Warning: Permanently added '[localhost]:6278' (ECDSA) to the list of known hosts. 2026/01/15 16:57:56 fuzzer started 2026/01/15 16:57:56 dialing manager at localhost:35245 syzkaller login: [ 44.556101] cgroup: Unknown subsys name 'net' [ 44.651270] cgroup: Unknown subsys name 'cpuset' [ 44.676648] cgroup: Unknown subsys name 'rlimit' 2026/01/15 16:58:08 syscalls: 202 2026/01/15 16:58:08 code coverage: enabled 2026/01/15 16:58:08 comparison tracing: enabled 2026/01/15 16:58:08 extra coverage: enabled 2026/01/15 16:58:08 setuid sandbox: enabled 2026/01/15 16:58:08 namespace sandbox: enabled 2026/01/15 16:58:08 Android sandbox: enabled 2026/01/15 16:58:08 fault injection: enabled 2026/01/15 16:58:08 leak checking: enabled 2026/01/15 16:58:08 net packet injection: enabled 2026/01/15 16:58:08 net device setup: enabled 2026/01/15 16:58:08 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2026/01/15 16:58:08 devlink PCI setup: PCI device 0000:00:10.0 is not available 2026/01/15 16:58:08 USB emulation: enabled 2026/01/15 16:58:08 hci packet injection: enabled 2026/01/15 16:58:08 wifi device emulation: enabled 2026/01/15 16:58:08 802.15.4 emulation: enabled 2026/01/15 16:58:08 fetching corpus: 0, signal 0/0 (executing program) 2026/01/15 16:58:09 starting 8 fuzzer processes 16:58:09 executing program 0: syz_io_uring_setup(0x5aea, &(0x7f0000000000)={0x0, 0x2, 0x8, 0x1, 0x39c}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) syz_io_uring_submit(0x0, r1, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x6, &(0x7f0000000140)={r2, r3+60000000}, 0x1, 0x1, 0x1}, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x0, 0x30, r4, 0x9c6ca000) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r4, 0x40089413, &(0x7f00000001c0)=0xb24c) pselect6(0x40, &(0x7f0000000200)={0xffffffff, 0x8, 0x3ff, 0x6, 0x10001, 0xfffffffffffffff7, 0x4000000040000000, 0x3}, &(0x7f0000000240)={0x20000000000, 0x3dd, 0x7ff, 0x1f, 0xfffffffffffffffb, 0x2, 0xa9c, 0x2}, &(0x7f0000000280)={0x9, 0x5, 0x7, 0x5, 0x3b4, 0xfffffffffffff350, 0xfffffffffffffffe, 0x100000001}, &(0x7f00000002c0)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000300)={[0x80]}, 0x8}) r5 = syz_io_uring_setup(0x7431, &(0x7f0000000380)={0x0, 0x8043, 0x53ae390bf5aa1ad2, 0x0, 0x324}, &(0x7f0000ff4000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000400)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r0, r7, &(0x7f00000004c0)=@IORING_OP_OPENAT={0x12, 0x5, 0x0, r4, 0x0, &(0x7f0000000480)='./file0\x00', 0x20, 0x800, 0x12345}, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000500)={@loopback, @multicast2}, &(0x7f0000000540)=0xc) clock_gettime(0x0, &(0x7f00000005c0)={0x0, 0x0}) semtimedop(0x0, &(0x7f0000000580)=[{0x0, 0x81, 0x800}, {0x1, 0x6, 0x800}, {0x4, 0x4, 0x1000}], 0x3, &(0x7f0000000600)={r8, r9+60000000}) getsockname(0xffffffffffffffff, &(0x7f0000000640)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, &(0x7f00000006c0)=0x80) fsetxattr$trusted_overlay_origin(r4, &(0x7f0000000700), &(0x7f0000000740), 0x2, 0x1) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000780)='./file0\x00', 0x1000007) r11 = syz_io_uring_complete(r6) read$snapshot(r11, &(0x7f00000007c0)=""/203, 0xcb) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r5, 0xf501, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r10, 0x6, 0x13, &(0x7f00000008c0), 0x4) prctl$PR_SET_FPEMU(0xa, 0x1) 16:58:09 executing program 4: fremovexattr(0xffffffffffffffff, &(0x7f0000000000)=@random={'osx.', '%@.\x00'}) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000040)=0x93af) r0 = perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x80, 0x1, 0x5, 0x2, 0x5, 0x0, 0x5, 0x100, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x5, 0x2, @perf_config_ext={0x8, 0x7}, 0x138, 0x8001, 0xa9, 0x7, 0x3ff, 0x1ff, 0x5, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x4) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r0, 0xf505, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$HIDIOCAPPLICATION(r1, 0x4802, 0x2) r2 = perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0xff, 0x0, 0xd1, 0x0, 0x0, 0x0, 0x401, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x2, @perf_config_ext={0x69c, 0x1}, 0x2154, 0x2, 0x3, 0x1, 0x99, 0xffff, 0x1, 0x0, 0x8000, 0x0, 0x3}, 0x0, 0x1, r1, 0x1) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0) r3 = signalfd(r2, &(0x7f00000001c0)={[0x5df5a116]}, 0x8) ioctl$PERF_EVENT_IOC_REFRESH(r3, 0x2402, 0xe1) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000200)) socketpair(0x2b, 0x800, 0xa1, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000000280)="d90d96008de1ffe4f1d2e4b262e7bd9d", 0x10) socketpair(0x15, 0x800, 0x80000001, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r5) r6 = perf_event_open$cgroup(&(0x7f0000000340)={0x0, 0x80, 0x4, 0x89, 0x9d, 0x40, 0x0, 0x2, 0x10, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfff, 0x0, @perf_bp={&(0x7f0000000300), 0x1}, 0x42402, 0x4, 0x6, 0x6, 0x5, 0x1, 0x55, 0x0, 0x21, 0x0, 0x3}, r3, 0x0, 0xffffffffffffffff, 0xd) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x2400, 0x20) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0/file0\x00'}) socket$nl_sock_diag(0x10, 0x3, 0x4) 16:58:09 executing program 1: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xb0, 0xc, 0x4, 0x3, 0x70bd27, 0x25dfdbff, {0xa, 0x0, 0x3}, [@typed={0x99, 0x54, 0x0, 0x0, @binary="09ad6fd39aebcb9f04e7b9e193f80ce86b8d01b15239b3a8fe01f7668c5ae831f3ee64c4423fd56ec16c97cfe4e8edd4d9564e64648ba0223aaace28c4111c0b7bbfc64bde7477038e9e92238dc13ca4899717aa1623d6530ca35983bf7c8aa7c38ba9f2fc9312115f9e4628d433f12d1a3cd376df8110df07e77463f3a2b39094c38fad5fee6edcdd347639fe6df55566dea6a9df"}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4000800}, 0x44) r0 = accept4(0xffffffffffffffff, &(0x7f0000000180)=@sco, &(0x7f0000000200)=0x80, 0x0) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x10001}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x14}, 0x10) r1 = syz_io_uring_complete(0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000340)=@gcm_128={{0x303}, "e16c03e4c960e7dd", "06b7f7ab4488cc76cb38a01ac282329c", "9b97dd55", "dfa407db231e0d3b"}, 0x28) r2 = accept(r0, &(0x7f0000000380)=@isdn, &(0x7f0000000400)=0x80) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000480), r1) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x24, r3, 0x10, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x80091) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r1, 0x80083313, &(0x7f0000000580)) syz_io_uring_submit(0x0, 0x0, &(0x7f00000005c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x10003, 0x1, {0x1}}, 0x600) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000600)={{0x1, 0x1, 0x18, r2, {0xee01}}, './file0\x00'}) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000000640)="0bc1a574bc0e0f151cf3ceb7c89e6b0b", 0x10) sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f00000008c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000880)={&(0x7f00000006c0)={0x1ac, 0x12, 0x100, 0x70bd2a, 0x25dfdbfb, {0x21, 0x3, 0x1, 0xff, {0x4e20, 0x4e22, [0x1fb4, 0x759, 0x9, 0x200], [0x7, 0xffffffc1, 0x3, 0x4], 0x0, [0x8, 0x1]}, 0x3, 0xba0}, [@INET_DIAG_REQ_BYTECODE={0x40, 0x1, "508e09d69f20044a59448cbb598c337357ce34d3ecba3f6ef57d37f19776bdd453fc9093a55016ce841766a81f6f9775d54de6240da7d8c405ff8908"}, @INET_DIAG_REQ_BYTECODE={0x9c, 0x1, "2359aa311b74c8f32a26ac2479a79793b1d2c93628eab673f012e02f25101f320a1f9648e10aa1b4a44daa597ef69ef6f2105ead2b901bfbb19576426086ffc5627290683d107af4d666f66fc40b8cb8cfd22fd89039625d45aff57d635bfb371b9406f2986565193159546ba942e5a367b5afa8d74b7e18ff811fad83d590892c23b27d887a9610f7c543d7462258db04dfc96ffe2bd720"}, @INET_DIAG_REQ_BYTECODE={0x42, 0x1, "5360411156df3c68b88ae69b8a1eb43c4061df25614be83d614f74d4e0932814028f05127546fb0e14c7f6f02f776a7f698897ed76fd037659436df41a05"}, @INET_DIAG_REQ_BYTECODE={0x40, 0x1, "018b8e34cd59f2fd9b556071f88d544f07c69178ad9c91a91c8b837bc60775ff97c57137d06b5b7e7d980e28e1bf63106dc770232d0d6d3448417361"}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40004) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r5) fremovexattr(0xffffffffffffffff, &(0x7f0000000900)=@known='user.incfs.metadata\x00') ioctl$F2FS_IOC_RESIZE_FS(0xffffffffffffffff, 0x4008f510, &(0x7f0000000940)=0x80000001) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000980)={'wg2\x00'}) fcntl$getown(0xffffffffffffffff, 0x9) syz_io_uring_submit(0x0, 0x0, &(0x7f00000009c0)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x5, 0x0, 0x0, 0x0, 0x1}, 0x4) 16:58:09 executing program 2: r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x40840, 0x0) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xee01, 0xee01}}, './file0\x00'}) r3 = dup2(r0, r0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r3) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r1, 0xf501, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000080)={0x4, 0x41, 0x1d}, &(0x7f00000000c0)='./file0\x00', 0x18, 0x0, 0x23456}, 0x6) r4 = socket$inet(0x2, 0x4, 0xb6e0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r4, 0xf505, 0x0) getsockopt$inet_mreqn(r3, 0x0, 0x7, &(0x7f0000000180)={@multicast2, @initdev, 0x0}, &(0x7f00000001c0)=0xc) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0xb4, 0x0, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x80}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xee}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}]}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x81}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}]}, 0xb4}, 0x1, 0x0, 0x0, 0x24000005}, 0x40800) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000000340)={{0x1, 0x1, 0x18, r3, {0xee01, r2}}, './file0\x00'}) setsockopt$inet_tcp_buf(r6, 0x6, 0x21, &(0x7f0000000380)="2a35c6b2b4e31b346262c7bd54df746be683669cac9292056fb41cca0a14f0aabc2810d0402930c93c29fe45b5b721c031270997db4c624165db868938c5855dc2c60f4d019e262628a3abb42c9aaaacf94217f22988e07d", 0x58) ioctl$AUTOFS_IOC_SETTIMEOUT(r6, 0x80049367, &(0x7f0000000400)=0x3ff) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000440)=0x4) r7 = syz_open_dev$loop(&(0x7f0000000480), 0xae1f, 0x8002) r8 = timerfd_create(0x4, 0x80000) r9 = dup2(r7, r8) ioctl$HIDIOCSUSAGE(r9, 0x4018480c, &(0x7f00000004c0)={0x3, 0x200, 0x1, 0x0, 0x400, 0xfffffffb}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000500)={{0x1, 0x1, 0x18, r1}, './file0/file0\x00'}) 16:58:09 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LIST_PHY(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x40) sendmsg$SOCK_DESTROY(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000600)={&(0x7f0000000140)={0x48c, 0x15, 0x100, 0x70bd25, 0x25dfdbff, {0xa, 0x91}, [@INET_DIAG_REQ_BYTECODE={0xca, 0x1, "0cd9b639207bc00d4d818f0ef739eb371513327730c58ddde0985b32065d8e3bafdbc2586d6c2d8b24a2611cc8d79d4346e6758017670597be9566e533e68b8eceaf9f877fc5669a30ee4251e61559ad3fd7bd72abc02bb4d2474c8b3a7e1e333cab711b2cc1b5997e58edc267d430c95807bd9d41fd99c379d65de4db793224e299641ee58b275bf31b853b6ecd0bbfb571e491ca5a4fac46c1d626e2e7d74ad2030c120b35b069e6dda3d2808994e443b5ab1a4c5e9ed9fe09ec91ea478b01b1ba9bbdd737"}, @INET_DIAG_REQ_BYTECODE={0xee, 0x1, "a9dd60c307218e02c59f9691e88bc6d0aa8638686de7fd4cba5ca4563c5c8f0854f5417f6d1a812624d39db8547284634c22a657b1398476f6af3ebe8a948c8cb00079ed73b2f1c2fd5cf6808f04715eff2d8fc4c0bf3fa7fac298d746c8cf6811926a7488f607e15b6a6e335c1f9f7d3428ea2d36766b8674585c2a789f45c257cbf6266f28ef89987a5fa81fce25a525b0edfcf7d9e91f8377b1dc990b4aa805ca407f59f1fefc114727258a82da0a70414e8ffd934d01ded0297fc02b91398dedf939a347c088709bf2eba853d6144afaeee36a0c9ad866f9939a8ce920e7e185f3a0282eb2c7a8db"}, @INET_DIAG_REQ_BYTECODE={0x6a, 0x1, "603269aaf19ffb5bb34334192a17f5b13dd049499d3dd20f2627eef3ab42c707e64def9b18b09ddb3a3d9a4213c2f63e38d5d9f4ffea0b9ae410489bbe78a1b5f8283d177cdfc43152abdfa3bf5473f3b5944e99f9a85c7842bf3bf39e79ebfefa5115e613a4"}, @INET_DIAG_REQ_BYTECODE={0x9f, 0x1, "33b3bb6fa233f52b9f994daedaea42986f9405986575c79e2953c6d01ceabe421b6e6f70f19e3e36d7498780b43802b6490089ea42d49102ff26620f045888ac29aedc1cdf11e8020f295119e410559275f53d50059306ef5b1b496b693ed34bc8eb9fa3e10e84947672146468e467e8142610c51f197bc8e942cf3f4ed73623d9eaa4bc2aa3a72eba287e469892ad66e1d9755b66ffb92f4b9a49"}, @INET_DIAG_REQ_BYTECODE={0x83, 0x1, "96ab4b3a91fcc2b1af3c3d584d06adf087fbd12b6ff52be3015bb79a4d82e20e307e35d4f10da40cfc41683689eae004e9e9d8251020abf80cfc16d094792f78614a223e8c0d81cc28f91190f085ddacabe55e3b4095ff53956533af609af431736494dc5b141d08a1a6357bc58d8826fa8465f6db9c62139de5070b7f417e"}, @INET_DIAG_REQ_BYTECODE={0xab, 0x1, "f534b8aa7aeba4baa212b49fd1bc9297f5f0705cbf7d30f2f78c4ad58d39ebbcc204b4f0e9606cfbd817b09a0ddb496ed5a9c14fd14bdc7de89c5a445d4fe370078ee662fca5d6d8712f6b6869d4cbcb3bbb0be1f988bdc40ee0875ae96790163febf1d8cc67baae8055f1fe90ca6d179f9f08a44701bd4a6e47722b817a25a77f122149965a27af83ff295aa01b8c8920f956feb01a0d82ccc6d882c189bf24a99873a38acc53"}, @INET_DIAG_REQ_BYTECODE={0x49, 0x1, "c830c3d577b0a6d5a861ca2477ca24d1ca5e19b048daabd3a5f2f7bb22175cc8ab55a837fe20c883ad54c40aaff5a25d222e8489323d26a58c5a9e534637f87b4ae2cbf62d"}, @INET_DIAG_REQ_BYTECODE={0x19, 0x1, "08a14b1d38bc3bd0d09b4d1e38ca18531afff796b4"}, @INET_DIAG_REQ_BYTECODE={0x18, 0x1, "7ddccd96835d626628938650e031ef98ccd4023c"}]}, 0x48c}, 0x1, 0x0, 0x0, 0x8040}, 0x20048004) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r0) sendmsg$IEEE802154_LIST_PHY(r0, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14, r1, 0x4, 0x70bd2a, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x801}, 0x2000c040) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r0) sendmsg$IEEE802154_LIST_PHY(r2, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14, r3, 0x404, 0x70bd2d, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4040810}, 0x20000040) r4 = signalfd(0xffffffffffffffff, &(0x7f0000000900)={[0x401]}, 0x8) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f0000000940)={0x0, 0x80, 0xfe, 0xf7, 0x8, 0x8, 0x0, 0x0, 0x81c0, 0x8, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x0, @perf_config_ext={0x0, 0x3000000000000}, 0xc0, 0x80000000, 0x3, 0x7, 0x1, 0x9, 0x4, 0x0, 0x1ff, 0x0, 0xfff}) sendmsg$SOCK_DESTROY(r4, &(0x7f0000000c00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x7faf765b7275150f}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000a00)={0x1a4, 0x15, 0x1, 0x70bd29, 0x25dfdbfd, {0x21, 0x20}, [@INET_DIAG_REQ_BYTECODE={0xca, 0x1, "4cfe854d53fb01f6d6328bd3cff2fc13116164a425784fc2b8a3782641ebfc45dbb9bf53df97065dc40906479d2a71449f20f398c9408daf0fd45079d1bbdb13b3e05964370480028efb0f21383153796adfe2cde36e2b168065a1bb3f54f31343be958d9353ad58c8d2752458d5fc7a18ae05d4539093dc0845aaf4b72b4c777689c8a80f35c4d81d6e9acf9866f29809bb7c241e91e92ce93605a2064f966df27eaf9424ffb194c96bc079877affd6f38f9e556d5d972c295f06423dca59f9b63ea4c30247"}, @INET_DIAG_REQ_BYTECODE={0xc1, 0x1, "4db6886a6338a219944e3ed3f39cebdbf6fe60a89b2952f21815d09dd9694c24ef38025351c0e0d8d7d659fe83ce83b5c502d326e74bbc3ca3597e8ebdce2ca7dd923fc729235f9c55bec5b1d97652364a1f4c43f1fcf722ab754a504d64452739690105705256c9aaac5171c77fe8ce23f9c34817d2c7c2c539d8f8a277cfc3e995ca6eb26c2d1e92a650b1ea8c22dd5132e5a7460339ee12f51890f431647dbad9fa8dbd3f6dccb52d520c50de8df36282e5885324d96b89a82c5d2a"}]}, 0x1a4}}, 0x80) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x7fff8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000c40)=@IORING_OP_FSYNC={0x3, 0x4, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xd36) r5 = accept(r4, &(0x7f0000000c80)=@l2tp={0x2, 0x0, @dev}, &(0x7f0000000d00)=0x80) getsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000e40)={@empty, @rand_addr, 0x0}, &(0x7f0000000e80)=0xc) sendmsg$WG_CMD_GET_DEVICE(r5, &(0x7f0000000f80)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000f40)={&(0x7f0000000ec0)={0x48, 0x0, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r6}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x52a0}]}, 0x48}, 0x1, 0x0, 0x0, 0x6000040}, 0x810) getsockopt$inet_tcp_buf(r5, 0x6, 0x0, &(0x7f0000000fc0), &(0x7f0000001000)) syz_genetlink_get_family_id$ieee802154(&(0x7f0000001040), r0) ioctl$BTRFS_IOC_BALANCE(0xffffffffffffffff, 0x5000940c, 0x0) [ 56.419656] audit: type=1400 audit(1768496289.933:7): avc: denied { execmem } for pid=274 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 16:58:09 executing program 7: clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) semtimedop(0xffffffffffffffff, &(0x7f0000000000)=[{0x4, 0x1000, 0x1c00}, {0x4, 0xdb}, {0x3, 0x81, 0x800}, {0x4, 0x5}], 0x4, &(0x7f0000000080)={r0, r1+10000000}) clock_getres(0x0, &(0x7f00000000c0)) clock_getres(0x6, &(0x7f0000000100)) r2 = syz_open_dev$loop(&(0x7f0000000140), 0x9, 0x40a00) socketpair(0x26, 0x80000, 0x2, &(0x7f0000000180)={0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_SPLICE={0x1e, 0x2, 0x0, @fd=r2, 0x961, {}, 0x9, 0x8, 0x0, {0x0, 0x0, r3}}, 0x1) clock_getres(0x6, &(0x7f0000000200)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1800005, 0x8010, 0xffffffffffffffff, 0x0) r5 = syz_io_uring_complete(r4) clock_gettime(0x0, &(0x7f0000000240)) socketpair(0x1f, 0x800, 0x9, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_timeval(r6, 0x1, 0x43, &(0x7f00000002c0), &(0x7f0000000300)=0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000340)={'vcan0\x00'}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x1010, r2, 0x95fc4000) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) semtimedop(0xffffffffffffffff, &(0x7f0000000380)=[{0x4, 0xf838, 0x1000}, {0x3, 0x5, 0x800}], 0x2, &(0x7f0000000400)={r7, r8+10000000}) clock_getres(0x2, &(0x7f0000000440)) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x2400, 0x467) ioctl$SNAPSHOT_UNFREEZE(r5, 0x3302) 16:58:09 executing program 5: r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @initdev}}, &(0x7f0000000080)=0x80) getresgid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)=0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0xee01, r1}}, './file0\x00'}) ioctl$HIDIOCAPPLICATION(r2, 0x4802, 0xfc) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x5}, 0x7) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$addseals(r3, 0x409, 0x1) ioctl$BTRFS_IOC_QGROUP_CREATE(r3, 0x4010942a, &(0x7f0000000200)={0x0, 0x346}) prctl$PR_CAP_AMBIENT(0x2f, 0x3, 0x6) ioctl$HIDIOCGVERSION(0xffffffffffffffff, 0x80044801, &(0x7f0000000240)) ioctl$BTRFS_IOC_LOGICAL_INO(r3, 0xc0389424, &(0x7f00000002c0)={0xffff, 0x8, '\x00', 0x0, &(0x7f0000000280)=[0x0]}) r4 = memfd_secret(0x80000) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r4, 0x3309) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vxcan1\x00'}) r5 = accept4(r3, &(0x7f0000000340)=@sco={0x1f, @fixed}, &(0x7f00000003c0)=0x80, 0x0) ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, &(0x7f0000000400)={0x8, 0x10001, 0x4, 0x4, 0x5, [{0x0, 0x4fc, 0x683b, '\x00', 0x1801}, {0xba8, 0x7fffffff, 0x81, '\x00', 0x6}, {0x2, 0x6, 0x2, '\x00', 0x8}, {0x4, 0x80000001, 0x0, '\x00', 0x2}, {0x1, 0x0, 0x10000, '\x00', 0x1400}]}) ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f0000000580)={0x2, 0x38, '\x00', 0x1, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r6 = signalfd(r2, &(0x7f00000005c0)={[0x100000001]}, 0x8) ioctl$HIDIOCGCOLLECTIONINFO(r6, 0xc0104811, &(0x7f0000000600)={0x0, 0x7, 0xe2af, 0x80000001}) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r6, 0x8008330e, &(0x7f0000000640)) 16:58:09 executing program 6: semctl$IPC_STAT(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000000)=""/6) semctl$SETALL(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)=[0x3ff, 0x3]) semctl$SETALL(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000080)=[0x7fff, 0x20, 0x5]) r0 = semget$private(0x0, 0x2, 0x20) semop(r0, &(0x7f00000000c0)=[{0x4, 0xe8b}, {0x2, 0x1, 0x1000}, {0x3, 0x1, 0x1800}, {0x3, 0x4000, 0x1000}], 0x4) r1 = semget$private(0x0, 0x0, 0x0) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000100)=[0x0, 0x0, 0x8001, 0x400, 0x1, 0x9, 0x5, 0xfffa, 0xff, 0xf90]) semctl$GETPID(r0, 0x2, 0xb, &(0x7f0000000140)=""/73) semctl$GETZCNT(r1, 0x3, 0xf, &(0x7f00000001c0)=""/54) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x60a82, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x9, 0x4000010, r2, 0xcfe53000) ioctl$F2FS_IOC_RESIZE_FS(r2, 0x4008f510, &(0x7f0000000240)=0xffffffff) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000280)='/dev/autofs\x00') r4 = perf_event_open$cgroup(&(0x7f0000000300)={0x0, 0x80, 0x2, 0x20, 0x1, 0xb, 0x0, 0x0, 0x8000, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x8001, 0x0, @perf_bp={&(0x7f00000002c0), 0x2}, 0x10000, 0x227, 0x1, 0x2, 0x3, 0x2, 0x6, 0x0, 0x9}, r3, 0x3, r3, 0x1) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f00000003c0)={0x0, 0x80, 0x81, 0x6, 0x4, 0x3, 0x0, 0x3, 0x30c06, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000380), 0xc}, 0x4080, 0x1f, 0x8, 0x1, 0x5, 0x2, 0x547, 0x0, 0x7, 0x0, 0x8093}) semctl$GETPID(r1, 0x4, 0xb, &(0x7f0000000440)=""/89) r5 = semget$private(0x0, 0x0, 0x12) semctl$SETALL(r5, 0x0, 0x11, &(0x7f00000004c0)=[0x3, 0x67cd, 0x2]) semget$private(0x0, 0x2, 0x10) [ 57.529182] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 57.531934] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 57.537726] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 57.543911] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 57.548854] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 57.592349] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 57.599021] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 57.600731] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 57.606689] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 57.618506] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 57.795368] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 57.798859] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 57.801397] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 57.804156] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 57.806404] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 57.808181] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 57.810633] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 57.814841] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 57.820744] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 57.822637] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 57.824876] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 57.826707] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 57.840127] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 57.859413] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 57.873757] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 57.876324] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 57.878262] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 57.880108] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 57.883253] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 57.884348] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 57.887063] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 57.887838] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 57.893408] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 57.899044] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 57.902884] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 57.904276] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 57.944063] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 57.945892] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 57.950232] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 57.966511] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 59.562956] Bluetooth: hci0: command tx timeout [ 59.691529] Bluetooth: hci1: command tx timeout [ 59.945910] Bluetooth: hci3: command tx timeout [ 59.946628] Bluetooth: hci5: command tx timeout [ 59.946636] Bluetooth: hci2: command tx timeout [ 60.009551] Bluetooth: hci7: command tx timeout [ 60.012509] Bluetooth: hci6: command tx timeout [ 60.012971] Bluetooth: hci4: command tx timeout [ 61.611035] Bluetooth: hci0: command tx timeout [ 61.737576] Bluetooth: hci1: command tx timeout [ 61.993625] Bluetooth: hci5: command tx timeout [ 61.994068] Bluetooth: hci2: command tx timeout [ 61.994581] Bluetooth: hci3: command tx timeout [ 62.059663] Bluetooth: hci4: command tx timeout [ 62.060060] Bluetooth: hci6: command tx timeout [ 62.060440] Bluetooth: hci7: command tx timeout [ 63.658519] Bluetooth: hci0: command tx timeout [ 63.787538] Bluetooth: hci1: command tx timeout [ 64.041520] Bluetooth: hci2: command tx timeout [ 64.041971] Bluetooth: hci5: command tx timeout [ 64.042345] Bluetooth: hci3: command tx timeout [ 64.105542] Bluetooth: hci7: command tx timeout [ 64.105944] Bluetooth: hci6: command tx timeout [ 64.106333] Bluetooth: hci4: command tx timeout [ 65.707724] Bluetooth: hci0: command tx timeout [ 65.833582] Bluetooth: hci1: command tx timeout [ 66.090539] Bluetooth: hci5: command tx timeout [ 66.090595] Bluetooth: hci2: command tx timeout [ 66.091322] Bluetooth: hci3: command tx timeout [ 66.155526] Bluetooth: hci4: command tx timeout [ 66.155615] Bluetooth: hci6: command tx timeout [ 66.156272] Bluetooth: hci7: command tx timeout [ 90.509976] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.517938] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.738649] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.739278] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.013417] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.014056] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.273659] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.274276] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 16:58:45 executing program 6: semctl$IPC_STAT(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000000)=""/6) semctl$SETALL(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)=[0x3ff, 0x3]) semctl$SETALL(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000080)=[0x7fff, 0x20, 0x5]) r0 = semget$private(0x0, 0x2, 0x20) semop(r0, &(0x7f00000000c0)=[{0x4, 0xe8b}, {0x2, 0x1, 0x1000}, {0x3, 0x1, 0x1800}, {0x3, 0x4000, 0x1000}], 0x4) r1 = semget$private(0x0, 0x0, 0x0) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000100)=[0x0, 0x0, 0x8001, 0x400, 0x1, 0x9, 0x5, 0xfffa, 0xff, 0xf90]) semctl$GETPID(r0, 0x2, 0xb, &(0x7f0000000140)=""/73) semctl$GETZCNT(r1, 0x3, 0xf, &(0x7f00000001c0)=""/54) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x60a82, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x9, 0x4000010, r2, 0xcfe53000) ioctl$F2FS_IOC_RESIZE_FS(r2, 0x4008f510, &(0x7f0000000240)=0xffffffff) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000280)='/dev/autofs\x00') r4 = perf_event_open$cgroup(&(0x7f0000000300)={0x0, 0x80, 0x2, 0x20, 0x1, 0xb, 0x0, 0x0, 0x8000, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x8001, 0x0, @perf_bp={&(0x7f00000002c0), 0x2}, 0x10000, 0x227, 0x1, 0x2, 0x3, 0x2, 0x6, 0x0, 0x9}, r3, 0x3, r3, 0x1) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f00000003c0)={0x0, 0x80, 0x81, 0x6, 0x4, 0x3, 0x0, 0x3, 0x30c06, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000380), 0xc}, 0x4080, 0x1f, 0x8, 0x1, 0x5, 0x2, 0x547, 0x0, 0x7, 0x0, 0x8093}) semctl$GETPID(r1, 0x4, 0xb, &(0x7f0000000440)=""/89) r5 = semget$private(0x0, 0x0, 0x12) semctl$SETALL(r5, 0x0, 0x11, &(0x7f00000004c0)=[0x3, 0x67cd, 0x2]) semget$private(0x0, 0x2, 0x10) 16:58:45 executing program 6: semctl$IPC_STAT(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000000)=""/6) semctl$SETALL(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)=[0x3ff, 0x3]) semctl$SETALL(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000080)=[0x7fff, 0x20, 0x5]) r0 = semget$private(0x0, 0x2, 0x20) semop(r0, &(0x7f00000000c0)=[{0x4, 0xe8b}, {0x2, 0x1, 0x1000}, {0x3, 0x1, 0x1800}, {0x3, 0x4000, 0x1000}], 0x4) r1 = semget$private(0x0, 0x0, 0x0) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000100)=[0x0, 0x0, 0x8001, 0x400, 0x1, 0x9, 0x5, 0xfffa, 0xff, 0xf90]) semctl$GETPID(r0, 0x2, 0xb, &(0x7f0000000140)=""/73) semctl$GETZCNT(r1, 0x3, 0xf, &(0x7f00000001c0)=""/54) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x60a82, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x9, 0x4000010, r2, 0xcfe53000) ioctl$F2FS_IOC_RESIZE_FS(r2, 0x4008f510, &(0x7f0000000240)=0xffffffff) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000280)='/dev/autofs\x00') r4 = perf_event_open$cgroup(&(0x7f0000000300)={0x0, 0x80, 0x2, 0x20, 0x1, 0xb, 0x0, 0x0, 0x8000, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x8001, 0x0, @perf_bp={&(0x7f00000002c0), 0x2}, 0x10000, 0x227, 0x1, 0x2, 0x3, 0x2, 0x6, 0x0, 0x9}, r3, 0x3, r3, 0x1) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f00000003c0)={0x0, 0x80, 0x81, 0x6, 0x4, 0x3, 0x0, 0x3, 0x30c06, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000380), 0xc}, 0x4080, 0x1f, 0x8, 0x1, 0x5, 0x2, 0x547, 0x0, 0x7, 0x0, 0x8093}) semctl$GETPID(r1, 0x4, 0xb, &(0x7f0000000440)=""/89) r5 = semget$private(0x0, 0x0, 0x12) semctl$SETALL(r5, 0x0, 0x11, &(0x7f00000004c0)=[0x3, 0x67cd, 0x2]) semget$private(0x0, 0x2, 0x10) [ 92.448838] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.449489] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 16:58:46 executing program 6: semctl$IPC_STAT(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000000)=""/6) semctl$SETALL(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)=[0x3ff, 0x3]) semctl$SETALL(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000080)=[0x7fff, 0x20, 0x5]) r0 = semget$private(0x0, 0x2, 0x20) semop(r0, &(0x7f00000000c0)=[{0x4, 0xe8b}, {0x2, 0x1, 0x1000}, {0x3, 0x1, 0x1800}, {0x3, 0x4000, 0x1000}], 0x4) r1 = semget$private(0x0, 0x0, 0x0) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000100)=[0x0, 0x0, 0x8001, 0x400, 0x1, 0x9, 0x5, 0xfffa, 0xff, 0xf90]) semctl$GETPID(r0, 0x2, 0xb, &(0x7f0000000140)=""/73) semctl$GETZCNT(r1, 0x3, 0xf, &(0x7f00000001c0)=""/54) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x60a82, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x9, 0x4000010, r2, 0xcfe53000) ioctl$F2FS_IOC_RESIZE_FS(r2, 0x4008f510, &(0x7f0000000240)=0xffffffff) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000280)='/dev/autofs\x00') r4 = perf_event_open$cgroup(&(0x7f0000000300)={0x0, 0x80, 0x2, 0x20, 0x1, 0xb, 0x0, 0x0, 0x8000, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x8001, 0x0, @perf_bp={&(0x7f00000002c0), 0x2}, 0x10000, 0x227, 0x1, 0x2, 0x3, 0x2, 0x6, 0x0, 0x9}, r3, 0x3, r3, 0x1) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f00000003c0)={0x0, 0x80, 0x81, 0x6, 0x4, 0x3, 0x0, 0x3, 0x30c06, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000380), 0xc}, 0x4080, 0x1f, 0x8, 0x1, 0x5, 0x2, 0x547, 0x0, 0x7, 0x0, 0x8093}) semctl$GETPID(r1, 0x4, 0xb, &(0x7f0000000440)=""/89) r5 = semget$private(0x0, 0x0, 0x12) semctl$SETALL(r5, 0x0, 0x11, &(0x7f00000004c0)=[0x3, 0x67cd, 0x2]) semget$private(0x0, 0x2, 0x10) [ 92.509136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.509760] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.615265] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.619518] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 16:58:46 executing program 6: semctl$IPC_STAT(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000000)=""/6) semctl$SETALL(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)=[0x3ff, 0x3]) semctl$SETALL(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000080)=[0x7fff, 0x20, 0x5]) r0 = semget$private(0x0, 0x2, 0x20) semop(r0, &(0x7f00000000c0)=[{0x4, 0xe8b}, {0x2, 0x1, 0x1000}, {0x3, 0x1, 0x1800}, {0x3, 0x4000, 0x1000}], 0x4) r1 = semget$private(0x0, 0x0, 0x0) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000100)=[0x0, 0x0, 0x8001, 0x400, 0x1, 0x9, 0x5, 0xfffa, 0xff, 0xf90]) semctl$GETPID(r0, 0x2, 0xb, &(0x7f0000000140)=""/73) semctl$GETZCNT(r1, 0x3, 0xf, &(0x7f00000001c0)=""/54) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x60a82, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x9, 0x4000010, r2, 0xcfe53000) ioctl$F2FS_IOC_RESIZE_FS(r2, 0x4008f510, &(0x7f0000000240)=0xffffffff) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000280)='/dev/autofs\x00') r4 = perf_event_open$cgroup(&(0x7f0000000300)={0x0, 0x80, 0x2, 0x20, 0x1, 0xb, 0x0, 0x0, 0x8000, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x8001, 0x0, @perf_bp={&(0x7f00000002c0), 0x2}, 0x10000, 0x227, 0x1, 0x2, 0x3, 0x2, 0x6, 0x0, 0x9}, r3, 0x3, r3, 0x1) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f00000003c0)={0x0, 0x80, 0x81, 0x6, 0x4, 0x3, 0x0, 0x3, 0x30c06, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000380), 0xc}, 0x4080, 0x1f, 0x8, 0x1, 0x5, 0x2, 0x547, 0x0, 0x7, 0x0, 0x8093}) semctl$GETPID(r1, 0x4, 0xb, &(0x7f0000000440)=""/89) semget$private(0x0, 0x0, 0x12) semget$private(0x0, 0x2, 0x10) [ 92.674927] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.675549] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.707512] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.708110] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 16:58:46 executing program 6: semctl$IPC_STAT(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000000)=""/6) semctl$SETALL(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)=[0x3ff, 0x3]) semctl$SETALL(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000080)=[0x7fff, 0x20, 0x5]) r0 = semget$private(0x0, 0x2, 0x20) semop(r0, &(0x7f00000000c0)=[{0x4, 0xe8b}, {0x2, 0x1, 0x1000}, {0x3, 0x1, 0x1800}, {0x3, 0x4000, 0x1000}], 0x4) r1 = semget$private(0x0, 0x0, 0x0) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000100)=[0x0, 0x0, 0x8001, 0x400, 0x1, 0x9, 0x5, 0xfffa, 0xff, 0xf90]) semctl$GETPID(r0, 0x2, 0xb, &(0x7f0000000140)=""/73) semctl$GETZCNT(r1, 0x3, 0xf, &(0x7f00000001c0)=""/54) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x60a82, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x9, 0x4000010, r2, 0xcfe53000) ioctl$F2FS_IOC_RESIZE_FS(r2, 0x4008f510, &(0x7f0000000240)=0xffffffff) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000280)='/dev/autofs\x00') r4 = perf_event_open$cgroup(&(0x7f0000000300)={0x0, 0x80, 0x2, 0x20, 0x1, 0xb, 0x0, 0x0, 0x8000, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x8001, 0x0, @perf_bp={&(0x7f00000002c0), 0x2}, 0x10000, 0x227, 0x1, 0x2, 0x3, 0x2, 0x6, 0x0, 0x9}, r3, 0x3, r3, 0x1) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f00000003c0)={0x0, 0x80, 0x81, 0x6, 0x4, 0x3, 0x0, 0x3, 0x30c06, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000380), 0xc}, 0x4080, 0x1f, 0x8, 0x1, 0x5, 0x2, 0x547, 0x0, 0x7, 0x0, 0x8093}) semctl$GETPID(r1, 0x4, 0xb, &(0x7f0000000440)=""/89) semget$private(0x0, 0x2, 0x10) [ 92.763810] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.764410] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 16:58:46 executing program 6: semctl$IPC_STAT(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000000)=""/6) semctl$SETALL(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)=[0x3ff, 0x3]) semctl$SETALL(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000080)=[0x7fff, 0x20, 0x5]) r0 = semget$private(0x0, 0x2, 0x20) semop(r0, &(0x7f00000000c0)=[{0x4, 0xe8b}, {0x2, 0x1, 0x1000}, {0x3, 0x1, 0x1800}, {0x3, 0x4000, 0x1000}], 0x4) r1 = semget$private(0x0, 0x0, 0x0) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000100)=[0x0, 0x0, 0x8001, 0x400, 0x1, 0x9, 0x5, 0xfffa, 0xff, 0xf90]) semctl$GETPID(r0, 0x2, 0xb, &(0x7f0000000140)=""/73) semctl$GETZCNT(r1, 0x3, 0xf, &(0x7f00000001c0)=""/54) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x60a82, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x9, 0x4000010, r2, 0xcfe53000) ioctl$F2FS_IOC_RESIZE_FS(r2, 0x4008f510, &(0x7f0000000240)=0xffffffff) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000280)='/dev/autofs\x00') r4 = perf_event_open$cgroup(&(0x7f0000000300)={0x0, 0x80, 0x2, 0x20, 0x1, 0xb, 0x0, 0x0, 0x8000, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x8001, 0x0, @perf_bp={&(0x7f00000002c0), 0x2}, 0x10000, 0x227, 0x1, 0x2, 0x3, 0x2, 0x6, 0x0, 0x9}, r3, 0x3, r3, 0x1) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f00000003c0)={0x0, 0x80, 0x81, 0x6, 0x4, 0x3, 0x0, 0x3, 0x30c06, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000380), 0xc}, 0x4080, 0x1f, 0x8, 0x1, 0x5, 0x2, 0x547, 0x0, 0x7, 0x0, 0x8093}) semget$private(0x0, 0x2, 0x10) [ 92.819706] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.820318] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 16:58:46 executing program 1: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xb0, 0xc, 0x4, 0x3, 0x70bd27, 0x25dfdbff, {0xa, 0x0, 0x3}, [@typed={0x99, 0x54, 0x0, 0x0, @binary="09ad6fd39aebcb9f04e7b9e193f80ce86b8d01b15239b3a8fe01f7668c5ae831f3ee64c4423fd56ec16c97cfe4e8edd4d9564e64648ba0223aaace28c4111c0b7bbfc64bde7477038e9e92238dc13ca4899717aa1623d6530ca35983bf7c8aa7c38ba9f2fc9312115f9e4628d433f12d1a3cd376df8110df07e77463f3a2b39094c38fad5fee6edcdd347639fe6df55566dea6a9df"}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4000800}, 0x44) r0 = accept4(0xffffffffffffffff, &(0x7f0000000180)=@sco, &(0x7f0000000200)=0x80, 0x0) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x10001}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x14}, 0x10) r1 = syz_io_uring_complete(0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000340)=@gcm_128={{0x303}, "e16c03e4c960e7dd", "06b7f7ab4488cc76cb38a01ac282329c", "9b97dd55", "dfa407db231e0d3b"}, 0x28) r2 = accept(r0, &(0x7f0000000380)=@isdn, &(0x7f0000000400)=0x80) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000480), r1) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x24, r3, 0x10, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x80091) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r1, 0x80083313, &(0x7f0000000580)) syz_io_uring_submit(0x0, 0x0, &(0x7f00000005c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x10003, 0x1, {0x1}}, 0x600) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000600)={{0x1, 0x1, 0x18, r2, {0xee01}}, './file0\x00'}) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000000640)="0bc1a574bc0e0f151cf3ceb7c89e6b0b", 0x10) sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f00000008c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000880)={&(0x7f00000006c0)={0x1ac, 0x12, 0x100, 0x70bd2a, 0x25dfdbfb, {0x21, 0x3, 0x1, 0xff, {0x4e20, 0x4e22, [0x1fb4, 0x759, 0x9, 0x200], [0x7, 0xffffffc1, 0x3, 0x4], 0x0, [0x8, 0x1]}, 0x3, 0xba0}, [@INET_DIAG_REQ_BYTECODE={0x40, 0x1, "508e09d69f20044a59448cbb598c337357ce34d3ecba3f6ef57d37f19776bdd453fc9093a55016ce841766a81f6f9775d54de6240da7d8c405ff8908"}, @INET_DIAG_REQ_BYTECODE={0x9c, 0x1, "2359aa311b74c8f32a26ac2479a79793b1d2c93628eab673f012e02f25101f320a1f9648e10aa1b4a44daa597ef69ef6f2105ead2b901bfbb19576426086ffc5627290683d107af4d666f66fc40b8cb8cfd22fd89039625d45aff57d635bfb371b9406f2986565193159546ba942e5a367b5afa8d74b7e18ff811fad83d590892c23b27d887a9610f7c543d7462258db04dfc96ffe2bd720"}, @INET_DIAG_REQ_BYTECODE={0x42, 0x1, "5360411156df3c68b88ae69b8a1eb43c4061df25614be83d614f74d4e0932814028f05127546fb0e14c7f6f02f776a7f698897ed76fd037659436df41a05"}, @INET_DIAG_REQ_BYTECODE={0x40, 0x1, "018b8e34cd59f2fd9b556071f88d544f07c69178ad9c91a91c8b837bc60775ff97c57137d06b5b7e7d980e28e1bf63106dc770232d0d6d3448417361"}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40004) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r5) fremovexattr(0xffffffffffffffff, &(0x7f0000000900)=@known='user.incfs.metadata\x00') ioctl$F2FS_IOC_RESIZE_FS(0xffffffffffffffff, 0x4008f510, &(0x7f0000000940)=0x80000001) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000980)={'wg2\x00'}) fcntl$getown(0xffffffffffffffff, 0x9) syz_io_uring_submit(0x0, 0x0, &(0x7f00000009c0)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x5, 0x0, 0x0, 0x0, 0x1}, 0x4) [ 92.847758] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.848335] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 16:58:46 executing program 6: semctl$IPC_STAT(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000000)=""/6) semctl$SETALL(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)=[0x3ff, 0x3]) semctl$SETALL(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000080)=[0x7fff, 0x20, 0x5]) r0 = semget$private(0x0, 0x2, 0x20) semop(r0, &(0x7f00000000c0)=[{0x4, 0xe8b}, {0x2, 0x1, 0x1000}, {0x3, 0x1, 0x1800}, {0x3, 0x4000, 0x1000}], 0x4) r1 = semget$private(0x0, 0x0, 0x0) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000100)=[0x0, 0x0, 0x8001, 0x400, 0x1, 0x9, 0x5, 0xfffa, 0xff, 0xf90]) semctl$GETPID(r0, 0x2, 0xb, &(0x7f0000000140)=""/73) semctl$GETZCNT(r1, 0x3, 0xf, &(0x7f00000001c0)=""/54) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x60a82, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x9, 0x4000010, r2, 0xcfe53000) ioctl$F2FS_IOC_RESIZE_FS(r2, 0x4008f510, &(0x7f0000000240)=0xffffffff) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000280)='/dev/autofs\x00') perf_event_open$cgroup(&(0x7f0000000300)={0x0, 0x80, 0x2, 0x20, 0x1, 0xb, 0x0, 0x0, 0x8000, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x8001, 0x0, @perf_bp={&(0x7f00000002c0), 0x2}, 0x10000, 0x227, 0x1, 0x2, 0x3, 0x2, 0x6, 0x0, 0x9}, r3, 0x3, r3, 0x1) semget$private(0x0, 0x2, 0x10) [ 92.992594] audit: type=1400 audit(1768496326.506:8): avc: denied { open } for pid=3886 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 92.994300] audit: type=1400 audit(1768496326.506:9): avc: denied { kernel } for pid=3886 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 93.121407] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.122039] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.182086] audit: type=1400 audit(1768496326.696:10): avc: denied { add_name } for pid=3903 comm="syz-executor.2" name="3907" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=1 [ 93.189827] audit: type=1400 audit(1768496326.697:11): avc: denied { create } for pid=3903 comm="syz-executor.2" name="3907" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:kernel_t:s0 tclass=file permissive=1 [ 93.213839] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.214434] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.353292] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.353980] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.378279] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.379198] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 16:58:58 executing program 1: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xb0, 0xc, 0x4, 0x3, 0x70bd27, 0x25dfdbff, {0xa, 0x0, 0x3}, [@typed={0x99, 0x54, 0x0, 0x0, @binary="09ad6fd39aebcb9f04e7b9e193f80ce86b8d01b15239b3a8fe01f7668c5ae831f3ee64c4423fd56ec16c97cfe4e8edd4d9564e64648ba0223aaace28c4111c0b7bbfc64bde7477038e9e92238dc13ca4899717aa1623d6530ca35983bf7c8aa7c38ba9f2fc9312115f9e4628d433f12d1a3cd376df8110df07e77463f3a2b39094c38fad5fee6edcdd347639fe6df55566dea6a9df"}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4000800}, 0x44) r0 = accept4(0xffffffffffffffff, &(0x7f0000000180)=@sco, &(0x7f0000000200)=0x80, 0x0) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x10001}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x14}, 0x10) r1 = syz_io_uring_complete(0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000340)=@gcm_128={{0x303}, "e16c03e4c960e7dd", "06b7f7ab4488cc76cb38a01ac282329c", "9b97dd55", "dfa407db231e0d3b"}, 0x28) r2 = accept(r0, &(0x7f0000000380)=@isdn, &(0x7f0000000400)=0x80) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000480), r1) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x24, r3, 0x10, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x80091) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r1, 0x80083313, &(0x7f0000000580)) syz_io_uring_submit(0x0, 0x0, &(0x7f00000005c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x10003, 0x1, {0x1}}, 0x600) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000600)={{0x1, 0x1, 0x18, r2, {0xee01}}, './file0\x00'}) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000000640)="0bc1a574bc0e0f151cf3ceb7c89e6b0b", 0x10) sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f00000008c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000880)={&(0x7f00000006c0)={0x1ac, 0x12, 0x100, 0x70bd2a, 0x25dfdbfb, {0x21, 0x3, 0x1, 0xff, {0x4e20, 0x4e22, [0x1fb4, 0x759, 0x9, 0x200], [0x7, 0xffffffc1, 0x3, 0x4], 0x0, [0x8, 0x1]}, 0x3, 0xba0}, [@INET_DIAG_REQ_BYTECODE={0x40, 0x1, "508e09d69f20044a59448cbb598c337357ce34d3ecba3f6ef57d37f19776bdd453fc9093a55016ce841766a81f6f9775d54de6240da7d8c405ff8908"}, @INET_DIAG_REQ_BYTECODE={0x9c, 0x1, "2359aa311b74c8f32a26ac2479a79793b1d2c93628eab673f012e02f25101f320a1f9648e10aa1b4a44daa597ef69ef6f2105ead2b901bfbb19576426086ffc5627290683d107af4d666f66fc40b8cb8cfd22fd89039625d45aff57d635bfb371b9406f2986565193159546ba942e5a367b5afa8d74b7e18ff811fad83d590892c23b27d887a9610f7c543d7462258db04dfc96ffe2bd720"}, @INET_DIAG_REQ_BYTECODE={0x42, 0x1, "5360411156df3c68b88ae69b8a1eb43c4061df25614be83d614f74d4e0932814028f05127546fb0e14c7f6f02f776a7f698897ed76fd037659436df41a05"}, @INET_DIAG_REQ_BYTECODE={0x40, 0x1, "018b8e34cd59f2fd9b556071f88d544f07c69178ad9c91a91c8b837bc60775ff97c57137d06b5b7e7d980e28e1bf63106dc770232d0d6d3448417361"}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40004) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r5) fremovexattr(0xffffffffffffffff, &(0x7f0000000900)=@known='user.incfs.metadata\x00') ioctl$F2FS_IOC_RESIZE_FS(0xffffffffffffffff, 0x4008f510, &(0x7f0000000940)=0x80000001) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000980)={'wg2\x00'}) fcntl$getown(0xffffffffffffffff, 0x9) syz_io_uring_submit(0x0, 0x0, &(0x7f00000009c0)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x5, 0x0, 0x0, 0x0, 0x1}, 0x4) 16:58:58 executing program 4: fremovexattr(0xffffffffffffffff, &(0x7f0000000000)=@random={'osx.', '%@.\x00'}) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000040)=0x93af) r0 = perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x80, 0x1, 0x5, 0x2, 0x5, 0x0, 0x5, 0x100, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x5, 0x2, @perf_config_ext={0x8, 0x7}, 0x138, 0x8001, 0xa9, 0x7, 0x3ff, 0x1ff, 0x5, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x4) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r0, 0xf505, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$HIDIOCAPPLICATION(r1, 0x4802, 0x2) r2 = perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0xff, 0x0, 0xd1, 0x0, 0x0, 0x0, 0x401, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x2, @perf_config_ext={0x69c, 0x1}, 0x2154, 0x2, 0x3, 0x1, 0x99, 0xffff, 0x1, 0x0, 0x8000, 0x0, 0x3}, 0x0, 0x1, r1, 0x1) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0) r3 = signalfd(r2, &(0x7f00000001c0)={[0x5df5a116]}, 0x8) ioctl$PERF_EVENT_IOC_REFRESH(r3, 0x2402, 0xe1) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000200)) socketpair(0x2b, 0x800, 0xa1, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000000280)="d90d96008de1ffe4f1d2e4b262e7bd9d", 0x10) socketpair(0x15, 0x800, 0x80000001, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r5) r6 = perf_event_open$cgroup(&(0x7f0000000340)={0x0, 0x80, 0x4, 0x89, 0x9d, 0x40, 0x0, 0x2, 0x10, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfff, 0x0, @perf_bp={&(0x7f0000000300), 0x1}, 0x42402, 0x4, 0x6, 0x6, 0x5, 0x1, 0x55, 0x0, 0x21, 0x0, 0x3}, r3, 0x0, 0xffffffffffffffff, 0xd) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x2400, 0x20) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0/file0\x00'}) socket$nl_sock_diag(0x10, 0x3, 0x4) 16:58:58 executing program 6: semctl$IPC_STAT(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000000)=""/6) semctl$SETALL(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)=[0x3ff, 0x3]) semctl$SETALL(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000080)=[0x7fff, 0x20, 0x5]) r0 = semget$private(0x0, 0x2, 0x20) semop(r0, &(0x7f00000000c0)=[{0x4, 0xe8b}, {0x2, 0x1, 0x1000}, {0x3, 0x1, 0x1800}, {0x3, 0x4000, 0x1000}], 0x4) r1 = semget$private(0x0, 0x0, 0x0) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000100)=[0x0, 0x0, 0x8001, 0x400, 0x1, 0x9, 0x5, 0xfffa, 0xff, 0xf90]) semctl$GETPID(r0, 0x2, 0xb, &(0x7f0000000140)=""/73) semctl$GETZCNT(r1, 0x3, 0xf, &(0x7f00000001c0)=""/54) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x60a82, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x9, 0x4000010, r2, 0xcfe53000) ioctl$F2FS_IOC_RESIZE_FS(r2, 0x4008f510, &(0x7f0000000240)=0xffffffff) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000280)='/dev/autofs\x00') semget$private(0x0, 0x2, 0x10) 16:58:58 executing program 5: r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @initdev}}, &(0x7f0000000080)=0x80) getresgid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)=0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0xee01, r1}}, './file0\x00'}) ioctl$HIDIOCAPPLICATION(r2, 0x4802, 0xfc) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x5}, 0x7) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$addseals(r3, 0x409, 0x1) ioctl$BTRFS_IOC_QGROUP_CREATE(r3, 0x4010942a, &(0x7f0000000200)={0x0, 0x346}) prctl$PR_CAP_AMBIENT(0x2f, 0x3, 0x6) ioctl$HIDIOCGVERSION(0xffffffffffffffff, 0x80044801, &(0x7f0000000240)) ioctl$BTRFS_IOC_LOGICAL_INO(r3, 0xc0389424, &(0x7f00000002c0)={0xffff, 0x8, '\x00', 0x0, &(0x7f0000000280)=[0x0]}) r4 = memfd_secret(0x80000) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r4, 0x3309) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vxcan1\x00'}) r5 = accept4(r3, &(0x7f0000000340)=@sco={0x1f, @fixed}, &(0x7f00000003c0)=0x80, 0x0) ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, &(0x7f0000000400)={0x8, 0x10001, 0x4, 0x4, 0x5, [{0x0, 0x4fc, 0x683b, '\x00', 0x1801}, {0xba8, 0x7fffffff, 0x81, '\x00', 0x6}, {0x2, 0x6, 0x2, '\x00', 0x8}, {0x4, 0x80000001, 0x0, '\x00', 0x2}, {0x1, 0x0, 0x10000, '\x00', 0x1400}]}) ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f0000000580)={0x2, 0x38, '\x00', 0x1, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r6 = signalfd(r2, &(0x7f00000005c0)={[0x100000001]}, 0x8) ioctl$HIDIOCGCOLLECTIONINFO(r6, 0xc0104811, &(0x7f0000000600)={0x0, 0x7, 0xe2af, 0x80000001}) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r6, 0x8008330e, &(0x7f0000000640)) 16:58:58 executing program 7: clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) semtimedop(0xffffffffffffffff, &(0x7f0000000000)=[{0x4, 0x1000, 0x1c00}, {0x4, 0xdb}, {0x3, 0x81, 0x800}, {0x4, 0x5}], 0x4, &(0x7f0000000080)={r0, r1+10000000}) clock_getres(0x0, &(0x7f00000000c0)) clock_getres(0x6, &(0x7f0000000100)) r2 = syz_open_dev$loop(&(0x7f0000000140), 0x9, 0x40a00) socketpair(0x26, 0x80000, 0x2, &(0x7f0000000180)={0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_SPLICE={0x1e, 0x2, 0x0, @fd=r2, 0x961, {}, 0x9, 0x8, 0x0, {0x0, 0x0, r3}}, 0x1) clock_getres(0x6, &(0x7f0000000200)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1800005, 0x8010, 0xffffffffffffffff, 0x0) r5 = syz_io_uring_complete(r4) clock_gettime(0x0, &(0x7f0000000240)) socketpair(0x1f, 0x800, 0x9, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_timeval(r6, 0x1, 0x43, &(0x7f00000002c0), &(0x7f0000000300)=0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000340)={'vcan0\x00'}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x1010, r2, 0x95fc4000) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) semtimedop(0xffffffffffffffff, &(0x7f0000000380)=[{0x4, 0xf838, 0x1000}, {0x3, 0x5, 0x800}], 0x2, &(0x7f0000000400)={r7, r8+10000000}) clock_getres(0x2, &(0x7f0000000440)) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x2400, 0x467) ioctl$SNAPSHOT_UNFREEZE(r5, 0x3302) 16:58:58 executing program 0: syz_io_uring_setup(0x5aea, &(0x7f0000000000)={0x0, 0x2, 0x8, 0x1, 0x39c}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) syz_io_uring_submit(0x0, r1, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x6, &(0x7f0000000140)={r2, r3+60000000}, 0x1, 0x1, 0x1}, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x0, 0x30, r4, 0x9c6ca000) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r4, 0x40089413, &(0x7f00000001c0)=0xb24c) pselect6(0x40, &(0x7f0000000200)={0xffffffff, 0x8, 0x3ff, 0x6, 0x10001, 0xfffffffffffffff7, 0x4000000040000000, 0x3}, &(0x7f0000000240)={0x20000000000, 0x3dd, 0x7ff, 0x1f, 0xfffffffffffffffb, 0x2, 0xa9c, 0x2}, &(0x7f0000000280)={0x9, 0x5, 0x7, 0x5, 0x3b4, 0xfffffffffffff350, 0xfffffffffffffffe, 0x100000001}, &(0x7f00000002c0)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000300)={[0x80]}, 0x8}) r5 = syz_io_uring_setup(0x7431, &(0x7f0000000380)={0x0, 0x8043, 0x53ae390bf5aa1ad2, 0x0, 0x324}, &(0x7f0000ff4000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000400)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r0, r7, &(0x7f00000004c0)=@IORING_OP_OPENAT={0x12, 0x5, 0x0, r4, 0x0, &(0x7f0000000480)='./file0\x00', 0x20, 0x800, 0x12345}, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000500)={@loopback, @multicast2}, &(0x7f0000000540)=0xc) clock_gettime(0x0, &(0x7f00000005c0)={0x0, 0x0}) semtimedop(0x0, &(0x7f0000000580)=[{0x0, 0x81, 0x800}, {0x1, 0x6, 0x800}, {0x4, 0x4, 0x1000}], 0x3, &(0x7f0000000600)={r8, r9+60000000}) getsockname(0xffffffffffffffff, &(0x7f0000000640)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, &(0x7f00000006c0)=0x80) fsetxattr$trusted_overlay_origin(r4, &(0x7f0000000700), &(0x7f0000000740), 0x2, 0x1) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000780)='./file0\x00', 0x1000007) r11 = syz_io_uring_complete(r6) read$snapshot(r11, &(0x7f00000007c0)=""/203, 0xcb) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r5, 0xf501, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r10, 0x6, 0x13, &(0x7f00000008c0), 0x4) prctl$PR_SET_FPEMU(0xa, 0x1) 16:58:58 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LIST_PHY(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x40) sendmsg$SOCK_DESTROY(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000600)={&(0x7f0000000140)={0x48c, 0x15, 0x100, 0x70bd25, 0x25dfdbff, {0xa, 0x91}, [@INET_DIAG_REQ_BYTECODE={0xca, 0x1, "0cd9b639207bc00d4d818f0ef739eb371513327730c58ddde0985b32065d8e3bafdbc2586d6c2d8b24a2611cc8d79d4346e6758017670597be9566e533e68b8eceaf9f877fc5669a30ee4251e61559ad3fd7bd72abc02bb4d2474c8b3a7e1e333cab711b2cc1b5997e58edc267d430c95807bd9d41fd99c379d65de4db793224e299641ee58b275bf31b853b6ecd0bbfb571e491ca5a4fac46c1d626e2e7d74ad2030c120b35b069e6dda3d2808994e443b5ab1a4c5e9ed9fe09ec91ea478b01b1ba9bbdd737"}, @INET_DIAG_REQ_BYTECODE={0xee, 0x1, "a9dd60c307218e02c59f9691e88bc6d0aa8638686de7fd4cba5ca4563c5c8f0854f5417f6d1a812624d39db8547284634c22a657b1398476f6af3ebe8a948c8cb00079ed73b2f1c2fd5cf6808f04715eff2d8fc4c0bf3fa7fac298d746c8cf6811926a7488f607e15b6a6e335c1f9f7d3428ea2d36766b8674585c2a789f45c257cbf6266f28ef89987a5fa81fce25a525b0edfcf7d9e91f8377b1dc990b4aa805ca407f59f1fefc114727258a82da0a70414e8ffd934d01ded0297fc02b91398dedf939a347c088709bf2eba853d6144afaeee36a0c9ad866f9939a8ce920e7e185f3a0282eb2c7a8db"}, @INET_DIAG_REQ_BYTECODE={0x6a, 0x1, "603269aaf19ffb5bb34334192a17f5b13dd049499d3dd20f2627eef3ab42c707e64def9b18b09ddb3a3d9a4213c2f63e38d5d9f4ffea0b9ae410489bbe78a1b5f8283d177cdfc43152abdfa3bf5473f3b5944e99f9a85c7842bf3bf39e79ebfefa5115e613a4"}, @INET_DIAG_REQ_BYTECODE={0x9f, 0x1, "33b3bb6fa233f52b9f994daedaea42986f9405986575c79e2953c6d01ceabe421b6e6f70f19e3e36d7498780b43802b6490089ea42d49102ff26620f045888ac29aedc1cdf11e8020f295119e410559275f53d50059306ef5b1b496b693ed34bc8eb9fa3e10e84947672146468e467e8142610c51f197bc8e942cf3f4ed73623d9eaa4bc2aa3a72eba287e469892ad66e1d9755b66ffb92f4b9a49"}, @INET_DIAG_REQ_BYTECODE={0x83, 0x1, "96ab4b3a91fcc2b1af3c3d584d06adf087fbd12b6ff52be3015bb79a4d82e20e307e35d4f10da40cfc41683689eae004e9e9d8251020abf80cfc16d094792f78614a223e8c0d81cc28f91190f085ddacabe55e3b4095ff53956533af609af431736494dc5b141d08a1a6357bc58d8826fa8465f6db9c62139de5070b7f417e"}, @INET_DIAG_REQ_BYTECODE={0xab, 0x1, "f534b8aa7aeba4baa212b49fd1bc9297f5f0705cbf7d30f2f78c4ad58d39ebbcc204b4f0e9606cfbd817b09a0ddb496ed5a9c14fd14bdc7de89c5a445d4fe370078ee662fca5d6d8712f6b6869d4cbcb3bbb0be1f988bdc40ee0875ae96790163febf1d8cc67baae8055f1fe90ca6d179f9f08a44701bd4a6e47722b817a25a77f122149965a27af83ff295aa01b8c8920f956feb01a0d82ccc6d882c189bf24a99873a38acc53"}, @INET_DIAG_REQ_BYTECODE={0x49, 0x1, "c830c3d577b0a6d5a861ca2477ca24d1ca5e19b048daabd3a5f2f7bb22175cc8ab55a837fe20c883ad54c40aaff5a25d222e8489323d26a58c5a9e534637f87b4ae2cbf62d"}, @INET_DIAG_REQ_BYTECODE={0x19, 0x1, "08a14b1d38bc3bd0d09b4d1e38ca18531afff796b4"}, @INET_DIAG_REQ_BYTECODE={0x18, 0x1, "7ddccd96835d626628938650e031ef98ccd4023c"}]}, 0x48c}, 0x1, 0x0, 0x0, 0x8040}, 0x20048004) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r0) sendmsg$IEEE802154_LIST_PHY(r0, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14, r1, 0x4, 0x70bd2a, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x801}, 0x2000c040) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r0) sendmsg$IEEE802154_LIST_PHY(r2, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14, r3, 0x404, 0x70bd2d, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4040810}, 0x20000040) r4 = signalfd(0xffffffffffffffff, &(0x7f0000000900)={[0x401]}, 0x8) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f0000000940)={0x0, 0x80, 0xfe, 0xf7, 0x8, 0x8, 0x0, 0x0, 0x81c0, 0x8, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x0, @perf_config_ext={0x0, 0x3000000000000}, 0xc0, 0x80000000, 0x3, 0x7, 0x1, 0x9, 0x4, 0x0, 0x1ff, 0x0, 0xfff}) sendmsg$SOCK_DESTROY(r4, &(0x7f0000000c00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x7faf765b7275150f}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000a00)={0x1a4, 0x15, 0x1, 0x70bd29, 0x25dfdbfd, {0x21, 0x20}, [@INET_DIAG_REQ_BYTECODE={0xca, 0x1, "4cfe854d53fb01f6d6328bd3cff2fc13116164a425784fc2b8a3782641ebfc45dbb9bf53df97065dc40906479d2a71449f20f398c9408daf0fd45079d1bbdb13b3e05964370480028efb0f21383153796adfe2cde36e2b168065a1bb3f54f31343be958d9353ad58c8d2752458d5fc7a18ae05d4539093dc0845aaf4b72b4c777689c8a80f35c4d81d6e9acf9866f29809bb7c241e91e92ce93605a2064f966df27eaf9424ffb194c96bc079877affd6f38f9e556d5d972c295f06423dca59f9b63ea4c30247"}, @INET_DIAG_REQ_BYTECODE={0xc1, 0x1, "4db6886a6338a219944e3ed3f39cebdbf6fe60a89b2952f21815d09dd9694c24ef38025351c0e0d8d7d659fe83ce83b5c502d326e74bbc3ca3597e8ebdce2ca7dd923fc729235f9c55bec5b1d97652364a1f4c43f1fcf722ab754a504d64452739690105705256c9aaac5171c77fe8ce23f9c34817d2c7c2c539d8f8a277cfc3e995ca6eb26c2d1e92a650b1ea8c22dd5132e5a7460339ee12f51890f431647dbad9fa8dbd3f6dccb52d520c50de8df36282e5885324d96b89a82c5d2a"}]}, 0x1a4}}, 0x80) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x7fff8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000c40)=@IORING_OP_FSYNC={0x3, 0x4, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xd36) r5 = accept(r4, &(0x7f0000000c80)=@l2tp={0x2, 0x0, @dev}, &(0x7f0000000d00)=0x80) getsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000e40)={@empty, @rand_addr, 0x0}, &(0x7f0000000e80)=0xc) sendmsg$WG_CMD_GET_DEVICE(r5, &(0x7f0000000f80)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000f40)={&(0x7f0000000ec0)={0x48, 0x0, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r6}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x52a0}]}, 0x48}, 0x1, 0x0, 0x0, 0x6000040}, 0x810) getsockopt$inet_tcp_buf(r5, 0x6, 0x0, &(0x7f0000000fc0), &(0x7f0000001000)) syz_genetlink_get_family_id$ieee802154(&(0x7f0000001040), r0) ioctl$BTRFS_IOC_BALANCE(0xffffffffffffffff, 0x5000940c, 0x0) 16:58:58 executing program 2: r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x40840, 0x0) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xee01, 0xee01}}, './file0\x00'}) r3 = dup2(r0, r0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r3) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r1, 0xf501, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000080)={0x4, 0x41, 0x1d}, &(0x7f00000000c0)='./file0\x00', 0x18, 0x0, 0x23456}, 0x6) r4 = socket$inet(0x2, 0x4, 0xb6e0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r4, 0xf505, 0x0) getsockopt$inet_mreqn(r3, 0x0, 0x7, &(0x7f0000000180)={@multicast2, @initdev, 0x0}, &(0x7f00000001c0)=0xc) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0xb4, 0x0, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x80}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xee}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}]}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x81}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}]}, 0xb4}, 0x1, 0x0, 0x0, 0x24000005}, 0x40800) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000000340)={{0x1, 0x1, 0x18, r3, {0xee01, r2}}, './file0\x00'}) setsockopt$inet_tcp_buf(r6, 0x6, 0x21, &(0x7f0000000380)="2a35c6b2b4e31b346262c7bd54df746be683669cac9292056fb41cca0a14f0aabc2810d0402930c93c29fe45b5b721c031270997db4c624165db868938c5855dc2c60f4d019e262628a3abb42c9aaaacf94217f22988e07d", 0x58) ioctl$AUTOFS_IOC_SETTIMEOUT(r6, 0x80049367, &(0x7f0000000400)=0x3ff) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000440)=0x4) r7 = syz_open_dev$loop(&(0x7f0000000480), 0xae1f, 0x8002) r8 = timerfd_create(0x4, 0x80000) r9 = dup2(r7, r8) ioctl$HIDIOCSUSAGE(r9, 0x4018480c, &(0x7f00000004c0)={0x3, 0x200, 0x1, 0x0, 0x400, 0xfffffffb}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000500)={{0x1, 0x1, 0x18, r1}, './file0/file0\x00'}) 16:58:58 executing program 0: syz_io_uring_setup(0x5aea, &(0x7f0000000000)={0x0, 0x2, 0x8, 0x1, 0x39c}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) syz_io_uring_submit(0x0, r1, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x6, &(0x7f0000000140)={r2, r3+60000000}, 0x1, 0x1, 0x1}, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x0, 0x30, r4, 0x9c6ca000) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r4, 0x40089413, &(0x7f00000001c0)=0xb24c) pselect6(0x40, &(0x7f0000000200)={0xffffffff, 0x8, 0x3ff, 0x6, 0x10001, 0xfffffffffffffff7, 0x4000000040000000, 0x3}, &(0x7f0000000240)={0x20000000000, 0x3dd, 0x7ff, 0x1f, 0xfffffffffffffffb, 0x2, 0xa9c, 0x2}, &(0x7f0000000280)={0x9, 0x5, 0x7, 0x5, 0x3b4, 0xfffffffffffff350, 0xfffffffffffffffe, 0x100000001}, &(0x7f00000002c0)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000300)={[0x80]}, 0x8}) r5 = syz_io_uring_setup(0x7431, &(0x7f0000000380)={0x0, 0x8043, 0x53ae390bf5aa1ad2, 0x0, 0x324}, &(0x7f0000ff4000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000400)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r0, r7, &(0x7f00000004c0)=@IORING_OP_OPENAT={0x12, 0x5, 0x0, r4, 0x0, &(0x7f0000000480)='./file0\x00', 0x20, 0x800, 0x12345}, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000500)={@loopback, @multicast2}, &(0x7f0000000540)=0xc) clock_gettime(0x0, &(0x7f00000005c0)={0x0, 0x0}) semtimedop(0x0, &(0x7f0000000580)=[{0x0, 0x81, 0x800}, {0x1, 0x6, 0x800}, {0x4, 0x4, 0x1000}], 0x3, &(0x7f0000000600)={r8, r9+60000000}) getsockname(0xffffffffffffffff, &(0x7f0000000640)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, &(0x7f00000006c0)=0x80) fsetxattr$trusted_overlay_origin(r4, &(0x7f0000000700), &(0x7f0000000740), 0x2, 0x1) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000780)='./file0\x00', 0x1000007) r11 = syz_io_uring_complete(r6) read$snapshot(r11, &(0x7f00000007c0)=""/203, 0xcb) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r5, 0xf501, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r10, 0x6, 0x13, &(0x7f00000008c0), 0x4) prctl$PR_SET_FPEMU(0xa, 0x1) 16:58:58 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LIST_PHY(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x40) sendmsg$SOCK_DESTROY(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000600)={&(0x7f0000000140)={0x48c, 0x15, 0x100, 0x70bd25, 0x25dfdbff, {0xa, 0x91}, [@INET_DIAG_REQ_BYTECODE={0xca, 0x1, "0cd9b639207bc00d4d818f0ef739eb371513327730c58ddde0985b32065d8e3bafdbc2586d6c2d8b24a2611cc8d79d4346e6758017670597be9566e533e68b8eceaf9f877fc5669a30ee4251e61559ad3fd7bd72abc02bb4d2474c8b3a7e1e333cab711b2cc1b5997e58edc267d430c95807bd9d41fd99c379d65de4db793224e299641ee58b275bf31b853b6ecd0bbfb571e491ca5a4fac46c1d626e2e7d74ad2030c120b35b069e6dda3d2808994e443b5ab1a4c5e9ed9fe09ec91ea478b01b1ba9bbdd737"}, @INET_DIAG_REQ_BYTECODE={0xee, 0x1, "a9dd60c307218e02c59f9691e88bc6d0aa8638686de7fd4cba5ca4563c5c8f0854f5417f6d1a812624d39db8547284634c22a657b1398476f6af3ebe8a948c8cb00079ed73b2f1c2fd5cf6808f04715eff2d8fc4c0bf3fa7fac298d746c8cf6811926a7488f607e15b6a6e335c1f9f7d3428ea2d36766b8674585c2a789f45c257cbf6266f28ef89987a5fa81fce25a525b0edfcf7d9e91f8377b1dc990b4aa805ca407f59f1fefc114727258a82da0a70414e8ffd934d01ded0297fc02b91398dedf939a347c088709bf2eba853d6144afaeee36a0c9ad866f9939a8ce920e7e185f3a0282eb2c7a8db"}, @INET_DIAG_REQ_BYTECODE={0x6a, 0x1, "603269aaf19ffb5bb34334192a17f5b13dd049499d3dd20f2627eef3ab42c707e64def9b18b09ddb3a3d9a4213c2f63e38d5d9f4ffea0b9ae410489bbe78a1b5f8283d177cdfc43152abdfa3bf5473f3b5944e99f9a85c7842bf3bf39e79ebfefa5115e613a4"}, @INET_DIAG_REQ_BYTECODE={0x9f, 0x1, "33b3bb6fa233f52b9f994daedaea42986f9405986575c79e2953c6d01ceabe421b6e6f70f19e3e36d7498780b43802b6490089ea42d49102ff26620f045888ac29aedc1cdf11e8020f295119e410559275f53d50059306ef5b1b496b693ed34bc8eb9fa3e10e84947672146468e467e8142610c51f197bc8e942cf3f4ed73623d9eaa4bc2aa3a72eba287e469892ad66e1d9755b66ffb92f4b9a49"}, @INET_DIAG_REQ_BYTECODE={0x83, 0x1, "96ab4b3a91fcc2b1af3c3d584d06adf087fbd12b6ff52be3015bb79a4d82e20e307e35d4f10da40cfc41683689eae004e9e9d8251020abf80cfc16d094792f78614a223e8c0d81cc28f91190f085ddacabe55e3b4095ff53956533af609af431736494dc5b141d08a1a6357bc58d8826fa8465f6db9c62139de5070b7f417e"}, @INET_DIAG_REQ_BYTECODE={0xab, 0x1, "f534b8aa7aeba4baa212b49fd1bc9297f5f0705cbf7d30f2f78c4ad58d39ebbcc204b4f0e9606cfbd817b09a0ddb496ed5a9c14fd14bdc7de89c5a445d4fe370078ee662fca5d6d8712f6b6869d4cbcb3bbb0be1f988bdc40ee0875ae96790163febf1d8cc67baae8055f1fe90ca6d179f9f08a44701bd4a6e47722b817a25a77f122149965a27af83ff295aa01b8c8920f956feb01a0d82ccc6d882c189bf24a99873a38acc53"}, @INET_DIAG_REQ_BYTECODE={0x49, 0x1, "c830c3d577b0a6d5a861ca2477ca24d1ca5e19b048daabd3a5f2f7bb22175cc8ab55a837fe20c883ad54c40aaff5a25d222e8489323d26a58c5a9e534637f87b4ae2cbf62d"}, @INET_DIAG_REQ_BYTECODE={0x19, 0x1, "08a14b1d38bc3bd0d09b4d1e38ca18531afff796b4"}, @INET_DIAG_REQ_BYTECODE={0x18, 0x1, "7ddccd96835d626628938650e031ef98ccd4023c"}]}, 0x48c}, 0x1, 0x0, 0x0, 0x8040}, 0x20048004) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r0) sendmsg$IEEE802154_LIST_PHY(r0, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14, r1, 0x4, 0x70bd2a, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x801}, 0x2000c040) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r0) sendmsg$IEEE802154_LIST_PHY(r2, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14, r3, 0x404, 0x70bd2d, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4040810}, 0x20000040) r4 = signalfd(0xffffffffffffffff, &(0x7f0000000900)={[0x401]}, 0x8) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f0000000940)={0x0, 0x80, 0xfe, 0xf7, 0x8, 0x8, 0x0, 0x0, 0x81c0, 0x8, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x0, @perf_config_ext={0x0, 0x3000000000000}, 0xc0, 0x80000000, 0x3, 0x7, 0x1, 0x9, 0x4, 0x0, 0x1ff, 0x0, 0xfff}) sendmsg$SOCK_DESTROY(r4, &(0x7f0000000c00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x7faf765b7275150f}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000a00)={0x1a4, 0x15, 0x1, 0x70bd29, 0x25dfdbfd, {0x21, 0x20}, [@INET_DIAG_REQ_BYTECODE={0xca, 0x1, "4cfe854d53fb01f6d6328bd3cff2fc13116164a425784fc2b8a3782641ebfc45dbb9bf53df97065dc40906479d2a71449f20f398c9408daf0fd45079d1bbdb13b3e05964370480028efb0f21383153796adfe2cde36e2b168065a1bb3f54f31343be958d9353ad58c8d2752458d5fc7a18ae05d4539093dc0845aaf4b72b4c777689c8a80f35c4d81d6e9acf9866f29809bb7c241e91e92ce93605a2064f966df27eaf9424ffb194c96bc079877affd6f38f9e556d5d972c295f06423dca59f9b63ea4c30247"}, @INET_DIAG_REQ_BYTECODE={0xc1, 0x1, "4db6886a6338a219944e3ed3f39cebdbf6fe60a89b2952f21815d09dd9694c24ef38025351c0e0d8d7d659fe83ce83b5c502d326e74bbc3ca3597e8ebdce2ca7dd923fc729235f9c55bec5b1d97652364a1f4c43f1fcf722ab754a504d64452739690105705256c9aaac5171c77fe8ce23f9c34817d2c7c2c539d8f8a277cfc3e995ca6eb26c2d1e92a650b1ea8c22dd5132e5a7460339ee12f51890f431647dbad9fa8dbd3f6dccb52d520c50de8df36282e5885324d96b89a82c5d2a"}]}, 0x1a4}}, 0x80) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x7fff8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000c40)=@IORING_OP_FSYNC={0x3, 0x4, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xd36) r5 = accept(r4, &(0x7f0000000c80)=@l2tp={0x2, 0x0, @dev}, &(0x7f0000000d00)=0x80) getsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000e40)={@empty, @rand_addr, 0x0}, &(0x7f0000000e80)=0xc) sendmsg$WG_CMD_GET_DEVICE(r5, &(0x7f0000000f80)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000f40)={&(0x7f0000000ec0)={0x48, 0x0, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r6}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x52a0}]}, 0x48}, 0x1, 0x0, 0x0, 0x6000040}, 0x810) getsockopt$inet_tcp_buf(r5, 0x6, 0x0, &(0x7f0000000fc0), &(0x7f0000001000)) syz_genetlink_get_family_id$ieee802154(&(0x7f0000001040), r0) ioctl$BTRFS_IOC_BALANCE(0xffffffffffffffff, 0x5000940c, 0x0) 16:58:58 executing program 5: r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @initdev}}, &(0x7f0000000080)=0x80) getresgid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)=0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0xee01, r1}}, './file0\x00'}) ioctl$HIDIOCAPPLICATION(r2, 0x4802, 0xfc) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x5}, 0x7) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$addseals(r3, 0x409, 0x1) ioctl$BTRFS_IOC_QGROUP_CREATE(r3, 0x4010942a, &(0x7f0000000200)={0x0, 0x346}) prctl$PR_CAP_AMBIENT(0x2f, 0x3, 0x6) ioctl$HIDIOCGVERSION(0xffffffffffffffff, 0x80044801, &(0x7f0000000240)) ioctl$BTRFS_IOC_LOGICAL_INO(r3, 0xc0389424, &(0x7f00000002c0)={0xffff, 0x8, '\x00', 0x0, &(0x7f0000000280)=[0x0]}) r4 = memfd_secret(0x80000) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r4, 0x3309) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vxcan1\x00'}) r5 = accept4(r3, &(0x7f0000000340)=@sco={0x1f, @fixed}, &(0x7f00000003c0)=0x80, 0x0) ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, &(0x7f0000000400)={0x8, 0x10001, 0x4, 0x4, 0x5, [{0x0, 0x4fc, 0x683b, '\x00', 0x1801}, {0xba8, 0x7fffffff, 0x81, '\x00', 0x6}, {0x2, 0x6, 0x2, '\x00', 0x8}, {0x4, 0x80000001, 0x0, '\x00', 0x2}, {0x1, 0x0, 0x10000, '\x00', 0x1400}]}) ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f0000000580)={0x2, 0x38, '\x00', 0x1, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r6 = signalfd(r2, &(0x7f00000005c0)={[0x100000001]}, 0x8) ioctl$HIDIOCGCOLLECTIONINFO(r6, 0xc0104811, &(0x7f0000000600)={0x0, 0x7, 0xe2af, 0x80000001}) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r6, 0x8008330e, &(0x7f0000000640)) 16:58:58 executing program 6: semctl$IPC_STAT(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000000)=""/6) semctl$SETALL(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)=[0x3ff, 0x3]) semctl$SETALL(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000080)=[0x7fff, 0x20, 0x5]) r0 = semget$private(0x0, 0x2, 0x20) semop(r0, &(0x7f00000000c0)=[{0x4, 0xe8b}, {0x2, 0x1, 0x1000}, {0x3, 0x1, 0x1800}, {0x3, 0x4000, 0x1000}], 0x4) r1 = semget$private(0x0, 0x0, 0x0) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000100)=[0x0, 0x0, 0x8001, 0x400, 0x1, 0x9, 0x5, 0xfffa, 0xff, 0xf90]) semctl$GETPID(r0, 0x2, 0xb, &(0x7f0000000140)=""/73) semctl$GETZCNT(r1, 0x3, 0xf, &(0x7f00000001c0)=""/54) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x60a82, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x9, 0x4000010, r2, 0xcfe53000) ioctl$F2FS_IOC_RESIZE_FS(r2, 0x4008f510, &(0x7f0000000240)=0xffffffff) dup2(r2, r2) semget$private(0x0, 0x2, 0x10) 16:58:58 executing program 0: syz_io_uring_setup(0x5aea, &(0x7f0000000000)={0x0, 0x2, 0x8, 0x1, 0x39c}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) syz_io_uring_submit(0x0, r1, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x6, &(0x7f0000000140)={r2, r3+60000000}, 0x1, 0x1, 0x1}, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x0, 0x30, r4, 0x9c6ca000) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r4, 0x40089413, &(0x7f00000001c0)=0xb24c) pselect6(0x40, &(0x7f0000000200)={0xffffffff, 0x8, 0x3ff, 0x6, 0x10001, 0xfffffffffffffff7, 0x4000000040000000, 0x3}, &(0x7f0000000240)={0x20000000000, 0x3dd, 0x7ff, 0x1f, 0xfffffffffffffffb, 0x2, 0xa9c, 0x2}, &(0x7f0000000280)={0x9, 0x5, 0x7, 0x5, 0x3b4, 0xfffffffffffff350, 0xfffffffffffffffe, 0x100000001}, &(0x7f00000002c0)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000300)={[0x80]}, 0x8}) r5 = syz_io_uring_setup(0x7431, &(0x7f0000000380)={0x0, 0x8043, 0x53ae390bf5aa1ad2, 0x0, 0x324}, &(0x7f0000ff4000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000400)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r0, r7, &(0x7f00000004c0)=@IORING_OP_OPENAT={0x12, 0x5, 0x0, r4, 0x0, &(0x7f0000000480)='./file0\x00', 0x20, 0x800, 0x12345}, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000500)={@loopback, @multicast2}, &(0x7f0000000540)=0xc) clock_gettime(0x0, &(0x7f00000005c0)={0x0, 0x0}) semtimedop(0x0, &(0x7f0000000580)=[{0x0, 0x81, 0x800}, {0x1, 0x6, 0x800}, {0x4, 0x4, 0x1000}], 0x3, &(0x7f0000000600)={r8, r9+60000000}) getsockname(0xffffffffffffffff, &(0x7f0000000640)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, &(0x7f00000006c0)=0x80) fsetxattr$trusted_overlay_origin(r4, &(0x7f0000000700), &(0x7f0000000740), 0x2, 0x1) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000780)='./file0\x00', 0x1000007) r11 = syz_io_uring_complete(r6) read$snapshot(r11, &(0x7f00000007c0)=""/203, 0xcb) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r5, 0xf501, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r10, 0x6, 0x13, &(0x7f00000008c0), 0x4) prctl$PR_SET_FPEMU(0xa, 0x1) 16:58:58 executing program 2: r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x40840, 0x0) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xee01, 0xee01}}, './file0\x00'}) r3 = dup2(r0, r0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r3) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r1, 0xf501, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000080)={0x4, 0x41, 0x1d}, &(0x7f00000000c0)='./file0\x00', 0x18, 0x0, 0x23456}, 0x6) r4 = socket$inet(0x2, 0x4, 0xb6e0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r4, 0xf505, 0x0) getsockopt$inet_mreqn(r3, 0x0, 0x7, &(0x7f0000000180)={@multicast2, @initdev, 0x0}, &(0x7f00000001c0)=0xc) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0xb4, 0x0, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x80}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xee}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}]}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x81}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}]}, 0xb4}, 0x1, 0x0, 0x0, 0x24000005}, 0x40800) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000000340)={{0x1, 0x1, 0x18, r3, {0xee01, r2}}, './file0\x00'}) setsockopt$inet_tcp_buf(r6, 0x6, 0x21, &(0x7f0000000380)="2a35c6b2b4e31b346262c7bd54df746be683669cac9292056fb41cca0a14f0aabc2810d0402930c93c29fe45b5b721c031270997db4c624165db868938c5855dc2c60f4d019e262628a3abb42c9aaaacf94217f22988e07d", 0x58) ioctl$AUTOFS_IOC_SETTIMEOUT(r6, 0x80049367, &(0x7f0000000400)=0x3ff) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000440)=0x4) r7 = syz_open_dev$loop(&(0x7f0000000480), 0xae1f, 0x8002) r8 = timerfd_create(0x4, 0x80000) r9 = dup2(r7, r8) ioctl$HIDIOCSUSAGE(r9, 0x4018480c, &(0x7f00000004c0)={0x3, 0x200, 0x1, 0x0, 0x400, 0xfffffffb}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000500)={{0x1, 0x1, 0x18, r1}, './file0/file0\x00'}) 16:58:58 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LIST_PHY(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x40) sendmsg$SOCK_DESTROY(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000600)={&(0x7f0000000140)={0x48c, 0x15, 0x100, 0x70bd25, 0x25dfdbff, {0xa, 0x91}, [@INET_DIAG_REQ_BYTECODE={0xca, 0x1, "0cd9b639207bc00d4d818f0ef739eb371513327730c58ddde0985b32065d8e3bafdbc2586d6c2d8b24a2611cc8d79d4346e6758017670597be9566e533e68b8eceaf9f877fc5669a30ee4251e61559ad3fd7bd72abc02bb4d2474c8b3a7e1e333cab711b2cc1b5997e58edc267d430c95807bd9d41fd99c379d65de4db793224e299641ee58b275bf31b853b6ecd0bbfb571e491ca5a4fac46c1d626e2e7d74ad2030c120b35b069e6dda3d2808994e443b5ab1a4c5e9ed9fe09ec91ea478b01b1ba9bbdd737"}, @INET_DIAG_REQ_BYTECODE={0xee, 0x1, "a9dd60c307218e02c59f9691e88bc6d0aa8638686de7fd4cba5ca4563c5c8f0854f5417f6d1a812624d39db8547284634c22a657b1398476f6af3ebe8a948c8cb00079ed73b2f1c2fd5cf6808f04715eff2d8fc4c0bf3fa7fac298d746c8cf6811926a7488f607e15b6a6e335c1f9f7d3428ea2d36766b8674585c2a789f45c257cbf6266f28ef89987a5fa81fce25a525b0edfcf7d9e91f8377b1dc990b4aa805ca407f59f1fefc114727258a82da0a70414e8ffd934d01ded0297fc02b91398dedf939a347c088709bf2eba853d6144afaeee36a0c9ad866f9939a8ce920e7e185f3a0282eb2c7a8db"}, @INET_DIAG_REQ_BYTECODE={0x6a, 0x1, "603269aaf19ffb5bb34334192a17f5b13dd049499d3dd20f2627eef3ab42c707e64def9b18b09ddb3a3d9a4213c2f63e38d5d9f4ffea0b9ae410489bbe78a1b5f8283d177cdfc43152abdfa3bf5473f3b5944e99f9a85c7842bf3bf39e79ebfefa5115e613a4"}, @INET_DIAG_REQ_BYTECODE={0x9f, 0x1, "33b3bb6fa233f52b9f994daedaea42986f9405986575c79e2953c6d01ceabe421b6e6f70f19e3e36d7498780b43802b6490089ea42d49102ff26620f045888ac29aedc1cdf11e8020f295119e410559275f53d50059306ef5b1b496b693ed34bc8eb9fa3e10e84947672146468e467e8142610c51f197bc8e942cf3f4ed73623d9eaa4bc2aa3a72eba287e469892ad66e1d9755b66ffb92f4b9a49"}, @INET_DIAG_REQ_BYTECODE={0x83, 0x1, "96ab4b3a91fcc2b1af3c3d584d06adf087fbd12b6ff52be3015bb79a4d82e20e307e35d4f10da40cfc41683689eae004e9e9d8251020abf80cfc16d094792f78614a223e8c0d81cc28f91190f085ddacabe55e3b4095ff53956533af609af431736494dc5b141d08a1a6357bc58d8826fa8465f6db9c62139de5070b7f417e"}, @INET_DIAG_REQ_BYTECODE={0xab, 0x1, "f534b8aa7aeba4baa212b49fd1bc9297f5f0705cbf7d30f2f78c4ad58d39ebbcc204b4f0e9606cfbd817b09a0ddb496ed5a9c14fd14bdc7de89c5a445d4fe370078ee662fca5d6d8712f6b6869d4cbcb3bbb0be1f988bdc40ee0875ae96790163febf1d8cc67baae8055f1fe90ca6d179f9f08a44701bd4a6e47722b817a25a77f122149965a27af83ff295aa01b8c8920f956feb01a0d82ccc6d882c189bf24a99873a38acc53"}, @INET_DIAG_REQ_BYTECODE={0x49, 0x1, "c830c3d577b0a6d5a861ca2477ca24d1ca5e19b048daabd3a5f2f7bb22175cc8ab55a837fe20c883ad54c40aaff5a25d222e8489323d26a58c5a9e534637f87b4ae2cbf62d"}, @INET_DIAG_REQ_BYTECODE={0x19, 0x1, "08a14b1d38bc3bd0d09b4d1e38ca18531afff796b4"}, @INET_DIAG_REQ_BYTECODE={0x18, 0x1, "7ddccd96835d626628938650e031ef98ccd4023c"}]}, 0x48c}, 0x1, 0x0, 0x0, 0x8040}, 0x20048004) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r0) sendmsg$IEEE802154_LIST_PHY(r0, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14, r1, 0x4, 0x70bd2a, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x801}, 0x2000c040) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r0) sendmsg$IEEE802154_LIST_PHY(r2, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14, r3, 0x404, 0x70bd2d, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4040810}, 0x20000040) r4 = signalfd(0xffffffffffffffff, &(0x7f0000000900)={[0x401]}, 0x8) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f0000000940)={0x0, 0x80, 0xfe, 0xf7, 0x8, 0x8, 0x0, 0x0, 0x81c0, 0x8, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x0, @perf_config_ext={0x0, 0x3000000000000}, 0xc0, 0x80000000, 0x3, 0x7, 0x1, 0x9, 0x4, 0x0, 0x1ff, 0x0, 0xfff}) sendmsg$SOCK_DESTROY(r4, &(0x7f0000000c00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x7faf765b7275150f}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000a00)={0x1a4, 0x15, 0x1, 0x70bd29, 0x25dfdbfd, {0x21, 0x20}, [@INET_DIAG_REQ_BYTECODE={0xca, 0x1, "4cfe854d53fb01f6d6328bd3cff2fc13116164a425784fc2b8a3782641ebfc45dbb9bf53df97065dc40906479d2a71449f20f398c9408daf0fd45079d1bbdb13b3e05964370480028efb0f21383153796adfe2cde36e2b168065a1bb3f54f31343be958d9353ad58c8d2752458d5fc7a18ae05d4539093dc0845aaf4b72b4c777689c8a80f35c4d81d6e9acf9866f29809bb7c241e91e92ce93605a2064f966df27eaf9424ffb194c96bc079877affd6f38f9e556d5d972c295f06423dca59f9b63ea4c30247"}, @INET_DIAG_REQ_BYTECODE={0xc1, 0x1, "4db6886a6338a219944e3ed3f39cebdbf6fe60a89b2952f21815d09dd9694c24ef38025351c0e0d8d7d659fe83ce83b5c502d326e74bbc3ca3597e8ebdce2ca7dd923fc729235f9c55bec5b1d97652364a1f4c43f1fcf722ab754a504d64452739690105705256c9aaac5171c77fe8ce23f9c34817d2c7c2c539d8f8a277cfc3e995ca6eb26c2d1e92a650b1ea8c22dd5132e5a7460339ee12f51890f431647dbad9fa8dbd3f6dccb52d520c50de8df36282e5885324d96b89a82c5d2a"}]}, 0x1a4}}, 0x80) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x7fff8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000c40)=@IORING_OP_FSYNC={0x3, 0x4, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xd36) r5 = accept(r4, &(0x7f0000000c80)=@l2tp={0x2, 0x0, @dev}, &(0x7f0000000d00)=0x80) getsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000e40)={@empty, @rand_addr, 0x0}, &(0x7f0000000e80)=0xc) sendmsg$WG_CMD_GET_DEVICE(r5, &(0x7f0000000f80)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000f40)={&(0x7f0000000ec0)={0x48, 0x0, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r6}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x52a0}]}, 0x48}, 0x1, 0x0, 0x0, 0x6000040}, 0x810) getsockopt$inet_tcp_buf(r5, 0x6, 0x0, &(0x7f0000000fc0), &(0x7f0000001000)) syz_genetlink_get_family_id$ieee802154(&(0x7f0000001040), r0) ioctl$BTRFS_IOC_BALANCE(0xffffffffffffffff, 0x5000940c, 0x0) 16:58:58 executing program 5: r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @initdev}}, &(0x7f0000000080)=0x80) getresgid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)=0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0xee01, r1}}, './file0\x00'}) ioctl$HIDIOCAPPLICATION(r2, 0x4802, 0xfc) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x5}, 0x7) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$addseals(r3, 0x409, 0x1) ioctl$BTRFS_IOC_QGROUP_CREATE(r3, 0x4010942a, &(0x7f0000000200)={0x0, 0x346}) prctl$PR_CAP_AMBIENT(0x2f, 0x3, 0x6) ioctl$HIDIOCGVERSION(0xffffffffffffffff, 0x80044801, &(0x7f0000000240)) ioctl$BTRFS_IOC_LOGICAL_INO(r3, 0xc0389424, &(0x7f00000002c0)={0xffff, 0x8, '\x00', 0x0, &(0x7f0000000280)=[0x0]}) r4 = memfd_secret(0x80000) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r4, 0x3309) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vxcan1\x00'}) r5 = accept4(r3, &(0x7f0000000340)=@sco={0x1f, @fixed}, &(0x7f00000003c0)=0x80, 0x0) ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, &(0x7f0000000400)={0x8, 0x10001, 0x4, 0x4, 0x5, [{0x0, 0x4fc, 0x683b, '\x00', 0x1801}, {0xba8, 0x7fffffff, 0x81, '\x00', 0x6}, {0x2, 0x6, 0x2, '\x00', 0x8}, {0x4, 0x80000001, 0x0, '\x00', 0x2}, {0x1, 0x0, 0x10000, '\x00', 0x1400}]}) ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f0000000580)={0x2, 0x38, '\x00', 0x1, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r6 = signalfd(r2, &(0x7f00000005c0)={[0x100000001]}, 0x8) ioctl$HIDIOCGCOLLECTIONINFO(r6, 0xc0104811, &(0x7f0000000600)={0x0, 0x7, 0xe2af, 0x80000001}) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r6, 0x8008330e, &(0x7f0000000640)) 16:59:07 executing program 1: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xb0, 0xc, 0x4, 0x3, 0x70bd27, 0x25dfdbff, {0xa, 0x0, 0x3}, [@typed={0x99, 0x54, 0x0, 0x0, @binary="09ad6fd39aebcb9f04e7b9e193f80ce86b8d01b15239b3a8fe01f7668c5ae831f3ee64c4423fd56ec16c97cfe4e8edd4d9564e64648ba0223aaace28c4111c0b7bbfc64bde7477038e9e92238dc13ca4899717aa1623d6530ca35983bf7c8aa7c38ba9f2fc9312115f9e4628d433f12d1a3cd376df8110df07e77463f3a2b39094c38fad5fee6edcdd347639fe6df55566dea6a9df"}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4000800}, 0x44) r0 = accept4(0xffffffffffffffff, &(0x7f0000000180)=@sco, &(0x7f0000000200)=0x80, 0x0) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x10001}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x14}, 0x10) r1 = syz_io_uring_complete(0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000340)=@gcm_128={{0x303}, "e16c03e4c960e7dd", "06b7f7ab4488cc76cb38a01ac282329c", "9b97dd55", "dfa407db231e0d3b"}, 0x28) r2 = accept(r0, &(0x7f0000000380)=@isdn, &(0x7f0000000400)=0x80) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000480), r1) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x24, r3, 0x10, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x80091) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r1, 0x80083313, &(0x7f0000000580)) syz_io_uring_submit(0x0, 0x0, &(0x7f00000005c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x10003, 0x1, {0x1}}, 0x600) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000600)={{0x1, 0x1, 0x18, r2, {0xee01}}, './file0\x00'}) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000000640)="0bc1a574bc0e0f151cf3ceb7c89e6b0b", 0x10) sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f00000008c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000880)={&(0x7f00000006c0)={0x1ac, 0x12, 0x100, 0x70bd2a, 0x25dfdbfb, {0x21, 0x3, 0x1, 0xff, {0x4e20, 0x4e22, [0x1fb4, 0x759, 0x9, 0x200], [0x7, 0xffffffc1, 0x3, 0x4], 0x0, [0x8, 0x1]}, 0x3, 0xba0}, [@INET_DIAG_REQ_BYTECODE={0x40, 0x1, "508e09d69f20044a59448cbb598c337357ce34d3ecba3f6ef57d37f19776bdd453fc9093a55016ce841766a81f6f9775d54de6240da7d8c405ff8908"}, @INET_DIAG_REQ_BYTECODE={0x9c, 0x1, "2359aa311b74c8f32a26ac2479a79793b1d2c93628eab673f012e02f25101f320a1f9648e10aa1b4a44daa597ef69ef6f2105ead2b901bfbb19576426086ffc5627290683d107af4d666f66fc40b8cb8cfd22fd89039625d45aff57d635bfb371b9406f2986565193159546ba942e5a367b5afa8d74b7e18ff811fad83d590892c23b27d887a9610f7c543d7462258db04dfc96ffe2bd720"}, @INET_DIAG_REQ_BYTECODE={0x42, 0x1, "5360411156df3c68b88ae69b8a1eb43c4061df25614be83d614f74d4e0932814028f05127546fb0e14c7f6f02f776a7f698897ed76fd037659436df41a05"}, @INET_DIAG_REQ_BYTECODE={0x40, 0x1, "018b8e34cd59f2fd9b556071f88d544f07c69178ad9c91a91c8b837bc60775ff97c57137d06b5b7e7d980e28e1bf63106dc770232d0d6d3448417361"}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40004) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r5) fremovexattr(0xffffffffffffffff, &(0x7f0000000900)=@known='user.incfs.metadata\x00') ioctl$F2FS_IOC_RESIZE_FS(0xffffffffffffffff, 0x4008f510, &(0x7f0000000940)=0x80000001) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000980)={'wg2\x00'}) fcntl$getown(0xffffffffffffffff, 0x9) syz_io_uring_submit(0x0, 0x0, &(0x7f00000009c0)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x5, 0x0, 0x0, 0x0, 0x1}, 0x4) 16:59:07 executing program 4: fremovexattr(0xffffffffffffffff, &(0x7f0000000000)=@random={'osx.', '%@.\x00'}) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000040)=0x93af) r0 = perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x80, 0x1, 0x5, 0x2, 0x5, 0x0, 0x5, 0x100, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x5, 0x2, @perf_config_ext={0x8, 0x7}, 0x138, 0x8001, 0xa9, 0x7, 0x3ff, 0x1ff, 0x5, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x4) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r0, 0xf505, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$HIDIOCAPPLICATION(r1, 0x4802, 0x2) r2 = perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0xff, 0x0, 0xd1, 0x0, 0x0, 0x0, 0x401, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x2, @perf_config_ext={0x69c, 0x1}, 0x2154, 0x2, 0x3, 0x1, 0x99, 0xffff, 0x1, 0x0, 0x8000, 0x0, 0x3}, 0x0, 0x1, r1, 0x1) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0) r3 = signalfd(r2, &(0x7f00000001c0)={[0x5df5a116]}, 0x8) ioctl$PERF_EVENT_IOC_REFRESH(r3, 0x2402, 0xe1) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000200)) socketpair(0x2b, 0x800, 0xa1, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000000280)="d90d96008de1ffe4f1d2e4b262e7bd9d", 0x10) socketpair(0x15, 0x800, 0x80000001, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r5) r6 = perf_event_open$cgroup(&(0x7f0000000340)={0x0, 0x80, 0x4, 0x89, 0x9d, 0x40, 0x0, 0x2, 0x10, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfff, 0x0, @perf_bp={&(0x7f0000000300), 0x1}, 0x42402, 0x4, 0x6, 0x6, 0x5, 0x1, 0x55, 0x0, 0x21, 0x0, 0x3}, r3, 0x0, 0xffffffffffffffff, 0xd) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x2400, 0x20) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0/file0\x00'}) socket$nl_sock_diag(0x10, 0x3, 0x4) 16:59:07 executing program 0: syz_io_uring_setup(0x5aea, &(0x7f0000000000)={0x0, 0x2, 0x8, 0x1, 0x39c}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) syz_io_uring_submit(0x0, r1, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x6, &(0x7f0000000140)={r2, r3+60000000}, 0x1, 0x1, 0x1}, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x0, 0x30, r4, 0x9c6ca000) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r4, 0x40089413, &(0x7f00000001c0)=0xb24c) pselect6(0x40, &(0x7f0000000200)={0xffffffff, 0x8, 0x3ff, 0x6, 0x10001, 0xfffffffffffffff7, 0x4000000040000000, 0x3}, &(0x7f0000000240)={0x20000000000, 0x3dd, 0x7ff, 0x1f, 0xfffffffffffffffb, 0x2, 0xa9c, 0x2}, &(0x7f0000000280)={0x9, 0x5, 0x7, 0x5, 0x3b4, 0xfffffffffffff350, 0xfffffffffffffffe, 0x100000001}, &(0x7f00000002c0)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000300)={[0x80]}, 0x8}) r5 = syz_io_uring_setup(0x7431, &(0x7f0000000380)={0x0, 0x8043, 0x53ae390bf5aa1ad2, 0x0, 0x324}, &(0x7f0000ff4000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000400)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r0, r7, &(0x7f00000004c0)=@IORING_OP_OPENAT={0x12, 0x5, 0x0, r4, 0x0, &(0x7f0000000480)='./file0\x00', 0x20, 0x800, 0x12345}, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000500)={@loopback, @multicast2}, &(0x7f0000000540)=0xc) clock_gettime(0x0, &(0x7f00000005c0)={0x0, 0x0}) semtimedop(0x0, &(0x7f0000000580)=[{0x0, 0x81, 0x800}, {0x1, 0x6, 0x800}, {0x4, 0x4, 0x1000}], 0x3, &(0x7f0000000600)={r8, r9+60000000}) getsockname(0xffffffffffffffff, &(0x7f0000000640)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, &(0x7f00000006c0)=0x80) fsetxattr$trusted_overlay_origin(r4, &(0x7f0000000700), &(0x7f0000000740), 0x2, 0x1) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000780)='./file0\x00', 0x1000007) r11 = syz_io_uring_complete(r6) read$snapshot(r11, &(0x7f00000007c0)=""/203, 0xcb) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r5, 0xf501, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r10, 0x6, 0x13, &(0x7f00000008c0), 0x4) 16:59:07 executing program 7: clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) semtimedop(0xffffffffffffffff, &(0x7f0000000000)=[{0x4, 0x1000, 0x1c00}, {0x4, 0xdb}, {0x3, 0x81, 0x800}, {0x4, 0x5}], 0x4, &(0x7f0000000080)={r0, r1+10000000}) clock_getres(0x0, &(0x7f00000000c0)) clock_getres(0x6, &(0x7f0000000100)) r2 = syz_open_dev$loop(&(0x7f0000000140), 0x9, 0x40a00) socketpair(0x26, 0x80000, 0x2, &(0x7f0000000180)={0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_SPLICE={0x1e, 0x2, 0x0, @fd=r2, 0x961, {}, 0x9, 0x8, 0x0, {0x0, 0x0, r3}}, 0x1) clock_getres(0x6, &(0x7f0000000200)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1800005, 0x8010, 0xffffffffffffffff, 0x0) r5 = syz_io_uring_complete(r4) clock_gettime(0x0, &(0x7f0000000240)) socketpair(0x1f, 0x800, 0x9, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_timeval(r6, 0x1, 0x43, &(0x7f00000002c0), &(0x7f0000000300)=0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000340)={'vcan0\x00'}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x1010, r2, 0x95fc4000) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) semtimedop(0xffffffffffffffff, &(0x7f0000000380)=[{0x4, 0xf838, 0x1000}, {0x3, 0x5, 0x800}], 0x2, &(0x7f0000000400)={r7, r8+10000000}) clock_getres(0x2, &(0x7f0000000440)) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x2400, 0x467) ioctl$SNAPSHOT_UNFREEZE(r5, 0x3302) 16:59:07 executing program 5: r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @initdev}}, &(0x7f0000000080)=0x80) getresgid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)=0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0xee01, r1}}, './file0\x00'}) ioctl$HIDIOCAPPLICATION(r2, 0x4802, 0xfc) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x5}, 0x7) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$addseals(r3, 0x409, 0x1) ioctl$BTRFS_IOC_QGROUP_CREATE(r3, 0x4010942a, &(0x7f0000000200)={0x0, 0x346}) prctl$PR_CAP_AMBIENT(0x2f, 0x3, 0x6) ioctl$HIDIOCGVERSION(0xffffffffffffffff, 0x80044801, &(0x7f0000000240)) ioctl$BTRFS_IOC_LOGICAL_INO(r3, 0xc0389424, &(0x7f00000002c0)={0xffff, 0x8, '\x00', 0x0, &(0x7f0000000280)=[0x0]}) r4 = memfd_secret(0x80000) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r4, 0x3309) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vxcan1\x00'}) r5 = accept4(r3, &(0x7f0000000340)=@sco={0x1f, @fixed}, &(0x7f00000003c0)=0x80, 0x0) ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, &(0x7f0000000400)={0x8, 0x10001, 0x4, 0x4, 0x5, [{0x0, 0x4fc, 0x683b, '\x00', 0x1801}, {0xba8, 0x7fffffff, 0x81, '\x00', 0x6}, {0x2, 0x6, 0x2, '\x00', 0x8}, {0x4, 0x80000001, 0x0, '\x00', 0x2}, {0x1, 0x0, 0x10000, '\x00', 0x1400}]}) ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f0000000580)={0x2, 0x38, '\x00', 0x1, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r6 = signalfd(r2, &(0x7f00000005c0)={[0x100000001]}, 0x8) ioctl$HIDIOCGCOLLECTIONINFO(r6, 0xc0104811, &(0x7f0000000600)={0x0, 0x7, 0xe2af, 0x80000001}) 16:59:07 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LIST_PHY(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x40) sendmsg$SOCK_DESTROY(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000600)={&(0x7f0000000140)={0x48c, 0x15, 0x100, 0x70bd25, 0x25dfdbff, {0xa, 0x91}, [@INET_DIAG_REQ_BYTECODE={0xca, 0x1, "0cd9b639207bc00d4d818f0ef739eb371513327730c58ddde0985b32065d8e3bafdbc2586d6c2d8b24a2611cc8d79d4346e6758017670597be9566e533e68b8eceaf9f877fc5669a30ee4251e61559ad3fd7bd72abc02bb4d2474c8b3a7e1e333cab711b2cc1b5997e58edc267d430c95807bd9d41fd99c379d65de4db793224e299641ee58b275bf31b853b6ecd0bbfb571e491ca5a4fac46c1d626e2e7d74ad2030c120b35b069e6dda3d2808994e443b5ab1a4c5e9ed9fe09ec91ea478b01b1ba9bbdd737"}, @INET_DIAG_REQ_BYTECODE={0xee, 0x1, "a9dd60c307218e02c59f9691e88bc6d0aa8638686de7fd4cba5ca4563c5c8f0854f5417f6d1a812624d39db8547284634c22a657b1398476f6af3ebe8a948c8cb00079ed73b2f1c2fd5cf6808f04715eff2d8fc4c0bf3fa7fac298d746c8cf6811926a7488f607e15b6a6e335c1f9f7d3428ea2d36766b8674585c2a789f45c257cbf6266f28ef89987a5fa81fce25a525b0edfcf7d9e91f8377b1dc990b4aa805ca407f59f1fefc114727258a82da0a70414e8ffd934d01ded0297fc02b91398dedf939a347c088709bf2eba853d6144afaeee36a0c9ad866f9939a8ce920e7e185f3a0282eb2c7a8db"}, @INET_DIAG_REQ_BYTECODE={0x6a, 0x1, "603269aaf19ffb5bb34334192a17f5b13dd049499d3dd20f2627eef3ab42c707e64def9b18b09ddb3a3d9a4213c2f63e38d5d9f4ffea0b9ae410489bbe78a1b5f8283d177cdfc43152abdfa3bf5473f3b5944e99f9a85c7842bf3bf39e79ebfefa5115e613a4"}, @INET_DIAG_REQ_BYTECODE={0x9f, 0x1, "33b3bb6fa233f52b9f994daedaea42986f9405986575c79e2953c6d01ceabe421b6e6f70f19e3e36d7498780b43802b6490089ea42d49102ff26620f045888ac29aedc1cdf11e8020f295119e410559275f53d50059306ef5b1b496b693ed34bc8eb9fa3e10e84947672146468e467e8142610c51f197bc8e942cf3f4ed73623d9eaa4bc2aa3a72eba287e469892ad66e1d9755b66ffb92f4b9a49"}, @INET_DIAG_REQ_BYTECODE={0x83, 0x1, "96ab4b3a91fcc2b1af3c3d584d06adf087fbd12b6ff52be3015bb79a4d82e20e307e35d4f10da40cfc41683689eae004e9e9d8251020abf80cfc16d094792f78614a223e8c0d81cc28f91190f085ddacabe55e3b4095ff53956533af609af431736494dc5b141d08a1a6357bc58d8826fa8465f6db9c62139de5070b7f417e"}, @INET_DIAG_REQ_BYTECODE={0xab, 0x1, "f534b8aa7aeba4baa212b49fd1bc9297f5f0705cbf7d30f2f78c4ad58d39ebbcc204b4f0e9606cfbd817b09a0ddb496ed5a9c14fd14bdc7de89c5a445d4fe370078ee662fca5d6d8712f6b6869d4cbcb3bbb0be1f988bdc40ee0875ae96790163febf1d8cc67baae8055f1fe90ca6d179f9f08a44701bd4a6e47722b817a25a77f122149965a27af83ff295aa01b8c8920f956feb01a0d82ccc6d882c189bf24a99873a38acc53"}, @INET_DIAG_REQ_BYTECODE={0x49, 0x1, "c830c3d577b0a6d5a861ca2477ca24d1ca5e19b048daabd3a5f2f7bb22175cc8ab55a837fe20c883ad54c40aaff5a25d222e8489323d26a58c5a9e534637f87b4ae2cbf62d"}, @INET_DIAG_REQ_BYTECODE={0x19, 0x1, "08a14b1d38bc3bd0d09b4d1e38ca18531afff796b4"}, @INET_DIAG_REQ_BYTECODE={0x18, 0x1, "7ddccd96835d626628938650e031ef98ccd4023c"}]}, 0x48c}, 0x1, 0x0, 0x0, 0x8040}, 0x20048004) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r0) sendmsg$IEEE802154_LIST_PHY(r0, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14, r1, 0x4, 0x70bd2a, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x801}, 0x2000c040) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r0) sendmsg$IEEE802154_LIST_PHY(r2, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14, r3, 0x404, 0x70bd2d, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4040810}, 0x20000040) r4 = signalfd(0xffffffffffffffff, &(0x7f0000000900)={[0x401]}, 0x8) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f0000000940)={0x0, 0x80, 0xfe, 0xf7, 0x8, 0x8, 0x0, 0x0, 0x81c0, 0x8, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x0, @perf_config_ext={0x0, 0x3000000000000}, 0xc0, 0x80000000, 0x3, 0x7, 0x1, 0x9, 0x4, 0x0, 0x1ff, 0x0, 0xfff}) sendmsg$SOCK_DESTROY(r4, &(0x7f0000000c00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x7faf765b7275150f}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000a00)={0x1a4, 0x15, 0x1, 0x70bd29, 0x25dfdbfd, {0x21, 0x20}, [@INET_DIAG_REQ_BYTECODE={0xca, 0x1, "4cfe854d53fb01f6d6328bd3cff2fc13116164a425784fc2b8a3782641ebfc45dbb9bf53df97065dc40906479d2a71449f20f398c9408daf0fd45079d1bbdb13b3e05964370480028efb0f21383153796adfe2cde36e2b168065a1bb3f54f31343be958d9353ad58c8d2752458d5fc7a18ae05d4539093dc0845aaf4b72b4c777689c8a80f35c4d81d6e9acf9866f29809bb7c241e91e92ce93605a2064f966df27eaf9424ffb194c96bc079877affd6f38f9e556d5d972c295f06423dca59f9b63ea4c30247"}, @INET_DIAG_REQ_BYTECODE={0xc1, 0x1, "4db6886a6338a219944e3ed3f39cebdbf6fe60a89b2952f21815d09dd9694c24ef38025351c0e0d8d7d659fe83ce83b5c502d326e74bbc3ca3597e8ebdce2ca7dd923fc729235f9c55bec5b1d97652364a1f4c43f1fcf722ab754a504d64452739690105705256c9aaac5171c77fe8ce23f9c34817d2c7c2c539d8f8a277cfc3e995ca6eb26c2d1e92a650b1ea8c22dd5132e5a7460339ee12f51890f431647dbad9fa8dbd3f6dccb52d520c50de8df36282e5885324d96b89a82c5d2a"}]}, 0x1a4}}, 0x80) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x7fff8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000c40)=@IORING_OP_FSYNC={0x3, 0x4, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xd36) r5 = accept(r4, &(0x7f0000000c80)=@l2tp={0x2, 0x0, @dev}, &(0x7f0000000d00)=0x80) getsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000e40)={@empty, @rand_addr, 0x0}, &(0x7f0000000e80)=0xc) sendmsg$WG_CMD_GET_DEVICE(r5, &(0x7f0000000f80)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000f40)={&(0x7f0000000ec0)={0x48, 0x0, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r6}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x52a0}]}, 0x48}, 0x1, 0x0, 0x0, 0x6000040}, 0x810) getsockopt$inet_tcp_buf(r5, 0x6, 0x0, &(0x7f0000000fc0), &(0x7f0000001000)) syz_genetlink_get_family_id$ieee802154(&(0x7f0000001040), r0) 16:59:07 executing program 2: r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x40840, 0x0) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xee01, 0xee01}}, './file0\x00'}) r3 = dup2(r0, r0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r3) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r1, 0xf501, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000080)={0x4, 0x41, 0x1d}, &(0x7f00000000c0)='./file0\x00', 0x18, 0x0, 0x23456}, 0x6) r4 = socket$inet(0x2, 0x4, 0xb6e0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r4, 0xf505, 0x0) getsockopt$inet_mreqn(r3, 0x0, 0x7, &(0x7f0000000180)={@multicast2, @initdev, 0x0}, &(0x7f00000001c0)=0xc) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0xb4, 0x0, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x80}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xee}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}]}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x81}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}]}, 0xb4}, 0x1, 0x0, 0x0, 0x24000005}, 0x40800) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000000340)={{0x1, 0x1, 0x18, r3, {0xee01, r2}}, './file0\x00'}) setsockopt$inet_tcp_buf(r6, 0x6, 0x21, &(0x7f0000000380)="2a35c6b2b4e31b346262c7bd54df746be683669cac9292056fb41cca0a14f0aabc2810d0402930c93c29fe45b5b721c031270997db4c624165db868938c5855dc2c60f4d019e262628a3abb42c9aaaacf94217f22988e07d", 0x58) ioctl$AUTOFS_IOC_SETTIMEOUT(r6, 0x80049367, &(0x7f0000000400)=0x3ff) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000440)=0x4) r7 = syz_open_dev$loop(&(0x7f0000000480), 0xae1f, 0x8002) r8 = timerfd_create(0x4, 0x80000) r9 = dup2(r7, r8) ioctl$HIDIOCSUSAGE(r9, 0x4018480c, &(0x7f00000004c0)={0x3, 0x200, 0x1, 0x0, 0x400, 0xfffffffb}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000500)={{0x1, 0x1, 0x18, r1}, './file0/file0\x00'}) 16:59:07 executing program 6: semctl$IPC_STAT(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000000)=""/6) semctl$SETALL(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)=[0x3ff, 0x3]) semctl$SETALL(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000080)=[0x7fff, 0x20, 0x5]) r0 = semget$private(0x0, 0x2, 0x20) semop(r0, &(0x7f00000000c0)=[{0x4, 0xe8b}, {0x2, 0x1, 0x1000}, {0x3, 0x1, 0x1800}, {0x3, 0x4000, 0x1000}], 0x4) r1 = semget$private(0x0, 0x0, 0x0) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000100)=[0x0, 0x0, 0x8001, 0x400, 0x1, 0x9, 0x5, 0xfffa, 0xff, 0xf90]) semctl$GETPID(r0, 0x2, 0xb, &(0x7f0000000140)=""/73) semctl$GETZCNT(r1, 0x3, 0xf, &(0x7f00000001c0)=""/54) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x60a82, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x9, 0x4000010, r2, 0xcfe53000) ioctl$F2FS_IOC_RESIZE_FS(r2, 0x4008f510, &(0x7f0000000240)=0xffffffff) semget$private(0x0, 0x2, 0x10) 16:59:07 executing program 2: r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x40840, 0x0) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xee01, 0xee01}}, './file0\x00'}) r3 = dup2(r0, r0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r3) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r1, 0xf501, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000080)={0x4, 0x41, 0x1d}, &(0x7f00000000c0)='./file0\x00', 0x18, 0x0, 0x23456}, 0x6) r4 = socket$inet(0x2, 0x4, 0xb6e0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r4, 0xf505, 0x0) getsockopt$inet_mreqn(r3, 0x0, 0x7, &(0x7f0000000180)={@multicast2, @initdev, 0x0}, &(0x7f00000001c0)=0xc) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0xb4, 0x0, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x80}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xee}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}]}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x81}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}]}, 0xb4}, 0x1, 0x0, 0x0, 0x24000005}, 0x40800) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000000340)={{0x1, 0x1, 0x18, r3, {0xee01, r2}}, './file0\x00'}) setsockopt$inet_tcp_buf(r6, 0x6, 0x21, &(0x7f0000000380)="2a35c6b2b4e31b346262c7bd54df746be683669cac9292056fb41cca0a14f0aabc2810d0402930c93c29fe45b5b721c031270997db4c624165db868938c5855dc2c60f4d019e262628a3abb42c9aaaacf94217f22988e07d", 0x58) ioctl$AUTOFS_IOC_SETTIMEOUT(r6, 0x80049367, &(0x7f0000000400)=0x3ff) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000440)=0x4) r7 = syz_open_dev$loop(&(0x7f0000000480), 0xae1f, 0x8002) r8 = timerfd_create(0x4, 0x80000) r9 = dup2(r7, r8) ioctl$HIDIOCSUSAGE(r9, 0x4018480c, &(0x7f00000004c0)={0x3, 0x200, 0x1, 0x0, 0x400, 0xfffffffb}) 16:59:07 executing program 5: r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @initdev}}, &(0x7f0000000080)=0x80) getresgid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)=0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0xee01, r1}}, './file0\x00'}) ioctl$HIDIOCAPPLICATION(r2, 0x4802, 0xfc) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x5}, 0x7) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$addseals(r3, 0x409, 0x1) ioctl$BTRFS_IOC_QGROUP_CREATE(r3, 0x4010942a, &(0x7f0000000200)={0x0, 0x346}) prctl$PR_CAP_AMBIENT(0x2f, 0x3, 0x6) ioctl$HIDIOCGVERSION(0xffffffffffffffff, 0x80044801, &(0x7f0000000240)) ioctl$BTRFS_IOC_LOGICAL_INO(r3, 0xc0389424, &(0x7f00000002c0)={0xffff, 0x8, '\x00', 0x0, &(0x7f0000000280)=[0x0]}) r4 = memfd_secret(0x80000) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r4, 0x3309) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vxcan1\x00'}) r5 = accept4(r3, &(0x7f0000000340)=@sco={0x1f, @fixed}, &(0x7f00000003c0)=0x80, 0x0) ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, &(0x7f0000000400)={0x8, 0x10001, 0x4, 0x4, 0x5, [{0x0, 0x4fc, 0x683b, '\x00', 0x1801}, {0xba8, 0x7fffffff, 0x81, '\x00', 0x6}, {0x2, 0x6, 0x2, '\x00', 0x8}, {0x4, 0x80000001, 0x0, '\x00', 0x2}, {0x1, 0x0, 0x10000, '\x00', 0x1400}]}) ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f0000000580)={0x2, 0x38, '\x00', 0x1, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) signalfd(r2, &(0x7f00000005c0)={[0x100000001]}, 0x8) 16:59:07 executing program 0: syz_io_uring_setup(0x5aea, &(0x7f0000000000)={0x0, 0x2, 0x8, 0x1, 0x39c}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) syz_io_uring_submit(0x0, r1, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x6, &(0x7f0000000140)={r2, r3+60000000}, 0x1, 0x1, 0x1}, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x0, 0x30, r4, 0x9c6ca000) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r4, 0x40089413, &(0x7f00000001c0)=0xb24c) pselect6(0x40, &(0x7f0000000200)={0xffffffff, 0x8, 0x3ff, 0x6, 0x10001, 0xfffffffffffffff7, 0x4000000040000000, 0x3}, &(0x7f0000000240)={0x20000000000, 0x3dd, 0x7ff, 0x1f, 0xfffffffffffffffb, 0x2, 0xa9c, 0x2}, &(0x7f0000000280)={0x9, 0x5, 0x7, 0x5, 0x3b4, 0xfffffffffffff350, 0xfffffffffffffffe, 0x100000001}, &(0x7f00000002c0)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000300)={[0x80]}, 0x8}) r5 = syz_io_uring_setup(0x7431, &(0x7f0000000380)={0x0, 0x8043, 0x53ae390bf5aa1ad2, 0x0, 0x324}, &(0x7f0000ff4000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000400)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r0, r7, &(0x7f00000004c0)=@IORING_OP_OPENAT={0x12, 0x5, 0x0, r4, 0x0, &(0x7f0000000480)='./file0\x00', 0x20, 0x800, 0x12345}, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000500)={@loopback, @multicast2}, &(0x7f0000000540)=0xc) clock_gettime(0x0, &(0x7f00000005c0)={0x0, 0x0}) semtimedop(0x0, &(0x7f0000000580)=[{0x0, 0x81, 0x800}, {0x1, 0x6, 0x800}, {0x4, 0x4, 0x1000}], 0x3, &(0x7f0000000600)={r8, r9+60000000}) getsockname(0xffffffffffffffff, &(0x7f0000000640)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, &(0x7f00000006c0)=0x80) fsetxattr$trusted_overlay_origin(r4, &(0x7f0000000700), &(0x7f0000000740), 0x2, 0x1) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000780)='./file0\x00', 0x1000007) r10 = syz_io_uring_complete(r6) read$snapshot(r10, &(0x7f00000007c0)=""/203, 0xcb) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r5, 0xf501, 0x0) 16:59:07 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LIST_PHY(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x40) sendmsg$SOCK_DESTROY(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000600)={&(0x7f0000000140)={0x48c, 0x15, 0x100, 0x70bd25, 0x25dfdbff, {0xa, 0x91}, [@INET_DIAG_REQ_BYTECODE={0xca, 0x1, "0cd9b639207bc00d4d818f0ef739eb371513327730c58ddde0985b32065d8e3bafdbc2586d6c2d8b24a2611cc8d79d4346e6758017670597be9566e533e68b8eceaf9f877fc5669a30ee4251e61559ad3fd7bd72abc02bb4d2474c8b3a7e1e333cab711b2cc1b5997e58edc267d430c95807bd9d41fd99c379d65de4db793224e299641ee58b275bf31b853b6ecd0bbfb571e491ca5a4fac46c1d626e2e7d74ad2030c120b35b069e6dda3d2808994e443b5ab1a4c5e9ed9fe09ec91ea478b01b1ba9bbdd737"}, @INET_DIAG_REQ_BYTECODE={0xee, 0x1, "a9dd60c307218e02c59f9691e88bc6d0aa8638686de7fd4cba5ca4563c5c8f0854f5417f6d1a812624d39db8547284634c22a657b1398476f6af3ebe8a948c8cb00079ed73b2f1c2fd5cf6808f04715eff2d8fc4c0bf3fa7fac298d746c8cf6811926a7488f607e15b6a6e335c1f9f7d3428ea2d36766b8674585c2a789f45c257cbf6266f28ef89987a5fa81fce25a525b0edfcf7d9e91f8377b1dc990b4aa805ca407f59f1fefc114727258a82da0a70414e8ffd934d01ded0297fc02b91398dedf939a347c088709bf2eba853d6144afaeee36a0c9ad866f9939a8ce920e7e185f3a0282eb2c7a8db"}, @INET_DIAG_REQ_BYTECODE={0x6a, 0x1, "603269aaf19ffb5bb34334192a17f5b13dd049499d3dd20f2627eef3ab42c707e64def9b18b09ddb3a3d9a4213c2f63e38d5d9f4ffea0b9ae410489bbe78a1b5f8283d177cdfc43152abdfa3bf5473f3b5944e99f9a85c7842bf3bf39e79ebfefa5115e613a4"}, @INET_DIAG_REQ_BYTECODE={0x9f, 0x1, "33b3bb6fa233f52b9f994daedaea42986f9405986575c79e2953c6d01ceabe421b6e6f70f19e3e36d7498780b43802b6490089ea42d49102ff26620f045888ac29aedc1cdf11e8020f295119e410559275f53d50059306ef5b1b496b693ed34bc8eb9fa3e10e84947672146468e467e8142610c51f197bc8e942cf3f4ed73623d9eaa4bc2aa3a72eba287e469892ad66e1d9755b66ffb92f4b9a49"}, @INET_DIAG_REQ_BYTECODE={0x83, 0x1, "96ab4b3a91fcc2b1af3c3d584d06adf087fbd12b6ff52be3015bb79a4d82e20e307e35d4f10da40cfc41683689eae004e9e9d8251020abf80cfc16d094792f78614a223e8c0d81cc28f91190f085ddacabe55e3b4095ff53956533af609af431736494dc5b141d08a1a6357bc58d8826fa8465f6db9c62139de5070b7f417e"}, @INET_DIAG_REQ_BYTECODE={0xab, 0x1, "f534b8aa7aeba4baa212b49fd1bc9297f5f0705cbf7d30f2f78c4ad58d39ebbcc204b4f0e9606cfbd817b09a0ddb496ed5a9c14fd14bdc7de89c5a445d4fe370078ee662fca5d6d8712f6b6869d4cbcb3bbb0be1f988bdc40ee0875ae96790163febf1d8cc67baae8055f1fe90ca6d179f9f08a44701bd4a6e47722b817a25a77f122149965a27af83ff295aa01b8c8920f956feb01a0d82ccc6d882c189bf24a99873a38acc53"}, @INET_DIAG_REQ_BYTECODE={0x49, 0x1, "c830c3d577b0a6d5a861ca2477ca24d1ca5e19b048daabd3a5f2f7bb22175cc8ab55a837fe20c883ad54c40aaff5a25d222e8489323d26a58c5a9e534637f87b4ae2cbf62d"}, @INET_DIAG_REQ_BYTECODE={0x19, 0x1, "08a14b1d38bc3bd0d09b4d1e38ca18531afff796b4"}, @INET_DIAG_REQ_BYTECODE={0x18, 0x1, "7ddccd96835d626628938650e031ef98ccd4023c"}]}, 0x48c}, 0x1, 0x0, 0x0, 0x8040}, 0x20048004) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r0) sendmsg$IEEE802154_LIST_PHY(r0, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14, r1, 0x4, 0x70bd2a, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x801}, 0x2000c040) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r0) sendmsg$IEEE802154_LIST_PHY(r2, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14, r3, 0x404, 0x70bd2d, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4040810}, 0x20000040) r4 = signalfd(0xffffffffffffffff, &(0x7f0000000900)={[0x401]}, 0x8) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f0000000940)={0x0, 0x80, 0xfe, 0xf7, 0x8, 0x8, 0x0, 0x0, 0x81c0, 0x8, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x0, @perf_config_ext={0x0, 0x3000000000000}, 0xc0, 0x80000000, 0x3, 0x7, 0x1, 0x9, 0x4, 0x0, 0x1ff, 0x0, 0xfff}) sendmsg$SOCK_DESTROY(r4, &(0x7f0000000c00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x7faf765b7275150f}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000a00)={0x1a4, 0x15, 0x1, 0x70bd29, 0x25dfdbfd, {0x21, 0x20}, [@INET_DIAG_REQ_BYTECODE={0xca, 0x1, "4cfe854d53fb01f6d6328bd3cff2fc13116164a425784fc2b8a3782641ebfc45dbb9bf53df97065dc40906479d2a71449f20f398c9408daf0fd45079d1bbdb13b3e05964370480028efb0f21383153796adfe2cde36e2b168065a1bb3f54f31343be958d9353ad58c8d2752458d5fc7a18ae05d4539093dc0845aaf4b72b4c777689c8a80f35c4d81d6e9acf9866f29809bb7c241e91e92ce93605a2064f966df27eaf9424ffb194c96bc079877affd6f38f9e556d5d972c295f06423dca59f9b63ea4c30247"}, @INET_DIAG_REQ_BYTECODE={0xc1, 0x1, "4db6886a6338a219944e3ed3f39cebdbf6fe60a89b2952f21815d09dd9694c24ef38025351c0e0d8d7d659fe83ce83b5c502d326e74bbc3ca3597e8ebdce2ca7dd923fc729235f9c55bec5b1d97652364a1f4c43f1fcf722ab754a504d64452739690105705256c9aaac5171c77fe8ce23f9c34817d2c7c2c539d8f8a277cfc3e995ca6eb26c2d1e92a650b1ea8c22dd5132e5a7460339ee12f51890f431647dbad9fa8dbd3f6dccb52d520c50de8df36282e5885324d96b89a82c5d2a"}]}, 0x1a4}}, 0x80) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x7fff8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000c40)=@IORING_OP_FSYNC={0x3, 0x4, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xd36) r5 = accept(r4, &(0x7f0000000c80)=@l2tp={0x2, 0x0, @dev}, &(0x7f0000000d00)=0x80) getsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000e40)={@empty, @rand_addr, 0x0}, &(0x7f0000000e80)=0xc) sendmsg$WG_CMD_GET_DEVICE(r5, &(0x7f0000000f80)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000f40)={&(0x7f0000000ec0)={0x48, 0x0, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r6}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x52a0}]}, 0x48}, 0x1, 0x0, 0x0, 0x6000040}, 0x810) getsockopt$inet_tcp_buf(r5, 0x6, 0x0, &(0x7f0000000fc0), &(0x7f0000001000)) 16:59:07 executing program 6: semctl$IPC_STAT(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000000)=""/6) semctl$SETALL(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)=[0x3ff, 0x3]) semctl$SETALL(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000080)=[0x7fff, 0x20, 0x5]) r0 = semget$private(0x0, 0x2, 0x20) semop(r0, &(0x7f00000000c0)=[{0x4, 0xe8b}, {0x2, 0x1, 0x1000}, {0x3, 0x1, 0x1800}, {0x3, 0x4000, 0x1000}], 0x4) r1 = semget$private(0x0, 0x0, 0x0) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000100)=[0x0, 0x0, 0x8001, 0x400, 0x1, 0x9, 0x5, 0xfffa, 0xff, 0xf90]) semctl$GETPID(r0, 0x2, 0xb, &(0x7f0000000140)=""/73) semctl$GETZCNT(r1, 0x3, 0xf, &(0x7f00000001c0)=""/54) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x60a82, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x9, 0x4000010, r2, 0xcfe53000) semget$private(0x0, 0x2, 0x10) 16:59:16 executing program 7: clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) semtimedop(0xffffffffffffffff, &(0x7f0000000000)=[{0x4, 0x1000, 0x1c00}, {0x4, 0xdb}, {0x3, 0x81, 0x800}, {0x4, 0x5}], 0x4, &(0x7f0000000080)={r0, r1+10000000}) clock_getres(0x0, &(0x7f00000000c0)) clock_getres(0x6, &(0x7f0000000100)) r2 = syz_open_dev$loop(&(0x7f0000000140), 0x9, 0x40a00) socketpair(0x26, 0x80000, 0x2, &(0x7f0000000180)={0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_SPLICE={0x1e, 0x2, 0x0, @fd=r2, 0x961, {}, 0x9, 0x8, 0x0, {0x0, 0x0, r3}}, 0x1) clock_getres(0x6, &(0x7f0000000200)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1800005, 0x8010, 0xffffffffffffffff, 0x0) r5 = syz_io_uring_complete(r4) clock_gettime(0x0, &(0x7f0000000240)) socketpair(0x1f, 0x800, 0x9, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_timeval(r6, 0x1, 0x43, &(0x7f00000002c0), &(0x7f0000000300)=0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000340)={'vcan0\x00'}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x1010, r2, 0x95fc4000) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) semtimedop(0xffffffffffffffff, &(0x7f0000000380)=[{0x4, 0xf838, 0x1000}, {0x3, 0x5, 0x800}], 0x2, &(0x7f0000000400)={r7, r8+10000000}) clock_getres(0x2, &(0x7f0000000440)) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x2400, 0x467) ioctl$SNAPSHOT_UNFREEZE(r5, 0x3302) 16:59:16 executing program 2: r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x40840, 0x0) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xee01, 0xee01}}, './file0\x00'}) r3 = dup2(r0, r0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r3) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r1, 0xf501, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000080)={0x4, 0x41, 0x1d}, &(0x7f00000000c0)='./file0\x00', 0x18, 0x0, 0x23456}, 0x6) r4 = socket$inet(0x2, 0x4, 0xb6e0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r4, 0xf505, 0x0) getsockopt$inet_mreqn(r3, 0x0, 0x7, &(0x7f0000000180)={@multicast2, @initdev, 0x0}, &(0x7f00000001c0)=0xc) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0xb4, 0x0, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x80}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xee}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}]}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x81}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}]}, 0xb4}, 0x1, 0x0, 0x0, 0x24000005}, 0x40800) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000000340)={{0x1, 0x1, 0x18, r3, {0xee01, r2}}, './file0\x00'}) setsockopt$inet_tcp_buf(r6, 0x6, 0x21, &(0x7f0000000380)="2a35c6b2b4e31b346262c7bd54df746be683669cac9292056fb41cca0a14f0aabc2810d0402930c93c29fe45b5b721c031270997db4c624165db868938c5855dc2c60f4d019e262628a3abb42c9aaaacf94217f22988e07d", 0x58) ioctl$AUTOFS_IOC_SETTIMEOUT(r6, 0x80049367, &(0x7f0000000400)=0x3ff) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000440)=0x4) r7 = syz_open_dev$loop(&(0x7f0000000480), 0xae1f, 0x8002) r8 = timerfd_create(0x4, 0x80000) dup2(r7, r8) 16:59:16 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LIST_PHY(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x40) sendmsg$SOCK_DESTROY(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000600)={&(0x7f0000000140)={0x48c, 0x15, 0x100, 0x70bd25, 0x25dfdbff, {0xa, 0x91}, [@INET_DIAG_REQ_BYTECODE={0xca, 0x1, "0cd9b639207bc00d4d818f0ef739eb371513327730c58ddde0985b32065d8e3bafdbc2586d6c2d8b24a2611cc8d79d4346e6758017670597be9566e533e68b8eceaf9f877fc5669a30ee4251e61559ad3fd7bd72abc02bb4d2474c8b3a7e1e333cab711b2cc1b5997e58edc267d430c95807bd9d41fd99c379d65de4db793224e299641ee58b275bf31b853b6ecd0bbfb571e491ca5a4fac46c1d626e2e7d74ad2030c120b35b069e6dda3d2808994e443b5ab1a4c5e9ed9fe09ec91ea478b01b1ba9bbdd737"}, @INET_DIAG_REQ_BYTECODE={0xee, 0x1, "a9dd60c307218e02c59f9691e88bc6d0aa8638686de7fd4cba5ca4563c5c8f0854f5417f6d1a812624d39db8547284634c22a657b1398476f6af3ebe8a948c8cb00079ed73b2f1c2fd5cf6808f04715eff2d8fc4c0bf3fa7fac298d746c8cf6811926a7488f607e15b6a6e335c1f9f7d3428ea2d36766b8674585c2a789f45c257cbf6266f28ef89987a5fa81fce25a525b0edfcf7d9e91f8377b1dc990b4aa805ca407f59f1fefc114727258a82da0a70414e8ffd934d01ded0297fc02b91398dedf939a347c088709bf2eba853d6144afaeee36a0c9ad866f9939a8ce920e7e185f3a0282eb2c7a8db"}, @INET_DIAG_REQ_BYTECODE={0x6a, 0x1, "603269aaf19ffb5bb34334192a17f5b13dd049499d3dd20f2627eef3ab42c707e64def9b18b09ddb3a3d9a4213c2f63e38d5d9f4ffea0b9ae410489bbe78a1b5f8283d177cdfc43152abdfa3bf5473f3b5944e99f9a85c7842bf3bf39e79ebfefa5115e613a4"}, @INET_DIAG_REQ_BYTECODE={0x9f, 0x1, "33b3bb6fa233f52b9f994daedaea42986f9405986575c79e2953c6d01ceabe421b6e6f70f19e3e36d7498780b43802b6490089ea42d49102ff26620f045888ac29aedc1cdf11e8020f295119e410559275f53d50059306ef5b1b496b693ed34bc8eb9fa3e10e84947672146468e467e8142610c51f197bc8e942cf3f4ed73623d9eaa4bc2aa3a72eba287e469892ad66e1d9755b66ffb92f4b9a49"}, @INET_DIAG_REQ_BYTECODE={0x83, 0x1, "96ab4b3a91fcc2b1af3c3d584d06adf087fbd12b6ff52be3015bb79a4d82e20e307e35d4f10da40cfc41683689eae004e9e9d8251020abf80cfc16d094792f78614a223e8c0d81cc28f91190f085ddacabe55e3b4095ff53956533af609af431736494dc5b141d08a1a6357bc58d8826fa8465f6db9c62139de5070b7f417e"}, @INET_DIAG_REQ_BYTECODE={0xab, 0x1, "f534b8aa7aeba4baa212b49fd1bc9297f5f0705cbf7d30f2f78c4ad58d39ebbcc204b4f0e9606cfbd817b09a0ddb496ed5a9c14fd14bdc7de89c5a445d4fe370078ee662fca5d6d8712f6b6869d4cbcb3bbb0be1f988bdc40ee0875ae96790163febf1d8cc67baae8055f1fe90ca6d179f9f08a44701bd4a6e47722b817a25a77f122149965a27af83ff295aa01b8c8920f956feb01a0d82ccc6d882c189bf24a99873a38acc53"}, @INET_DIAG_REQ_BYTECODE={0x49, 0x1, "c830c3d577b0a6d5a861ca2477ca24d1ca5e19b048daabd3a5f2f7bb22175cc8ab55a837fe20c883ad54c40aaff5a25d222e8489323d26a58c5a9e534637f87b4ae2cbf62d"}, @INET_DIAG_REQ_BYTECODE={0x19, 0x1, "08a14b1d38bc3bd0d09b4d1e38ca18531afff796b4"}, @INET_DIAG_REQ_BYTECODE={0x18, 0x1, "7ddccd96835d626628938650e031ef98ccd4023c"}]}, 0x48c}, 0x1, 0x0, 0x0, 0x8040}, 0x20048004) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r0) sendmsg$IEEE802154_LIST_PHY(r0, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14, r1, 0x4, 0x70bd2a, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x801}, 0x2000c040) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r0) sendmsg$IEEE802154_LIST_PHY(r2, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14, r3, 0x404, 0x70bd2d, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4040810}, 0x20000040) r4 = signalfd(0xffffffffffffffff, &(0x7f0000000900)={[0x401]}, 0x8) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f0000000940)={0x0, 0x80, 0xfe, 0xf7, 0x8, 0x8, 0x0, 0x0, 0x81c0, 0x8, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x0, @perf_config_ext={0x0, 0x3000000000000}, 0xc0, 0x80000000, 0x3, 0x7, 0x1, 0x9, 0x4, 0x0, 0x1ff, 0x0, 0xfff}) sendmsg$SOCK_DESTROY(r4, &(0x7f0000000c00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x7faf765b7275150f}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000a00)={0x1a4, 0x15, 0x1, 0x70bd29, 0x25dfdbfd, {0x21, 0x20}, [@INET_DIAG_REQ_BYTECODE={0xca, 0x1, "4cfe854d53fb01f6d6328bd3cff2fc13116164a425784fc2b8a3782641ebfc45dbb9bf53df97065dc40906479d2a71449f20f398c9408daf0fd45079d1bbdb13b3e05964370480028efb0f21383153796adfe2cde36e2b168065a1bb3f54f31343be958d9353ad58c8d2752458d5fc7a18ae05d4539093dc0845aaf4b72b4c777689c8a80f35c4d81d6e9acf9866f29809bb7c241e91e92ce93605a2064f966df27eaf9424ffb194c96bc079877affd6f38f9e556d5d972c295f06423dca59f9b63ea4c30247"}, @INET_DIAG_REQ_BYTECODE={0xc1, 0x1, "4db6886a6338a219944e3ed3f39cebdbf6fe60a89b2952f21815d09dd9694c24ef38025351c0e0d8d7d659fe83ce83b5c502d326e74bbc3ca3597e8ebdce2ca7dd923fc729235f9c55bec5b1d97652364a1f4c43f1fcf722ab754a504d64452739690105705256c9aaac5171c77fe8ce23f9c34817d2c7c2c539d8f8a277cfc3e995ca6eb26c2d1e92a650b1ea8c22dd5132e5a7460339ee12f51890f431647dbad9fa8dbd3f6dccb52d520c50de8df36282e5885324d96b89a82c5d2a"}]}, 0x1a4}}, 0x80) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x7fff8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000c40)=@IORING_OP_FSYNC={0x3, 0x4, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xd36) r5 = accept(r4, &(0x7f0000000c80)=@l2tp={0x2, 0x0, @dev}, &(0x7f0000000d00)=0x80) getsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000e40)={@empty, @rand_addr, 0x0}, &(0x7f0000000e80)=0xc) sendmsg$WG_CMD_GET_DEVICE(r5, &(0x7f0000000f80)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000f40)={&(0x7f0000000ec0)={0x48, 0x0, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r6}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x52a0}]}, 0x48}, 0x1, 0x0, 0x0, 0x6000040}, 0x810) 16:59:16 executing program 1: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xb0, 0xc, 0x4, 0x3, 0x70bd27, 0x25dfdbff, {0xa, 0x0, 0x3}, [@typed={0x99, 0x54, 0x0, 0x0, @binary="09ad6fd39aebcb9f04e7b9e193f80ce86b8d01b15239b3a8fe01f7668c5ae831f3ee64c4423fd56ec16c97cfe4e8edd4d9564e64648ba0223aaace28c4111c0b7bbfc64bde7477038e9e92238dc13ca4899717aa1623d6530ca35983bf7c8aa7c38ba9f2fc9312115f9e4628d433f12d1a3cd376df8110df07e77463f3a2b39094c38fad5fee6edcdd347639fe6df55566dea6a9df"}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4000800}, 0x44) r0 = accept4(0xffffffffffffffff, &(0x7f0000000180)=@sco, &(0x7f0000000200)=0x80, 0x0) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x10001}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x14}, 0x10) r1 = syz_io_uring_complete(0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000340)=@gcm_128={{0x303}, "e16c03e4c960e7dd", "06b7f7ab4488cc76cb38a01ac282329c", "9b97dd55", "dfa407db231e0d3b"}, 0x28) r2 = accept(r0, &(0x7f0000000380)=@isdn, &(0x7f0000000400)=0x80) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000480), r1) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x24, r3, 0x10, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x80091) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r1, 0x80083313, &(0x7f0000000580)) syz_io_uring_submit(0x0, 0x0, &(0x7f00000005c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x10003, 0x1, {0x1}}, 0x600) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000600)={{0x1, 0x1, 0x18, r2, {0xee01}}, './file0\x00'}) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000000640)="0bc1a574bc0e0f151cf3ceb7c89e6b0b", 0x10) sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f00000008c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000880)={&(0x7f00000006c0)={0x1ac, 0x12, 0x100, 0x70bd2a, 0x25dfdbfb, {0x21, 0x3, 0x1, 0xff, {0x4e20, 0x4e22, [0x1fb4, 0x759, 0x9, 0x200], [0x7, 0xffffffc1, 0x3, 0x4], 0x0, [0x8, 0x1]}, 0x3, 0xba0}, [@INET_DIAG_REQ_BYTECODE={0x40, 0x1, "508e09d69f20044a59448cbb598c337357ce34d3ecba3f6ef57d37f19776bdd453fc9093a55016ce841766a81f6f9775d54de6240da7d8c405ff8908"}, @INET_DIAG_REQ_BYTECODE={0x9c, 0x1, "2359aa311b74c8f32a26ac2479a79793b1d2c93628eab673f012e02f25101f320a1f9648e10aa1b4a44daa597ef69ef6f2105ead2b901bfbb19576426086ffc5627290683d107af4d666f66fc40b8cb8cfd22fd89039625d45aff57d635bfb371b9406f2986565193159546ba942e5a367b5afa8d74b7e18ff811fad83d590892c23b27d887a9610f7c543d7462258db04dfc96ffe2bd720"}, @INET_DIAG_REQ_BYTECODE={0x42, 0x1, "5360411156df3c68b88ae69b8a1eb43c4061df25614be83d614f74d4e0932814028f05127546fb0e14c7f6f02f776a7f698897ed76fd037659436df41a05"}, @INET_DIAG_REQ_BYTECODE={0x40, 0x1, "018b8e34cd59f2fd9b556071f88d544f07c69178ad9c91a91c8b837bc60775ff97c57137d06b5b7e7d980e28e1bf63106dc770232d0d6d3448417361"}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40004) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r5) fremovexattr(0xffffffffffffffff, &(0x7f0000000900)=@known='user.incfs.metadata\x00') ioctl$F2FS_IOC_RESIZE_FS(0xffffffffffffffff, 0x4008f510, &(0x7f0000000940)=0x80000001) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000980)={'wg2\x00'}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000009c0)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x5, 0x0, 0x0, 0x0, 0x1}, 0x4) 16:59:16 executing program 5: r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @initdev}}, &(0x7f0000000080)=0x80) getresgid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)=0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0xee01, r1}}, './file0\x00'}) ioctl$HIDIOCAPPLICATION(r2, 0x4802, 0xfc) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x5}, 0x7) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$addseals(r3, 0x409, 0x1) ioctl$BTRFS_IOC_QGROUP_CREATE(r3, 0x4010942a, &(0x7f0000000200)={0x0, 0x346}) prctl$PR_CAP_AMBIENT(0x2f, 0x3, 0x6) ioctl$HIDIOCGVERSION(0xffffffffffffffff, 0x80044801, &(0x7f0000000240)) ioctl$BTRFS_IOC_LOGICAL_INO(r3, 0xc0389424, &(0x7f00000002c0)={0xffff, 0x8, '\x00', 0x0, &(0x7f0000000280)=[0x0]}) r4 = memfd_secret(0x80000) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r4, 0x3309) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vxcan1\x00'}) r5 = accept4(r3, &(0x7f0000000340)=@sco={0x1f, @fixed}, &(0x7f00000003c0)=0x80, 0x0) ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, &(0x7f0000000400)={0x8, 0x10001, 0x4, 0x4, 0x5, [{0x0, 0x4fc, 0x683b, '\x00', 0x1801}, {0xba8, 0x7fffffff, 0x81, '\x00', 0x6}, {0x2, 0x6, 0x2, '\x00', 0x8}, {0x4, 0x80000001, 0x0, '\x00', 0x2}, {0x1, 0x0, 0x10000, '\x00', 0x1400}]}) signalfd(r2, &(0x7f00000005c0)={[0x100000001]}, 0x8) 16:59:16 executing program 6: semctl$IPC_STAT(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000000)=""/6) semctl$SETALL(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)=[0x3ff, 0x3]) semctl$SETALL(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000080)=[0x7fff, 0x20, 0x5]) r0 = semget$private(0x0, 0x2, 0x20) semop(r0, &(0x7f00000000c0)=[{0x4, 0xe8b}, {0x2, 0x1, 0x1000}, {0x3, 0x1, 0x1800}, {0x3, 0x4000, 0x1000}], 0x4) r1 = semget$private(0x0, 0x0, 0x0) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000100)=[0x0, 0x0, 0x8001, 0x400, 0x1, 0x9, 0x5, 0xfffa, 0xff, 0xf90]) semctl$GETPID(r0, 0x2, 0xb, &(0x7f0000000140)=""/73) semctl$GETZCNT(r1, 0x3, 0xf, &(0x7f00000001c0)=""/54) openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x60a82, 0x0) semget$private(0x0, 0x2, 0x10) 16:59:16 executing program 4: fremovexattr(0xffffffffffffffff, &(0x7f0000000000)=@random={'osx.', '%@.\x00'}) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000040)=0x93af) r0 = perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x80, 0x1, 0x5, 0x2, 0x5, 0x0, 0x5, 0x100, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x5, 0x2, @perf_config_ext={0x8, 0x7}, 0x138, 0x8001, 0xa9, 0x7, 0x3ff, 0x1ff, 0x5, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x4) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r0, 0xf505, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$HIDIOCAPPLICATION(r1, 0x4802, 0x2) r2 = perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0xff, 0x0, 0xd1, 0x0, 0x0, 0x0, 0x401, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x2, @perf_config_ext={0x69c, 0x1}, 0x2154, 0x2, 0x3, 0x1, 0x99, 0xffff, 0x1, 0x0, 0x8000, 0x0, 0x3}, 0x0, 0x1, r1, 0x1) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0) r3 = signalfd(r2, &(0x7f00000001c0)={[0x5df5a116]}, 0x8) ioctl$PERF_EVENT_IOC_REFRESH(r3, 0x2402, 0xe1) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000200)) socketpair(0x2b, 0x800, 0xa1, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000000280)="d90d96008de1ffe4f1d2e4b262e7bd9d", 0x10) socketpair(0x15, 0x800, 0x80000001, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r5) r6 = perf_event_open$cgroup(&(0x7f0000000340)={0x0, 0x80, 0x4, 0x89, 0x9d, 0x40, 0x0, 0x2, 0x10, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfff, 0x0, @perf_bp={&(0x7f0000000300), 0x1}, 0x42402, 0x4, 0x6, 0x6, 0x5, 0x1, 0x55, 0x0, 0x21, 0x0, 0x3}, r3, 0x0, 0xffffffffffffffff, 0xd) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x2400, 0x20) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0/file0\x00'}) socket$nl_sock_diag(0x10, 0x3, 0x4) 16:59:16 executing program 0: syz_io_uring_setup(0x5aea, &(0x7f0000000000)={0x0, 0x2, 0x8, 0x1, 0x39c}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) syz_io_uring_submit(0x0, r1, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x6, &(0x7f0000000140)={r2, r3+60000000}, 0x1, 0x1, 0x1}, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x0, 0x30, r4, 0x9c6ca000) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r4, 0x40089413, &(0x7f00000001c0)=0xb24c) pselect6(0x40, &(0x7f0000000200)={0xffffffff, 0x8, 0x3ff, 0x6, 0x10001, 0xfffffffffffffff7, 0x4000000040000000, 0x3}, &(0x7f0000000240)={0x20000000000, 0x3dd, 0x7ff, 0x1f, 0xfffffffffffffffb, 0x2, 0xa9c, 0x2}, &(0x7f0000000280)={0x9, 0x5, 0x7, 0x5, 0x3b4, 0xfffffffffffff350, 0xfffffffffffffffe, 0x100000001}, &(0x7f00000002c0)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000300)={[0x80]}, 0x8}) syz_io_uring_setup(0x7431, &(0x7f0000000380)={0x0, 0x8043, 0x53ae390bf5aa1ad2, 0x0, 0x324}, &(0x7f0000ff4000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000400)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r0, r6, &(0x7f00000004c0)=@IORING_OP_OPENAT={0x12, 0x5, 0x0, r4, 0x0, &(0x7f0000000480)='./file0\x00', 0x20, 0x800, 0x12345}, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000500)={@loopback, @multicast2}, &(0x7f0000000540)=0xc) clock_gettime(0x0, &(0x7f00000005c0)={0x0, 0x0}) semtimedop(0x0, &(0x7f0000000580)=[{0x0, 0x81, 0x800}, {0x1, 0x6, 0x800}, {0x4, 0x4, 0x1000}], 0x3, &(0x7f0000000600)={r7, r8+60000000}) getsockname(0xffffffffffffffff, &(0x7f0000000640)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, &(0x7f00000006c0)=0x80) fsetxattr$trusted_overlay_origin(r4, &(0x7f0000000700), &(0x7f0000000740), 0x2, 0x1) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000780)='./file0\x00', 0x1000007) r9 = syz_io_uring_complete(r5) read$snapshot(r9, &(0x7f00000007c0)=""/203, 0xcb) 16:59:16 executing program 5: r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @initdev}}, &(0x7f0000000080)=0x80) getresgid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)=0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0xee01, r1}}, './file0\x00'}) ioctl$HIDIOCAPPLICATION(r2, 0x4802, 0xfc) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x5}, 0x7) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$addseals(r3, 0x409, 0x1) ioctl$BTRFS_IOC_QGROUP_CREATE(r3, 0x4010942a, &(0x7f0000000200)={0x0, 0x346}) prctl$PR_CAP_AMBIENT(0x2f, 0x3, 0x6) ioctl$HIDIOCGVERSION(0xffffffffffffffff, 0x80044801, &(0x7f0000000240)) ioctl$BTRFS_IOC_LOGICAL_INO(r3, 0xc0389424, &(0x7f00000002c0)={0xffff, 0x8, '\x00', 0x0, &(0x7f0000000280)=[0x0]}) r4 = memfd_secret(0x80000) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r4, 0x3309) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vxcan1\x00'}) accept4(r3, &(0x7f0000000340)=@sco={0x1f, @fixed}, &(0x7f00000003c0)=0x80, 0x0) signalfd(r2, &(0x7f00000005c0)={[0x100000001]}, 0x8) 16:59:16 executing program 6: semctl$IPC_STAT(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000000)=""/6) semctl$SETALL(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)=[0x3ff, 0x3]) semctl$SETALL(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000080)=[0x7fff, 0x20, 0x5]) r0 = semget$private(0x0, 0x2, 0x20) semop(r0, &(0x7f00000000c0)=[{0x4, 0xe8b}, {0x2, 0x1, 0x1000}, {0x3, 0x1, 0x1800}, {0x3, 0x4000, 0x1000}], 0x4) r1 = semget$private(0x0, 0x0, 0x0) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000100)=[0x0, 0x0, 0x8001, 0x400, 0x1, 0x9, 0x5, 0xfffa, 0xff, 0xf90]) semctl$GETPID(r0, 0x2, 0xb, &(0x7f0000000140)=""/73) semctl$GETZCNT(r1, 0x3, 0xf, &(0x7f00000001c0)=""/54) openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x60a82, 0x0) semget$private(0x0, 0x2, 0x10) 16:59:16 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LIST_PHY(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x40) sendmsg$SOCK_DESTROY(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000600)={&(0x7f0000000140)={0x48c, 0x15, 0x100, 0x70bd25, 0x25dfdbff, {0xa, 0x91}, [@INET_DIAG_REQ_BYTECODE={0xca, 0x1, "0cd9b639207bc00d4d818f0ef739eb371513327730c58ddde0985b32065d8e3bafdbc2586d6c2d8b24a2611cc8d79d4346e6758017670597be9566e533e68b8eceaf9f877fc5669a30ee4251e61559ad3fd7bd72abc02bb4d2474c8b3a7e1e333cab711b2cc1b5997e58edc267d430c95807bd9d41fd99c379d65de4db793224e299641ee58b275bf31b853b6ecd0bbfb571e491ca5a4fac46c1d626e2e7d74ad2030c120b35b069e6dda3d2808994e443b5ab1a4c5e9ed9fe09ec91ea478b01b1ba9bbdd737"}, @INET_DIAG_REQ_BYTECODE={0xee, 0x1, "a9dd60c307218e02c59f9691e88bc6d0aa8638686de7fd4cba5ca4563c5c8f0854f5417f6d1a812624d39db8547284634c22a657b1398476f6af3ebe8a948c8cb00079ed73b2f1c2fd5cf6808f04715eff2d8fc4c0bf3fa7fac298d746c8cf6811926a7488f607e15b6a6e335c1f9f7d3428ea2d36766b8674585c2a789f45c257cbf6266f28ef89987a5fa81fce25a525b0edfcf7d9e91f8377b1dc990b4aa805ca407f59f1fefc114727258a82da0a70414e8ffd934d01ded0297fc02b91398dedf939a347c088709bf2eba853d6144afaeee36a0c9ad866f9939a8ce920e7e185f3a0282eb2c7a8db"}, @INET_DIAG_REQ_BYTECODE={0x6a, 0x1, "603269aaf19ffb5bb34334192a17f5b13dd049499d3dd20f2627eef3ab42c707e64def9b18b09ddb3a3d9a4213c2f63e38d5d9f4ffea0b9ae410489bbe78a1b5f8283d177cdfc43152abdfa3bf5473f3b5944e99f9a85c7842bf3bf39e79ebfefa5115e613a4"}, @INET_DIAG_REQ_BYTECODE={0x9f, 0x1, "33b3bb6fa233f52b9f994daedaea42986f9405986575c79e2953c6d01ceabe421b6e6f70f19e3e36d7498780b43802b6490089ea42d49102ff26620f045888ac29aedc1cdf11e8020f295119e410559275f53d50059306ef5b1b496b693ed34bc8eb9fa3e10e84947672146468e467e8142610c51f197bc8e942cf3f4ed73623d9eaa4bc2aa3a72eba287e469892ad66e1d9755b66ffb92f4b9a49"}, @INET_DIAG_REQ_BYTECODE={0x83, 0x1, "96ab4b3a91fcc2b1af3c3d584d06adf087fbd12b6ff52be3015bb79a4d82e20e307e35d4f10da40cfc41683689eae004e9e9d8251020abf80cfc16d094792f78614a223e8c0d81cc28f91190f085ddacabe55e3b4095ff53956533af609af431736494dc5b141d08a1a6357bc58d8826fa8465f6db9c62139de5070b7f417e"}, @INET_DIAG_REQ_BYTECODE={0xab, 0x1, "f534b8aa7aeba4baa212b49fd1bc9297f5f0705cbf7d30f2f78c4ad58d39ebbcc204b4f0e9606cfbd817b09a0ddb496ed5a9c14fd14bdc7de89c5a445d4fe370078ee662fca5d6d8712f6b6869d4cbcb3bbb0be1f988bdc40ee0875ae96790163febf1d8cc67baae8055f1fe90ca6d179f9f08a44701bd4a6e47722b817a25a77f122149965a27af83ff295aa01b8c8920f956feb01a0d82ccc6d882c189bf24a99873a38acc53"}, @INET_DIAG_REQ_BYTECODE={0x49, 0x1, "c830c3d577b0a6d5a861ca2477ca24d1ca5e19b048daabd3a5f2f7bb22175cc8ab55a837fe20c883ad54c40aaff5a25d222e8489323d26a58c5a9e534637f87b4ae2cbf62d"}, @INET_DIAG_REQ_BYTECODE={0x19, 0x1, "08a14b1d38bc3bd0d09b4d1e38ca18531afff796b4"}, @INET_DIAG_REQ_BYTECODE={0x18, 0x1, "7ddccd96835d626628938650e031ef98ccd4023c"}]}, 0x48c}, 0x1, 0x0, 0x0, 0x8040}, 0x20048004) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r0) sendmsg$IEEE802154_LIST_PHY(r0, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14, r1, 0x4, 0x70bd2a, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x801}, 0x2000c040) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r0) sendmsg$IEEE802154_LIST_PHY(r2, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14, r3, 0x404, 0x70bd2d, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4040810}, 0x20000040) r4 = signalfd(0xffffffffffffffff, &(0x7f0000000900)={[0x401]}, 0x8) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f0000000940)={0x0, 0x80, 0xfe, 0xf7, 0x8, 0x8, 0x0, 0x0, 0x81c0, 0x8, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x0, @perf_config_ext={0x0, 0x3000000000000}, 0xc0, 0x80000000, 0x3, 0x7, 0x1, 0x9, 0x4, 0x0, 0x1ff, 0x0, 0xfff}) sendmsg$SOCK_DESTROY(r4, &(0x7f0000000c00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x7faf765b7275150f}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000a00)={0x1a4, 0x15, 0x1, 0x70bd29, 0x25dfdbfd, {0x21, 0x20}, [@INET_DIAG_REQ_BYTECODE={0xca, 0x1, "4cfe854d53fb01f6d6328bd3cff2fc13116164a425784fc2b8a3782641ebfc45dbb9bf53df97065dc40906479d2a71449f20f398c9408daf0fd45079d1bbdb13b3e05964370480028efb0f21383153796adfe2cde36e2b168065a1bb3f54f31343be958d9353ad58c8d2752458d5fc7a18ae05d4539093dc0845aaf4b72b4c777689c8a80f35c4d81d6e9acf9866f29809bb7c241e91e92ce93605a2064f966df27eaf9424ffb194c96bc079877affd6f38f9e556d5d972c295f06423dca59f9b63ea4c30247"}, @INET_DIAG_REQ_BYTECODE={0xc1, 0x1, "4db6886a6338a219944e3ed3f39cebdbf6fe60a89b2952f21815d09dd9694c24ef38025351c0e0d8d7d659fe83ce83b5c502d326e74bbc3ca3597e8ebdce2ca7dd923fc729235f9c55bec5b1d97652364a1f4c43f1fcf722ab754a504d64452739690105705256c9aaac5171c77fe8ce23f9c34817d2c7c2c539d8f8a277cfc3e995ca6eb26c2d1e92a650b1ea8c22dd5132e5a7460339ee12f51890f431647dbad9fa8dbd3f6dccb52d520c50de8df36282e5885324d96b89a82c5d2a"}]}, 0x1a4}}, 0x80) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x7fff8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000c40)=@IORING_OP_FSYNC={0x3, 0x4, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xd36) accept(r4, &(0x7f0000000c80)=@l2tp={0x2, 0x0, @dev}, &(0x7f0000000d00)=0x80) getsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000e40)={@empty}, &(0x7f0000000e80)=0xc) 16:59:16 executing program 2: r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x40840, 0x0) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xee01, 0xee01}}, './file0\x00'}) r3 = dup2(r0, r0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r3) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r1, 0xf501, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000080)={0x4, 0x41, 0x1d}, &(0x7f00000000c0)='./file0\x00', 0x18, 0x0, 0x23456}, 0x6) r4 = socket$inet(0x2, 0x4, 0xb6e0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r4, 0xf505, 0x0) getsockopt$inet_mreqn(r3, 0x0, 0x7, &(0x7f0000000180)={@multicast2, @initdev, 0x0}, &(0x7f00000001c0)=0xc) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0xb4, 0x0, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x80}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xee}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}]}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x81}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}]}, 0xb4}, 0x1, 0x0, 0x0, 0x24000005}, 0x40800) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000000340)={{0x1, 0x1, 0x18, r3, {0xee01, r2}}, './file0\x00'}) setsockopt$inet_tcp_buf(r6, 0x6, 0x21, &(0x7f0000000380)="2a35c6b2b4e31b346262c7bd54df746be683669cac9292056fb41cca0a14f0aabc2810d0402930c93c29fe45b5b721c031270997db4c624165db868938c5855dc2c60f4d019e262628a3abb42c9aaaacf94217f22988e07d", 0x58) ioctl$AUTOFS_IOC_SETTIMEOUT(r6, 0x80049367, &(0x7f0000000400)=0x3ff) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000440)=0x4) r7 = syz_open_dev$loop(&(0x7f0000000480), 0xae1f, 0x8002) dup2(r7, 0xffffffffffffffff) 16:59:16 executing program 0: syz_io_uring_setup(0x5aea, &(0x7f0000000000)={0x0, 0x2, 0x8, 0x1, 0x39c}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) syz_io_uring_submit(0x0, r1, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x6, &(0x7f0000000140)={r2, r3+60000000}, 0x1, 0x1, 0x1}, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x0, 0x30, r4, 0x9c6ca000) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r4, 0x40089413, &(0x7f00000001c0)=0xb24c) pselect6(0x40, &(0x7f0000000200)={0xffffffff, 0x8, 0x3ff, 0x6, 0x10001, 0xfffffffffffffff7, 0x4000000040000000, 0x3}, &(0x7f0000000240)={0x20000000000, 0x3dd, 0x7ff, 0x1f, 0xfffffffffffffffb, 0x2, 0xa9c, 0x2}, &(0x7f0000000280)={0x9, 0x5, 0x7, 0x5, 0x3b4, 0xfffffffffffff350, 0xfffffffffffffffe, 0x100000001}, &(0x7f00000002c0)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000300)={[0x80]}, 0x8}) syz_io_uring_setup(0x7431, &(0x7f0000000380)={0x0, 0x8043, 0x53ae390bf5aa1ad2, 0x0, 0x324}, &(0x7f0000ff4000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000400), &(0x7f0000000440)=0x0) syz_io_uring_submit(r0, r5, &(0x7f00000004c0)=@IORING_OP_OPENAT={0x12, 0x5, 0x0, r4, 0x0, &(0x7f0000000480)='./file0\x00', 0x20, 0x800, 0x12345}, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000500)={@loopback, @multicast2}, &(0x7f0000000540)=0xc) clock_gettime(0x0, &(0x7f00000005c0)={0x0, 0x0}) semtimedop(0x0, &(0x7f0000000580)=[{0x0, 0x81, 0x800}, {0x1, 0x6, 0x800}, {0x4, 0x4, 0x1000}], 0x3, &(0x7f0000000600)={r6, r7+60000000}) getsockname(0xffffffffffffffff, &(0x7f0000000640)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, &(0x7f00000006c0)=0x80) fsetxattr$trusted_overlay_origin(r4, &(0x7f0000000700), &(0x7f0000000740), 0x2, 0x1) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000780)='./file0\x00', 0x1000007) read$snapshot(0xffffffffffffffff, &(0x7f00000007c0)=""/203, 0xcb) [ 122.847824] [ 122.848145] ===================================== [ 122.848864] WARNING: bad unlock balance detected! [ 122.849586] 6.19.0-rc5-next-20260115 #1 Not tainted [ 122.850349] ------------------------------------- [ 122.851075] syz-executor.3/4048 is trying to release lock (rcu_read_lock) at: [ 122.853495] [] __wait_on_freeing_inode+0x105/0x350 [ 122.856444] but there are no more locks to release! [ 122.859241] [ 122.859241] other info that might help us debug this: [ 122.860984] 4 locks held by syz-executor.3/4048: [ 122.861722] #0: ffff88800f9aa3f8 (sb_writers#3){.+.+}-{0:0}, at: filename_create+0xf7/0x400 [ 122.863084] #1: ffff88803c0783e0 (&type->i_mutex_dir_key#3/1){+.+.}-{4:4}, at: filename_create+0x1b1/0x400 [ 122.864627] #2: ffff88800f9ae950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xe32/0x12d0 [ 122.866033] #3: ffffffff85c16898 (inode_hash_lock){+.+.}-{3:3}, at: insert_inode_locked+0xf9/0x890 [ 122.867483] [ 122.867483] stack backtrace: [ 122.868202] CPU: 1 UID: 0 PID: 4048 Comm: syz-executor.3 Not tainted 6.19.0-rc5-next-20260115 #1 PREEMPT(lazy) [ 122.868232] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 122.868245] Call Trace: [ 122.868253] [ 122.868262] dump_stack_lvl+0xca/0x120 [ 122.868309] ? __wait_on_freeing_inode+0x105/0x350 [ 122.868337] print_unlock_imbalance_bug+0x118/0x130 [ 122.868366] ? __wait_on_freeing_inode+0x105/0x350 [ 122.868394] lock_release+0x1ee/0x270 [ 122.868423] __wait_on_freeing_inode+0x10a/0x350 [ 122.868452] ? __pfx___wait_on_freeing_inode+0x10/0x10 [ 122.868483] ? __pfx_var_wake_function+0x10/0x10 [ 122.868517] ? lock_is_held_type+0x9e/0x120 [ 122.868539] insert_inode_locked+0x25f/0x890 [ 122.868572] __ext4_new_inode+0x223d/0x4cd0 [ 122.868605] ? __pfx___ext4_new_inode+0x10/0x10 [ 122.868633] ? __pfx___dquot_initialize+0x10/0x10 [ 122.868668] ? __pfx_avc_has_perm+0x10/0x10 [ 122.868698] ext4_symlink+0x623/0xb40 [ 122.868734] ? __pfx_ext4_symlink+0x10/0x10 [ 122.868764] ? security_inode_permission+0x72/0xe0 [ 122.868789] vfs_symlink+0x44b/0x840 [ 122.868821] filename_symlinkat+0x158/0x440 [ 122.868849] ? __pfx_filename_symlinkat+0x10/0x10 [ 122.868876] ? strncpy_from_user+0x21b/0x2f0 [ 122.868908] __x64_sys_symlink+0x82/0x110 [ 122.868942] do_syscall_64+0xbf/0x420 [ 122.868979] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.869006] RIP: 0033:0x7f016680a427 [ 122.869024] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 58 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 122.869046] RSP: 002b:00007ffeb9856f18 EFLAGS: 00000206 ORIG_RAX: 0000000000000058 [ 122.869068] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f016680a427 [ 122.869082] RDX: 00007ffeb9856ff7 RSI: 00007f0166865019 RDI: 00007ffeb9856fe0 [ 122.869097] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007ffeb9856db0 [ 122.869111] R10: 00007ffeb9856c67 R11: 0000000000000206 R12: 0000000000000001 [ 122.869125] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffeb9856fe0 [ 122.869146] [ 122.899179] ------------[ cut here ]------------ [ 122.899962] WARNING: kernel/rcu/tree_plugin.h:443 at __rcu_read_unlock+0x25f/0x5c0, CPU#1: syz-executor.3/4048 [ 122.901816] Modules linked in: [ 122.902630] CPU: 1 UID: 0 PID: 4048 Comm: syz-executor.3 Not tainted 6.19.0-rc5-next-20260115 #1 PREEMPT(lazy) [ 122.904608] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 122.906084] RIP: 0010:__rcu_read_unlock+0x25f/0x5c0 [ 122.907052] Code: f2 02 00 00 c7 43 58 01 00 00 00 bf 09 00 00 00 e8 d6 b7 de ff 4d 85 f6 0f 84 73 fe ff ff e8 38 8a 20 00 fb e9 68 fe ff ff 90 <0f> 0b 90 5b 5d 41 5c 41 5d 41 5e e9 81 4d 74 03 e8 2c 5d 56 00 e9 [ 122.909764] RSP: 0018:ffff8880407c79a0 EFLAGS: 00010286 [ 122.910632] RAX: 00000000ffffffff RBX: ffff888016a59b80 RCX: ffffffff815660f7 [ 122.911788] RDX: 0000000000000000 RSI: ffffffff81566100 RDI: ffff888016a59f7c [ 122.913043] RBP: ffff888016a59b80 R08: 0000000000000000 R09: fffffbfff0ba7040 [ 122.914331] R10: 0000000000000000 R11: 0000000000000001 R12: ffff888016a59b80 [ 122.915599] R13: 0000000000000001 R14: ffffffff85c0ddd0 R15: ffff88801ac61fb0 [ 122.916873] FS: 00005555628e9400(0000) GS:ffff8880e5442000(0000) knlGS:0000000000000000 [ 122.918309] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 122.919355] CR2: 00007f016688a543 CR3: 000000003f47c000 CR4: 0000000000350ef0 [ 122.920621] Call Trace: [ 122.921136] [ 122.922712] __wait_on_freeing_inode+0x10f/0x350 [ 122.924087] ? __pfx___wait_on_freeing_inode+0x10/0x10 [ 122.926229] ? __pfx_var_wake_function+0x10/0x10 [ 122.928684] ? lock_is_held_type+0x9e/0x120 [ 122.930828] insert_inode_locked+0x25f/0x890 [ 122.934005] __ext4_new_inode+0x223d/0x4cd0 [ 122.938869] ? __pfx___ext4_new_inode+0x10/0x10 [ 122.946868] ? __pfx___dquot_initialize+0x10/0x10 [ 122.948435] ? __pfx_avc_has_perm+0x10/0x10 [ 122.951984] ext4_symlink+0x623/0xb40 [ 122.956379] ? __pfx_ext4_symlink+0x10/0x10 [ 122.958405] ? security_inode_permission+0x72/0xe0 [ 122.962060] vfs_symlink+0x44b/0x840 [ 122.965146] filename_symlinkat+0x158/0x440 [ 122.967861] ? __pfx_filename_symlinkat+0x10/0x10 [ 122.969617] ? strncpy_from_user+0x21b/0x2f0 [ 122.973842] __x64_sys_symlink+0x82/0x110 [ 122.975554] do_syscall_64+0xbf/0x420 [ 122.977254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.978548] RIP: 0033:0x7f016680a427 [ 122.979366] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 58 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 122.982712] RSP: 002b:00007ffeb9856f18 EFLAGS: 00000206 ORIG_RAX: 0000000000000058 [ 122.984066] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f016680a427 [ 122.985362] RDX: 00007ffeb9856ff7 RSI: 00007f0166865019 RDI: 00007ffeb9856fe0 [ 122.986632] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007ffeb9856db0 [ 122.987916] R10: 00007ffeb9856c67 R11: 0000000000000206 R12: 0000000000000001 [ 122.989220] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffeb9856fe0 [ 122.995038] [ 122.995451] irq event stamp: 625 [ 122.996112] hardirqs last enabled at (625): [] _raw_spin_unlock_irqrestore+0x2c/0x50 [ 122.997901] hardirqs last disabled at (624): [] _raw_spin_lock_irqsave+0x53/0x60 [ 122.999633] softirqs last enabled at (620): [] kernel_fpu_end+0x59/0x70 [ 123.001137] softirqs last disabled at (618): [] kernel_fpu_begin_mask+0x1bb/0x300 [ 123.002786] ---[ end trace 0000000000000000 ]--- 16:59:16 executing program 6: semctl$IPC_STAT(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000000)=""/6) semctl$SETALL(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)=[0x3ff, 0x3]) semctl$SETALL(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000080)=[0x7fff, 0x20, 0x5]) r0 = semget$private(0x0, 0x2, 0x20) semop(r0, &(0x7f00000000c0)=[{0x4, 0xe8b}, {0x2, 0x1, 0x1000}, {0x3, 0x1, 0x1800}, {0x3, 0x4000, 0x1000}], 0x4) r1 = semget$private(0x0, 0x0, 0x0) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000100)=[0x0, 0x0, 0x8001, 0x400, 0x1, 0x9, 0x5, 0xfffa, 0xff, 0xf90]) semctl$GETPID(r0, 0x2, 0xb, &(0x7f0000000140)=""/73) semctl$GETZCNT(r1, 0x3, 0xf, &(0x7f00000001c0)=""/54) openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x60a82, 0x0) semget$private(0x0, 0x2, 0x10) 16:59:16 executing program 5: r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @initdev}}, &(0x7f0000000080)=0x80) getresgid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)=0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0xee01, r1}}, './file0\x00'}) ioctl$HIDIOCAPPLICATION(r2, 0x4802, 0xfc) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x5}, 0x7) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$addseals(r3, 0x409, 0x1) ioctl$BTRFS_IOC_QGROUP_CREATE(r3, 0x4010942a, &(0x7f0000000200)={0x0, 0x346}) prctl$PR_CAP_AMBIENT(0x2f, 0x3, 0x6) ioctl$HIDIOCGVERSION(0xffffffffffffffff, 0x80044801, &(0x7f0000000240)) ioctl$BTRFS_IOC_LOGICAL_INO(r3, 0xc0389424, &(0x7f00000002c0)={0xffff, 0x8, '\x00', 0x0, &(0x7f0000000280)=[0x0]}) r4 = memfd_secret(0x80000) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r4, 0x3309) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vxcan1\x00'}) signalfd(r2, &(0x7f00000005c0)={[0x100000001]}, 0x8) 16:59:22 executing program 7: clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) semtimedop(0xffffffffffffffff, &(0x7f0000000000)=[{0x4, 0x1000, 0x1c00}, {0x4, 0xdb}, {0x3, 0x81, 0x800}, {0x4, 0x5}], 0x4, &(0x7f0000000080)={r0, r1+10000000}) clock_getres(0x0, &(0x7f00000000c0)) clock_getres(0x6, &(0x7f0000000100)) r2 = syz_open_dev$loop(&(0x7f0000000140), 0x9, 0x40a00) socketpair(0x26, 0x80000, 0x2, &(0x7f0000000180)={0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_SPLICE={0x1e, 0x2, 0x0, @fd=r2, 0x961, {}, 0x9, 0x8, 0x0, {0x0, 0x0, r3}}, 0x1) clock_getres(0x6, &(0x7f0000000200)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1800005, 0x8010, 0xffffffffffffffff, 0x0) r5 = syz_io_uring_complete(r4) clock_gettime(0x0, &(0x7f0000000240)) socketpair(0x1f, 0x800, 0x9, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_timeval(r6, 0x1, 0x43, &(0x7f00000002c0), &(0x7f0000000300)=0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000340)={'vcan0\x00'}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x1010, r2, 0x95fc4000) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) semtimedop(0xffffffffffffffff, &(0x7f0000000380)=[{0x4, 0xf838, 0x1000}, {0x3, 0x5, 0x800}], 0x2, &(0x7f0000000400)={r7, r8+10000000}) clock_getres(0x2, &(0x7f0000000440)) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x2400, 0x467) 16:59:22 executing program 0: syz_io_uring_setup(0x5aea, &(0x7f0000000000)={0x0, 0x2, 0x8, 0x1, 0x39c}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) syz_io_uring_submit(0x0, r1, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x6, &(0x7f0000000140)={r2, r3+60000000}, 0x1, 0x1, 0x1}, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x0, 0x30, r4, 0x9c6ca000) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r4, 0x40089413, &(0x7f00000001c0)=0xb24c) pselect6(0x40, &(0x7f0000000200)={0xffffffff, 0x8, 0x3ff, 0x6, 0x10001, 0xfffffffffffffff7, 0x4000000040000000, 0x3}, &(0x7f0000000240)={0x20000000000, 0x3dd, 0x7ff, 0x1f, 0xfffffffffffffffb, 0x2, 0xa9c, 0x2}, &(0x7f0000000280)={0x9, 0x5, 0x7, 0x5, 0x3b4, 0xfffffffffffff350, 0xfffffffffffffffe, 0x100000001}, &(0x7f00000002c0)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000300)={[0x80]}, 0x8}) syz_io_uring_setup(0x7431, &(0x7f0000000380)={0x0, 0x8043, 0x53ae390bf5aa1ad2, 0x0, 0x324}, &(0x7f0000ff4000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000400), &(0x7f0000000440)=0x0) syz_io_uring_submit(r0, r5, &(0x7f00000004c0)=@IORING_OP_OPENAT={0x12, 0x5, 0x0, r4, 0x0, &(0x7f0000000480)='./file0\x00', 0x20, 0x800, 0x12345}, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000500)={@loopback, @multicast2}, &(0x7f0000000540)=0xc) clock_gettime(0x0, &(0x7f00000005c0)={0x0, 0x0}) semtimedop(0x0, &(0x7f0000000580)=[{0x0, 0x81, 0x800}, {0x1, 0x6, 0x800}, {0x4, 0x4, 0x1000}], 0x3, &(0x7f0000000600)={r6, r7+60000000}) getsockname(0xffffffffffffffff, &(0x7f0000000640)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, &(0x7f00000006c0)=0x80) fsetxattr$trusted_overlay_origin(r4, &(0x7f0000000700), &(0x7f0000000740), 0x2, 0x1) read$snapshot(0xffffffffffffffff, &(0x7f00000007c0)=""/203, 0xcb) 16:59:22 executing program 5: r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @initdev}}, &(0x7f0000000080)=0x80) getresgid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)=0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0xee01, r1}}, './file0\x00'}) ioctl$HIDIOCAPPLICATION(r2, 0x4802, 0xfc) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x5}, 0x7) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$addseals(r3, 0x409, 0x1) ioctl$BTRFS_IOC_QGROUP_CREATE(r3, 0x4010942a, &(0x7f0000000200)={0x0, 0x346}) prctl$PR_CAP_AMBIENT(0x2f, 0x3, 0x6) ioctl$HIDIOCGVERSION(0xffffffffffffffff, 0x80044801, &(0x7f0000000240)) ioctl$BTRFS_IOC_LOGICAL_INO(r3, 0xc0389424, &(0x7f00000002c0)={0xffff, 0x8, '\x00', 0x0, &(0x7f0000000280)=[0x0]}) r4 = memfd_secret(0x80000) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r4, 0x3309) signalfd(r2, &(0x7f00000005c0)={[0x100000001]}, 0x8) 16:59:22 executing program 2: r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x40840, 0x0) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xee01, 0xee01}}, './file0\x00'}) r3 = dup2(r0, r0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r3) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r1, 0xf501, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000080)={0x4, 0x41, 0x1d}, &(0x7f00000000c0)='./file0\x00', 0x18, 0x0, 0x23456}, 0x6) r4 = socket$inet(0x2, 0x4, 0xb6e0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r4, 0xf505, 0x0) getsockopt$inet_mreqn(r3, 0x0, 0x7, &(0x7f0000000180)={@multicast2, @initdev, 0x0}, &(0x7f00000001c0)=0xc) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0xb4, 0x0, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x80}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xee}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}]}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x81}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}]}, 0xb4}, 0x1, 0x0, 0x0, 0x24000005}, 0x40800) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000000340)={{0x1, 0x1, 0x18, r3, {0xee01, r2}}, './file0\x00'}) setsockopt$inet_tcp_buf(r6, 0x6, 0x21, &(0x7f0000000380)="2a35c6b2b4e31b346262c7bd54df746be683669cac9292056fb41cca0a14f0aabc2810d0402930c93c29fe45b5b721c031270997db4c624165db868938c5855dc2c60f4d019e262628a3abb42c9aaaacf94217f22988e07d", 0x58) ioctl$AUTOFS_IOC_SETTIMEOUT(r6, 0x80049367, &(0x7f0000000400)=0x3ff) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000440)=0x4) dup2(0xffffffffffffffff, 0xffffffffffffffff) 16:59:22 executing program 6: semctl$IPC_STAT(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000000)=""/6) semctl$SETALL(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)=[0x3ff, 0x3]) semctl$SETALL(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000080)=[0x7fff, 0x20, 0x5]) r0 = semget$private(0x0, 0x2, 0x20) semop(r0, &(0x7f00000000c0)=[{0x4, 0xe8b}, {0x2, 0x1, 0x1000}, {0x3, 0x1, 0x1800}, {0x3, 0x4000, 0x1000}], 0x4) r1 = semget$private(0x0, 0x0, 0x0) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000100)=[0x0, 0x0, 0x8001, 0x400, 0x1, 0x9, 0x5, 0xfffa, 0xff, 0xf90]) semctl$GETPID(r0, 0x2, 0xb, &(0x7f0000000140)=""/73) semctl$GETZCNT(r1, 0x3, 0xf, &(0x7f00000001c0)=""/54) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x9, 0x4000010, 0xffffffffffffffff, 0xcfe53000) semget$private(0x0, 0x2, 0x10) 16:59:22 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LIST_PHY(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x40) sendmsg$SOCK_DESTROY(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000600)={&(0x7f0000000140)={0x48c, 0x15, 0x100, 0x70bd25, 0x25dfdbff, {0xa, 0x91}, [@INET_DIAG_REQ_BYTECODE={0xca, 0x1, "0cd9b639207bc00d4d818f0ef739eb371513327730c58ddde0985b32065d8e3bafdbc2586d6c2d8b24a2611cc8d79d4346e6758017670597be9566e533e68b8eceaf9f877fc5669a30ee4251e61559ad3fd7bd72abc02bb4d2474c8b3a7e1e333cab711b2cc1b5997e58edc267d430c95807bd9d41fd99c379d65de4db793224e299641ee58b275bf31b853b6ecd0bbfb571e491ca5a4fac46c1d626e2e7d74ad2030c120b35b069e6dda3d2808994e443b5ab1a4c5e9ed9fe09ec91ea478b01b1ba9bbdd737"}, @INET_DIAG_REQ_BYTECODE={0xee, 0x1, "a9dd60c307218e02c59f9691e88bc6d0aa8638686de7fd4cba5ca4563c5c8f0854f5417f6d1a812624d39db8547284634c22a657b1398476f6af3ebe8a948c8cb00079ed73b2f1c2fd5cf6808f04715eff2d8fc4c0bf3fa7fac298d746c8cf6811926a7488f607e15b6a6e335c1f9f7d3428ea2d36766b8674585c2a789f45c257cbf6266f28ef89987a5fa81fce25a525b0edfcf7d9e91f8377b1dc990b4aa805ca407f59f1fefc114727258a82da0a70414e8ffd934d01ded0297fc02b91398dedf939a347c088709bf2eba853d6144afaeee36a0c9ad866f9939a8ce920e7e185f3a0282eb2c7a8db"}, @INET_DIAG_REQ_BYTECODE={0x6a, 0x1, "603269aaf19ffb5bb34334192a17f5b13dd049499d3dd20f2627eef3ab42c707e64def9b18b09ddb3a3d9a4213c2f63e38d5d9f4ffea0b9ae410489bbe78a1b5f8283d177cdfc43152abdfa3bf5473f3b5944e99f9a85c7842bf3bf39e79ebfefa5115e613a4"}, @INET_DIAG_REQ_BYTECODE={0x9f, 0x1, "33b3bb6fa233f52b9f994daedaea42986f9405986575c79e2953c6d01ceabe421b6e6f70f19e3e36d7498780b43802b6490089ea42d49102ff26620f045888ac29aedc1cdf11e8020f295119e410559275f53d50059306ef5b1b496b693ed34bc8eb9fa3e10e84947672146468e467e8142610c51f197bc8e942cf3f4ed73623d9eaa4bc2aa3a72eba287e469892ad66e1d9755b66ffb92f4b9a49"}, @INET_DIAG_REQ_BYTECODE={0x83, 0x1, "96ab4b3a91fcc2b1af3c3d584d06adf087fbd12b6ff52be3015bb79a4d82e20e307e35d4f10da40cfc41683689eae004e9e9d8251020abf80cfc16d094792f78614a223e8c0d81cc28f91190f085ddacabe55e3b4095ff53956533af609af431736494dc5b141d08a1a6357bc58d8826fa8465f6db9c62139de5070b7f417e"}, @INET_DIAG_REQ_BYTECODE={0xab, 0x1, "f534b8aa7aeba4baa212b49fd1bc9297f5f0705cbf7d30f2f78c4ad58d39ebbcc204b4f0e9606cfbd817b09a0ddb496ed5a9c14fd14bdc7de89c5a445d4fe370078ee662fca5d6d8712f6b6869d4cbcb3bbb0be1f988bdc40ee0875ae96790163febf1d8cc67baae8055f1fe90ca6d179f9f08a44701bd4a6e47722b817a25a77f122149965a27af83ff295aa01b8c8920f956feb01a0d82ccc6d882c189bf24a99873a38acc53"}, @INET_DIAG_REQ_BYTECODE={0x49, 0x1, "c830c3d577b0a6d5a861ca2477ca24d1ca5e19b048daabd3a5f2f7bb22175cc8ab55a837fe20c883ad54c40aaff5a25d222e8489323d26a58c5a9e534637f87b4ae2cbf62d"}, @INET_DIAG_REQ_BYTECODE={0x19, 0x1, "08a14b1d38bc3bd0d09b4d1e38ca18531afff796b4"}, @INET_DIAG_REQ_BYTECODE={0x18, 0x1, "7ddccd96835d626628938650e031ef98ccd4023c"}]}, 0x48c}, 0x1, 0x0, 0x0, 0x8040}, 0x20048004) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r0) sendmsg$IEEE802154_LIST_PHY(r0, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14, r1, 0x4, 0x70bd2a, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x801}, 0x2000c040) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r0) sendmsg$IEEE802154_LIST_PHY(r2, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14, r3, 0x404, 0x70bd2d, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4040810}, 0x20000040) r4 = signalfd(0xffffffffffffffff, &(0x7f0000000900)={[0x401]}, 0x8) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f0000000940)={0x0, 0x80, 0xfe, 0xf7, 0x8, 0x8, 0x0, 0x0, 0x81c0, 0x8, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x0, @perf_config_ext={0x0, 0x3000000000000}, 0xc0, 0x80000000, 0x3, 0x7, 0x1, 0x9, 0x4, 0x0, 0x1ff, 0x0, 0xfff}) sendmsg$SOCK_DESTROY(r4, &(0x7f0000000c00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x7faf765b7275150f}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000a00)={0x1a4, 0x15, 0x1, 0x70bd29, 0x25dfdbfd, {0x21, 0x20}, [@INET_DIAG_REQ_BYTECODE={0xca, 0x1, "4cfe854d53fb01f6d6328bd3cff2fc13116164a425784fc2b8a3782641ebfc45dbb9bf53df97065dc40906479d2a71449f20f398c9408daf0fd45079d1bbdb13b3e05964370480028efb0f21383153796adfe2cde36e2b168065a1bb3f54f31343be958d9353ad58c8d2752458d5fc7a18ae05d4539093dc0845aaf4b72b4c777689c8a80f35c4d81d6e9acf9866f29809bb7c241e91e92ce93605a2064f966df27eaf9424ffb194c96bc079877affd6f38f9e556d5d972c295f06423dca59f9b63ea4c30247"}, @INET_DIAG_REQ_BYTECODE={0xc1, 0x1, "4db6886a6338a219944e3ed3f39cebdbf6fe60a89b2952f21815d09dd9694c24ef38025351c0e0d8d7d659fe83ce83b5c502d326e74bbc3ca3597e8ebdce2ca7dd923fc729235f9c55bec5b1d97652364a1f4c43f1fcf722ab754a504d64452739690105705256c9aaac5171c77fe8ce23f9c34817d2c7c2c539d8f8a277cfc3e995ca6eb26c2d1e92a650b1ea8c22dd5132e5a7460339ee12f51890f431647dbad9fa8dbd3f6dccb52d520c50de8df36282e5885324d96b89a82c5d2a"}]}, 0x1a4}}, 0x80) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x7fff8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000c40)=@IORING_OP_FSYNC={0x3, 0x4, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xd36) getsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000e40)={@empty}, &(0x7f0000000e80)=0xc) 16:59:22 executing program 4: fremovexattr(0xffffffffffffffff, &(0x7f0000000000)=@random={'osx.', '%@.\x00'}) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000040)=0x93af) r0 = perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x80, 0x1, 0x5, 0x2, 0x5, 0x0, 0x5, 0x100, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x5, 0x2, @perf_config_ext={0x8, 0x7}, 0x138, 0x8001, 0xa9, 0x7, 0x3ff, 0x1ff, 0x5, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x4) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r0, 0xf505, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$HIDIOCAPPLICATION(r1, 0x4802, 0x2) r2 = perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0xff, 0x0, 0xd1, 0x0, 0x0, 0x0, 0x401, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x2, @perf_config_ext={0x69c, 0x1}, 0x2154, 0x2, 0x3, 0x1, 0x99, 0xffff, 0x1, 0x0, 0x8000, 0x0, 0x3}, 0x0, 0x1, r1, 0x1) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0) r3 = signalfd(r2, &(0x7f00000001c0)={[0x5df5a116]}, 0x8) ioctl$PERF_EVENT_IOC_REFRESH(r3, 0x2402, 0xe1) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000200)) socketpair(0x2b, 0x800, 0xa1, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000000280)="d90d96008de1ffe4f1d2e4b262e7bd9d", 0x10) socketpair(0x15, 0x800, 0x80000001, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r5) r6 = perf_event_open$cgroup(&(0x7f0000000340)={0x0, 0x80, 0x4, 0x89, 0x9d, 0x40, 0x0, 0x2, 0x10, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfff, 0x0, @perf_bp={&(0x7f0000000300), 0x1}, 0x42402, 0x4, 0x6, 0x6, 0x5, 0x1, 0x55, 0x0, 0x21, 0x0, 0x3}, r3, 0x0, 0xffffffffffffffff, 0xd) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x2400, 0x20) socket$nl_sock_diag(0x10, 0x3, 0x4) 16:59:22 executing program 1: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xb0, 0xc, 0x4, 0x3, 0x70bd27, 0x25dfdbff, {0xa, 0x0, 0x3}, [@typed={0x99, 0x54, 0x0, 0x0, @binary="09ad6fd39aebcb9f04e7b9e193f80ce86b8d01b15239b3a8fe01f7668c5ae831f3ee64c4423fd56ec16c97cfe4e8edd4d9564e64648ba0223aaace28c4111c0b7bbfc64bde7477038e9e92238dc13ca4899717aa1623d6530ca35983bf7c8aa7c38ba9f2fc9312115f9e4628d433f12d1a3cd376df8110df07e77463f3a2b39094c38fad5fee6edcdd347639fe6df55566dea6a9df"}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4000800}, 0x44) r0 = accept4(0xffffffffffffffff, &(0x7f0000000180)=@sco, &(0x7f0000000200)=0x80, 0x0) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x10001}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x14}, 0x10) r1 = syz_io_uring_complete(0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000340)=@gcm_128={{0x303}, "e16c03e4c960e7dd", "06b7f7ab4488cc76cb38a01ac282329c", "9b97dd55", "dfa407db231e0d3b"}, 0x28) r2 = accept(r0, &(0x7f0000000380)=@isdn, &(0x7f0000000400)=0x80) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000480), r1) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x24, r3, 0x10, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x80091) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r1, 0x80083313, &(0x7f0000000580)) syz_io_uring_submit(0x0, 0x0, &(0x7f00000005c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x10003, 0x1, {0x1}}, 0x600) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000600)={{0x1, 0x1, 0x18, r2, {0xee01}}, './file0\x00'}) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000000640)="0bc1a574bc0e0f151cf3ceb7c89e6b0b", 0x10) sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f00000008c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000880)={&(0x7f00000006c0)={0x1ac, 0x12, 0x100, 0x70bd2a, 0x25dfdbfb, {0x21, 0x3, 0x1, 0xff, {0x4e20, 0x4e22, [0x1fb4, 0x759, 0x9, 0x200], [0x7, 0xffffffc1, 0x3, 0x4], 0x0, [0x8, 0x1]}, 0x3, 0xba0}, [@INET_DIAG_REQ_BYTECODE={0x40, 0x1, "508e09d69f20044a59448cbb598c337357ce34d3ecba3f6ef57d37f19776bdd453fc9093a55016ce841766a81f6f9775d54de6240da7d8c405ff8908"}, @INET_DIAG_REQ_BYTECODE={0x9c, 0x1, "2359aa311b74c8f32a26ac2479a79793b1d2c93628eab673f012e02f25101f320a1f9648e10aa1b4a44daa597ef69ef6f2105ead2b901bfbb19576426086ffc5627290683d107af4d666f66fc40b8cb8cfd22fd89039625d45aff57d635bfb371b9406f2986565193159546ba942e5a367b5afa8d74b7e18ff811fad83d590892c23b27d887a9610f7c543d7462258db04dfc96ffe2bd720"}, @INET_DIAG_REQ_BYTECODE={0x42, 0x1, "5360411156df3c68b88ae69b8a1eb43c4061df25614be83d614f74d4e0932814028f05127546fb0e14c7f6f02f776a7f698897ed76fd037659436df41a05"}, @INET_DIAG_REQ_BYTECODE={0x40, 0x1, "018b8e34cd59f2fd9b556071f88d544f07c69178ad9c91a91c8b837bc60775ff97c57137d06b5b7e7d980e28e1bf63106dc770232d0d6d3448417361"}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40004) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r5) fremovexattr(0xffffffffffffffff, &(0x7f0000000900)=@known='user.incfs.metadata\x00') ioctl$F2FS_IOC_RESIZE_FS(0xffffffffffffffff, 0x4008f510, &(0x7f0000000940)=0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f00000009c0)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x5, 0x0, 0x0, 0x0, 0x1}, 0x4) 16:59:22 executing program 1: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xb0, 0xc, 0x4, 0x3, 0x70bd27, 0x25dfdbff, {0xa, 0x0, 0x3}, [@typed={0x99, 0x54, 0x0, 0x0, @binary="09ad6fd39aebcb9f04e7b9e193f80ce86b8d01b15239b3a8fe01f7668c5ae831f3ee64c4423fd56ec16c97cfe4e8edd4d9564e64648ba0223aaace28c4111c0b7bbfc64bde7477038e9e92238dc13ca4899717aa1623d6530ca35983bf7c8aa7c38ba9f2fc9312115f9e4628d433f12d1a3cd376df8110df07e77463f3a2b39094c38fad5fee6edcdd347639fe6df55566dea6a9df"}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4000800}, 0x44) r0 = accept4(0xffffffffffffffff, &(0x7f0000000180)=@sco, &(0x7f0000000200)=0x80, 0x0) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x10001}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x14}, 0x10) r1 = syz_io_uring_complete(0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000340)=@gcm_128={{0x303}, "e16c03e4c960e7dd", "06b7f7ab4488cc76cb38a01ac282329c", "9b97dd55", "dfa407db231e0d3b"}, 0x28) r2 = accept(r0, &(0x7f0000000380)=@isdn, &(0x7f0000000400)=0x80) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000480), r1) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x24, r3, 0x10, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x80091) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r1, 0x80083313, &(0x7f0000000580)) syz_io_uring_submit(0x0, 0x0, &(0x7f00000005c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x10003, 0x1, {0x1}}, 0x600) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000600)={{0x1, 0x1, 0x18, r2, {0xee01}}, './file0\x00'}) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000000640)="0bc1a574bc0e0f151cf3ceb7c89e6b0b", 0x10) sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f00000008c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000880)={&(0x7f00000006c0)={0x1ac, 0x12, 0x100, 0x70bd2a, 0x25dfdbfb, {0x21, 0x3, 0x1, 0xff, {0x4e20, 0x4e22, [0x1fb4, 0x759, 0x9, 0x200], [0x7, 0xffffffc1, 0x3, 0x4], 0x0, [0x8, 0x1]}, 0x3, 0xba0}, [@INET_DIAG_REQ_BYTECODE={0x40, 0x1, "508e09d69f20044a59448cbb598c337357ce34d3ecba3f6ef57d37f19776bdd453fc9093a55016ce841766a81f6f9775d54de6240da7d8c405ff8908"}, @INET_DIAG_REQ_BYTECODE={0x9c, 0x1, "2359aa311b74c8f32a26ac2479a79793b1d2c93628eab673f012e02f25101f320a1f9648e10aa1b4a44daa597ef69ef6f2105ead2b901bfbb19576426086ffc5627290683d107af4d666f66fc40b8cb8cfd22fd89039625d45aff57d635bfb371b9406f2986565193159546ba942e5a367b5afa8d74b7e18ff811fad83d590892c23b27d887a9610f7c543d7462258db04dfc96ffe2bd720"}, @INET_DIAG_REQ_BYTECODE={0x42, 0x1, "5360411156df3c68b88ae69b8a1eb43c4061df25614be83d614f74d4e0932814028f05127546fb0e14c7f6f02f776a7f698897ed76fd037659436df41a05"}, @INET_DIAG_REQ_BYTECODE={0x40, 0x1, "018b8e34cd59f2fd9b556071f88d544f07c69178ad9c91a91c8b837bc60775ff97c57137d06b5b7e7d980e28e1bf63106dc770232d0d6d3448417361"}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40004) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r5) fremovexattr(0xffffffffffffffff, &(0x7f0000000900)=@known='user.incfs.metadata\x00') ioctl$F2FS_IOC_RESIZE_FS(0xffffffffffffffff, 0x4008f510, &(0x7f0000000940)=0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f00000009c0)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x5, 0x0, 0x0, 0x0, 0x1}, 0x4) 16:59:22 executing program 7: clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) semtimedop(0xffffffffffffffff, &(0x7f0000000000)=[{0x4, 0x1000, 0x1c00}, {0x4, 0xdb}, {0x3, 0x81, 0x800}, {0x4, 0x5}], 0x4, &(0x7f0000000080)={r0, r1+10000000}) clock_getres(0x0, &(0x7f00000000c0)) clock_getres(0x6, &(0x7f0000000100)) r2 = syz_open_dev$loop(&(0x7f0000000140), 0x9, 0x40a00) socketpair(0x26, 0x80000, 0x2, &(0x7f0000000180)={0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_SPLICE={0x1e, 0x2, 0x0, @fd=r2, 0x961, {}, 0x9, 0x8, 0x0, {0x0, 0x0, r3}}, 0x1) clock_getres(0x6, &(0x7f0000000200)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1800005, 0x8010, 0xffffffffffffffff, 0x0) r5 = syz_io_uring_complete(r4) clock_gettime(0x0, &(0x7f0000000240)) socketpair(0x1f, 0x800, 0x9, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_timeval(r6, 0x1, 0x43, &(0x7f00000002c0), &(0x7f0000000300)=0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000340)={'vcan0\x00'}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x1010, r2, 0x95fc4000) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) semtimedop(0xffffffffffffffff, &(0x7f0000000380)=[{0x4, 0xf838, 0x1000}, {0x3, 0x5, 0x800}], 0x2, &(0x7f0000000400)={r7, r8+10000000}) clock_getres(0x2, &(0x7f0000000440)) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x2400, 0x467) VM DIAGNOSIS: 16:59:16 Registers: info registers vcpu 0 RAX=0000000000000001 RBX=0000000000000001 RCX=ffffffff84d1a2ce RDX=fffffbfff0b82d11 RSI=0000000000000004 RDI=ffffffff85c16880 RBP=ffffffff85c16880 RSP=ffff88801967fb40 R8 =0000000000000000 R9 =fffffbfff0b82d10 R10=ffffffff85c16883 R11=0000000000000000 R12=1ffff110032cff69 R13=0000000000000003 R14=fffffbfff0b82d10 R15=ffff88801967fb78 RIP=ffffffff84d1a460 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000555559c3d400 00000000 00000000 GS =0000 ffff8880e5342000 00000000 00000000 LDT=0000 fffffe3b00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055e834ad84c8 CR3=000000000a3b8000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000a60ce07b00000000cec3662e XMM01=000000000000000003515b82db34ca11 XMM02=0000000000000000333bebdfd0a6a21d XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=000000000000005b RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff82975135 RDI=ffffffff889c19e0 RBP=ffffffff889c19a0 RSP=ffff8880407c74a8 R8 =0000000000000000 R9 =ffffed100169d046 R10=000000000000005b R11=6e6920726568746f R12=000000000000005b R13=0000000000000010 R14=ffffffff889c19a0 R15=ffffffff82975120 RIP=ffffffff8297518d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00005555628e9400 00000000 00000000 GS =0000 ffff8880e5442000 00000000 00000000 LDT=0000 fffffe2300000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f016688a543 CR3=000000003f47c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000a60ce07b00000000cec3662e XMM01=000000000000000003515b82db34ca11 XMM02=0000000000000000333bebdfd0a6a21d XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000