macvtap\x00'}}, @TIPC_NLA_BEARER_NAME={0x12, 0x1, @l2={'ib', 0x3a, 'syzkaller0\x00'}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'veth1\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'tunl0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x84}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x20}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xf7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffff8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3ff}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1cb}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x80000000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x800}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x200}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r7 = fsmount(r4, 0x0, 0x4)
ioctl$CDROM_SEND_PACKET(r7, 0x5393, &(0x7f0000000740)={"899106f24a24a54d142b586e", &(0x7f0000000640)="e7d2b1c7a5a96eb0389ffd5e0c1344b7ab8b2a30be09dcd830a0f50389af1eb9005a069c5a2c2f20b478ac8711f1834b5f63e87ec356cf34d8375297f0f3e31828cd99ebe0ff92b5f9d2b8b1446d0228ef2e5008095fea7e", 0x58, 0x1000, &(0x7f00000006c0)={0x4, 0x1, 0x81, 0xf, 0x0, 0x1, 0x0, "a749f6b5", 0x4, "777fe336", 0xac, 0x3, 0x6, "8b9f7d", "60cd8680d00125df699b3d3bd4987615c3abc9479a6e22504666a697873a82babb4dbd1aa0537adfd9ad8117e97c"}, 0x0, 0x3, 0x0, &(0x7f0000000700)})
pipe(&(0x7f0000000780)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
ioctl$SG_GET_NUM_WAITING(r8, 0x227d, &(0x7f00000007c0))
getsockopt$IPT_SO_GET_ENTRIES(r4, 0x0, 0x41, &(0x7f0000000800)={'nat\x00', 0x40, "3b4ce9860c1683d072009b4f2f727c51a0e8a29c26e55976c8ed50637e7575a30fb189be3c423261c8999c76dd090bcdbde161b09315a91e59e9b4c420b0e0d8"}, &(0x7f0000000880)=0x64)
ioctl$BTRFS_IOC_SYNC(r9, 0x9408, 0x0)

01:38:53 executing program 7:
r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80588}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x7c, r0, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x4c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x80000001}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4}, @ETHTOOL_A_BITSET_MASK={0x32, 0x5, "97ca2adc61c81c2d7910816a496066ae7869a7f176f33c201f384eb2ceca84839e1afc01ae1126c9b469988164ef"}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8800}, 0x1)
sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x50, 0x0, 0x8, 0x70bd25, 0x25dfdbff, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x1b}}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x2e}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}]}, 0x50}, 0x1, 0x0, 0x0, 0x880}, 0x840)
sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x0, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e22}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000008}, 0x40840)
sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, 0x0, 0x300, 0x70bd2b, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0xfff}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x48041}, 0x0)
ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000500)={0x0, @l2tp={0x2, 0x0, @multicast2, 0x1}, @can={0x1d, <r1=>0x0}, @phonet={0x23, 0x2, 0x20, 0x5}, 0x9, 0x0, 0x0, 0x0, 0x200, &(0x7f00000004c0)='veth1_to_bond\x00', 0x6, 0x100000001, 0x80})
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000005c0), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000680)={'tunl0\x00', &(0x7f0000000600)={'syztnl0\x00', <r3=>r1, 0x7, 0x40, 0x8, 0x5, {{0x12, 0x4, 0x1, 0x1, 0x48, 0x67, 0x0, 0x3, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101, {[@ra={0x94, 0x4}, @timestamp_addr={0x44, 0xc, 0x88, 0x1, 0x1, [{@empty, 0x4}]}, @ssrr={0x89, 0x13, 0xe0, [@local, @private=0xa010100, @loopback, @rand_addr=0x64010100]}, @cipso={0x86, 0xf, 0x2, [{0x6, 0x9, "b535350b9692c2"}]}, @end]}}}}})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000740)={'ip6gre0\x00', &(0x7f00000006c0)={'ip6gre0\x00', <r4=>r1, 0x29, 0x0, 0x40, 0x80, 0x39, @private1={0xfc, 0x1, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7800, 0x690e1b2e81ef33e9, 0x0, 0x8}})
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000780)={'wg0\x00', <r5=>0x0})
sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000900)={&(0x7f00000007c0)={0x130, r2, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}]}, 0x130}}, 0x40)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000980)={{{@in6=@dev, @in=@dev}}, {{@in6=@initdev}, 0x0, @in=@multicast2}}, &(0x7f0000000a80)=0xe8)
r6 = openat2(0xffffffffffffff9c, &(0x7f0000000ac0)='./file0\x00', &(0x7f0000000b00)={0xd0803, 0x120, 0x18}, 0x18)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r6, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x1c, 0x0, 0x2, 0x70bd25, 0x25dfdbff, {}, [@ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x4)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000c80)={'vxcan1\x00', <r7=>0x0})
sendmsg$ETHTOOL_MSG_EEE_GET(r6, &(0x7f0000000e00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0xe0, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}]}]}, 0xe0}}, 0x4)
r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4000004, 0x810, r6, 0x0)
syz_io_uring_submit(r8, 0x0, &(0x7f0000000ec0)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, r6, &(0x7f0000000e40)={0x80000, 0x132, 0x8}, &(0x7f0000000e80)='./file0\x00', 0x18, 0x0, 0x365cf}, 0x1ff)
sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r6, &(0x7f0000000fc0)={&(0x7f0000000f00), 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x14, 0x3, 0x2, 0x5, 0x0, 0x0, {0x7, 0x0, 0x7}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x40)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000037c0)={'gretap0\x00', &(0x7f0000003700)={'syztnl2\x00', 0x0, 0x1, 0x700, 0xa, 0x6, {{0x22, 0x4, 0x3, 0x6, 0x88, 0x66, 0x0, 0x34, 0x4, 0x0, @broadcast, @multicast1, {[@lsrr={0x83, 0x17, 0x1c, [@multicast1, @dev={0xac, 0x14, 0x14, 0x28}, @empty, @local, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_prespec={0x44, 0x4c, 0x84, 0x3, 0x6, [{@local, 0xffff}, {@broadcast, 0x1919}, {@loopback, 0x55}, {@local, 0x3}, {@dev={0xac, 0x14, 0x14, 0x27}, 0xffffffc0}, {@empty, 0xffff}, {@remote}, {@private=0xa010101, 0x9f}, {@multicast1, 0x8}]}, @ra={0x94, 0x4}, @cipso={0x86, 0xd, 0x0, [{0x4, 0x7, "8bc1c51352"}]}]}}}}})

[   88.232552] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   88.234315] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   88.236619] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   88.240223] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   88.243486] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   88.291070] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   88.296359] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   88.298848] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   88.302547] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   88.305823] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   88.378169] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   88.380851] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   88.382221] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   88.387376] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   88.391800] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   88.442107] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   88.444824] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   88.446913] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   88.448686] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   88.452413] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   88.456219] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   88.459350] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   88.463022] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   88.468910] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   88.470211] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   88.486686] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   88.488769] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   88.505678] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   88.508924] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   88.513577] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   88.521108] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[   88.532014] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[   88.539802] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[   88.540880] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[   88.555728] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[   88.558485] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[   88.571579] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[   88.576738] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[   88.583577] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[   88.603695] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[   90.262941] Bluetooth: hci0: command tx timeout
[   90.326700] Bluetooth: hci1: command tx timeout
[   90.454753] Bluetooth: hci2: command tx timeout
[   90.519004] Bluetooth: hci4: command tx timeout
[   90.520169] Bluetooth: hci3: command tx timeout
[   90.584555] Bluetooth: hci5: command tx timeout
[   90.646815] Bluetooth: hci6: command tx timeout
[   90.710525] Bluetooth: hci7: command tx timeout
[   92.311690] Bluetooth: hci0: command tx timeout
[   92.374570] Bluetooth: hci1: command tx timeout
[   92.502581] Bluetooth: hci2: command tx timeout
[   92.566805] Bluetooth: hci3: command tx timeout
[   92.567694] Bluetooth: hci4: command tx timeout
[   92.630538] Bluetooth: hci5: command tx timeout
[   92.694683] Bluetooth: hci6: command tx timeout
[   92.758608] Bluetooth: hci7: command tx timeout
[   94.358688] Bluetooth: hci0: command tx timeout
[   94.422608] Bluetooth: hci1: command tx timeout
[   94.552546] Bluetooth: hci2: command tx timeout
[   94.614557] Bluetooth: hci4: command tx timeout
[   94.615315] Bluetooth: hci3: command tx timeout
[   94.678570] Bluetooth: hci5: command tx timeout
[   94.743540] Bluetooth: hci6: command tx timeout
[   94.807651] Bluetooth: hci7: command tx timeout
[   96.407599] Bluetooth: hci0: command tx timeout
[   96.470535] Bluetooth: hci1: command tx timeout
[   96.598580] Bluetooth: hci2: command tx timeout
[   96.662705] Bluetooth: hci3: command tx timeout
[   96.663113] Bluetooth: hci4: command tx timeout
[   96.726527] Bluetooth: hci5: command tx timeout
[   96.790491] Bluetooth: hci6: command tx timeout
[   96.855546] Bluetooth: hci7: command tx timeout
[  129.816209] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  129.816896] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  130.017182] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  130.017811] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  130.357601] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  130.358206] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  130.574715] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  130.575338] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  130.975913] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  130.976545] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  131.064853] loop1: detected capacity change from 0 to 112
[  131.070111] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22
[  131.082069] loop1: detected capacity change from 0 to 112
[  131.121593] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  131.122171] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  131.263491] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  131.264122] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  131.406030] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  131.406715] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  131.535517] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  131.536158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  131.655293] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  131.656003] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  131.793862] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  132.061728] loop2: detected capacity change from 0 to 134
[  132.074938] loop2: detected capacity change from 0 to 134
[  132.178674] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  132.179797] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  132.189841] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  132.191044] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  132.235925] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  132.237069] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  132.384984] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  132.385637] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  132.491160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  132.491834] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  132.530204] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  132.531104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
01:39:51 executing program 6:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/handlers\x00', 0x0, 0x0)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x101002, 0x0)
sendfile(r1, r1, 0x0, 0x5)
getsockopt$netlink(r1, 0x10e, 0x3, &(0x7f0000000000)=""/171, &(0x7f00000000c0)=0xab)
pread64(r0, &(0x7f0000000140)=""/121, 0x79, 0x0)
lseek(r0, 0x0, 0x0)

01:39:51 executing program 4:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x2040, 0x0)
syz_io_uring_setup(0x4631, &(0x7f0000000140)={0x0, 0x9e80, 0x0, 0x5, 0x283, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000001c0)=<r1=>0x0, &(0x7f0000000200))
syz_io_uring_complete(r1)
ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f0000000100))
syz_emit_ethernet(0xaa, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa000000000000810000000800441c00980000000000019078ac1e0001ac1414aa440cfeb00000000400007234070764000000008913a6e0000001ac1414bb090001017f0000014414c231ac14144000000005ffffffff0000000300000504907800000000400000030000000000040000ac1414007f000001862b00000000000e2141bd1359b54f0000000000000a0b1bb9011e61db13000d9fb8dedc4ea32f0be3c41500"], 0x0)

01:39:51 executing program 1:
r0 = socket$inet(0x2, 0x80003, 0xff)
getpeername$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, &(0x7f0000000080)=0x10)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x10, &(0x7f0000000000)=0x400000, 0x4)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00'})

01:39:51 executing program 2:
sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x20}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7c8921ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x44c}]}, 0x34}, 0x1, 0x0, 0x0, 0x20}, 0x80)
unshare(0x40000000)
unshare(0xa000000)
sendmsg$NL80211_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="00fe00", @ANYRES16=0x0, @ANYBLOB="000129bd7000fedbdf254100000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900090000007a000000050019010c0000000800a100000000000800a100030000000800a000c60000000800270002000000"], 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x40000)
unshare(0x42040800)
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x60, 0x0, 0x300, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x8, 0x74}}}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xffff}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x22}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x299}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x4004091)

01:39:51 executing program 5:
mlockall(0x2)
r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil)
shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x6000)
shmget$private(0x0, 0x3000, 0x8, &(0x7f0000763000/0x3000)=nil)
shmat(r0, &(0x7f0000949000/0x2000)=nil, 0x5000)

01:39:51 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x5300a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/route\x00')
fcntl$setlease(r0, 0x400, 0x0)
fremovexattr(r0, &(0x7f00000000c0)=@known='com.apple.system.Security\x00')

01:39:51 executing program 7:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x12, r0, 0x0)
syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000100), 0x0, 0x4)
r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x4000010, r2, 0x0)
syz_memcpy_off$IO_URING_METADATA_FLAGS(r3, 0x118, &(0x7f0000000100), 0x0, 0x4)
r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x484800, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x12, r4, 0x0)
syz_memcpy_off$IO_URING_METADATA_FLAGS(r5, 0x118, &(0x7f0000000100), 0x0, 0x4)
syz_io_uring_complete(r5)
r6 = syz_io_uring_setup(0x2262, &(0x7f0000003a00), &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0))
r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0xc, 0x0, r7)
io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, r7)
syz_io_uring_setup(0x401, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x2e9, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180), &(0x7f0000000140)=<r8=>0x0)
syz_io_uring_submit(0x0, r8, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x3, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, {0x6100}, 0x91cd034e4809f27}, 0x0)
syz_io_uring_submit(r5, r8, &(0x7f0000000140)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x3, &(0x7f00000000c0), 0x1, 0x1}, 0x9)
syz_io_uring_submit(r3, 0x0, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL={0xe, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, {0x0, r7}}, 0x8)
fork()

[  144.815608] audit: type=1400 audit(1756690791.503:8): avc:  denied  { open } for  pid=3907 comm="syz-executor.7" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[  144.826092] audit: type=1400 audit(1756690791.503:9): avc:  denied  { kernel } for  pid=3907 comm="syz-executor.7" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
01:39:51 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r0 = openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f00000001c0)=ANY=[@ANYBLOB='2'])
syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f0000001480), 0x0, &(0x7f0000001540)={[{@session={'session', 0x3d, 0x4a}}, {@overriderock}, {@session}]})
link(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='./file0\x00')
fspick(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x0)
io_setup(0x9b7f, &(0x7f0000000080))
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0)

01:39:51 executing program 4:
syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_features={{0xb, 0xb}, {0x4, 0x0, "5c2387b3abf58f4f"}}}, 0xe)
syz_emit_vhci(&(0x7f0000000200)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x1, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_ecred_reconf_req={{0x19, 0x81, 0xa}, {0x80, 0xf3d, [0x64, 0xc6cf, 0x6]}}}}, 0x17)
syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="02c80000000000000007350400ff00f7ff"], 0x11)
syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="040f0404001104a8f502c7f56d7b64e8a8de75506f54588e80ba24a23f7c4f6af9aae09bb6ee1c57875aef328ca137ee37f43c9094fc209f4aa96f25caf67c31735e93fbaf989706d7907a36f7eb24ccea7e1b4a268c1a95efcf9a06097204c3d16ca08530b6d73f98b2734c1d2e911118cd20c0aff517f85ded2403fac1fa3aa97c5f02457cb4f25ecc64299a320843ced0eb76f550382844a67188d025ae6304457a9055b0f872d9ee733e47e9d7a2279e1649ea2c1b"], 0x7)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000440))
getdents64(r0, &(0x7f00000000c0)=""/107, 0x6b)
syz_emit_vhci(&(0x7f0000000240)=@HCI_SCODATA_PKT={0x3, {0xc8}, "cf25badd48517316638c14f00f5c1f8769e66f87246b71388f813c1886477a3b3da490559083756bec1293cac3b667aac4d6931d3091806a0058d4d81faacc7326bc3c2ca990990b4908a0e8a25ae7466e89a3073d7520d5829e12830d6dc231370ab916b9dfb5f678be1cd505690496238d6d8824ce1bbfb9805c892dc32c4e78af477dcbeeb6c315028e4548a2c0f61eb2b8d9251c1d0ae67150bc92"}, 0x15c)
syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT, 0x2)
syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0x401c5820, 0x0)
r2 = syz_open_dev$sg(&(0x7f0000002ac0), 0x1ff, 0x0)
syz_emit_vhci(&(0x7f0000000180)=@HCI_VENDOR_PKT, 0x2)
ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f00000000c0)={0x0, 0xffffffff, 0xffffff85})
syz_emit_vhci(&(0x7f0000000300)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x0, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0x3, 0x8}, {0x5ace, 0x8000, 0x2, 0x200}}}}, 0x15)
syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_conn_param_update_rsp={{0x13, 0x1b, 0x2}, {0x80}}}}, 0xf)
clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0)

[  144.875278] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s
[  144.876156] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] 
[  144.876757] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present
[  144.877300] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00
[  144.877932] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 2
[  144.879995] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  144.881068] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  144.882472] Buffer I/O error on dev sr0, logical block 0, async page read
[  144.901020] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  144.902003] I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  144.903336] Buffer I/O error on dev sr0, logical block 1, async page read
[  144.914275] I/O error, dev loop6, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  144.916228] isofs_fill_super: bread failed, dev=loop6, iso_blknum=16, block=32
[  144.919257] Bluetooth: Frame is too long (len 12, expected len 4)
01:39:51 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00', <r4=>0x0})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REGISTER_FRAME(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000480)={0x20, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x28, r1, 0x10, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0xf, 0x51}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20040050}, 0x91)

[  144.926676] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  144.927635] I/O error, dev sr0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  144.928977] Buffer I/O error on dev sr0, logical block 2, async page read
[  144.930761] program syz-executor.4 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  144.943484] Bluetooth: Unexpected continuation frame (len 16)
[  144.963652] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  144.964225] I/O error, dev sr0, sector 3 op 0x0:(READ) flags 0x0 phys_seg 5 prio class 2
[  144.965231] Buffer I/O error on dev sr0, logical block 3, async page read
[  144.965855] Buffer I/O error on dev sr0, logical block 4, async page read
[  144.966453] Buffer I/O error on dev sr0, logical block 5, async page read
[  144.967050] Buffer I/O error on dev sr0, logical block 6, async page read
[  144.967652] Buffer I/O error on dev sr0, logical block 7, async page read
[  144.969058] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  144.969754] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  144.970416] Buffer I/O error on dev sr0, logical block 0, async page read
[  144.982841] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  144.983813] I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  144.985150] Buffer I/O error on dev sr0, logical block 1, async page read
[  144.990221] I/O error, dev loop6, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  144.991728] isofs_fill_super: bread failed, dev=loop6, iso_blknum=16, block=32
[  145.017947] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  145.019021] I/O error, dev sr0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  145.034218] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  145.041323] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
01:39:51 executing program 6:
syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(&(0x7f0000000a40)=ANY=[@ANYBLOB="2f6465d217a3370ea1"], &(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0)='hugetlbfs\x00', 0x0, 0x0)
r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000040)=0x1c)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'})

[  145.072006] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  145.079717] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  145.090372] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  145.110720] Bluetooth: Frame is too long (len 12, expected len 4)
[  145.124073] program syz-executor.4 is using a deprecated SCSI ioctl, please convert it to SG_IO
01:39:51 executing program 1:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x10, &(0x7f0000000000)=0x400000, 0x4)
read(r0, &(0x7f00000000c0)=""/147, 0x93)
r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x10, &(0x7f0000000000)=0x400000, 0x4)
setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f0000000180)=0x52d, 0x4)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x91})
r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x130)
ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000280)={0x0, 0x6})
linkat(r1, &(0x7f0000000040)='./file0\x00', r3, &(0x7f0000000080)='./file0\x00', 0x400)

01:39:51 executing program 3:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
syz_emit_vhci(&(0x7f00000010c0)=ANY=[@ANYBLOB="043106ffe0ffffffff"], 0x9)
syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="3b0f0080000004b33a28eca07c4cd1d22cddf3a594cb991030567d87f4"], 0x7)
dup2(r0, r0)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', <r4=>0x0})
bind$packet(r2, &(0x7f0000000080)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14)
setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@mcast1, r4}, 0x14)
bind$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000000c0)={{{@in6=@private1, @in=@broadcast, 0x4e22, 0x0, 0x4e24, 0x6678, 0xa, 0x20, 0x120, 0x6, r4}, {0x10001, 0x80, 0xfffffffffffff1aa, 0x20, 0x0, 0x7, 0x800, 0x8}, {0x7, 0x5, 0x2, 0x2}, 0x3e0, 0x6e6bba, 0x3, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x4d3, 0x32}, 0xa, @in=@multicast1, 0x3507, 0x0, 0x2, 0x3f, 0x4, 0x4, 0x7}}, 0xe8)
migrate_pages(0x0, 0xffffeffffffffffc, 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x8007}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r6 = fork()
waitid(0x1, r6, &(0x7f0000000040), 0x3, &(0x7f0000000cc0))
perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x5, 0x81, 0xb, 0x8, 0x0, 0x2, 0x1, 0x8, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xf8000000, 0x4, @perf_config_ext={0x8}, 0x10086, 0x0, 0x1, 0x5, 0xfffffffb, 0x9, 0xa7, 0x0, 0x6, 0x0, 0x6}, r6, 0xb, r5, 0x0)

[  145.188635] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  145.190089] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  145.215553] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
01:39:51 executing program 1:
keyctl$session_to_parent(0x12)
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
keyctl$session_to_parent(0x12)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x1b, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000dc0000000f000000010000000000000000000000002000000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000028020000028401001b0000000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e38383037323533333400"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000713aa3a4ba984e5d8a0373c06ca5ba29010000000c00000000000000ddf4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000100000000000000000000000000000000000000000000002500000000000000", 0x40, 0x540}, {&(0x7f0000010300)="0000000000000000000000000000000000000000010400"/32, 0x20, 0x640}, {&(0x7f0000010400)="030000000400000005000000dc000f000300040000000000000000000f004582", 0x20, 0x800}, {&(0x7f0000010500)="ffffffff07000000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0100ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000ddf4655fddf4655fddf4655f00"/2080, 0x820, 0xc00}, {&(0x7f0000010e00)="ed41000000040000ddf4655fdef4655fdef4655f00000000000004000200000000000000050000000d00"/64, 0x40, 0x1500}, {&(0x7f0000010f00)="2000000060ed753160ed753100000000ddf4655f00"/32, 0x20, 0x1580}, {&(0x7f0000011000)="c0410000002c0000ddf4655fddf4655fddf4655f00000000000002001600000000000000000000000e0000000f000000100000001100000012000000130000001400000015000000160000001700000018000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000ddf4655f000000000000000000000000000002ea00"/192, 0xc0, 0x1e00}, {&(0x7f0000011100)="ed4100003c000000def4655fdef4655fdef4655f0000000000000200000000000000001003000000020000000d0000001000050166696c65300000000e0000002800050766696c6531000000000000000000000000000000000000000000000000000000322728ea0000000000000000000000000000000000000000000000002000000060ed753160ed753160ed7531def4655f60ed75310000000000000000000002ea04070000000000000000000000000000646174610000000000000000", 0xc0, 0x1f00}, {&(0x7f0000011200)="ed8100001a040000def4655fdef4655fdef4655f0000000000000100040000000000000001000000190000001a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feb0eba70000000000000000000000000000000000000000000000002000000060ed753160ed753160ed7531def4655f60ed75310000000000000000", 0xa0, 0x2000}, {&(0x7f0000011300)="ffa1000026000000def4655fdef4655fdef4655f00000000000001000000000000000000010000002f746d702f73797a2d696d61676567656e3838303732353333342f66696c65302f66696c653000000000000000000000000000000000000000000000e06e12cc0000000000000000000000000000000000000000000000002000000060ed753160ed753160ed7531def4655f60ed75310000000000000000", 0xa0, 0x2100}, {&(0x7f0000011400)="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", 0x1a0, 0x2200}, {&(0x7f0000011600)="ed81000064000000def4655fdef4655fdef4655f000000000000010000000000000000100100000073797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616cea6ae86100000000000000000000000000000000000000000000000020000000b0116a32b0116a3260ed7531def4655f60ed75310000000000000000000002ea040734000000000028000000000000006461746100000000000000000000000000000000000000000000000000000000000000006c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273", 0x100, 0x2400}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531000000100000001000050166696c6532000000100000001000050166696c6533000000110000009403090166696c652e636f6c64000000", 0x80, 0x3400}, {&(0x7f0000011800)="0b0000000c0001022e000000020000000c0002022e2e000000000000e8030000", 0x20, 0x3800}, {&(0x7f0000011900)="00000000000400"/32, 0x20, 0x3c00}, {&(0x7f0000011a00)="00000000000400"/32, 0x20, 0x4000}, {&(0x7f0000011b00)="00000000000400"/32, 0x20, 0x4400}, {&(0x7f0000011c00)="00000000000400"/32, 0x20, 0x4800}, {&(0x7f0000011d00)="00000000000400"/32, 0x20, 0x4c00}, {&(0x7f0000011e00)="00000000000400"/32, 0x20, 0x5000}, {&(0x7f0000011f00)="00000000000400"/32, 0x20, 0x5400}, {&(0x7f0000012000)="00000000000400"/32, 0x20, 0x5800}, {&(0x7f0000012100)="00000000000400"/32, 0x20, 0x5c00}, {&(0x7f0000012200)="00000000000400"/32, 0x20, 0x6000}, {&(0x7f0000012300)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x6400}], 0x0, &(0x7f0000012800))

01:39:51 executing program 0:
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000000)={<r2=>r1, 0x8, 0xb0, 0x9})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000100))
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
getpid()
copy_file_range(0xffffffffffffffff, 0x0, r3, 0x0, 0x0, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000180)={<r4=>0x0})
r5 = syz_io_uring_setup(0x3cfc, &(0x7f0000000240), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000002c0), &(0x7f0000000300))
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x9, &(0x7f0000000340)=[{0x100, 0x81, 0x8, 0x2}, {0xa1, 0x6, 0xff, 0x4}, {0x27cd, 0x8, 0x21, 0xffff}, {0xac, 0x9e, 0x81, 0x3}, {0x9, 0x7f, 0x4, 0x96f5}, {0x5, 0x5, 0x8, 0x9}, {0x2, 0xdf, 0x4, 0x7}, {0x7, 0x80, 0xff, 0x83c0000}, {0x9, 0xf1, 0x80, 0x6}]})
io_uring_register$IORING_REGISTER_PROBE(r5, 0x8, 0x0, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000080)={r4, 0x2, r5, 0xa0})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000000)={r4, 0x0, 0xffffffffffffffff, 0x0, 0x80000})
mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0x1)
lsetxattr$trusted_overlay_nlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, 0x0, 0x0)

01:39:52 executing program 2:
r0 = perf_event_open(&(0x7f0000000340)={0x5, 0x80, 0x7a, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup(r0)
perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffff81202c80}, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

[  145.394951] loop1: detected capacity change from 0 to 512
[  145.458856] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  145.518892] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  148.951185] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[  148.952567] Bluetooth: hci3: Injecting HCI hardware error event
[  148.955572] Bluetooth: hci3: hardware error 0x00
[  150.998556] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[  155.270526] unregister_netdevice: waiting for sit0 to become free. Usage count = 0
01:40:03 executing program 5:
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x101002, 0x0)
sendfile(r0, r0, 0x0, 0x5)
r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40041}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = fsopen(&(0x7f0000000000)='sysfs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x6, 0x0, 0x0, 0x0)
fsmount(r0, 0x1, 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000100)='./*}\x00', &(0x7f0000000140)='\xe7,\xbe:\x00', 0x0)

01:40:03 executing program 1:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff)
sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)={0x30, r1, 0x16566fdb4c104121, 0x0, 0x0, {}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0xffffffffffffffff}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x30}}, 0x0)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x64, r2, 0x8, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy3\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0x433d283c51506c59}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x4000)
syz_emit_ethernet(0x82, &(0x7f00000000c0)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @source_quench={0x3, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @dev, @loopback, {[@cipso={0x86, 0x3d, 0x0, [{0x0, 0xc, "ba4906dca0ac3f21ee4d"}, {0x0, 0xa, "0b1bb9011e61db13"}, {0x0, 0xe, "9fb8dedc4ea32f0be3c4157e"}, {0x0, 0x6, "3f70cd62"}, {0x0, 0xd, "20126d234d2862265a340c"}]}]}}}}}}}, 0x0)

01:40:03 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, 0x0)
syz_open_dev$tty20(0xc, 0x4, 0x1)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TCSETAW(r0, 0x5601, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "26f954d5b7b3eb7a"})

01:40:03 executing program 6:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="b353100000000000000001"], 0x2c}}, 0x0)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x101002, 0x0)
sendfile(r3, r3, 0x0, 0x5)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x3, 0x5, 0x40, 0x40, 0x0, 0x8, 0x20000, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7ff, 0x2, @perf_config_ext={0x23f, 0x3}, 0x0, 0x100000001, 0xca, 0xe, 0xfa26, 0x2, 0x1f, 0x0, 0x7, 0x0, 0x4}, 0x0, 0x3, r0, 0x3)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'wlan1\x00', <r6=>0x0})
setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000000)={@loopback, r6}, 0x14)
getresuid(&(0x7f0000000340), &(0x7f0000000380), &(0x7f0000000400)=<r7=>0x0)
sendmsg$nl_xfrm(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=@newpolicy={0xcc, 0x13, 0x1, 0x70bd25, 0x25dfdbfb, {{@in=@broadcast, @in=@remote, 0x4e23, 0x0, 0x4e24, 0x0, 0xa, 0x0, 0x80, 0x1, r6, r7}, {0x6, 0xaa2, 0x748, 0x8, 0xed, 0x0, 0x2c, 0x2}, {0x7, 0x5, 0x5, 0x3ff}, 0x4, 0x6e6bb4, 0x0, 0x0, 0x1, 0x1}, [@coaddr={0x14, 0xe, @in6=@dev={0xfe, 0x80, '\x00', 0x11}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x44800}, 0x0)

01:40:03 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@updsa={0xf8, 0x1a, 0x400, 0x70bd26, 0x25dfdbfd, {{@in=@rand_addr=0x64010101, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x4e21, 0x7ff, 0x4e22, 0x0, 0x2, 0x20, 0x0, 0x5c}, {@in=@empty, 0x4d2, 0x3c}, @in6=@mcast2, {0x6, 0x43f, 0xe7, 0x0, 0x0, 0x5, 0x9, 0x2ed}, {0x2e4, 0x70, 0xc0, 0xff}, {0x7e, 0x7fffffff, 0x100}, 0x70bd29, 0x3505, 0x2, 0x2, 0x9, 0xa}, [@tfcpad={0x8, 0x16, 0x1}]}, 0xf8}}, 0x0)

01:40:03 executing program 2:
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x20008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x69d, 0x6}, 0x41202, 0x401, 0x0, 0x0, 0x0, 0xffdffffe, 0x81, 0x0, 0xffff, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

01:40:03 executing program 7:
sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000600)={&(0x7f00000000c0)=ANY=[@ANYBLOB="04050000", @ANYRES16=0x0, @ANYBLOB="00082bbd7000a154df254a00000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099000000000080000000080075800400010010007580040007000400060004000900c404758004000700bc040480140100802c000200403d304d37fb9b53046b76631952fdf25ca9ced954ad4e34eb6d4937029456545cfbef25af92927c09000100dc0d22ca0d000000c7000100d9d31d28250869dd82c9028bde4a430525292811155903d2ee85a8e9fc001ea5403e50b89c2f854e3f2c4e8a54429e68a2b9610d86bf8b6a1ed08c0cdb28c7ea7f3d8cd5dccd78381ade9b3d570a78b6461bbcac1088f5d8bc2eae98c60d09c60ec553b98702380f7cc6de56aec28a1066422f6be53e3eb0c6d3aa7f4f4fe5c3d43db4b2333d73e935b0c17918a8c6a080e1686e4623e65abc759ba43a48693d2bccfb3e0d26f213e97c9cdce3d596b34938f8a9ca92d032637b21f008f491ebe2344b00080003000900000008000300ff000000a403008030000200b8bef966aa41d54c9350ae7a830e4ca79b4c70a31f8d1468151c4a402c129855bedc22ade72f2c37cefbdde3d40001006a994e883df820b173dd0f6727b27bc24d09ae504eba0c5db0d5ee2cbb1b532c2c18cd345b15d410f54cdb773a63209cdfbcf707448cd8f1a6752246c7896760f40dd3708a78c32a4b8ae90a8648dea3f1205960d07f892c89dbca2606196424fe6c318851a8bff85da4ef8fff6cedd6bf5cb28c63d8b0c0c4029776bd7739d37cf550db2b804a78a6d37649557af647c2f79dec1a17fbefa93e9aa9c31cbcf6028bd031b09ab858506e6345fcf13788b0395ddd9b7fbb6f1a3f1a8236e0a8c95ebc98b4f1ced2fb243d798a0a92534e080003004000000008000300040000006d0001004ff9a364a7941d2c61d9af9f78fea17bb0bb2f1e2f03f8ebbe554ce2356f455d733dab26f6640b433dc108e7b07e3650ffaad9abba2c1df226675cab42aa64db3605823c60a6899d632ead2488b810c436a4df6df40ca6577bf7c1d3156757e6d8bacbf25f8b633a7d000000fe0002008d2cd668344d8b6e07cc0336b364a36d0ed473d7ca44ab59a274b609610da0e7eb47e8f8312e670ea737cde37217cdf6804cd0ddc03ea8f7775f51d21d54639a2813e42a81c10cc011046f0725e2f2d42a9e4204a7b28a2a824abc12d269c0167e37a61c26cf0d5879b71b1e9b1c4c458f199a8f6a68fab5e67d10efd528db0482bc9d552251aa1335b685c50bb1c4262781f757d2eb038020215a9d4461542755062cdd79fb5ade56250ba3416faa611d9ca0c324af1ae52d370b97c8694eadb3e7c5cb24556d966a0e6ce1312c49d89c3c8f30f9d773ea1659d0a932f8d6fb1255ba14cfe4fbf3fa4183bbc18c9dd55b0462b777c2b2e9c80400006600010034ca9bac956afb5bcdd3cca470d4fa1a6e6a3c3e8fe6c94ebb117a53846e71011ee3c39f92e698d785bb42ea6476e2b0dd38225f33954f04ed632fd427fef0bf9df66f17a549a509eb8532c15c96178de6b2fdeeb1ca9fb0b2325ed0d8a46b1f5d050000b200020029ee7c44647a28b9742226351c92bde318d66aa88174cc0d0992b1104de2a2cd31dbcdec1b557253aa5533e6ab9c48f2d62c5372df22acb4cf661ca01aefa8fa83acf28c4dde19ad77c36972d96a32e28e8f82e83fc02b197c5cb723fa0458e343e9cfc088973b4ad1f06050d5b7a8bbade8f6374b9add2e2ab9c711f64f2c9907a6773fea70d0404b0bf81fbb63012855d3f02233c02e1985163480e67abb9da71e50465c5d5040d67275c1a2f90000"], 0x504}, 0x1, 0x0, 0x0, 0x811}, 0x4045)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001480)={[{@uid={'uid', 0x3d, 0xffffffffffffffff}}]})
lstat(&(0x7f0000000dc0)='./file0/file0\x00', &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, <r0=>0x0})
syz_mount_image$tmpfs(&(0x7f0000000940), &(0x7f0000000980)='./file0/file0\x00', 0xffffffffffffffe6, 0x5, &(0x7f0000000cc0)=[{&(0x7f00000009c0)="b1fbad92e360c142ee0899128626568084def263786ad2a809905a5edb8d30a0bdf6c89536bf927ada33832f070e1980401d7d28f31cdc04b4595663befff9c74d81b15d359fca3a9dbcbf8c774d833c084a2970ec6614f727faa68b9285113c8c88c445fe0f9403e4729c66a5c8b1fb756ef1a2fda1b0209ce704", 0x7b, 0x1}, {&(0x7f0000000a40)="5982d6308f7e46a3b006e49a3bcc8b1eeba4d575737908bf4f6f18b6368300a1e5a1fd27d1a51199ab870be70917315408cbc6fe3be27457a732871638ba05eeed13108ed0cbfbd3747840118c7f4e9fbf3ea4c3b7dbc943a4b22afb84e673b08e199b75b1a185aea801dba2cc50cf3a", 0x70, 0x1f}, {&(0x7f0000000ac0)="37ab1eff2283e96b67a28c7954e60b2097c0cbaa4edf013c2c65eb745a1ddf83b981a5b6e515771cdcaa9e5cc9608c174f19d64ee1848d0d44d9acbb19e030fe3de2dbb733f86c853b167fd10a88dc43b7d6c717a6bd3f729609ad2fdfe338038558618c083ba7d83b663570ab38c6c61a3d23b17c0644a8cea05e0f5c19d5a030f8ff026f12eda10675e6463db6ea11c77025a9dfc57a9c1344f644c6a461e59d8b34c19c6f5eb3a9d0a43731237d6a122b3c779df01e938e4ec698ef74a72a914a914f90", 0xc5, 0xfffffffffffffffe}, {&(0x7f0000000bc0)="4ed9dd990ebefb1211174fc093768b7bdfbbd3753e3a095c152d8e707df8e5098cce42d3b926cb131e7b7eb1d7df11566ca2e943d5e1ba7b58e24c234e8ca614650694c9d6f64a786b7bf634822a7dec687fe116dc8b0e38f88b6f2b9f008f5bc275b47b068b1c838cb3fa6fe4fc86c65f4506859dfa3a9dce6ecaef428011ebc9b4c52cb526bf5895813594135a195681053f20bbae42c8a1", 0x38, 0x3}, {&(0x7f0000000c80)="e77d4a89acafe210e72d0b50a638de7a3c9225a1a86dc36e73cfdade8d", 0x1d, 0xb599}], 0x98000, &(0x7f0000000f40)={[{@huge_advise}, {@uid={'uid', 0x3d, 0xee00}}], [{@fsmagic={'fsmagic', 0x3d, 0x1}}, {@fowner_gt={'fowner>', r0}}, {@obj_type={'obj_type', 0x3d, 'uid'}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@subj_type={'subj_type', 0x3d, '^'}}, {@fscontext={'fscontext', 0x3d, 'system_u'}}]})
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x101002, 0x0)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x101002, 0x0)
sendfile(r2, r2, 0x0, 0x5)
sendmsg$NL80211_CMD_GET_WOWLAN(r2, &(0x7f0000000900)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x14, 0x0, 0x300, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void, @void}}, [""]}, 0x14}}, 0xc084)
sendfile(r1, r1, 0x0, 0x5)
syz_genetlink_get_family_id$mptcp(&(0x7f00000006c0), 0xffffffffffffffff)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f00000007c0)={@initdev, @empty, <r3=>0x0}, &(0x7f0000000800)=0xc)
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x101002, 0x0)
sendfile(r4, r4, 0x0, 0x5)
sendmsg$TIPC_NL_MON_SET(r4, &(0x7f0000000e80)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000d80)={&(0x7f0000001000)={0x16c, 0x0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x40, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7f}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x401}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x40}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1bab}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3d}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1000}]}, @TIPC_NLA_LINK={0xa4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7675}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1f}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x67}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x100}]}, @TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8001}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x81}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8000}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x24044000}, 0x20000000)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f00000008c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x38, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0xa080)

01:40:03 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x1f, 0x0, 0x0, 0xffffffff, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"})
read(r0, 0x0, 0x40004)
ioctl$TIOCVHANGUP(r0, 0x5437, 0x0)

01:40:03 executing program 2:
dup(0xffffffffffffffff)
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000ac0)='/sys/module/random', 0x0, 0x0)
syz_io_uring_setup(0x4a0f, &(0x7f0000000180)={0x0, 0xfffffffc, 0x10, 0x0, 0x202, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000000))
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/bus/machinecheck', 0x589502, 0x20)
sendfile(r1, r1, 0x0, 0x5)
getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000000080)={'mangle\x00', 0x0, [0x80, 0x1, 0xffff, 0x7ff, 0x8a]}, &(0x7f0000000100)=0x54)

01:40:03 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, 0x0)
syz_open_dev$tty20(0xc, 0x4, 0x1)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TCSETAW(r0, 0x5601, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "26f954d5b7b3eb7a"})

[  156.867262] tmpfs: Bad value for 'uid'
[  156.867686] tmpfs: Bad value for 'uid'
[  156.878819] loop7: detected capacity change from 0 to 264192
[  156.880473] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.6'.
01:40:03 executing program 0:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366f6259d00080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x81f}], 0x0, &(0x7f0000000040)=ANY=[])
statfs(&(0x7f00000005c0)='./file0\x00', 0x0)
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x101002, 0x0)
sendfile(r0, r0, 0x0, 0x5)
recvmsg$unix(r0, &(0x7f00000001c0)={&(0x7f0000000040), 0x6e, &(0x7f0000000440)=[{&(0x7f00000000c0)=""/39, 0x27}, {&(0x7f0000000140)=""/51, 0x33}, {&(0x7f0000000180)=""/29, 0x1d}, {&(0x7f0000000240)=""/220, 0xdc}, {&(0x7f0000000340)=""/228, 0xe4}], 0x5, &(0x7f00000004c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb0}, 0x21)

01:40:03 executing program 5:
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x101002, 0x0)
sendfile(r0, r0, 0x0, 0x5)
r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40041}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = fsopen(&(0x7f0000000000)='sysfs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x6, 0x0, 0x0, 0x0)
fsmount(r0, 0x1, 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000100)='./*}\x00', &(0x7f0000000140)='\xe7,\xbe:\x00', 0x0)

[  156.941087] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.6'.
[  156.982950] loop0: detected capacity change from 0 to 8
01:40:03 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000270000004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000010d00)=ANY=[])
r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r1 = syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x7ff, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="465001da9c24c98cc491fa", 0xb, 0x2abe}], 0x1000000, &(0x7f0000000180)={[{@noacl}], [{@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@fsname={'fsname', 0x3d, 'vfat\x00'}}, {@seclabel}, {@hash}]})
clock_gettime(0x0, &(0x7f0000000240)={<r2=>0x0, <r3=>0x0})
futimesat(r1, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)={{0x77359400}, {r2, r3/1000+10000}})
getdents64(r0, &(0x7f0000001480)=""/4096, 0x18)

[  156.994659] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1)
01:40:03 executing program 1:
r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x9}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
clone3(&(0x7f00000002c0)={0x8a280300, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0xffffffffffffffff, 0x0, 0x0], 0x3}, 0x58)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x10, &(0x7f0000000000)=0x400000, 0x4)
readv(r1, &(0x7f0000000080)=[{&(0x7f0000000140)=""/122, 0x7a}, {&(0x7f0000000340)=""/170, 0xaa}], 0x2)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x101002, 0x0)
sendfile(r2, r2, 0x0, 0x5)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r2)
ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, 0x0)

[  157.005037] FAT-fs (loop0): FAT read failed (blocknr 32)
[  157.014086] FAT-fs (loop0): FAT read failed (blocknr 32)
01:40:03 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, 0x0)
syz_open_dev$tty20(0xc, 0x4, 0x1)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TCSETAW(r0, 0x5601, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "26f954d5b7b3eb7a"})

[  157.048252] tmpfs: Bad value for 'uid'
[  157.048628] tmpfs: Bad value for 'uid'
[  157.053232] loop7: detected capacity change from 0 to 264192
01:40:03 executing program 6:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="b353100000000000000001"], 0x2c}}, 0x0)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x101002, 0x0)
sendfile(r3, r3, 0x0, 0x5)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x3, 0x5, 0x40, 0x40, 0x0, 0x8, 0x20000, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7ff, 0x2, @perf_config_ext={0x23f, 0x3}, 0x0, 0x100000001, 0xca, 0xe, 0xfa26, 0x2, 0x1f, 0x0, 0x7, 0x0, 0x4}, 0x0, 0x3, r0, 0x3)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'wlan1\x00', <r6=>0x0})
setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000000)={@loopback, r6}, 0x14)
getresuid(&(0x7f0000000340), &(0x7f0000000380), &(0x7f0000000400)=<r7=>0x0)
sendmsg$nl_xfrm(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=@newpolicy={0xcc, 0x13, 0x1, 0x70bd25, 0x25dfdbfb, {{@in=@broadcast, @in=@remote, 0x4e23, 0x0, 0x4e24, 0x0, 0xa, 0x0, 0x80, 0x1, r6, r7}, {0x6, 0xaa2, 0x748, 0x8, 0xed, 0x0, 0x2c, 0x2}, {0x7, 0x5, 0x5, 0x3ff}, 0x4, 0x6e6bb4, 0x0, 0x0, 0x1, 0x1}, [@coaddr={0x14, 0xe, @in6=@dev={0xfe, 0x80, '\x00', 0x11}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x44800}, 0x0)

[  157.059170] kmemleak: Found object by alias at 0x607f1a6390fc
[  157.059195] CPU: 1 UID: 0 PID: 4008 Comm: syz-executor.2 Tainted: G        W           6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) 
[  157.059229] Tainted: [W]=WARN
[  157.059236] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  157.059249] Call Trace:
[  157.059256]  <TASK>
[  157.059264]  dump_stack_lvl+0xca/0x120
[  157.059304]  __lookup_object+0x94/0xb0
[  157.059335]  delete_object_full+0x27/0x70
[  157.059365]  free_percpu+0x30/0x1160
[  157.059395]  ? arch_uprobe_clear_state+0x16/0x140
[  157.059433]  futex_hash_free+0x38/0xc0
[  157.059466]  mmput+0x2d3/0x390
[  157.059501]  do_exit+0x79d/0x2970
[  157.059527]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  157.059567]  ? zap_other_threads+0x2b9/0x3a0
[  157.059599]  ? __pfx_do_exit+0x10/0x10
[  157.059624]  ? do_group_exit+0x1c3/0x2a0
[  157.059654]  ? _raw_spin_unlock_irq+0x23/0x40
[  157.059689]  do_group_exit+0xd3/0x2a0
[  157.059718]  __x64_sys_exit_group+0x3e/0x50
[  157.059744]  x64_sys_call+0x18c5/0x18d0
[  157.059773]  do_syscall_64+0xbf/0x360
[  157.059795]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  157.059817] RIP: 0033:0x7f88fa4a9b19
[  157.059833] Code: Unable to access opcode bytes at 0x7f88fa4a9aef.
[  157.059843] RSP: 002b:00007fff2e9a9af8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[  157.059864] RAX: ffffffffffffffda RBX: 000000000000001e RCX: 00007f88fa4a9b19
[  157.059879] RDX: 00007f88fa45c72b RSI: ffffffffffffffbc RDI: 0000000000000000
[  157.059893] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000001
[  157.059905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  157.059918] R13: 0000000000000001 R14: 0000000000000001 R15: 00007fff2e9a9be0
[  157.059949]  </TASK>
[  157.059956] kmemleak: Object (percpu) 0x607f1a6390f8 (size 8):
[  157.059968] kmemleak:   comm "syz-executor.0", pid 4018, jiffies 4294823920
[  157.059982] kmemleak:   min_count = 1
[  157.059989] kmemleak:   count = 0
[  157.059996] kmemleak:   flags = 0x21
[  157.060003] kmemleak:   checksum = 0
[  157.060010] kmemleak:   backtrace:
[  157.060016]  pcpu_alloc_noprof+0x87a/0x1170
[  157.060045]  percpu_ref_init+0x37/0x400
[  157.060079]  wb_get_create+0x25b/0x1120
[  157.060098]  __inode_attach_wb+0x159/0xc70
[  157.060121]  __folio_mark_dirty+0x908/0xcd0
[  157.060146]  mark_buffer_dirty+0x316/0x3a0
[  157.060176]  fat_set_state+0x227/0x360
[  157.060207]  fat_fill_super+0x2669/0x3fd0
[  157.060242]  get_tree_bdev_flags+0x38a/0x620
[  157.060266]  vfs_get_tree+0x93/0x340
[  157.060302]  path_mount+0x132d/0x1dd0
[  157.060329]  __x64_sys_mount+0x27b/0x300
[  157.060356]  do_syscall_64+0xbf/0x360
[  157.060373]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  157.069036] loop4: detected capacity change from 0 to 6
[  157.075391] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN NOPTI
[  157.096452] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]
[  157.096478] CPU: 1 UID: 0 PID: 4022 Comm: syz-executor.7 Tainted: G        W           6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) 
[  157.096513] Tainted: [W]=WARN
[  157.096521] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  157.096535] RIP: 0010:__queue_work+0x202/0x1240
[  157.096571] Code: 48 8b 6d 00 e8 4f 9e 79 03 31 ff 41 89 c5 89 c6 e8 93 f3 31 00 45 85 ed 0f 85 e1 05 00 00 e8 55 f8 31 00 48 89 e8 48 c1 e8 03 <42> 80 3c 20 00 0f 85 a0 0e 00 00 4c 8b 75 00 48 89 df 4c 89 34 24
[  157.096594] RSP: 0018:ffff88800fa0f0e8 EFLAGS: 00010056
[  157.096614] RAX: 0000000000000000 RBX: ffff88800e531a18 RCX: ffffc9000d865000
[  157.096630] RDX: 0000000000040000 RSI: ffffffff8141ef2b RDI: 0000000000000005
[  157.096645] RBP: 0000000000000001 R08: 0000000000000001 R09: fffffbfff0f11ef4
[  157.096659] R10: 0000000000000001 R11: 0000000000000001 R12: dffffc0000000000
[  157.096674] R13: 0000000000000001 R14: 0000000000000001 R15: ffff88804753f000
[  157.096692] FS:  00007f8b781d6700(0000) GS:ffff8880e56dd000(0000) knlGS:0000000000000000
[  157.096714] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  157.096730] CR2: 00007f3306f8c541 CR3: 000000000ce53000 CR4: 0000000000350ef0
[  157.096745] Call Trace:
[  157.096753]  <TASK>
[  157.096763]  ? find_held_lock+0x2b/0x80
[  157.096801]  queue_work_on+0xd0/0xe0
[  157.096830]  loop_queue_rq+0x5c8/0x1180
[  157.096863]  __blk_mq_issue_directly+0xd5/0x260
[  157.096897]  ? __pfx___blk_mq_issue_directly+0x10/0x10
[  157.096934]  blk_mq_request_issue_directly+0x11c/0x1e0
[  157.096959]  blk_mq_issue_direct+0x192/0x640
[  157.096999]  blk_mq_dispatch_queue_requests+0x4b0/0x7c0
[  157.097025]  blk_mq_flush_plug_list+0x1ec/0x5b0
[  157.097048]  ? mpage_readahead+0x3fe/0x550
[  157.097078]  ? __pfx_mpage_readahead+0x10/0x10
[  157.097106]  ? __pfx_blk_mq_flush_plug_list+0x10/0x10
[  157.097135]  __blk_flush_plug+0x25c/0x460
[  157.097159]  ? __pfx___blk_flush_plug+0x10/0x10
[  157.097181]  ? lock_acquire+0x15e/0x2f0
[  157.097207]  ? __folio_batch_add_and_move+0x49a/0x960
[  157.097245]  blk_finish_plug+0x53/0xa0
[  157.097266]  read_pages+0x51b/0xb10
[  157.097295]  ? __pfx_lru_add+0x10/0x10
[  157.097328]  ? __pfx_read_pages+0x10/0x10
[  157.097361]  ? filemap_get_read_batch+0x2b8/0x880
[  157.097399]  page_cache_ra_unbounded+0x391/0x6a0
[  157.097435]  page_cache_ra_order+0x236/0x2f0
[  157.097467]  page_cache_sync_ra+0x54d/0xaa0
[  157.097500]  filemap_get_pages+0x354/0x18e0
[  157.097527]  ? __pfx_filemap_get_pages+0x10/0x10
[  157.097556]  filemap_splice_read+0x5c4/0xd10
[  157.097585]  ? __pfx_filemap_splice_read+0x10/0x10
[  157.097609]  ? lock_acquire+0x15e/0x2f0
[  157.097636]  ? lock_acquire+0x15e/0x2f0
[  157.097662]  ? 0xffffffff81000000
[  157.097677]  ? find_held_lock+0x2b/0x80
[  157.097711]  ? __memcg_slab_post_alloc_hook+0x4a2/0x9d0
[  157.097750]  ? lock_release+0xc8/0x290
[  157.097777]  ? __memcg_slab_post_alloc_hook+0x4ac/0x9d0
[  157.097816]  ? kasan_save_track+0x14/0x30
[  157.097845]  ? look_up_lock_class+0x66/0x150
[  157.097880]  ? register_lock_class+0x41/0x560
[  157.097907]  ? lockdep_init_map_type+0x4b/0x240
[  157.097935]  ? __pfx_pipe_lock_cmp_fn+0x10/0x10
[  157.097959]  ? __pfx_filemap_splice_read+0x10/0x10
[  157.097984]  do_splice_read+0x1f8/0x2a0
[  157.098017]  splice_direct_to_actor+0x2a8/0x9d0
[  157.098050]  ? __pfx_direct_splice_actor+0x10/0x10
[  157.098086]  ? __pfx_splice_direct_to_actor+0x10/0x10
[  157.098120]  ? lock_acquire+0x15e/0x2f0
[  157.098147]  do_splice_direct+0x179/0x250
[  157.098179]  ? __pfx_do_splice_direct+0x10/0x10
[  157.098212]  ? __pfx_direct_file_splice_eof+0x10/0x10
[  157.098245]  ? security_file_permission+0x22/0x90
[  157.098283]  do_sendfile+0xa8e/0xdc0
[  157.098309]  ? __pfx_do_sendfile+0x10/0x10
[  157.098333]  ? __x64_sys_futex+0x1c9/0x4d0
[  157.098360]  ? __x64_sys_futex+0x1d2/0x4d0
[  157.098388]  __x64_sys_sendfile64+0x1d3/0x210
[  157.098417]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[  157.098451]  do_syscall_64+0xbf/0x360
[  157.098472]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  157.098495] RIP: 0033:0x7f8b7aca2b19
[  157.098511] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  157.098533] RSP: 002b:00007f8b781d6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  157.098556] RAX: ffffffffffffffda RBX: 00007f8b7adb60e0 RCX: 00007f8b7aca2b19
[  157.098571] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000004
[  157.098585] RBP: 00007f8b7acfcf6d R08: 0000000000000000 R09: 0000000000000000
[  157.098600] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000
[  157.098614] R13: 00007ffe5fbb25ff R14: 00007f8b781d6300 R15: 0000000000022000
[  157.098636]  </TASK>
[  157.098644] Modules linked in:
[  157.098659] ---[ end trace 0000000000000000 ]---
[  157.098670] RIP: 0010:__queue_work+0x202/0x1240
[  157.098701] Code: 48 8b 6d 00 e8 4f 9e 79 03 31 ff 41 89 c5 89 c6 e8 93 f3 31 00 45 85 ed 0f 85 e1 05 00 00 e8 55 f8 31 00 48 89 e8 48 c1 e8 03 <42> 80 3c 20 00 0f 85 a0 0e 00 00 4c 8b 75 00 48 89 df 4c 89 34 24
[  157.098722] RSP: 0018:ffff88800fa0f0e8 EFLAGS: 00010056
[  157.098740] RAX: 0000000000000000 RBX: ffff88800e531a18 RCX: ffffc9000d865000
[  157.098756] RDX: 0000000000040000 RSI: ffffffff8141ef2b RDI: 0000000000000005
[  157.098771] RBP: 0000000000000001 R08: 0000000000000001 R09: fffffbfff0f11ef4
[  157.098785] R10: 0000000000000001 R11: 0000000000000001 R12: dffffc0000000000
[  157.098800] R13: 0000000000000001 R14: 0000000000000001 R15: ffff88804753f000
[  157.098818] FS:  00007f8b781d6700(0000) GS:ffff8880e56dd000(0000) knlGS:0000000000000000
[  157.098839] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  157.098855] CR2: 00007f3306f8c541 CR3: 000000000ce53000 CR4: 0000000000350ef0
[  157.098871] note: syz-executor.7[4022] exited with irqs disabled
[  157.098990] note: syz-executor.7[4022] exited with preempt_count 1
[  157.103089] kmemleak: Cannot insert 0x607f1a6390fc into the object search tree (overlaps existing)
[  157.103102] CPU: 0 UID: 0 PID: 4025 Comm: syz-executor.4 Tainted: G      D W           6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) 
[  157.103122] Tainted: [D]=DIE, [W]=WARN
[  157.103126] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  157.103133] Call Trace:
[  157.103137]  <TASK>
[  157.103141]  dump_stack_lvl+0xca/0x120
[  157.103162]  __link_object+0x190/0x210
[  157.103178]  __create_object+0x48/0x80
[  157.103196]  pcpu_alloc_noprof+0x87a/0x1170
[  157.103216]  __percpu_init_rwsem+0x2d/0x160
[  157.103233]  ? security_sb_alloc+0x75/0x140
[  157.103248]  alloc_super+0x29e/0xb80
[  157.103261]  ? __pfx_super_s_dev_test+0x10/0x10
[  157.103278]  sget_fc+0xfe/0xb80
[  157.103289]  ? __pfx_super_s_dev_set+0x10/0x10
[  157.103307]  get_tree_bdev_flags+0x1b8/0x620
[  157.103319]  ? __pfx_vfat_fill_super+0x10/0x10
[  157.103331]  ? __pfx_get_tree_bdev_flags+0x10/0x10
[  157.103344]  ? cap_capable+0xdb/0x3b0
[  157.103360]  ? security_capable+0x2f/0x90
[  157.103375]  vfs_get_tree+0x93/0x340
[  157.103393]  path_mount+0x132d/0x1dd0
[  157.103407]  ? trace_irq_enable.constprop.0+0xc2/0x100
[  157.103421]  ? __pfx_path_mount+0x10/0x10
[  157.103434]  ? kmem_cache_free+0x2a1/0x540
[  157.103451]  ? putname.part.0+0x11b/0x160
[  157.103467]  ? getname_flags.part.0+0x1c6/0x540
[  157.103485]  ? putname.part.0+0x11b/0x160
[  157.103502]  __x64_sys_mount+0x27b/0x300
[  157.103516]  ? __pfx___x64_sys_mount+0x10/0x10
[  157.103532]  do_syscall_64+0xbf/0x360
[  157.103542]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  157.103555] RIP: 0033:0x7f305625004a
01:40:03 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000270000004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000010d00)=ANY=[])
r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r1 = syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x7ff, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="465001da9c24c98cc491fa", 0xb, 0x2abe}], 0x1000000, &(0x7f0000000180)={[{@noacl}], [{@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@fsname={'fsname', 0x3d, 'vfat\x00'}}, {@seclabel}, {@hash}]})
clock_gettime(0x0, &(0x7f0000000240)={<r2=>0x0, <r3=>0x0})
futimesat(r1, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)={{0x77359400}, {r2, r3/1000+10000}})
getdents64(r0, &(0x7f0000001480)=""/4096, 0x18)

[  157.103563] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  157.103575] RSP: 002b:00007f30537c3fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5
[  157.103587] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f305625004a
[  157.103595] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007f30537c4000
[  157.103603] RBP: 00007f30537c4040 R08: 00007f30537c4040 R09: 0000000020000000
[  157.103611] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000
[  157.103619] R13: 0000000020000100 R14: 00007f30537c4000 R15: 0000000020010d00
[  157.103630]  </TASK>
[  157.103641] kmemleak: Kernel memory leak detector disabled
[  157.103645] kmemleak: Object (percpu) 0x607f1a6390f8 (size 8):
[  157.103652] kmemleak:   comm "syz-executor.0", pid 4018, jiffies 4294823920
[  157.103660] kmemleak:   min_count = 1
[  157.103664] kmemleak:   count = 0
[  157.103668] kmemleak:   flags = 0x21
[  157.103672] kmemleak:   checksum = 0
[  157.103676] kmemleak:   backtrace:
[  157.103679]  pcpu_alloc_noprof+0x87a/0x1170
[  157.103696]  percpu_ref_init+0x37/0x400
[  157.103716]  wb_get_create+0x25b/0x1120
[  157.103727]  __inode_attach_wb+0x159/0xc70
[  157.103739]  __folio_mark_dirty+0x908/0xcd0
[  157.103753]  mark_buffer_dirty+0x316/0x3a0
[  157.103771]  fat_set_state+0x227/0x360
[  157.103786]  fat_fill_super+0x2669/0x3fd0
[  157.103802]  get_tree_bdev_flags+0x38a/0x620
[  157.103813]  vfs_get_tree+0x93/0x340
[  157.103829]  path_mount+0x132d/0x1dd0
[  157.103841]  __x64_sys_mount+0x27b/0x300
[  157.103853]  do_syscall_64+0xbf/0x360
[  157.103862]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  157.106321] FAT-fs (loop4): Directory bread(block 6) failed
[  157.106731] ------------[ cut here ]------------
[  157.107112] FAT-fs (loop4): Directory bread(block 7) failed
[  157.108236] WARNING: kernel/exit.c:898 at do_exit+0x1c36/0x2970, CPU#1: syz-executor.7/4022
[  157.108860] FAT-fs (loop4): Directory bread(block 8) failed
[  157.109905] Modules linked in:
[  157.112494] FAT-fs (loop4): Directory bread(block 9) failed
[  157.112810] CPU: 1 UID: 0 PID: 4022 Comm: syz-executor.7 Tainted: G      D W           6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) 
[  157.116330] kmemleak: Automatic memory scanning thread ended
[  157.116381] Tainted: [D]=DIE, [W]=WARN
[  157.134383] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.6'.
[  157.134554] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  157.245644] RIP: 0010:do_exit+0x1c36/0x2970
[  157.246521] Code: 96 0a 00 00 c7 43 18 00 00 00 00 e9 21 e6 ff ff e8 bf a4 38 00 bf 02 24 00 00 e8 f5 ab 0b 00 e9 41 ff ff ff e8 ab a4 38 00 90 <0f> 0b 90 e9 87 e4 ff ff e8 9d a4 38 00 4c 89 e6 bf 05 06 00 00 e8
[  157.249840] RSP: 0018:ffff88800fa0fe40 EFLAGS: 00010212
[  157.250878] RAX: 00000000000327dd RBX: 0000000000000200 RCX: ffffc9000d865000
[  157.252089] RDX: 0000000000040000 RSI: ffffffff813b42d5 RDI: ffff88801b81ad68
[  157.253431] RBP: ffff88801b819b80 R08: 0000000000000001 R09: fffffbfff0f11cd8
[  157.254578] R10: 0000000000000200 R11: 0000000065646f43 R12: 000000000000000b
[  157.255819] R13: 0000000000002710 R14: dffffc0000000000 R15: 0000000000000000
[  157.257194] FS:  00007f8b781d6700(0000) GS:ffff8880e56dd000(0000) knlGS:0000000000000000
[  157.258535] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  157.259529] CR2: 00007f3306f8c541 CR3: 000000000ce53000 CR4: 0000000000350ef0
[  157.260773] Call Trace:
[  157.261255]  <TASK>
[  157.261717]  ? _printk+0xbe/0xf0
[  157.262304]  ? __pfx__printk+0x10/0x10
[  157.262962]  ? __pfx_do_exit+0x10/0x10
[  157.263633]  make_task_dead+0x174/0x3b0
[  157.264393]  ? do_syscall_64+0xbf/0x360
[  157.265132]  rewind_stack_and_make_dead+0x16/0x20
[  157.265971] RIP: 0033:0x7f8b7aca2b19
[  157.266716] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  157.269708] RSP: 002b:00007f8b781d6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  157.270962] RAX: ffffffffffffffda RBX: 00007f8b7adb60e0 RCX: 00007f8b7aca2b19
[  157.272190] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000004
[  157.273408] RBP: 00007f8b7acfcf6d R08: 0000000000000000 R09: 0000000000000000
[  157.274706] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000
[  157.275992] R13: 00007ffe5fbb25ff R14: 00007f8b781d6300 R15: 0000000000022000
[  157.277189]  </TASK>
[  157.277590] irq event stamp: 108
[  157.278135] hardirqs last  enabled at (107): [<ffffffff84bde3bc>] _raw_spin_unlock_irqrestore+0x2c/0x50
[  157.279669] hardirqs last disabled at (108): [<ffffffff84bde0a2>] _raw_spin_lock_irq+0x42/0x50
[  157.281246] softirqs last  enabled at (0): [<ffffffff81395ed8>] copy_process+0x1e58/0x73c0
[  157.282749] softirqs last disabled at (0): [<0000000000000000>] 0x0
[  157.283915] ---[ end trace 0000000000000000 ]---
[  157.284732] BUG: sleeping function called from invalid context at ./include/linux/percpu-rwsem.h:51
[  157.286165] in_atomic(): 0, irqs_disabled(): 0, non_block: 0, pid: 4022, name: syz-executor.7
[  157.287520] preempt_count: 0, expected: 0
[  157.288213] RCU nest depth: 2, expected: 0
[  157.288999] INFO: lockdep is turned off.
[  157.289654] CPU: 1 UID: 0 PID: 4022 Comm: syz-executor.7 Tainted: G      D W           6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) 
[  157.289691] Tainted: [D]=DIE, [W]=WARN
[  157.289699] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  157.289711] Call Trace:
[  157.289718]  <TASK>
[  157.289726]  dump_stack_lvl+0xfa/0x120
[  157.289761]  __might_resched+0x2f3/0x510
[  157.289786]  exit_signals+0x25/0x940
[  157.289821]  do_exit+0x2db/0x2970
[  157.289845]  ? _printk+0xbe/0xf0
[  157.289868]  ? __pfx__printk+0x10/0x10
[  157.289893]  ? __pfx_do_exit+0x10/0x10
[  157.289922]  make_task_dead+0x174/0x3b0
[  157.289947]  ? do_syscall_64+0xbf/0x360
[  157.289966]  rewind_stack_and_make_dead+0x16/0x20
[  157.289996] RIP: 0033:0x7f8b7aca2b19
[  157.290012] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  157.290032] RSP: 002b:00007f8b781d6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  157.290054] RAX: ffffffffffffffda RBX: 00007f8b7adb60e0 RCX: 00007f8b7aca2b19
[  157.290069] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000004
[  157.290081] RBP: 00007f8b7acfcf6d R08: 0000000000000000 R09: 0000000000000000
[  157.290095] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000
[  157.290108] R13: 00007ffe5fbb25ff R14: 00007f8b781d6300 R15: 0000000000022000
[  157.290129]  </TASK>
[  157.405845] loop4: detected capacity change from 0 to 6
[  157.412008] FAT-fs (loop4): Directory bread(block 6) failed
[  157.413013] FAT-fs (loop4): Directory bread(block 7) failed
[  157.414611] FAT-fs (loop4): Directory bread(block 8) failed
[  157.416601] FAT-fs (loop4): Directory bread(block 9) failed
[  157.497521] audit: type=1400 audit(1756690804.185:10): avc:  denied  { write } for  pid=4027 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
SYZFAIL: failed to write(kmemleak, "scan")
 (errno 1: Operation not permitted)
BUG: leak checking failed

VM DIAGNOSIS:
01:40:02  Registers:
info registers vcpu 0
RAX=0000000000000001 RBX=ffffc90011be0c50 RCX=0000000000004002 RDX=ffff88801b4ab700
RSI=0000000000000004 RDI=ffff88801b8c7b48 RBP=0000000000000000 RSP=ffff88801b8c7bd8
R8 =0000000000000001 R9 =ffffed1003718f69 R10=0000000000000003 R11=0000000000000001
R12=ffffc90011be0ff9 R13=ffff88804676da68 R14=ffff88801b4ab700 R15=0000000000000086
RIP=ffffffff81b34f71 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00005555877d6400 00000000 00000000
GS =0000 ffff8880e55dd000 00000000 00000000
LDT=0000 fffffe2400000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000562b8d227618 CR3=000000000e692000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000
XMM02=00000000000000000000000000000000 XMM03=00000000000000100000000000000000
XMM04=00007f5ea57bb10000007f5ea57bb140 XMM05=0000000000000000159b38caef2dc000
XMM06=00007f5ea57bb1400000000000000000 XMM07=00000000000000000000000000000000
XMM08=2e726f7475636578652d7a7973223d6d XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=00000066079c6320 RBX=ffff88800a8d0000 RCX=0000000000000001 RDX=0000000000005630
RSI=0000000000000001 RDI=00000066079c0cf0 RBP=00000000000003e8 RSP=ffff88800975f7c0
R8 =0000000000000001 R9 =0000000000006d2c R10=00000000000103f6 R11=0000000000000001
R12=ffff88800a8d0180 R13=ffffed100151a001 R14=0000000000000000 R15=dffffc0000000000
RIP=ffffffff84ba6962 RFL=00000083 [--S---C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e56dd000 00000000 00000000
LDT=0000 fffffe5a00000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f3190067a90 CR3=000000000da7f000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000
XMM02=000000000000000041872b9f00000000 XMM03=0000ff00000000000000000000000000
XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962
XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000