Warning: Permanently added '[localhost]:13115' (ECDSA) to the list of known hosts.
2025/08/29 18:13:03 fuzzer started
2025/08/29 18:13:03 dialing manager at localhost:43077
syzkaller login: [   58.330603] cgroup: Unknown subsys name 'net'
[   58.393221] cgroup: Unknown subsys name 'cpuset'
[   58.401992] cgroup: Unknown subsys name 'rlimit'
2025/08/29 18:13:13 syscalls: 2214
2025/08/29 18:13:13 code coverage: enabled
2025/08/29 18:13:13 comparison tracing: enabled
2025/08/29 18:13:13 extra coverage: enabled
2025/08/29 18:13:13 setuid sandbox: enabled
2025/08/29 18:13:13 namespace sandbox: enabled
2025/08/29 18:13:13 Android sandbox: enabled
2025/08/29 18:13:13 fault injection: enabled
2025/08/29 18:13:13 leak checking: enabled
2025/08/29 18:13:13 net packet injection: enabled
2025/08/29 18:13:13 net device setup: enabled
2025/08/29 18:13:13 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/08/29 18:13:13 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/08/29 18:13:13 USB emulation: enabled
2025/08/29 18:13:13 hci packet injection: enabled
2025/08/29 18:13:13 wifi device emulation: enabled
2025/08/29 18:13:13 802.15.4 emulation: enabled
2025/08/29 18:13:13 fetching corpus: 50, signal 22340/24109 (executing program)
2025/08/29 18:13:13 fetching corpus: 100, signal 31426/34799 (executing program)
2025/08/29 18:13:13 fetching corpus: 150, signal 36755/41676 (executing program)
2025/08/29 18:13:14 fetching corpus: 200, signal 45677/51908 (executing program)
2025/08/29 18:13:14 fetching corpus: 250, signal 50829/58385 (executing program)
2025/08/29 18:13:14 fetching corpus: 300, signal 56903/65606 (executing program)
2025/08/29 18:13:14 fetching corpus: 350, signal 61560/71400 (executing program)
2025/08/29 18:13:14 fetching corpus: 400, signal 67260/78094 (executing program)
2025/08/29 18:13:14 fetching corpus: 450, signal 69952/81920 (executing program)
2025/08/29 18:13:14 fetching corpus: 500, signal 72637/85668 (executing program)
2025/08/29 18:13:14 fetching corpus: 550, signal 75744/89767 (executing program)
2025/08/29 18:13:14 fetching corpus: 600, signal 77987/93051 (executing program)
2025/08/29 18:13:14 fetching corpus: 650, signal 80305/96341 (executing program)
2025/08/29 18:13:14 fetching corpus: 700, signal 84587/101290 (executing program)
2025/08/29 18:13:14 fetching corpus: 750, signal 87514/104978 (executing program)
2025/08/29 18:13:15 fetching corpus: 800, signal 89257/107603 (executing program)
2025/08/29 18:13:15 fetching corpus: 850, signal 92742/111672 (executing program)
2025/08/29 18:13:15 fetching corpus: 900, signal 94581/114281 (executing program)
2025/08/29 18:13:15 fetching corpus: 950, signal 96885/117224 (executing program)
2025/08/29 18:13:15 fetching corpus: 1000, signal 98485/119609 (executing program)
2025/08/29 18:13:15 fetching corpus: 1050, signal 99829/121776 (executing program)
2025/08/29 18:13:15 fetching corpus: 1100, signal 101717/124325 (executing program)
2025/08/29 18:13:15 fetching corpus: 1150, signal 102962/126333 (executing program)
2025/08/29 18:13:15 fetching corpus: 1200, signal 104543/128599 (executing program)
2025/08/29 18:13:15 fetching corpus: 1250, signal 106018/130731 (executing program)
2025/08/29 18:13:15 fetching corpus: 1300, signal 107089/132533 (executing program)
2025/08/29 18:13:16 fetching corpus: 1350, signal 108544/134580 (executing program)
2025/08/29 18:13:16 fetching corpus: 1400, signal 109898/136560 (executing program)
2025/08/29 18:13:16 fetching corpus: 1450, signal 111245/138470 (executing program)
2025/08/29 18:13:16 fetching corpus: 1500, signal 112242/140110 (executing program)
2025/08/29 18:13:16 fetching corpus: 1550, signal 113767/142081 (executing program)
2025/08/29 18:13:16 fetching corpus: 1600, signal 114527/143527 (executing program)
2025/08/29 18:13:16 fetching corpus: 1650, signal 115867/145338 (executing program)
2025/08/29 18:13:16 fetching corpus: 1700, signal 117360/147252 (executing program)
2025/08/29 18:13:16 fetching corpus: 1750, signal 118361/148901 (executing program)
2025/08/29 18:13:16 fetching corpus: 1800, signal 119368/150439 (executing program)
2025/08/29 18:13:17 fetching corpus: 1850, signal 120101/151751 (executing program)
2025/08/29 18:13:17 fetching corpus: 1900, signal 120972/153136 (executing program)
2025/08/29 18:13:17 fetching corpus: 1950, signal 122179/154771 (executing program)
2025/08/29 18:13:17 fetching corpus: 2000, signal 123412/156418 (executing program)
2025/08/29 18:13:17 fetching corpus: 2050, signal 124247/157780 (executing program)
2025/08/29 18:13:17 fetching corpus: 2100, signal 125160/159132 (executing program)
2025/08/29 18:13:17 fetching corpus: 2150, signal 126207/160539 (executing program)
2025/08/29 18:13:17 fetching corpus: 2200, signal 127101/161852 (executing program)
2025/08/29 18:13:17 fetching corpus: 2250, signal 128401/163370 (executing program)
2025/08/29 18:13:17 fetching corpus: 2300, signal 129116/164578 (executing program)
2025/08/29 18:13:17 fetching corpus: 2350, signal 129831/165782 (executing program)
2025/08/29 18:13:18 fetching corpus: 2400, signal 130537/166905 (executing program)
2025/08/29 18:13:18 fetching corpus: 2450, signal 131331/168116 (executing program)
2025/08/29 18:13:18 fetching corpus: 2500, signal 132039/169235 (executing program)
2025/08/29 18:13:18 fetching corpus: 2550, signal 132976/170425 (executing program)
2025/08/29 18:13:18 fetching corpus: 2600, signal 133781/171617 (executing program)
2025/08/29 18:13:18 fetching corpus: 2650, signal 134589/172710 (executing program)
2025/08/29 18:13:18 fetching corpus: 2700, signal 135557/173976 (executing program)
2025/08/29 18:13:18 fetching corpus: 2750, signal 136096/174976 (executing program)
2025/08/29 18:13:18 fetching corpus: 2800, signal 137124/176267 (executing program)
2025/08/29 18:13:18 fetching corpus: 2850, signal 138159/177430 (executing program)
2025/08/29 18:13:18 fetching corpus: 2900, signal 138861/178417 (executing program)
2025/08/29 18:13:19 fetching corpus: 2950, signal 139450/179328 (executing program)
2025/08/29 18:13:19 fetching corpus: 3000, signal 140081/180260 (executing program)
2025/08/29 18:13:19 fetching corpus: 3050, signal 140680/181165 (executing program)
2025/08/29 18:13:19 fetching corpus: 3100, signal 141511/182159 (executing program)
2025/08/29 18:13:19 fetching corpus: 3150, signal 141911/182929 (executing program)
2025/08/29 18:13:19 fetching corpus: 3200, signal 142441/183773 (executing program)
2025/08/29 18:13:19 fetching corpus: 3250, signal 143032/184655 (executing program)
2025/08/29 18:13:19 fetching corpus: 3300, signal 143839/185661 (executing program)
2025/08/29 18:13:19 fetching corpus: 3350, signal 144401/186524 (executing program)
2025/08/29 18:13:19 fetching corpus: 3400, signal 144922/187344 (executing program)
2025/08/29 18:13:19 fetching corpus: 3450, signal 145684/188241 (executing program)
2025/08/29 18:13:19 fetching corpus: 3500, signal 146740/189343 (executing program)
2025/08/29 18:13:20 fetching corpus: 3550, signal 147291/190147 (executing program)
2025/08/29 18:13:20 fetching corpus: 3600, signal 148022/190949 (executing program)
2025/08/29 18:13:20 fetching corpus: 3650, signal 148443/191676 (executing program)
2025/08/29 18:13:20 fetching corpus: 3700, signal 148903/192394 (executing program)
2025/08/29 18:13:20 fetching corpus: 3750, signal 149481/193156 (executing program)
2025/08/29 18:13:20 fetching corpus: 3800, signal 149867/193800 (executing program)
2025/08/29 18:13:20 fetching corpus: 3850, signal 150590/194725 (executing program)
2025/08/29 18:13:20 fetching corpus: 3900, signal 151191/195453 (executing program)
2025/08/29 18:13:20 fetching corpus: 3950, signal 151603/196109 (executing program)
2025/08/29 18:13:20 fetching corpus: 4000, signal 152073/196756 (executing program)
2025/08/29 18:13:20 fetching corpus: 4050, signal 152544/197434 (executing program)
2025/08/29 18:13:21 fetching corpus: 4100, signal 153185/198208 (executing program)
2025/08/29 18:13:21 fetching corpus: 4150, signal 153675/198881 (executing program)
2025/08/29 18:13:21 fetching corpus: 4200, signal 154261/199545 (executing program)
2025/08/29 18:13:21 fetching corpus: 4250, signal 154931/200254 (executing program)
2025/08/29 18:13:21 fetching corpus: 4300, signal 155557/200916 (executing program)
2025/08/29 18:13:21 fetching corpus: 4350, signal 156050/201536 (executing program)
2025/08/29 18:13:21 fetching corpus: 4400, signal 156674/202164 (executing program)
2025/08/29 18:13:21 fetching corpus: 4450, signal 157052/202690 (executing program)
2025/08/29 18:13:21 fetching corpus: 4500, signal 157510/203253 (executing program)
2025/08/29 18:13:21 fetching corpus: 4550, signal 158015/203877 (executing program)
2025/08/29 18:13:22 fetching corpus: 4600, signal 158377/204393 (executing program)
2025/08/29 18:13:22 fetching corpus: 4650, signal 158973/204971 (executing program)
2025/08/29 18:13:22 fetching corpus: 4700, signal 159503/205518 (executing program)
2025/08/29 18:13:22 fetching corpus: 4750, signal 160060/206035 (executing program)
2025/08/29 18:13:22 fetching corpus: 4800, signal 160392/206516 (executing program)
2025/08/29 18:13:22 fetching corpus: 4850, signal 161474/207060 (executing program)
2025/08/29 18:13:22 fetching corpus: 4900, signal 162060/207544 (executing program)
2025/08/29 18:13:22 fetching corpus: 4950, signal 162439/207998 (executing program)
2025/08/29 18:13:22 fetching corpus: 5000, signal 162855/208478 (executing program)
2025/08/29 18:13:22 fetching corpus: 5050, signal 163447/208953 (executing program)
2025/08/29 18:13:22 fetching corpus: 5100, signal 163938/209404 (executing program)
2025/08/29 18:13:22 fetching corpus: 5150, signal 164382/209676 (executing program)
2025/08/29 18:13:23 fetching corpus: 5200, signal 164773/209705 (executing program)
2025/08/29 18:13:23 fetching corpus: 5250, signal 165277/209725 (executing program)
2025/08/29 18:13:23 fetching corpus: 5300, signal 165756/209735 (executing program)
2025/08/29 18:13:23 fetching corpus: 5350, signal 166178/209741 (executing program)
2025/08/29 18:13:23 fetching corpus: 5400, signal 166538/209785 (executing program)
2025/08/29 18:13:23 fetching corpus: 5450, signal 166952/209789 (executing program)
2025/08/29 18:13:23 fetching corpus: 5500, signal 167361/209801 (executing program)
2025/08/29 18:13:23 fetching corpus: 5550, signal 167754/209803 (executing program)
2025/08/29 18:13:23 fetching corpus: 5600, signal 168302/209804 (executing program)
2025/08/29 18:13:23 fetching corpus: 5650, signal 168694/209809 (executing program)
2025/08/29 18:13:23 fetching corpus: 5700, signal 169265/209810 (executing program)
2025/08/29 18:13:23 fetching corpus: 5750, signal 169503/209813 (executing program)
2025/08/29 18:13:23 fetching corpus: 5800, signal 169810/209817 (executing program)
2025/08/29 18:13:24 fetching corpus: 5850, signal 170082/209821 (executing program)
2025/08/29 18:13:24 fetching corpus: 5900, signal 170469/209823 (executing program)
2025/08/29 18:13:24 fetching corpus: 5950, signal 170733/209824 (executing program)
2025/08/29 18:13:24 fetching corpus: 6000, signal 171069/209830 (executing program)
2025/08/29 18:13:24 fetching corpus: 6050, signal 171339/209840 (executing program)
2025/08/29 18:13:25 fetching corpus: 6100, signal 171645/209844 (executing program)
2025/08/29 18:13:25 fetching corpus: 6150, signal 171918/209866 (executing program)
2025/08/29 18:13:25 fetching corpus: 6200, signal 172308/209868 (executing program)
2025/08/29 18:13:25 fetching corpus: 6250, signal 172804/209883 (executing program)
2025/08/29 18:13:25 fetching corpus: 6300, signal 173280/209990 (executing program)
2025/08/29 18:13:25 fetching corpus: 6350, signal 173692/210001 (executing program)
2025/08/29 18:13:25 fetching corpus: 6400, signal 173938/210006 (executing program)
2025/08/29 18:13:25 fetching corpus: 6450, signal 174738/210010 (executing program)
2025/08/29 18:13:25 fetching corpus: 6500, signal 175386/210127 (executing program)
2025/08/29 18:13:26 fetching corpus: 6550, signal 175612/210127 (executing program)
2025/08/29 18:13:26 fetching corpus: 6600, signal 175903/210132 (executing program)
2025/08/29 18:13:26 fetching corpus: 6650, signal 176158/210137 (executing program)
2025/08/29 18:13:26 fetching corpus: 6700, signal 176567/210156 (executing program)
2025/08/29 18:13:26 fetching corpus: 6750, signal 176829/210168 (executing program)
2025/08/29 18:13:26 fetching corpus: 6800, signal 177141/210171 (executing program)
2025/08/29 18:13:26 fetching corpus: 6850, signal 177499/210173 (executing program)
2025/08/29 18:13:26 fetching corpus: 6900, signal 177864/210193 (executing program)
2025/08/29 18:13:26 fetching corpus: 6950, signal 178212/210201 (executing program)
2025/08/29 18:13:26 fetching corpus: 7000, signal 178415/210217 (executing program)
2025/08/29 18:13:26 fetching corpus: 7050, signal 178811/210217 (executing program)
2025/08/29 18:13:27 fetching corpus: 7100, signal 179211/210226 (executing program)
2025/08/29 18:13:27 fetching corpus: 7150, signal 179445/210241 (executing program)
2025/08/29 18:13:27 fetching corpus: 7200, signal 179784/210245 (executing program)
2025/08/29 18:13:27 fetching corpus: 7250, signal 180106/210249 (executing program)
2025/08/29 18:13:27 fetching corpus: 7300, signal 180548/210266 (executing program)
2025/08/29 18:13:27 fetching corpus: 7350, signal 180883/210267 (executing program)
2025/08/29 18:13:27 fetching corpus: 7400, signal 181112/210286 (executing program)
2025/08/29 18:13:27 fetching corpus: 7450, signal 181487/210288 (executing program)
2025/08/29 18:13:27 fetching corpus: 7500, signal 181871/210292 (executing program)
2025/08/29 18:13:27 fetching corpus: 7550, signal 182412/210292 (executing program)
2025/08/29 18:13:27 fetching corpus: 7600, signal 182636/210304 (executing program)
2025/08/29 18:13:27 fetching corpus: 7650, signal 182937/210307 (executing program)
2025/08/29 18:13:28 fetching corpus: 7700, signal 183215/210309 (executing program)
2025/08/29 18:13:28 fetching corpus: 7750, signal 183481/210316 (executing program)
2025/08/29 18:13:28 fetching corpus: 7800, signal 183775/210319 (executing program)
2025/08/29 18:13:28 fetching corpus: 7850, signal 184057/210347 (executing program)
2025/08/29 18:13:28 fetching corpus: 7900, signal 184401/210352 (executing program)
2025/08/29 18:13:28 fetching corpus: 7950, signal 184617/210379 (executing program)
2025/08/29 18:13:28 fetching corpus: 8000, signal 184910/210379 (executing program)
2025/08/29 18:13:28 fetching corpus: 8050, signal 185288/210390 (executing program)
2025/08/29 18:13:28 fetching corpus: 8100, signal 185674/210390 (executing program)
2025/08/29 18:13:28 fetching corpus: 8150, signal 185938/210417 (executing program)
2025/08/29 18:13:28 fetching corpus: 8200, signal 186199/210424 (executing program)
2025/08/29 18:13:28 fetching corpus: 8250, signal 186571/210435 (executing program)
2025/08/29 18:13:28 fetching corpus: 8300, signal 186867/210442 (executing program)
2025/08/29 18:13:29 fetching corpus: 8350, signal 187207/210446 (executing program)
2025/08/29 18:13:29 fetching corpus: 8400, signal 187464/210510 (executing program)
2025/08/29 18:13:29 fetching corpus: 8450, signal 187805/210513 (executing program)
2025/08/29 18:13:29 fetching corpus: 8500, signal 188019/210518 (executing program)
2025/08/29 18:13:29 fetching corpus: 8550, signal 188248/210530 (executing program)
2025/08/29 18:13:29 fetching corpus: 8600, signal 188537/210532 (executing program)
2025/08/29 18:13:29 fetching corpus: 8650, signal 188767/210533 (executing program)
2025/08/29 18:13:29 fetching corpus: 8700, signal 189044/210586 (executing program)
2025/08/29 18:13:29 fetching corpus: 8750, signal 189254/210597 (executing program)
2025/08/29 18:13:29 fetching corpus: 8800, signal 189532/210622 (executing program)
2025/08/29 18:13:29 fetching corpus: 8850, signal 189693/210622 (executing program)
2025/08/29 18:13:29 fetching corpus: 8900, signal 189968/210633 (executing program)
2025/08/29 18:13:30 fetching corpus: 8950, signal 190234/210633 (executing program)
2025/08/29 18:13:30 fetching corpus: 9000, signal 190496/210638 (executing program)
2025/08/29 18:13:30 fetching corpus: 9050, signal 190682/210640 (executing program)
2025/08/29 18:13:30 fetching corpus: 9100, signal 191016/210643 (executing program)
2025/08/29 18:13:30 fetching corpus: 9150, signal 191186/210647 (executing program)
2025/08/29 18:13:30 fetching corpus: 9200, signal 191406/210647 (executing program)
2025/08/29 18:13:30 fetching corpus: 9250, signal 191876/210704 (executing program)
2025/08/29 18:13:30 fetching corpus: 9300, signal 192056/210709 (executing program)
2025/08/29 18:13:30 fetching corpus: 9350, signal 192420/210712 (executing program)
2025/08/29 18:13:30 fetching corpus: 9400, signal 192615/210721 (executing program)
2025/08/29 18:13:30 fetching corpus: 9450, signal 192833/210738 (executing program)
2025/08/29 18:13:30 fetching corpus: 9500, signal 193009/210761 (executing program)
2025/08/29 18:13:31 fetching corpus: 9550, signal 193177/210775 (executing program)
2025/08/29 18:13:31 fetching corpus: 9600, signal 193481/210783 (executing program)
2025/08/29 18:13:31 fetching corpus: 9650, signal 193715/210786 (executing program)
2025/08/29 18:13:31 fetching corpus: 9700, signal 193949/210795 (executing program)
2025/08/29 18:13:31 fetching corpus: 9750, signal 194179/210811 (executing program)
2025/08/29 18:13:31 fetching corpus: 9800, signal 194389/210811 (executing program)
2025/08/29 18:13:31 fetching corpus: 9850, signal 194634/210811 (executing program)
2025/08/29 18:13:31 fetching corpus: 9900, signal 194877/210814 (executing program)
2025/08/29 18:13:31 fetching corpus: 9950, signal 195106/210815 (executing program)
2025/08/29 18:13:31 fetching corpus: 10000, signal 195313/210815 (executing program)
2025/08/29 18:13:31 fetching corpus: 10050, signal 195704/210815 (executing program)
2025/08/29 18:13:31 fetching corpus: 10100, signal 195917/210817 (executing program)
2025/08/29 18:13:31 fetching corpus: 10150, signal 196079/210821 (executing program)
2025/08/29 18:13:32 fetching corpus: 10200, signal 196386/210823 (executing program)
2025/08/29 18:13:32 fetching corpus: 10250, signal 196596/210837 (executing program)
2025/08/29 18:13:32 fetching corpus: 10300, signal 196793/210839 (executing program)
2025/08/29 18:13:32 fetching corpus: 10350, signal 197078/210840 (executing program)
2025/08/29 18:13:32 fetching corpus: 10400, signal 197269/210842 (executing program)
2025/08/29 18:13:32 fetching corpus: 10450, signal 197471/210866 (executing program)
2025/08/29 18:13:32 fetching corpus: 10500, signal 197659/210866 (executing program)
2025/08/29 18:13:32 fetching corpus: 10550, signal 197842/210868 (executing program)
2025/08/29 18:13:32 fetching corpus: 10600, signal 198020/210882 (executing program)
2025/08/29 18:13:32 fetching corpus: 10650, signal 198166/210888 (executing program)
2025/08/29 18:13:33 fetching corpus: 10700, signal 198345/210888 (executing program)
2025/08/29 18:13:33 fetching corpus: 10750, signal 198543/210888 (executing program)
2025/08/29 18:13:33 fetching corpus: 10800, signal 198781/210890 (executing program)
2025/08/29 18:13:33 fetching corpus: 10850, signal 198962/210920 (executing program)
2025/08/29 18:13:33 fetching corpus: 10900, signal 199175/210920 (executing program)
2025/08/29 18:13:33 fetching corpus: 10950, signal 199433/210927 (executing program)
2025/08/29 18:13:33 fetching corpus: 11000, signal 199650/210973 (executing program)
2025/08/29 18:13:33 fetching corpus: 11050, signal 199846/210973 (executing program)
2025/08/29 18:13:33 fetching corpus: 11100, signal 200009/210978 (executing program)
2025/08/29 18:13:33 fetching corpus: 11150, signal 200265/210979 (executing program)
2025/08/29 18:13:33 fetching corpus: 11199, signal 200482/210980 (executing program)
2025/08/29 18:13:33 fetching corpus: 11249, signal 200708/210980 (executing program)
2025/08/29 18:13:34 fetching corpus: 11299, signal 200927/210982 (executing program)
2025/08/29 18:13:34 fetching corpus: 11349, signal 201053/210982 (executing program)
2025/08/29 18:13:34 fetching corpus: 11399, signal 201206/210985 (executing program)
2025/08/29 18:13:34 fetching corpus: 11449, signal 201369/210988 (executing program)
2025/08/29 18:13:34 fetching corpus: 11499, signal 201623/210991 (executing program)
2025/08/29 18:13:34 fetching corpus: 11549, signal 201807/211008 (executing program)
2025/08/29 18:13:34 fetching corpus: 11599, signal 202005/211013 (executing program)
2025/08/29 18:13:34 fetching corpus: 11649, signal 202199/211026 (executing program)
2025/08/29 18:13:34 fetching corpus: 11664, signal 202256/211026 (executing program)
2025/08/29 18:13:34 fetching corpus: 11664, signal 202256/211026 (executing program)
2025/08/29 18:13:35 starting 8 fuzzer processes
18:13:35 executing program 0:
r0 = getpgid(0xffffffffffffffff)
ptrace(0x4208, r0)
prlimit64(r0, 0xc, &(0x7f0000000000)={0x0, 0x1}, &(0x7f0000000040))
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)=<r1=>0x0)
ptrace(0x11, r1)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2080, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000100), 0x6e, &(0x7f0000000440)=[{&(0x7f0000000180)=""/109, 0x6d}, {&(0x7f0000000200)=""/176, 0xb0}, {&(0x7f00000002c0)=""/150, 0x96}, {&(0x7f0000000380)=""/136, 0x88}], 0x4, &(0x7f0000000480)=[@cred={{0x1c, 0x1, 0x2, {<r3=>0x0}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, <r4=>0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {<r5=>0x0}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, <r6=>0x0}}}, @cred={{0x1c, 0x1, 0x2, {<r7=>0x0}}}, @cred={{0x1c, 0x1, 0x2, {0x0, <r8=>0x0}}}], 0xc0}, 0x20)
prlimit64(r7, 0x5, &(0x7f0000000580)={0x1ff, 0x7fffffff}, &(0x7f00000005c0))
prlimit64(r0, 0x1, &(0x7f0000000600)={0x0, 0xe0000000000000}, &(0x7f0000000640))
ptrace(0x4207, 0xffffffffffffffff)
r9 = inotify_init1(0x40000)
wait4(r5, &(0x7f0000000680), 0x2, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r9, 0x400c6615, &(0x7f00000006c0)={0x0, @adiantum})
ioctl$KDMKTONE(r2, 0x4b30, 0x2)
r10 = shmget$private(0x0, 0x3000, 0x78000000, &(0x7f0000ffd000/0x3000)=nil)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000700)={0x0, <r11=>0x0}, &(0x7f0000000740)=0xc)
r12 = gettid()
shmctl$IPC_SET(r10, 0x1, &(0x7f0000000780)={{0x2, r11, r6, r8, r6, 0x4, 0x5}, 0x1, 0x6, 0x7, 0x5, r3, r12, 0x400})
r13 = shmget(0x2, 0x4000, 0x2, &(0x7f0000ff9000/0x4000)=nil)
shmctl$SHM_STAT(r13, 0xd, &(0x7f0000000800)=""/4096)

18:13:35 executing program 2:
times(&(0x7f0000000000))
r0 = creat(&(0x7f0000000040)='./file0\x00', 0x104)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0xc, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_mmap}, {@access_user}, {@access_user}, {@access_client}, {@posixacl}, {@cache_mmap}, {@cachetag={'cachetag', 0x3d, ',-/,()6%&'}}], [{@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@mask={'mask', 0x3d, 'MAY_READ'}}]}})
mkdirat(r1, &(0x7f0000000240)='./file0\x00', 0x30)
ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000280)=0x1)
r3 = getpgrp(0x0)
r4 = gettid()
fcntl$getownex(r2, 0x10, &(0x7f0000001d40)={0x0, <r5=>0x0})
statx(r0, &(0x7f0000001d80)='./file0\x00', 0x6000, 0x1, &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x0, <r6=>0x0})
r7 = fcntl$getown(r0, 0x9)
stat(&(0x7f0000001ec0)='./file0\x00', &(0x7f0000001f00)={0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0})
recvmmsg(r1, &(0x7f00000045c0)=[{{&(0x7f0000001f80)=@generic, 0x80, &(0x7f0000002140)=[{&(0x7f0000002000)=""/234, 0xea}, {&(0x7f0000002100)=""/24, 0x18}], 0x2, &(0x7f0000002180)=""/18, 0x12}, 0x4}, {{&(0x7f00000021c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r9=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000002380)=[{&(0x7f0000002240)=""/69, 0x45}, {&(0x7f00000022c0)=""/141, 0x8d}], 0x2}, 0x40}, {{&(0x7f00000023c0)=@x25={0x9, @remote}, 0x80, &(0x7f0000002500)=[{&(0x7f0000002440)=""/183, 0xb7}], 0x1, &(0x7f0000002540)=""/59, 0x3b}, 0x5}, {{&(0x7f0000002580)=@in6={0xa, 0x0, 0x0, @initdev}, 0x80, &(0x7f00000038c0)=[{&(0x7f0000002600)=""/155, 0x9b}, {&(0x7f00000026c0)=""/170, 0xaa}, {&(0x7f0000002780)=""/24, 0x18}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/35, 0x23}, {&(0x7f0000003800)=""/89, 0x59}, {&(0x7f0000003880)=""/25, 0x19}], 0x7, &(0x7f0000003940)=""/172, 0xac}, 0xdc9}, {{&(0x7f0000003a00)=@isdn, 0x80, &(0x7f0000003b00)=[{&(0x7f0000003a80)=""/62, 0x3e}, {&(0x7f0000003ac0)=""/62, 0x3e}], 0x2, &(0x7f0000003b40)=""/129, 0x81}, 0x9}, {{&(0x7f0000003c00)=@alg, 0x80, &(0x7f0000003f40)=[{&(0x7f0000003c80)=""/95, 0x5f}, {&(0x7f0000003d00)}, {&(0x7f0000003d40)=""/215, 0xd7}, {&(0x7f0000003e40)=""/222, 0xde}], 0x4, &(0x7f0000003f80)=""/126, 0x7e}, 0x1f}, {{&(0x7f0000004000)=@hci, 0x80, &(0x7f0000004540)=[{&(0x7f0000004080)=""/216, 0xd8}, {&(0x7f0000004180)=""/20, 0x14}, {&(0x7f00000041c0)=""/47, 0x2f}, {&(0x7f0000004200)=""/229, 0xe5}, {&(0x7f0000004300)=""/233, 0xe9}, {&(0x7f0000004400)=""/220, 0xdc}, {&(0x7f0000004500)=""/26, 0x1a}], 0x7}, 0x7}], 0x7, 0x13162, &(0x7f0000004780)={0x0, 0x3938700})
r10 = creat(&(0x7f00000047c0)='./file0\x00', 0xf5)
r11 = openat$cgroup_type(r1, &(0x7f0000004800), 0x2, 0x0)
r12 = signalfd(r0, &(0x7f0000004840)={[0x7]}, 0x8)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000004880)={{0x1, 0x1, 0x18, <r13=>r2, {0x2}}, './file0\x00'})
sendmsg$unix(r0, &(0x7f00000049c0)={&(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000540)=[{&(0x7f0000000340)="b85e9889d28fc2a50fa50cd986de4895eebc55e912b37f51a9cfceb18523c7de15ca286e7511114aa01b49eabab1ba6048df336828cf84a5e79c8fbf75b778c9f08669c1780272d44f42ca18a0742e0eb2f9b272ae89a409d3e1b73968109737c21fec4a02cd4ad2a19c9d21142f59e46d382b05bd169ee9a4", 0x79}, {&(0x7f00000003c0)="98c348112c9bfe1eca1e9fea6626847384634efff35854137d4fd5", 0x1b}, {&(0x7f0000000400)="d4dbfd2fc7ea2990454491ee4773306aa5723815c28d14d5062d45b04bebdcac0bdf3f8162206c6a055a529758561c41bcfcde69add169fd27e060ffedb71394f372371e8ef8b40664a22df3f8755c8d8d0512", 0x53}, {&(0x7f0000000480)="8c716e23637f6af5963a7d189f7ac9dc5bbc267ab9b0f7ed9cc736051781dc6ccf83165ed18d9e5da48797f9f1da9c87891a891ced99d1be5bb2504a62538481d9f3e640b3c83aaa76cfb55f8c0fd6bb3b39cbfc5a91fb0d0eecd6a4642031001c8ec71c926ca18f605fceb7ecebbc4708105792d6b7e3f997875608033042f1df06f470ffe42e9c786f908a27", 0x8d}], 0x4, &(0x7f00000048c0)=[@cred={{0x1c, 0x1, 0x2, {r3, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {r4, 0xee00, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {r5, r6, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r7, 0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, r8}}}, @rights={{0x18, 0x1, 0x1, [r9, r10]}}, @rights={{0x1c, 0x1, 0x1, [r11, r12, r13]}}, @rights={{0x14, 0x1, 0x1, [r0]}}], 0xf0, 0x8090}, 0x80)
openat$dir(0xffffffffffffff9c, &(0x7f0000004a00)='./file0\x00', 0x200, 0x1b1)

18:13:35 executing program 1:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
close(r0)
write$binfmt_elf64(r0, &(0x7f0000000000)={{0x7f, 0x45, 0x4c, 0x46, 0x20, 0x7d, 0x7, 0x1f, 0x2, 0x3, 0x3e, 0x6, 0xb2, 0x40, 0x192, 0x2, 0x7, 0x38, 0x2, 0x1, 0x9}, [{0x3, 0x5, 0x0, 0x8, 0x9, 0x55, 0x2, 0x2}], "46575dea0d203fbf1a7a84cb5f037cfed5ba00ca940e817413fbf4a0632755905d45b7e07bbb463f0c20784a71e3ce827e0b68e3ea6f110d09736d8fd4875f08dc04fbec2d5d292aa3d5bc9d21669b00c8c19b7e9622b52f6dad2d1757a457fd23827114a595f39f9f95aab1352300434b6f40b318a823de7315a093e780e19ad47737fdbe6d7e76c2ee5c937090f0fa0a30734e53b45c4c78578d0a0ddb3441bcbf0dc6af79bf2005dfd4a52af75d402f7fdfb764af5c036f12c6aecb07d0f7af29d830e77847493e", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x641)
ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, &(0x7f0000000680))
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000006c0)={@loopback, @multicast2, <r1=>0x0}, &(0x7f0000000700)=0xc)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000007c0)={'ip6gre0\x00', &(0x7f0000000740)={'syztnl2\x00', <r2=>r1, 0x2f, 0x80, 0x8, 0xf4e, 0x8, @local, @mcast2, 0x40, 0x80, 0x1, 0x1000}})
setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000800)={0x0, 0x6}, 0x8)
r3 = signalfd4(r0, &(0x7f0000000840)={[0x4]}, 0x8, 0x80800)
r4 = syz_genetlink_get_family_id$wireguard(&(0x7f00000008c0), 0xffffffffffffffff)
sendmsg$WG_CMD_GET_DEVICE(r3, &(0x7f0000001280)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001240)={&(0x7f0000000900)={0x920, r4, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@WGDEVICE_A_PEERS={0xb8, 0x8, 0x0, 0x1, [{0xb4, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @loopback}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "6e13ad87b2d6e53246a6e345f4770ed1d04528259a7dcb971638a3c101ede72e"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x9, @local, 0x2}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @remote}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x2, @remote, 0x6}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "7f7ecbacd76661b284e25cdfd78b3fd6074ac800bb51a1c78199e2f57464f634"}]}]}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x7}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x7f}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_PEERS={0x808, 0x8, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0xf}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "1a990614e9ac6af1575cecd5b76977d56bd75a9c998ffd955dd06031b5166817"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "7d36de93bc341edc1e07ac0e77a47f3eaed1c4c6642d999b70d6b155aba1d067"}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x1b4, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x10c, 0x9, 0x0, 0x1, [{0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x3}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @private=0xa010101}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x3f, @empty, 0x5}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0xfffffff8, @dev={0xfe, 0x80, '\x00', 0x19}, 0xfffffff8}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "8b0c32283bc54b8a6b7bd02700a2060888e6dd577322328602481f7e5a355d20"}]}, {0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}, {0x100, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x1, @loopback, 0x5c60}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "8eb955f41714709ecce8224cbeddece18eaea2c3546d431ab2079cbd42dc53e8"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x3}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x5, @private0, 0x40}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x101, @local, 0x7}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x5a, @remote, 0x4}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}]}, {0x38, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xfffb}]}, {0x484, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x410, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x1b}}, {0x5, 0x3, 0x3}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xf}}, {0x5, 0x3, 0x3}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x13}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2f}}, {0x5}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x81}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x23}}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0xb3, @private0, 0x7fffffff}}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}]}]}]}, 0x920}, 0x1, 0x0, 0x0, 0x24000001}, 0x4000004)
sendmsg$NL80211_CMD_DISCONNECT(r3, &(0x7f00000013c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x10440080}, 0xc, &(0x7f0000001380)={&(0x7f0000001300)={0x60, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8, 0x31}}}}, [@NL80211_ATTR_REASON_CODE={0x6}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x41}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2b}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x33}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xc}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3d}]}, 0x60}, 0x1, 0x0, 0x0, 0x14}, 0x20004080)
r5 = fcntl$dupfd(r3, 0x605, r3)
sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f00000014c0)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)={0x34, 0x4, 0x6, 0x301, 0x0, 0x0, {0x1, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4c000}, 0x20004840)
fcntl$setflags(0xffffffffffffffff, 0x2, 0x0)
r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001500)='/sys/devices/kprobe', 0x40, 0x8)
ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r5, 0x89fb, &(0x7f0000001600)={'ip6tnl0\x00', &(0x7f0000001580)={'sit0\x00', <r7=>r2, 0x4, 0x8, 0x0, 0x3, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, @remote, 0x700, 0x7800, 0x58, 0x6}})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000001640)={'batadv_slave_1\x00', <r8=>0x0})
ioctl$sock_ipv6_tunnel_SIOCGETPRL(r5, 0x89f4, &(0x7f0000001700)={'sit0\x00', &(0x7f0000001680)={'ip6_vti0\x00', <r9=>r2, 0x2f, 0x81, 0x4, 0xffff8000, 0xbea79245d59027e1, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x1, 0x40, 0x370}})
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r6, &(0x7f0000001880)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001840)={&(0x7f0000001740)={0xe4, 0x0, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x50, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @loopback}}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x24}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010101}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r9}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x90}, 0x4040044)
openat(0xffffffffffffff9c, &(0x7f00000018c0)='./file0\x00', 0x80, 0x4d)

18:13:36 executing program 7:
sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd2c, 0x25dfdbfd, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040010)
r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xd0, r0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x40, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6bf}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3ff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8}]}]}, @TIPC_NLA_LINK={0x7c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x51}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xaec3}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4090}, 0x600c003)
sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x5e}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x20008010)
sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0xec, 0x0, 0x1, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x5}, @void, @val={0xc, 0x99, {0x401, 0x12}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0xab16}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x3}, @NL80211_ATTR_VENDOR_DATA={0x6, 0xc5, "34c5"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0xb30}, @NL80211_ATTR_VENDOR_DATA={0x98, 0xc5, "1abfd591b3b84927bce4311135fcef1c015829d2fbf31f9bb97b174710de21077afcdfb74237b93afee8ea30c9f34f7b0a8319060031a255b5c12a0bd871c10a8ded6f65e119876ffa30c9296a3edfe7f82370499f3b8c0bef54dc1fa5526582fb23cf041ad3a26f6be49005f27eaeac6c66e064a32bff02e64dda00e61e28a2b25646a1316e69875646808d826d29114b89a091"}, @NL80211_ATTR_VENDOR_DATA={0xb, 0xc5, "2c907159eac17d"}]}, 0xec}, 0x1, 0x0, 0x0, 0x881}, 0x4000000)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000780)={'ip6_vti0\x00', &(0x7f0000000700)={'ip6gre0\x00', <r1=>0x0, 0x0, 0x1, 0xc6, 0x3ff, 0x10, @dev={0xfe, 0x80, '\x00', 0x24}, @local, 0x7800, 0x700, 0xc574, 0x1000}})
sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x68, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xc0bc}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x800)
r2 = syz_open_dev$vcsa(&(0x7f00000008c0), 0x1, 0x48c00)
sendmsg$ETHTOOL_MSG_DEBUG_GET(r2, &(0x7f0000000a80)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000940)={0xd0, 0x0, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x44001}, 0x0)
r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001000), 0x200000, 0x0)
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r3, &(0x7f0000001100)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x14, 0x4, 0x1, 0x3, 0x0, 0x0, {0x7, 0x0, 0x4}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001180), r2)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001280)={&(0x7f00000011c0)={0xac, r4, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x1}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5}, @ETHTOOL_A_LINKINFO_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}]}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x1}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x92}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x80}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x40}]}, 0xac}, 0x1, 0x0, 0x0, 0x80}, 0x80)
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f00000013c0)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x38, 0x0, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4201}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xfff}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000804}, 0x20000040)
sendmsg$TIPC_NL_MON_SET(r3, &(0x7f0000001600)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000015c0)={&(0x7f0000001440)={0x160, r0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x14c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xfa, 0x3, "7696e35bdc0913d12a74758160e5e4674989038ff2c230b93fca3532bd933735e90a2ce9c409648d4c94aa71346f971c15907e5d3e4b00c0343b685150ab4bcc62946cc8b16dd2e73b202675c56d8507f0c6c1268c3dd26ab38b67f6b230ae118e52f6aaff1553969d761ce21ba1897edbca309d09d35cd5279bba10064111566fc2bb976f55bfef7f4317f89e2ff8e7c0d56b4d8bf463fdb9cfb0644de41552d6d2262192980a97a03206056ddde5f58d9449ab9d1ffb71af480620958504eed3984452d124d9564375af702ea1a824bfebcadcac62355a7c096e6ccd0377d69d37c270626ac62644965730c3b8d0bd760ed564dfa3"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "f1d8fdaadaae811735b3f3fc82588b875da6d9a3af"}}]}]}, 0x160}, 0x1, 0x0, 0x0, 0x48014}, 0x4048040)
sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(0xffffffffffffffff, &(0x7f0000001740)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001700)={&(0x7f0000001680)={0x64, 0x0, 0x800, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x81}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xffff}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0xfffffff9}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x6}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}]}, 0x64}}, 0x8040)
sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x28, 0x0, 0x20, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x6c}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000008}, 0x80)
r5 = openat$full(0xffffffffffffff9c, &(0x7f00000018c0), 0x400, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000001880), r5)
sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x70, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x7b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x27}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x75}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6b}]}, 0x70}, 0x1, 0x0, 0x0, 0x20008000}, 0x24000891)

18:13:36 executing program 3:
r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x7, 0x8000)
ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000040)=<r1=>0x0)
r2 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
sendmsg$NL80211_CMD_TDLS_OPER(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x0, 0x4, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x842}, 0x20000000)
ioctl$HIDIOCGCOLLECTIONINFO(r2, 0xc0104811, &(0x7f00000001c0)={0x5, 0x7, 0x0, 0x9})
r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0)
ioctl$EXT4_IOC_SWAP_BOOT(r3, 0x6611)
ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r0, 0x942e, 0x0)
ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000240)=0x100)
ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0)
ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r2, 0xf502, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r4=>r2, {<r5=>r0}}, './file0\x00'})
ioctl$FIONREAD(r4, 0x541b, &(0x7f00000002c0))
ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000300)=<r6=>0x0)
kcmp(r6, r1, 0x1, 0xffffffffffffffff, r2)
r7 = dup2(r3, r2)
ioctl$HIDIOCGCOLLECTIONINFO(r7, 0xc0104811, &(0x7f0000000340)={0x8, 0xfffffff8, 0x6, 0x6})
syz_open_dev$sg(&(0x7f0000000380), 0x4, 0x1)
ioctl$TCSETSF2(r4, 0x402c542d, &(0x7f00000003c0)={0xc59, 0x7, 0x5, 0x20, 0x9, "c500733b5215c24c4d29fb778548ddb23a3f65", 0x0, 0x5})
getsockopt$inet_tcp_buf(r5, 0x6, 0xe, &(0x7f0000000400)=""/55, &(0x7f0000000440)=0x37)

[   90.973258] audit: type=1400 audit(1756491216.068:7): avc:  denied  { execmem } for  pid=273 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
18:13:36 executing program 4:
sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200004}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x64, 0x0, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x6}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x5}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8000}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xed9f}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x3636b2ac2af6b9fe}, 0x8010)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r1=>0x0})
sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x7c, r0, 0x400, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x7fffffff, 0x35}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x1)
sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000680)={&(0x7f0000000340)={0x318, r0, 0x800, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x7d, 0x12}}}}, [@NL80211_ATTR_TX_RATES={0x154, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x98, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x21, 0x1, [0x4, 0x36, 0x2, 0x4, 0x36, 0x36, 0xc, 0x6, 0x1, 0x16, 0x5, 0x3, 0x48, 0x12, 0x5, 0x60, 0x16, 0x5, 0x18, 0x6, 0xd936914b38fc2615, 0x6, 0x16, 0x24, 0x1b, 0x9, 0x1, 0x36, 0x6]}, @NL80211_TXRATE_HT={0x3f, 0x2, [{0x3}, {0x3, 0x3}, {0x7, 0x8}, {0x6, 0x5}, {0x4, 0x8}, {0x2, 0x2}, {0x5, 0x8}, {0x1}, {0x5, 0x6}, {0x1, 0x9}, {0x2, 0x7}, {0x7, 0x3}, {0x0, 0x7}, {0x1, 0x5}, {0x4, 0x2}, {0x5, 0x5}, {0x5, 0x2}, {0x5, 0x2}, {0x4, 0x7}, {0x3, 0x7}, {0x3, 0x6}, {0x0, 0x9}, {0x0, 0xa}, {0x3, 0x6}, {0x0, 0x5}, {0x5}, {0x3, 0x4}, {0x1, 0x8}, {0x2, 0x7}, {0x4, 0x2}, {0x3, 0xa}, {0x7, 0x9}, {0x3, 0x6}, {0x2, 0x6}, {0x5, 0x3}, {0x4, 0x6}, {0x1, 0x8}, {0x5, 0x6}, {0x5, 0x5}, {0x5, 0x3}, {0x3, 0x9}, {0x1, 0x4}, {0x0, 0x9}, {0x1, 0x7}, {0x2, 0x4}, {0x7, 0x5}, {0x2, 0xa}, {0x2, 0x2}, {0x2, 0xa}, {0x1, 0x4}, {0x7, 0x9}, {0x2, 0x3}, {0x4, 0x8}, {0x1, 0x9}, {0x1, 0x2}, {0x1, 0x5}, {0x0, 0x6}, {0x5, 0x2}, {0x7, 0x5}]}, @NL80211_TXRATE_HT={0x2d, 0x2, [{0x4, 0x6}, {0x2, 0x3}, {0x1, 0x8}, {0x5, 0x7}, {0x2, 0x9}, {0x1, 0x2}, {0x4, 0xa}, {0x1, 0xa}, {0x6, 0x6}, {0x4, 0x6}, {0x0, 0x2}, {0x5, 0x2}, {0x2, 0x8}, {0x4, 0x5}, {0x0, 0x6}, {0x7, 0x5}, {0x2, 0x5}, {0x2, 0x2}, {0x3, 0x7}, {0x4, 0x2}, {0x5, 0x5}, {0x2, 0x2}, {0x3, 0x6}, {0x5, 0x5}, {0x6, 0x1}, {0x5, 0x7}, {0x5, 0x3}, {0x0, 0x2}, {0x1, 0x9}, {0x0, 0xa}, {0x1, 0x7}, {0x6, 0x4}, {0x3, 0xa}, {0x3, 0x6}, {0x4, 0x1}, {0x7, 0x2}, {0x4, 0x2}, {0x0, 0x5}, {}, {0x1, 0x8}, {0x1, 0x8}]}]}, @NL80211_BAND_2GHZ={0x2c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0xfe, 0x4, 0x8, 0x80, 0x6, 0x2, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3f, 0x2, 0x2, 0x9, 0x40, 0x5, 0x8001, 0x3ff]}}]}, @NL80211_BAND_6GHZ={0x40, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3f, 0x40, 0x4, 0x80, 0x200, 0xf328, 0x9, 0x4]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1f, 0x2, 0x5, 0x6, 0x3a63, 0x401, 0x0, 0x5]}}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0xc85185e50b8c6a76, 0x9, 0x30, 0x3, 0x18, 0x18, 0x30, 0xc, 0x6c, 0x2, 0xc, 0x18, 0x3, 0x2]}]}, @NL80211_BAND_6GHZ={0x4c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x22, 0x2, [{0x6}, {0x7, 0x4}, {0x2, 0x7}, {0x1, 0x7}, {0x0, 0x6}, {0x7, 0x7}, {0x0, 0x5}, {0x0, 0x5}, {0x3}, {0x6, 0xa}, {0x6, 0x5}, {0x3, 0x3}, {0x0, 0x9}, {0x1, 0x2}, {0x4, 0x7}, {0x3, 0x6}, {0x6, 0x1}, {0x4}, {0x1, 0x6}, {0x3, 0x9}, {0x4, 0x4}, {0x1}, {0x1, 0x3}, {0x2, 0x8}, {0x3, 0x6}, {0x0, 0x4}, {0x5, 0x14}, {0x6, 0x7}, {0x7, 0x2}, {0x2, 0x8}]}, @NL80211_TXRATE_HT={0xd, 0x2, [{0x7, 0xa}, {0x5, 0x3}, {0x6, 0x1}, {0x6, 0x9}, {0x4, 0x4}, {0x7}, {0x1, 0x5}, {0x0, 0x2}, {0x1, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xcf, 0x100, 0xe4b, 0x8001, 0x0, 0xfd49, 0x8, 0x3]}}]}]}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x24e}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xaa}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x15}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1f}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x9}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xd}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x6}]}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x129}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x14b4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3b7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @crypto_settings=[@NL80211_ATTR_AKM_SUITES={0x1c, 0x4c, [0xfac09, 0xfac05, 0xfac11, 0xfac0c, 0xfac07, 0xfac0e]}, @NL80211_ATTR_AKM_SUITES={0x8, 0x4c, [0xfac10]}, @NL80211_ATTR_SOCKET_OWNER={0x4}], @NL80211_ATTR_HE_BSS_COLOR={0xc, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}]}, @NL80211_ATTR_HIDDEN_SSID={0x8}, @crypto_settings=[@NL80211_ATTR_SAE_PASSWORD={0x80, 0x115, "d7524905970f8b8108dcf3f4ee16ed2f197672de50ed581146c13e620468233ee8723ee2cf7afaad1b774e842c38bb1a2ea7a3d70399c27108f5d3ba0908bced51980d27c06bbf0ec1cd4eb349b6d5765175fceaa4b948937094191730f825df21eff6241118bfb5079e68f0c7316cffe1f4ec6beab3d6e6c70384e1"}, @NL80211_ATTR_AKM_SUITES={0x1c, 0x4c, [0xfac03, 0xfac03, 0xfac03, 0xfac13, 0xfac0d, 0xfac11]}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x14, 0x49, [0xfac02, 0xfac0d, 0xfac08, 0xfac00]}, @NL80211_ATTR_SOCKET_OWNER={0x4}], @NL80211_ATTR_P2P_OPPPS={0x5}]}, 0x318}, 0x1, 0x0, 0x0, 0x49}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000700)={{0x1, 0x1, 0x18, <r2=>0xffffffffffffffff, @in_args={0x2}}, './file0\x00'})
sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x6c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40440c0}, 0x40890)
ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000880)={<r3=>r2, 0x6, 0x1f, 0xfff})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r2)
sendmsg$NL80211_CMD_GET_KEY(r3, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x60, r4, 0x2, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x406, 0x40}}}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "73f372efd123611cee6074277a"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x10000040}, 0x20000094)
ioctl$FAT_IOCTL_SET_ATTRIBUTES(r2, 0x40047211, &(0x7f0000000a40)=0x20)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ac0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r3, &(0x7f0000000c80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000c40)={&(0x7f0000000b00)={0x124, r5, 0x8, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x200, 0x3d}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_IE={0x18, 0x2a, [@link_id={0x65, 0x12, {@from_mac=@broadcast, @broadcast, @device_b}}]}, @NL80211_ATTR_IE={0xc7, 0x2a, [@tim={0x5, 0xaf, {0x5, 0x90, 0x7, "40b45fc69573eea1a5f1f384c93dedf7205e0d2d2998fb50bf386fe67fbaf32769a69e660580f3271ed8c29e1d94d5c92f0b0f0b9706dda32d0c48bd562569d65e4d5ae96447c8cd72df2ad6566bb06eaa6a7c456c124ca65963bc48099a1cda356a842eb0e47783c5ec11d043098219eb8f4ab5a6b0b574a2afc83919f9e8b3df061c5efba748b9c98bc952cd7c62a621e5d7a2b41a0cb716cf88abc9f115ba015a19658c6248a95db25c70"}}, @mic={0x8c, 0x10, {0xdfa, "a89f22821018", @short="3acc9bebc9e0d3cd"}}]}]}, 0x124}}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000cc0)={{0x1, 0x1, 0x18, <r6=>r3}, './file0\x00'})
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r6, &(0x7f00000044c0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000004480)={&(0x7f0000000d40)={0x3718, r5, 0x4, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x76}}}}, [@NL80211_ATTR_NAN_FUNC={0x11f8, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_INSTANCE_ID={0x5}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0x1154, 0xe, 0x0, 0x1, [{0x1004, 0x0, "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"}, {0x6b, 0x0, "5301ac76ed27657ecc14416011931efba7f13553964b8ebe5ebe05400904b988103ba32de859b2c9c6d57a7f37ab6a3b3e8a5e34cc443d6e0fd703c902120fb46747e6031b81b618c19512df17aec4242f3f870e4e2b7318eca2d5039abffd8297c5b8073818a9"}, {0xab, 0x0, "250ea9e9e6ba2dc0508096cef31e64ccc137f3ad986ebed98a42a332ea397d7b4ba942d00bb55ccd6db2e9b779043e9d196ab231019b3c41169588ee6f54e245d34f2061e09d935fa3bd0d3e5574e38042434102fa9ba3216b12e66471b2a60ef5fc1fecf5080c3833c781e9b219795fedd3b90d01f00611a55eeb1c7ac312ca97b319daded910e3c0884556450b0586d1ad5b7d5cac512f56c8f6b9500098e721dc395464263a"}, {0x32, 0x0, "7bd4f248cafd71812299634e21813db2448919fe6ae8be11ec460a05c00501121f522213c57c9ea8f699d969f201"}]}, @NL80211_NAN_FUNC_SRF={0x54, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x6}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x3f}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x9b}, @NL80211_NAN_SRF_MAC_ADDRS={0x34, 0x4, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}]}]}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x1}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x2}, @NL80211_NAN_FUNC_SRF={0x2c, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0xfa}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x2}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x1}, @NL80211_NAN_SRF_MAC_ADDRS={0x10, 0x4, 0x0, 0x1, [{0xa, 0x6, @broadcast}]}]}]}, @NL80211_ATTR_NAN_FUNC={0x2500, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_RX_MATCH_FILTER={0x1118, 0xd, 0x0, 0x1, [{0x67, 0x0, "e30b5d2bb36542fa45f34046b31c858e7f4c4b610dba6e26844edd01faa7bdc46b4755cd6c589ee0b7ce5377aa179d69bb6127978aa8c89b8eebcfebe97736113500ee23f68989634fbf0124cd11ca0491967d30d7ae695e38f5adaa7660c3cde8c3e7"}, {0x15, 0x0, "5e08189eefeea3b9f270417ac1d4d61832"}, {0x8f, 0x0, "a8057dd2d6a3510c219df09b21b7a5a006c69a677d490018fcf2ee79b99eeb41e5a6ee553e7ddbcfb77f696129d93080fe0d84ffa602e9e0a2c8bccb4947023c0ed4b1c4ac944c032e5e1f80730c58c42cdb6ada015b58e3f3d2a9e7419e7518972128a1536328f490958a5df59f818af546356d26f4c1c6f53241f4339b1bd5bb440c394f8113c3f8eeac"}, {0x1004, 0x0, "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"}]}, @NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x1}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0x13cc, 0xe, 0x0, 0x1, [{0x8d, 0x0, "b02c7354eda937a52379d36a59d504c329acc5ce801ef3b91a2b6d9df1a8e7b3f83cae4f56f1e5fc4cd3e39ffb8c8f0106535473973d885359b2fabf452ebee66a2d4853bf49bd8808c1833c9ebbc64951c3123f33e6b34e00867d7d56877cc8061442cedf87b4264a0d729496f335f28a85cdc440edaccd6e47e0587a0fdb73135d5bd31d8da7f28b"}, {0x4e, 0x0, "97931ff050ae473ac69eb3943ca25e2c83ad1f5314e9247c3f6962f1eae8a304944c4da06a36e2fb7fd4f89181de7aa060ccce48e31ed8ff90547d021a5e48554fd2b644c371f263d870"}, {0xa7, 0x0, "f134f90b257c54bb84717db9ecb186777d9292ec858e94ccb1d9a9c30484e843678f709a2e98b07ca781d5d6ca6da33a4719768d7574ccee6369dfc8783a3ec399c9255a79dbfea43235efe83c520639c0a11cb9f9f574324f50f13001ece15601f869c220004af871d729dd2c5b6da55b67af4b729bf5a32896ed8efd1fc1a6aefb0bcbc505ffd409f0794dafeb213c603c0fd58735d374279915170f7881e638a6ff"}, {0x7c, 0x0, "049819a9a7ed9608b0a4ce5206527cdced8c6e8a004acb73912b3d380323f4aba898dd89275d316b3bb74680bb1a13ca78d97ab3ff307ae6c78b8ed0308b0284273dbaa844e134320c56ffbdeaf279da59d932fd575d3a36fbef0e389ba12b9f26efd2d4fa127a5dd5608ed65c2abc0b0b58ba632722d300"}, {0x97, 0x0, "3ceb3a37bb804e0140673ff66aee42924088668cfc1755f4a1d46e20a61d0d9c95061237ff51607fd7088fc270b3ffcc3bb5030ee537bc780409758165ee9f48dee6cd0824bbcc814b4bba94b9f8b8ec4a9f4f2bf6643b67d968e306e518dbbec6889fdbcdb96661687897aa7224b89194861ec8c20ba5ba4ddcc92313354b84d78cc45a24e6e8faaf740e7539ad53f4f0249c"}, {0xa7, 0x0, "6732c4c7970ffb9a5a12c6997595300e3ce98639da7d014a4257da5ef7986307a5b4b8e803bd5ac38afa9b7f9f24872693c76e1cb916149ef4cbef30f4ac01899d5b430d80695c19be1007824c64d4147bc584cd8f0fff894ae96665c5a266109d70a7e0827fe1eb464f394a74bbac4e0fc6d8953201f0c3ca1fe7b90cb411cfdfba08a0c2393625b11988f7e079197052e92abdf35d61d10d8769eba8931465e37afa"}, {0x7f, 0x0, "21f639758c9e236efe7b87071451742eddaa98a6b1e8c051698eb24a045327519cc646d001cc2ea80a13affd7d728e508ab4eb08ba9631a19f2c1160d0cc9d939038b853b7ab47f7c1869d6b40cd2e41f809dc154b54e7d4dc067506defbcd543ee996732a351d28110c8e2b76e2829790fe3a5c8604924fcfe297"}, {0x1004, 0x0, "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"}]}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x1f}]}]}, 0x3718}}, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000004700)={&(0x7f0000004500)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000046c0)={&(0x7f0000004540)={0x17c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x7, 0x0, 0x7}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x9}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x1}, @CTA_TUPLE_MASTER={0x40, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x3d}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_TUPLE_MASTER={0x20, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_TUPLE_MASTER={0x54, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @broadcast}}}]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x4}, @CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @multicast2}}}]}, @CTA_TUPLE_ORIG={0x84, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010102}, {0x8, 0x2, @private=0xa010102}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x2, 0x0}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f0000004800)={&(0x7f0000004740)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000047c0)={&(0x7f0000004780)={0x2c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0xe99c48b08f8a7abe}, 0x4000000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000004840), r6)
sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000004980)={&(0x7f0000004880)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000004940)={&(0x7f00000048c0)={0x58, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x4}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x1, 0x1}}, @NFULA_CFG_MODE={0xa, 0x2, {0x3}}, @NFULA_CFG_FLAGS={0x6}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x80}, @NFULA_CFG_MODE={0xa, 0x2, {0xffffffff, 0x1}}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000)

18:13:36 executing program 5:
syz_genetlink_get_family_id$gtp(&(0x7f0000000000), 0xffffffffffffffff)
r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEL_TX_TS(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, r1, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xf85e, 0x6b}}}}, [@NL80211_ATTR_TSID={0x5}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xe}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x8000)
ioctl$TCGETA(r0, 0x5405, &(0x7f00000001c0))
sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r1, 0x20, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void, @val={0xc, 0x99, {0x21a1, 0x4f}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x8044)
ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000340)={0x0, &(0x7f0000000300)})
ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000780)={0x2, 0x0, 0xc, 0x20, 0x1a5, &(0x7f0000000380)="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"})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000840)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000940)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0xe0729bcbeeb9b124}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x44, r2, 0x200, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x5}, @NL80211_ATTR_FRAME_MATCH={0x1d, 0x5b, "fbbbb60aab0ef2211d6f1470386867695d0c6870be4496d57c"}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x810)
r4 = memfd_secret(0x80000)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), r0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000002740)={'ip_vti0\x00', &(0x7f0000002640)={'ip_vti0\x00', <r6=>0x0, 0x8, 0x7800, 0x4, 0x654a, {{0x2a, 0x4, 0x1, 0xf, 0xa8, 0x64, 0x0, 0xf8, 0x2f, 0x0, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@cipso={0x86, 0x18, 0x3, [{0x6, 0x12, "b0762fdb827a455b18822b252de41d8d"}]}, @rr={0x7, 0x17, 0x39, [@private=0xa010100, @remote, @dev={0xac, 0x14, 0x14, 0x33}, @private=0xa010101, @multicast1]}, @timestamp_addr={0x44, 0x34, 0x72, 0x1, 0x5, [{@local, 0x6}, {@rand_addr=0x64010101, 0x3}, {@remote, 0x1}, {@multicast2, 0xc26}, {@dev={0xac, 0x14, 0x14, 0x3e}, 0x3}, {@local, 0xbd8}]}, @noop, @generic={0x88, 0x4, "d34b"}, @rr={0x7, 0x2b, 0x2d, [@private=0xa010102, @empty, @remote, @broadcast, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0xa}, @dev={0xac, 0x14, 0x14, 0x12}, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}})
sendmsg$ETHTOOL_MSG_EEE_GET(r4, &(0x7f0000002880)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x4a000}, 0xc, &(0x7f0000002840)={&(0x7f0000002780)={0xa4, r5, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20004000}, 0x80)
r7 = fsmount(r4, 0x0, 0xf5)
sendmsg$NL80211_CMD_GET_MPP(r7, &(0x7f0000002a00)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000029c0)={&(0x7f0000002900)={0x8c, r1, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1, 0x60}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40000}, 0x48004)
ioctl$TIOCSERGETLSR(r7, 0x5459, &(0x7f0000002a40))
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002ac0), r7)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000002c40)={&(0x7f0000002a80)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002c00)={&(0x7f0000002b00)={0xfc, r8, 0x408, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x60}}}}, [@NL80211_ATTR_TX_RATES={0xdc, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xd8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xd, 0x1, [0x3, 0x14, 0xb, 0x3, 0xc, 0x5, 0x5, 0x36, 0x5]}, @NL80211_TXRATE_HT={0x4e, 0x2, [{0x5, 0x1}, {0x3}, {0x5, 0x8}, {0x6, 0x3}, {0x5}, {0x5, 0x8}, {0x2, 0x5}, {0x1, 0x2}, {0x1, 0x2}, {}, {0x1, 0x5}, {0x3, 0x8}, {}, {0x2, 0x3}, {0x0, 0x3}, {0x3, 0xa}, {0x6, 0x7}, {0x6, 0x5}, {0x0, 0x7}, {0x2}, {0x7, 0x7}, {0x7, 0x6}, {0x1}, {0x7, 0x7}, {0x0, 0xa}, {0x5}, {0x1, 0x1}, {0x6, 0x3}, {0x4, 0x5}, {0x4, 0x8}, {0x3, 0x2}, {0x7, 0xa}, {0x0, 0x4}, {0x1, 0x1}, {0x6, 0x5}, {0x7}, {0x2, 0x8}, {0x3, 0xa}, {0x5, 0x9}, {0x2, 0xa}, {0x5, 0x8}, {0x2, 0x9}, {0x2, 0xa}, {0x0, 0x5}, {0x2, 0x4}, {0x5, 0x4}, {0x3, 0x2}, {0x7, 0x1}, {0x1, 0x7}, {0x3, 0x5}, {0x7, 0x9}, {0x6, 0x8}, {0x7, 0x9}, {0x0, 0xa}, {0x7, 0x4}, {0x5, 0x6}, {0x4, 0x3}, {0x0, 0x4}, {0x4, 0x1}, {0x3, 0x6}, {0x2, 0x1}, {0x4, 0x2}, {0x2, 0x8}, {0x2, 0x3}, {0x6}, {0x4, 0x8}, {0x7, 0x5}, {0x5, 0x6}, {0x1, 0x4}, {0x6, 0x1}, {0x1, 0xa}, {0x0, 0xa}, {0x1, 0x8}, {0x5, 0x7}]}, @NL80211_TXRATE_HT={0x1c, 0x2, [{0x7}, {0x0, 0xa}, {0x0, 0x6}, {0x0, 0x2}, {0x4, 0x8}, {0x1, 0x9}, {0x6, 0x8}, {0x3, 0x9}, {0x7, 0x6}, {0x2}, {0x2, 0xa}, {0x1, 0xa}, {0x2, 0x4}, {0x4, 0x7}, {0x3, 0x9}, {0x0, 0x3}, {0x4}, {0x0, 0x5}, {0x1, 0x5}, {0x7, 0xa}, {0x5, 0x6}, {0x5}, {0x2, 0x3}, {0x2, 0x9}]}, @NL80211_TXRATE_HT={0x2c, 0x2, [{0x3, 0x9}, {0x1, 0x7}, {0x0, 0x9}, {0x1, 0x7}, {0x6}, {0x7}, {0x2, 0x1}, {0x7, 0x4}, {0x1, 0x9}, {0x7, 0x5}, {0x6, 0x6}, {0x7}, {0x1, 0x9}, {0x1}, {0x0, 0xa}, {0x0, 0x4}, {0x0, 0x9}, {0x3, 0x6}, {0x3, 0x2}, {0x2, 0x4}, {0x3, 0x9}, {0x3, 0x9}, {0x3, 0x4}, {0x7, 0x7}, {0x5, 0x1}, {0x0, 0x9}, {0x0, 0x3}, {0x0, 0xa}, {0x4, 0x5}, {0x0, 0x4}, {0x1, 0x8}, {0x1, 0x1}, {0x5, 0x1}, {0x7, 0x9}, {0x1, 0xa}, {0x0, 0x4}, {0x2, 0x7}, {0x0, 0x3}, {0x0, 0x6}, {0x0, 0x5}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x16, 0x2, 0x4, 0x36, 0x1b, 0x92, 0xb, 0x3, 0x9, 0x36, 0x1, 0x6d, 0x36, 0x6c, 0xc, 0xb, 0x1b, 0x5, 0x3, 0x3, 0xb, 0x1, 0x36, 0x4, 0xc, 0x0, 0x24, 0x3, 0x30, 0x3, 0x48]}]}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x15}, 0x20000050)

18:13:36 executing program 6:
write$9p(0xffffffffffffffff, &(0x7f0000000000)="135f8c3c43f05ec412534222004e261392402adcdb5b8c40ec0524ba7cc1d83bacee5a3bc89ef7000ed2cac7ba9291bdc519955f9cb381e845f488821831f99b84ae2b", 0x43)
r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x7, 0x8000)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff}, './file0\x00'})
clock_gettime(0x0, &(0x7f0000000140)={<r2=>0x0, <r3=>0x0})
ppoll(&(0x7f0000000100), 0x0, &(0x7f0000000180)={r2, r3+10000000}, &(0x7f00000001c0)={[0x6]}, 0x8)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000200)={{0x1, 0x1, 0x18, <r4=>r0, {0xee00, 0xffffffffffffffff}}, './file0\x00'})
r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000240), 0x40ac40, 0x0)
recvmsg(r5, &(0x7f0000000580)={&(0x7f0000000280)=@alg, 0x80, &(0x7f0000000500)=[{&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f0000000340)=""/181, 0xb5}, {&(0x7f0000000400)=""/146, 0x92}, {&(0x7f00000004c0)=""/43, 0x2b}], 0x4, &(0x7f0000000540)=""/63, 0x3f}, 0x0)
write$P9_RXATTRCREATE(r5, &(0x7f00000005c0)={0x7, 0x21, 0x2}, 0x7)
r6 = openat$cgroup_int(r1, &(0x7f0000000600)='hugetlb.1GB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0)
ppoll(&(0x7f0000000640)=[{r6, 0x24}, {r4, 0x410}, {r5, 0x8201}], 0x3, &(0x7f0000000680)={0x77359400}, &(0x7f00000006c0)={[0xc27]}, 0x8)
statx(r5, &(0x7f0000000700)='./file0\x00', 0x800, 0x7ff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, <r7=>0x0})
fstat(r1, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0})
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f00000008c0)={{0x1, 0x1, 0x18, <r9=>r6, {r7, r8}}, './file0\x00'})
recvmsg(r9, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000000900)=""/78, 0x4e}, {&(0x7f0000000980)=""/249, 0xf9}, {&(0x7f0000000a80)=""/163, 0xa3}, {&(0x7f0000000b40)=""/84, 0x54}, {&(0x7f0000000bc0)=""/4096, 0x1000}], 0x5, &(0x7f0000001c40)=""/126, 0x7e}, 0x40000000)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000001d00)={{{@in6=@empty, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r10=>0x0}}, {{@in6=@mcast2}, 0x0, @in6=@mcast2}}, &(0x7f0000001e00)=0xe8)
clock_gettime(0x0, &(0x7f00000058c0)={<r11=>0x0, <r12=>0x0})
recvmmsg$unix(r1, &(0x7f0000005780)=[{{&(0x7f0000001e40), 0x6e, &(0x7f00000025c0)=[{&(0x7f0000001ec0)=""/172, 0xac}, {&(0x7f0000001f80)=""/218, 0xda}, {&(0x7f0000002080)=""/139, 0x8b}, {&(0x7f0000002140)=""/140, 0x8c}, {&(0x7f0000002200)=""/136, 0x88}, {&(0x7f00000022c0)=""/217, 0xd9}, {&(0x7f00000023c0)=""/134, 0x86}, {&(0x7f0000002480)=""/102, 0x66}, {&(0x7f0000002500)=""/155, 0x9b}], 0x9, &(0x7f0000002680)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, <r13=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe0}}, {{0x0, 0x0, &(0x7f0000004a40)=[{&(0x7f0000002780)=""/209, 0xd1}, {&(0x7f0000002880)=""/111, 0x6f}, {&(0x7f0000002900)=""/94, 0x5e}, {&(0x7f0000002980)=""/164, 0xa4}, {&(0x7f0000002a40)=""/4096, 0x1000}, {&(0x7f0000003a40)=""/4096, 0x1000}], 0x6, &(0x7f0000004ac0)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd8}}, {{&(0x7f0000004bc0)=@abs, 0x6e, &(0x7f0000004dc0)=[{&(0x7f0000004c40)=""/181, 0xb5}, {&(0x7f0000004d00)=""/6, 0x6}, {&(0x7f0000004d40)=""/84, 0x54}], 0x3, &(0x7f0000004e00)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, <r14=>0x0}}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xc0}}, {{&(0x7f0000004ec0)=@abs, 0x6e, &(0x7f0000004f80)=[{&(0x7f0000004f40)=""/23, 0x17}], 0x1, &(0x7f0000004fc0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}}, {{&(0x7f0000005000)=@abs, 0x6e, &(0x7f0000005680)=[{&(0x7f0000005080)=""/113, 0x71}, {&(0x7f0000005100)=""/65, 0x41}, {&(0x7f0000005180)=""/146, 0x92}, {&(0x7f0000005240)=""/35, 0x23}, {&(0x7f0000005280)=""/168, 0xa8}, {&(0x7f0000005340)=""/86, 0x56}, {&(0x7f00000053c0)=""/143, 0x8f}, {&(0x7f0000005480)=""/240, 0xf0}, {&(0x7f0000005580)=""/227, 0xe3}], 0x9, &(0x7f0000005740)=[@cred={{0x1c}}], 0x20}}], 0x5, 0x10003, &(0x7f0000005900)={r11, r12+60000000})
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000005940)={{0x1, 0x1, 0x18, r1, {r10, r14}}, './file1\x00'})
getsockname$packet(r13, &(0x7f0000005980)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000059c0)=0x14)

[   92.096770] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   92.103885] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   92.110809] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   92.119042] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   92.122638] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   92.289751] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   92.293201] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   92.295978] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   92.299253] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   92.306132] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   92.309866] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   92.314137] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   92.321702] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   92.331744] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   92.339485] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   92.353591] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   92.355359] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   92.358411] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   92.359670] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   92.363796] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   92.366012] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   92.369813] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[   92.372934] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   92.376388] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[   92.377012] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   92.379035] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   92.380252] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[   92.392844] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   92.404202] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   92.407842] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   92.410108] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   92.415376] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[   92.421638] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[   92.424093] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   92.429218] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[   92.431888] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   92.438041] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[   92.441942] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[   92.455593] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[   92.459974] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[   94.188605] Bluetooth: hci0: command tx timeout
[   94.378988] Bluetooth: hci2: command tx timeout
[   94.443665] Bluetooth: hci1: command tx timeout
[   94.507091] Bluetooth: hci7: command tx timeout
[   94.507609] Bluetooth: hci6: command tx timeout
[   94.508115] Bluetooth: hci5: command tx timeout
[   94.509513] Bluetooth: hci4: command tx timeout
[   94.509834] Bluetooth: hci3: command tx timeout
[   96.234561] Bluetooth: hci0: command tx timeout
[   96.426531] Bluetooth: hci2: command tx timeout
[   96.490719] Bluetooth: hci1: command tx timeout
[   96.554507] Bluetooth: hci6: command tx timeout
[   96.554994] Bluetooth: hci4: command tx timeout
[   96.555393] Bluetooth: hci5: command tx timeout
[   96.555858] Bluetooth: hci7: command tx timeout
[   96.556344] Bluetooth: hci3: command tx timeout
[   98.282559] Bluetooth: hci0: command tx timeout
[   98.474553] Bluetooth: hci2: command tx timeout
[   98.538541] Bluetooth: hci1: command tx timeout
[   98.602515] Bluetooth: hci7: command tx timeout
[   98.602607] Bluetooth: hci3: command tx timeout
[   98.602924] Bluetooth: hci5: command tx timeout
[   98.603730] Bluetooth: hci4: command tx timeout
[   98.604100] Bluetooth: hci6: command tx timeout
[  100.332550] Bluetooth: hci0: command tx timeout
[  100.522616] Bluetooth: hci2: command tx timeout
[  100.586534] Bluetooth: hci1: command tx timeout
[  100.650620] Bluetooth: hci3: command tx timeout
[  100.651026] Bluetooth: hci4: command tx timeout
[  100.651413] Bluetooth: hci6: command tx timeout
[  100.652550] Bluetooth: hci7: command tx timeout
[  100.652944] Bluetooth: hci5: command tx timeout
[  130.140012] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  130.140721] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  130.270790] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  130.271418] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  130.506893] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  130.507855] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  130.683710] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  130.684347] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  130.825286] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  130.825938] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  130.961795] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  130.962409] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  131.175045] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  131.175754] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  131.346858] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22
[  131.369086] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22
[  131.374017] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  131.374844] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  131.522207] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  131.523498] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  131.655045] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  131.655748] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  131.800823] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  131.801565] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  131.918365] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  131.919022] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  132.037811] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  132.038432] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  132.129148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  132.129783] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  132.397581] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  132.398872] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  132.494091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  132.495356] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  132.652308] random: crng reseeded on system resumption
[  132.662071] random: crng reseeded on system resumption
18:14:29 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000500000000f000000000000000200000006000000000008000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000008000000018000000c20500002b82", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000039c043f6970341999833e8e90d2470c4010040", 0x1f, 0x9}, {&(0x7f0000010300)="0200000003", 0x5, 0x1000}, {0x0, 0x0, 0x80000}], 0x60, &(0x7f0000013b00))

18:14:29 executing program 0:
r0 = getpgid(0xffffffffffffffff)
ptrace(0x4208, r0)
prlimit64(r0, 0xc, &(0x7f0000000000)={0x0, 0x1}, &(0x7f0000000040))
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)=<r1=>0x0)
ptrace(0x11, r1)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2080, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000100), 0x6e, &(0x7f0000000440)=[{&(0x7f0000000180)=""/109, 0x6d}, {&(0x7f0000000200)=""/176, 0xb0}, {&(0x7f00000002c0)=""/150, 0x96}, {&(0x7f0000000380)=""/136, 0x88}], 0x4, &(0x7f0000000480)=[@cred={{0x1c, 0x1, 0x2, {<r3=>0x0}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, <r4=>0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {<r5=>0x0}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, <r6=>0x0}}}, @cred={{0x1c, 0x1, 0x2, {<r7=>0x0}}}, @cred={{0x1c, 0x1, 0x2, {0x0, <r8=>0x0}}}], 0xc0}, 0x20)
prlimit64(r7, 0x5, &(0x7f0000000580)={0x1ff, 0x7fffffff}, &(0x7f00000005c0))
prlimit64(r0, 0x1, &(0x7f0000000600)={0x0, 0xe0000000000000}, &(0x7f0000000640))
ptrace(0x4207, 0xffffffffffffffff)
r9 = inotify_init1(0x40000)
wait4(r5, &(0x7f0000000680), 0x2, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r9, 0x400c6615, &(0x7f00000006c0)={0x0, @adiantum})
ioctl$KDMKTONE(r2, 0x4b30, 0x2)
r10 = shmget$private(0x0, 0x3000, 0x78000000, &(0x7f0000ffd000/0x3000)=nil)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000700)={0x0, <r11=>0x0}, &(0x7f0000000740)=0xc)
r12 = gettid()
shmctl$IPC_SET(r10, 0x1, &(0x7f0000000780)={{0x2, r11, r6, r8, r6, 0x4, 0x5}, 0x1, 0x6, 0x7, 0x5, r3, r12, 0x400})
r13 = shmget(0x2, 0x4000, 0x2, &(0x7f0000ff9000/0x4000)=nil)
shmctl$SHM_STAT(r13, 0xd, &(0x7f0000000800)=""/4096)

18:14:29 executing program 3:
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', <r2=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x3, 0x6, @multicast}, 0x10)
close(r0)
getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000000)=""/100, &(0x7f0000000080)=0x64)

18:14:29 executing program 1:
capget(&(0x7f0000000280)={0x19980330}, &(0x7f0000000040)={0xfffffffe, 0x3ff, 0x9, 0x6, 0x0, 0x40})
capset(&(0x7f0000000200)={0x20080522, 0xffffffffffffffff}, &(0x7f0000000240)={0x10001, 0xb7fe9e8, 0x8000, 0x0, 0x80, 0x1f})
syz_mount_image$tmpfs(&(0x7f00000001c0), &(0x7f0000000180)='./file0\x00', 0x4783, 0x0, 0x0, 0x1, &(0x7f0000001980)=ANY=[])
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, <r1=>0x0}, &(0x7f0000000040)=0x5)
setuid(r1)
r2 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0)
r3 = dup(r2)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, 0x12, r3, 0x0)
mknodat$loop(r3, &(0x7f0000000440)='./file0\x00', 0x1000, 0x1)
syz_mount_image$nfs4(&(0x7f0000000000), &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000380)=[{&(0x7f0000000300)="d00845f9281a2586f084c19bfa384fe3ebc6a7c1b192d6336c68f1d88498c61713bc205f8742ec26cc15f7469d1090d87bd042c041d8ab2f2e3fc82590fc10d851692a6b84e39dc0dc897d7822f9bb137a9ce592559f8642996a39910f986388740fcce3929b515d44d242743cfbad7bdd7a59cb891d3e63f2341e1f", 0x7c, 0x7fff}], 0x2, &(0x7f00000003c0)={[{'tmpfs\x00'}, {'^\x9b-\\{'}, {'\']@+'}, {')@'}, {'9p\x00'}, {',$]!$$'}], [{@fowner_eq={'fowner', 0x3d, r1}}, {@smackfsfloor={'smackfsfloor', 0x3d, '!#'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '9p\x00'}}]})
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=uniy,\x00'])

18:14:29 executing program 2:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r1=>r0, {0xac0}}, './file1\x00'})
r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x100010, r2, 0x0)
fcntl$setstatus(r0, 0x4, 0x400)
ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r2, {0x7ff}}, './file1\x00'})
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet6_int(r4, 0x29, 0x46, 0x0, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
fsetxattr$trusted_overlay_opaque(r5, &(0x7f00000002c0), &(0x7f0000000300), 0x2, 0x2)
connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000000c0), 0x4)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000000)={0x0, <r7=>0x0}, &(0x7f0000000040)=0x5)
setuid(r7)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, <r8=>0xee01}}, './file1\x00'})
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000000200)=0xc)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f00000001c0)=ANY=[@ANYBLOB="0100000001000000180000006b32763db595471e7ddff409bb13960fef9e38", @ANYRES32=r4, @ANYRES32=r7, @ANYRES32=r8, @ANYBLOB='./file1\x00'])
pwritev2(r0, &(0x7f0000000280)=[{&(0x7f0000000080)="8c", 0x1}], 0x1, 0x0, 0x0, 0x23)

18:14:29 executing program 7:
syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x200400, 0x0)
creat(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='devpts\x00', 0x0, 0x0)
umount2(&(0x7f0000000000)='./file0\x00', 0x0)

18:14:29 executing program 4:
r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x1, 0x0)
r1 = dup(r0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, 0x12, r1, 0x0)
r2 = openat$bsg(0xffffffffffffff9c, 0xfffffffffffffffe, 0x511000, 0x0)
io_setup(0x9, &(0x7f00000000c0)=<r3=>0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet6_int(r4, 0x29, 0x46, 0x0, 0x0)
connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x1}, 0x1c)
connect$inet6(r1, &(0x7f0000000340)={0xa, 0x4e21, 0x80000001, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x9}, 0x1c)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff976c, 0x2, @perf_config_ext={0x25, 0x8e}, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
io_setup(0x1, &(0x7f0000000040)=<r5=>0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
io_submit(r5, 0x1, &(0x7f0000000280)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xffff, r6, 0x0}])
setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000000c0), 0x4)
io_submit(r3, 0x2, &(0x7f0000000300)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0xfff8, r4, &(0x7f0000000100)="176fd84df81ecbb41ccbe9dc7557bd427883bb5c2b60b831855384123a58ccf8326380914433f783810dd0184d63f66a44b01a041db21efaadd019743e40ab901383cd8ef61eda74fbda5672b4fe681286b7da87eb28e2b267072cb0215ebfd35af56eb00f57f7622b8a120684adefe4196482", 0x73, 0x6, 0x0, 0x1, r1}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3, 0x8001, r0, &(0x7f00000001c0)="6196b017e0a42a26bd1c4ae1ed1d8721416b2491a17b762bec0203068579adb1285dff2ff3b830e059b0124b94fc944b4f4dda886b2e8973e0d14331f942beef24b18569d6445e1be0f2f78f32ab117589b3d0e5f6d402979c2d2947a508d4cdaea781b80089e1e6f3c0e685232a1cbbb9ded41a248be7efce29681eed976001e9ff1e9bd582f0a116b80e0b5f1a61049a0121e73cae5f8e20aec713d1fc44b26420e87700607bbdb3b84db6eea5c362d99c5db747b103a716a12843ffa745ab93b7425a249650be431e58c19177e563d13bed", 0xd3, 0x7, 0x0, 0x3, r2}])
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000000)={0x0, <r8=>0x0}, &(0x7f0000000040)=0x5)
setuid(r8)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x2009044, &(0x7f0000000640)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB="2c844f77ae769b", @ANYRESHEX=r2, @ANYBLOB="2c616e616d653d7d2360292f172c64666c747569643d", @ANYRESHEX=0xee01, @ANYBLOB=',version=9p2000.L,dfltgid=', @ANYRESHEX=0xee01, @ANYBLOB="2c666fc001b8ba3d", @ANYRESDEC=r8, @ANYBLOB=',fsmagic=0x0000000000000003,hash,permit_directio,defcontext=staff_u,dont_measure,subj_user=ext4\x00,\x00'])

18:14:29 executing program 5:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'vcan0\x00', <r2=>0x0})
sendmmsg$inet(r0, &(0x7f00000007c0)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast1=0xac141400}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)="be61", 0x2}], 0x1, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @local}}}], 0x20}}], 0x1, 0x0)

[  144.478611] capability: warning: `syz-executor.1' uses 32-bit capabilities (legacy support in use)
[  144.479517] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode
[  144.482168] mac80211_hwsim hwsim17 wlan1: left promiscuous mode
[  144.490984] loop6: detected capacity change from 0 to 2048
[  144.494027] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode
[  144.494765] mac80211_hwsim hwsim17 wlan1: left promiscuous mode
[  144.499678] =======================================================
[  144.499678] WARNING: The mand mount option has been deprecated and
[  144.499678]          and is ignored by this kernel. Remove the mand
[  144.499678]          option from the mount to silence this warning.
[  144.499678] =======================================================
[  144.523101] audit: type=1400 audit(1756491269.618:8): avc:  denied  { open } for  pid=3940 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[  144.529909] audit: type=1400 audit(1756491269.618:9): avc:  denied  { kernel } for  pid=3940 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[  144.532948] loop6: detected capacity change from 0 to 2048
[  144.533795] kmemleak: Found object by alias at 0x607f1a639884
[  144.533811] CPU: 0 UID: 0 PID: 3928 Comm: syz-executor.1 Tainted: G        W           6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) 
[  144.533829] Tainted: [W]=WARN
[  144.533833] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  144.533840] Call Trace:
[  144.533844]  <TASK>
[  144.533849]  dump_stack_lvl+0xca/0x120
[  144.533878]  __lookup_object+0x94/0xb0
[  144.533895]  delete_object_full+0x27/0x70
[  144.533912]  free_percpu+0x30/0x1160
[  144.533929]  ? arch_uprobe_clear_state+0x16/0x140
[  144.533949]  futex_hash_free+0x38/0xc0
[  144.533964]  mmput+0x2d3/0x390
[  144.533983]  do_exit+0x79d/0x2970
[  144.533996]  ? signal_wake_up_state+0x85/0x120
[  144.534014]  ? zap_other_threads+0x2b9/0x3a0
[  144.534030]  ? __pfx_do_exit+0x10/0x10
[  144.534043]  ? do_group_exit+0x1c3/0x2a0
[  144.534056]  ? lock_release+0xc8/0x290
[  144.534074]  do_group_exit+0xd3/0x2a0
[  144.534088]  __x64_sys_exit_group+0x3e/0x50
[  144.534102]  x64_sys_call+0x18c5/0x18d0
[  144.534117]  do_syscall_64+0xbf/0x360
[  144.534130]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  144.534141] RIP: 0033:0x7f8ad0723b19
[  144.534150] Code: Unable to access opcode bytes at 0x7f8ad0723aef.
[  144.534156] RSP: 002b:00007ffecfc1b818 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[  144.534167] RAX: ffffffffffffffda RBX: 000000000000001e RCX: 00007f8ad0723b19
[  144.534174] RDX: 00007f8ad06d672b RSI: ffffffffffffffbc RDI: 0000000000000000
[  144.534182] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000001
[  144.534189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  144.534196] R13: 0000000000000001 R14: 0000000000000001 R15: 00007ffecfc1b900
[  144.534211]  </TASK>
[  144.534216] kmemleak: Object (percpu) 0x607f1a639880 (size 8):
[  144.534222] kmemleak:   comm "syz-executor.4", pid 288, jiffies 4294798990
[  144.534229] kmemleak:   min_count = 1
[  144.534233] kmemleak:   count = 1
[  144.534237] kmemleak:   flags = 0x21
[  144.534241] kmemleak:   checksum = 0
[  144.534245] kmemleak:   backtrace:
[  144.534248]  pcpu_alloc_noprof+0x87a/0x1170
[  144.534263]  percpu_ref_init+0x37/0x400
[  144.534281]  cgroup_apply_control_enable+0x4a6/0x9f0
[  144.534294]  cgroup_mkdir+0x86e/0x1110
[  144.534306]  kernfs_iop_mkdir+0x111/0x190
[  144.534321]  vfs_mkdir+0x59a/0x8d0
[  144.534337]  do_mkdirat+0x19f/0x3d0
[  144.534348]  __x64_sys_mkdir+0xf3/0x140
[  144.534358]  do_syscall_64+0xbf/0x360
[  144.534366]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
18:14:29 executing program 7:
syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x200400, 0x0)
creat(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='devpts\x00', 0x0, 0x0)
umount2(&(0x7f0000000000)='./file0\x00', 0x0)

18:14:29 executing program 0:
r0 = getpgid(0xffffffffffffffff)
ptrace(0x4208, r0)
prlimit64(r0, 0xc, &(0x7f0000000000)={0x0, 0x1}, &(0x7f0000000040))
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)=<r1=>0x0)
ptrace(0x11, r1)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2080, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000100), 0x6e, &(0x7f0000000440)=[{&(0x7f0000000180)=""/109, 0x6d}, {&(0x7f0000000200)=""/176, 0xb0}, {&(0x7f00000002c0)=""/150, 0x96}, {&(0x7f0000000380)=""/136, 0x88}], 0x4, &(0x7f0000000480)=[@cred={{0x1c, 0x1, 0x2, {<r3=>0x0}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, <r4=>0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {<r5=>0x0}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, <r6=>0x0}}}, @cred={{0x1c, 0x1, 0x2, {<r7=>0x0}}}, @cred={{0x1c, 0x1, 0x2, {0x0, <r8=>0x0}}}], 0xc0}, 0x20)
prlimit64(r7, 0x5, &(0x7f0000000580)={0x1ff, 0x7fffffff}, &(0x7f00000005c0))
prlimit64(r0, 0x1, &(0x7f0000000600)={0x0, 0xe0000000000000}, &(0x7f0000000640))
ptrace(0x4207, 0xffffffffffffffff)
r9 = inotify_init1(0x40000)
wait4(r5, &(0x7f0000000680), 0x2, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r9, 0x400c6615, &(0x7f00000006c0)={0x0, @adiantum})
ioctl$KDMKTONE(r2, 0x4b30, 0x2)
r10 = shmget$private(0x0, 0x3000, 0x78000000, &(0x7f0000ffd000/0x3000)=nil)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000700)={0x0, <r11=>0x0}, &(0x7f0000000740)=0xc)
r12 = gettid()
shmctl$IPC_SET(r10, 0x1, &(0x7f0000000780)={{0x2, r11, r6, r8, r6, 0x4, 0x5}, 0x1, 0x6, 0x7, 0x5, r3, r12, 0x400})
r13 = shmget(0x2, 0x4000, 0x2, &(0x7f0000ff9000/0x4000)=nil)
shmctl$SHM_STAT(r13, 0xd, &(0x7f0000000800)=""/4096)

18:14:29 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x43, 0x6)
setresuid(0x0, 0x0, 0x0)
ioprio_set$uid(0x3, 0x0, 0x0)
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x12001, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000240)=0xc)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0xc)
close(r0)
ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000100)={0x1, 0xd0, "a2736b409b169c2adfb12a372c9e21d0fb23c1901372e59e038ba284c3982a84b4a9653ad7c35d9a1058df7d6e968c6858e8cf4881fb15fe10fdb8e6fcad61d4534b6e0cc279b46ac82781374035aa250ef602c70a32dbd43dae650b91e164a4d1d38e006ad95129193d116139d319dbdf3de7a3a79c380b2010f58db950077c92d1b8ec8b8a63e1c32eed2bae6ed591d65548a233224024035e7560b5490b305c0e5ddddb087d6e41326d734f8aba96c3bb97b69da492931278c62843baae99cf1c1fc533995c767d00932d5912ee92"})
execveat(r1, &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0)

18:14:29 executing program 6:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r1=>r0, @in_args={0x1}}, './file0\x00'})
fremovexattr(r1, &(0x7f0000000040)=@random={'osx.', '!\x00'})
ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f00000003c0)={0x0, "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"})

18:14:29 executing program 1:
capget(&(0x7f0000000280)={0x19980330}, &(0x7f0000000040)={0xfffffffe, 0x3ff, 0x9, 0x6, 0x0, 0x40})
capset(&(0x7f0000000200)={0x20080522, 0xffffffffffffffff}, &(0x7f0000000240)={0x10001, 0xb7fe9e8, 0x8000, 0x0, 0x80, 0x1f})
syz_mount_image$tmpfs(&(0x7f00000001c0), &(0x7f0000000180)='./file0\x00', 0x4783, 0x0, 0x0, 0x1, &(0x7f0000001980)=ANY=[])
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, <r1=>0x0}, &(0x7f0000000040)=0x5)
setuid(r1)
r2 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0)
r3 = dup(r2)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, 0x12, r3, 0x0)
mknodat$loop(r3, &(0x7f0000000440)='./file0\x00', 0x1000, 0x1)
syz_mount_image$nfs4(&(0x7f0000000000), &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000380)=[{&(0x7f0000000300)="d00845f9281a2586f084c19bfa384fe3ebc6a7c1b192d6336c68f1d88498c61713bc205f8742ec26cc15f7469d1090d87bd042c041d8ab2f2e3fc82590fc10d851692a6b84e39dc0dc897d7822f9bb137a9ce592559f8642996a39910f986388740fcce3929b515d44d242743cfbad7bdd7a59cb891d3e63f2341e1f", 0x7c, 0x7fff}], 0x2, &(0x7f00000003c0)={[{'tmpfs\x00'}, {'^\x9b-\\{'}, {'\']@+'}, {')@'}, {'9p\x00'}, {',$]!$$'}], [{@fowner_eq={'fowner', 0x3d, r1}}, {@smackfsfloor={'smackfsfloor', 0x3d, '!#'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '9p\x00'}}]})
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=uniy,\x00'])

18:14:29 executing program 0:
r0 = getpgid(0xffffffffffffffff)
ptrace(0x4208, r0)
prlimit64(r0, 0xc, &(0x7f0000000000)={0x0, 0x1}, &(0x7f0000000040))
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)=<r1=>0x0)
ptrace(0x11, r1)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2080, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000100), 0x6e, &(0x7f0000000440)=[{&(0x7f0000000180)=""/109, 0x6d}, {&(0x7f0000000200)=""/176, 0xb0}, {&(0x7f00000002c0)=""/150, 0x96}, {&(0x7f0000000380)=""/136, 0x88}], 0x4, &(0x7f0000000480)=[@cred={{0x1c, 0x1, 0x2, {<r3=>0x0}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, <r4=>0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {<r5=>0x0}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, <r6=>0x0}}}, @cred={{0x1c, 0x1, 0x2, {<r7=>0x0}}}, @cred={{0x1c, 0x1, 0x2, {0x0, <r8=>0x0}}}], 0xc0}, 0x20)
prlimit64(r7, 0x5, &(0x7f0000000580)={0x1ff, 0x7fffffff}, &(0x7f00000005c0))
prlimit64(r0, 0x1, &(0x7f0000000600)={0x0, 0xe0000000000000}, &(0x7f0000000640))
ptrace(0x4207, 0xffffffffffffffff)
r9 = inotify_init1(0x40000)
wait4(r5, &(0x7f0000000680), 0x2, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r9, 0x400c6615, &(0x7f00000006c0)={0x0, @adiantum})
ioctl$KDMKTONE(r2, 0x4b30, 0x2)
r10 = shmget$private(0x0, 0x3000, 0x78000000, &(0x7f0000ffd000/0x3000)=nil)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000700)={0x0, <r11=>0x0}, &(0x7f0000000740)=0xc)
r12 = gettid()
shmctl$IPC_SET(r10, 0x1, &(0x7f0000000780)={{0x2, r11, r6, r8, r6, 0x4, 0x5}, 0x1, 0x6, 0x7, 0x5, r3, r12, 0x400})
r13 = shmget(0x2, 0x4000, 0x2, &(0x7f0000ff9000/0x4000)=nil)
shmctl$SHM_STAT(r13, 0xd, &(0x7f0000000800)=""/4096)

[  144.682821] kmemleak: Found object by alias at 0x607f1a638b1c
[  144.682846] CPU: 0 UID: 0 PID: 14 Comm: ksoftirqd/0 Tainted: G        W           6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) 
[  144.682866] Tainted: [W]=WARN
[  144.682871] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  144.682882] Call Trace:
[  144.682887]  <TASK>
[  144.682892]  dump_stack_lvl+0xca/0x120
[  144.682920]  __lookup_object+0x94/0xb0
[  144.682939]  delete_object_full+0x27/0x70
[  144.682956]  free_percpu+0x30/0x1160
[  144.682978]  percpu_counter_destroy_many+0x188/0x2b0
[  144.682998]  free_uid+0x1af/0x1f0
[  144.683012]  ? __pfx_free_uid+0x10/0x10
[  144.683023]  ? security_cred_free+0x70/0xe0
[  144.683049]  put_cred_rcu+0x1ac/0x3a0
[  144.683064]  ? rcu_core+0x7c3/0x1800
[  144.683080]  rcu_core+0x7c8/0x1800
[  144.683099]  ? __pfx_rcu_core+0x10/0x10
[  144.683112]  ? __pfx___schedule+0x10/0x10
[  144.683136]  handle_softirqs+0x1b1/0x770
[  144.683159]  ? __pfx_run_ksoftirqd+0x10/0x10
[  144.683178]  ? smpboot_thread_fn+0x371/0x9d0
[  144.683196]  run_ksoftirqd+0x2e/0x60
[  144.683214]  smpboot_thread_fn+0x41d/0x9d0
[  144.683234]  ? __pfx_smpboot_thread_fn+0x10/0x10
[  144.683254]  kthread+0x3c8/0x740
[  144.683268]  ? __pfx_kthread+0x10/0x10
[  144.683280]  ? ret_from_fork+0x23/0x430
[  144.683300]  ? lock_release+0xc8/0x290
[  144.683316]  ? __pfx_kthread+0x10/0x10
[  144.683330]  ret_from_fork+0x34b/0x430
[  144.683347]  ? __pfx_kthread+0x10/0x10
[  144.683360]  ret_from_fork_asm+0x1a/0x30
[  144.683386]  </TASK>
[  144.683390] kmemleak: Object (percpu) 0x607f1a638b18 (size 8):
[  144.683397] kmemleak:   comm "syz-executor.6", pid 3965, jiffies 4294811386
[  144.683405] kmemleak:   min_count = 1
[  144.683409] kmemleak:   count = 0
[  144.683413] kmemleak:   flags = 0x21
[  144.683417] kmemleak:   checksum = 0
[  144.683421] kmemleak:   backtrace:
[  144.683424]  pcpu_alloc_noprof+0x87a/0x1170
[  144.683441]  perf_trace_event_init+0x366/0xa10
[  144.683455]  perf_trace_init+0x1a4/0x2f0
[  144.683468]  perf_tp_event_init+0xa6/0x120
[  144.683485]  perf_try_init_event+0x140/0x9f0
[  144.683499]  perf_event_alloc.part.0+0x118e/0x45f0
[  144.683517]  __do_sys_perf_event_open+0x719/0x2c20
[  144.683531]  do_syscall_64+0xbf/0x360
[  144.683541]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  144.786199] kmemleak: Found object by alias at 0x607f1a639884
[  144.786219] CPU: 0 UID: 0 PID: 3966 Comm: syz-executor.1 Tainted: G        W           6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) 
[  144.786237] Tainted: [W]=WARN
[  144.786241] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  144.786248] Call Trace:
[  144.786252]  <TASK>
[  144.786257]  dump_stack_lvl+0xca/0x120
[  144.786281]  __lookup_object+0x94/0xb0
[  144.786299]  delete_object_full+0x27/0x70
[  144.786315]  free_percpu+0x30/0x1160
[  144.786332]  ? arch_uprobe_clear_state+0x16/0x140
[  144.786352]  futex_hash_free+0x38/0xc0
[  144.786367]  mmput+0x2d3/0x390
[  144.786386]  do_exit+0x79d/0x2970
[  144.786400]  ? signal_wake_up_state+0x85/0x120
[  144.786416]  ? zap_other_threads+0x2b9/0x3a0
[  144.786432]  ? __pfx_do_exit+0x10/0x10
[  144.786449]  ? do_group_exit+0x1c3/0x2a0
[  144.786462]  ? lock_release+0xc8/0x290
[  144.786479]  do_group_exit+0xd3/0x2a0
[  144.786494]  __x64_sys_exit_group+0x3e/0x50
[  144.786508]  x64_sys_call+0x18c5/0x18d0
[  144.786523]  do_syscall_64+0xbf/0x360
[  144.786535]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  144.786547] RIP: 0033:0x7f8ad0723b19
[  144.786556] Code: Unable to access opcode bytes at 0x7f8ad0723aef.
[  144.786561] RSP: 002b:00007ffecfc1b818 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[  144.786572] RAX: ffffffffffffffda RBX: 000000000000001e RCX: 00007f8ad0723b19
[  144.786580] RDX: 00007f8ad06d672b RSI: ffffffffffffffbc RDI: 0000000000000000
[  144.786587] RBP: 0000000000000000 R08: 0000001b2cf2a178 R09: 0000000000000000
[  144.786595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  144.786601] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffecfc1b900
[  144.786617]  </TASK>
[  144.786621] kmemleak: Object (percpu) 0x607f1a639880 (size 8):
[  144.786628] kmemleak:   comm "syz-executor.1", pid 3967, jiffies 4294811469
[  144.786635] kmemleak:   min_count = 1
[  144.786638] kmemleak:   count = 0
[  144.786642] kmemleak:   flags = 0x21
[  144.786646] kmemleak:   checksum = 0
[  144.786650] kmemleak:   backtrace:
[  144.786653]  pcpu_alloc_noprof+0x87a/0x1170
[  144.786669]  alloc_vfsmnt+0x135/0x6e0
[  144.786682]  vfs_create_mount.part.0+0x40/0x440
[  144.786697]  path_mount+0x1637/0x1dd0
[  144.786709]  __x64_sys_mount+0x27b/0x300
[  144.786720]  do_syscall_64+0xbf/0x360
[  144.786728]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
18:14:38 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', <r2=>0x0})
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r3=>r0, {0x81}}, './file0\x00'})
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000829bd7000fedbdf251200000008000700090000004000018008000100", @ANYRES32=0x0, @ANYBLOB="1400020065727370616e3000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="40011600c2c9731a8d914e8d49e79cfba8e2ef48d0f5c9315420ca66c006fcad5a85077666e4cd9012b384ba1ad6670a566f952ab982699f95fd37f08674958a77ab540de8b67e292a22ca1e208b0f82a9ad48c531313b4eeaecc7c493fdeda1e1edb5e0fd2197e3f5f731efd2c17a43f9ddc9f9db838b47f54a56cd3154419c", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB], 0x5c}, 0x1, 0x0, 0x0, 0x20088000}, 0x24040809)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000480)={0x28, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6}]}, 0x28}}, 0x0)
r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r5, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x200}]}, 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x0)
r6 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x12, r6, 0x0)
sendmsg$NL80211_CMD_DEL_PMK(r6, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x58, r4, 0x300, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x400a4}, 0x20040840)

18:14:38 executing program 1:
capget(&(0x7f0000000280)={0x19980330}, &(0x7f0000000040)={0xfffffffe, 0x3ff, 0x9, 0x6, 0x0, 0x40})
capset(&(0x7f0000000200)={0x20080522, 0xffffffffffffffff}, &(0x7f0000000240)={0x10001, 0xb7fe9e8, 0x8000, 0x0, 0x80, 0x1f})
syz_mount_image$tmpfs(&(0x7f00000001c0), &(0x7f0000000180)='./file0\x00', 0x4783, 0x0, 0x0, 0x1, &(0x7f0000001980)=ANY=[])
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, <r1=>0x0}, &(0x7f0000000040)=0x5)
setuid(r1)
r2 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0)
r3 = dup(r2)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, 0x12, r3, 0x0)
mknodat$loop(r3, &(0x7f0000000440)='./file0\x00', 0x1000, 0x1)
syz_mount_image$nfs4(&(0x7f0000000000), &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000380)=[{&(0x7f0000000300)="d00845f9281a2586f084c19bfa384fe3ebc6a7c1b192d6336c68f1d88498c61713bc205f8742ec26cc15f7469d1090d87bd042c041d8ab2f2e3fc82590fc10d851692a6b84e39dc0dc897d7822f9bb137a9ce592559f8642996a39910f986388740fcce3929b515d44d242743cfbad7bdd7a59cb891d3e63f2341e1f", 0x7c, 0x7fff}], 0x2, &(0x7f00000003c0)={[{'tmpfs\x00'}, {'^\x9b-\\{'}, {'\']@+'}, {')@'}, {'9p\x00'}, {',$]!$$'}], [{@fowner_eq={'fowner', 0x3d, r1}}, {@smackfsfloor={'smackfsfloor', 0x3d, '!#'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '9p\x00'}}]})
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=uniy,\x00'])

18:14:38 executing program 6:
r0 = syz_open_dev$vcsa(&(0x7f0000000040), 0x10001, 0x4000)
ioctl$TIOCL_SELLOADLUT(r0, 0x541c, &(0x7f0000000080)={0x5, 0x5fb, 0x100000001, 0xffffffffffffff00})
close(r0)
r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00')
setns(r1, 0x0)
clone3(&(0x7f00000002c0)={0x1720e0180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

18:14:38 executing program 2:
r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x1, 0x0)
r1 = dup(r0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, 0x12, r1, 0x0)
r2 = openat$bsg(0xffffffffffffff9c, 0xfffffffffffffffe, 0x511000, 0x0)
io_setup(0x9, &(0x7f00000000c0)=<r3=>0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet6_int(r4, 0x29, 0x46, 0x0, 0x0)
connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x1}, 0x1c)
connect$inet6(r1, &(0x7f0000000340)={0xa, 0x4e21, 0x80000001, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x9}, 0x1c)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff976c, 0x2, @perf_config_ext={0x25, 0x8e}, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
io_setup(0x1, &(0x7f0000000040)=<r5=>0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
io_submit(r5, 0x1, &(0x7f0000000280)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xffff, r6, 0x0}])
setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000000c0), 0x4)
io_submit(r3, 0x2, &(0x7f0000000300)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0xfff8, r4, &(0x7f0000000100)="176fd84df81ecbb41ccbe9dc7557bd427883bb5c2b60b831855384123a58ccf8326380914433f783810dd0184d63f66a44b01a041db21efaadd019743e40ab901383cd8ef61eda74fbda5672b4fe681286b7da87eb28e2b267072cb0215ebfd35af56eb00f57f7622b8a120684adefe4196482", 0x73, 0x6, 0x0, 0x1, r1}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3, 0x8001, r0, &(0x7f00000001c0)="6196b017e0a42a26bd1c4ae1ed1d8721416b2491a17b762bec0203068579adb1285dff2ff3b830e059b0124b94fc944b4f4dda886b2e8973e0d14331f942beef24b18569d6445e1be0f2f78f32ab117589b3d0e5f6d402979c2d2947a508d4cdaea781b80089e1e6f3c0e685232a1cbbb9ded41a248be7efce29681eed976001e9ff1e9bd582f0a116b80e0b5f1a61049a0121e73cae5f8e20aec713d1fc44b26420e87700607bbdb3b84db6eea5c362d99c5db747b103a716a12843ffa745ab93b7425a249650be431e58c19177e563d13bed", 0xd3, 0x7, 0x0, 0x3, r2}])
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000000)={0x0, <r8=>0x0}, &(0x7f0000000040)=0x5)
setuid(r8)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x2009044, &(0x7f0000000640)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB="2c844f77ae769b", @ANYRESHEX=r2, @ANYBLOB="2c616e616d653d7d2360292f172c64666c747569643d", @ANYRESHEX=0xee01, @ANYBLOB=',version=9p2000.L,dfltgid=', @ANYRESHEX=0xee01, @ANYBLOB="2c666fc001b8ba3d", @ANYRESDEC=r8, @ANYBLOB=',fsmagic=0x0000000000000003,hash,permit_directio,defcontext=staff_u,dont_measure,subj_user=ext4\x00,\x00'])

18:14:38 executing program 3:
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='gid_map\x00')

18:14:38 executing program 4:
r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x1, 0x0)
r1 = dup(r0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, 0x12, r1, 0x0)
r2 = openat$bsg(0xffffffffffffff9c, 0xfffffffffffffffe, 0x511000, 0x0)
io_setup(0x9, &(0x7f00000000c0)=<r3=>0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet6_int(r4, 0x29, 0x46, 0x0, 0x0)
connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x1}, 0x1c)
connect$inet6(r1, &(0x7f0000000340)={0xa, 0x4e21, 0x80000001, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x9}, 0x1c)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff976c, 0x2, @perf_config_ext={0x25, 0x8e}, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
io_setup(0x1, &(0x7f0000000040)=<r5=>0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
io_submit(r5, 0x1, &(0x7f0000000280)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xffff, r6, 0x0}])
setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000000c0), 0x4)
io_submit(r3, 0x2, &(0x7f0000000300)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0xfff8, r4, &(0x7f0000000100)="176fd84df81ecbb41ccbe9dc7557bd427883bb5c2b60b831855384123a58ccf8326380914433f783810dd0184d63f66a44b01a041db21efaadd019743e40ab901383cd8ef61eda74fbda5672b4fe681286b7da87eb28e2b267072cb0215ebfd35af56eb00f57f7622b8a120684adefe4196482", 0x73, 0x6, 0x0, 0x1, r1}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3, 0x8001, r0, &(0x7f00000001c0)="6196b017e0a42a26bd1c4ae1ed1d8721416b2491a17b762bec0203068579adb1285dff2ff3b830e059b0124b94fc944b4f4dda886b2e8973e0d14331f942beef24b18569d6445e1be0f2f78f32ab117589b3d0e5f6d402979c2d2947a508d4cdaea781b80089e1e6f3c0e685232a1cbbb9ded41a248be7efce29681eed976001e9ff1e9bd582f0a116b80e0b5f1a61049a0121e73cae5f8e20aec713d1fc44b26420e87700607bbdb3b84db6eea5c362d99c5db747b103a716a12843ffa745ab93b7425a249650be431e58c19177e563d13bed", 0xd3, 0x7, 0x0, 0x3, r2}])
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000000)={0x0, <r8=>0x0}, &(0x7f0000000040)=0x5)
setuid(r8)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x2009044, &(0x7f0000000640)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB="2c844f77ae769b", @ANYRESHEX=r2, @ANYBLOB="2c616e616d653d7d2360292f172c64666c747569643d", @ANYRESHEX=0xee01, @ANYBLOB=',version=9p2000.L,dfltgid=', @ANYRESHEX=0xee01, @ANYBLOB="2c666fc001b8ba3d", @ANYRESDEC=r8, @ANYBLOB=',fsmagic=0x0000000000000003,hash,permit_directio,defcontext=staff_u,dont_measure,subj_user=ext4\x00,\x00'])

18:14:38 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x1, 0x0)
r1 = dup(r0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, 0x12, r1, 0x0)
r2 = openat$bsg(0xffffffffffffff9c, 0xfffffffffffffffe, 0x511000, 0x0)
io_setup(0x9, &(0x7f00000000c0)=<r3=>0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet6_int(r4, 0x29, 0x46, 0x0, 0x0)
connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x1}, 0x1c)
connect$inet6(r1, &(0x7f0000000340)={0xa, 0x4e21, 0x80000001, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x9}, 0x1c)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff976c, 0x2, @perf_config_ext={0x25, 0x8e}, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
io_setup(0x1, &(0x7f0000000040)=<r5=>0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
io_submit(r5, 0x1, &(0x7f0000000280)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xffff, r6, 0x0}])
setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000000c0), 0x4)
io_submit(r3, 0x2, &(0x7f0000000300)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0xfff8, r4, &(0x7f0000000100)="176fd84df81ecbb41ccbe9dc7557bd427883bb5c2b60b831855384123a58ccf8326380914433f783810dd0184d63f66a44b01a041db21efaadd019743e40ab901383cd8ef61eda74fbda5672b4fe681286b7da87eb28e2b267072cb0215ebfd35af56eb00f57f7622b8a120684adefe4196482", 0x73, 0x6, 0x0, 0x1, r1}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3, 0x8001, r0, &(0x7f00000001c0)="6196b017e0a42a26bd1c4ae1ed1d8721416b2491a17b762bec0203068579adb1285dff2ff3b830e059b0124b94fc944b4f4dda886b2e8973e0d14331f942beef24b18569d6445e1be0f2f78f32ab117589b3d0e5f6d402979c2d2947a508d4cdaea781b80089e1e6f3c0e685232a1cbbb9ded41a248be7efce29681eed976001e9ff1e9bd582f0a116b80e0b5f1a61049a0121e73cae5f8e20aec713d1fc44b26420e87700607bbdb3b84db6eea5c362d99c5db747b103a716a12843ffa745ab93b7425a249650be431e58c19177e563d13bed", 0xd3, 0x7, 0x0, 0x3, r2}])
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000000)={0x0, <r8=>0x0}, &(0x7f0000000040)=0x5)
setuid(r8)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x2009044, &(0x7f0000000640)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB="2c844f77ae769b", @ANYRESHEX=r2, @ANYBLOB="2c616e616d653d7d2360292f172c64666c747569643d", @ANYRESHEX=0xee01, @ANYBLOB=',version=9p2000.L,dfltgid=', @ANYRESHEX=0xee01, @ANYBLOB="2c666fc001b8ba3d", @ANYRESDEC=r8, @ANYBLOB=',fsmagic=0x0000000000000003,hash,permit_directio,defcontext=staff_u,dont_measure,subj_user=ext4\x00,\x00'])

18:14:38 executing program 0:
r0 = getpgid(0xffffffffffffffff)
ptrace(0x4208, r0)
prlimit64(r0, 0xc, &(0x7f0000000000)={0x0, 0x1}, &(0x7f0000000040))
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)=<r1=>0x0)
ptrace(0x11, r1)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2080, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000100), 0x6e, &(0x7f0000000440)=[{&(0x7f0000000180)=""/109, 0x6d}, {&(0x7f0000000200)=""/176, 0xb0}, {&(0x7f00000002c0)=""/150, 0x96}, {&(0x7f0000000380)=""/136, 0x88}], 0x4, &(0x7f0000000480)=[@cred={{0x1c, 0x1, 0x2, {<r3=>0x0}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, <r4=>0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {<r5=>0x0}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, <r6=>0x0}}}, @cred={{0x1c, 0x1, 0x2, {<r7=>0x0}}}, @cred={{0x1c, 0x1, 0x2, {0x0, <r8=>0x0}}}], 0xc0}, 0x20)
prlimit64(r7, 0x5, &(0x7f0000000580)={0x1ff, 0x7fffffff}, &(0x7f00000005c0))
prlimit64(r0, 0x1, &(0x7f0000000600)={0x0, 0xe0000000000000}, &(0x7f0000000640))
ptrace(0x4207, 0xffffffffffffffff)
r9 = inotify_init1(0x40000)
wait4(r5, &(0x7f0000000680), 0x2, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r9, 0x400c6615, &(0x7f00000006c0)={0x0, @adiantum})
ioctl$KDMKTONE(r2, 0x4b30, 0x2)
r10 = shmget$private(0x0, 0x3000, 0x78000000, &(0x7f0000ffd000/0x3000)=nil)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000700)={0x0, <r11=>0x0}, &(0x7f0000000740)=0xc)
r12 = gettid()
shmctl$IPC_SET(r10, 0x1, &(0x7f0000000780)={{0x2, r11, r6, r8, r6, 0x4, 0x5}, 0x1, 0x6, 0x7, 0x5, r3, r12, 0x400})
shmget(0x2, 0x4000, 0x2, &(0x7f0000ff9000/0x4000)=nil)

[  153.087110] kmemleak: Found object by alias at 0x607f1a639884
[  153.087131] CPU: 0 UID: 0 PID: 3979 Comm: syz-executor.1 Tainted: G        W           6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) 
[  153.087149] Tainted: [W]=WARN
[  153.087152] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  153.087159] Call Trace:
[  153.087163]  <TASK>
[  153.087168]  dump_stack_lvl+0xca/0x120
[  153.087192]  __lookup_object+0x94/0xb0
[  153.087209]  delete_object_full+0x27/0x70
[  153.087225]  free_percpu+0x30/0x1160
[  153.087241]  ? arch_uprobe_clear_state+0x16/0x140
[  153.087262]  futex_hash_free+0x38/0xc0
[  153.087276]  mmput+0x2d3/0x390
[  153.087294]  do_exit+0x79d/0x2970
[  153.087308]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  153.087329]  ? zap_other_threads+0x2b9/0x3a0
[  153.087346]  ? __pfx_do_exit+0x10/0x10
[  153.087358]  ? do_group_exit+0x1c3/0x2a0
[  153.087373]  ? _raw_spin_unlock_irq+0x23/0x40
[  153.087391]  do_group_exit+0xd3/0x2a0
[  153.087405]  __x64_sys_exit_group+0x3e/0x50
[  153.087419]  x64_sys_call+0x18c5/0x18d0
[  153.087434]  do_syscall_64+0xbf/0x360
[  153.087449]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  153.087460] RIP: 0033:0x7f8ad0723b19
[  153.087468] Code: Unable to access opcode bytes at 0x7f8ad0723aef.
[  153.087474] RSP: 002b:00007ffecfc1b818 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[  153.087485] RAX: ffffffffffffffda RBX: 000000000000001e RCX: 00007f8ad0723b19
[  153.087492] RDX: 00007f8ad06d672b RSI: ffffffffffffffbc RDI: 0000000000000000
[  153.087499] RBP: 0000000000000000 R08: 0000001b2cf29ff4 R09: 0000000000000000
[  153.087506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  153.087512] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffecfc1b900
[  153.087527]  </TASK>
[  153.087531] kmemleak: Object (percpu) 0x607f1a639880 (size 8):
[  153.087538] kmemleak:   comm "syz-executor.1", pid 3982, jiffies 4294819780
[  153.087544] kmemleak:   min_count = 1
[  153.087548] kmemleak:   count = 0
[  153.087552] kmemleak:   flags = 0x21
[  153.087555] kmemleak:   checksum = 0
[  153.087559] kmemleak:   backtrace:
[  153.087562]  pcpu_alloc_noprof+0x87a/0x1170
[  153.087577]  alloc_vfsmnt+0x135/0x6e0
[  153.087591]  vfs_create_mount.part.0+0x40/0x440
[  153.087605]  path_mount+0x1637/0x1dd0
[  153.087616]  __x64_sys_mount+0x27b/0x300
[  153.087627]  do_syscall_64+0xbf/0x360
[  153.087635]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
18:14:38 executing program 1:
capget(&(0x7f0000000280)={0x19980330}, &(0x7f0000000040)={0xfffffffe, 0x3ff, 0x9, 0x6, 0x0, 0x40})
capset(&(0x7f0000000200)={0x20080522, 0xffffffffffffffff}, &(0x7f0000000240)={0x10001, 0xb7fe9e8, 0x8000, 0x0, 0x80, 0x1f})
syz_mount_image$tmpfs(&(0x7f00000001c0), &(0x7f0000000180)='./file0\x00', 0x4783, 0x0, 0x0, 0x1, &(0x7f0000001980)=ANY=[])
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, <r1=>0x0}, &(0x7f0000000040)=0x5)
setuid(r1)
r2 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0)
r3 = dup(r2)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, 0x12, r3, 0x0)
mknodat$loop(r3, &(0x7f0000000440)='./file0\x00', 0x1000, 0x1)
syz_mount_image$nfs4(&(0x7f0000000000), &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000380)=[{&(0x7f0000000300)="d00845f9281a2586f084c19bfa384fe3ebc6a7c1b192d6336c68f1d88498c61713bc205f8742ec26cc15f7469d1090d87bd042c041d8ab2f2e3fc82590fc10d851692a6b84e39dc0dc897d7822f9bb137a9ce592559f8642996a39910f986388740fcce3929b515d44d242743cfbad7bdd7a59cb891d3e63f2341e1f", 0x7c, 0x7fff}], 0x2, &(0x7f00000003c0)={[{'tmpfs\x00'}, {'^\x9b-\\{'}, {'\']@+'}, {')@'}, {'9p\x00'}, {',$]!$$'}], [{@fowner_eq={'fowner', 0x3d, r1}}, {@smackfsfloor={'smackfsfloor', 0x3d, '!#'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '9p\x00'}}]})
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=uniy,\x00'])

18:14:38 executing program 2:
r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x1, 0x0)
r1 = dup(r0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, 0x12, r1, 0x0)
r2 = openat$bsg(0xffffffffffffff9c, 0xfffffffffffffffe, 0x511000, 0x0)
io_setup(0x9, &(0x7f00000000c0)=<r3=>0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet6_int(r4, 0x29, 0x46, 0x0, 0x0)
connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x1}, 0x1c)
connect$inet6(r1, &(0x7f0000000340)={0xa, 0x4e21, 0x80000001, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x9}, 0x1c)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff976c, 0x2, @perf_config_ext={0x25, 0x8e}, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
io_setup(0x1, &(0x7f0000000040)=<r5=>0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
io_submit(r5, 0x1, &(0x7f0000000280)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xffff, r6, 0x0}])
setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000000c0), 0x4)
io_submit(r3, 0x2, &(0x7f0000000300)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0xfff8, r4, &(0x7f0000000100)="176fd84df81ecbb41ccbe9dc7557bd427883bb5c2b60b831855384123a58ccf8326380914433f783810dd0184d63f66a44b01a041db21efaadd019743e40ab901383cd8ef61eda74fbda5672b4fe681286b7da87eb28e2b267072cb0215ebfd35af56eb00f57f7622b8a120684adefe4196482", 0x73, 0x6, 0x0, 0x1, r1}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3, 0x8001, r0, &(0x7f00000001c0)="6196b017e0a42a26bd1c4ae1ed1d8721416b2491a17b762bec0203068579adb1285dff2ff3b830e059b0124b94fc944b4f4dda886b2e8973e0d14331f942beef24b18569d6445e1be0f2f78f32ab117589b3d0e5f6d402979c2d2947a508d4cdaea781b80089e1e6f3c0e685232a1cbbb9ded41a248be7efce29681eed976001e9ff1e9bd582f0a116b80e0b5f1a61049a0121e73cae5f8e20aec713d1fc44b26420e87700607bbdb3b84db6eea5c362d99c5db747b103a716a12843ffa745ab93b7425a249650be431e58c19177e563d13bed", 0xd3, 0x7, 0x0, 0x3, r2}])
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000000)={0x0, <r8=>0x0}, &(0x7f0000000040)=0x5)
setuid(r8)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x2009044, &(0x7f0000000640)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB="2c844f77ae769b", @ANYRESHEX=r2, @ANYBLOB="2c616e616d653d7d2360292f172c64666c747569643d", @ANYRESHEX=0xee01, @ANYBLOB=',version=9p2000.L,dfltgid=', @ANYRESHEX=0xee01, @ANYBLOB="2c666fc001b8ba3d", @ANYRESDEC=r8, @ANYBLOB=',fsmagic=0x0000000000000003,hash,permit_directio,defcontext=staff_u,dont_measure,subj_user=ext4\x00,\x00'])

[  153.184394] kmemleak: Found object by alias at 0x607f1a638b1c
[  153.184422] CPU: 1 UID: 0 PID: 3980 Comm: syz-executor.0 Tainted: G        W           6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) 
[  153.184461] Tainted: [W]=WARN
[  153.184467] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  153.184479] Call Trace:
[  153.184487]  <TASK>
[  153.184495]  dump_stack_lvl+0xca/0x120
[  153.184533]  __lookup_object+0x94/0xb0
[  153.184562]  delete_object_full+0x27/0x70
[  153.184591]  free_percpu+0x30/0x1160
[  153.184620]  ? arch_uprobe_clear_state+0x16/0x140
[  153.184656]  futex_hash_free+0x38/0xc0
[  153.184680]  mmput+0x2d3/0x390
[  153.184714]  do_exit+0x79d/0x2970
[  153.184738]  ? signal_wake_up_state+0x85/0x120
[  153.184766]  ? zap_other_threads+0x2b9/0x3a0
[  153.184795]  ? __pfx_do_exit+0x10/0x10
[  153.184818]  ? do_group_exit+0x1c3/0x2a0
[  153.184843]  ? lock_release+0xc8/0x290
[  153.184873]  do_group_exit+0xd3/0x2a0
[  153.184900]  __x64_sys_exit_group+0x3e/0x50
[  153.184926]  x64_sys_call+0x18c5/0x18d0
[  153.184953]  do_syscall_64+0xbf/0x360
[  153.184974]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  153.184994] RIP: 0033:0x7fdc028e5b19
[  153.185009] Code: Unable to access opcode bytes at 0x7fdc028e5aef.
[  153.185019] RSP: 002b:00007ffcc878bad8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[  153.185038] RAX: ffffffffffffffda RBX: 000000000000001e RCX: 00007fdc028e5b19
[  153.185052] RDX: 00007fdc0289872b RSI: ffffffffffffffbc RDI: 0000000000000000
[  153.185065] RBP: 0000000000000000 R08: 0000001b2d3225e0 R09: 0000000000000000
[  153.185077] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  153.185089] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffcc878bbc0
[  153.185117]  </TASK>
[  153.185124] kmemleak: Object (percpu) 0x607f1a638b18 (size 8):
[  153.185136] kmemleak:   comm "syz-executor.6", pid 3993, jiffies 4294819869
[  153.185148] kmemleak:   min_count = 1
[  153.185155] kmemleak:   count = 0
[  153.185162] kmemleak:   flags = 0x21
[  153.185169] kmemleak:   checksum = 0
[  153.185188] kmemleak:   backtrace:
[  153.185193]  pcpu_alloc_noprof+0x87a/0x1170
[  153.185221]  alloc_vfsmnt+0x135/0x6e0
[  153.185245]  clone_mnt+0x6c/0xb70
[  153.185271]  copy_tree+0x105/0xaf0
[  153.185288]  copy_mnt_ns+0x1ab/0xab0
[  153.185307]  create_new_namespaces+0xd6/0xab0
[  153.185337]  copy_namespaces+0x45c/0x580
[  153.185364]  copy_process+0x2649/0x73c0
[  153.185382]  kernel_clone+0xea/0x7f0
[  153.185400]  __do_sys_clone3+0x1f5/0x280
[  153.185419]  do_syscall_64+0xbf/0x360
[  153.185434]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  153.198285] kmemleak: Found object by alias at 0x607f1a639884
[  153.198307] CPU: 0 UID: 0 PID: 3995 Comm: syz-executor.1 Tainted: G        W           6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) 
[  153.198326] Tainted: [W]=WARN
[  153.198330] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  153.198337] Call Trace:
[  153.198341]  <TASK>
[  153.198346]  dump_stack_lvl+0xca/0x120
[  153.198371]  __lookup_object+0x94/0xb0
[  153.198389]  delete_object_full+0x27/0x70
[  153.198405]  free_percpu+0x30/0x1160
[  153.198420]  ? arch_uprobe_clear_state+0x16/0x140
[  153.198445]  futex_hash_free+0x38/0xc0
[  153.198459]  mmput+0x2d3/0x390
[  153.198477]  do_exit+0x79d/0x2970
[  153.198491]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  153.198511]  ? zap_other_threads+0x2b9/0x3a0
[  153.198529]  ? __pfx_do_exit+0x10/0x10
[  153.198541]  ? do_group_exit+0x1c3/0x2a0
[  153.198555]  ? _raw_spin_unlock_irq+0x23/0x40
[  153.198572]  do_group_exit+0xd3/0x2a0
[  153.198587]  __x64_sys_exit_group+0x3e/0x50
[  153.198600]  x64_sys_call+0x18c5/0x18d0
[  153.198616]  do_syscall_64+0xbf/0x360
[  153.198628]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  153.198639] RIP: 0033:0x7f8ad0723b19
[  153.198648] Code: Unable to access opcode bytes at 0x7f8ad0723aef.
[  153.198653] RSP: 002b:00007ffecfc1b818 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[  153.198664] RAX: ffffffffffffffda RBX: 000000000000001e RCX: 00007f8ad0723b19
[  153.198672] RDX: 00007f8ad06d672b RSI: ffffffffffffffbc RDI: 0000000000000000
[  153.198679] RBP: 0000000000000000 R08: 0000001b2cf29cc0 R09: 0000000000000000
[  153.198686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  153.198692] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffecfc1b900
[  153.198707]  </TASK>
[  153.198711] kmemleak: Object (percpu) 0x607f1a639880 (size 8):
[  153.198718] kmemleak:   comm "syz-executor.5", pid 3992, jiffies 4294819849
[  153.198725] kmemleak:   min_count = 1
[  153.198729] kmemleak:   count = 0
[  153.198732] kmemleak:   flags = 0x21
[  153.198736] kmemleak:   checksum = 0
[  153.198739] kmemleak:   backtrace:
[  153.198742]  pcpu_alloc_noprof+0x87a/0x1170
[  153.198757]  percpu_ref_init+0x37/0x400
[  153.198774]  ioctx_alloc+0x27f/0x1e10
[  153.198787]  __x64_sys_io_setup+0xc8/0x1f0
[  153.198798]  do_syscall_64+0xbf/0x360
[  153.198806]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
18:14:38 executing program 1:
capget(&(0x7f0000000280)={0x19980330}, &(0x7f0000000040)={0xfffffffe, 0x3ff, 0x9, 0x6, 0x0, 0x40})
capset(&(0x7f0000000200)={0x20080522, 0xffffffffffffffff}, &(0x7f0000000240)={0x10001, 0xb7fe9e8, 0x8000, 0x0, 0x80, 0x1f})
syz_mount_image$tmpfs(&(0x7f00000001c0), &(0x7f0000000180)='./file0\x00', 0x4783, 0x0, 0x0, 0x1, &(0x7f0000001980)=ANY=[])
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, <r1=>0x0}, &(0x7f0000000040)=0x5)
setuid(r1)
r2 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0)
r3 = dup(r2)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, 0x12, r3, 0x0)
mknodat$loop(r3, &(0x7f0000000440)='./file0\x00', 0x1000, 0x1)
syz_mount_image$nfs4(&(0x7f0000000000), &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000380)=[{&(0x7f0000000300)="d00845f9281a2586f084c19bfa384fe3ebc6a7c1b192d6336c68f1d88498c61713bc205f8742ec26cc15f7469d1090d87bd042c041d8ab2f2e3fc82590fc10d851692a6b84e39dc0dc897d7822f9bb137a9ce592559f8642996a39910f986388740fcce3929b515d44d242743cfbad7bdd7a59cb891d3e63f2341e1f", 0x7c, 0x7fff}], 0x2, &(0x7f00000003c0)={[{'tmpfs\x00'}, {'^\x9b-\\{'}, {'\']@+'}, {')@'}, {'9p\x00'}, {',$]!$$'}], [{@fowner_eq={'fowner', 0x3d, r1}}, {@smackfsfloor={'smackfsfloor', 0x3d, '!#'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '9p\x00'}}]})

18:14:38 executing program 3:
r0 = fsopen(&(0x7f0000000000)='iso9660\x00', 0x1)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='cgroup\x00')
fsmount(r1, 0x0, 0x9)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000002c0)='(.}(,#}\x00', &(0x7f0000000040)='\xc8\xac#\x90\xfa\x06HQ#\xe6ed\"t\xba\xc1\xe4F\xb2\xfd\x84B:.\xa8S\xc2\x1c\xf7;G\x8fih\xafd\xbc\xbf\xf9<\xf8\xd9\xf9\x9a\x89u\xb5\x80p\xb8\xf0\xbe\xfd1\xc3%\x99S\xa73\xbc\xa1q\xae;\x0f\x02\x10\x8fqy\xfcR\xace\xe1\xadv\xb4\r\xff9\x82\xe5\xbb\xf0&\x84\x12hP\xa4\xc6\xfc\x1b\x18\xdb\xd3\xe6\xa6\xd2\xf9\x80O\x8a\xc2\b\xb4ka\xf5\xcbAW9|\xeb\x9b\xf3\x95\xc6\x01\x95sK\x95\xee\x7f4\x94#I\xbbf\xd0f$\xa4\xcd\xd69XIm\x8cR,L\x89\xb1\x7f\x8c\bo\xbd\xb4k9\xbd\xbf\xf1Y\xc9\xa7&t\x92\x97\x10\x8a0<=\xees\x01$\xa98v\xbc\'\xf4V*~\xf8\x99\x13\x826\x86\x1d9\x1b\xc1\xac\xc3\xe0\xd9\xd0\x98i\xa7\xc3\xd9-d1\x1d\x8d\xebJ\xe8b\xf5\x1b\xbb\x9f\xc26\xa5\x8by\x11\x9d\x12\xcd\xb5\n\xac\xedD:\xab`\x95\x05\xe4\x91T\xf4j\xa8\xa5hs\xf6\x04\xaa|\xb4\nE\x96i\xdf\x1f\xe9\xa6\xeaui\xf5\xc7$U\xa8-q\xfd\xce\xc1\xa9\xcb\xf9\xd4\xe0\xd3~;4i#\xb5q/5e4\xcf\xd1\xb4}k\xd3\x067l\xc8\x1d`\xb4\xf4\xeb\xc3e\x12A\xe4\xbeU[\xa8h\x9c\x12\xdf\x12P\x18\x1b\xfafpi\xb8\\M|/\xa7\xc5\t\x14\xcc\xc5\xb7\xa5H\xf1!\x89\xb3s\xd7\xa6\x97\xf2\x8d%\xca\"\xa3zV\ao9\xb4\xa7Ki\xe2i\xcd\xd0\xc0\xda_xE\x95%\xf3X\xc7\xb3\x11\xb5YW\xe8\xef\n\xabX\xaa*\xdd\xb5\x9e#\x14<q9\xd1\xa02\xb3', 0x0)
r2 = accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x80800)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000240)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r3=>r0, @ANYBLOB="3b4f0006ef15d6002e2f663000000000"])
dup2(r2, r3)

[  153.283583] kmemleak: Cannot insert 0x607f1a638b1c into the object search tree (overlaps existing)
[  153.283603] CPU: 0 UID: 0 PID: 3998 Comm: syz-executor.1 Tainted: G        W           6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) 
[  153.283622] Tainted: [W]=WARN
[  153.283626] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  153.283633] Call Trace:
[  153.283637]  <TASK>
[  153.283643]  dump_stack_lvl+0xca/0x120
[  153.283666]  __link_object+0x190/0x210
[  153.283684]  __create_object+0x48/0x80
[  153.283702]  pcpu_alloc_noprof+0x87a/0x1170
[  153.283725]  __percpu_init_rwsem+0x2d/0x160
[  153.283743]  ? security_sb_alloc+0x75/0x140
[  153.283760]  alloc_super+0x29e/0xb80
[  153.283775]  sget_fc+0xfe/0xb80
[  153.283786]  ? __pfx_set_anon_super_fc+0x10/0x10
[  153.283805]  ? __pfx_shmem_fill_super+0x10/0x10
[  153.283821]  get_tree_nodev+0x28/0x190
[  153.283834]  vfs_get_tree+0x93/0x340
[  153.283851]  path_mount+0x132d/0x1dd0
[  153.283865]  ? trace_irq_enable.constprop.0+0xc2/0x100
[  153.283885]  ? __pfx_path_mount+0x10/0x10
[  153.283898]  ? kmem_cache_free+0x2a1/0x540
[  153.283909]  ? putname.part.0+0x11b/0x160
[  153.283926]  ? getname_flags.part.0+0x1c6/0x540
[  153.283944]  ? putname.part.0+0x11b/0x160
[  153.283961]  __x64_sys_mount+0x27b/0x300
[  153.283975]  ? __pfx___x64_sys_mount+0x10/0x10
[  153.283989]  ? trace_irq_enable.constprop.0+0xc2/0x100
[  153.284004]  do_syscall_64+0xbf/0x360
[  153.284015]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  153.284028] RIP: 0033:0x7f8ad072504a
[  153.284037] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  153.284048] RSP: 002b:00007f8acdc98fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5
[  153.284060] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f8ad072504a
[  153.284068] RDX: 00000000200001c0 RSI: 0000000020000180 RDI: 0000000000000000
[  153.284075] RBP: 00007f8acdc99040 R08: 00007f8acdc99040 R09: 00000000200001c0
[  153.284082] R10: 0000000000000001 R11: 0000000000000206 R12: 00000000200001c0
[  153.284089] R13: 0000000020000180 R14: 00007f8acdc99000 R15: 0000000020001980
[  153.284105]  </TASK>
[  153.284777] kmemleak: Kernel memory leak detector disabled
[  153.284781] kmemleak: Object (percpu) 0x607f1a638b18 (size 8):
[  153.284788] kmemleak:   comm "syz-executor.6", pid 3993, jiffies 4294819869
[  153.284796] kmemleak:   min_count = 1
[  153.284799] kmemleak:   count = 0
[  153.284803] kmemleak:   flags = 0x21
[  153.284807] kmemleak:   checksum = 0
[  153.284810] kmemleak:   backtrace:
[  153.284814]  pcpu_alloc_noprof+0x87a/0x1170
[  153.284829]  alloc_vfsmnt+0x135/0x6e0
[  153.284843]  clone_mnt+0x6c/0xb70
[  153.284857]  copy_tree+0x105/0xaf0
[  153.284867]  copy_mnt_ns+0x1ab/0xab0
[  153.284877]  create_new_namespaces+0xd6/0xab0
[  153.284894]  copy_namespaces+0x45c/0x580
[  153.284909]  copy_process+0x2649/0x73c0
[  153.284920]  kernel_clone+0xea/0x7f0
[  153.284930]  __do_sys_clone3+0x1f5/0x280
[  153.284940]  do_syscall_64+0xbf/0x360
[  153.284949]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  153.322241] kmemleak: Automatic memory scanning thread ended
18:14:38 executing program 0:
r0 = getpgid(0xffffffffffffffff)
ptrace(0x4208, r0)
prlimit64(r0, 0xc, &(0x7f0000000000)={0x0, 0x1}, &(0x7f0000000040))
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)=<r1=>0x0)
ptrace(0x11, r1)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2080, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000100), 0x6e, &(0x7f0000000440)=[{&(0x7f0000000180)=""/109, 0x6d}, {&(0x7f0000000200)=""/176, 0xb0}, {&(0x7f00000002c0)=""/150, 0x96}, {&(0x7f0000000380)=""/136, 0x88}], 0x4, &(0x7f0000000480)=[@cred={{0x1c, 0x1, 0x2, {<r3=>0x0}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, <r4=>0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {<r5=>0x0}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, <r6=>0x0}}}, @cred={{0x1c, 0x1, 0x2, {<r7=>0x0}}}, @cred={{0x1c, 0x1, 0x2, {0x0, <r8=>0x0}}}], 0xc0}, 0x20)
prlimit64(r7, 0x5, &(0x7f0000000580)={0x1ff, 0x7fffffff}, &(0x7f00000005c0))
prlimit64(r0, 0x1, &(0x7f0000000600)={0x0, 0xe0000000000000}, &(0x7f0000000640))
ptrace(0x4207, 0xffffffffffffffff)
r9 = inotify_init1(0x40000)
wait4(r5, &(0x7f0000000680), 0x2, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r9, 0x400c6615, &(0x7f00000006c0)={0x0, @adiantum})
ioctl$KDMKTONE(r2, 0x4b30, 0x2)
r10 = shmget$private(0x0, 0x3000, 0x78000000, &(0x7f0000ffd000/0x3000)=nil)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000700)={0x0, <r11=>0x0}, &(0x7f0000000740)=0xc)
r12 = gettid()
shmctl$IPC_SET(r10, 0x1, &(0x7f0000000780)={{0x2, r11, r6, r8, r6, 0x4, 0x5}, 0x1, 0x6, 0x7, 0x5, r3, r12, 0x400})

18:14:38 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000500000000f000000000000000200000006000000000008000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000008000000018000000c20500002b82", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000039c043f6970341999833e8e90d2470c4010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000dbf4655fdcf4655fdcf4655f00000000000004008000000000000800050000000af3010004", 0x2d, 0x4080}, {&(0x7f0000013000)="504d4d00504d4dff", 0x8, 0x40000}, {0x0, 0x0, 0x80000}], 0x0, &(0x7f0000013b00))
lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0)=@v1={0x1000000, [{0x9, 0x1}]}, 0xc, 0x3)

18:14:38 executing program 0:
r0 = getpgid(0xffffffffffffffff)
ptrace(0x4208, r0)
prlimit64(r0, 0xc, &(0x7f0000000000)={0x0, 0x1}, &(0x7f0000000040))
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)=<r1=>0x0)
ptrace(0x11, r1)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2080, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000100), 0x6e, &(0x7f0000000440)=[{&(0x7f0000000180)=""/109, 0x6d}, {&(0x7f0000000200)=""/176, 0xb0}, {&(0x7f00000002c0)=""/150, 0x96}, {&(0x7f0000000380)=""/136, 0x88}], 0x4, &(0x7f0000000480)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, <r3=>0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {<r4=>0x0}}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {<r5=>0x0}}}, @cred={{0x1c}}], 0xc0}, 0x20)
prlimit64(r5, 0x5, &(0x7f0000000580)={0x1ff, 0x7fffffff}, &(0x7f00000005c0))
prlimit64(r0, 0x1, &(0x7f0000000600)={0x0, 0xe0000000000000}, &(0x7f0000000640))
ptrace(0x4207, 0xffffffffffffffff)
r6 = inotify_init1(0x40000)
wait4(r4, &(0x7f0000000680), 0x2, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r6, 0x400c6615, &(0x7f00000006c0)={0x0, @adiantum})
ioctl$KDMKTONE(r2, 0x4b30, 0x2)
shmget$private(0x0, 0x3000, 0x78000000, &(0x7f0000ffd000/0x3000)=nil)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000700), &(0x7f0000000740)=0xc)
gettid()

18:14:38 executing program 3:
setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)="d9543038a1b282d50a0127a3fe787904192e30be12e051656ca28132eba1a51d12f95180d319eef8bb32a4a5275ed0721e7666ca07423b043d77f268a4db33451cf00ae47cb045f9bc4e0385ab12e07ac5", 0x51)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'})
r1 = syz_open_procfs(0x0, &(0x7f0000000980)='fdinfo/3\x00')
r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x12, r2, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'veth0_to_batadv\x00'})
pread64(r1, &(0x7f0000000040)=""/156, 0x9c, 0x0)

[  153.426099] loop7: detected capacity change from 0 to 2048
[  153.490654] EXT4-fs error (device loop7): ext4_ext_check_inode:523: inode #2: comm syz-executor.7: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  153.502506] EXT4-fs (loop7): get root inode failed
[  153.503263] EXT4-fs (loop7): mount failed
[  153.527873] loop7: detected capacity change from 0 to 2048
[  153.537495] EXT4-fs error (device loop7): ext4_ext_check_inode:523: inode #2: comm syz-executor.7: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  153.542747] EXT4-fs (loop7): get root inode failed
[  153.543520] EXT4-fs (loop7): mount failed
[  163.594640] unregister_netdevice: waiting for vcan0 to become free. Usage count = 0

VM DIAGNOSIS:
18:14:48  Registers:
info registers vcpu 0
RAX=dffffc0000000000 RBX=0000000000000280 RCX=0000000000162450 RDX=1ffff11003c5b700
RSI=0000000000000004 RDI=1ffff11003c5b71b RBP=ffff88801e2db800 RSP=ffff88806ce08d50
R8 =0000000000000000 R9 =0000000000000280 R10=0000000000000f58 R11=ffff88801e2db540
R12=ffff88801e2db8c8 R13=ffff88801e2db8dc R14=ffff88801e2db800 R15=0000000000000004
RIP=ffffffff814d1b29 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e55dd000 00000000 00000000
LDT=0000 fffffe1600000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055f3d48e0618 CR3=000000000f07f000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000
XMM02=00000000000000000000000000000000 XMM03=00000000000000003f73c8abc8de83ec
XMM04=00000000000000003fc718f3a7b66f3d XMM05=000000c001aa4b00000000c001aa4700
XMM06=00000000000000003fd3333333333333 XMM07=00000000000000003fd0364c0f427331
XMM08=00000000000000003fd4ae8f61d801b0 XMM09=00000000000000003f97b5c2ea4ce7d0
XMM10=00000000000000003fc999999999999a XMM11=000000c001cd6dc0000000c001cd6b80
XMM12=000000c001cd7640000000c001cd7180 XMM13=000000c001cd7b00000000c001cd7900
XMM14=000000c001df8540000000c001cd7bc0 XMM15=000000c000ccff20000000c001df8880
info registers vcpu 1
RAX=00000000000ba717 RBX=0000000000000001 RCX=ffffffff84bb95f7 RDX=0000000000000000
RSI=0000000000000000 RDI=ffffffff814c8304 RBP=dffffc0000000000 RSP=ffff888009717e58
R8 =0000000000000001 R9 =ffffed100d9e630a R10=ffff88806cf31853 R11=0000000000000001
R12=ffffffff8643ac50 R13=1ffff110012e2fd2 R14=0000000000000000 R15=0000000000000000
RIP=ffffffff84bb831e RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e56dd000 00000000 00000000
LDT=0000 fffffe5300000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fd37e4e1540 CR3=000000000c5e8000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000
XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000
XMM04=ffbd4ebe4c2ff636000000000018bed8 XMM05=d3fdd5f48436fbd700000000000aead0
XMM06=fab72b4cbb3a267300000000000ae988 XMM07=a1fcdcf819d7e1e500000000000ae728
XMM08=44495f474f4c5359530069253d595449 XMM09=00000000000000000000000000000000
XMM10=20000000000000002000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000