Warning: Permanently added '[localhost]:56943' (ECDSA) to the list of known hosts.
2025/09/01 16:20:37 fuzzer started
2025/09/01 16:20:38 dialing manager at localhost:35473
syzkaller login: [   44.533691] cgroup: Unknown subsys name 'net'
[   44.606921] cgroup: Unknown subsys name 'cpuset'
[   44.633360] cgroup: Unknown subsys name 'rlimit'
2025/09/01 16:20:48 syscalls: 2214
2025/09/01 16:20:48 code coverage: enabled
2025/09/01 16:20:48 comparison tracing: enabled
2025/09/01 16:20:48 extra coverage: enabled
2025/09/01 16:20:48 setuid sandbox: enabled
2025/09/01 16:20:48 namespace sandbox: enabled
2025/09/01 16:20:48 Android sandbox: enabled
2025/09/01 16:20:48 fault injection: enabled
2025/09/01 16:20:48 leak checking: enabled
2025/09/01 16:20:48 net packet injection: enabled
2025/09/01 16:20:48 net device setup: enabled
2025/09/01 16:20:48 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/09/01 16:20:48 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/09/01 16:20:48 USB emulation: enabled
2025/09/01 16:20:48 hci packet injection: enabled
2025/09/01 16:20:48 wifi device emulation: enabled
2025/09/01 16:20:48 802.15.4 emulation: enabled
2025/09/01 16:20:48 fetching corpus: 50, signal 19086/20888 (executing program)
2025/09/01 16:20:48 fetching corpus: 100, signal 27856/31308 (executing program)
2025/09/01 16:20:48 fetching corpus: 150, signal 34684/39668 (executing program)
2025/09/01 16:20:48 fetching corpus: 200, signal 37009/43548 (executing program)
2025/09/01 16:20:49 fetching corpus: 250, signal 43083/50940 (executing program)
2025/09/01 16:20:49 fetching corpus: 300, signal 48205/57350 (executing program)
2025/09/01 16:20:49 fetching corpus: 350, signal 54263/64498 (executing program)
2025/09/01 16:20:49 fetching corpus: 400, signal 60230/71447 (executing program)
2025/09/01 16:20:49 fetching corpus: 450, signal 64560/76784 (executing program)
2025/09/01 16:20:49 fetching corpus: 500, signal 65836/79285 (executing program)
2025/09/01 16:20:49 fetching corpus: 550, signal 70951/85202 (executing program)
2025/09/01 16:20:49 fetching corpus: 600, signal 73106/88385 (executing program)
2025/09/01 16:20:49 fetching corpus: 650, signal 75940/92130 (executing program)
2025/09/01 16:20:49 fetching corpus: 700, signal 78404/95519 (executing program)
2025/09/01 16:20:50 fetching corpus: 750, signal 81661/99522 (executing program)
2025/09/01 16:20:50 fetching corpus: 800, signal 83027/101888 (executing program)
2025/09/01 16:20:50 fetching corpus: 850, signal 85051/104693 (executing program)
2025/09/01 16:20:50 fetching corpus: 900, signal 87214/107633 (executing program)
2025/09/01 16:20:50 fetching corpus: 950, signal 88779/110072 (executing program)
2025/09/01 16:20:50 fetching corpus: 1000, signal 93051/114603 (executing program)
2025/09/01 16:20:50 fetching corpus: 1050, signal 94196/116617 (executing program)
2025/09/01 16:20:50 fetching corpus: 1100, signal 95874/118979 (executing program)
2025/09/01 16:20:50 fetching corpus: 1150, signal 97034/120922 (executing program)
2025/09/01 16:20:50 fetching corpus: 1200, signal 98625/123169 (executing program)
2025/09/01 16:20:50 fetching corpus: 1250, signal 100311/125449 (executing program)
2025/09/01 16:20:51 fetching corpus: 1300, signal 102534/128160 (executing program)
2025/09/01 16:20:51 fetching corpus: 1350, signal 103968/130178 (executing program)
2025/09/01 16:20:51 fetching corpus: 1400, signal 104887/131805 (executing program)
2025/09/01 16:20:51 fetching corpus: 1450, signal 106173/133714 (executing program)
2025/09/01 16:20:51 fetching corpus: 1500, signal 107722/135697 (executing program)
2025/09/01 16:20:51 fetching corpus: 1550, signal 109853/138123 (executing program)
2025/09/01 16:20:51 fetching corpus: 1600, signal 112416/140780 (executing program)
2025/09/01 16:20:51 fetching corpus: 1650, signal 113818/142607 (executing program)
2025/09/01 16:20:51 fetching corpus: 1700, signal 114743/144037 (executing program)
2025/09/01 16:20:51 fetching corpus: 1750, signal 116321/145968 (executing program)
2025/09/01 16:20:52 fetching corpus: 1800, signal 117340/147453 (executing program)
2025/09/01 16:20:52 fetching corpus: 1850, signal 117990/148672 (executing program)
2025/09/01 16:20:52 fetching corpus: 1900, signal 119036/150139 (executing program)
2025/09/01 16:20:52 fetching corpus: 1950, signal 120349/151762 (executing program)
2025/09/01 16:20:52 fetching corpus: 2000, signal 121630/153398 (executing program)
2025/09/01 16:20:52 fetching corpus: 2050, signal 122822/154903 (executing program)
2025/09/01 16:20:52 fetching corpus: 2100, signal 125264/157084 (executing program)
2025/09/01 16:20:52 fetching corpus: 2150, signal 126227/158426 (executing program)
2025/09/01 16:20:52 fetching corpus: 2200, signal 127394/159874 (executing program)
2025/09/01 16:20:52 fetching corpus: 2250, signal 128156/161074 (executing program)
2025/09/01 16:20:52 fetching corpus: 2300, signal 129146/162386 (executing program)
2025/09/01 16:20:53 fetching corpus: 2350, signal 129889/163502 (executing program)
2025/09/01 16:20:53 fetching corpus: 2400, signal 130365/164491 (executing program)
2025/09/01 16:20:53 fetching corpus: 2450, signal 130929/165518 (executing program)
2025/09/01 16:20:53 fetching corpus: 2500, signal 132076/166813 (executing program)
2025/09/01 16:20:53 fetching corpus: 2550, signal 132633/167764 (executing program)
2025/09/01 16:20:53 fetching corpus: 2600, signal 133232/168756 (executing program)
2025/09/01 16:20:53 fetching corpus: 2650, signal 133907/169745 (executing program)
2025/09/01 16:20:53 fetching corpus: 2700, signal 134705/170770 (executing program)
2025/09/01 16:20:53 fetching corpus: 2750, signal 135690/171893 (executing program)
2025/09/01 16:20:53 fetching corpus: 2800, signal 136457/172919 (executing program)
2025/09/01 16:20:53 fetching corpus: 2850, signal 137181/173918 (executing program)
2025/09/01 16:20:54 fetching corpus: 2900, signal 137728/174811 (executing program)
2025/09/01 16:20:54 fetching corpus: 2950, signal 138615/175830 (executing program)
2025/09/01 16:20:54 fetching corpus: 3000, signal 139198/176701 (executing program)
2025/09/01 16:20:54 fetching corpus: 3050, signal 139648/177476 (executing program)
2025/09/01 16:20:54 fetching corpus: 3100, signal 140677/178481 (executing program)
2025/09/01 16:20:54 fetching corpus: 3150, signal 141164/179286 (executing program)
2025/09/01 16:20:54 fetching corpus: 3200, signal 142228/180286 (executing program)
2025/09/01 16:20:54 fetching corpus: 3250, signal 143426/181336 (executing program)
2025/09/01 16:20:54 fetching corpus: 3300, signal 144031/182124 (executing program)
2025/09/01 16:20:54 fetching corpus: 3350, signal 144647/182954 (executing program)
2025/09/01 16:20:54 fetching corpus: 3400, signal 145343/183756 (executing program)
2025/09/01 16:20:54 fetching corpus: 3450, signal 145917/184523 (executing program)
2025/09/01 16:20:55 fetching corpus: 3500, signal 146682/185285 (executing program)
2025/09/01 16:20:55 fetching corpus: 3550, signal 147290/185999 (executing program)
2025/09/01 16:20:55 fetching corpus: 3600, signal 147744/186703 (executing program)
2025/09/01 16:20:55 fetching corpus: 3650, signal 148450/187458 (executing program)
2025/09/01 16:20:55 fetching corpus: 3700, signal 149007/188143 (executing program)
2025/09/01 16:20:55 fetching corpus: 3750, signal 149977/188885 (executing program)
2025/09/01 16:20:55 fetching corpus: 3800, signal 150514/189505 (executing program)
2025/09/01 16:20:55 fetching corpus: 3850, signal 151213/190176 (executing program)
2025/09/01 16:20:55 fetching corpus: 3900, signal 151922/190848 (executing program)
2025/09/01 16:20:55 fetching corpus: 3950, signal 152443/191477 (executing program)
2025/09/01 16:20:55 fetching corpus: 4000, signal 152841/192083 (executing program)
2025/09/01 16:20:55 fetching corpus: 4050, signal 153263/192642 (executing program)
2025/09/01 16:20:56 fetching corpus: 4100, signal 153733/193229 (executing program)
2025/09/01 16:20:56 fetching corpus: 4150, signal 154342/193799 (executing program)
2025/09/01 16:20:56 fetching corpus: 4200, signal 154749/194364 (executing program)
2025/09/01 16:20:56 fetching corpus: 4250, signal 155145/194909 (executing program)
2025/09/01 16:20:56 fetching corpus: 4300, signal 155728/195455 (executing program)
2025/09/01 16:20:56 fetching corpus: 4350, signal 156023/195946 (executing program)
2025/09/01 16:20:56 fetching corpus: 4400, signal 156642/196499 (executing program)
2025/09/01 16:20:56 fetching corpus: 4450, signal 157177/197008 (executing program)
2025/09/01 16:20:56 fetching corpus: 4500, signal 157597/197500 (executing program)
2025/09/01 16:20:56 fetching corpus: 4550, signal 158168/197998 (executing program)
2025/09/01 16:20:57 fetching corpus: 4600, signal 158591/198525 (executing program)
2025/09/01 16:20:57 fetching corpus: 4650, signal 158863/199029 (executing program)
2025/09/01 16:20:57 fetching corpus: 4700, signal 159310/199523 (executing program)
2025/09/01 16:20:57 fetching corpus: 4750, signal 159631/199981 (executing program)
2025/09/01 16:20:57 fetching corpus: 4800, signal 160201/200430 (executing program)
2025/09/01 16:20:57 fetching corpus: 4850, signal 160726/200888 (executing program)
2025/09/01 16:20:57 fetching corpus: 4900, signal 161012/201303 (executing program)
2025/09/01 16:20:57 fetching corpus: 4950, signal 161527/201704 (executing program)
2025/09/01 16:20:57 fetching corpus: 5000, signal 161978/202122 (executing program)
2025/09/01 16:20:57 fetching corpus: 5050, signal 162302/202127 (executing program)
2025/09/01 16:20:57 fetching corpus: 5100, signal 162740/202146 (executing program)
2025/09/01 16:20:58 fetching corpus: 5150, signal 163225/202152 (executing program)
2025/09/01 16:20:58 fetching corpus: 5200, signal 163546/202168 (executing program)
2025/09/01 16:20:58 fetching corpus: 5250, signal 164011/202174 (executing program)
2025/09/01 16:20:58 fetching corpus: 5300, signal 164555/202181 (executing program)
2025/09/01 16:20:58 fetching corpus: 5350, signal 164926/202189 (executing program)
2025/09/01 16:20:58 fetching corpus: 5400, signal 165266/202189 (executing program)
2025/09/01 16:20:58 fetching corpus: 5450, signal 165969/202204 (executing program)
2025/09/01 16:20:58 fetching corpus: 5500, signal 166372/202215 (executing program)
2025/09/01 16:20:58 fetching corpus: 5550, signal 166755/202216 (executing program)
2025/09/01 16:20:58 fetching corpus: 5600, signal 167197/202217 (executing program)
2025/09/01 16:20:58 fetching corpus: 5650, signal 168016/202221 (executing program)
2025/09/01 16:20:59 fetching corpus: 5700, signal 168374/202256 (executing program)
2025/09/01 16:20:59 fetching corpus: 5750, signal 168733/202258 (executing program)
2025/09/01 16:20:59 fetching corpus: 5800, signal 169089/202260 (executing program)
2025/09/01 16:20:59 fetching corpus: 5850, signal 169387/202277 (executing program)
2025/09/01 16:20:59 fetching corpus: 5900, signal 169745/202281 (executing program)
2025/09/01 16:20:59 fetching corpus: 5950, signal 170274/202393 (executing program)
2025/09/01 16:20:59 fetching corpus: 6000, signal 170574/202394 (executing program)
2025/09/01 16:20:59 fetching corpus: 6050, signal 170845/202400 (executing program)
2025/09/01 16:20:59 fetching corpus: 6100, signal 171394/202400 (executing program)
2025/09/01 16:20:59 fetching corpus: 6150, signal 171755/202402 (executing program)
2025/09/01 16:20:59 fetching corpus: 6200, signal 172152/202403 (executing program)
2025/09/01 16:20:59 fetching corpus: 6250, signal 172626/202417 (executing program)
2025/09/01 16:20:59 fetching corpus: 6300, signal 172908/202421 (executing program)
2025/09/01 16:21:00 fetching corpus: 6350, signal 173172/202435 (executing program)
2025/09/01 16:21:00 fetching corpus: 6400, signal 173650/202436 (executing program)
2025/09/01 16:21:00 fetching corpus: 6450, signal 174029/202445 (executing program)
2025/09/01 16:21:00 fetching corpus: 6500, signal 174331/202489 (executing program)
2025/09/01 16:21:00 fetching corpus: 6550, signal 174577/202508 (executing program)
2025/09/01 16:21:00 fetching corpus: 6600, signal 174978/202518 (executing program)
2025/09/01 16:21:00 fetching corpus: 6650, signal 175263/202521 (executing program)
2025/09/01 16:21:00 fetching corpus: 6700, signal 175500/202527 (executing program)
2025/09/01 16:21:00 fetching corpus: 6750, signal 175827/202536 (executing program)
2025/09/01 16:21:00 fetching corpus: 6800, signal 176118/202546 (executing program)
2025/09/01 16:21:00 fetching corpus: 6850, signal 176462/202551 (executing program)
2025/09/01 16:21:01 fetching corpus: 6900, signal 177273/202557 (executing program)
2025/09/01 16:21:01 fetching corpus: 6950, signal 177557/202567 (executing program)
2025/09/01 16:21:01 fetching corpus: 7000, signal 177879/202584 (executing program)
2025/09/01 16:21:01 fetching corpus: 7050, signal 178561/202694 (executing program)
2025/09/01 16:21:01 fetching corpus: 7100, signal 178984/202736 (executing program)
2025/09/01 16:21:01 fetching corpus: 7150, signal 179241/202741 (executing program)
2025/09/01 16:21:01 fetching corpus: 7200, signal 179502/202745 (executing program)
2025/09/01 16:21:01 fetching corpus: 7250, signal 179738/202749 (executing program)
2025/09/01 16:21:01 fetching corpus: 7300, signal 180020/202755 (executing program)
2025/09/01 16:21:01 fetching corpus: 7350, signal 180354/202756 (executing program)
2025/09/01 16:21:01 fetching corpus: 7400, signal 180737/202762 (executing program)
2025/09/01 16:21:02 fetching corpus: 7450, signal 181084/202764 (executing program)
2025/09/01 16:21:02 fetching corpus: 7500, signal 181407/202764 (executing program)
2025/09/01 16:21:02 fetching corpus: 7550, signal 181669/202765 (executing program)
2025/09/01 16:21:02 fetching corpus: 7600, signal 182014/202836 (executing program)
2025/09/01 16:21:02 fetching corpus: 7650, signal 182355/202842 (executing program)
2025/09/01 16:21:02 fetching corpus: 7700, signal 182712/202844 (executing program)
2025/09/01 16:21:02 fetching corpus: 7750, signal 182892/202847 (executing program)
2025/09/01 16:21:02 fetching corpus: 7800, signal 183217/202849 (executing program)
2025/09/01 16:21:02 fetching corpus: 7850, signal 183487/202862 (executing program)
2025/09/01 16:21:02 fetching corpus: 7900, signal 183778/202873 (executing program)
2025/09/01 16:21:02 fetching corpus: 7950, signal 184032/202876 (executing program)
2025/09/01 16:21:03 fetching corpus: 8000, signal 184301/202885 (executing program)
2025/09/01 16:21:03 fetching corpus: 8050, signal 184557/202888 (executing program)
2025/09/01 16:21:03 fetching corpus: 8100, signal 184916/202992 (executing program)
2025/09/01 16:21:03 fetching corpus: 8150, signal 185184/202997 (executing program)
2025/09/01 16:21:03 fetching corpus: 8200, signal 185495/203005 (executing program)
2025/09/01 16:21:03 fetching corpus: 8250, signal 185786/203013 (executing program)
2025/09/01 16:21:03 fetching corpus: 8300, signal 186107/203030 (executing program)
2025/09/01 16:21:03 fetching corpus: 8350, signal 186427/203031 (executing program)
2025/09/01 16:21:03 fetching corpus: 8400, signal 186658/203031 (executing program)
2025/09/01 16:21:03 fetching corpus: 8450, signal 186955/203037 (executing program)
2025/09/01 16:21:04 fetching corpus: 8500, signal 187258/203042 (executing program)
2025/09/01 16:21:04 fetching corpus: 8550, signal 187543/203050 (executing program)
2025/09/01 16:21:04 fetching corpus: 8600, signal 187738/203056 (executing program)
2025/09/01 16:21:04 fetching corpus: 8650, signal 188141/203057 (executing program)
2025/09/01 16:21:04 fetching corpus: 8700, signal 188413/203059 (executing program)
2025/09/01 16:21:04 fetching corpus: 8750, signal 188614/203071 (executing program)
2025/09/01 16:21:04 fetching corpus: 8800, signal 189024/203073 (executing program)
2025/09/01 16:21:04 fetching corpus: 8850, signal 189235/203075 (executing program)
2025/09/01 16:21:04 fetching corpus: 8900, signal 189471/203082 (executing program)
2025/09/01 16:21:04 fetching corpus: 8950, signal 189668/203086 (executing program)
2025/09/01 16:21:04 fetching corpus: 9000, signal 190134/203087 (executing program)
2025/09/01 16:21:04 fetching corpus: 9050, signal 190363/203088 (executing program)
2025/09/01 16:21:05 fetching corpus: 9100, signal 190592/203092 (executing program)
2025/09/01 16:21:05 fetching corpus: 9150, signal 190956/203127 (executing program)
2025/09/01 16:21:05 fetching corpus: 9200, signal 191175/203133 (executing program)
2025/09/01 16:21:05 fetching corpus: 9250, signal 191514/203133 (executing program)
2025/09/01 16:21:05 fetching corpus: 9300, signal 192074/203162 (executing program)
2025/09/01 16:21:05 fetching corpus: 9350, signal 192215/203164 (executing program)
2025/09/01 16:21:05 fetching corpus: 9400, signal 192478/203165 (executing program)
2025/09/01 16:21:05 fetching corpus: 9450, signal 192757/203165 (executing program)
2025/09/01 16:21:05 fetching corpus: 9500, signal 192989/203169 (executing program)
2025/09/01 16:21:05 fetching corpus: 9550, signal 193280/203175 (executing program)
2025/09/01 16:21:05 fetching corpus: 9600, signal 193611/203185 (executing program)
2025/09/01 16:21:06 fetching corpus: 9650, signal 193776/203189 (executing program)
2025/09/01 16:21:06 fetching corpus: 9700, signal 193929/203205 (executing program)
2025/09/01 16:21:06 fetching corpus: 9750, signal 194142/203227 (executing program)
2025/09/01 16:21:06 fetching corpus: 9800, signal 194311/203242 (executing program)
2025/09/01 16:21:06 fetching corpus: 9850, signal 194704/203247 (executing program)
2025/09/01 16:21:06 fetching corpus: 9900, signal 194846/203251 (executing program)
2025/09/01 16:21:06 fetching corpus: 9950, signal 195060/203253 (executing program)
2025/09/01 16:21:06 fetching corpus: 10000, signal 195282/203255 (executing program)
2025/09/01 16:21:06 fetching corpus: 10050, signal 195512/203263 (executing program)
2025/09/01 16:21:06 fetching corpus: 10100, signal 195916/203267 (executing program)
2025/09/01 16:21:06 fetching corpus: 10133, signal 196010/203267 (executing program)
2025/09/01 16:21:06 fetching corpus: 10133, signal 196010/203267 (executing program)
2025/09/01 16:21:08 starting 8 fuzzer processes
16:21:08 executing program 1:
ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f0000000000)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000240)={0x0, 0x3, 0x100000000, 0x400000008000})
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f00000002c0), &(0x7f0000000300)=0xc)
ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0)
setxattr$security_capability(&(0x7f0000000340)='./file1\x00', &(0x7f0000000380), &(0x7f00000003c0)=@v3={0x3000000, [{0x5b, 0x4}, {0x0, 0x5}], 0xee00}, 0x18, 0x277840d42e2c9715)
r1 = fsopen(&(0x7f0000000400)='configfs\x00', 0x0)
r2 = dup(r1)
setxattr$security_capability(&(0x7f0000000440)='./file0/file0\x00', &(0x7f0000000480), &(0x7f00000004c0)=@v3={0x3000000, [{0x4, 0x7}, {0x4, 0x200}], 0xee01}, 0x18, 0x1)
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000500)=0x9)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000540)={{0x1, 0x1, 0x18, <r3=>r2, {<r4=>r1}}, './file2\x00'})
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r3, 0x89f7, &(0x7f0000000600)={'ip6_vti0\x00', &(0x7f0000000580)={'syztnl2\x00', 0x0, 0x2f, 0x7, 0x4b, 0xfff, 0x1c, @mcast2, @private0, 0x700, 0x8, 0x7f, 0x8}})
openat$dir(0xffffffffffffff9c, &(0x7f0000000640)='./file2\x00', 0x18000, 0x1a)
ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f0000000680)="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")
r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000780), 0x42000)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r5, 0xc0505405, &(0x7f00000007c0)={{0x1, 0x3, 0x0, 0x0, 0x2}, 0x3ff, 0x4, 0x2})
r6 = openat$cgroup_devices(r0, &(0x7f0000000840)='devices.allow\x00', 0x2, 0x0)
ioctl$FS_IOC_GETFSLABEL(r6, 0x81009431, &(0x7f0000000880))
getsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, &(0x7f0000000980), 0x2)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c)

16:21:08 executing program 0:
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x7, 0x208000)
ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f0000000040))
r1 = syz_open_dev$vcsu(&(0x7f0000000080), 0x400, 0x505001)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x0, 0xfffffffffffffffd, 0xc1, 0x5, @scatter={0x3, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/20, 0x14}, {&(0x7f0000000100)=""/7, 0x7}, {&(0x7f0000000140)=""/123, 0x7b}]}, &(0x7f0000000200)="9a264b39a9fbcf3a8b54debf268629c47a13c79087456aef07e022504c10b8582a8c01ecbddbc675f28ab4c90a69e110c1cd28ab48a7c147ba1e9dc563547e44bed55b505242bc5b7f611851d5f0043665bc6b7f161962ad34a8bf574dcfdb77273c8732c6e395e1f1b6fa7633005ae00a4731884956f849fca5134dced78f0dda531f6e3dc352ab271663afe85fdf22398483c733062a3a06e559db895e2d55f37f80f23918e60c61973aad77ef398a45630bc20e3d0e8c7e51fd92396485ab59", &(0x7f0000000300)=""/56, 0x773, 0x10042, 0x0, &(0x7f0000000340)})
ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f0000000400)={<r2=>0x0, 0x9, 0x1, 0x1})
ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000800)={0x10, 0x6, {0x2, @struct={0x9, 0x2}, 0x0, 0x1, 0x401, 0xfff, 0x0, 0x5, 0x4, @struct={0x92, 0xb5da}, 0x8000, 0x8, [0x1, 0x2, 0x3, 0x1, 0xf58, 0x14]}, {0x10001, @usage=0x1, 0x0, 0x1ff, 0x4b, 0x3ff, 0x8, 0x8, 0x80, @usage=0x100000001, 0x7, 0xfffff4e5, [0x0, 0x2c, 0x3, 0x1, 0x7, 0x9]}, {0x0, @usage, r2, 0x800, 0x200, 0x3f, 0xffffffff, 0x5, 0xc4, @struct={0x5, 0x4}, 0x1a, 0x5, [0x3, 0x5, 0xb4f5, 0x7, 0x400, 0x4]}, {0x7, 0x2, 0x9}})
ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000c00))
ioctl$SCSI_IOCTL_SYNC(r0, 0x4)
ioctl$AUTOFS_IOC_READY(r1, 0x9360, 0x6)
ioctl$SG_IO(r0, 0x2285, &(0x7f0000000e00)={0x53, 0xffffffffffffffff, 0x3b, 0x20, @scatter={0x1, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000c40)=""/2, 0x2}]}, &(0x7f0000000cc0)="c8c0404c47408da280ece47eb1c3c7f2e7b58ad0dab33765e46632a225c97fd5a934f383c2fbb5418a2ba9a1c846cb355431cf1c929cfa38f1a149", &(0x7f0000000d00)=""/170, 0x6, 0x2, 0x3, &(0x7f0000000dc0)})
ioctl$SNAPSHOT_S2RAM(r1, 0x330b)
fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000e80)=0x2)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001040)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001000)={&(0x7f0000000f00)={0xc4, 0x2, 0x6, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@IPSET_ATTR_DATA={0x50, 0x7, 0x0, 0x1, [@IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x7}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x80000000}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0xa727}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xa}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0xe4}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x3}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x1}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xff}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x3}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x20}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4000000}, 0x804)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/meminfo\x00', 0x0, 0x0)
pread64(r3, &(0x7f00000010c0)=""/76, 0x4c, 0x7)
ioctl$SG_SET_DEBUG(r3, 0x227e, &(0x7f0000001140))
ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f0000001180)=0x1)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000011c0)='/proc/vmallocinfo\x00', 0x0, 0x0)
ioctl$SG_SET_FORCE_PACK_ID(r4, 0x227b, &(0x7f0000001200)=0x1)
vmsplice(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000001280)}, {&(0x7f00000012c0)="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", 0x1000}, {&(0x7f00000022c0)="5afca0bee3fd8d12eaebc8406e637d187d400afbddc75ffc6ceb51a0d14cc14dd5d61cb57cc68ce513d9368ac5ec5f0bcd4cb8f4327d3746c5c62a58ad916249ca1d40249ecbc00d3e47c17e28c814659e6b38583e0a88e0a5a9881487b2539f474d212c12417c2f2ecb37897accc517dddc766875b1faa7585f90427562dde7b333a6e113011e1a95754960690a17aaf99df7ccaafaed9e511107cd9ca0b0ee22ceeef56f1f163d7f5c809815e47470a595af58ad4f5ebd9f8dbb6e24b2cf353d185c615a485af7e298d01d84e522f061", 0xd1}], 0x3, 0xc)

[   75.012146] audit: type=1400 audit(1756743668.762:7): avc:  denied  { execmem } for  pid=272 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
16:21:08 executing program 2:
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x1, 0x7, 0x0, {0x0, 0x5, 0x0, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1}, 0x800, 0xffffffff, 0x81}}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x20, 0x3, 0x4, 0x0, {0x4, 0x1, 0x0, 0x186, 0x0, 0x1, 0x0, 0x1, 0x1}, 0x1, 0x6}}]}, 0x68}, 0x1, 0x0, 0x0, 0x81}, 0x4004040)
r1 = socket$inet_icmp(0x2, 0x2, 0x1)
r2 = dup2(r1, r0)
ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0)
r3 = dup2(r0, r1)
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/module/amd_uncore', 0x600000, 0x5c)
r5 = syz_mount_image$nfs4(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x81, 0x4, &(0x7f0000001380)=[{&(0x7f0000000240)="9d036777fdd6ad92c3217d4f363160a882e6281dea6997bd9301c90cd14bf072fbaee846375d076c74d71a907af663a8de4111f4239f75cdaba12373c2a40fa976771efa659f84edc24b0efe37c2dc56274d5be77d72650da01a203e09c454399650a6aff13267869960ffa2333426592cf27af0d54033e53d1b7c4ba2d4be251f825c697de961f79bed48b2048c883fdc0f19", 0x93, 0x6}, {&(0x7f0000000300)="9e93598faf541c16c5ff171ca2edbfefb67192eb8e2206ac40a27a31b57628fb5b9049b37f4620f3856f2a28a26fd23ffb60ef0b1edb3d5bbd2a6c2032b24ee7bffb79b1189f522ab1242cb30f51bfdda568d83ad4602d78d442375cf50d5c0fe73366aa7f49af99d4143e133c6f3f879db43db76758419d38049d271b2dfdfb88c6a9d7f5a7e07e3129433a0843a7d49967488542a6cd785b2781ff7da4d17b6ce8c44a7efb4bd7cecb56d7b699171b915933fe4385a2f7b896170bab6bfee5a343ba01aee5edea90c6882d5d48f8ce56577c4ddbebe8607fbd0dc11d6d23e3ec66e0c546ab1f813982eeb8767bc288187c76180429b952e5becce83dd812ea72a15be278c1b62259a046406d0e5d2a61253002454f4f710bde650da87c262aefbee3c03c0cf9b067499520d120fae76d6baac36e5f0dfc35383fb9b9dde6b30c5d9fe8319a713724b9598c81aaf93652193cee0d98dec18cb593e782fd1a438c200732ad322407d33deceb8fa6f71542a584662af4cc27294565263d5d0ab670402cfd8b35e7ea60d7df25121d5ad19ee17596ca1b7b4b8c9a17f1a1a67f715fdc637a1d8192ef6a16d785b9687d36599befae77bca1aeba35e5877712e546a65bdc8792e0890a6fb56cc49e6f8d7c34d9741aa931cc16087a3020eaf14ac1da28a36dbfd699d1a6b71a142e92443d73675c436d25ec31765d216386211ce6fcda2185c27ba0d84c4b5d51d6ff2420e8aa633838a00e110ad712ac4e0d297d696ae9843cdba0f520fc11cd9441dd26cd23f2091968ff74a13d8ac9050e3c76330f4068e88de16965b222a1b054ca2f6511e927280eaa8bb928fedc1fb03298c9aca9eb422aafa3c1a4d235d541ecd1b51e0c9555b3df64aa4d6fa162b8a252a68c5803ad4be85196546e0796109c05165f4b4bd9c990a414cdf712d7600419cc17928d361d452c70b94d2643608425d9381638da4afa6732a173cd931578656abf466ff7275576c2f84921f6b69983fae31244e0d37dc20e0cdd87f29b6a1542deb16ac18ab0fe404cb4396491c6e32923aee5138d4ef5f828b798b9000db12538b2db3eb9fcbbfdcd35d7fd9e3cad3f2fd9640a6572596e635609bdd5e5c764a2ab121e268a9fd893046ff446db7fd5e5b7c56f253c1fb32ebe2f3bb725c98daee839b439ea38f68ff60044c89654f3a9284491a2dfc728329b5f79c33e3dd0c1f362e8df31042b00686bea7ddb93bef9afef3b919bba8227b27bb2fc6cdc8f98de48a14f6446ae3f6d40c25ca00fbe504fc662ba481d8ad60d28e47cc4a963b5487de64b00b45e6e5978bdd197573309059f2614ded2e204a1d0245da41045e06bc46aff52cea41e8d03738a2bbb0aee267163c34e7fbc281f877f016c0ac327e19e79c8bede99ed31f0a54d6c08f7b8747b853cd53c98573d56dfe30325c08d9dcb67a67cb90bd0ae70013736664c15e62998e067b7f1e254aceae3e4e3091cb76b45946fe10fda27f4784a511aa1d9bc5543ea3d931a09b3ee613f08b6a87852779b09f6e3d6ce43edc180f59831eaf1565ea16b619617f37c2260ae922f152eeabf327a2c128683725f9ee427e733fa2c02f7f13bdc3dacb77913fa44fea87eebcbdb87bbb793f446bc8f223aff81a1f8b1a1c305843809734efed3d31efeb937544424aed0ac77be7dafac2aba4ddd718c91d6badd5d4b7929ef6a6103ddf448c9d5b79f77b4397712112e592f5276c0784964fd1b14c0efbc15dcd24763f2d3bc4c14e4d32a2fb5971b0682690f73ba67096cd3ab91000950a966391f8946ab98cb6846f6e67e81b66408dd5ed7c57816610daf5b7f9d41867a9da1269284de50ee562aaf3a044b628466dec71b61983ec2567dedec621a8fe26094f852437ddff4e87edfcf421880272332d9565e6604eafeef0b8d66fdedce311bd1e3c5300f5b5c682ecbeff01a5f0eeec2087a394f328be98f688f4047456648c9934618538d97c9cee1ada1fd5493d02ab56dee1107fb3ae976c32ffee159b0e9e8ba56329bd9ba947a394d3be552c67c46434bda340b4de06c0bf181bcec7cecaeb0c650be9501ba46c935f60483285ab2cc30d9649039c6292feb737eedbdf10e9b1810dd90123d8954824b5c249b22962a558e046a9ebbe15314325cc56a38b28c590668becb410509bddae8019a4225296cbf779d4a4a97b6a2de5a744ebec99b2f78692fb2cee88311ccb135a7904c03e8a19f6d1352cec1844ccf8e2906a8bada60fda1ef6b1edd0767fceb574d6dcec8bab53181d51d2522fc844de3bf7721c60c81a30abfb9fe673424357d31b80d5e1076124e4b8377d9d4fe42170b7a73bfcebf139bc3b75d088b995f072185e88a039021b1d382cf0ee1050b3b497d2d08f708ebd2082c6384b0f47a8a9ada3e19f79dfd6fd188f75baeea7882dcab31037d54601ed363de6b8f66e3d4b0e6dab3be42f9713f67fd4249f14981d0d99e970b612047cdbb70ec7b96b9ed3f93064cb9d4e3144b46fda3801e30439adcce7f99b2b23a4b32a0d0c3de877fb7162319eadd229c298d7e33ad45490577376df342771714ff840ec8b30db3a4a1348a1479dc664bc68ed73f26a9847c0b8220c035b684413d8183599f5352f838796321e4cdd04c806b272db1ce350be19318669323fb2768539edb860561abba84f037271a30ff8a5dfb84e1d1c55b10b5965d4c67a0c18950ceda5d3add0a336c13b282243c008726d1edebeb2d575a6403c87eec0e0080159b50360437e492a8e332f3f6f7f65f6f295053e10f4c6d5f0b4d7454062b3bc17811babdd93b8a56e58135093df08663a426b0f5aeac67f6ff2e40550cc852ec09fb97ddc273373dc7b09f069c0abe90eb6eced446a2d5fae939e8938e788f84933988d3e5ac8add27a8b4a4ff93a75724218cb05a732e68dc74d780dfdde2f3c27537306da4b844674757d3b1de3e2f708247a1cba5b23c4c9af109efa3d51a11239b4b44a61336d7aec49f553f229195b6b665bd8aaac5d36a8aa39911518a290216b36877310a00d8de316e46bf1ef67d35fb531f7556b468a157ccfee70d6ec736177955a8149e38fcb97af2904ad41aa9ec64e3b3ee4773af2314a81f652e39e9d6437bc4282cbe7daf6de41da53797d484e8f75cb36ef0b39700b7b05ed75e75895f40047abe1cc486a352aeb29a4c10fdd5e4b6fe15b34048a401a8e46b2fbf0ffdd032508002be6106df4b22fbea00a2190bf06446bfb88ad8a53621159b63495fe07d1413e1d6e503600086df42230155c158bbe1a5fd15c2d3f785c2b4886f840b5a091b9bb6d1f21e45e0350c6781b13d7d57db73a9781b7f99ae1beb18018e0b39b988066fd41e3ae9d2bd9242cb8fde83e1b5706177daa072c26159943de575a1cedfbe47ac3fc29ed0bed6475fb8e0af9efd434ff5466dcacee7a98ae99ff554ff6a2d4407a3938dbf4c9470ba9385d7c8d4d3ee81fab87414a4746dfbe49c5d170f2c417f6f95144793e0071ee2240edd8fc0e179d6d638bc80bd9c362fa27c4ceb960ae4968b14ace2b9303ae570f69bd80a8365472ca27d8cf887ed070851c9b097d77d492c287ad1571bed6757343618feefcd6286f4e67332ee3887abb3d49639b5b08138146072697c7295cc4089628835dd113e2178989afffd3cdf173e3d16ae3b0549369bab73aa361cec0159375bf0c29a440b4edbcde92af4e87b44077a7a4582d910841deac05fa4640623f27099fd4cadbe7d0b4665277819bcaa8a6915600a81f896e4ee09efb113dd7e42b73e268a22b56146f506b503702416e6551601d3849d3a502f4a568f5231a19a5b3634aa79ae9ee2e8e0b561a7bbae76997344c01d490aca5ad92b868e6230819acfda91c1203d49a9936f96132f0eb56df150c096f42e39b6b9f055a5f930b48cedd7e27d98827318d0aa8f8d8494d4d5c3fd58d877779736e4ebd1bbf6993d5fbbec25699157b3ba2d5e682c7f61f496ad5db2802c2c7d47b6d630e35e22c44ad1b6673196ecbfe8f2dcb39a47fea5260ed92fbff0bcc5a897d4e2f2de2df17d5f533dae2ea1cb6b83a7064e3d825cf6bdf7a2e6670738dc700236e54dc204bf0453ebb9fb252080331f3f22781a04c9569c5d4c349ebf2f47bbe9d1d59d4f877ed8340107ba4b6c5e8efa0b1cf819f9893045cf02eb6dae77b8f380c7ff8a90cd31806d32b8266930d961c80bb9a70930556e944b6c3124b36f93e488711fd8104de532e0ab645e97bea0275c41eec8470f9d3091de1491084b4f45b22c51056337be8a64dcd8c49f58e5a9a5635ef994916a703de417e4d3642f67565968c356beb6cdec1bec0532c9872ed206c57edf2b813ab02437bad9108376090e22d60f8433ea3cacea1a7de679ac2f4ab8cf2e67417cde79a5ef22d84ca9362008288c5605d23d7db44c969fdd33bb8ec5c9faa97f6528fff9e658eaff3b8555804bc4207e96ccda392715f7adeabae4fcb970868c00196e8f9cf3c9eb80abdaa23aa667da7ec5cd38bf2c849b000f12b4fec284226a9db22ef5a37b7bfb65545409bc2375501ddeb857d86ca16ec5cf7a04d6500a90f14fa2e6c9d53d67ecfe2a40077d032d1157b2964c2c884f8f13db34391bcfddc9c59a6e4d48d27da59ff82defd1315292d8d41b460bbc745c9882680636bb5bc5b50b231a2faa164a3fbf952d3e0b190f20cdf79a340beb16cdf2db0716dc00d8b675c530b857ea5f53a1945871eca178facdca2a6f23b385be7c1326d01a28197563a30ad38b72dde4d7a6a610e5d9ff5292759ab266d03e0af5cc26e42e7c49d4b39937685bd4ccf9ee80b5201211bddcb92745c0167e9d79eb2ea976a0aac34a22f0fe45da0c0c7f2ecd6fd8b823ecd9568279a664337e5001b013d627cb3b8a75d0940e77792d018f1351ff33500c681db19caac9b87dc14a12015e0adc5856ba29590e51ef30c98f7f57c10905b611cfd60508f7b681f0c880dd65ca37cbd187fa5135fe5decdf9a590d6d1dd6981432f8fc4754ee76be98815d34a1333e00864bd43a8b8474e728509987a3ee13eb1f3cfc7cf8b6d0f149efea9cd35785404480662d19945c35a50329ec49bcab3c140d84d0e0b42b4d1ce8a3f6a17e7f8c8bd5167ab5d5dfd7c3df4be45a7f04f13902fbf07d30d63bdd6b37118022be163765d9ca1abc2aa6cd4b8bdcb11a9736d9e563bf972ddb9277ceab375bc235f4969337c9371f8dbf50fbb3dc61dc57ad64a0d677f20a56c44e5c34b054969c91c9785ac5509a5387798d0718a86448f0d70c7072423307f2cb8abdd1655b4f054e769b9ce64f0dfe0d0e327ff5d6b7917dcf2007f90cd32c83ff05e4c1237346aec2a0f189a391242b6ee8b8e48f040491b37eed360d70a1dd5dde2fd7ba89c60ad6737843b943cbc855a5d385bf12f7575fb775a85153eeebfea0a417953db6d2e8113ae4e4b4fb32516dedcae5ae38d791adef7da8a7376ade1ff8c9138246aa6256564e8553247a0bb9d549335653a7d2e1d2ee126e623fca15073f203510145432a606c77095d00baa422a90428b0ed19ae4b530891c82d56267dd89d10dfc0a9ebba9f6807c27d03f98d8d3bc03bfc1025a7cbdde09d376cbce047a51ba506f7462eacfee2d6af56d198a53e82e06632bc0968ea54853a0723695f238fc8a0f75cb470f2cf67380abcfe22237092c9437b21a83c8f92db685d229b821da817b15fb13058b01f9f2d7bd07aefccac82769042407f492d53f440f831f1a7ad426c2f66663", 0x1000, 0xfff}, {&(0x7f0000001300)="a677a7803d30c07b8dddcab3b0afdd15cc20b16d0964d91be26e43c0a9a9cea70d8d", 0x22, 0xa0}, {&(0x7f0000001340)="b6372595b6353229c6ab4d6a88419177", 0x10, 0x6}], 0x44402, &(0x7f0000001400)={[{'%]-.{*{#!-[.'}, {'\'(\x88--'}, {}, {'%@'}, {'--)&)'}], [{@subj_type={'subj_type', 0x3d, '^]@,+@]'}}, {@uid_lt={'uid<', 0xee00}}, {@smackfsdef={'smackfsdef', 0x3d, '^/'}}, {@audit}, {@hash}, {@subj_role}, {@smackfsfloor={'smackfsfloor', 0x3d, ')[{^-[\\'}}, {@seclabel}, {@smackfshat={'smackfshat', 0x3d, '\xed]'}}]})
ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r5)
ioctl$FS_IOC_GETFLAGS(r4, 0x80086601, &(0x7f00000014c0))
ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0)
write$binfmt_aout(r2, &(0x7f0000001500)={{0x107, 0x5, 0x3f, 0x259, 0x25, 0x4e16, 0x233, 0x71}, "fcb9bd0b659f70a722f65828328ab21fec6488900d42", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xa36)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000002100)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000001f40)=""/181, 0xb5, 0x0, &(0x7f0000002000)=""/242, 0xf2}, &(0x7f0000002140)=0x40)
r6 = geteuid()
mount$cgroup2(0x0, &(0x7f0000002180)='./file0\x00', &(0x7f00000021c0), 0x22400, &(0x7f0000002200)={[{@memory_localevents}], [{@appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, 'subj_role'}}, {@dont_hash}, {@fsuuid={'fsuuid', 0x3d, {[0x38, 0x65, 0x35, 0x39, 0x32, 0x36, 0x35, 0x34], 0x2d, [0x33, 0x37, 0x61, 0x34], 0x2d, [0x32, 0x33, 0x39, 0x30], 0x2d, [0x30, 0x30, 0x30, 0x65], 0x2d, [0x0, 0x65, 0x66, 0x39, 0x38, 0x64, 0x66, 0x31]}}}, {@fowner_lt={'fowner<', 0xee01}}, {@euid_gt={'euid>', r6}}]})
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000002300), r0)
sendmsg$TIPC_NL_PUBL_GET(r4, &(0x7f0000002540)={&(0x7f00000022c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002500)={&(0x7f0000002340)={0x190, r7, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3f}]}, @TIPC_NLA_PUBL={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x81}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5e}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x218fe9c7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x57ee}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}]}, @TIPC_NLA_SOCK={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x40}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x7ff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x401}}, {0x14, 0x2, @in={0x2, 0x4e24, @rand_addr=0x64010101}}}}]}, @TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6426}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}]}]}, @TIPC_NLA_MEDIA={0x58, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}]}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x20044040}, 0x8000)
r8 = pidfd_getfd(r3, r5, 0x0)
ioctl$sock_inet_tcp_SIOCINQ(r8, 0x541b, &(0x7f0000002580))
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000002600)={{0x1, 0x1, 0x18}, './file0\x00'})

16:21:08 executing program 3:
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x10001, 0xa7}}, './file0\x00'})
fsetxattr(r0, &(0x7f0000000040)=@random={'system.', '**#(\x00'}, &(0x7f0000000080)='\'@#%/\x00', 0x6, 0x1)
mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='cgroup\x00', 0x400, &(0x7f0000000180)='**#(\x00')
r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'})
syz_mount_image$tmpfs(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x40, 0x2, &(0x7f0000000380)=[{&(0x7f0000000280)="c0d76087efcf123010432574d7b95c9bdb60d34cc55b81e92fd0ec77f95ab91f62b867d0609958b9dd0b848199db49dd4372c466f2d069275a", 0x39, 0x480}, {&(0x7f00000002c0)="02721d78899a34b0aca651cc059bff3932a992adc150fe4ec9d8c9813729d76cd1225d82c5b810d857109a38926020f9290a00c1041746ad626e912012eded8665e8477ef8e9706b87830745508f4a4a9ec670450fb8221bbf07945c96b789873cd061a084059a874184b7a1e7e180b1a3bdc97eb6beaef93bacd3c10177986d567f2139bd43dae0b330ddb1359578cfcd5b9c3126b0ac7143d9353a", 0x9c, 0x3}], 0x1000, &(0x7f00000003c0)={[{@mode={'mode', 0x3d, 0x3ff}}, {@size={'size', 0x3d, [0x6d, 0x33, 0x37, 0x32, 0x34]}}, {}], [{@dont_hash}, {@smackfstransmute={'smackfstransmute', 0x3d, '\'@#%/\x00'}}]})
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x8000)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002ac0)=[{{&(0x7f0000000480)=@abs, 0x6e, &(0x7f0000000800)=[{&(0x7f0000000500)=""/254, 0xfe}, {&(0x7f0000000600)=""/214, 0xd6}, {&(0x7f0000000700)=""/61, 0x3d}, {&(0x7f0000000740)=""/185, 0xb9}], 0x4, &(0x7f0000000840)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x78}}, {{&(0x7f00000008c0)=@abs, 0x6e, &(0x7f0000001d40)=[{&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000001940)=""/183, 0xb7}, {&(0x7f0000001a00)=""/226, 0xe2}, {&(0x7f0000001b00)=""/190, 0xbe}, {&(0x7f0000001bc0)=""/207, 0xcf}, {&(0x7f0000001cc0)=""/105, 0x69}], 0x6, &(0x7f0000001dc0)=[@rights={{0x10}}], 0x10}}, {{&(0x7f0000001e00), 0x6e, &(0x7f0000002040)=[{&(0x7f0000001e80)=""/26, 0x1a}, {&(0x7f0000001ec0)=""/203, 0xcb}, {&(0x7f0000001fc0)=""/94, 0x5e}], 0x3, &(0x7f0000002080)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r4=>0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, <r5=>0xffffffffffffffff, 0xffffffffffffffff]}}], 0x80}}, {{&(0x7f0000002100)=@abs, 0x6e, &(0x7f00000021c0)=[{&(0x7f0000002180)=""/41, 0x29}], 0x1, &(0x7f0000002200)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, <r6=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xf0}}, {{&(0x7f0000002300)=@abs, 0x6e, &(0x7f0000002640)=[{&(0x7f0000002380)=""/149, 0x95}, {&(0x7f0000002440)=""/133, 0x85}, {&(0x7f0000002500)=""/16, 0x10}, {&(0x7f0000002540)=""/159, 0x9f}, {&(0x7f0000002600)=""/18, 0x12}], 0x5}}, {{&(0x7f00000026c0)=@abs, 0x6e, &(0x7f0000002a00)=[{&(0x7f0000002740)=""/158, 0x9e}, {&(0x7f0000002800)}, {&(0x7f0000002840)=""/216, 0xd8}, {&(0x7f0000002940)=""/174, 0xae}], 0x4, &(0x7f0000002a40)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}], 0x6, 0x10061, &(0x7f0000002c40)={0x77359400})
syz_mount_image$nfs4(&(0x7f0000002c80), &(0x7f0000002cc0)='./file1\x00', 0x2, 0x4, &(0x7f00000030c0)=[{&(0x7f0000002d00)="4cd5b35d4da70b197bcd7d7817daca4f509ebc26fa56fffe130a0e5367a5794f4fcd7a6b708f4f06e5889a5466ed175f6781d37ba6ee9f5880be907417619dae45454fc2e58191f4c88f59efab828b48ac49e06aa6fa743616e2cab0daeede6ed160b7529ef4d61a3c81d25a89c347fb7a58e2b39d722309ff92aa252e786e3f0c1da00ed362a041ad772d7cac526bb7d1f025058d654c0e3c20745bee7262b36523beb50cce14ebdd40c6f24186089df0e9646567ac13f7d945de3a152214bee61c474e6c9a91ebfe775dcf347f9ea3987b1585b538ad513c6c0d01e7d86f0e20b852a66534a3081efc06312aef", 0xee, 0x5}, {&(0x7f0000002e00)="133522724a8fea898b8ec83bd52956ab2d23e056cbcf64d4e2a0c6f3e75df5e20548f2fbfb7f2035e158810dfe98f7d3ce180076ac7865d389de379329ad2d9c4d41859b5e5768b0031e3d1014f21654db28a35aa5f6844f2109dd70e02f4f6520ef52b4aab6e72cfd50f76a5e4256a2e1bfff6f48a845b96129a3fd08df321fcde9de0337f0dac1bc20d49c2e8f1af5be5acb2e168c07b539c80d9b722299e91a5e9afc1042c11c028d568670e8d8cdaa342f24201172a068489d62a3fdb16fbad2d5e6d7429a6a2acf4f3b7e11ffcf1310cb412a28914cd446028d0877b094f528a66013534fa19397", 0xea, 0xfffffffffffffffb}, {&(0x7f0000002f00)="8a53d2f58d93321638d15e6202b5493b8c320ecb6fc13f45857fe88cee9bdc507cc779b720508521acc1c069fa675e02c2d054ddf180b3c20b03218bfb6aa1e09406d3d856ce3feaca2652f53b7bc9ff278042ef20b7a6ce3a606090b91d6e3041cae72072b16886d14ba7b78cdd9d7b69eb81a97784910f56b3243e7df6713a6b203123cdc1f64ca09626853caca2e0d2097d9b0fea32", 0x97}, {&(0x7f0000002fc0)="cf669e8b57c7d81c88556faa35089417db8abe8aa36852e70e53ea35071a7a0e262a55ffee43a84a3a9f67da8ed242e04b12eed1eb617ed61afe19f59ba546d40e56b831cb5db1264aa71e31ae72f21c105deb4f560abb1352202e174b133536d61d8e8f00a10c4a68a2e31e16464288d3aac72ee4fff5e57b5b90136fd0ca3419ccf8010df6c9dc356ee44df39baed32ac2a5b3cd42644308c8080ed694f94a013a2d2411711e575a8619a6403417f21d0113d5c02f3e4e0b8278f85b701ed21e23867319108773fd06f4b47bcc5391a38c5a", 0xd3}], 0x2010010, &(0x7f0000003140)={[{'**#(\x00'}, {}, {'tmpfs\x00'}, {'-*]}'}, {'tmpfs\x00'}], [{@obj_type}]})
truncate(&(0x7f0000003180)='./file1\x00', 0x80)
r7 = openat$hpet(0xffffffffffffff9c, &(0x7f00000031c0), 0x4003, 0x0)
recvmmsg$unix(r7, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000003240)=[{&(0x7f0000003200)=""/58, 0x3a}], 0x1, &(0x7f0000003280)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, <r8=>0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xc0}}, {{0x0, 0x0, &(0x7f00000034c0)=[{&(0x7f0000003340)=""/189, 0xbd}, {&(0x7f0000003400)=""/145, 0x91}], 0x2, &(0x7f0000003500)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}}, {{&(0x7f0000003540), 0x6e, &(0x7f0000003640)=[{&(0x7f00000035c0)=""/105, 0x69}], 0x1, &(0x7f0000003680)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}, {{&(0x7f0000003700), 0x6e, &(0x7f0000004cc0)=[{&(0x7f0000003780)=""/109, 0x6d}, {&(0x7f0000003800)=""/4096, 0x1000}, {&(0x7f0000004800)=""/242, 0xf2}, {&(0x7f0000004900)=""/210, 0xd2}, {&(0x7f0000004a00)=""/196, 0xc4}, {&(0x7f0000004b00)}, {&(0x7f0000004b40)=""/208, 0xd0}, {&(0x7f0000004c40)=""/95, 0x5f}], 0x8, &(0x7f0000004d40)=[@cred={{0x1c}}], 0x20}}], 0x4, 0x20, &(0x7f0000004e80)={0x0, 0x3938700})
r9 = dup3(r5, r4, 0x80000)
ioctl$LOOP_CTL_REMOVE(r9, 0x4c81, r1)
r10 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000004ec0), 0x4002, 0x0)
ioctl$LOOP_CTL_ADD(r10, 0x4c80, r3)
symlinkat(&(0x7f0000004f00)='./file1\x00', r6, &(0x7f0000004f40)='./file1\x00')
bind$unix(r8, &(0x7f0000004f80)=@abs={0x1, 0x0, 0x4e24}, 0x6e)

16:21:08 executing program 4:
pwritev2(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="34a3dcfac2c10e691dea9c26d48acd8c44f66d8795043f4f0514bdb5db84a7eafc", 0x21}, {&(0x7f0000000040)="84f3d134b7e68b9516368ae2aaa50fd7e1101c04482f7dfbcc5ca3140cce4d272a2b366403fb727a65cdfe6f04edae0e33ab39a0e75b68a4f932a9d09a9fd2d184e3c2436389b5f7f25bc823e33999afcc24ba4b825b14aff707fb3475a501d056ac826b5c30362698ceb013aa92a95eed897935ff9f5b9443dab7593d74368836fa68bbe8afdce64f0c87140de03664dc69caacc2", 0x95}, {&(0x7f0000000100)="59d2f9a723da65607ce4bd352abb23ecb84dea6bcba56e6ec8813e9442008c4e9ccfb0bc19a91b90aa495b31cabfb9751b280fac6f6993f6af2cd2db52f3e20d9f2ab66bdce16f83d24e766e2d48e563b4dd4c0898eeb3fb992e1efb3e5c55cf894ff00ca0811346d133a073eb42e9df4be1f01ec33b2a8eb60877c11b39fc7c25f00e1aa07c79fa156c63b0e78946218d8b173e44fd915d73bbcdea0462fbee3683eee166f6f6797ecebe12425637695f34a8f7faa761632e1ae29c81d998a608b909cc83232cdc11d423e992be1281f7b78f936858", 0xd6}, {&(0x7f0000000200)="d213105d018509dcc7321299ce3ed14b6282fc31c1e7", 0x16}, {&(0x7f0000000240)="2d7bf55f390ed1bfe8ff1f9def5bd0f805a57741db4f297add3715267132e404bb9c3bc5e2f771cfa27679bdf29087a11c0a181c0200b7407d2b69555c19b9fc3cb12c79b16a04fb830f3314d0578903d09c03638edaf27c8b23741900", 0x5d}], 0x5, 0x200, 0x7f, 0x4)
write$tcp_mem(0xffffffffffffffff, &(0x7f0000000340)={0x7ff, 0x20, 0xa71, 0x20, 0x5}, 0x48)
r0 = signalfd(0xffffffffffffffff, &(0x7f00000003c0)={[0x1ff]}, 0x8)
sendmsg$IPSET_CMD_GET_BYINDEX(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, 0xf, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4000000)
r1 = accept(r0, &(0x7f0000000500)=@pppol2tpin6={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000580)=0x80)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000740)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000700)={&(0x7f0000000600)={0xd0, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffffb}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7fffffff}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2400}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_macvtap\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x40}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}]}, 0xd0}, 0x1, 0x0, 0x0, 0x20008000}, 0x1)
r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000780), 0x10200, 0x0)
sendmsg$NFT_MSG_GETCHAIN(r3, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000008c0)={&(0x7f0000000800)={0xb0, 0x4, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_COUNTERS={0x4c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x100}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x2}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x200}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x80000000}]}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000)
ioctl$FIBMAP(r3, 0x1, &(0x7f0000000940)=0x5)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000009c0), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_ADD_KEY(r4, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x211000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x38, r5, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x80}, @IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "1560103388efcb5718d4bd8d8823a7bc"}]}, 0x38}, 0x1, 0x0, 0x0, 0x440b1}, 0x4000000)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000001500)={<r6=>0x0, 0x1f, 0x0, 0x1})
ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, &(0x7f0000001900)={r6, 0xc16, 0xa94f567f5cced836, [0x1, 0x1, 0xbe, 0xfc00000000000000, 0xb3], [0x1ff, 0x6859, 0x4, 0x9, 0x200000000000000, 0x300000000000, 0x2, 0x700000000, 0x7fff, 0x80, 0x10000, 0x7, 0x7f, 0x400, 0x5, 0x9, 0x0, 0xc3, 0x63, 0x6, 0x7, 0x100, 0x2, 0x3fffffffc0000000, 0x9, 0x0, 0x8, 0x10000, 0x6, 0x7, 0xf71, 0x9, 0x8, 0x3, 0x7fffffff, 0x2, 0x40, 0x1ff, 0x0, 0x1, 0x4, 0x9, 0xe47d, 0x4d5feb88, 0x6, 0x3f, 0x43e, 0x31b0, 0x0, 0x4, 0x7, 0x1, 0xfff, 0x80000001, 0x9, 0x2, 0x81, 0x4, 0x6, 0xffff, 0x5, 0xff, 0xfffffffeffffffff, 0xbc0, 0x3, 0x9, 0x6, 0x7, 0x766e, 0x50000000000000, 0x40, 0x9, 0xf86f, 0xfff, 0xffff, 0x3, 0x81, 0x7f, 0x2, 0x0, 0x7, 0x9, 0xecb, 0x7, 0x4, 0x8, 0x3f, 0x100000001, 0x8, 0x8, 0xe7be, 0xa4b, 0xdc28, 0x0, 0x7fff, 0x2, 0x771, 0x400, 0x6e, 0x4, 0x1, 0x200, 0x0, 0x8, 0x7, 0x0, 0x0, 0x6, 0x1000, 0x0, 0x60, 0x7, 0x2, 0x3, 0x1, 0x2, 0x4, 0x7fffffff, 0x6, 0x0, 0x20]})
write$binfmt_script(0xffffffffffffffff, &(0x7f0000001d40)={'#! ', './file0', [{0x20, '/dev/sr0\x00'}, {}, {0x20, '[+#-@\''}, {0x20, ' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x20, '/'}, {0x20, 'route\x00'}, {0x20, '*\'[-'}, {0x20, ')-\'#^#&'}, {0x20, 'nat\x00'}], 0xa, "e04433b94f1d3a79cf3bfe9b78357fffc032b60064a62a5fd28f2322886fd8b6a479d5e51c47cccfbb7a42c26076"}, 0x77)
ioctl$FIBMAP(r1, 0x1, &(0x7f0000001dc0)=0xee04)
r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00), 0x80800, 0x0)
ioctl$FIBMAP(r7, 0x1, &(0x7f0000001e40)=0x8)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000001e80)={'#! ', './file0', [{0x20, 'route\x00'}, {}, {}, {0x20, '{@'}, {0x20, 'syz1\x00'}], 0xa, "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"}, 0x11a)
sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f00000020c0)={&(0x7f0000001fc0), 0xc, &(0x7f0000002080)={&(0x7f0000002000)={0x5c, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8001}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8001}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xa9e}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1f}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20044800}, 0x240040c1)

16:21:08 executing program 5:
getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000000)=0xe40, &(0x7f0000000040)=0x2)
r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x100081, 0x0)
getsockopt$sock_timeval(r0, 0x1, 0x1, &(0x7f00000000c0), &(0x7f0000000100)=0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00'})
r1 = accept4$inet(r0, &(0x7f0000000180)={0x2, 0x0, @dev}, &(0x7f00000001c0)=0x10, 0x80800)
getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000000200)=""/44, &(0x7f0000000240)=0x2c)
ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000280)='geneve1\x00')
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x200000, 0x0)
recvfrom$inet(r2, &(0x7f0000000300)=""/159, 0x9f, 0x0, &(0x7f00000003c0)={0x2, 0x4e24, @multicast2}, 0x10)
sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x2, 0x70bd26, 0x25dfdbfe, {{}, {}, {0x14, 0x18, {0x81, @bearer=@l2={'ib', 0x3a, 'wlan0\x00'}}}}, ["", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x100}, 0x48800)
r3 = syz_mount_image$nfs(&(0x7f0000000500), &(0x7f0000000540)='./file0\x00', 0x7, 0xa, &(0x7f0000000ac0)=[{&(0x7f0000000580)="6e5d7193e61f0924b29bbbabea9843a5bf1f1f096271cbdda3279b732a56b44be82d216ca151989516dfea63d0d8d42df29131bbc97ed60d37816caf996899aa970134fa7f0ef611392698fc2f38cff875b3d6be87fbee1116e5d50e7593e16135afa8c197da5f3744706bd353c9ddb9cd", 0x71, 0x5}, {&(0x7f0000000600)="9795ca054d2754a27d7953bf365be62860ec6e9e02a2bf4ae2e8bfcb449681092441f11239d6dbe7163fe964bf25209f1fae609fe6aff091d5ca11112f9f210ce59f9d27bd74372e8403e891276860d365165634d993fe4af2f1b0a9e344e2d56ced6bb967c35b107116363379", 0x6d, 0x5}, {&(0x7f0000000680)="fbbd4ecc44f27fd72af19c78dc4b7837ce0c0c38d836674a2d1b2b7f6e22fdd06c216150b9400587c30684242c986a9e4850ba8e29b46034be1ffe30e71d0275bf82f44f7224cda761f3baa3fe4c3e8abb8b2c858d8851ecbaaddeae549e6c04068eed", 0x63, 0x2}, {&(0x7f0000000700)="13064c3cbf79e34e023dcb8a0425cac14263989f5accd8ae6cb925231e0046d8af0ff2335ee49af52318fd42c429b44869b13664c8b45ceb3ca0111730c8e2fb8b6d5ac914b4a8261de384f926f43ee9b2044cd1092c5b68ceedbf0be778b9ec780718bd29", 0x65}, {&(0x7f0000000780)="2fd4040fd32d29aa1a1b9d429d327b55fa87ce37b0c8fc52ac3fec85689ae65108733984a157319754beb63b6c8cfb6472925d5915ac2b14df2aa0e3634c4e66474ed5a7cc3283484d398e54c2096b1b951c86e2f27d327143bc5ee636b7cc02df0947b3525701dea72b6d85dc37f305a496dd07abeb679175429119b9c4497924bf0d4def22665f3a219d00f1053cf0fbee8287c9c1db4d61286016005b6f410a134fb589c6a107", 0xa8, 0x7}, {&(0x7f0000000840)="ea946697959fe58a341284228cf955e64790c052de6ec5efdd962ebc6e2315a92ffe8ea88a55a033a313621df595d3a24512afd6d90dc494f2c543ec781f92975bb8adf02dfbc8e921df7ec03dca049c68cd7e531823bc7883907c8e", 0x5c, 0x80}, {&(0x7f00000008c0)="7c6ac3f3b06742f2e41bacce1430e3b46010b46bf0aee1abcf4a83a61d4c09ba8ec59923a98e94912283cce4c932b87ef8355a8bb3c6d990743816607876eef7b3b1d120700aaec682470c54adbc85e6b6589389a61d4f5d3028a87cabc24d2a88bf456c970eeec9964d4e2a381d322943e02857f470ffdfe6fdb7c850", 0x7d, 0x7ff}, {&(0x7f0000000940)="2daa38c93ca33a2809", 0x9, 0x9}, {&(0x7f0000000980)="4ac266b99b74c8ce1ad4dab65e0ba62ffaccb61c75bd1e528695c587038daad10716dc6b79b4eff2b30c826d122e6851bae8f3b09dfa1bb83b8639aa3f9fa71af00b07654ad076bf14eadf5901546ca991efb5ea1d9b81826f3290946744edb82c2df6f027bb691357022816efd6682a72b1945ff499ef6a3a812eb3cf8ba80d537e93f633dc96f72c6f22bad9c81f99d5ff8f5444a99a5c36bcbfdb97a25005f7627fe28fb45d831e308610f2834f516ebeda80e046357c85c125dd5cec3c0e4d4bf8fe9d07dc7bf436aeb2aa", 0xcd, 0x5}, {&(0x7f0000000a80)="7ab1efe547ee81ba569a2a4d495b5591b2c0bd967747d5", 0x17, 0x20c3ab5a}], 0x100004, &(0x7f0000000bc0)={[{'/dev/vcs\x00'}]})
r4 = dup3(r2, r3, 0x80000)
fcntl$setstatus(r1, 0x4, 0x0)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000c00)='/proc/key-users\x00', 0x0, 0x0)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000c40)=r5, 0x1)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, &(0x7f0000000c80)=@v2={0x2, @aes256, 0x0, '\x00', @c})
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000000cc0)=r2, 0x1)
name_to_handle_at(r2, &(0x7f0000000d00)='./file0\x00', &(0x7f0000000d40)=@FILEID_INO32_GEN_PARENT={0x10, 0x2, {{0x3, 0xfffffffc}, 0x4, 0x3600000}}, &(0x7f0000000d80), 0x1000)
unlinkat(r3, &(0x7f0000000dc0)='./file0\x00', 0x200)
name_to_handle_at(r2, &(0x7f0000000e00)='./file0/file0\x00', &(0x7f0000000e40)=@shmem={0xc, 0x1, {0x6, 0x1}}, &(0x7f0000000e80), 0x1000)

16:21:08 executing program 7:
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r0=>0x0})
sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}, @ETHTOOL_A_PAUSE_TX={0x5}, @ETHTOOL_A_PAUSE_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x20008000}, 0x40000)
r1 = syz_open_dev$vcsu(&(0x7f00000001c0), 0x6, 0x80)
bind$unix(r1, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_TRAP_GET(r1, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xf8, 0x0, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0xf8}, 0x1, 0x0, 0x0, 0x2000000}, 0x840)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wpan1\x00', <r3=>0x0})
sendmsg$NL802154_CMD_GET_SEC_KEY(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x3c, 0x0, 0x10, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r2)
r4 = dup(r2)
syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r4)
r5 = syz_open_dev$vcsn(&(0x7f0000000600), 0x100000000, 0x2240)
ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r5, 0x80083313, &(0x7f0000000640))
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r2)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r4)
sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r5, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x20, r6, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x13}]}, 0x20}}, 0x4000000)
setxattr$security_evm(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840), &(0x7f0000000880)=@sha1={0x1, "540960b941679b5690ad936b9064b63d04fe463e"}, 0x15, 0x2)
perf_event_open(&(0x7f00000008c0)={0x4, 0x80, 0x0, 0x7, 0x4, 0x3f, 0x0, 0x0, 0x10000, 0x11, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x85, 0x4, @perf_config_ext={0x6, 0xffff}, 0x8042, 0x23, 0x0, 0x1, 0x8, 0x0, 0x20, 0x0, 0xffffffff, 0x0, 0xd0f}, 0x0, 0x1, 0xffffffffffffffff, 0x8)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000002, 0x1010, r1, 0xca7cc000)

16:21:08 executing program 6:
r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x3]}, 0x8, 0x800)
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000040)={0x0, "bdcff6100e790ff41662fdebf7361f1f"})
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000010c0), 0x800, 0x0)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001100), 0x8402)
mount$9p_fd(0x0, &(0x7f0000001040)='./file0\x00', &(0x7f0000001080), 0x3848040, &(0x7f0000001140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@msize={'msize', 0x3d, 0x3}}, {@mmap}, {@debug={'debug', 0x3d, 0xffffffff}}, {@noextend}], [{@mask={'mask', 0x3d, '^MAY_READ'}}, {@permit_directio}, {@subj_role={'subj_role', 0x3d, ']^#'}}, {@fowner_lt={'fowner<', 0xee01}}, {@permit_directio}]}})
r3 = syz_io_uring_complete(0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000001340)={{0x1, 0x1, 0x18, <r4=>r2}, './file0\x00'})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000001580), 0x100, 0x0)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
r7 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000001700), 0x101000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000002740)={{0x1, 0x1, 0x18, <r8=>r0, {0x2}}, './file0\x00'})
io_submit(0x0, 0x8, &(0x7f00000027c0)=[&(0x7f0000001280)={0x0, 0x0, 0x0, 0x1, 0x1ff, r3, &(0x7f0000001240), 0x0, 0x7, 0x0, 0x2, r0}, &(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x81, r0, &(0x7f00000012c0)="cc6955ddd5093140f6f4e8f3468a82a3785339aa0d2eb632a77b8bc5b6d6ae4b7b429e68ca414eae0f5a6b0d6cece947f60327fc78f96d783a00f80fb8607d7f", 0x40, 0xff, 0x0, 0x1, r0}, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x5, 0x401, r4, &(0x7f0000001380)="53698e6bac4bddc97be4d6d678ab78cec92622025b471753749d0ed44cfd54740e82ce806d5c3cd7d2d98e00e647e29f2e3e903bb1480899b84ccdcf960f138151234325065ec12610faa8f8627f8cbf1f17984b50aceb8e2716187a51e2437d9f29aeca7d7e7db6807b9e0931c600de4c719699575b9142add04dd9032c62712a2804db8d35", 0x86, 0xffffffff, 0x0, 0x2, r1}, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x6, 0x7, r2, &(0x7f0000001480)="4c6827ad564e8c671ee681a133594bbd7e9d0fb0ef060814ccacabcab3af8bfe9da075595c82617822f07a", 0x2b, 0x40, 0x0, 0x2}, &(0x7f0000001540)={0x0, 0x0, 0x0, 0xe, 0x4, 0xffffffffffffffff, &(0x7f0000001500)="1311c8715e34cc4e83e59faf984eeded2fba977282182d4b900346fcd58091705ea514454a46cc64f914331d03", 0x2d, 0x4, 0x0, 0x1, r1}, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f00000015c0)="60c0f63db751554eb15eae995bb8f79a7b86b4da2dd75b911c6b74ea8a2f2dc57caf0938de04db46c1998ca0f3f3f6277f5bff299e9dbf", 0x37, 0x2, 0x0, 0x3, r0}, &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x5, 0xcf5, r6, &(0x7f0000001640)="312df4a665c51c4bcbaa806c6407bba846b1841edebf444b5672d8463555086e4087fedf6f8e00f8167c0f2a88fe9e3a45f1e85fe0dd08020cfdf6d7ab86d0f374afe75fb81df6cacde0954c56", 0x4d, 0x8, 0x0, 0x4, r1}, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x2, 0x7fff, r7, &(0x7f0000001740)="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", 0x1000, 0x10000, 0x0, 0x3, r8}])
ioctl$BTRFS_IOC_QGROUP_ASSIGN(r8, 0x40189429, &(0x7f0000002800)={0x1, 0x101, 0x4})
ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000002840))
ioctl$TIOCGSOFTCAR(r8, 0x5419, &(0x7f0000002880))
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendfile(r9, r1, 0x0, 0x9)
recvmsg$unix(r4, &(0x7f0000003080)={&(0x7f00000028c0), 0x6e, &(0x7f0000002ec0)=[{&(0x7f0000002940)=""/85, 0x55}, {&(0x7f00000029c0)=""/6, 0x6}, {&(0x7f0000002a00)=""/110, 0x6e}, {&(0x7f0000002a80)=""/184, 0xb8}, {&(0x7f0000002b40)=""/242, 0xf2}, {&(0x7f0000002c40)=""/141, 0x8d}, {&(0x7f0000002d00)=""/31, 0x1f}, {&(0x7f0000002d40)=""/222, 0xde}, {&(0x7f0000002e40)=""/96, 0x60}], 0x9, &(0x7f0000002f80)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, <r10=>0xffffffffffffffff, 0xffffffffffffffff, <r11=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xe8}, 0x12020)
ioctl$CDROM_GET_MCN(r10, 0x5311, &(0x7f00000030c0))
ioctl$CDROM_LAST_WRITTEN(r11, 0x5395, &(0x7f0000003100))

[   76.125275] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   76.127679] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   76.129497] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   76.133308] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   76.136286] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   76.188969] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   76.195699] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   76.200124] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   76.208557] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   76.211653] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   76.307039] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   76.310965] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   76.312526] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   76.317833] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   76.320240] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   76.430960] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   76.434661] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   76.437582] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   76.441070] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   76.444065] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   76.467981] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   76.472110] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   76.473884] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   76.491745] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[   76.493624] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   76.493690] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   76.498592] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   76.500668] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   76.503211] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   76.506706] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   76.513820] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[   76.514878] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   76.520790] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[   76.524380] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[   76.543754] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[   76.556133] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[   76.559697] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[   76.565512] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[   76.569030] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[   76.571076] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[   78.219899] Bluetooth: hci0: command tx timeout
[   78.283375] Bluetooth: hci1: command tx timeout
[   78.347468] Bluetooth: hci2: command tx timeout
[   78.474466] Bluetooth: hci5: command tx timeout
[   78.603344] Bluetooth: hci3: command tx timeout
[   78.666417] Bluetooth: hci7: command tx timeout
[   78.667107] Bluetooth: hci4: command tx timeout
[   78.668426] Bluetooth: hci6: command tx timeout
[   80.268324] Bluetooth: hci0: command tx timeout
[   80.331495] Bluetooth: hci1: command tx timeout
[   80.396340] Bluetooth: hci2: command tx timeout
[   80.522416] Bluetooth: hci5: command tx timeout
[   80.652357] Bluetooth: hci3: command tx timeout
[   80.714491] Bluetooth: hci7: command tx timeout
[   80.715474] Bluetooth: hci4: command tx timeout
[   80.715862] Bluetooth: hci6: command tx timeout
[   82.315536] Bluetooth: hci0: command tx timeout
[   82.379674] Bluetooth: hci1: command tx timeout
[   82.443657] Bluetooth: hci2: command tx timeout
[   82.571467] Bluetooth: hci5: command tx timeout
[   82.698490] Bluetooth: hci3: command tx timeout
[   82.763544] Bluetooth: hci6: command tx timeout
[   82.763929] Bluetooth: hci4: command tx timeout
[   82.764691] Bluetooth: hci7: command tx timeout
[   84.362453] Bluetooth: hci0: command tx timeout
[   84.426354] Bluetooth: hci1: command tx timeout
[   84.490499] Bluetooth: hci2: command tx timeout
[   84.619421] Bluetooth: hci5: command tx timeout
[   84.746408] Bluetooth: hci3: command tx timeout
[   84.810474] Bluetooth: hci7: command tx timeout
[   84.810945] Bluetooth: hci4: command tx timeout
[   84.812036] Bluetooth: hci6: command tx timeout
[  112.979776] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  112.981133] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  113.269685] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  113.270598] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  113.428429] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  113.430481] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  113.718028] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  113.718969] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  113.968213] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  113.968875] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
16:21:47 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000003c0)='./file1\x00', 0x0)
pidfd_open(0x0, 0x0)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'lo\x00', 0x0})
socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x81, 0x0, 0x62, 0x0, 0x5, 0x4440, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8000}, 0x60, 0x0, 0x9, 0x2, 0x100, 0x0, 0xff, 0x0, 0x3, 0x0, 0x1}, 0x0, 0x4, r0, 0xe)
pwritev2(r1, &(0x7f0000000380)=[{&(0x7f0000000180)="bd", 0xfffffdef}], 0x1, 0x0, 0x0, 0x0)
syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0xf3, 0x1, &(0x7f00000002c0)=[{&(0x7f00000001c0)="4c00da682c9cd8e67881fc520907062401152033c9b538a5b5f207ecfbf666ec6c426bf80c0af3903645ba05cc27c9baf9fb8747ea0fd0cf0210d8961dfac9e1892fc6602f466a80d2fe194f5ee84c43317ae9a96c1f564cbb927b4cc3991eb8afc79ad2b0b500bd9be3a0313122e8086682e2799ddc39a6a774fbd3bc4e5ac90cecd9871d2cad0b452757c2395edf4524eaf3ba8f19cdfb1c14e5d1e5dca3daf7112bfb211e7620ca9d2150df91e3c9239464e612320566cea7759aa6f22be41a97eaf2d7ece986c5435ec0f85543", 0xcf}], 0x200000, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x20000, 0x9c)
write$binfmt_elf64(r2, &(0x7f0000000400)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x40, 0x20, 0x3, 0x9, 0x3, 0x3, 0x0, 0x26d, 0x40, 0x241, 0x8ebb, 0x0, 0x38, 0x1, 0xeb, 0x2}, [{0x1, 0x4e12889d, 0x1f, 0xffffffffffffff36, 0x0, 0x101, 0x23fb, 0x1f0}], '\f', ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x679)

[  114.064273] audit: type=1400 audit(1756743707.814:8): avc:  denied  { open } for  pid=3714 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[  114.083460] audit: type=1400 audit(1756743707.814:9): avc:  denied  { kernel } for  pid=3714 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
16:21:47 executing program 0:
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x145802, 0x0)
io_setup(0xfff, &(0x7f0000000040)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0x8, 0x0, 0x0, r1, &(0x7f0000000000)="fa", 0x80000}])
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0xf15d)
mount$bind(&(0x7f0000000080)='./cgroup/cgroup.procs\x00', &(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000140), 0x800, 0x0)
io_submit(0x0, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000)="fa", 0x80000}])
r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x145802, 0x0)
io_setup(0xfff, &(0x7f0000000040)=<r4=>0x0)
io_submit(r4, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0x8, 0x0, 0x0, r3, &(0x7f0000000000)="fa", 0x80000}])
r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x145802, 0x0)
io_setup(0xfff, &(0x7f0000000040)=<r6=>0x0)
io_submit(r6, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0x8, 0x8, 0x0, r5, &(0x7f0000000000)="fa"}])
r7 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x145802, 0x0)
io_setup(0xfff, &(0x7f0000000040)=<r8=>0x0)
io_submit(r8, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0x8, 0x0, 0x0, r7, &(0x7f0000000000)="fa", 0x80000}])
r9 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x145802, 0x0)
io_setup(0xfff, &(0x7f0000000040)=<r10=>0x0)
io_submit(r10, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0x8, 0x0, 0x0, r9, &(0x7f0000000000)="fa", 0x80000}])
io_submit(r2, 0x6, &(0x7f0000000780)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x2, 0xffffffffffffffff, &(0x7f0000000180)="c7e1a101167e5f70ce3fec38c75047f945fc0e97807053a3b07842cb781a83f274fb122d2c1159e16ad5e4ae05aa81fa9f151a600e9f76d97230bc7556c080c71c2bae9017f6ba57984f3b876a62c07d98eb3733afc3ab49b74a6c7b142ab729b7d9c24d9e64dab4ae9906b396e808dc60a1da062f3a7d263cd7c259e09da6edc8963c1ac50bcdfd8f69de4dbdf25c8621a3942a089b4a4a1ec533bf7c5954538a699bcf0023f03108617408759934bc39d87cf3fdd276ddc0aa", 0xba, 0x9}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x3865, r1, &(0x7f00000002c0)="73484dfba54008034a30ee55e33490e484f0d51cec433900663893aa8551a508e0f18907eb10e8290937029d2b9671daa135391bbbf79950f3cca501f990af9fcadfc7158882e628d0d937bc1ced48d3e6653c6a37780599526b6d214d320ed832592ee01c2fdfa4d106e0a5ad0c1895838cbdf915490db2e0d33ae9fac62768eb8448855b31ab29cb4d1335f4ac7d838d98ffe8a176503b960b17d8fb71ca0b33424d1e8514d6ed6fbdd6adb19d908bb1489d66942d9315c4bea223857d029e70082f37e05ce299491fc48ac9aa5bd67bb44352211f5da3d93b1d24eeeb37f029b50099ebcd03aabf78246b94", 0xed, 0x0, 0x0, 0x3}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x5, 0xd35, r0, &(0x7f0000000480)="801017d088a9257d2f473c75a768ca428761ba9807649f12bf3702cdf110b2cade39f14ee695058e3ae329063bea1f396284264413fe414e197391de8fee88d1bb63d0200a31cdb4dc5969a5b9f229d68e4e6286933a2e2fb5ad46d399036404d59482d550685a37f5a7d8bd0fd5a32bf125", 0x72, 0x3, 0x0, 0x2, r1}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x3, 0x2, r0, &(0x7f0000000500)="bc6d", 0x2, 0x4, 0x0, 0x2, r1}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x5, 0x200, r3, &(0x7f0000000580)="5f8b9572763f3937710f35a7d6ad9d658e298912f20e8c1cbd6ba26e18ab4b645696eabcbe5590576f4185ab022996ff1f96979c17f512fc3172d56ebbfcdb1480b3bd5bc75be4bc7cd40dfa69694cd965db361a535d4504004c5c676c1fa3fd7cc38ec29e7190570d194ab4dcec75d1dbde84f46e449f5ba886b0a70de208b534d40c1832fbba8e0028d6b337bcaabb0c56c87108c0d1a00f0246b55d021291657c7da23ff451b08b12bb0726f0c75890368f6c53996b9d29825337fe26917895bbba3672f8b425f30c2193817c198a1d9be6013135ba2db2f2199101a1a0c5e2b3f9b0833db061e3380892a10062a3561ba589d7d34bf888", 0xf9, 0x23, 0x0, 0x3, r5}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x7, 0x1, r7, &(0x7f00000006c0)="9ed8d7b57848e71c6338a88073c69871a3d412ff2601acb5bbf1aad90d3b00f04f56d0a7b874a74dac8c2ff920616b06b0c9a5f38a377c4665c7ac2dcf0d5a6e6b04f3b0c85d0ef89c29e17a7f27d4df0da20adfb0498a31293de0d89f71", 0x5e, 0x2, 0x0, 0x2, r9}])

[  114.190581] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  114.191205] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
16:21:48 executing program 0:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f00000003c0)=@mgmt_frame=@deauth={@wo_ht={{0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x9}, @device_b, @device_b, @random="2daa3e12a18a", {0x2, 0x8}}, 0xf, @val={0x8c, 0x10, {0x5d9, "9d9fbfc8cb72", @short="2c15dcb7e2e6747c"}}}, 0x2c)
r0 = io_uring_setup(0x3e96, &(0x7f0000000140))
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

[  114.604476] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  114.694869] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  114.695658] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  114.712404] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  114.721083] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  114.724932] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  114.731037] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  114.741619] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  114.744037] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  114.751342] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  114.762978] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  114.765420] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  114.773149] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  114.783029] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  114.783588] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  114.795446] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  114.803188] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  114.807433] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  114.815228] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  114.822282] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[  114.825348] Bluetooth: hci6: Opcode 0x0406 failed: -4
[  114.831468] Bluetooth: hci6: Opcode 0x0406 failed: -4
[  114.837888] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[  114.839823] Bluetooth: hci7: Opcode 0x0406 failed: -4
[  114.847376] Bluetooth: hci7: Opcode 0x0406 failed: -4
[  115.152360] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  115.153543] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  115.417193] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  115.417869] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  115.848185] loop2: detected capacity change from 0 to 15
[  115.924028] loop2: detected capacity change from 0 to 15
[  116.444511] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  116.445156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  116.532264] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  116.533025] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  116.682401] Bluetooth: hci0: command 0x0c1a tx timeout
[  116.703957] loop5: detected capacity change from 0 to 33707
[  116.746382] Bluetooth: hci2: command 0x0c1a tx timeout
[  116.746836] Bluetooth: hci1: command 0x0c1a tx timeout
[  116.810650] Bluetooth: hci5: command 0x0c1a tx timeout
[  116.811606] Bluetooth: hci3: command 0x0c1a tx timeout
[  116.812289] Bluetooth: hci4: command 0x0c1a tx timeout
[  116.874471] Bluetooth: hci7: command 0x0c1a tx timeout
[  116.874659] Bluetooth: hci6: command 0x0c1a tx timeout
[  116.878800] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  116.879690] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  116.927712] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  116.928636] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  116.981959] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  116.982718] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  117.014963] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  117.015582] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  117.401356] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  117.401986] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  117.423032] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  117.423884] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  117.501270] loop3: detected capacity change from 0 to 4
[  117.505460] loop3: detected capacity change from 0 to 16383
[  117.506848] nfs4: Unknown parameter '**#('
[  117.512063] cgroup: Unknown subsys name '**#('
[  117.517837] loop3: detected capacity change from 0 to 4
[  118.730356] Bluetooth: hci0: command 0x0c1a tx timeout
[  118.794432] Bluetooth: hci1: command 0x0c1a tx timeout
[  118.794483] Bluetooth: hci2: command 0x0c1a tx timeout
[  118.858435] Bluetooth: hci4: command 0x0c1a tx timeout
[  118.858481] Bluetooth: hci3: command 0x0c1a tx timeout
[  118.859574] Bluetooth: hci5: command 0x0c1a tx timeout
[  118.923141] Bluetooth: hci6: command 0x0c1a tx timeout
[  118.924242] Bluetooth: hci7: command 0x0c1a tx timeout
[  120.778413] Bluetooth: hci0: command 0x0c1a tx timeout
[  120.842456] Bluetooth: hci1: command 0x0c1a tx timeout
[  120.842502] Bluetooth: hci2: command 0x0c1a tx timeout
[  120.906504] Bluetooth: hci3: command 0x0c1a tx timeout
[  120.906559] Bluetooth: hci4: command 0x0c1a tx timeout
[  120.907388] Bluetooth: hci5: command 0x0c1a tx timeout
[  120.970445] Bluetooth: hci7: command 0x0c1a tx timeout
[  120.971519] Bluetooth: hci6: command 0x0c1a tx timeout
16:22:04 executing program 0:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f00000003c0)=@mgmt_frame=@deauth={@wo_ht={{0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x9}, @device_b, @device_b, @random="2daa3e12a18a", {0x2, 0x8}}, 0xf, @val={0x8c, 0x10, {0x5d9, "9d9fbfc8cb72", @short="2c15dcb7e2e6747c"}}}, 0x2c)
r0 = io_uring_setup(0x3e96, &(0x7f0000000140))
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

16:22:04 executing program 3:
syz_emit_ethernet(0x3e, &(0x7f0000000040)={@multicast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000010", 0x8, 0x33, 0x0, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, {[], @echo_request}}}}}, 0x0)

16:22:04 executing program 1:
ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f0000000000)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000240)={0x0, 0x3, 0x100000000, 0x400000008000})
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f00000002c0), &(0x7f0000000300)=0xc)
ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0)
setxattr$security_capability(&(0x7f0000000340)='./file1\x00', &(0x7f0000000380), &(0x7f00000003c0)=@v3={0x3000000, [{0x5b, 0x4}, {0x0, 0x5}], 0xee00}, 0x18, 0x277840d42e2c9715)
r1 = fsopen(&(0x7f0000000400)='configfs\x00', 0x0)
r2 = dup(r1)
setxattr$security_capability(&(0x7f0000000440)='./file0/file0\x00', &(0x7f0000000480), &(0x7f00000004c0)=@v3={0x3000000, [{0x4, 0x7}, {0x4, 0x200}], 0xee01}, 0x18, 0x1)
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000500)=0x9)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000540)={{0x1, 0x1, 0x18, <r3=>r2, {<r4=>r1}}, './file2\x00'})
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r3, 0x89f7, &(0x7f0000000600)={'ip6_vti0\x00', &(0x7f0000000580)={'syztnl2\x00', 0x0, 0x2f, 0x7, 0x4b, 0xfff, 0x1c, @mcast2, @private0, 0x700, 0x8, 0x7f, 0x8}})
openat$dir(0xffffffffffffff9c, &(0x7f0000000640)='./file2\x00', 0x18000, 0x1a)
ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f0000000680)="376477d10cf15057f9056421874b5ec40ac1745963eb30123ba64f12e56f6ca40d594e916cb48268126a02c292f368c5bd6fe9e7f92ca982ccd46e1527dc55f7d78cb73d8ccd3c24b4d66e405cd8c9db69511751dffd6ca0be5e64b014e03f5eb0391efd2d6b911b2a67562695a32a39fc89c22ebf036d459c98219989c356dd84cf498ca75d5962c6797174018c181c484e8cc4ec0ada487ba4fba33e0414d1a078818075d78e0a002ed912fe4d5cd611d33f88f7dcd177acb3e6313a6462137b518779cb7dafb53ef9c28af623b54657f47cd63c8ccf808899a0a58a17aeb51666730fadf54c6baa3687512fb42b3c322b25f30ede32f65a8e573ca7a4df83")
r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000780), 0x42000)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r5, 0xc0505405, &(0x7f00000007c0)={{0x1, 0x3, 0x0, 0x0, 0x2}, 0x3ff, 0x4, 0x2})
r6 = openat$cgroup_devices(r0, &(0x7f0000000840)='devices.allow\x00', 0x2, 0x0)
ioctl$FS_IOC_GETFSLABEL(r6, 0x81009431, &(0x7f0000000880))
getsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, &(0x7f0000000980), 0x2)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c)

16:22:04 executing program 6:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write(0xffffffffffffffff, &(0x7f0000000900)='^', 0x1)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x44000)
sendfile(0xffffffffffffffff, r0, 0x0, 0x3)
r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x145802, 0x0)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0)
sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x64, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x801}, 0x8000)
io_setup(0xfff, &(0x7f0000000040)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0x8, 0x0, 0x0, r1, &(0x7f0000000000)="fa", 0x80000}])
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1_to_bridge\x00'})

16:22:04 executing program 2:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xffff}}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x7, 0x30, 0x6, 0x1, 0x0, 0x1, 0x2280, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xff, 0x1, @perf_bp={&(0x7f0000000000), 0xc}, 0x1008, 0x3, 0x401, 0x4, 0x5b, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_script(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020245c20c483860f272027202b2b2d235c0292af644459b47b2bc99fa935128db5573baacdb52e"], 0x20)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x400c40, 0x0)
recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0xfffffffffffffee4, 0x0}}, {{&(0x7f00000006c0)=@alg, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)=""/232}, {&(0x7f0000000240)=""/81}], 0x0, &(0x7f0000000300)=""/16}, 0x5}, {{&(0x7f00000003c0)=@l2tp6={0xa, 0x0, 0x0, @empty}, 0x0, &(0x7f0000000580)=[{&(0x7f0000000440)=""/142}, {&(0x7f0000000500)=""/68}], 0x0, &(0x7f00000005c0)=""/6}, 0x1ff}], 0x1, 0x2, 0x0)

16:22:04 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
accept(r0, 0x0, 0x0)
r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x145802, 0x0)
io_setup(0xfff, &(0x7f0000000040)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0x8, 0x0, 0x0, r1, &(0x7f0000000000)="fa", 0x80000}])
sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="da1f0200", @ANYRES16=0x0, @ANYBLOB="080029bd7000ffdbdf250b00000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900f40000007100000004000b0020006e800400010004000200040002000400020004000100040002000400010005000800000000000a000600ffffffffffff00005800508009000100d2e976c7600000000800030001ac0f0008000700010000002800088004000100040002000400010004000100040001000400020004000100040001000400010010000400a70b6d141cc0773c3a57ea9a090007005ab28f4783000000"], 0xc4}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000)

16:22:04 executing program 7:
socket$netlink(0x10, 0x3, 0x4)

16:22:04 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000003c0)='./file1\x00', 0x0)
pidfd_open(0x0, 0x0)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'lo\x00', 0x0})
socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x81, 0x0, 0x62, 0x0, 0x5, 0x4440, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8000}, 0x60, 0x0, 0x9, 0x2, 0x100, 0x0, 0xff, 0x0, 0x3, 0x0, 0x1}, 0x0, 0x4, r0, 0xe)
pwritev2(r1, &(0x7f0000000380)=[{&(0x7f0000000180)="bd", 0xfffffdef}], 0x1, 0x0, 0x0, 0x0)
syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0xf3, 0x1, &(0x7f00000002c0)=[{&(0x7f00000001c0)="4c00da682c9cd8e67881fc520907062401152033c9b538a5b5f207ecfbf666ec6c426bf80c0af3903645ba05cc27c9baf9fb8747ea0fd0cf0210d8961dfac9e1892fc6602f466a80d2fe194f5ee84c43317ae9a96c1f564cbb927b4cc3991eb8afc79ad2b0b500bd9be3a0313122e8086682e2799ddc39a6a774fbd3bc4e5ac90cecd9871d2cad0b452757c2395edf4524eaf3ba8f19cdfb1c14e5d1e5dca3daf7112bfb211e7620ca9d2150df91e3c9239464e612320566cea7759aa6f22be41a97eaf2d7ece986c5435ec0f85543", 0xcf}], 0x200000, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x20000, 0x9c)
write$binfmt_elf64(r2, &(0x7f0000000400)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x40, 0x20, 0x3, 0x9, 0x3, 0x3, 0x0, 0x26d, 0x40, 0x241, 0x8ebb, 0x0, 0x38, 0x1, 0xeb, 0x2}, [{0x1, 0x4e12889d, 0x1f, 0xffffffffffffff36, 0x0, 0x101, 0x23fb, 0x1f0}], '\f', ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x679)

[  130.869987] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
16:22:04 executing program 3:
r0 = open(&(0x7f0000000000)='./file0\x00', 0x101400, 0x1b0)
ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x3)

[  130.950820] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  130.952698] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  130.956607] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  130.959534] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  130.967692] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  130.971065] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  130.981409] Bluetooth: hci6: Opcode 0x0c1a failed: -4
16:22:04 executing program 1:
ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f0000000000)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000240)={0x0, 0x3, 0x100000000, 0x400000008000})
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f00000002c0), &(0x7f0000000300)=0xc)
ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0)
setxattr$security_capability(&(0x7f0000000340)='./file1\x00', &(0x7f0000000380), &(0x7f00000003c0)=@v3={0x3000000, [{0x5b, 0x4}, {0x0, 0x5}], 0xee00}, 0x18, 0x277840d42e2c9715)
r1 = fsopen(&(0x7f0000000400)='configfs\x00', 0x0)
r2 = dup(r1)
setxattr$security_capability(&(0x7f0000000440)='./file0/file0\x00', &(0x7f0000000480), &(0x7f00000004c0)=@v3={0x3000000, [{0x4, 0x7}, {0x4, 0x200}], 0xee01}, 0x18, 0x1)
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000500)=0x9)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000540)={{0x1, 0x1, 0x18, <r3=>r2, {<r4=>r1}}, './file2\x00'})
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r3, 0x89f7, &(0x7f0000000600)={'ip6_vti0\x00', &(0x7f0000000580)={'syztnl2\x00', 0x0, 0x2f, 0x7, 0x4b, 0xfff, 0x1c, @mcast2, @private0, 0x700, 0x8, 0x7f, 0x8}})
openat$dir(0xffffffffffffff9c, &(0x7f0000000640)='./file2\x00', 0x18000, 0x1a)
ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f0000000680)="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")
r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000780), 0x42000)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r5, 0xc0505405, &(0x7f00000007c0)={{0x1, 0x3, 0x0, 0x0, 0x2}, 0x3ff, 0x4, 0x2})
r6 = openat$cgroup_devices(r0, &(0x7f0000000840)='devices.allow\x00', 0x2, 0x0)
ioctl$FS_IOC_GETFSLABEL(r6, 0x81009431, &(0x7f0000000880))
getsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, &(0x7f0000000980), 0x2)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c)

[  130.984069] Bluetooth: hci7: Opcode 0x0c1a failed: -4
16:22:04 executing program 3:
r0 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
fcntl$addseals(r0, 0x403, 0x0)
r1 = accept(0xffffffffffffffff, &(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, &(0x7f0000000000)=0x80)
recvmmsg$unix(r1, &(0x7f0000001040)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000100)=""/203, 0xcb}, {&(0x7f0000000200)=""/219, 0xdb}, {&(0x7f0000000300)=""/108, 0x6c}, {&(0x7f0000000380)=""/133, 0x85}], 0x4}}, {{&(0x7f0000000480)=@abs, 0x6e, &(0x7f0000000880)=[{&(0x7f0000000500)=""/225, 0xe1}, {&(0x7f0000000600)=""/250, 0xfa}, {&(0x7f0000000700)=""/123, 0x7b}, {&(0x7f0000000780)=""/250, 0xfa}], 0x4, &(0x7f0000001140)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000ccd80194bc38a38e1ed2ef7172f8912442df439f4c0d1edaa05dd7c1d2b07c544b77dac577fd2ffcecfe358b7b", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x138}}, {{&(0x7f0000000a00)=@abs, 0x6e, &(0x7f0000000b40)=[{&(0x7f0000000a80)=""/145, 0x91}], 0x1}}, {{&(0x7f0000000b80)=@abs, 0x6e, &(0x7f0000000f80)=[{&(0x7f0000000c00)=""/211, 0xd3}, {&(0x7f0000000d00)=""/240, 0xf0}, {&(0x7f0000000e00)=""/15, 0xf}, {&(0x7f0000000e40)=""/229, 0xe5}, {&(0x7f0000000f40)=""/16, 0x10}], 0x5, &(0x7f0000001000)=[@cred={{0x1c}}], 0x20}}], 0x4, 0x0, 0x0)

16:22:04 executing program 7:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSPTLCK(r0, 0x80045430, 0x0)
ioctl$TCGETA(r0, 0x5405, &(0x7f0000000080))

16:22:04 executing program 1:
ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f0000000000)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000240)={0x0, 0x3, 0x100000000, 0x400000008000})
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f00000002c0), &(0x7f0000000300)=0xc)
ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0)
setxattr$security_capability(&(0x7f0000000340)='./file1\x00', &(0x7f0000000380), &(0x7f00000003c0)=@v3={0x3000000, [{0x5b, 0x4}, {0x0, 0x5}], 0xee00}, 0x18, 0x277840d42e2c9715)
r1 = fsopen(&(0x7f0000000400)='configfs\x00', 0x0)
r2 = dup(r1)
setxattr$security_capability(&(0x7f0000000440)='./file0/file0\x00', &(0x7f0000000480), &(0x7f00000004c0)=@v3={0x3000000, [{0x4, 0x7}, {0x4, 0x200}], 0xee01}, 0x18, 0x1)
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000500)=0x9)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000540)={{0x1, 0x1, 0x18, <r3=>r2, {<r4=>r1}}, './file2\x00'})
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r3, 0x89f7, &(0x7f0000000600)={'ip6_vti0\x00', &(0x7f0000000580)={'syztnl2\x00', 0x0, 0x2f, 0x7, 0x4b, 0xfff, 0x1c, @mcast2, @private0, 0x700, 0x8, 0x7f, 0x8}})
openat$dir(0xffffffffffffff9c, &(0x7f0000000640)='./file2\x00', 0x18000, 0x1a)
ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f0000000680)="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")
r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000780), 0x42000)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r5, 0xc0505405, &(0x7f00000007c0)={{0x1, 0x3, 0x0, 0x0, 0x2}, 0x3ff, 0x4, 0x2})
r6 = openat$cgroup_devices(r0, &(0x7f0000000840)='devices.allow\x00', 0x2, 0x0)
ioctl$FS_IOC_GETFSLABEL(r6, 0x81009431, &(0x7f0000000880))
getsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, &(0x7f0000000980), 0x2)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c)

16:22:04 executing program 3:
r0 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000040))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
recvmsg$unix(r1, &(0x7f0000002040)={0x0, 0x0, 0x0}, 0x0)

16:22:04 executing program 2:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00')
r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x145802, 0x0)
io_setup(0xfff, &(0x7f0000000040)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0x8, 0x0, 0x0, r2, &(0x7f0000000000)="fa", 0x80000}])
perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x8, 0x3f, 0x80, 0x3, 0x0, 0x9, 0x29, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x7fffffff, 0x2, @perf_config_ext={0x7b6, 0x6}, 0x4, 0x400, 0x1, 0x4, 0x2ed8fe53, 0x7, 0x4, 0x0, 0x1, 0x0, 0xff}, 0xffffffffffffffff, 0xb, r2, 0x4)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x200000000000)
lseek(r1, 0x800, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000080)=[@window={0x3, 0x8, 0x1}, @timestamp, @sack_perm, @mss={0x2, 0x80000001}, @window={0x3, 0x3, 0x20}, @mss={0x2, 0x8}, @sack_perm], 0x7)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000000)={0x0, <r5=>0x0}, &(0x7f0000000040)=0x5)
setuid(r5)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x10c034, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@cache_loose}, {@cache_loose}, {@nodevmap}, {@loose}], [{@smackfsroot={'smackfsroot', 0x3d, 'maps\x00'}}, {@fowner_eq={'fowner', 0x3d, r5}}, {@permit_directio}, {@fsuuid={'fsuuid', 0x3d, {[0x33, 0x65, 0x31, 0x37, 0x36, 0x37, 0x30, 0x63], 0x2d, [0x34, 0x37, 0x34, 0x39], 0x2d, [0x35, 0x64, 0x36, 0x66], 0x2d, [0x33, 0x61, 0x30, 0x30], 0x2d, [0x64, 0x5, 0x66, 0x15adacdfe40e9a3b, 0x33, 0x38, 0x38, 0x30]}}}, {@seclabel}, {@uid_lt={'uid<', 0xee01}}, {@appraise_type}, {@smackfshat}]}})

16:22:04 executing program 6:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write(0xffffffffffffffff, &(0x7f0000000900)='^', 0x1)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x44000)
sendfile(0xffffffffffffffff, r0, 0x0, 0x3)
r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x145802, 0x0)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0)
sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x64, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x801}, 0x8000)
io_setup(0xfff, &(0x7f0000000040)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0x8, 0x0, 0x0, r1, &(0x7f0000000000)="fa", 0x80000}])
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1_to_bridge\x00'})

[  132.938387] Bluetooth: hci0: command 0x0c1a tx timeout
[  133.002425] Bluetooth: hci7: command 0x0c1a tx timeout
[  133.002919] Bluetooth: hci6: command 0x0c1a tx timeout
[  133.003387] Bluetooth: hci5: command 0x0c1a tx timeout
[  133.003816] Bluetooth: hci3: command 0x0c1a tx timeout
[  133.004242] Bluetooth: hci4: command 0x0c1a tx timeout
[  133.004712] Bluetooth: hci2: command 0x0c1a tx timeout
[  133.004760] Bluetooth: hci1: command 0x0c1a tx timeout
16:22:14 executing program 3:
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0xaa, 0x1, 0x0, 0x1, 0x0, 0x3, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x2}, 0x0, 0x8000000020000, 0x0, 0x81baeb9e6f21c7ec, 0x1, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

16:22:14 executing program 4:
mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
linkat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x400)
fcntl$setown(0xffffffffffffffff, 0x8, 0x0)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x145802, 0x0)
io_setup(0xfff, &(0x7f0000000040)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f0000000000)="fa", 0x80000}])
tee(0xffffffffffffffff, r0, 0x1, 0x2)

16:22:14 executing program 6:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write(0xffffffffffffffff, &(0x7f0000000900)='^', 0x1)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x44000)
sendfile(0xffffffffffffffff, r0, 0x0, 0x3)
r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x145802, 0x0)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0)
sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x64, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x801}, 0x8000)
io_setup(0xfff, &(0x7f0000000040)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0x8, 0x0, 0x0, r1, &(0x7f0000000000)="fa", 0x80000}])
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1_to_bridge\x00'})

16:22:14 executing program 5:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000000)={{{@in6=@private2, @in=@private=0xa010100, 0x4e21, 0x0, 0x4e24, 0x0, 0x0, 0x0, 0xa0}, {0x0, 0x8001, 0x100000001, 0x2, 0x0, 0x7, 0x5, 0x8}, {0x1acf96cd, 0x2, 0x4, 0x8f}, 0x3ff, 0x6e6bbb, 0x1, 0x0, 0x1, 0x3}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4d2, 0xff}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x3506, 0x2, 0x2, 0x6, 0xe24, 0x7b989731, 0x7ff}}, 0xe8)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000100)={{{@in=@private, @in6=@remote}}, {{@in6}, 0x0, @in6=@private2}}, &(0x7f0000000200)=0xe8)
keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffffe, 0x0, 0x0)
syz_read_part_table(0x3ff, 0x2, &(0x7f00000003c0)=[{&(0x7f0000000240)="ca7f8ec84ce8073e87c0be6f1976fea957844e9de9ba4a4bf0932a58a9b84f7b8af7e34d1301cf6af690869cfec18a95aee8b309f18c2a67747a70cce15964aabb2d6d6e5f3f0e9884d5520c25b916", 0x4f, 0x6}, {&(0x7f0000000340)="eba059a4d93f957204f3b2ccdf7eca2191bdf644e6be025832129a33e079e62d66b621b96ffbe2aa18d953aee16412932a7d69ed2de5", 0x36, 0x80000000}])
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000400)={{{@in=@remote, @in=@remote}}, {{@in=@multicast2}, 0x0, @in=@private}}, &(0x7f0000000500)=0xe8)
r0 = add_key$keyring(&(0x7f0000000380), &(0x7f0000000680)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$KEYCTL_MOVE(0x1e, 0x0, r0, 0xfffffffffffffffc, 0x1)
getsockname(0xffffffffffffffff, &(0x7f0000000540)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @multicast1}}}}, 0x0)
keyctl$search(0xa, 0x0, 0x0, &(0x7f0000000640)={'syz', 0x3}, 0x0)
r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000a40), 0x20000, 0x0)
r2 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8)
keyctl$update(0x2, r2, &(0x7f00000005c0)="991a3f70ae151daed196dbaf494fc1e0f1e14ad51e6697c02c054a17dc1f7ae33737603bda42ea1c140a4a786da2cac97d70bb96e420e95f3f72892b58ba6efbd1a59214558a63cffcd822e2bbd5d36a5ee4c57d0919542d4379079cdd50fe2994ec44ad10a3f824211e5f5830863d9c1d753578a410", 0x76)
write$cgroup_pid(r1, &(0x7f0000000c40), 0x12)

16:22:14 executing program 1:
ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f0000000000)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000240)={0x0, 0x3, 0x100000000, 0x400000008000})
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f00000002c0), &(0x7f0000000300)=0xc)
ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0)
setxattr$security_capability(&(0x7f0000000340)='./file1\x00', &(0x7f0000000380), &(0x7f00000003c0)=@v3={0x3000000, [{0x5b, 0x4}, {0x0, 0x5}], 0xee00}, 0x18, 0x277840d42e2c9715)
r1 = fsopen(&(0x7f0000000400)='configfs\x00', 0x0)
r2 = dup(r1)
setxattr$security_capability(&(0x7f0000000440)='./file0/file0\x00', &(0x7f0000000480), &(0x7f00000004c0)=@v3={0x3000000, [{0x4, 0x7}, {0x4, 0x200}], 0xee01}, 0x18, 0x1)
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000500)=0x9)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000540)={{0x1, 0x1, 0x18, <r3=>r2, {<r4=>r1}}, './file2\x00'})
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r3, 0x89f7, &(0x7f0000000600)={'ip6_vti0\x00', &(0x7f0000000580)={'syztnl2\x00', 0x0, 0x2f, 0x7, 0x4b, 0xfff, 0x1c, @mcast2, @private0, 0x700, 0x8, 0x7f, 0x8}})
openat$dir(0xffffffffffffff9c, &(0x7f0000000640)='./file2\x00', 0x18000, 0x1a)
ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f0000000680)="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")
r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000780), 0x42000)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r5, 0xc0505405, &(0x7f00000007c0)={{0x1, 0x3, 0x0, 0x0, 0x2}, 0x3ff, 0x4, 0x2})
r6 = openat$cgroup_devices(r0, &(0x7f0000000840)='devices.allow\x00', 0x2, 0x0)
ioctl$FS_IOC_GETFSLABEL(r6, 0x81009431, &(0x7f0000000880))
getsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, &(0x7f0000000980), 0x2)

16:22:14 executing program 7:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSPTLCK(r0, 0x80045430, 0x0)
ioctl$TCGETA(r0, 0x5405, &(0x7f0000000080))

16:22:14 executing program 2:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSPTLCK(r0, 0x80045430, 0x0)
ioctl$TCGETA(r0, 0x5405, &(0x7f0000000080))

16:22:14 executing program 0:
open_tree(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/cgroup.procs\x00', 0x100)

[  140.320859] loop5: detected capacity change from 0 to 264192
[  140.328725] Oops: general protection fault, probably for non-canonical address 0xdffffc0020000032: 0000 [#1] SMP KASAN NOPTI
[  140.329604] KASAN: probably user-memory-access in range [0x0000000100000190-0x0000000100000197]
[  140.330282] CPU: 0 UID: 0 PID: 3981 Comm: syz-executor.4 Tainted: G        W           6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) 
[  140.331217] Tainted: [W]=WARN
[  140.331474] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  140.332124] RIP: 0010:perf_tp_event+0x175/0xe70
[  140.333493] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[  140.338268] RSP: 0018:ffff888013e8f780 EFLAGS: 00010012
[  140.339466] RAX: 0000000020000032 RBX: 00000000ffffffa0 RCX: 0000000000000002
[  140.341102] RDX: ffff888046435280 RSI: ffffffff8189a4e7 RDI: 0000000100000190
[  140.342631] RBP: ffff888013e8f9f0 R08: ffff88806ce31340 R09: ffffe8ffffc16830
[  140.343205] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
[  140.343788] R13: 0000000000000014 R14: ffff88806ce31340 R15: dffffc0000000000
[  140.344360] FS:  0000555578ff1400(0000) GS:ffff8880e55d8000(0000) knlGS:0000000000000000
[  140.345014] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  140.345481] CR2: 0000555578ff2c18 CR3: 000000000c93f000 CR4: 0000000000350ef0
[  140.346049] Call Trace:
[  140.346260]  <TASK>
[  140.346450]  ? __pfx_perf_tp_event+0x10/0x10
[  140.346816]  ? arch_scale_cpu_capacity+0x17/0xa0
[  140.347209]  ? cpu_util.constprop.0+0x17d/0x340
[  140.347603]  ? __asan_memset+0x24/0x50
[  140.347925]  ? sched_balance_find_dst_group+0xa9a/0x1c00
[  140.348363]  ? lock_release+0xc8/0x290
[  140.348683]  ? __pfx_sched_balance_find_dst_group+0x10/0x10
[  140.349135]  ? __lock_acquire+0x694/0x1b70
[  140.349485]  ? perf_trace_run_bpf_submit+0xef/0x180
[  140.349892]  ? sched_clock+0x37/0x60
[  140.350202]  ? sched_clock_cpu+0x6c/0x4e0
[  140.350548]  ? lock_is_held_type+0x9e/0x120
[  140.350907]  perf_trace_run_bpf_submit+0xef/0x180
[  140.351300]  perf_trace_preemptirq_template+0x259/0x430
[  140.351740]  ? lock_is_held_type+0x9e/0x120
[  140.352096]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  140.352569]  ? _raw_spin_lock_irqsave+0x53/0x60
[  140.352953]  trace_irq_disable.constprop.0+0xa6/0x100
[  140.353373]  _raw_spin_lock_irqsave+0x53/0x60
[  140.353740]  try_to_wake_up+0xa0/0x11d0
[  140.354070]  ? __pfx_try_to_wake_up+0x10/0x10
[  140.354440]  ? plist_del+0x122/0x270
[  140.354747]  ? find_held_lock+0x2b/0x80
[  140.355077]  ? futex_wake+0x474/0x540
[  140.355395]  wake_up_q+0xa1/0x130
[  140.355687]  futex_wake+0x47e/0x540
[  140.355989]  ? __pfx_futex_wake+0x10/0x10
[  140.356335]  ? trace_irq_enable.constprop.0+0xc2/0x100
[  140.356760]  ? finish_task_switch.isra.0+0x206/0x840
[  140.357178]  do_futex+0x26d/0x370
[  140.357465]  ? __pfx_do_futex+0x10/0x10
[  140.357789]  ? __pfx___schedule+0x10/0x10
[  140.358134]  __x64_sys_futex+0x1c9/0x4d0
[  140.358466]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  140.358936]  ? __pfx___x64_sys_futex+0x10/0x10
[  140.359309]  ? xfd_validate_state+0x55/0x180
[  140.359693]  do_syscall_64+0xbf/0x360
[  140.360022]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  140.360460] RIP: 0033:0x7f227fca8b19
[  140.360757] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  140.362243] RSP: 002b:00007ffdbfbc35c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  140.362867] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f227fca8b19
[  140.363434] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f227fdbbf68
[  140.363999] RBP: 00007f227fdbbf60 R08: 00007f227d21e700 R09: 0000000000000000
[  140.364557] R10: 00007f227d21e700 R11: 0000000000000246 R12: 00007f227fdc0088
[  140.365113] R13: 00007ffdbfbc36d0 R14: 00007f227fdbbf60 R15: 00000000000223a9
[  140.365674]  </TASK>
[  140.365863] Modules linked in:
[  140.366122] ---[ end trace 0000000000000000 ]---
[  140.366125] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000032: 0000 [#2] SMP KASAN NOPTI
[  140.366492] RIP: 0010:perf_tp_event+0x175/0xe70
[  140.368223] KASAN: null-ptr-deref in range [0x0000000000000190-0x0000000000000197]
[  140.368582] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[  140.369737] CPU: 1 UID: 0 PID: 3988 Comm: syz-executor.3 Tainted: G      D W           6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) 
[  140.371138] RSP: 0018:ffff888013e8f780 EFLAGS: 00010012
[  140.372952] Tainted: [D]=DIE, [W]=WARN
[  140.373361] RAX: 0000000020000032 RBX: 00000000ffffffa0 RCX: 0000000000000002
[  140.373944] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  140.374496] RDX: ffff888046435280 RSI: ffffffff8189a4e7 RDI: 0000000100000190
[  140.375761] RIP: 0010:perf_tp_event+0x175/0xe70
[  140.376315] RBP: ffff888013e8f9f0 R08: ffff88806ce31340 R09: ffffe8ffffc16830
[  140.377024] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[  140.377576] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
[  140.380355] RSP: 0018:ffff88804677f780 EFLAGS: 00010012
[  140.380909] R13: 0000000000000014 R14: ffff88806ce31340 R15: dffffc0000000000
[  140.380913] 
[  140.380922] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: ffffc90006835000
[  140.381330] FS:  0000555578ff1400(0000) GS:ffff8880e55d8000(0000) knlGS:0000000000000000
[  140.382396] RDX: 0000000000040000 RSI: ffffffff8189a4e7 RDI: 0000000000000191
[  140.382534] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  140.383631] RBP: ffff88804677f9f0 R08: ffff88806cf31340 R09: ffffe8ffffd16830
[  140.384253] CR2: 0000555578ff2c18 CR3: 000000000c93f000 CR4: 0000000000350ef0
[  140.385319] R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000
[  140.385772] note: syz-executor.4[3981] exited with irqs disabled
[  140.386840] R13: 0000000000000014 R14: ffff88806cf31340 R15: dffffc0000000000
[  140.390477] FS:  00007f66fd237700(0000) GS:ffff8880e56d8000(0000) knlGS:0000000000000000
[  140.391720] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  140.392620] CR2: 00007f66ffdd5018 CR3: 0000000046bf6000 CR4: 0000000000350ef0
[  140.393714] Call Trace:
[  140.394123]  <TASK>
[  140.394482]  ? lock_acquire+0x18c/0x2f0
[  140.395112]  ? __pfx_perf_tp_event+0x10/0x10
[  140.395825]  ? kernel_text_address+0x5b/0xc0
[  140.396528]  ? lock_acquire+0x18c/0x2f0
[  140.397149]  ? __kernel_text_address+0xd/0x40
[  140.397851]  ? unwind_get_return_address+0x59/0xa0
[  140.398638]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  140.399492]  ? arch_stack_walk+0x9c/0xf0
[  140.400131]  ? stack_trace_save+0x8e/0xc0
[  140.400778]  ? stack_depot_save_flags+0x2c/0xa20
[  140.401527]  ? unwind_get_return_address+0x59/0xa0
[  140.402295]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  140.403130]  ? arch_stack_walk+0x9c/0xf0
[  140.403771]  ? kasan_save_stack+0x34/0x50
[  140.404435]  ? perf_trace_run_bpf_submit+0xef/0x180
[  140.405216]  ? stack_trace_save+0x8e/0xc0
[  140.405872]  perf_trace_run_bpf_submit+0xef/0x180
[  140.406633]  perf_trace_preemptirq_template+0x259/0x430
[  140.407472]  ? do_raw_spin_lock+0x123/0x260
[  140.408151]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  140.409051]  ? lock_acquire+0x18c/0x2f0
[  140.409677]  ? lockdep_init_map_type+0x4b/0x240
[  140.410407]  ? lock_release+0x1c7/0x290
[  140.411032]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  140.411939]  ? _raw_spin_lock_irqsave+0x53/0x60
[  140.412680]  trace_irq_disable.constprop.0+0xa6/0x100
[  140.413490]  _raw_spin_lock_irqsave+0x53/0x60
[  140.414202]  try_to_wake_up+0xa0/0x11d0
[  140.414837]  ? lock_acquire+0x18c/0x2f0
[  140.415466]  ? __pfx_try_to_wake_up+0x10/0x10
[  140.416178]  ? plist_del+0x122/0x270
[  140.416785]  ? __futex_unqueue+0xda/0x1c0
[  140.417442]  wake_up_q+0xa1/0x130
[  140.418005]  futex_wake+0x47e/0x540
[  140.418581]  ? __pfx_futex_wake+0x10/0x10
[  140.419249]  ? lock_release+0x1c7/0x290
[  140.419886]  ? lock_release+0x1c7/0x290
[  140.420513]  do_futex+0x26d/0x370
[  140.421069]  ? __pfx_do_futex+0x10/0x10
[  140.421693]  ? __pfx___do_sys_perf_event_open+0x10/0x10
[  140.422519]  ? count_memcg_events+0x32b/0x420
[  140.423245]  __x64_sys_futex+0x1c9/0x4d0
[  140.423887]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  140.424795]  ? __pfx___x64_sys_futex+0x10/0x10
[  140.425519]  do_syscall_64+0xbf/0x360
[  140.426121]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  140.426933] RIP: 0033:0x7f66ffcc1b19
[  140.427520] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  140.430319] RSP: 002b:00007f66fd237218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  140.431478] RAX: ffffffffffffffda RBX: 00007f66ffdd4f68 RCX: 00007f66ffcc1b19
[  140.432587] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f66ffdd4f6c
[  140.433687] RBP: 00007f66ffdd4f60 R08: 0000000000000002 R09: 0000000000000000
[  140.434781] R10: ffffffffffffffff R11: 0000000000000246 R12: 00007f66ffdd4f6c
[  140.435879] R13: 00007ffd6a59567f R14: 00007f66fd237300 R15: 0000000000022000
[  140.436981]  </TASK>
[  140.437354] Modules linked in:
[  140.437861] ---[ end trace 0000000000000000 ]---
[  140.437862] Oops: general protection fault, probably for non-canonical address 0xdffffc0020000032: 0000 [#3] SMP KASAN NOPTI
[  140.438596] RIP: 0010:perf_tp_event+0x175/0xe70
[  140.439479] KASAN: probably user-memory-access in range [0x0000000100000190-0x0000000100000197]
[  140.440191] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[  140.440873] CPU: 0 UID: 0 PID: 3981 Comm: syz-executor.4 Tainted: G      D W           6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) 
[  140.443659] RSP: 0018:ffff888013e8f780 EFLAGS: 00010012
[  140.444590] Tainted: [D]=DIE, [W]=WARN
[  140.444596] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  140.445394] RAX: 0000000020000032 RBX: 00000000ffffffa0 RCX: 0000000000000002
[  140.445703] RIP: 0010:perf_tp_event+0x175/0xe70
[  140.446964] RDX: ffff888046435280 RSI: ffffffff8189a4e7 RDI: 0000000100000190
[  140.447529] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[  140.448250] RBP: ffff888013e8f9f0 R08: ffff88806ce31340 R09: ffffe8ffffc16830
[  140.448811] RSP: 0018:ffff88806ce08ac0 EFLAGS: 00010012
[  140.451710] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
[  140.452271] RAX: 0000000020000032 RBX: 00000000ffffffa0 RCX: 0000000000000002
[  140.452281] RDX: ffff888046435280 RSI: ffffffff8189a4e7 RDI: 0000000100000190
[  140.453091] R13: 0000000000000014 R14: ffff88806ce31340 R15: dffffc0000000000
[  140.453646] RBP: ffff88806ce08d30 R08: ffff88806ce313e8 R09: ffffe8ffffc16830
[  140.453657] R10: 0000000000000000 R11: ffff88801a1e1498 R12: dffffc0000000000
[  140.454747] FS:  00007f66fd237700(0000) GS:ffff8880e56d8000(0000) knlGS:0000000000000000
[  140.455306] R13: 0000000000000014 R14: ffff88806ce313e8 R15: dffffc0000000000
[  140.456423] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  140.456978] FS:  0000555578ff1400(0000) GS:ffff8880e55d8000(0000) knlGS:0000000000000000
[  140.458075] CR2: 00007f66ffdd5018 CR3: 0000000046bf6000 CR4: 0000000000350ef0
[  140.458705] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  140.459824] note: syz-executor.3[3988] exited with irqs disabled
[  140.460277] CR2: 0000555578ff2c18 CR3: 000000000c93f000 CR4: 0000000000350ef0
[  140.463552] Call Trace:
[  140.463760]  <IRQ>
[  140.463935]  ? enqueue_task_fair+0x43a/0x1e00
[  140.464301]  ? __pfx_perf_tp_event+0x10/0x10
[  140.464663]  ? trace_pelt_se_tp+0xdf/0x130
[  140.465009]  ? __update_load_avg_se+0x428/0xa40
[  140.465391]  ? __cgroup_account_cputime+0x30/0xc0
[  140.465787]  ? trace_pelt_se_tp+0xdf/0x130
[  140.466129]  ? __update_load_avg_se+0x428/0xa40
[  140.466509]  ? asym_cpu_capacity_scan+0x731/0x7b0
[  140.466896]  ? update_load_avg+0x17d/0x1ef0
[  140.467243]  ? check_preempt_wakeup_fair+0x6e/0x950
[  140.467641]  ? lock_release+0x1c7/0x290
[  140.467957]  ? lock_release+0x1c7/0x290
[  140.468279]  ? perf_trace_run_bpf_submit+0xef/0x180
[  140.468678]  perf_trace_run_bpf_submit+0xef/0x180
[  140.469076]  perf_trace_preemptirq_template+0x259/0x430
[  140.469501]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  140.469966]  ? lock_acquire+0x18c/0x2f0
[  140.470291]  ? sched_balance_update_blocked_averages+0xff6/0x18f0
[  140.470780]  trace_irq_disable.constprop.0+0xa6/0x100
[  140.471190]  sched_balance_update_blocked_averages+0xff6/0x18f0
[  140.471676]  ? ktime_get+0x16d/0x270
[  140.471982]  ? __pfx_lapic_next_deadline+0x10/0x10
[  140.472381]  ? clockevents_program_event+0x135/0x360
[  140.472787]  ? tick_program_event+0xac/0x140
[  140.473138]  sched_balance_softirq+0xc6/0x150
[  140.473505]  handle_softirqs+0x1b1/0x770
[  140.473837]  __irq_exit_rcu+0xc4/0x100
[  140.474158]  irq_exit_rcu+0x9/0x20
[  140.474447]  sysvec_apic_timer_interrupt+0x70/0x80
[  140.474843]  </IRQ>
[  140.475028]  <TASK>
[  140.475214]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  140.475638] RIP: 0010:make_task_dead+0xa2/0x3b0
[  140.476016] Code: 38 00 85 db 0f 84 21 01 00 00 e8 09 a6 38 00 9c 5b 81 e3 00 02 00 00 31 ff 48 89 de e8 57 a1 38 00 48 85 db 0f 84 17 01 00 00 <e8> e9 a5 38 00 31 ff 65 8b 1d 60 2f 49 06 81 e3 ff ff ff 7f 89 de
[  140.477442] RSP: 0018:ffff888013e8ff28 EFLAGS: 00000246
[  140.477862] RAX: 0000000000000001 RBX: ffff888046435280 RCX: ffffffff817c3ab6
[  140.478423] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff813b5234
[  140.478988] RBP: 000000000000000b R08: 0000000000000000 R09: 0000000000000000
[  140.479553] R10: ffffffff8643b457 R11: 3030303030302043 R12: ffff888046435280
[  140.480110] R13: 0000000000000000 R14: dffffc0020000032 R15: 0000000000000000
[  140.480671]  ? trace_irq_enable.constprop.0+0x26/0x100
[  140.481110]  ? make_task_dead+0x214/0x3b0
[  140.481461]  ? make_task_dead+0x214/0x3b0
[  140.481816]  ? do_syscall_64+0xbf/0x360
[  140.482154]  rewind_stack_and_make_dead+0x16/0x20
[  140.482564] RIP: 0033:0x7f227fca8b19
[  140.482873] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  140.484375] RSP: 002b:00007ffdbfbc35c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  140.485003] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f227fca8b19
[  140.485588] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f227fdbbf68
[  140.486172] RBP: 00007f227fdbbf60 R08: 00007f227d21e700 R09: 0000000000000000
[  140.486762] R10: 00007f227d21e700 R11: 0000000000000246 R12: 00007f227fdc0088
[  140.487354] R13: 00007ffdbfbc36d0 R14: 00007f227fdbbf60 R15: 00000000000223a9
[  140.487954]  </TASK>
[  140.488154] Modules linked in:
[  140.488427] ---[ end trace 0000000000000000 ]---
[  140.488430] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000032: 0000 [#4] SMP KASAN NOPTI
[  140.488816] RIP: 0010:perf_tp_event+0x175/0xe70
[  140.490580] KASAN: null-ptr-deref in range [0x0000000000000190-0x0000000000000197]
[  140.490959] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[  140.492186] CPU: 1 UID: 0 PID: 3988 Comm: syz-executor.3 Tainted: G      D W           6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) 
[  140.493656] RSP: 0018:ffff888013e8f780 EFLAGS: 00010012
[  140.495560] Tainted: [D]=DIE, [W]=WARN
[  140.495978] RAX: 0000000020000032 RBX: 00000000ffffffa0 RCX: 0000000000000002
[  140.495988] RDX: ffff888046435280 RSI: ffffffff8189a4e7 RDI: 0000000100000190
[  140.496606] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  140.497194] RBP: ffff888013e8f9f0 R08: ffff88806ce31340 R09: ffffe8ffffc16830
[  140.497205] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
[  140.498340] RIP: 0010:perf_tp_event+0x175/0xe70
[  140.499012] R13: 0000000000000014 R14: ffff88806ce31340 R15: dffffc0000000000
[  140.499023] FS:  0000555578ff1400(0000) GS:ffff8880e55d8000(0000) knlGS:0000000000000000
[  140.500172] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[  140.500755] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  140.501503] RSP: 0018:ffff88806cf08b40 EFLAGS: 00010012
[  140.502089] CR2: 0000555578ff2c18 CR3: 000000000c93f000 CR4: 0000000000350ef0
[  140.503373] 
[  140.504873] Kernel panic - not syncing: Fatal exception in interrupt
[  141.548618] Shutting down cpus with NMI
[  141.550668] Kernel Offset: disabled
[  141.550956] ---[ end Kernel panic - not syncing: Fatal exception in interrupt ]---

VM DIAGNOSIS:
16:22:14  Registers:
info registers vcpu 0
RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff828e5105 RDI=ffffffff88729280 RBP=ffffffff88729240 RSP=ffff888013e8f070
R8 =0000000000000000 R9 =ffffed10016da046 R10=0000000000000020 R11=0000000065646f43
R12=0000000000000020 R13=0000000000000010 R14=ffffffff88729240 R15=ffffffff828e50f0
RIP=ffffffff828e515d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000555578ff1400 00000000 00000000
GS =0000 ffff8880e55d8000 00000000 00000000
LDT=0000 fffffe6d00000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000555578ff2c18 CR3=000000000c93f000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00007f227fd8f7c000007f227fd8f7c8
XMM02=00007f227fd8f7e000007f227fd8f7c0 XMM03=00007f227fd8f7c800007f227fd8f7c0
XMM04=ffffffff0000ff00000000ff00000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=ffff888048e30001 RBX=0000000000000001 RCX=0000000000000001 RDX=ffff888048e2f901
RSI=ffff888048e2f9d0 RDI=ffff888048e2f9d0 RBP=ffff888048e2f6c0 RSP=ffff888048e2f5f0
R8 =0000000000000001 R9 =ffff888048e2f6a8 R10=000000000003bea3 R11=0000000000024afb
R12=ffff888048e2f6c8 R13=ffff888048e2f6b0 R14=ffff888048e2f9d0 R15=ffff888048e2f668
RIP=ffffffff81357980 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 000055558b89c400 00000000 00000000
GS =0000 ffff8880e56d8000 00000000 00000000
LDT=0000 fffffe4f00000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055557c962c18 CR3=0000000009da7000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000a60ce07b00000000cec3662e XMM01=000000000000000003515b82db34ca11
XMM02=0000000000000000333bebdfd0a6a21d XMM03=00000000000000000000000000000000
XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000