Warning: Permanently added '[localhost]:15624' (ECDSA) to the list of known hosts.
2025/09/02 03:52:38 fuzzer started
2025/09/02 03:52:38 dialing manager at localhost:35473
syzkaller login: [   51.637839] cgroup: Unknown subsys name 'net'
[   51.712250] cgroup: Unknown subsys name 'cpuset'
[   51.736526] cgroup: Unknown subsys name 'rlimit'
2025/09/02 03:52:48 syscalls: 2214
2025/09/02 03:52:48 code coverage: enabled
2025/09/02 03:52:48 comparison tracing: enabled
2025/09/02 03:52:48 extra coverage: enabled
2025/09/02 03:52:48 setuid sandbox: enabled
2025/09/02 03:52:48 namespace sandbox: enabled
2025/09/02 03:52:48 Android sandbox: enabled
2025/09/02 03:52:48 fault injection: enabled
2025/09/02 03:52:48 leak checking: enabled
2025/09/02 03:52:48 net packet injection: enabled
2025/09/02 03:52:48 net device setup: enabled
2025/09/02 03:52:48 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/09/02 03:52:48 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/09/02 03:52:48 USB emulation: enabled
2025/09/02 03:52:48 hci packet injection: enabled
2025/09/02 03:52:48 wifi device emulation: enabled
2025/09/02 03:52:48 802.15.4 emulation: enabled
2025/09/02 03:52:48 fetching corpus: 50, signal 21707/23504 (executing program)
2025/09/02 03:52:48 fetching corpus: 100, signal 31668/35063 (executing program)
2025/09/02 03:52:48 fetching corpus: 150, signal 40646/45472 (executing program)
2025/09/02 03:52:49 fetching corpus: 200, signal 46686/52890 (executing program)
2025/09/02 03:52:49 fetching corpus: 250, signal 50789/58354 (executing program)
2025/09/02 03:52:49 fetching corpus: 300, signal 54226/63119 (executing program)
2025/09/02 03:52:49 fetching corpus: 350, signal 58793/68898 (executing program)
2025/09/02 03:52:49 fetching corpus: 400, signal 62276/73535 (executing program)
2025/09/02 03:52:49 fetching corpus: 450, signal 66695/78925 (executing program)
2025/09/02 03:52:49 fetching corpus: 500, signal 68912/82318 (executing program)
2025/09/02 03:52:49 fetching corpus: 550, signal 71524/86000 (executing program)
2025/09/02 03:52:49 fetching corpus: 600, signal 73667/89193 (executing program)
2025/09/02 03:52:49 fetching corpus: 650, signal 76364/92868 (executing program)
2025/09/02 03:52:49 fetching corpus: 700, signal 78412/95866 (executing program)
2025/09/02 03:52:49 fetching corpus: 750, signal 79539/98071 (executing program)
2025/09/02 03:52:50 fetching corpus: 800, signal 81869/101296 (executing program)
2025/09/02 03:52:50 fetching corpus: 850, signal 83159/103537 (executing program)
2025/09/02 03:52:50 fetching corpus: 900, signal 84803/106083 (executing program)
2025/09/02 03:52:50 fetching corpus: 950, signal 86793/108918 (executing program)
2025/09/02 03:52:50 fetching corpus: 1000, signal 88962/111859 (executing program)
2025/09/02 03:52:50 fetching corpus: 1050, signal 90249/114081 (executing program)
2025/09/02 03:52:50 fetching corpus: 1100, signal 92330/116826 (executing program)
2025/09/02 03:52:50 fetching corpus: 1150, signal 94052/119261 (executing program)
2025/09/02 03:52:50 fetching corpus: 1200, signal 96220/122036 (executing program)
2025/09/02 03:52:50 fetching corpus: 1250, signal 97366/124018 (executing program)
2025/09/02 03:52:50 fetching corpus: 1300, signal 100554/127492 (executing program)
2025/09/02 03:52:51 fetching corpus: 1350, signal 103083/130399 (executing program)
2025/09/02 03:52:51 fetching corpus: 1400, signal 104191/132187 (executing program)
2025/09/02 03:52:51 fetching corpus: 1450, signal 105915/134456 (executing program)
2025/09/02 03:52:51 fetching corpus: 1500, signal 106891/136170 (executing program)
2025/09/02 03:52:51 fetching corpus: 1550, signal 107832/137803 (executing program)
2025/09/02 03:52:51 fetching corpus: 1600, signal 109198/139744 (executing program)
2025/09/02 03:52:51 fetching corpus: 1650, signal 110644/141715 (executing program)
2025/09/02 03:52:51 fetching corpus: 1700, signal 111851/143522 (executing program)
2025/09/02 03:52:51 fetching corpus: 1750, signal 112888/145172 (executing program)
2025/09/02 03:52:51 fetching corpus: 1800, signal 114882/147431 (executing program)
2025/09/02 03:52:51 fetching corpus: 1850, signal 115914/149000 (executing program)
2025/09/02 03:52:52 fetching corpus: 1900, signal 117169/150694 (executing program)
2025/09/02 03:52:52 fetching corpus: 1950, signal 118235/152275 (executing program)
2025/09/02 03:52:52 fetching corpus: 2000, signal 120060/154273 (executing program)
2025/09/02 03:52:52 fetching corpus: 2050, signal 121028/155718 (executing program)
2025/09/02 03:52:52 fetching corpus: 2100, signal 121882/157096 (executing program)
2025/09/02 03:52:52 fetching corpus: 2150, signal 122600/158372 (executing program)
2025/09/02 03:52:52 fetching corpus: 2200, signal 123670/159875 (executing program)
2025/09/02 03:52:52 fetching corpus: 2250, signal 124911/161410 (executing program)
2025/09/02 03:52:52 fetching corpus: 2300, signal 125512/162546 (executing program)
2025/09/02 03:52:52 fetching corpus: 2350, signal 126521/163933 (executing program)
2025/09/02 03:52:52 fetching corpus: 2400, signal 127146/165048 (executing program)
2025/09/02 03:52:52 fetching corpus: 2450, signal 127880/166244 (executing program)
2025/09/02 03:52:52 fetching corpus: 2500, signal 128757/167519 (executing program)
2025/09/02 03:52:53 fetching corpus: 2550, signal 129971/168931 (executing program)
2025/09/02 03:52:53 fetching corpus: 2600, signal 130837/170125 (executing program)
2025/09/02 03:52:53 fetching corpus: 2650, signal 131519/171206 (executing program)
2025/09/02 03:52:53 fetching corpus: 2700, signal 132285/172350 (executing program)
2025/09/02 03:52:53 fetching corpus: 2750, signal 133079/173447 (executing program)
2025/09/02 03:52:53 fetching corpus: 2800, signal 133635/174421 (executing program)
2025/09/02 03:52:53 fetching corpus: 2850, signal 134380/175465 (executing program)
2025/09/02 03:52:53 fetching corpus: 2900, signal 135277/176635 (executing program)
2025/09/02 03:52:53 fetching corpus: 2950, signal 135891/177643 (executing program)
2025/09/02 03:52:53 fetching corpus: 3000, signal 136796/178767 (executing program)
2025/09/02 03:52:53 fetching corpus: 3050, signal 137283/179701 (executing program)
2025/09/02 03:52:54 fetching corpus: 3100, signal 137637/180525 (executing program)
2025/09/02 03:52:54 fetching corpus: 3150, signal 138395/181532 (executing program)
2025/09/02 03:52:54 fetching corpus: 3200, signal 138932/182421 (executing program)
2025/09/02 03:52:54 fetching corpus: 3250, signal 139734/183449 (executing program)
2025/09/02 03:52:54 fetching corpus: 3300, signal 140364/184346 (executing program)
2025/09/02 03:52:54 fetching corpus: 3350, signal 141330/185357 (executing program)
2025/09/02 03:52:54 fetching corpus: 3400, signal 142352/186402 (executing program)
2025/09/02 03:52:54 fetching corpus: 3450, signal 143093/187241 (executing program)
2025/09/02 03:52:54 fetching corpus: 3500, signal 144120/188238 (executing program)
2025/09/02 03:52:54 fetching corpus: 3550, signal 144745/189156 (executing program)
2025/09/02 03:52:54 fetching corpus: 3600, signal 145339/190015 (executing program)
2025/09/02 03:52:55 fetching corpus: 3650, signal 145940/190800 (executing program)
2025/09/02 03:52:55 fetching corpus: 3700, signal 146683/191601 (executing program)
2025/09/02 03:52:55 fetching corpus: 3750, signal 147334/192395 (executing program)
2025/09/02 03:52:55 fetching corpus: 3800, signal 147944/193145 (executing program)
2025/09/02 03:52:55 fetching corpus: 3850, signal 148487/193860 (executing program)
2025/09/02 03:52:55 fetching corpus: 3900, signal 148934/194571 (executing program)
2025/09/02 03:52:55 fetching corpus: 3950, signal 149459/195313 (executing program)
2025/09/02 03:52:55 fetching corpus: 4000, signal 149919/196022 (executing program)
2025/09/02 03:52:55 fetching corpus: 4050, signal 150583/196728 (executing program)
2025/09/02 03:52:55 fetching corpus: 4100, signal 150968/197368 (executing program)
2025/09/02 03:52:55 fetching corpus: 4150, signal 151609/198047 (executing program)
2025/09/02 03:52:55 fetching corpus: 4200, signal 151983/198693 (executing program)
2025/09/02 03:52:56 fetching corpus: 4250, signal 152332/199325 (executing program)
2025/09/02 03:52:56 fetching corpus: 4300, signal 152875/199975 (executing program)
2025/09/02 03:52:56 fetching corpus: 4350, signal 153544/200621 (executing program)
2025/09/02 03:52:56 fetching corpus: 4400, signal 154024/201249 (executing program)
2025/09/02 03:52:56 fetching corpus: 4450, signal 154381/201896 (executing program)
2025/09/02 03:52:56 fetching corpus: 4500, signal 154962/202549 (executing program)
2025/09/02 03:52:56 fetching corpus: 4550, signal 155364/203129 (executing program)
2025/09/02 03:52:56 fetching corpus: 4600, signal 155940/203722 (executing program)
2025/09/02 03:52:56 fetching corpus: 4650, signal 156410/204259 (executing program)
2025/09/02 03:52:56 fetching corpus: 4700, signal 156835/204806 (executing program)
2025/09/02 03:52:56 fetching corpus: 4750, signal 157545/205414 (executing program)
2025/09/02 03:52:56 fetching corpus: 4800, signal 157922/205920 (executing program)
2025/09/02 03:52:57 fetching corpus: 4850, signal 158612/206473 (executing program)
2025/09/02 03:52:57 fetching corpus: 4900, signal 159038/207054 (executing program)
2025/09/02 03:52:57 fetching corpus: 4950, signal 159491/207570 (executing program)
2025/09/02 03:52:57 fetching corpus: 5000, signal 159828/208057 (executing program)
2025/09/02 03:52:57 fetching corpus: 5050, signal 160295/208565 (executing program)
2025/09/02 03:52:57 fetching corpus: 5100, signal 160649/209008 (executing program)
2025/09/02 03:52:57 fetching corpus: 5150, signal 161364/209492 (executing program)
2025/09/02 03:52:57 fetching corpus: 5200, signal 161684/209928 (executing program)
2025/09/02 03:52:57 fetching corpus: 5250, signal 162007/209928 (executing program)
2025/09/02 03:52:57 fetching corpus: 5300, signal 162373/209960 (executing program)
2025/09/02 03:52:57 fetching corpus: 5350, signal 162898/209961 (executing program)
2025/09/02 03:52:57 fetching corpus: 5400, signal 163526/209962 (executing program)
2025/09/02 03:52:58 fetching corpus: 5450, signal 163811/209964 (executing program)
2025/09/02 03:52:58 fetching corpus: 5500, signal 164171/209964 (executing program)
2025/09/02 03:52:58 fetching corpus: 5550, signal 164637/209976 (executing program)
2025/09/02 03:52:58 fetching corpus: 5600, signal 165300/209985 (executing program)
2025/09/02 03:52:58 fetching corpus: 5650, signal 165712/210017 (executing program)
2025/09/02 03:52:58 fetching corpus: 5700, signal 165999/210019 (executing program)
2025/09/02 03:52:58 fetching corpus: 5750, signal 166376/210021 (executing program)
2025/09/02 03:52:58 fetching corpus: 5800, signal 166802/210084 (executing program)
2025/09/02 03:52:58 fetching corpus: 5850, signal 167160/210097 (executing program)
2025/09/02 03:52:58 fetching corpus: 5900, signal 167748/210099 (executing program)
2025/09/02 03:52:58 fetching corpus: 5950, signal 168163/210120 (executing program)
2025/09/02 03:52:59 fetching corpus: 6000, signal 168530/210126 (executing program)
2025/09/02 03:52:59 fetching corpus: 6050, signal 168914/210128 (executing program)
2025/09/02 03:52:59 fetching corpus: 6100, signal 169299/210143 (executing program)
2025/09/02 03:52:59 fetching corpus: 6150, signal 169625/210144 (executing program)
2025/09/02 03:52:59 fetching corpus: 6200, signal 169868/210146 (executing program)
2025/09/02 03:52:59 fetching corpus: 6250, signal 170386/210146 (executing program)
2025/09/02 03:52:59 fetching corpus: 6300, signal 170779/210150 (executing program)
2025/09/02 03:52:59 fetching corpus: 6350, signal 171055/210152 (executing program)
2025/09/02 03:52:59 fetching corpus: 6400, signal 171509/210153 (executing program)
2025/09/02 03:52:59 fetching corpus: 6450, signal 171919/210156 (executing program)
2025/09/02 03:52:59 fetching corpus: 6500, signal 172210/210158 (executing program)
2025/09/02 03:52:59 fetching corpus: 6550, signal 172441/210159 (executing program)
2025/09/02 03:53:00 fetching corpus: 6600, signal 172720/210165 (executing program)
2025/09/02 03:53:00 fetching corpus: 6650, signal 173181/210165 (executing program)
2025/09/02 03:53:00 fetching corpus: 6700, signal 173515/210166 (executing program)
2025/09/02 03:53:00 fetching corpus: 6750, signal 173978/210166 (executing program)
2025/09/02 03:53:00 fetching corpus: 6800, signal 174469/210170 (executing program)
2025/09/02 03:53:00 fetching corpus: 6850, signal 174748/210174 (executing program)
2025/09/02 03:53:00 fetching corpus: 6900, signal 175056/210180 (executing program)
2025/09/02 03:53:00 fetching corpus: 6950, signal 175387/210199 (executing program)
2025/09/02 03:53:00 fetching corpus: 7000, signal 175722/210199 (executing program)
2025/09/02 03:53:00 fetching corpus: 7050, signal 176174/210199 (executing program)
2025/09/02 03:53:00 fetching corpus: 7100, signal 176523/210226 (executing program)
2025/09/02 03:53:00 fetching corpus: 7150, signal 176924/210229 (executing program)
2025/09/02 03:53:00 fetching corpus: 7200, signal 177160/210247 (executing program)
2025/09/02 03:53:01 fetching corpus: 7250, signal 177526/210255 (executing program)
2025/09/02 03:53:01 fetching corpus: 7300, signal 177779/210268 (executing program)
2025/09/02 03:53:01 fetching corpus: 7350, signal 178093/210271 (executing program)
2025/09/02 03:53:01 fetching corpus: 7400, signal 178333/210274 (executing program)
2025/09/02 03:53:01 fetching corpus: 7450, signal 178748/210284 (executing program)
2025/09/02 03:53:01 fetching corpus: 7500, signal 180347/210286 (executing program)
2025/09/02 03:53:01 fetching corpus: 7550, signal 180579/210300 (executing program)
2025/09/02 03:53:01 fetching corpus: 7600, signal 180884/210309 (executing program)
2025/09/02 03:53:01 fetching corpus: 7650, signal 181211/210316 (executing program)
2025/09/02 03:53:01 fetching corpus: 7700, signal 181780/210318 (executing program)
2025/09/02 03:53:01 fetching corpus: 7750, signal 182072/210318 (executing program)
2025/09/02 03:53:02 fetching corpus: 7800, signal 182443/210322 (executing program)
2025/09/02 03:53:02 fetching corpus: 7850, signal 182677/210327 (executing program)
2025/09/02 03:53:02 fetching corpus: 7900, signal 182979/210352 (executing program)
2025/09/02 03:53:02 fetching corpus: 7950, signal 183191/210362 (executing program)
2025/09/02 03:53:02 fetching corpus: 8000, signal 183450/210382 (executing program)
2025/09/02 03:53:02 fetching corpus: 8050, signal 183646/210382 (executing program)
2025/09/02 03:53:02 fetching corpus: 8100, signal 184052/210387 (executing program)
2025/09/02 03:53:02 fetching corpus: 8150, signal 184267/210388 (executing program)
2025/09/02 03:53:02 fetching corpus: 8200, signal 184634/210390 (executing program)
2025/09/02 03:53:02 fetching corpus: 8250, signal 185007/210391 (executing program)
2025/09/02 03:53:02 fetching corpus: 8300, signal 185247/210393 (executing program)
2025/09/02 03:53:02 fetching corpus: 8350, signal 185421/210402 (executing program)
2025/09/02 03:53:03 fetching corpus: 8400, signal 185645/210406 (executing program)
2025/09/02 03:53:03 fetching corpus: 8450, signal 186130/210415 (executing program)
2025/09/02 03:53:03 fetching corpus: 8500, signal 186375/210415 (executing program)
2025/09/02 03:53:03 fetching corpus: 8550, signal 186642/210415 (executing program)
2025/09/02 03:53:03 fetching corpus: 8600, signal 186905/210424 (executing program)
2025/09/02 03:53:03 fetching corpus: 8650, signal 187610/210426 (executing program)
2025/09/02 03:53:03 fetching corpus: 8700, signal 187822/210426 (executing program)
2025/09/02 03:53:03 fetching corpus: 8750, signal 188129/210426 (executing program)
2025/09/02 03:53:03 fetching corpus: 8800, signal 188944/210427 (executing program)
2025/09/02 03:53:03 fetching corpus: 8850, signal 189514/210433 (executing program)
2025/09/02 03:53:03 fetching corpus: 8900, signal 189701/210434 (executing program)
2025/09/02 03:53:03 fetching corpus: 8950, signal 189964/210456 (executing program)
2025/09/02 03:53:04 fetching corpus: 9000, signal 190179/210456 (executing program)
2025/09/02 03:53:04 fetching corpus: 9050, signal 190495/210458 (executing program)
2025/09/02 03:53:04 fetching corpus: 9100, signal 190882/210462 (executing program)
2025/09/02 03:53:04 fetching corpus: 9150, signal 191335/210469 (executing program)
2025/09/02 03:53:04 fetching corpus: 9200, signal 191531/210474 (executing program)
2025/09/02 03:53:04 fetching corpus: 9250, signal 191909/210503 (executing program)
2025/09/02 03:53:04 fetching corpus: 9300, signal 192107/210505 (executing program)
2025/09/02 03:53:04 fetching corpus: 9350, signal 192406/210505 (executing program)
2025/09/02 03:53:04 fetching corpus: 9400, signal 192674/210506 (executing program)
2025/09/02 03:53:04 fetching corpus: 9450, signal 192949/210506 (executing program)
2025/09/02 03:53:04 fetching corpus: 9500, signal 193228/210507 (executing program)
2025/09/02 03:53:04 fetching corpus: 9550, signal 193421/210509 (executing program)
2025/09/02 03:53:05 fetching corpus: 9600, signal 193702/210511 (executing program)
2025/09/02 03:53:05 fetching corpus: 9650, signal 193936/210522 (executing program)
2025/09/02 03:53:05 fetching corpus: 9700, signal 194127/210530 (executing program)
2025/09/02 03:53:05 fetching corpus: 9750, signal 194394/210537 (executing program)
2025/09/02 03:53:05 fetching corpus: 9800, signal 194562/210537 (executing program)
2025/09/02 03:53:05 fetching corpus: 9850, signal 194869/210544 (executing program)
2025/09/02 03:53:05 fetching corpus: 9900, signal 195255/210601 (executing program)
2025/09/02 03:53:05 fetching corpus: 9950, signal 195425/210601 (executing program)
2025/09/02 03:53:05 fetching corpus: 10000, signal 195619/210611 (executing program)
2025/09/02 03:53:05 fetching corpus: 10050, signal 195933/210617 (executing program)
2025/09/02 03:53:05 fetching corpus: 10100, signal 196126/210617 (executing program)
2025/09/02 03:53:06 fetching corpus: 10150, signal 196419/210628 (executing program)
2025/09/02 03:53:06 fetching corpus: 10200, signal 196646/210632 (executing program)
2025/09/02 03:53:06 fetching corpus: 10250, signal 196993/210679 (executing program)
2025/09/02 03:53:06 fetching corpus: 10300, signal 197140/210683 (executing program)
2025/09/02 03:53:06 fetching corpus: 10350, signal 197413/210683 (executing program)
2025/09/02 03:53:06 fetching corpus: 10400, signal 197659/210683 (executing program)
2025/09/02 03:53:06 fetching corpus: 10424, signal 197754/210684 (executing program)
2025/09/02 03:53:06 fetching corpus: 10424, signal 197754/210684 (executing program)
2025/09/02 03:53:08 starting 8 fuzzer processes
03:53:08 executing program 7:
ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, &(0x7f0000000000)={0x4, {0x1, 0x1fc, 0x1, 0x2}})
writev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000040)="1e9a4f04fd1883145ff8e9f332ab78617a0453d3a86798c5b1faf3c49f0f2c6e6c939667f8482d41dd9e863f5ed517ec886c921c5ccf2032b290e274ccead051d6bfde296eba0034d141e0e1825a2371969ab83d15b17a381bf35e5abb7e1c2ed8ec625341e74ad0", 0x68}, {&(0x7f00000000c0)="0287b624c57c13b4fc78cd", 0xb}, {&(0x7f0000000100)="6bc91e840d6f529b402cf93266de3003ec7d6024e4e4b2d0efc506149a58cfc0ae5259b6", 0x24}, {&(0x7f0000000140)="ead7aec2d1f630c2bb32f576d5eb0240d535a22001b7c5defbc9fdeeedac0221ee2806f6e01ae204dc0fa5ecbdb8854ca3e1054a8e33466542873d1054ddecb4bd4b7523f742541038749315e23e98f6eba59f6ff570f802249d03c3256d142d845a7e271c2f314f9bccbaeed93e302136d0f9c85c9dd5220ff8df7795329ca6c7434fb1b3ee", 0x86}, {&(0x7f0000000200)="21f48843ef4dfbfd3f2a20ec91904baa55cd53b532e81534d848664efcb4ec98031ff6f0923ca4046475cfb1fa93e1af4705defb5d84b9a3c28968e5bc47f09a95ea4534f4e755b6d1e04ea51b7eedbaeab49633b0c7e8601317bab3fbe1bc7aa39414962fc14e6ac080aea67916edbb04dc6ad24afad7a3c34c2408414e76d1e4061fae511119bd48005bd436bdb416fc5049f8f2213d92516d3a39b61eb22bcacbdc35e8f2599c50351278f89320d01c3b5dc4fd7c3bff8285d5f9179326b3f15d160c39d33c4afaf145d23560cc204bbb32dc08ba486cc1f4e0f9641781888221b5", 0xe3}, {&(0x7f0000000300)}], 0x6)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x800)
r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000)
r1 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$F2FS_IOC_RESIZE_FS(r1, 0x4008f510, &(0x7f00000003c0)=0xfff)
vmsplice(r1, &(0x7f0000000440)=[{&(0x7f0000000400)}], 0x1, 0x8)
r2 = syz_mount_image$tmpfs(&(0x7f0000000480), &(0x7f00000004c0)='./file0\x00', 0x3, 0x1, &(0x7f0000000540)=[{&(0x7f0000000500)="536872e7340ef2da993a388a74bffebdf69532cf7d82f8ea8e5a8954606253e94d39d996d35d5b8b4029126b4b9c4f54f32f7389d42d934d5d1760ff668198", 0x3f, 0x7}], 0x184092, &(0x7f0000000580)={[{@huge_within_size}, {@nr_inodes={'nr_inodes', 0x3d, [0x37, 0x6b, 0x33]}}], [{@audit}, {@smackfstransmute={'smackfstransmute', 0x3d, ':\\)'}}, {@subj_type={'subj_type', 0x3d, '.&-{\\[@'}}, {@dont_measure}]})
fstat(r2, &(0x7f0000000600))
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000680), 0x10100, 0x0)
ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r3, 0x80286722, &(0x7f0000000740)={&(0x7f00000006c0)=""/121, 0x79, 0x7f, 0x1f})
setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000780)=0x3, 0x4)
r4 = openat(0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x10240, 0x0)
ioctl$HIDIOCGCOLLECTIONINFO(r4, 0xc0104811, &(0x7f0000000800)={0x2, 0xc03e, 0x17173597, 0x9})
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000840), 0x4)
r5 = syz_open_dev$ttys(0xc, 0x2, 0x1)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000880)={{0x1, 0x1, 0x18, <r6=>r5, {0x1}}, './file1\x00'})
fadvise64(r6, 0x401, 0x3, 0x3)
r7 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP(r7, 0xd0009412, &(0x7f0000000940)={0x0, 0x4})

03:53:08 executing program 1:
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x4}}, './file0\x00'})
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, r1, 0x215, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0xe7}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x3}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x3ff}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4050}, 0x1)
r3 = accept$packet(r0, &(0x7f00000001c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r5=>r3}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r5, 0xc0189373, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r6=>r5, {0x3f}}, './file0\x00'})
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r5)
sendmsg$NL80211_CMD_GET_COALESCE(r6, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r7, 0x4, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void, @void}}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x40800)
r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000400), 0x80, 0x0)
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), r5)
ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000540)={'ip6gre0\x00', &(0x7f00000004c0)={'ip6gre0\x00', <r10=>r4, 0x2f, 0x19, 0x8, 0x5, 0x22, @remote, @remote, 0x20, 0x8000, 0x6, 0x7}})
getsockname$packet(r5, &(0x7f0000000580)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000600)={'vcan0\x00', <r12=>0x0})
sendmsg$ETHTOOL_MSG_PAUSE_SET(r8, &(0x7f00000007c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000780)={&(0x7f0000000640)={0x13c, r9, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_PAUSE_HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_PAUSE_HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}]}, 0x13c}, 0x1, 0x0, 0x0, 0x4000001}, 0x8040)
r13 = fcntl$dupfd(r0, 0x0, r3)
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r13, &(0x7f0000000800)={0x4})
sendmsg$ETHTOOL_MSG_STRSET_GET(r13, &(0x7f0000000a00)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000880)={0x11c, r9, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x20, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x54, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4000}, 0x480c0)
ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000a40))
sendmsg$NL80211_CMD_NEW_MPATH(r5, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x38, r1, 0x200, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x40, 0x4a}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0xa0}, 0x0)

03:53:08 executing program 2:
munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000)
munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
munmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000)
mlock(&(0x7f0000ff9000/0x5000)=nil, 0x5000)
munmap(&(0x7f0000800000/0x800000)=nil, 0x800000)
mlock(&(0x7f0000aeb000/0x2000)=nil, 0x2000)
munlock(&(0x7f0000fff000/0x1000)=nil, 0x1000)
mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1)
mincore(&(0x7f0000a79000/0x3000)=nil, 0x3000, &(0x7f0000000000)=""/80)
mbind(&(0x7f0000beb000/0x2000)=nil, 0x2000, 0x8000, &(0x7f0000000080)=0x80000000, 0x6, 0x0)
mremap(&(0x7f0000e92000/0x1000)=nil, 0x1000, 0x3000, 0x7, &(0x7f0000ffc000/0x3000)=nil)
mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000, 0x4, &(0x7f0000a22000/0x2000)=nil)
munmap(&(0x7f0000c9b000/0x2000)=nil, 0x2000)
munmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000)
mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1)
remap_file_pages(&(0x7f0000e2c000/0x2000)=nil, 0x2000, 0x2000005, 0x1fe, 0xa040)
mlock(&(0x7f0000c84000/0x1000)=nil, 0x1000)
mremap(&(0x7f0000941000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f000068b000/0x1000)=nil)
mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, &(0x7f00000000c0)=0x3, 0x8, 0x0)

03:53:08 executing program 3:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000080)={0x9b0, r0, 0x300, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x10000, 0x67}}}}, [@NL80211_ATTR_TID_CONFIG={0x100, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x6f}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xac}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xff}]}, {0x4}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xff}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x8e}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x41}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x5e}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x1a}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xed}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3}]}]}, @NL80211_ATTR_TID_CONFIG={0x7f8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xad}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xef}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x1b0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x184, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x6c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x6c, 0x6c, 0x36, 0x3, 0x4, 0x16, 0x60, 0x1, 0xc, 0x2, 0x9, 0x6, 0xc, 0x5]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x41, 0x2, [{0x6}, {0x0, 0x6}, {0x3, 0x6}, {0x3}, {0x1, 0x5}, {0x1, 0x8}, {0x1, 0xa}, {}, {0x0, 0x3}, {0x7, 0x9}, {0x6, 0x3}, {0x1, 0x2}, {0x3, 0xa}, {0x7, 0x4}, {}, {0x2, 0x7}, {0x3, 0x9}, {0x0, 0x5}, {0x7, 0x9}, {0x6, 0x7}, {0x1, 0x4}, {0x6, 0x4}, {0x3, 0x1}, {0x6, 0x3}, {0x2, 0x2}, {0x1, 0x7}, {0x5, 0x9}, {0x5, 0x4}, {0x6, 0x7}, {0x4, 0x6}, {0x4, 0x8}, {0x2, 0xa}, {0x4, 0x6}, {0x3, 0x8}, {0x4, 0x4}, {0x1, 0x9}, {0x1, 0x4}, {0x2}, {0x0, 0x8}, {0x5, 0x2}, {0x0, 0x3}, {}, {0x6, 0x8}, {0x1, 0x7}, {0x5, 0x1}, {0x0, 0x8}, {0x7, 0x4}, {0x6, 0x7}, {0x5, 0x1}, {0x0, 0x7}, {0x0, 0x7}, {0x1, 0x7}, {0x0, 0x5}, {0x2, 0x8}, {}, {0x1, 0x6}, {0x0, 0x7}, {0x7, 0x6}, {0x2, 0x5}, {0x2}, {0x6, 0x3}]}]}, @NL80211_BAND_60GHZ={0x30, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xd, 0x1, [0x18, 0x18, 0x30, 0x36, 0x36, 0x30, 0xc, 0x3, 0xb]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x101, 0x20, 0x8, 0x8, 0x1f, 0x5]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x7c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0xf, 0x2, [{0x3}, {0x2, 0x8}, {0x4, 0x7}, {0x2, 0x3}, {0x7, 0x6}, {0x1, 0x7}, {0x3, 0x1}, {0x3, 0x8}, {0x1, 0x5}, {0x1, 0x7}, {0x7, 0x9}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffd, 0x20, 0x1ff, 0x7f, 0xde, 0x100, 0x3e0, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x7, 0x9, 0x7ff, 0x7, 0x878, 0x1000, 0x8001]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x4, 0x5b67, 0x1000, 0x1f, 0x7ff, 0x8000, 0x7]}}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x6c, 0x10, 0x3, 0x48, 0xc, 0xb, 0x32, 0xc, 0xa, 0x6, 0x5, 0x18]}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x60, 0x48, 0x24, 0x60, 0x2, 0x27, 0x4, 0x6, 0x12, 0xb, 0x26, 0x1b, 0x6c, 0x1b, 0x36, 0xc, 0x3, 0x4, 0x60, 0xc, 0x30, 0xb, 0x5cf8f495dd461a40, 0x60]}]}, @NL80211_BAND_2GHZ={0x1c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xc, 0x1, [0x48, 0x4, 0xc, 0xb6, 0x36, 0x48, 0x12, 0x3]}, @NL80211_TXRATE_HT={0xb, 0x2, [{0x2, 0x5}, {0x4, 0x3}, {0x3}, {0x6, 0x5}, {0x2, 0x8}, {0x5, 0x9}, {0x2, 0x5}]}]}, @NL80211_BAND_6GHZ={0x4c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x3e, 0x2, [{0x1, 0x2}, {0x5, 0xa}, {0x7, 0x8}, {0x2, 0x7}, {0x2, 0x6}, {0x6, 0x9}, {0x0, 0x3}, {0x5, 0xa}, {0x0, 0x8}, {0x2, 0x1}, {0x5}, {0x0, 0xa}, {0x7, 0x3}, {0x2, 0x7}, {0x2, 0x5}, {0x4}, {0x0, 0x8}, {0x2, 0x6}, {0x5, 0x5}, {0x0, 0x5}, {0x2}, {0x4, 0x8}, {0x6, 0xa}, {0x2, 0x6}, {0x5, 0x8}, {0x4, 0xa}, {0x2, 0x1}, {0x6, 0x1}, {0x5, 0x5}, {0x6, 0x7}, {0x1, 0xa}, {0x3, 0x1}, {0x6, 0x5}, {0x7, 0x5}, {0x5, 0x5}, {0x6, 0x6}, {0x7, 0x3}, {0x1, 0x6}, {0x6, 0x5}, {0x6, 0x4}, {}, {0x4, 0xa}, {0x5, 0x7}, {0x7, 0x9}, {0x5}, {0x4, 0x3}, {0x3, 0x9}, {0x5, 0x2}, {0x5}, {0x7, 0x2}, {0x1, 0x3}, {0x2, 0x9}, {0x6, 0x6}, {0x6, 0x6}, {0x6, 0xa}, {0x4, 0x6}, {0x1, 0x6}, {0x6}]}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x78}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xbc48}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xcc}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xb92}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x564, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x8c}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x35}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xc3}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x534, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x60, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0xc, 0x60, 0x3, 0x48, 0x3, 0x3d, 0xb, 0xc, 0x6, 0x36, 0x36, 0x9, 0x4, 0x30, 0x48, 0xb, 0x3, 0x1, 0x48, 0x6, 0x12, 0x24, 0x5a, 0x16, 0xb, 0x9, 0x2, 0x5, 0x6c, 0xb, 0x1b]}, @NL80211_TXRATE_HT={0xe, 0x2, [{0x0, 0x5}, {0x3, 0x5}, {0x0, 0x5}, {0x0, 0x4}, {0x1, 0x5}, {0x6, 0x1}, {0x0, 0x2}, {0x7, 0x7}, {0x0, 0x1}, {0x5, 0x9}]}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x2, 0x24, 0x4, 0x16, 0x21, 0x2, 0x12, 0x6b, 0x2, 0x24, 0x0, 0xc, 0x16, 0x1, 0x18, 0x6, 0x2, 0x5, 0x4, 0x12, 0x18, 0x0, 0x6, 0x60, 0x4, 0x6, 0xc, 0x1, 0x60, 0x2, 0x48]}]}, @NL80211_BAND_5GHZ={0xd8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x7, 0x4, 0x0, 0x81, 0xc9b, 0x7, 0x9]}}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x2, 0x36, 0x2, 0x4, 0x36, 0x1, 0x3, 0x16, 0x5, 0x61, 0x2, 0x30, 0x18]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xe90, 0xc9e1, 0x8, 0x3, 0x101, 0x7fff, 0x75e, 0xfffa]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x3f, 0x2, [{0x7, 0xa}, {0x3}, {0x4, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x2, 0x4}, {0x0, 0x5}, {0x1, 0x7}, {0x6, 0x5}, {0x4, 0x7}, {0x1, 0x2}, {0x2, 0x5}, {0x1, 0x4}, {}, {0x4, 0x4}, {0x4, 0x5}, {0x7, 0x2}, {0x1, 0x5}, {0x0, 0xa}, {0x1, 0xa}, {0x5, 0x6}, {0x1, 0xa}, {0x1, 0x3}, {0x4, 0x6}, {0x0, 0x6}, {0x0, 0x7}, {0x6, 0x6}, {0x3, 0x1}, {0x5, 0x1}, {0x5, 0xa}, {0x2}, {0x1, 0x9}, {0x4, 0x9}, {0x5, 0x1}, {0x1, 0x9}, {0x4}, {0x7, 0x3}, {0x2, 0x3}, {0x6, 0x6}, {0x3, 0x8}, {0x4, 0x9}, {0x2, 0x7}, {0x1, 0x4}, {0x7, 0x2}, {0x1, 0x7}, {0x1, 0x5}, {0x7, 0x9}, {0x3, 0x2}, {0x3, 0x6}, {0x7, 0x6}, {0x0, 0x6}, {0x7}, {0x5, 0x3}, {0x5, 0x6}, {0x6, 0x7}, {0x0, 0x4}, {0x1, 0x3}, {0x3, 0x6}, {0x5, 0x1}]}, @NL80211_TXRATE_HT={0x48, 0x2, [{0x5, 0x7}, {0x3, 0x1}, {0x4}, {0x6, 0x2}, {0x0, 0x7}, {0x4, 0x5}, {0x2, 0x8}, {0x1, 0x8}, {0x1}, {0x0, 0x8}, {0x7}, {0x0, 0x4}, {0x7}, {0x2, 0x9}, {0x2, 0x3}, {0x1, 0x2}, {0x5, 0x8}, {0x3, 0x1}, {0x0, 0x7}, {0x6, 0x8}, {0x7, 0x7}, {0x2, 0x4}, {0x1, 0x7}, {0x4}, {0x4, 0x5}, {0x5, 0x2}, {0x6, 0x9}, {0x1, 0x7}, {0x7, 0x8}, {0x0, 0xa}, {0x1, 0x8}, {0x1, 0x8}, {0x7, 0x7}, {0x0, 0x1}, {0x1, 0x5}, {0x7, 0x1}, {0x2, 0x9}, {0x0, 0x5}, {0x3, 0x9}, {0x3, 0xa}, {0x1, 0x2}, {0x5, 0x8}, {0x0, 0x1}, {0x3, 0x6}, {0x0, 0x4}, {0x6, 0x4}, {0x5}, {0x3, 0x8}, {0x7, 0x2}, {0x4, 0x6}, {0x2, 0x7}, {0x5, 0xa}, {0x7, 0x9}, {0x5, 0x5}, {0x2, 0x3}, {0x2, 0x7}, {0x6, 0x5}, {0x5}, {0x5, 0x3}, {0x1, 0x1}, {0x3, 0x3}, {0x3, 0x1}, {0x3, 0x8}, {0x7, 0x6}, {0x1, 0x3}, {0x4, 0x8}, {0x7, 0x9}, {0x2, 0x9}]}]}, @NL80211_BAND_5GHZ={0x9c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x20, 0x1, [0x1, 0xc, 0x60, 0x3, 0x24, 0x30, 0x2, 0x16, 0x1b, 0x48, 0x12, 0x78, 0x16, 0x1b, 0x60, 0x6, 0x4, 0xb, 0x9, 0x16, 0x6, 0xc, 0x48, 0x4, 0x48, 0x3, 0xb, 0x0]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff7, 0x4, 0x2, 0x1000, 0x7f, 0x817, 0x5, 0xf38]}}, @NL80211_TXRATE_HT={0x46, 0x2, [{0x0, 0x5}, {0x2, 0x5}, {0x1, 0x7}, {0x1, 0x9}, {0x3, 0x9}, {0x1, 0x5}, {0x5, 0xa}, {0x4, 0x6}, {0x4, 0x6}, {0x2, 0x9}, {0x4, 0x5}, {0x1, 0x8}, {0x1, 0x3}, {0x0, 0x7}, {0x6, 0x4}, {0x0, 0x2}, {0x3, 0x4}, {0x3}, {0x1, 0x8}, {0x4, 0x7}, {0x0, 0x9}, {0x5, 0x1}, {0x2, 0x2}, {0x3, 0x8}, {0x5, 0x5}, {}, {0x2, 0xa}, {0x2, 0x6}, {0x0, 0x5}, {0x0, 0xa}, {0x5, 0x7}, {}, {0x7, 0xa}, {0x5, 0x1}, {0x5, 0x6}, {0x6, 0xa}, {0x6, 0x2}, {0x1, 0x5}, {0x3, 0x4}, {0x4, 0x1}, {0x0, 0xa}, {0x6, 0x1}, {}, {0x7, 0x8}, {0x6, 0x7}, {0x0, 0x5}, {0x6, 0x3}, {0x0, 0x7}, {0x1, 0x4}, {0x2}, {0x5, 0xa}, {0x1, 0x8}, {0x6, 0x4}, {0x2, 0x6}, {0x7, 0x6}, {0x0, 0x3}, {0x4, 0x6}, {0x7, 0x7}, {0x7, 0x1}, {}, {0x5, 0x7}, {0x4, 0x9}, {0x6, 0x6}, {0x4, 0xa}, {0x0, 0x7}, {0x6, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1f, 0xff8, 0x20, 0x5, 0x0, 0x8, 0x3, 0x3]}}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x36, 0x21]}]}, @NL80211_BAND_60GHZ={0x54, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x47, 0x2, [{0x5, 0x8}, {0x5, 0x7}, {0x1, 0xa}, {0x4}, {0x2}, {0x6, 0xa}, {0x3, 0x7}, {0x3, 0x4}, {0x7, 0x9}, {0x4, 0x4}, {0x1, 0x3}, {0x1}, {0x3}, {0x5, 0x7}, {0x5}, {0x1, 0x2}, {0x6, 0x7}, {0x0, 0x9}, {0x7, 0xa}, {0x4, 0x1}, {0x1, 0x1}, {0x3, 0x4}, {0x7}, {0x0, 0x1}, {0x1, 0x9}, {0x1, 0x5}, {0x0, 0x5}, {0x6}, {0x2, 0x7}, {0x0, 0x9}, {0x5}, {0x6, 0x4}, {0x7, 0x5}, {0x0, 0x2}, {0x3}, {0x4, 0x4}, {0x0, 0xa}, {0x4, 0x9}, {0x5, 0x2}, {0x6, 0x4}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x1}, {0x0, 0x9}, {0x5, 0x7}, {0x4, 0x5}, {0x5, 0x6}, {0x1, 0x6}, {0x1, 0x1}, {0x7, 0x7}, {0x4, 0x6}, {0x2, 0x5}, {0x2, 0x2}, {0x2, 0x5}, {0x3, 0x2}, {0x2, 0x3}, {}, {0x1, 0x9}, {0x0, 0xa}, {0x0, 0xa}, {0x2, 0x1}, {0x7, 0x8}, {0x5}, {0x4, 0x3}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x5}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0xd0, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x49, 0x2, [{0x7, 0x4}, {0x0, 0x8}, {0x5, 0xa}, {0x1, 0x7}, {0x5, 0x1}, {0x0, 0x8}, {0x2}, {}, {0x7, 0x1}, {0x7, 0x2}, {0x5, 0x4}, {0x1, 0x8}, {0x7, 0x4}, {0x1, 0x4}, {0x1, 0x4}, {0x0, 0x6}, {0x4, 0x8}, {0x1}, {0x0, 0x3}, {0x5, 0x6}, {0x6, 0x2}, {0x4, 0xa}, {0x4, 0x8}, {0x6, 0x1}, {0x2, 0x5}, {0x7, 0x7}, {0x7, 0x6}, {0x3, 0x7}, {0x5}, {0x0, 0x6}, {0x3, 0x4}, {0x0, 0x4}, {0x1, 0x9}, {0x4, 0x5}, {0x7, 0x7}, {0x0, 0x7}, {0x6, 0x7}, {0x2, 0x6}, {0x4, 0x4}, {0x4, 0x6}, {0x1, 0x9}, {0x2, 0x3}, {0x4}, {0x4, 0x6}, {0x1, 0x3}, {0x1, 0x8}, {0x0, 0x9}, {0x0, 0xa}, {0x1, 0x1}, {0x7, 0xa}, {0x2, 0x1}, {0x7, 0x5}, {0x4, 0x8}, {0x1, 0xa}, {0x2, 0x2}, {0x5, 0x6}, {0x3, 0x6}, {0x4, 0x8}, {0x7, 0x3}, {0x0, 0x7}, {0x7, 0x2}, {0x2, 0x3}, {0x5}, {0x5, 0x8}, {0x3}, {0x6, 0x2}, {0x4, 0x7}, {0x3, 0x7}, {0x5, 0x2}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0xe, 0x2, [{0x3, 0x1}, {0x7, 0x3}, {0x6, 0x3}, {0x1, 0x6}, {0x3, 0x9}, {0x1, 0x8}, {0x3, 0x2}, {0x1, 0x4}, {0x1, 0x1}, {0x0, 0x9}]}, @NL80211_TXRATE_HT={0x34, 0x2, [{0x3, 0xa}, {0x5, 0x6}, {0x3, 0x5}, {0x2, 0x2}, {0x3, 0x7}, {0x1, 0x4}, {0x3, 0x3}, {0x6, 0x5}, {0x3, 0x5}, {0x2, 0x2}, {0x2, 0x5}, {0x7, 0x9}, {0x6, 0x2}, {0x2, 0x5}, {0x6, 0x9}, {0x1, 0x6}, {0x7, 0x7}, {0x0, 0x6}, {0x6, 0x2}, {0x2, 0xa}, {0x4, 0xa}, {0x4, 0x1}, {0x3}, {0x0, 0xa}, {0x4, 0x5}, {0x2, 0x5}, {0x5, 0xa}, {0x2}, {0x3, 0x7}, {0x6, 0x9}, {0x5, 0x6}, {0x1}, {0x6, 0x4}, {0x5}, {0x6, 0x6}, {0x6}, {0x0, 0xa}, {0x1, 0x9}, {0x2, 0x9}, {0x2, 0x1}, {0x1, 0x4}, {0x1}, {0x1, 0x4}, {0x3}, {0x5, 0x1}, {0x1}, {0x1, 0xa}, {0x6, 0x3}]}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x1b, 0x24, 0x60, 0xb, 0x1b, 0x6, 0x2, 0x18, 0x1, 0xc, 0x1b, 0x24, 0x24, 0x30, 0x48, 0x12, 0x3, 0x2, 0x18, 0x4, 0x3, 0x48, 0x4, 0x6c, 0xb, 0x36, 0x1, 0x1, 0x1, 0x3, 0x6, 0x2]}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x48, 0x18, 0x9, 0x60, 0x1b, 0x3, 0x6, 0x1, 0x1e]}]}, @NL80211_BAND_6GHZ={0xb4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3c, 0x2, [{0x4, 0x9}, {0x2, 0x5}, {0x2, 0x8}, {0x0, 0x6}, {0x6, 0xf}, {0x6, 0x4}, {0x5, 0x3}, {0x6, 0x6}, {0x1, 0x8}, {0x2, 0x7}, {0x1, 0x9}, {0x7}, {0x2, 0x8}, {0x5, 0x8}, {0x3, 0x4}, {}, {0x4, 0x1}, {0x3, 0x3}, {0x0, 0x8}, {0x4, 0x4}, {0x3, 0xa}, {0x7, 0xa}, {0x4, 0x4}, {0x1, 0x6}, {0x6, 0x6}, {0x1, 0x7}, {0x6, 0x9}, {0x4, 0xa}, {0x3}, {0x2, 0x3}, {0x0, 0x9}, {0x1, 0x2}, {0x6, 0x7}, {0x1, 0x1}, {0x0, 0x4}, {0x1, 0x9}, {0x4, 0x9}, {0x0, 0x6}, {0x5}, {0x4, 0x1}, {0x7, 0x5}, {0x2}, {0x3, 0x7}, {0x1, 0x6}, {0x5, 0x4}, {0x7, 0x8}, {0x0, 0x1}, {0x6, 0x1}, {0x7, 0x9}, {0x4, 0x5}, {0x3, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {}, {0x0, 0x6}, {0x0, 0x1}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x38, 0x2, [{0x5, 0x2}, {0x0, 0x1}, {0x1, 0x9}, {0x1, 0x5}, {0x1, 0x4}, {0x4, 0x3}, {0x0, 0xa}, {0x1, 0x8}, {0x6, 0x2}, {0x4, 0x8}, {0x1, 0x2}, {}, {0x2, 0x6}, {0x7}, {0x1, 0xa}, {0x2, 0xa}, {0x0, 0x2}, {0x3, 0xa}, {0x1, 0x9}, {0x1, 0x7}, {0x3}, {0x3, 0x5}, {0x1, 0x6}, {0x7, 0x8}, {0x5, 0x5}, {0x5, 0xa}, {0x4, 0x3}, {0x3, 0x6}, {0x2, 0x4}, {0x7, 0x3}, {0x4, 0x1}, {0x6, 0x3}, {0x5, 0x4}, {0x3, 0x8}, {0x1, 0x9}, {0x0, 0x3}, {0x2, 0x2}, {0x4}, {0x0, 0x6}, {0x4, 0x1}, {0x0, 0x4}, {0x0, 0x6}, {0x4, 0x1}, {0x3}, {0x7, 0x6}, {0x6, 0xa}, {0x3, 0x1}, {0x1, 0x8}, {0x6, 0x7}, {0x2}, {0x3, 0x8}, {0x5, 0x8}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0xe, 0x2, [{0x2, 0x2}, {0x6, 0x3}, {0x0, 0x4}, {0x7, 0x2}, {0x3, 0x3}, {0x1, 0x3}, {0x0, 0xa}, {0x1, 0xa}, {0x1, 0x5}, {0x4, 0x4}]}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x6, 0x48, 0x6, 0x6c, 0x1b, 0x3, 0x36, 0x1e, 0x5, 0x3, 0x36, 0x3b, 0x1, 0x60, 0x2, 0x36, 0x6c, 0x30, 0x27, 0x1, 0x16, 0x1b, 0x36]}]}, @NL80211_BAND_6GHZ={0xd4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3b, 0x2, [{0x0, 0x1}, {0x2, 0x3}, {0x5, 0x2}, {0x2, 0x4}, {0x5, 0x9}, {0x0, 0x1}, {0x5, 0x7}, {0x0, 0x3}, {0x6, 0x7}, {0x0, 0x1}, {0x4, 0x2}, {0x3, 0x4}, {0x6, 0x8}, {0x6, 0x3}, {0x3, 0x3}, {0x1, 0x2}, {0x3, 0x9}, {0x4, 0x7}, {0x6, 0x6}, {0x2, 0x6}, {0x3, 0x3}, {0x4, 0x2}, {0x5, 0x9}, {0x1, 0x7}, {0x2, 0xa}, {0x2, 0x9}, {0x7}, {0x1, 0x9}, {0x3, 0x6}, {}, {0x5, 0x2}, {0x0, 0x7}, {0x3, 0x9}, {0x6, 0x3}, {0x2, 0x2}, {0x6, 0x6}, {0x0, 0x5}, {0x6, 0x8}, {0x3, 0xa}, {0x0, 0x5}, {}, {0x0, 0x1}, {0x0, 0x5}, {0x4, 0x6}, {0x1, 0x8}, {0x1, 0x7}, {0x1, 0x7}, {0x0, 0xa}, {0x4, 0x5}, {0x7, 0x7}, {0x0, 0x7}, {0x3, 0x5}, {0x1, 0x7}, {0x1}, {0x3, 0x3}]}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x6, 0x35, 0x4, 0xb, 0x3, 0x3, 0x1b, 0x16, 0x36, 0x36, 0x36, 0x30, 0x9, 0x12, 0x36]}, @NL80211_TXRATE_HT={0x6, 0x2, [{0x0, 0x4}, {0x5, 0xa}]}, @NL80211_TXRATE_HT={0x37, 0x2, [{0x3, 0x4}, {0x1, 0x2}, {0x1, 0x1}, {0x2, 0x8}, {0x4, 0x4}, {0x1, 0x5}, {0x3, 0x7}, {0x1, 0x9}, {0x1, 0xa}, {0x7, 0x7}, {0x3, 0x9}, {0x2, 0x4}, {0x2, 0x3}, {0x6, 0x3}, {0x0, 0x3}, {0x1, 0x5}, {0x2, 0x4}, {0x7}, {0x2, 0x1}, {0x6, 0x7}, {0x3, 0xc}, {0x0, 0x7}, {0x0, 0x2}, {0x5, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x0, 0x2}, {0x1, 0x4}, {0x1, 0xa}, {0x5, 0x5}, {0x5, 0xa}, {0x1, 0x8}, {0x3, 0x8}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0xa}, {0x6, 0x7}, {0x1}, {0x6, 0x8}, {0x3, 0x9}, {0x2, 0x5}, {0x7, 0x5}, {0x0, 0x1}, {0x7, 0x7}, {0x2, 0x4}, {0x3, 0x8}, {0x3, 0x8}, {0x5, 0x3}, {0x4, 0x9}, {0x6}, {0x7, 0x8}]}, @NL80211_TXRATE_HT={0x3e, 0x2, [{0x3, 0x2}, {0x4, 0x1}, {0x5, 0x4}, {0x5, 0x6}, {0x6, 0x6}, {0x7, 0x7}, {0x0, 0x5}, {0x0, 0x2}, {0x3, 0x5}, {0x2}, {0x2, 0x5}, {0x4}, {0x0, 0x8}, {0x4, 0x3}, {0x2, 0x4}, {0x0, 0x6}, {0x5, 0x7}, {0x3, 0x9}, {0x1, 0x2}, {0x2, 0x8}, {0x3, 0x1}, {0x3}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x5}, {0x5, 0x9}, {0x6, 0x9}, {0x0, 0x2}, {0x5, 0x2}, {0x7, 0x9}, {0x6, 0x8}, {0x0, 0x6}, {0x0, 0x4}, {0x0, 0x7}, {0x6, 0x1}, {0x1, 0x1}, {0x1, 0x4}, {0x6, 0x5}, {0x2}, {0x4, 0x4}, {0x3, 0x2}, {0x2}, {0x4, 0x3}, {0x3, 0x6}, {0x3, 0x2}, {0x6, 0xa}, {0x7, 0x9}, {0x6, 0x6}, {0x6, 0x9}, {0x4, 0x8}, {0x1, 0x2}, {0x5, 0x8}, {0x2, 0x3}, {0x1, 0x9}, {0x3, 0x9}, {0x2, 0x5}, {0x2}, {0x7, 0x6}]}]}, @NL80211_BAND_60GHZ={0xa4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x49, 0x2, [{0x1, 0xa}, {0x7, 0x6}, {0x3, 0x4}, {0x1, 0x6}, {0x1}, {0x1, 0x5}, {0x0, 0x5}, {0x0, 0x3}, {0x2, 0x8}, {0x7, 0x2}, {0x2, 0x8}, {0x5, 0x6}, {0x1, 0x3}, {0x5}, {0x7, 0x6}, {0x5, 0x9}, {0x3, 0xa}, {0x1, 0x3}, {0x6, 0x2}, {0x0, 0x10}, {0x0, 0x5}, {0x7, 0x1}, {0x6, 0x7}, {0x0, 0x3}, {0x3, 0x5}, {0x4}, {0x3, 0xa}, {0x0, 0xa}, {0x4, 0x7}, {0x0, 0x7}, {0x2, 0x4}, {0x5, 0x3}, {0x4, 0x3}, {0x5, 0x6}, {0x1, 0x6}, {}, {0x2, 0x9}, {0x2, 0x6}, {0x2, 0x2}, {0x3, 0x3}, {0x2, 0xa}, {0x6, 0x3}, {0x3, 0x8}, {0x5, 0x4}, {0x1, 0x3}, {0x0, 0x5}, {0x6, 0x5}, {0x0, 0x9}, {0x2}, {0x6, 0x7}, {0x7, 0x3}, {0x2, 0x7}, {0x3, 0x9}, {0x4, 0x1}, {0x4, 0x8}, {0x3, 0x1}, {0x5, 0x8}, {0x0, 0xa}, {0x1, 0xa}, {0x1, 0x5}, {0x2, 0x9}, {0x7, 0x9}, {0x4}, {0x3, 0x7}, {0x7, 0x7}, {0x1}, {0x0, 0xa}, {0x2, 0xa}, {0x6, 0x8}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x28, 0x2, [{0x2, 0x9}, {0x7, 0x6}, {0x2}, {0x4, 0xa}, {0x6, 0x4}, {0x0, 0x8}, {0x0, 0x1}, {0x2, 0x2}, {0x4, 0x1}, {0x7, 0x4}, {0x0, 0x4}, {0x4, 0xa}, {0x5}, {0x6, 0x8}, {0x2, 0x4}, {0x2, 0x7}, {0x5, 0x2}, {0x1, 0x8}, {0x6, 0x6}, {0x1, 0x7}, {0x6, 0x7}, {0x0, 0x7}, {0x3, 0x6}, {0x3, 0x6}, {0x4, 0x1}, {0x1, 0x1}, {0x2, 0x9}, {0x2, 0x5}, {0x7}, {0x1, 0x8}, {0x1, 0x2}, {0x0, 0x8}, {0x5, 0x9}, {0x4, 0x5}, {0x5, 0x7}, {0x5, 0x3}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x1, 0xff, 0xff, 0x5, 0xfffd, 0x7, 0x3]}}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xcf}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x6c}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x7a}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x2}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x9f}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x2c}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x1d}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x38}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xfffffffffffffff8}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x98, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1a}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xf7}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x42}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x3f}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}]}]}, 0x9b0}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000010)
r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000ac0), 0x400, 0x0)
sendmsg$NL80211_CMD_SET_NOACK_MAP(r1, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x64, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x100}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xffff}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x5b}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x5}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x154d}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x20}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x9}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xfacb}]}, 0x64}}, 0x20004001)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000c40)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, <r2=>0x0})
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000e40)={{r1}, r2, 0x10, @unused=[0x9, 0xd473, 0x8, 0x4], @subvolid=0x2})
sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000001f00)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x80000088}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001e80)={0x2c, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_COALESCE_RX_MAX_FRAMES_HIGH={0x8, 0x14, 0xffffffc0}, @ETHTOOL_A_COALESCE_TX_USECS_IRQ={0x8, 0x8, 0x5e}, @ETHTOOL_A_COALESCE_PKT_RATE_HIGH={0x8, 0x12, 0x1}]}, 0x2c}}, 0x891)
syz_genetlink_get_family_id$tipc(&(0x7f0000001f40), r1)
getsockname(r1, &(0x7f0000001f80)=@pppol2tpin6={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, &(0x7f0000002000)=0x80)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000002080)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f00000021c0)={&(0x7f0000002040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002180)={&(0x7f00000020c0)={0x8c, r0, 0x2, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "55e7e4a0a0"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0x4}, @NL80211_ATTR_KEY={0x54, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "9459e05c81e414b537fafc65dc"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "83d6111222"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_SEQ={0xc, 0x4, "5b0e6c7095e48b9d"}, @NL80211_KEY_DEFAULT_TYPES={0x1c, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4}, 0x1)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000002240)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r3, &(0x7f0000002300)={&(0x7f0000002200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000022c0)={&(0x7f0000002280)={0x34, r0, 0x400, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x47}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x55}]}, 0x34}, 0x1, 0x0, 0x0, 0xf6c7ca4c7279707c}, 0x4040000)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000002340)={{0x1, 0x1, 0x18, <r6=>r3, {0xfffffffb}}, './file0\x00'})
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000002500)={&(0x7f0000002380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000024c0)={&(0x7f00000023c0)={0xec, r0, 0x400, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xaa4, 0x52}}}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "2b8a954c7a7aa182d9468714d9c9f32a9adb5406c53d653c"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "235bdcdd733e468a5a82c51dd1a42709ed1e4dd3d9f024f5"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "bd35a6938c2eb387282bed200a9afa03b41cca07160377e5"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}], @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}], @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x48080}, 0xc1)
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r3, &(0x7f0000002740)={&(0x7f0000002540)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002700)={&(0x7f0000002580)={0x14c, 0x0, 0x300, 0x70bd29, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0xffffffffffffffff}, {0xc}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x7bdf}, {0xc}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x4d}, {0xc, 0x90, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0xc06}, {0xc, 0x90, 0xffff}}, {@pci={{0x8}, {0x11}}, {0x8}, {0xc, 0x8f, 0x407}, {0xc, 0x90, 0x2}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x4840}, 0x40010)
r7 = openat(r6, &(0x7f0000002780)='./file0\x00', 0x0, 0x1)
recvfrom$unix(r7, &(0x7f00000027c0)=""/237, 0xed, 0x10, 0x0, 0x0)
sendmsg$NL80211_CMD_START_NAN(r6, &(0x7f0000002980)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002940)={&(0x7f0000002900)={0x40, r0, 0x4, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x2de4}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xc4}, @NL80211_ATTR_BANDS={0x8}, @NL80211_ATTR_BANDS={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000040}, 0x0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000002b80)={&(0x7f0000002a00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002b40)={&(0x7f0000002ac0)={0x68, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x94}, 0x20004041)

03:53:08 executing program 4:
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0xd1c2}}, './file0\x00'})
getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000040), &(0x7f0000000080)=0xc)
ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f00000000c0)='macsec0\x00')
r1 = accept4$inet(r0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, &(0x7f0000000140)=0x10, 0x80800)
r2 = pidfd_getfd(r0, r1, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe0, r3, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x35, 0x33}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'veth0\x00'}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "0113d9a46e39d19079010763e06caa102548c9d20433a176"}, @NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "cca80d0fd96fb68fcdd2e46c15f224d40d4407d8083aab8f"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'veth1_to_bridge\x00'}]}, 0xe0}, 0x1, 0x0, 0x0, 0x40000}, 0x4000)
setsockopt$inet_tcp_buf(r1, 0x6, 0x1c, &(0x7f00000003c0)="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", 0x1000)
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f00000013c0)={0x1, 'gretap0\x00', {}, 0xd0})
setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000001400)={@remote, @rand_addr=0x64010102, @rand_addr=0x64010100}, 0xc)
ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000001440)={<r5=>r2, 0x5, 0x5, 0x2})
sendfile(r1, r5, 0x0, 0xfffffffffffffff7)
pipe(&(0x7f0000001480)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$CDROM_GET_MCN(r6, 0x5311, &(0x7f00000014c0))
r8 = openat$cgroup_ro(r5, &(0x7f0000001500)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r7, 0xc018937b, &(0x7f0000001540)={{0x1, 0x1, 0x18, r8, {0xee01, 0xffffffffffffffff}}, './file0\x00'})
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001580)='./cgroup/syz0\x00', 0x200002, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f00000015c0)={{0x33, @rand_addr=0x64010102, 0x4e21, 0x3, 'lc\x00', 0x1, 0x4, 0xc}, {@private=0xa010100, 0x4e21, 0x3, 0x800, 0x2, 0xeb9}}, 0x44)
close(0xffffffffffffffff)

[   81.709210] audit: type=1400 audit(1756785188.589:7): avc:  denied  { execmem } for  pid=274 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
03:53:08 executing program 5:
prctl$PR_SET_ENDIAN(0x14, 0x1)
prctl$PR_SET_ENDIAN(0x14, 0x1)
prctl$PR_SET_ENDIAN(0x14, 0x0)
prctl$PR_SET_ENDIAN(0x14, 0x0)
prctl$PR_SET_ENDIAN(0x14, 0x0)
prctl$PR_SET_ENDIAN(0x14, 0x0)
prctl$PR_SET_ENDIAN(0x14, 0x1)
prctl$PR_SET_ENDIAN(0x14, 0x2)
prctl$PR_SET_ENDIAN(0x14, 0x2)
prctl$PR_SET_ENDIAN(0x14, 0x0)
prctl$PR_SET_ENDIAN(0x14, 0x1)
prctl$PR_SET_ENDIAN(0x14, 0xa6e4624350ef3ef8)
prctl$PR_SET_ENDIAN(0x14, 0x2)
prctl$PR_SET_ENDIAN(0x14, 0x1)
prctl$PR_SET_ENDIAN(0x14, 0x1)
prctl$PR_SET_ENDIAN(0x14, 0x1)
prctl$PR_SET_ENDIAN(0x14, 0x1)
prctl$PR_SET_ENDIAN(0x14, 0x0)
prctl$PR_SET_ENDIAN(0x14, 0x2)
prctl$PR_SET_ENDIAN(0x14, 0x1)

03:53:08 executing program 6:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0)
ioctl$TIOCL_GETSHIFTSTATE(r0, 0x541c, &(0x7f0000000040)={0x6, 0x81})
r1 = syz_io_uring_complete(0x0)
ioctl$TIOCVHANGUP(r1, 0x5437, 0x0)
ioctl$SG_GET_NUM_WAITING(r1, 0x227d, &(0x7f00000015c0))
ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000001600)={0x8, 0x1, {0x4, @usage=0x5, 0x0, 0x7364, 0x80000000, 0x4139, 0xff, 0x401, 0x4, @usage=0x4, 0x3, 0x8000, [0x4f77, 0x5, 0x9, 0x3f, 0x5]}, {0x9, @struct={0x1, 0x76}, 0x0, 0x8, 0xfffffffffffffff7, 0x3, 0x41, 0xfffffffffffffffb, 0x4, @struct={0x3, 0x7}, 0x0, 0x7f06, [0x4, 0x7fffffff, 0x9, 0x5, 0x6, 0x3]}, {0x3f, @usage=0x2b, <r2=>0x0, 0x7, 0x800, 0xf8f, 0x6, 0x69e219c4, 0x45, @usage=0x5, 0xfff, 0x9, [0xdc, 0x200, 0xc72, 0x3, 0x6, 0x9]}, {0x40, 0xff, 0x8}})
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000001a00)={r2, "108286efcebf5b74bd8b5effae26f265"})
ioctl$int_in(r1, 0x5421, &(0x7f0000002a00)=0xb2f)
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000002a40)={<r3=>r1, 0xffffffff, 0x9, 0x6})
readv(r3, &(0x7f0000002e80)=[{&(0x7f0000002a80)=""/39, 0x27}, {&(0x7f0000002ac0)=""/250, 0xfa}, {&(0x7f0000002bc0)=""/203, 0xcb}, {&(0x7f0000002cc0)=""/58, 0x3a}, {&(0x7f0000002d00)=""/163, 0xa3}, {&(0x7f0000002dc0)=""/183, 0xb7}], 0x6)
r4 = openat$cgroup_type(r3, &(0x7f0000002f00), 0x2, 0x0)
ioctl$AUTOFS_IOC_PROTOSUBVER(r4, 0x80049367, &(0x7f0000002f40))
r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000003040)='blkio.bfq.dequeue\x00', 0x0, 0x0)
r6 = perf_event_open$cgroup(&(0x7f0000002fc0)={0x4, 0x80, 0x9, 0x1f, 0x4, 0x9a, 0x0, 0x1, 0x60009, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000002f80), 0xb14db28a6a8d13db}, 0x11000, 0x2, 0x3, 0x7, 0x9, 0x586f, 0x7edc, 0x0, 0x8, 0x0, 0x6}, r1, 0x5, r5, 0x3)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r3, 0xc008240a, &(0x7f0000003080)={0x8, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r7, 0x4018f50b, &(0x7f00000030c0)={0x0, 0x8001, 0x5})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, &(0x7f0000003100))
r8 = dup3(r0, r6, 0x80000)
ioctl$GIO_FONTX(r8, 0x4b6b, &(0x7f0000003700)={0x7f, 0x19, &(0x7f0000003300)})

03:53:08 executing program 0:
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000040)={0x40000000})
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0x5, 0x8, 0x10000, 0x4, 0x9, "fa141f147d3d17b04f1d4aa61b8de4be0eb947", 0x2, 0xba00})
close_range(0xffffffffffffffff, r0, 0x2)
ioctl$FIOCLEX(r0, 0x5451)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0)
read$rfkill(r1, &(0x7f00000000c0), 0x8)
r2 = syz_open_dev$vcsu(&(0x7f0000000100), 0x7, 0x1)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000140)=0x21)
ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, &(0x7f0000000180)=0x7)
open_by_handle_at(r1, &(0x7f00000001c0)=@raw={0xb0, 0x72, {"1cdf679cbbe723ee58a9e22fba69e8ed5ac4cd5d43d26a2ff55cbedb7409ef0dc8d0caa3ba102104d4a9ad07f80e51b690509a384d8270179ec3bfce1efaf90e6dc42ccb536b9e9878f604dc4c3fe7e82178cea50167354f511cc998b825da804cdcf47202f0772c6f82dbed42d3ba00ea885d355bd7fe33db65ed52a8cda9e36a7fe5c2890ebba153ffe6e4749cb9f38d5415555fcc9c33ee2666c020d928cb3bf6b951d51d71dcf167b7468d"}}, 0x400000)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000280)={0xa5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r3=>0x0}], 0x80, "fde4d9bd67880c"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001280)={<r4=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001480)={<r5=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000001680)={0x6, [{0x0, <r6=>0x0}], 0x5, "b4591a2187d8d5"})
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000002680)={<r7=>0x0, 0x0, "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", "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"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000003680)={{<r8=>0x0, 0xfffffffffffff801, 0x76c5d915, 0x1ff, 0x0, 0x8, 0x587, 0x5, 0x5, 0x8, 0xc8, 0x5, 0x5, 0x4, 0xffffffffffff7fff}, 0x20, [0x0, 0x0, 0x0, 0x0]})
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f0000003740)={<r9=>0x0, 0x0, "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", "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"})
ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000004740)={{<r10=>0x0, 0x100, 0x1, 0x0, 0x4, 0x80, 0x2, 0xffffffff, 0x80000000, 0x397, 0x7, 0x1ff, 0x100, 0xfffffffffffffffc, 0x9}})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f00000715c0)={0x20, [{}, {r3}, {r4}, {}, {}, {}, {}, {r5, r6}, {0x0, r7}, {}, {r8}, {0x0, r9}, {}, {}, {r10}], 0x3, "854069bb148b12"})

[   82.869571] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   82.871870] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   82.873870] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   82.878107] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   82.881053] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   82.934345] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   82.938925] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   82.940949] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   82.949269] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   82.953781] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   83.042092] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   83.051170] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   83.062399] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   83.063964] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   83.074111] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   83.080239] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   83.083913] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   83.091089] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   83.092593] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   83.095973] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   83.104157] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   83.106385] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   83.125394] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   83.129193] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   83.137011] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   83.141422] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   83.151382] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   83.155033] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   83.185762] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[   83.187460] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[   83.206221] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[   83.208205] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[   83.209441] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   83.211339] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[   83.215139] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[   83.218631] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[   83.220853] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[   83.226240] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[   83.228484] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   83.234046] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[   84.902922] Bluetooth: hci0: command tx timeout
[   85.029005] Bluetooth: hci1: command tx timeout
[   85.156847] Bluetooth: hci2: command tx timeout
[   85.158882] Bluetooth: hci5: command tx timeout
[   85.222064] Bluetooth: hci3: command tx timeout
[   85.284849] Bluetooth: hci7: command tx timeout
[   85.348969] Bluetooth: hci6: command tx timeout
[   85.412841] Bluetooth: hci4: command tx timeout
[   86.949876] Bluetooth: hci0: command tx timeout
[   87.077783] Bluetooth: hci1: command tx timeout
[   87.204970] Bluetooth: hci2: command tx timeout
[   87.205718] Bluetooth: hci5: command tx timeout
[   87.268900] Bluetooth: hci3: command tx timeout
[   87.333809] Bluetooth: hci7: command tx timeout
[   87.397012] Bluetooth: hci6: command tx timeout
[   87.462029] Bluetooth: hci4: command tx timeout
[   88.996892] Bluetooth: hci0: command tx timeout
[   89.124886] Bluetooth: hci1: command tx timeout
[   89.252977] Bluetooth: hci5: command tx timeout
[   89.253432] Bluetooth: hci2: command tx timeout
[   89.318008] Bluetooth: hci3: command tx timeout
[   89.381052] Bluetooth: hci7: command tx timeout
[   89.444853] Bluetooth: hci6: command tx timeout
[   89.509047] Bluetooth: hci4: command tx timeout
[   91.044876] Bluetooth: hci0: command tx timeout
[   91.172904] Bluetooth: hci1: command tx timeout
[   91.300881] Bluetooth: hci5: command tx timeout
[   91.301434] Bluetooth: hci2: command tx timeout
[   91.364922] Bluetooth: hci3: command tx timeout
[   91.429354] Bluetooth: hci7: command tx timeout
[   91.492822] Bluetooth: hci6: command tx timeout
[   91.556821] Bluetooth: hci4: command tx timeout
[  125.785618] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  125.786528] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  125.990140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  125.991429] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
03:53:53 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x78, 0x2, 0x1, 0x801, 0x0, 0x0, {0xa, 0x0, 0x2005}, [@CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_NAT_SRC={0x2c, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0x4}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @mcast2}, @CTA_NAT_V4_MINIP={0x8, 0x1, @multicast2}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @loopback}]}, @CTA_PROTOINFO={0x30, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x2c, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x1}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x93}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x1}, @CTA_PROTOINFO_TCP_WSCALE_ORIGINAL={0x5, 0x2, 0x93}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0xd0, 0x2}}]}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x4044800)
bind$netlink(r0, 0x0, 0x0)

[  126.505060] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  126.505634] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  126.523820] audit: type=1400 audit(1756785233.401:8): avc:  denied  { open } for  pid=3774 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[  126.530875] audit: type=1400 audit(1756785233.402:9): avc:  denied  { kernel } for  pid=3774 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[  126.679165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  126.679813] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  126.902535] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  126.903169] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  127.119219] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  127.119853] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  127.225796] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  127.226423] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  127.373977] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  127.374606] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
03:53:54 executing program 4:
r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x8, 0x0, 0x6, 0x8, 0x0, 0x386a972b, 0x24000, 0x7, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_bp={&(0x7f0000000000), 0x8}, 0x100, 0x1, 0x3, 0x6, 0x2, 0x81, 0x3f, 0x0, 0x1, 0x0, 0x6}, 0x0, 0x8, r1, 0x1)
openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0)
io_setup(0x7ff, &(0x7f0000000300)=<r2=>0x0)
r3 = memfd_create(&(0x7f0000000340)='-&!\'\x00', 0x0)
io_submit(r2, 0x1, &(0x7f0000000100)=[&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, 0x0, 0x21}])
r4 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x12, r4, 0x0)
splice(r4, &(0x7f00000000c0)=0x4, r0, &(0x7f0000000180), 0x5, 0x4)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mount_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
io_submit(0x0, 0x0, 0x0)
fstatfs(0xffffffffffffffff, 0x0)

03:53:54 executing program 4:
r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x8, 0x0, 0x6, 0x8, 0x0, 0x386a972b, 0x24000, 0x7, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_bp={&(0x7f0000000000), 0x8}, 0x100, 0x1, 0x3, 0x6, 0x2, 0x81, 0x3f, 0x0, 0x1, 0x0, 0x6}, 0x0, 0x8, r1, 0x1)
openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0)
io_setup(0x7ff, &(0x7f0000000300)=<r2=>0x0)
r3 = memfd_create(&(0x7f0000000340)='-&!\'\x00', 0x0)
io_submit(r2, 0x1, &(0x7f0000000100)=[&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, 0x0, 0x21}])
r4 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x12, r4, 0x0)
splice(r4, &(0x7f00000000c0)=0x4, r0, &(0x7f0000000180), 0x5, 0x4)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mount_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
io_submit(0x0, 0x0, 0x0)
fstatfs(0xffffffffffffffff, 0x0)

[  127.618063] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  127.618642] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  127.691622] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  127.692257] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
03:53:54 executing program 4:
r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x8, 0x0, 0x6, 0x8, 0x0, 0x386a972b, 0x24000, 0x7, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_bp={&(0x7f0000000000), 0x8}, 0x100, 0x1, 0x3, 0x6, 0x2, 0x81, 0x3f, 0x0, 0x1, 0x0, 0x6}, 0x0, 0x8, r1, 0x1)
openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0)
io_setup(0x7ff, &(0x7f0000000300)=<r2=>0x0)
r3 = memfd_create(&(0x7f0000000340)='-&!\'\x00', 0x0)
io_submit(r2, 0x1, &(0x7f0000000100)=[&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, 0x0, 0x21}])
r4 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x12, r4, 0x0)
splice(r4, &(0x7f00000000c0)=0x4, r0, &(0x7f0000000180), 0x5, 0x4)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mount_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
io_submit(0x0, 0x0, 0x0)
fstatfs(0xffffffffffffffff, 0x0)

03:53:54 executing program 5:
r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x8, 0x0, 0x6, 0x8, 0x0, 0x386a972b, 0x24000, 0x7, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_bp={&(0x7f0000000000), 0x8}, 0x100, 0x1, 0x3, 0x6, 0x2, 0x81, 0x3f, 0x0, 0x1, 0x0, 0x6}, 0x0, 0x8, r1, 0x1)
openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0)
io_setup(0x7ff, &(0x7f0000000300)=<r2=>0x0)
r3 = memfd_create(&(0x7f0000000340)='-&!\'\x00', 0x0)
io_submit(r2, 0x1, &(0x7f0000000100)=[&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, 0x0, 0x21}])
r4 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x12, r4, 0x0)
splice(r4, &(0x7f00000000c0)=0x4, r0, &(0x7f0000000180), 0x5, 0x4)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mount_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
io_submit(0x0, 0x0, 0x0)
fstatfs(0xffffffffffffffff, 0x0)

03:53:54 executing program 6:
mount$9p_virtio(0x0, &(0x7f0000000400)='./file0\x00', 0x0, 0x0, 0x0)
openat2$dir(0xffffffffffffff9c, &(0x7f0000002e40)='./file0\x00', &(0x7f0000002e80)={0x40}, 0x18)
lsetxattr$security_selinux(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000080)='system_u:object_r:v4l_device_t:s0\x00', 0x22, 0x1)

[  127.845222] audit: type=1400 audit(1756785234.724:10): avc:  denied  { relabelto } for  pid=3874 comm="syz-executor.6" name="file0" dev="sda" ino=15978 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:v4l_device_t:s0 tclass=file permissive=1
[  127.853075] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  127.853664] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
03:53:54 executing program 5:
r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x8, 0x0, 0x6, 0x8, 0x0, 0x386a972b, 0x24000, 0x7, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_bp={&(0x7f0000000000), 0x8}, 0x100, 0x1, 0x3, 0x6, 0x2, 0x81, 0x3f, 0x0, 0x1, 0x0, 0x6}, 0x0, 0x8, r1, 0x1)
openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0)
io_setup(0x7ff, &(0x7f0000000300)=<r2=>0x0)
r3 = memfd_create(&(0x7f0000000340)='-&!\'\x00', 0x0)
io_submit(r2, 0x1, &(0x7f0000000100)=[&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, 0x0, 0x21}])
r4 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x12, r4, 0x0)
splice(r4, &(0x7f00000000c0)=0x4, r0, &(0x7f0000000180), 0x5, 0x4)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mount_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
io_submit(0x0, 0x0, 0x0)
fstatfs(0xffffffffffffffff, 0x0)

03:53:54 executing program 6:
mount$9p_virtio(0x0, &(0x7f0000000400)='./file0\x00', 0x0, 0x0, 0x0)
openat2$dir(0xffffffffffffff9c, &(0x7f0000002e40)='./file0\x00', &(0x7f0000002e80)={0x40}, 0x18)
lsetxattr$security_selinux(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000080)='system_u:object_r:v4l_device_t:s0\x00', 0x22, 0x1)

[  127.969283] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  127.970799] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  128.122757] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  128.123348] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  128.250471] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  128.251085] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  128.474096] mmap: syz-executor.2 (3911) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  128.660795] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  128.661385] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  128.714807] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  128.715417] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
03:54:09 executing program 7:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002cc0), 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc0105303, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'})
r1 = fork()
ptrace(0x10, r1)
ptrace$peeksig(0x4209, r1, &(0x7f00000000c0)={0xfffffffffffffffe}, &(0x7f0000000480))
perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0xfb, 0x1, 0x9, 0x6, 0x0, 0x24, 0x280, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, @perf_bp={&(0x7f0000000000), 0x8}, 0x20, 0x2, 0x3, 0x2, 0x7, 0x0, 0x37db, 0x0, 0x1, 0x0, 0x4}, r1, 0xf, 0xffffffffffffffff, 0x9)
r2 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0)
ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r2, 0x8008f511, &(0x7f00000001c0))

03:54:09 executing program 6:
mount$9p_virtio(0x0, &(0x7f0000000400)='./file0\x00', 0x0, 0x0, 0x0)
openat2$dir(0xffffffffffffff9c, &(0x7f0000002e40)='./file0\x00', &(0x7f0000002e80)={0x40}, 0x18)
lsetxattr$security_selinux(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000080)='system_u:object_r:v4l_device_t:s0\x00', 0x22, 0x1)

03:54:09 executing program 0:
syz_emit_ethernet(0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaabbaaaaaaaaaaaa86dd607437b8003c0400fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="f00a00079078fffe1312004a75ba6cfd0acb302acf1edf5b2fd01e15b940f8891663f6c7e568618ad6b7c9caa5de1200"], 0x0)

03:54:09 executing program 4:
r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x8, 0x0, 0x6, 0x8, 0x0, 0x386a972b, 0x24000, 0x7, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_bp={&(0x7f0000000000), 0x8}, 0x100, 0x1, 0x3, 0x6, 0x2, 0x81, 0x3f, 0x0, 0x1, 0x0, 0x6}, 0x0, 0x8, r1, 0x1)
openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0)
io_setup(0x7ff, &(0x7f0000000300)=<r2=>0x0)
r3 = memfd_create(&(0x7f0000000340)='-&!\'\x00', 0x0)
io_submit(r2, 0x1, &(0x7f0000000100)=[&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, 0x0, 0x21}])
r4 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x12, r4, 0x0)
splice(r4, &(0x7f00000000c0)=0x4, r0, &(0x7f0000000180), 0x5, 0x4)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mount_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
io_submit(0x0, 0x0, 0x0)
fstatfs(0xffffffffffffffff, 0x0)

03:54:09 executing program 5:
r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x8, 0x0, 0x6, 0x8, 0x0, 0x386a972b, 0x24000, 0x7, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_bp={&(0x7f0000000000), 0x8}, 0x100, 0x1, 0x3, 0x6, 0x2, 0x81, 0x3f, 0x0, 0x1, 0x0, 0x6}, 0x0, 0x8, r1, 0x1)
openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0)
io_setup(0x7ff, &(0x7f0000000300)=<r2=>0x0)
r3 = memfd_create(&(0x7f0000000340)='-&!\'\x00', 0x0)
io_submit(r2, 0x1, &(0x7f0000000100)=[&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, 0x0, 0x21}])
r4 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x12, r4, 0x0)
splice(r4, &(0x7f00000000c0)=0x4, r0, &(0x7f0000000180), 0x5, 0x4)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mount_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
io_submit(0x0, 0x0, 0x0)
fstatfs(0xffffffffffffffff, 0x0)

03:54:09 executing program 1:
r0 = fork()
ptrace(0x10, r0)
ptrace$peeksig(0x4209, r0, &(0x7f00000000c0)={0xfffffffffffffffe}, &(0x7f0000000480))
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x800000000000000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x2, @perf_bp={&(0x7f0000000000), 0x1}, 0x5807, 0x0, 0x4000000, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x20000000}, r0, 0x5, 0xffffffffffffffff, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000100)=@abs, 0x6e, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/78, 0x4e}, {&(0x7f0000000200)=""/43, 0x2b}, {&(0x7f0000000240)=""/24, 0x18}, {&(0x7f0000000280)=""/21, 0x15}, {&(0x7f00000003c0)=""/179, 0xb3}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f0000000480)=""/155, 0x9b}, {&(0x7f00000019c0)=""/4096, 0x1000}], 0x8, &(0x7f0000000540)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {<r1=>0x0}}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe8}, 0x2022)
ptrace(0xffffffffffffffff, r1)
r2 = syz_open_procfs(0x0, &(0x7f0000000980)='fdinfo/3\x00')
pread64(r2, &(0x7f0000000040)=""/156, 0x9c, 0x0)

03:54:09 executing program 2:
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/disk', 0x40181, 0x0)
pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="feb8e520d8768a6467872d0a", 0xc}], 0x1, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0)
pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000140)="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", 0xfc}, {&(0x7f0000000240)="cf4fc5a09fe1c654eb154ce3e22d75a6bb284e9ef2d407e499d25887db503cdf0ab1b69f707d13d2e1e0efd87870f3906336efcf44663a420f84eb82ad377ec9ec77cae234d66e3cf9febb843387c5a2ee8e6775f8de45294557d9e1428b3374a0d4f8207686196c1291437b409deeddb4cd0d7f5acdfa2e5801c447c47e190d808117326b700db68445160727ce5ef5e90a1558ebed4d19e1e186575439d972406a5569d3d004ed64170dfb1bb0c124d2cb19c807b6014bdbc382f0b618a075cf50cd769aa72662ae7a199e174f", 0xce}, {&(0x7f0000000340)="ef74b3ad31b6abc1ad1f4a749eebfd28e375dbc06264a316506cc86947eac50c0acc7626bf28989d0004b9d12fc8a68102637ca4f19975fd6974056e4ff83d19e15ffe4141254bc32cf710e0cbdaf393a4e8166fddb5eee139d7675b4963c417833dfe8ef7cc24db7a03e762d5b01b65d460b483a06c07c351d0dd06668e231bd2fbc5bafb63e4c858ffb4ea2648c2a049bdc599fc264a083b93e46b8136c796fcb45be17f75f0bbb371957329f5d03009226bfdf67cf16df47643da1565b7c9ce20b91fc76c965f6d8e7daa54c08f9f91e805b0bc0347f8d069ab462192e966a5d1c0a29fd51272c90232", 0xeb}], 0x3, 0xfffffff9, 0x7, 0x18)

03:54:09 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = dup3(r0, r0, 0x0)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r0)
sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r1, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r2, 0x100, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x1)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0)
creat(&(0x7f0000000440)='./file0\x00', 0x4a)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x160, r4, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x12c, 0x2, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x20, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}]}]}, 0x160}, 0x1, 0x0, 0x0, 0x80}, 0x20020090)
sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000240)={0x2c, r3, 0x1, 0x0, 0x0, {0x2}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}}, 0x0)

03:54:09 executing program 0:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000002440)=ANY=[])
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x9800)
r2 = socket$unix(0x1, 0x5, 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x605000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'K]-^'}}, {@cachetag={'cachetag', 0x3d, '\xb9$:#('}}, {@afid={'afid', 0x3d, 0x3}}, {@version_u}, {@access_any}, {@debug={'debug', 0x3d, 0x3ff}}, {@cache_none}, {@noextend}, {@dfltgid={'dfltgid', 0x3d, 0xee01}}, {@uname={'uname', 0x3d, '\x18'}}], [{@fowner_lt={'fowner<', 0xee01}}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}]}})
recvmsg$unix(r1, &(0x7f0000000500)={&(0x7f0000000200), 0x6e, &(0x7f0000000380)=[{&(0x7f0000000280)=""/42, 0x2a}, {&(0x7f00000002c0)=""/83, 0x53}, {&(0x7f0000000340)=""/1, 0x1}, {&(0x7f0000000400)=""/157, 0x9d}], 0x4, &(0x7f00000004c0)=[@rights={{0x18, 0x1, 0x1, [<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff]}}, @cred={{0x1c}}], 0x38}, 0x40000001)
ioctl$SCSI_IOCTL_STOP_UNIT(r4, 0x6)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
write$binfmt_script(r5, &(0x7f0000000000)=ANY=[@ANYBLOB='#! //'], 0xc)
close(r5)
connect$unix(r5, &(0x7f00000005c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000540)={0x2, 0xffffffffffff7fff, 0x5, 0x1, 0x1, [{0x7f, 0x97b, 0x800, '\x00', 0x4400}]})

[  142.740421] audit: type=1400 audit(1756785249.619:11): avc:  denied  { write } for  pid=3927 comm="syz-executor.7" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
03:54:09 executing program 6:
mount$9p_virtio(0x0, &(0x7f0000000400)='./file0\x00', 0x0, 0x0, 0x0)
openat2$dir(0xffffffffffffff9c, &(0x7f0000002e40)='./file0\x00', &(0x7f0000002e80)={0x40}, 0x18)
lsetxattr$security_selinux(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000080)='system_u:object_r:v4l_device_t:s0\x00', 0x22, 0x1)

03:54:09 executing program 5:
r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x8, 0x0, 0x6, 0x8, 0x0, 0x386a972b, 0x24000, 0x7, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_bp={&(0x7f0000000000), 0x8}, 0x100, 0x1, 0x3, 0x6, 0x2, 0x81, 0x3f, 0x0, 0x1, 0x0, 0x6}, 0x0, 0x8, r1, 0x1)
openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0)
io_setup(0x7ff, &(0x7f0000000300)=<r2=>0x0)
r3 = memfd_create(&(0x7f0000000340)='-&!\'\x00', 0x0)
io_submit(r2, 0x1, &(0x7f0000000100)=[&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, 0x0, 0x21}])
r4 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x12, r4, 0x0)
splice(r4, &(0x7f00000000c0)=0x4, r0, &(0x7f0000000180), 0x5, 0x4)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mount_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
io_submit(0x0, 0x0, 0x0)

03:54:09 executing program 4:
r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x8, 0x0, 0x6, 0x8, 0x0, 0x386a972b, 0x24000, 0x7, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_bp={&(0x7f0000000000), 0x8}, 0x100, 0x1, 0x3, 0x6, 0x2, 0x81, 0x3f, 0x0, 0x1, 0x0, 0x6}, 0x0, 0x8, r1, 0x1)
openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0)
io_setup(0x7ff, &(0x7f0000000300)=<r2=>0x0)
r3 = memfd_create(&(0x7f0000000340)='-&!\'\x00', 0x0)
io_submit(r2, 0x1, &(0x7f0000000100)=[&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, 0x0, 0x21}])
r4 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x12, r4, 0x0)
splice(r4, &(0x7f00000000c0)=0x4, r0, &(0x7f0000000180), 0x5, 0x4)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mount_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
io_submit(0x0, 0x0, 0x0)

[  142.956096] kmemleak: Found object by alias at 0x607f1a63dd0c
[  142.956130] CPU: 0 UID: 0 PID: 3951 Comm: syz-executor.6 Tainted: G        W           6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) 
[  142.956166] Tainted: [W]=WARN
[  142.956173] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  142.956187] Call Trace:
[  142.956195]  <TASK>
[  142.956203]  dump_stack_lvl+0xca/0x120
[  142.956248]  __lookup_object+0x94/0xb0
[  142.956280]  delete_object_full+0x27/0x70
[  142.956313]  free_percpu+0x30/0x1160
[  142.956345]  ? arch_uprobe_clear_state+0x16/0x140
[  142.956385]  futex_hash_free+0x38/0xc0
[  142.956412]  mmput+0x2d3/0x390
[  142.956449]  do_exit+0x79d/0x2970
[  142.956477]  ? signal_wake_up_state+0x85/0x120
[  142.956508]  ? zap_other_threads+0x2b9/0x3a0
[  142.956540]  ? __pfx_do_exit+0x10/0x10
[  142.956566]  ? do_group_exit+0x1c3/0x2a0
[  142.956593]  ? lock_release+0xc8/0x290
[  142.956635]  do_group_exit+0xd3/0x2a0
[  142.956665]  __x64_sys_exit_group+0x3e/0x50
[  142.956694]  x64_sys_call+0x18c5/0x18d0
[  142.956724]  do_syscall_64+0xbf/0x360
[  142.956749]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  142.956772] RIP: 0033:0x7f6f09294b19
03:54:09 executing program 2:
r0 = perf_event_open$cgroup(&(0x7f00000003c0)={0x4, 0x80, 0x4, 0x6c, 0x62, 0x1, 0x0, 0x3e, 0x1008, 0xc, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0xfffff74c, 0x4, @perf_config_ext={0x8, 0x2}, 0x6, 0xe7e, 0x2e14, 0x6, 0xfffffffffffffffb, 0x5, 0x1ff, 0x0, 0x7e4b4881, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x4)
signalfd(r0, &(0x7f0000000440)={[0x4]}, 0x8)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='mountstats\x00')
pread64(r1, &(0x7f0000000040)=""/156, 0x9c, 0x0)
r2 = signalfd(r1, &(0x7f0000000000)={[0x6cce]}, 0x8)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r6=>r5, {0x8}}, './file0\x00'})
fsetxattr$trusted_overlay_opaque(r6, &(0x7f00000002c0), &(0x7f0000000300), 0x2, 0x3)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x2c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}]}, 0x2c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_START_P2P_DEVICE(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r4, 0x20, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x7, 0x61}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x400c040}, 0x0)

03:54:09 executing program 1:
clock_adjtime(0x0, &(0x7f0000000000)={0xfff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x400000000000000})
clock_adjtime(0x6, &(0x7f0000000100)={0x1ffc000, 0x10001, 0x6e63, 0x0, 0x0, 0xd0, 0x4, 0x3, 0x81, 0x42, 0x7f, 0x0, 0x7ff, 0x401, 0x1ff, 0x0, 0xd3, 0x9, 0x1, 0x8, 0x3, 0xcc8, 0x3, 0x5, 0x6, 0x81})
clock_adjtime(0x5, &(0x7f0000000200)={0x0, 0xff, 0x2a, 0x7fffffff, 0x3, 0x3, 0xbfba, 0x9, 0x3, 0x15a6c0e5, 0x80, 0x0, 0x38, 0x10000, 0x2, 0x4, 0x0, 0x3ff, 0x4, 0x7, 0x3, 0x1, 0x8, 0x1, 0x3, 0x7})

[  142.956789] Code: Unable to access opcode bytes at 0x7f6f09294aef.
[  142.956800] RSP: 002b:00007ffc3dfda998 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[  142.956822] RAX: ffffffffffffffda RBX: 000000000000001e RCX: 00007f6f09294b19
[  142.956837] RDX: 00007f6f0924772b RSI: ffffffffffffffbc RDI: 0000000000000000
[  142.956852] RBP: 0000000000000000 R08: 0000001b2d5249e4 R09: 0000000000000000
[  142.956866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  142.956879] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffc3dfdaa80
[  142.956909]  </TASK>
[  142.956917] kmemleak: Object (percpu) 0x607f1a63dd08 (size 8):
[  142.956930] kmemleak:   comm "syz-executor.5", pid 3958, jiffies 4294809837
[  142.956944] kmemleak:   min_count = 1
[  142.956952] kmemleak:   count = 0
[  142.956959] kmemleak:   flags = 0x21
[  142.956967] kmemleak:   checksum = 0
[  142.956974] kmemleak:   backtrace:
[  142.956980]  pcpu_alloc_noprof+0x87a/0x1170
[  142.957012]  perf_trace_event_init+0x366/0xa10
[  142.957039]  perf_trace_init+0x1a4/0x2f0
[  142.957063]  perf_tp_event_init+0xa6/0x120
[  142.957094]  perf_try_init_event+0x140/0x9f0
[  142.957121]  perf_event_alloc.part.0+0x118e/0x45f0
[  142.957155]  __do_sys_perf_event_open+0x719/0x2c20
[  142.957180]  do_syscall_64+0xbf/0x360
[  142.957200]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  143.033249] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000032: 0000 [#1] SMP KASAN NOPTI
[  143.035038] KASAN: null-ptr-deref in range [0x0000000000000190-0x0000000000000197]
[  143.036139] CPU: 0 UID: 0 PID: 113 Comm: systemd-udevd Tainted: G        W           6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) 
[  143.038741] Tainted: [W]=WARN
[  143.039629] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  143.041578] RIP: 0010:perf_tp_event+0x175/0xe70
[  143.042856] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[  143.046532] RSP: 0018:ffff8880168d7bc0 EFLAGS: 00010212
[  143.048306] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: 0000000000000002
[  143.049856] RDX: ffff888016379b80 RSI: ffffffff8189a4e7 RDI: 0000000000000191
[  143.051567] RBP: ffff8880168d7e30 R08: ffff88806ce31340 R09: ffffe8ffffc16740
[  143.053238] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
[  143.055082] R13: 000000000000001c R14: ffff88806ce31340 R15: dffffc0000000000
[  143.056102] FS:  00007feda9ffd8c0(0000) GS:ffff8880e55d8000(0000) knlGS:0000000000000000
[  143.057245] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  143.058080] CR2: 0000000020000300 CR3: 000000000c731000 CR4: 0000000000350ef0
[  143.059104] Call Trace:
[  143.059487]  <TASK>
[  143.059823]  ? find_held_lock+0x2b/0x80
[  143.060415]  ? __pfx_perf_tp_event+0x10/0x10
[  143.061061]  ? lock_release+0xc8/0x290
[  143.061633]  ? __virt_addr_valid+0x100/0x5d0
[  143.062298]  ? trace_irq_enable.constprop.0+0xc2/0x100
[  143.063056]  ? kasan_quarantine_put+0x84/0x1e0
[  143.063726]  ? perf_trace_lock_acquire+0xc9/0x700
[  143.064425]  ? kmem_cache_free+0x2a1/0x540
[  143.065030]  ? fd_install+0x1d8/0x660
[  143.065587]  ? __lock_acquire+0xc65/0x1b70
[  143.066203]  ? __pfx_perf_trace_lock_acquire+0x1/0x10
[  143.066970]  ? perf_trace_run_bpf_submit+0xef/0x180
[  143.067698]  ? lock_release+0xc8/0x290
[  143.068269]  perf_trace_run_bpf_submit+0xef/0x180
[  143.068980]  perf_trace_sys_exit+0xcb/0x110
[  143.069605]  syscall_exit_work+0x15a/0x200
[  143.070229]  do_syscall_64+0x2e7/0x360
[  143.070803]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  143.071547] RIP: 0033:0x7fedaa4acd62
[  143.072090] Code: c0 f6 c2 40 75 52 89 d0 45 31 d2 25 00 00 41 00 3d 00 00 41 00 74 41 64 8b 04 25 18 00 00 00 85 c0 75 65 b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 a2 00 00 00 48 8b 4c 24 38 64 48 2b 0c 25
[  143.074684] RSP: 002b:00007ffc4c1b3f30 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  143.075765] RAX: 0000000000000010 RBX: 0000000000000001 RCX: 00007fedaa4acd62
[  143.076774] RDX: 00000000002a0000 RSI: 000056240ce07de1 RDI: 0000000000000011
[  143.077790] RBP: 000056240ce07de0 R08: 00005623e57c88f0 R09: 0000000000000011
[  143.078812] R10: 0000000000000000 R11: 0000000000000246 R12: 000056240cdcdaa6
[  143.079828] R13: 0000000000000011 R14: 0000000000000006 R15: 000056240ce07de1
[  143.080851]  </TASK>
[  143.081195] Modules linked in:
[  143.081987] ---[ end trace 0000000000000000 ]---
[  143.083156] RIP: 0010:perf_tp_event+0x175/0xe70
[  143.084138] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[  143.085419] kmemleak: Found object by alias at 0x607f1a63e744
[  143.085439] CPU: 1 UID: 0 PID: 3950 Comm: syz-executor.0 Tainted: G      D W           6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) 
[  143.085460] Tainted: [D]=DIE, [W]=WARN
[  143.085464] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  143.085472] Call Trace:
[  143.085477]  <TASK>
[  143.085481]  dump_stack_lvl+0xca/0x120
[  143.085522]  __lookup_object+0x94/0xb0
[  143.085548]  delete_object_full+0x27/0x70
[  143.085564]  free_percpu+0x30/0x1160
[  143.085582]  ? arch_uprobe_clear_state+0x16/0x140
[  143.085602]  futex_hash_free+0x38/0xc0
[  143.085618]  mmput+0x2d3/0x390
[  143.085637]  do_exit+0x79d/0x2970
[  143.085650]  ? signal_wake_up_state+0x85/0x120
[  143.085666]  ? zap_other_threads+0x2b9/0x3a0
[  143.085682]  ? __pfx_do_exit+0x10/0x10
[  143.085695]  ? do_group_exit+0x1c3/0x2a0
[  143.085709]  ? lock_release+0xc8/0x290
[  143.085732]  do_group_exit+0xd3/0x2a0
[  143.085746]  __x64_sys_exit_group+0x3e/0x50
[  143.085761]  x64_sys_call+0x18c5/0x18d0
[  143.085777]  do_syscall_64+0xbf/0x360
[  143.085791]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  143.085803] RIP: 0033:0x7f7f7375cb19
[  143.085812] Code: Unable to access opcode bytes at 0x7f7f7375caef.
[  143.085818] RSP: 002b:00007ffc5d8d6a78 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[  143.085830] RAX: ffffffffffffffda RBX: 000000000000001e RCX: 00007f7f7375cb19
[  143.085838] RDX: 00007f7f7370f72b RSI: ffffffffffffffbc RDI: 0000000000000000
[  143.085846] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000001
[  143.085853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  143.085860] R13: 0000000000000001 R14: 0000000000000001 R15: 00007ffc5d8d6b60
[  143.085872]  </TASK>
[  143.085877] kmemleak: Object (percpu) 0x607f1a63e740 (size 8):
[  143.085884] kmemleak:   comm "syz-executor.5", pid 3958, jiffies 4294809842
[  143.085891] kmemleak:   min_count = 1
[  143.085895] kmemleak:   count = 0
[  143.085899] kmemleak:   flags = 0x21
[  143.085903] kmemleak:   checksum = 0
[  143.085907] kmemleak:   backtrace:
[  143.085911]  pcpu_alloc_noprof+0x87a/0x1170
[  143.085927]  perf_trace_event_init+0x366/0xa10
[  143.085942]  perf_trace_init+0x1a4/0x2f0
[  143.085957]  perf_tp_event_init+0xa6/0x120
[  143.085976]  perf_try_init_event+0x140/0x9f0
[  143.085990]  perf_event_alloc.part.0+0x118e/0x45f0
[  143.086008]  __do_sys_perf_event_open+0x719/0x2c20
[  143.086021]  do_syscall_64+0xbf/0x360
[  143.086031]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  143.133824] RSP: 0018:ffff8880168d7bc0 EFLAGS: 00010212
[  143.134844] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: 0000000000000002
[  143.136077] RDX: ffff888016379b80 RSI: ffffffff8189a4e7 RDI: 0000000000000191
[  143.137308] RBP: ffff8880168d7e30 R08: ffff88806ce31340 R09: ffffe8ffffc16740
[  143.138550] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
[  143.139914] R13: 000000000000001c R14: ffff88806ce31340 R15: dffffc0000000000
[  143.141005] FS:  00007feda9ffd8c0(0000) GS:ffff8880e55d8000(0000) knlGS:0000000000000000
[  143.142464] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  143.143337] CR2: 0000000020000300 CR3: 000000000c731000 CR4: 0000000000350ef0
[  143.144603] note: systemd-udevd[113] exited with preempt_count 1
[  143.145831] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000032: 0000 [#2] SMP KASAN NOPTI
[  143.147516] KASAN: null-ptr-deref in range [0x0000000000000190-0x0000000000000197]
[  143.148597] CPU: 0 UID: 0 PID: 3963 Comm: syz-executor.2 Tainted: G      D W           6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) 
[  143.150308] Tainted: [D]=DIE, [W]=WARN
[  143.150861] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  143.152035] RIP: 0010:perf_tp_event+0x175/0xe70
[  143.152722] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[  143.155310] RSP: 0018:ffff888045c8fbc0 EFLAGS: 00010212
[  143.156071] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: 0000000000000002
[  143.157087] RDX: ffff88800f5ab700 RSI: ffffffff8189a4e7 RDI: 0000000000000191
[  143.158107] RBP: ffff888045c8fe30 R08: ffff88806ce31340 R09: ffffe8ffffc16740
[  143.159132] R10: 0000000000000000 R11: ffff88801637a038 R12: dffffc0000000000
[  143.160152] R13: 000000000000001c R14: ffff88806ce31340 R15: dffffc0000000000
[  143.161172] FS:  000055558ed1f400(0000) GS:ffff8880e55d8000(0000) knlGS:0000000000000000
[  143.162330] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  143.163162] CR2: 0000000020000300 CR3: 000000000cd0e000 CR4: 0000000000350ef0
[  143.164191] Call Trace:
[  143.164569]  <TASK>
[  143.164905]  ? hrtimer_active+0x199/0x220
[  143.165518]  ? __pfx_perf_tp_event+0x10/0x10
[  143.166166]  ? hrtimer_cancel+0x56/0x70
[  143.166762]  ? futex_wait+0x10e/0x380
[  143.167331]  ? __pfx_futex_wait+0x10/0x10
[  143.167938]  ? __pfx_hrtimer_wakeup+0x10/0x10
[  143.168602]  ? perf_trace_lock_acquire+0xc9/0x700
[  143.169301]  ? lock_release+0xc8/0x290
[  143.169879]  ? __pfx_perf_trace_lock_acquire+0x10/0x10
[  143.170646]  ? perf_trace_lock_acquire+0xc9/0x700
[  143.171352]  ? perf_trace_run_bpf_submit+0xef/0x180
[  143.172083]  ? lock_release+0x1c7/0x290
[  143.172662]  perf_trace_run_bpf_submit+0xef/0x180
[  143.173371]  perf_trace_sys_exit+0xcb/0x110
[  143.173998]  syscall_exit_work+0x15a/0x200
[  143.174619]  do_syscall_64+0x2e7/0x360
[  143.175191]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  143.175931] RIP: 0033:0x7f6a8349bb19
[  143.176468] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  143.179054] RSP: 002b:00007ffcf06e4038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  143.180137] RAX: ffffffffffffff92 RBX: 0000000000000032 RCX: 00007f6a8349bb19
[  143.181155] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f6a835aef6c
[  143.182171] RBP: 00007f6a835aef6c R08: 00007f6a8358b000 R09: 0000000000000000
[  143.183208] R10: 00007ffcf06e4110 R11: 0000000000000246 R12: 0000000000022e52
[  143.184231] R13: 00000000000003e8 R14: 00007f6a835aef60 R15: 0000000000022e34
[  143.185272]  </TASK>
[  143.185616] Modules linked in:
[  143.186091] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000032: 0000 [#3] SMP KASAN NOPTI
[  143.186227] ---[ end trace 0000000000000000 ]---
[  143.187846] KASAN: null-ptr-deref in range [0x0000000000000190-0x0000000000000197]
[  143.187874] CPU: 1 UID: 0 PID: 286 Comm: syz-executor.5 Tainted: G      D W           6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) 
[  143.188541] RIP: 0010:perf_tp_event+0x175/0xe70
[  143.189685] Tainted: [D]=DIE, [W]=WARN
[  143.189695] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  143.191390] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[  143.192077] RIP: 0010:perf_tp_event+0x175/0xe70
[  143.192646] RSP: 0018:ffff8880168d7bc0 EFLAGS: 00010212
[  143.193912] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[  143.193938] RSP: 0018:ffff88801a6b7bc0 EFLAGS: 00010212
[  143.196536] 
[  143.197221] 
[  143.197229] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: 0000000000000002
[  143.198007] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: 0000000000000002
[  143.200782] RDX: ffff88801660b700 RSI: ffffffff8189a4e7 RDI: 0000000000000191
[  143.200800] RBP: ffff88801a6b7e30 R08: ffff88806cf31340 R09: ffffe8ffffd16740
[  143.201551] RDX: ffff888016379b80 RSI: ffffffff8189a4e7 RDI: 0000000000000191
[  143.201828] R10: 0000000000000000 R11: 1ffff1100d9e6f7b R12: dffffc0000000000
[  143.201845] R13: 000000000000001c R14: ffff88806cf31340 R15: dffffc0000000000
[  143.202103] RBP: ffff8880168d7e30 R08: ffff88806ce31340 R09: ffffe8ffffc16740
[  143.203204] FS:  0000555568a9d400(0000) GS:ffff8880e56d8000(0000) knlGS:0000000000000000
[  143.204251] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
[  143.205324] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  143.205342] CR2: 000055558cc24c58 CR3: 0000000043440000 CR4: 0000000000350ef0
[  143.206378] R13: 000000000000001c R14: ffff88806ce31340 R15: dffffc0000000000
[  143.207449] Call Trace:
[  143.207459]  <TASK>
[  143.207475]  ? __pfx_perf_tp_event+0x10/0x10
[  143.207511]  ? do_nanosleep+0x3a6/0x560
[  143.208552] FS:  000055558ed1f400(0000) GS:ffff8880e55d8000(0000) knlGS:0000000000000000
[  143.209604]  ? do_wait+0x234/0x560
[  143.210653] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  143.211837]  ? __pfx_do_nanosleep+0x10/0x10
[  143.212923] CR2: 0000000020000300 CR3: 000000000cd0e000 CR4: 0000000000350ef0
[  143.213771]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  143.214826] note: syz-executor.2[3963] exited with preempt_count 1
[  143.215901]  ? perf_trace_lock_acquire+0xc9/0x700
[  143.224815]  ? __pfx_perf_trace_lock_acquire+0x10/0x10
[  143.225637]  ? perf_trace_lock_acquire+0xc9/0x700
[  143.226423]  ? perf_trace_run_bpf_submit+0xef/0x180
[  143.227221]  ? lock_release+0x1c7/0x290
[  143.227864]  perf_trace_run_bpf_submit+0xef/0x180
[  143.228638]  perf_trace_sys_exit+0xcb/0x110
[  143.229317]  syscall_exit_work+0x15a/0x200
[  143.229988]  do_syscall_64+0x2e7/0x360
[  143.230626]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  143.231439] RIP: 0033:0x7f03502d18e1
[  143.232032] Code: 24 0c 89 3c 24 48 89 4c 24 18 e8 aa e7 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 <44> 89 c7 48 89 04 24 e8 e3 e7 ff ff 48 8b 04 24 eb 97 66 2e 0f 1f
[  143.234851] RSP: 002b:00007ffe6b231910 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6
[  143.236024] RAX: 0000000000000000 RBX: 000000000000000c RCX: 00007f03502d18e1
[  143.237146] RDX: 00007ffe6b231950 RSI: 0000000000000000 RDI: 0000000000000000
[  143.238258] RBP: 00007ffe6b2319dc R08: 0000000000000000 R09: 00007f035039c000
[  143.239370] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000032
[  143.240482] R13: 0000000000022ec5 R14: 000000000000000f R15: 00007ffe6b231a40
[  143.241595]  </TASK>
[  143.241974] Modules linked in:
[  143.242754] ---[ end trace 0000000000000000 ]---
[  143.243526] RIP: 0010:perf_tp_event+0x175/0xe70
[  143.246233] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[  143.250560] RSP: 0018:ffff8880168d7bc0 EFLAGS: 00010212
[  143.251429] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: 0000000000000002
[  143.252604] RDX: ffff888016379b80 RSI: ffffffff8189a4e7 RDI: 0000000000000191
[  143.253775] RBP: ffff8880168d7e30 R08: ffff88806ce31340 R09: ffffe8ffffc16740
[  143.254963] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
[  143.255315] ------------[ cut here ]------------
[  143.256107] R13: 000000000000001c R14: ffff88806ce31340 R15: dffffc0000000000
[  143.256817] WARNING: kernel/rcu/tasks.h:1995 at exit_tasks_rcu_finish+0x2de/0x3a0, CPU#0: syz-executor.2/3963
[  143.257954] FS:  0000555568a9d400(0000) GS:ffff8880e56d8000(0000) knlGS:0000000000000000
[  143.259371] Modules linked in:
[  143.260644] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  143.261136] CPU: 0 UID: 0 PID: 3963 Comm: syz-executor.2 Tainted: G      D W           6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) 
[  143.262057] CR2: 000055558cc24c58 CR3: 0000000043440000 CR4: 0000000000350ef0
[  143.263780] Tainted: [D]=DIE, [W]=WARN
[  143.264916] note: syz-executor.5[286] exited with preempt_count 1
[  143.265468] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  143.266494] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000032: 0000 [#4] SMP KASAN NOPTI
[  143.267629] RIP: 0010:exit_tasks_rcu_finish+0x2de/0x3a0
[  143.269336] KASAN: null-ptr-deref in range [0x0000000000000190-0x0000000000000197]
[  143.269360] CPU: 1 UID: 0 PID: 279 Comm: syz-executor.2 Tainted: G      D W           6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) 
[  143.270127] Code: 04 84 d2 75 74 c7 85 58 04 00 00 00 00 00 00 48 83 c4 08 5b 5d 41 5c 41 5d 41 5e e9 5c f9 63 03 90 0f 0b 90 e9 6d fd ff ff 90 <0f> 0b 90 e9 42 ff ff ff e8 e5 b1 55 00 e9 db fe ff ff 48 c7 c7 34
[  143.271304] Tainted: [D]=DIE, [W]=WARN
[  143.271315] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  143.272990] RSP: 0018:ffff888045c8fe08 EFLAGS: 00010202
[  143.275744] RIP: 0010:perf_tp_event+0x175/0xe70
[  143.276319] 
[  143.277592] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[  143.278401] RAX: 0000000000000001 RBX: 0000000000000001 RCX: ffffffff815a5cb5
[  143.279094] RSP: 0018:ffff888014567bc0 EFLAGS: 00010212
[  143.279117] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: 0000000000000002
[  143.279366] RDX: 1ffff11001eb576b RSI: 0000000000000001 RDI: ffff88800f5abb61
[  143.282135] RDX: ffff88800a731b80 RSI: ffffffff8189a4e7 RDI: 0000000000000191
[  143.282153] RBP: ffff888014567e30 R08: ffff88806cf31340 R09: ffffe8ffffd16740
[  143.283196] RBP: ffff88800f5ab700 R08: 0000000000000001 R09: ffffed1001eb576c
[  143.283973] R10: 0000000000000000 R11: ffff88801660bbb8 R12: dffffc0000000000
[  143.283990] R13: 000000000000001c R14: ffff88806cf31340 R15: dffffc0000000000
[  143.285016] R10: ffff88800f5abb61 R11: 0000000000000000 R12: ffff88800f5abb61
[  143.286092] FS:  000055558ed1f400(0000) GS:ffff8880e56d8000(0000) knlGS:0000000000000000
[  143.287162] R13: ffff88800f5abb58 R14: ffff88806ce24608 R15: dffffc0000000000
[  143.288231] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  143.288249] CR2: 000055558cc24c58 CR3: 0000000038750000 CR4: 0000000000350ef0
[  143.288265] Call Trace:
[  143.289305] FS:  0000000000000000(0000) GS:ffff8880e55d8000(0000) knlGS:0000000000000000
[  143.290397]  <TASK>
[  143.290415]  ? __pfx_perf_tp_event+0x10/0x10
[  143.291442] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  143.292522]  ? do_nanosleep+0x3a6/0x560
[  143.293704] CR2: 0000000020000300 CR3: 000000000cd0e000 CR4: 0000000000350ef0
[  143.294795]  ? __pfx_do_nanosleep+0x10/0x10
[  143.295639] Call Trace:
[  143.296730]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  143.297129]  <TASK>
[  143.298373]  ? perf_trace_lock_acquire+0xc9/0x700
[  143.298747]  ? exit_task_stack_account+0x1bb/0x360
[  143.299408]  ? __pfx_perf_trace_lock_acquire+0x10/0x10
[  143.300254]  do_exit+0x16eb/0x2970
[  143.300845]  ? perf_trace_lock_acquire+0xc9/0x700
[  143.301899]  ? _printk+0xbe/0xf0
[  143.302558]  ? perf_trace_run_bpf_submit+0xef/0x180
[  143.302950]  ? __pfx_do_exit+0x10/0x10
[  143.303724]  ? lock_release+0x1c7/0x290
[  143.303753]  perf_trace_run_bpf_submit+0xef/0x180
[  143.304087]  make_task_dead+0x174/0x3b0
[  143.304832]  perf_trace_sys_exit+0xcb/0x110
[  143.305542]  ? do_syscall_64+0x2e7/0x360
[  143.306355]  syscall_exit_work+0x15a/0x200
[  143.306909]  rewind_stack_and_make_dead+0x16/0x20
[  143.307632]  do_syscall_64+0x2e7/0x360
[  143.308138] RIP: 0033:0x7f6a8349bb19
[  143.308887]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  143.308913] RIP: 0033:0x7f6a834c08e1
[  143.308937] Code: 24 0c 89 3c 24 48 89 4c 24 18 e8 aa e7 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 <44> 89 c7 48 89 04 24 e8 e3 e7 ff ff 48 8b 04 24 eb 97 66 2e 0f 1f
[  143.308960] RSP: 002b:00007ffcf06e41a0 EFLAGS: 00000293
[  143.309514] Code: Unable to access opcode bytes at 0x7f6a8349baef.
[  143.310113]  ORIG_RAX: 00000000000000e6
[  143.310125] RAX: 0000000000000000 RBX: 0000000000000008 RCX: 00007f6a834c08e1
[  143.310140] RDX: 00007ffcf06e41e0 RSI: 0000000000000000 RDI: 0000000000000000
[  143.310849] RSP: 002b:00007ffcf06e4038 EFLAGS: 00000246
[  143.311439] RBP: 00007ffcf06e426c R08: 0000000000000000 R09: 00007f6a8358b000
[  143.312081]  ORIG_RAX: 00000000000000ca
[  143.312680] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000032
[  143.313300] RAX: ffffffffffffff92 RBX: 0000000000000032 RCX: 00007f6a8349bb19
[  143.314023] R13: 0000000000022e52 R14: 0000000000000009 R15: 00007ffcf06e42d0
[  143.314051]  </TASK>
[  143.314603] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f6a835aef6c
[  143.315194] Modules linked in:
[  143.315304] ---[ end trace 0000000000000000 ]---
[  143.315967] RBP: 00007f6a835aef6c R08: 00007f6a8358b000 R09: 0000000000000000
[  143.316549] RIP: 0010:perf_tp_event+0x175/0xe70
[  143.319164] R10: 00007ffcf06e4110 R11: 0000000000000246 R12: 0000000000022e52
[  143.320014] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[  143.322887] R13: 00000000000003e8 R14: 00007f6a835aef60 R15: 0000000000022e34
[  143.322918]  </TASK>
[  143.322926] irq event stamp: 2584
[  143.322934] hardirqs last  enabled at (2583): [<ffffffff84be33bc>] _raw_spin_unlock_irqrestore+0x2c/0x50
[  143.322973] hardirqs last disabled at (2584): [<ffffffff84bca56d>] __schedule+0x16dd/0x3590
[  143.323008] softirqs last  enabled at (2468): [<ffffffff813bafcc>] handle_softirqs+0x50c/0x770
[  143.323046] softirqs last disabled at (1927): [<ffffffff813bb364>] __irq_exit_rcu+0xc4/0x100
[  143.323084] ---[ end trace 0000000000000000 ]---
[  143.323158] ------------[ cut here ]------------
[  143.323165] WARNING: kernel/rcu/tasks.h:1996 at exit_tasks_rcu_finish+0x264/0x3a0, CPU#0: syz-executor.2/3963
[  143.323210] Modules linked in:
[  143.323228] CPU: 0 UID: 0 PID: 3963 Comm: syz-executor.2 Tainted: G      D W           6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) 
[  143.323263] Tainted: [D]=DIE, [W]=WARN
[  143.323271] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  143.323283] RIP: 0010:exit_tasks_rcu_finish+0x264/0x3a0
[  143.323320] Code: e2 48 c1 ea 03 0f b6 04 02 4c 89 e2 83 e2 07 38 d0 7f 08 84 c0 0f 85 be 00 00 00 0f b6 85 61 04 00 00 83 e0 01 08 d8 74 30 90 <0f> 0b 90 48 83 c4 08 48 89 ef 5b 5d 41 5c 41 5d 41 5e e9 d5 59 ff
[  143.323341] RSP: 0018:ffff888045c8fe08 EFLAGS: 00010202
[  143.323359] RAX: 0000000000000001 RBX: 0000000000000001 RCX: ffffffff815a5cb5
[  143.323373] RDX: 0000000000000001 RSI: 0000000000000001 RDI: ffff88800f5abb61
[  143.323387] RBP: ffff88800f5ab700 R08: 0000000000000001 R09: ffffed1001eb576c
[  143.323402] R10: ffff88800f5abb61 R11: 0000000000000000 R12: ffff88800f5abb61
[  143.323416] R13: ffff88800f5abb58 R14: ffff88806ce24608 R15: dffffc0000000000
[  143.323434] FS:  0000000000000000(0000) GS:ffff8880e55d8000(0000) knlGS:0000000000000000
[  143.323454] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  143.323469] CR2: 0000000020000300 CR3: 000000000cd0e000 CR4: 0000000000350ef0
[  143.323484] Call Trace:
[  143.323491]  <TASK>
[  143.323499]  ? exit_task_stack_account+0x1bb/0x360
[  143.323523]  do_exit+0x16eb/0x2970
[  143.323549]  ? _printk+0xbe/0xf0
[  143.324702] RSP: 0018:ffff8880168d7bc0 EFLAGS: 00010212
[  143.324752] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: 0000000000000002
[  143.324769] RDX: ffff888016379b80 RSI: ffffffff8189a4e7 RDI: 0000000000000191
[  143.324785] RBP: ffff8880168d7e30 R08: ffff88806ce31340 R09: ffffe8ffffc16740
[  143.324801] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
[  143.324816] R13: 000000000000001c R14: ffff88806ce31340 R15: dffffc0000000000
[  143.324835] FS:  000055558ed1f400(0000) GS:ffff8880e56d8000(0000) knlGS:0000000000000000
[  143.324857] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  143.324874] CR2: 000055558cc24c58 CR3: 0000000038750000 CR4: 0000000000350ef0
[  143.324891] note: syz-executor.2[279] exited with preempt_count 1
[  143.329420] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000032: 0000 [#5] SMP KASAN NOPTI
[  143.330353]  ? __pfx_do_exit+0x10/0x10
[  143.331457] KASAN: null-ptr-deref in range [0x0000000000000190-0x0000000000000197]
[  143.331482] CPU: 1 UID: 0 PID: 175 Comm: in:imklog Tainted: G      D W           6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) 
[  143.332519]  make_task_dead+0x174/0x3b0
[  143.332881] Tainted: [D]=DIE, [W]=WARN
[  143.332891] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  143.333929]  ? do_syscall_64+0x2e7/0x360
[  143.334418] RIP: 0010:perf_tp_event+0x175/0xe70
[  143.335114]  rewind_stack_and_make_dead+0x16/0x20
[  143.336196] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[  143.336909] RIP: 0033:0x7f6a8349bb19
[  143.337989] RSP: 0018:ffff888017a27bc0 EFLAGS: 00010212
[  143.338011] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: 0000000000000002
[  143.340626] Code: Unable to access opcode bytes at 0x7f6a8349baef.
[  143.341728] RDX: ffff8880166b5280 RSI: ffffffff8189a4e7 RDI: 0000000000000191
[  143.341745] RBP: ffff888017a27e30 R08: ffff88806cf31340 R09: ffffe8ffffd16740
[  143.341762] R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000
[  143.342097] RSP: 002b:00007ffcf06e4038 EFLAGS: 00000246
[  143.342676] R13: 000000000000001c R14: ffff88806cf31340 R15: dffffc0000000000
[  143.344035]  ORIG_RAX: 00000000000000ca
[  143.345275] FS:  00007fb4a7e28700(0000) GS:ffff8880e56d8000(0000) knlGS:0000000000000000
[  143.346538] RAX: ffffffffffffff92 RBX: 0000000000000032 RCX: 00007f6a8349bb19
[  143.347824] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  143.347843] CR2: 000055558cc24c58 CR3: 000000000725c000 CR4: 0000000000350ef0
[  143.348513] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f6a835aef6c
[  143.349235] Call Trace:
[  143.349245]  <TASK>
[  143.349261]  ? __pfx_perf_tp_event+0x10/0x10
[  143.350664] RBP: 00007f6a835aef6c R08: 00007f6a8358b000 R09: 0000000000000000
[  143.351155]  ? do_syslog+0xd5/0x110
[  143.352862] R10: 00007ffcf06e4110 R11: 0000000000000246 R12: 0000000000022e52
[  143.353446]  ? kmsg_read+0x96/0xc0
[  143.354637] R13: 00000000000003e8 R14: 00007f6a835aef60 R15: 0000000000022e34
[  143.355427]  ? __pfx_kmsg_read+0x10/0x10
[  143.355453]  ? proc_reg_read+0x128/0x310
[  143.358039]  </TASK>
[  143.358823]  ? perf_trace_lock_acquire+0xc9/0x700
[  143.359869] irq event stamp: 2584
[  143.360961]  ? __pfx_perf_trace_lock_acquire+0x10/0x10
[  143.362007] hardirqs last  enabled at (2583): [<ffffffff84be33bc>] _raw_spin_unlock_irqrestore+0x2c/0x50
[  143.363114]  ? perf_trace_lock_acquire+0xc9/0x700
[  143.364173] hardirqs last disabled at (2584): [<ffffffff84bca56d>] __schedule+0x16dd/0x3590
[  143.365416]  ? perf_trace_run_bpf_submit+0xef/0x180
[  143.366275] softirqs last  enabled at (2468): [<ffffffff813bafcc>] handle_softirqs+0x50c/0x770
[  143.367376]  ? lock_release+0x1c7/0x290
[  143.367790] softirqs last disabled at (1927): [<ffffffff813bb364>] __irq_exit_rcu+0xc4/0x100
[  143.368141]  perf_trace_run_bpf_submit+0xef/0x180
[  143.368861] ---[ end trace 0000000000000000 ]---
[  143.369400]  perf_trace_sys_exit+0xcb/0x110
[  143.426753]  syscall_exit_work+0x15a/0x200
[  143.427425]  do_syscall_64+0x2e7/0x360
[  143.428052]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  143.428877] RIP: 0033:0x7fb4a886b08c
[  143.429469] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 89 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf fc ff ff 48
[  143.432313] RSP: 002b:00007fb4a7e074d0 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  143.433506] RAX: 0000000000001f66 RBX: 0000000000000000 RCX: 00007fb4a886b08c
[  143.434617] RDX: 0000000000001fa0 RSI: 00007fb4a7e07d00 RDI: 0000000000000005
[  143.435724] RBP: 000055705bd2b4c0 R08: 0000000000000000 R09: 0000000000000000
[  143.436833] R10: 00007fb4a8778b80 R11: 0000000000000246 R12: 00007fb4a7e07d00
[  143.437944] R13: 0000000000001fa0 R14: 00007fb4a7e07d00 R15: 00007fb4a7e07d83
[  143.439066]  </TASK>
[  143.439448] Modules linked in:
[  143.439976] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000032: 0000 [#6] SMP KASAN NOPTI
[  143.441066] ---[ end trace 0000000000000000 ]---
[  143.441598] KASAN: null-ptr-deref in range [0x0000000000000190-0x0000000000000197]
[  143.443097] RIP: 0010:perf_tp_event+0x175/0xe70
[  143.443453] CPU: 0 UID: 0 PID: 254 Comm: syz-fuzzer Tainted: G      D W           6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) 
[  143.444218] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[  143.445835] Tainted: [D]=DIE, [W]=WARN
[  143.445845] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  143.448739] RSP: 0018:ffff8880168d7bc0 EFLAGS: 00010212
[  143.449274] RIP: 0010:perf_tp_event+0x175/0xe70
[  143.450599] 
[  143.451342] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[  143.451366] RSP: 0018:ffff88801695fbc0 EFLAGS: 00010212
[  143.452114] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: 0000000000000002
[  143.452348] 
[  143.452355] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: 0000000000000002
[  143.455230] RDX: ffff888016379b80 RSI: ffffffff8189a4e7 RDI: 0000000000000191
[  143.455979] RDX: ffff8880162e8000 RSI: ffffffff8189a4e7 RDI: 0000000000000191
[  143.455995] RBP: ffff88801695fe30 R08: ffff88806ce31340 R09: ffffe8ffffc16740
[  143.457145] RBP: ffff8880168d7e30 R08: ffff88806ce31340 R09: ffffe8ffffc16740
[  143.457375] R10: 0000000000000000 R11: 1ffff1100d9c6f7b R12: dffffc0000000000
[  143.458524] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
[  143.459544] R13: 000000000000001c R14: ffff88806ce31340 R15: dffffc0000000000
[  143.459563] FS:  000000c000030090(0000) GS:ffff8880e55d8000(0000) knlGS:0000000000000000
[  143.460698] R13: 000000000000001c R14: ffff88806ce31340 R15: dffffc0000000000
[  143.461706] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  143.461722] CR2: 0000000020000300 CR3: 0000000009f13000 CR4: 0000000000350ef0
[  143.461737] Call Trace:
[  143.461746]  <TASK>
[  143.462891] FS:  00007fb4a7e28700(0000) GS:ffff8880e56d8000(0000) knlGS:0000000000000000
[  143.463912]  ? hrtimer_active+0x199/0x220
[  143.465064] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  143.466077]  ? __pfx_perf_tp_event+0x10/0x10
[  143.467386] CR2: 000055558cc24c58 CR3: 000000000725c000 CR4: 0000000000350ef0
[  143.468408]  ? hrtimer_cancel+0x56/0x70
[  143.469369] note: in:imklog[175] exited with preempt_count 1
[  143.470388]  ? futex_wait+0x10e/0x380
[  143.477390]  ? __pfx_futex_wait+0x10/0x10
[  143.478024]  ? __pfx_hrtimer_wakeup+0x10/0x10
[  143.478720]  ? perf_trace_lock_acquire+0xc9/0x700
[  143.479432]  ? lock_release+0x1c7/0x290
[  143.480015]  ? __might_fault+0xe0/0x190
[  143.480613]  ? __pfx_perf_trace_lock_acquire+0x10/0x10
[  143.481388]  ? perf_trace_lock_acquire+0xc9/0x700
[  143.482103]  ? perf_trace_run_bpf_submit+0xef/0x180
[  143.482843]  ? lock_release+0x1c7/0x290
[  143.483425]  perf_trace_run_bpf_submit+0xef/0x180
[  143.484143]  perf_trace_sys_exit+0xcb/0x110
[  143.484792]  syscall_exit_work+0x15a/0x200
[  143.485412]  do_syscall_64+0x2e7/0x360
[  143.485989]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  143.486746] RIP: 0033:0x466533
[  143.487228] Code: 24 20 c3 cc cc cc cc 48 8b 7c 24 08 8b 74 24 10 8b 54 24 14 4c 8b 54 24 18 4c 8b 44 24 20 44 8b 4c 24 28 b8 ca 00 00 00 0f 05 <89> 44 24 30 c3 cc cc cc cc cc cc cc cc 8b 7c 24 08 48 8b 74 24 10
[  143.489814] RSP: 002b:000000c00003fe80 EFLAGS: 00000206 ORIG_RAX: 00000000000000ca
[  143.490910] RAX: ffffffffffffff92 RBX: 0000000001e79321 RCX: 0000000000466533
[  143.491951] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 0000000001f20e78
[  143.492981] RBP: 000000c00003fec8 R08: 0000000000000000 R09: 0000000000000000
[  143.494019] R10: 000000c00003feb8 R11: 0000000000000206 R12: 0000000000438880
[  143.495048] R13: 0000000000000000 R14: 0000000000e5de2c R15: 0000000000000000
[  143.496080]  </TASK>
[  143.496434] Modules linked in:
[  143.498878] ---[ end trace 0000000000000000 ]---
[  143.499589] RIP: 0010:perf_tp_event+0x175/0xe70
[  143.500184] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000032: 0000 [#7] SMP KASAN NOPTI
[  143.501642] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[  143.502033] KASAN: null-ptr-deref in range [0x0000000000000190-0x0000000000000197]
[  143.502058] CPU: 1 UID: 0 PID: 255 Comm: syz-fuzzer Tainted: G      D W           6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) 
[  143.504674] RSP: 0018:ffff8880168d7bc0 EFLAGS: 00010212
[  143.505836] Tainted: [D]=DIE, [W]=WARN
[  143.505849] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  143.507495] 
[  143.508293] RIP: 0010:perf_tp_event+0x175/0xe70
[  143.508877] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: 0000000000000002
[  143.510141] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[  143.510415] RDX: ffff888016379b80 RSI: ffffffff8189a4e7 RDI: 0000000000000191
[  143.511145] RSP: 0018:ffff888018a87bc0 EFLAGS: 00010212
[  143.511168] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: 0000000000000002
[  143.512198] RBP: ffff8880168d7e30 R08: ffff88806ce31340 R09: ffffe8ffffc16740
[  143.515057] RDX: ffff888017ad3700 RSI: ffffffff8189a4e7 RDI: 0000000000000191
[  143.515076] RBP: ffff888018a87e30 R08: ffff88806cf31340 R09: ffffe8ffffd16740
[  143.516106] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
[  143.516926] R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000
[  143.516943] R13: 000000000000001c R14: ffff88806cf31340 R15: dffffc0000000000
[  143.517969] R13: 000000000000001c R14: ffff88806ce31340 R15: dffffc0000000000
[  143.519091] FS:  000000c000030410(0000) GS:ffff8880e56d8000(0000) knlGS:0000000000000000
[  143.519116] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  143.520139] FS:  000000c000030090(0000) GS:ffff8880e55d8000(0000) knlGS:0000000000000000
[  143.521269] CR2: 000055558cc24c58 CR3: 0000000009f13000 CR4: 0000000000350ef0
[  143.521287] Call Trace:
[  143.522325] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  143.523441]  <TASK>
[  143.523452]  ? schedule_hrtimeout_range_clock+0x1c0/0x310
[  143.524499] CR2: 0000000020000300 CR3: 0000000009f13000 CR4: 0000000000350ef0
[  143.525647]  ? __pfx_perf_tp_event+0x10/0x10
[  143.525684]  ? lock_release+0x1c7/0x290
[  143.525714]  ? fput+0x6a/0x100
[  143.525746]  ? do_epoll_wait+0x56f/0xee0
[  143.525778]  ? security_file_permission+0x22/0x90
[  143.525818]  ? perf_trace_lock_acquire+0xc9/0x700
[  143.525853]  ? __pfx_perf_trace_lock_acquire+0x10/0x10
[  143.525884]  ? perf_trace_lock_acquire+0xc9/0x700
[  143.525925]  ? perf_trace_run_bpf_submit+0xef/0x180
[  143.525959]  ? lock_release+0x1c7/0x290
[  143.525986]  perf_trace_run_bpf_submit+0xef/0x180
[  143.526025]  perf_trace_sys_exit+0xcb/0x110
[  143.526054]  syscall_exit_work+0x15a/0x200
[  143.526080]  do_syscall_64+0x2e7/0x360
[  143.526105]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  143.526129] RIP: 0033:0x4666e0
[  143.526146] Code: 0f 05 89 44 24 20 c3 cc cc cc 8b 7c 24 08 48 8b 74 24 10 8b 54 24 18 44 8b 54 24 1c 49 c7 c0 00 00 00 00 b8 19 01 00 00 0f 05 <89> 44 24 20 c3 cc cc cc cc cc cc cc cc cc cc cc 8b 7c 24 08 48 c7
[  143.526169] RSP: 002b:000000c0000417f0 EFLAGS: 00000246 ORIG_RAX: 0000000000000119
[  143.526193] RAX: 0000000000000000 RBX: 000000000000001f RCX: 00000000004666e0
[  143.526209] RDX: 0000000000000080 RSI: 000000c000041840 RDI: 0000000000000003
[  143.526238] RBP: 000000c000041e40 R08: 0000000000000000 R09: 0000000000000000
[  143.526254] R10: 000000000000001f R11: 0000000000000246 R12: 0000000000000003
[  143.526269] R13: 000000c000000900 R14: 0000000000e5dabb R15: 0000000000000039
[  143.526296]  </TASK>
[  143.526304] Modules linked in:
[  143.527482] ---[ end trace 0000000000000000 ]---
[  143.527497] RIP: 0010:perf_tp_event+0x175/0xe70
[  143.527533] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[  143.527557] RSP: 0018:ffff8880168d7bc0 EFLAGS: 00010212
[  143.529884] note: syz-fuzzer[254] exited with preempt_count 1
[  143.530466] 
[  143.566371] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: 0000000000000002
[  143.567614] RDX: ffff888016379b80 RSI: ffffffff8189a4e7 RDI: 0000000000000191
[  143.568880] RBP: ffff8880168d7e30 R08: ffff88806ce31340 R09: ffffe8ffffc16740
[  143.570153] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
[  143.571425] R13: 000000000000001c R14: ffff88806ce31340 R15: dffffc0000000000
[  143.572768] FS:  000000c000030410(0000) GS:ffff8880e56d8000(0000) knlGS:0000000000000000
[  143.573754] Oops: general protection fault, probably for non-canonical address 0xdffffc0020000031: 0000 [#8] SMP KASAN NOPTI
[  143.574165] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  143.575535] KASAN: probably user-memory-access in range [0x0000000100000188-0x000000010000018f]
[  143.575560] CPU: 0 UID: 0 PID: 97 Comm: systemd-journal Tainted: G      D W           6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) 
[  143.575595] Tainted: [D]=DIE, [W]=WARN
[  143.575603] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  143.575615] RIP: 0010:perf_tp_event+0x175/0xe70
[  143.575649] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[  143.576747] CR2: 000055558cc24c58 CR3: 0000000009f13000 CR4: 0000000000350ef0
[  143.577732] RSP: 0018:ffff888016097bc0 EFLAGS: 00010213
[  143.577752] RAX: 0000000020000031 RBX: 00000000ffffff9c RCX: 0000000000000002
[  143.577767] RDX: ffff888014545280 RSI: ffffffff8189a4e7 RDI: 000000010000018c
[  143.577782] RBP: ffff888016097e30 R08: ffff88806ce31340 R09: ffffe8ffffc16740
[  143.577796] R10: 0000000000000000 R11: 1ffff1100d9c6f7b R12: dffffc0000000000
[  143.577811] R13: 000000000000001c R14: ffff88806ce31340 R15: dffffc0000000000
[  143.577828] FS:  00007ff540309900(0000) GS:ffff8880e55d8000(0000) knlGS:0000000000000000
[  143.577849] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  143.577864] CR2: 0000000020000300 CR3: 000000000e773000 CR4: 0000000000350ef0
[  143.577878] Call Trace:
[  143.577885]  <TASK>
[  143.577898]  ? lock_acquire+0xc5/0x2f0
[  143.577924]  ? __pfx_perf_tp_event+0x10/0x10
[  143.577958]  ? futex_wait+0x10e/0x380
[  143.579927] note: syz-fuzzer[255] exited with preempt_count 1
[  143.580228]  ? ___pte_offset_map+0x176/0x370
[  143.598215]  ? __pfx_futex_wait+0x10/0x10
[  143.598837]  ? perf_trace_lock_acquire+0xc9/0x700
[  143.599535]  ? __handle_mm_fault+0x753/0x3260
[  143.600199]  ? perf_trace_lock_acquire+0xc9/0x700
[  143.600902]  ? __pfx_perf_trace_lock_acquire+0x10/0x10
[  143.601657]  ? perf_trace_lock_acquire+0xc9/0x700
[  143.602383]  ? perf_trace_run_bpf_submit+0xef/0x180
[  143.603122]  ? lock_release+0x1c7/0x290
[  143.603699]  perf_trace_run_bpf_submit+0xef/0x180
[  143.604414]  perf_trace_sys_exit+0xcb/0x110
[  143.605046]  syscall_exit_work+0x15a/0x200
[  143.605656]  do_syscall_64+0x2e7/0x360
[  143.606232]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  143.606975] RIP: 0033:0x7ff5407054a7
[  143.607512] Code: 00 e9 91 fe ff ff 0f 1f 44 00 00 bb ca 00 00 00 eb 20 90 e8 6b 88 00 00 45 31 d2 44 89 e2 31 f6 41 89 c0 4c 89 ef 89 d8 0f 05 <44> 89 c7 e8 b1 88 00 00 45 8b 65 00 45 85 e4 75 d8 48 8b 7c 24 08
[  143.610107] RSP: 002b:00007fff782464f0 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  143.611201] RAX: 0000000000000000 RBX: 00000000000000ca RCX: 00007ff5407054a7
[  143.612224] RDX: 0000000000000f7d RSI: 0000000000000000 RDI: 00007ff53f6fd9d0
[  143.613238] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007fff782466c8
[  143.614261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000f7d
[  143.615274] R13: 00007ff53f6fd9d0 R14: 0000000000000000 R15: 00007ff53f6fd700
[  143.616297]  </TASK>
[  143.616643] Modules linked in:
[  143.617127] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000032: 0000 [#9] SMP KASAN NOPTI
[  143.617189] ---[ end trace 0000000000000000 ]---
[  143.618860] KASAN: null-ptr-deref in range [0x0000000000000190-0x0000000000000197]
[  143.618884] CPU: 1 UID: 0 PID: 282 Comm: syz-executor.3 Tainted: G      D W           6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) 
[  143.619546] RIP: 0010:perf_tp_event+0x175/0xe70
[  143.620712] Tainted: [D]=DIE, [W]=WARN
[  143.620722] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  143.620735] RIP: 0010:perf_tp_event+0x175/0xe70
[  143.622426] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[  143.623121] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[  143.623146] RSP: 0018:ffff888016037bc0 EFLAGS: 00010212
[  143.623703] RSP: 0018:ffff8880168d7bc0 EFLAGS: 00010212
[  143.624984] 
[  143.624992] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: 0000000000000002
[  143.625008] RDX: ffff88800f5d9b80 RSI: ffffffff8189a4e7 RDI: 0000000000000191
[  143.625672] 
[  143.628505] RBP: ffff888016037e30 R08: ffff88806cf31340 R09: ffffe8ffffd16740
[  143.628523] R10: 0000000000000000 R11: ffff888046b45130 R12: dffffc0000000000
[  143.628538] R13: 000000000000001c R14: ffff88806cf31340 R15: dffffc0000000000
[  143.628557] FS:  0000555591ccc400(0000) GS:ffff8880e56d8000(0000) knlGS:0000000000000000
[  143.628579] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  143.628595] CR2: 000055558cc24c58 CR3: 000000003a25e000 CR4: 0000000000350ef0
[  143.628611] Call Trace:
[  143.628618]  <TASK>
[  143.628627]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  143.628660]  ? lock_acquire+0x18c/0x2f0
[  143.628691]  ? __pfx_perf_tp_event+0x10/0x10
[  143.628725]  ? _raw_spin_unlock_irqrestore+0x2c/0x50
[  143.628757]  ? do_wait+0x234/0x560
[  143.628785]  ? do_wait+0x2cb/0x560
[  143.628815]  ? put_pid+0xd/0x30
[  143.628838]  ? kernel_wait4+0x1b3/0x260
[  143.628867]  ? __pfx_kernel_wait4+0x10/0x10
[  143.628897]  ? perf_trace_lock_acquire+0xc9/0x700
[  143.628930]  ? __pfx_perf_trace_lock_acquire+0x10/0x10
[  143.628960]  ? perf_trace_lock_acquire+0xc9/0x700
[  143.628999]  ? perf_trace_run_bpf_submit+0xef/0x180
[  143.629032]  ? lock_release+0x1c7/0x290
[  143.629057]  perf_trace_run_bpf_submit+0xef/0x180
[  143.629094]  perf_trace_sys_exit+0xcb/0x110
[  143.629122]  syscall_exit_work+0x15a/0x200
[  143.629147]  do_syscall_64+0x2e7/0x360
[  143.629171]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  143.629194] RIP: 0033:0x7f5fc2b7af76
[  143.629212] Code: 1f 44 00 00 31 c9 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 49 89 ca 64 8b 04 25 18 00 00 00 85 c0 75 11 b8 3d 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 5a c3 90 48 83 ec 28 89 54 24 14 48 89 74 24
[  143.629234] RSP: 002b:00007ffd6acd97b8 EFLAGS: 00000246 ORIG_RAX: 000000000000003d
[  143.629257] RAX: fffffffffffffe00 RBX: 0000000000000120 RCX: 00007f5fc2b7af76
[  143.629272] RDX: 0000000040000000 RSI: 00007ffd6acd97cc RDI: 00000000ffffffff
[  143.629288] RBP: 00007ffd6acd97cc R08: 0000000000000000 R09: 0000555591ccc400
[  143.629302] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5fc2c90bf0
[  143.629317] R13: 00007ffd6acd98c0 R14: 0000000000000000 R15: 00000000000000f8
[  143.629343]  </TASK>
[  143.629351] Modules linked in:
[  143.630487] ---[ end trace 0000000000000000 ]---
[  143.634255] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: 0000000000000002
[  143.634652] RIP: 0010:perf_tp_event+0x175/0xe70
[  143.635461] RDX: ffff888016379b80 RSI: ffffffff8189a4e7 RDI: 0000000000000191
[  143.635773] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[  143.636799] RBP: ffff8880168d7e30 R08: ffff88806ce31340 R09: ffffe8ffffc16740
[  143.637955] RSP: 0018:ffff8880168d7bc0 EFLAGS: 00010212
[  143.638201] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
[  143.639359] 
[  143.640389] R13: 000000000000001c R14: ffff88806ce31340 R15: dffffc0000000000
[  143.641539] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: 0000000000000002
[  143.642708] FS:  00007ff540309900(0000) GS:ffff8880e55d8000(0000) knlGS:0000000000000000
[  143.643657] RDX: ffff888016379b80 RSI: ffffffff8189a4e7 RDI: 0000000000000191
[  143.644688] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  143.645132] RBP: ffff8880168d7e30 R08: ffff88806ce31340 R09: ffffe8ffffc16740
[  143.645460] CR2: 0000000020000300 CR3: 000000000e773000 CR4: 0000000000350ef0
[  143.646294] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
[  143.646876] note: systemd-journal[97] exited with preempt_count 1
[  143.647578] R13: 000000000000001c R14: ffff88806ce31340 R15: dffffc0000000000
[  143.663501] Oops: general protection fault, probably for non-canonical address 0xdffffc0020000031: 0000 [#10] SMP KASAN NOPTI
[  143.664058] FS:  0000555591ccc400(0000) GS:ffff8880e56d8000(0000) knlGS:0000000000000000
[  143.665070] KASAN: probably user-memory-access in range [0x0000000100000188-0x000000010000018f]
[  143.665094] CPU: 0 UID: 0 PID: 281 Comm: syz-executor.6 Tainted: G      D W           6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) 
[  143.666285] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  143.667284] Tainted: [D]=DIE, [W]=WARN
[  143.667293] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  143.668478] CR2: 000055558cc24c58 CR3: 000000003a25e000 CR4: 0000000000350ef0
[  143.669477] RIP: 0010:perf_tp_event+0x175/0xe70
[  143.669911] note: syz-executor.3[282] exited with preempt_count 1
[  143.670351] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[  143.702883] RSP: 0018:ffff888017167bc0 EFLAGS: 00010213
[  143.703662] RAX: 0000000020000031 RBX: 00000000ffffff9c RCX: 0000000000000002
[  143.704700] RDX: ffff888016378000 RSI: ffffffff8189a4e7 RDI: 000000010000018c
[  143.705733] RBP: ffff888017167e30 R08: ffff88806ce31340 R09: ffffe8ffffc16740
[  143.706787] R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000
[  143.707832] R13: 000000000000001c R14: ffff88806ce31340 R15: dffffc0000000000
[  143.708871] FS:  0000555580a47400(0000) GS:ffff8880e55d8000(0000) knlGS:0000000000000000
[  143.710035] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  143.710907] CR2: 0000000020000300 CR3: 0000000039e4a000 CR4: 0000000000350ef0
[  143.711948] Call Trace:
[  143.712333]  <TASK>
[  143.712676]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  143.713378]  ? lock_acquire+0x18c/0x2f0
[  143.713994]  ? __pfx_perf_tp_event+0x10/0x10
[  143.714662]  ? _raw_spin_unlock_irqrestore+0x2c/0x50
[  143.715420]  ? do_wait+0x234/0x560
[  143.715963]  ? do_wait+0x2cb/0x560
[  143.716499]  ? put_pid+0xd/0x30
[  143.717005]  ? kernel_wait4+0x1b3/0x260
[  143.717608]  ? __pfx_kernel_wait4+0x10/0x10
[  143.718269]  ? perf_trace_lock_acquire+0xc9/0x700
[  143.718991]  ? __pfx_perf_trace_lock_acquire+0x10/0x10
[  143.719773]  ? perf_trace_lock_acquire+0xc9/0x700
[  143.720501]  ? perf_trace_run_bpf_submit+0xef/0x180
[  143.721260]  ? lock_release+0x1c7/0x290
[  143.721864]  perf_trace_run_bpf_submit+0xef/0x180
[  143.722596]  perf_trace_sys_exit+0xcb/0x110
[  143.723239]  syscall_exit_work+0x15a/0x200
[  143.723871]  do_syscall_64+0x2e7/0x360
[  143.724455]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  143.725220] RIP: 0033:0x7f6f09292f76
[  143.725782] Code: 1f 44 00 00 31 c9 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 49 89 ca 64 8b 04 25 18 00 00 00 85 c0 75 11 b8 3d 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 5a c3 90 48 83 ec 28 89 54 24 14 48 89 74 24
[  143.728402] RSP: 002b:00007ffc3dfdabb8 EFLAGS: 00000246 ORIG_RAX: 000000000000003d
[  143.729481] RAX: fffffffffffffe00 RBX: 0000000000000121 RCX: 00007f6f09292f76
[  143.730503] RDX: 0000000040000000 RSI: 00007ffc3dfdabcc RDI: 00000000ffffffff
[  143.731533] RBP: 00007ffc3dfdabcc R08: 0000000000000000 R09: 0000555580a47400
[  143.732552] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6f093a8bf0
[  143.733572] R13: 00007ffc3dfdacc0 R14: 0000000000000000 R15: 00000000000000f8
[  143.734604]  </TASK>
[  143.734950] Modules linked in:
[  143.735421] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000032: 0000 [#11] SMP KASAN NOPTI
[  143.737032] KASAN: null-ptr-deref in range [0x0000000000000190-0x0000000000000197]
[  143.737397] ---[ end trace 0000000000000000 ]---
[  143.738114] CPU: 1 UID: 0 PID: 288 Comm: syz-executor.3 Tainted: G      D W           6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) 
[  143.738150] Tainted: [D]=DIE, [W]=WARN
[  143.738158] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  143.738172] RIP: 0010:perf_tp_event+0x175/0xe70
[  143.738206] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[  143.738238] RSP: 0018:ffff888017267bc0 EFLAGS: 00010212
[  143.738256] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: 0000000000000002
[  143.738270] RDX: ffff88801660d280 RSI: ffffffff8189a4e7 RDI: 0000000000000191
[  143.738285] RBP: ffff888017267e30 R08: ffff88806cf31340 R09: ffffe8ffffd16740
[  143.738300] R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000
[  143.738314] R13: 000000000000001c R14: ffff88806cf31340 R15: dffffc0000000000
[  143.738331] FS:  0000555591ccc400(0000) GS:ffff8880e56d8000(0000) knlGS:0000000000000000
[  143.738351] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  143.738366] CR2: 000055558cc24c58 CR3: 0000000045735000 CR4: 0000000000350ef0
[  143.738381] Call Trace:
[  143.738388]  <TASK>
[  143.738403]  ? __pfx_perf_tp_event+0x10/0x10
[  143.738436]  ? __pfx_anon_pipe_read+0x10/0x10
[  143.738461]  ? __pfx_autoremove_wake_function+0x10/0x10
[  143.738490]  ? security_file_permission+0x22/0x90
[  143.738524]  ? perf_trace_lock_acquire+0xc9/0x700
[  143.738552]  ? vfs_read+0x242/0xc70
[  143.738576]  ? __pfx_perf_trace_lock_acquire+0x10/0x10
[  143.738603]  ? perf_trace_lock_acquire+0xc9/0x700
[  143.738640]  ? perf_trace_run_bpf_submit+0xef/0x180
[  143.738671]  ? lock_release+0x1c7/0x290
[  143.738694]  perf_trace_run_bpf_submit+0xef/0x180
[  143.738729]  perf_trace_sys_exit+0xcb/0x110
[  143.738755]  syscall_exit_work+0x15a/0x200
[  143.738778]  do_syscall_64+0x2e7/0x360
[  143.738800]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  143.738822] RIP: 0033:0x7f5fc2b2f69c
[  143.738838] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48
[  143.738859] RSP: 002b:00007ffd6acd9590 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  143.738879] RAX: fffffffffffffe00 RBX: 00007ffd6acd9640 RCX: 00007f5fc2b2f69c
[  143.738894] RDX: 0000000000000040 RSI: 00007f5fc2c8c020 RDI: 00000000000000f9
[  143.738908] RBP: 0000000000000003 R08: 0000000000000000 R09: 00007ffd6acd9450
[  143.738922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000032
[  143.738935] R13: 0000000000000000 R14: 0000000000000009 R15: 00007ffd6acd9680
[  143.738959]  </TASK>
[  143.738967] Modules linked in:
[  143.740016] ---[ end trace 0000000000000000 ]---
[  143.740291] RIP: 0010:perf_tp_event+0x175/0xe70
[  143.742477] RIP: 0010:perf_tp_event+0x175/0xe70
[  143.743794] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[  143.744372] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[  143.747063] RSP: 0018:ffff8880168d7bc0 EFLAGS: 00010212
[  143.747833] RSP: 0018:ffff8880168d7bc0 EFLAGS: 00010212
[  143.747859] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: 0000000000000002
[  143.747874] RDX: ffff888016379b80 RSI: ffffffff8189a4e7 RDI: 0000000000000191
[  143.747889] RBP: ffff8880168d7e30 R08: ffff88806ce31340 R09: ffffe8ffffc16740
[  143.747905] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
[  143.747919] R13: 000000000000001c R14: ffff88806ce31340 R15: dffffc0000000000
[  143.749066] 
[  143.750012] FS:  0000555591ccc400(0000) GS:ffff8880e56d8000(0000) knlGS:0000000000000000
[  143.750035] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  143.750050] CR2: 000055558cc24c58 CR3: 0000000045735000 CR4: 0000000000350ef0
[  143.750067] note: syz-executor.3[288] exited with preempt_count 1
[  143.777822] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000032: 0000 [#12] SMP KASAN NOPTI
[  143.778331] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: 0000000000000002
[  143.779292] KASAN: null-ptr-deref in range [0x0000000000000190-0x0000000000000197]
[  143.779316] CPU: 1 UID: 0 PID: 253 Comm: syz-fuzzer Tainted: G      D W           6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) 
[  143.779350] Tainted: [D]=DIE, [W]=WARN
[  143.779358] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  143.779370] RIP: 0010:perf_tp_event+0x175/0xe70
[  143.779403] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[  143.779882] RDX: ffff888016379b80 RSI: ffffffff8189a4e7 RDI: 0000000000000191
[  143.780251] RSP: 0018:ffff88801bd27bc0 EFLAGS: 00010212
[  143.781069] RBP: ffff8880168d7e30 R08: ffff88806ce31340 R09: ffffe8ffffc16740
[  143.781639] 
[  143.782438] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
[  143.784895] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: 0000000000000002
[  143.784911] RDX: ffff88801c698000 RSI: ffffffff8189a4e7 RDI: 0000000000000191
[  143.784926] RBP: ffff88801bd27e30 R08: ffff88806cf31340 R09: ffffe8ffffd16740
[  143.784941] R10: 0000000000000000 R11: ffff88801660d738 R12: dffffc0000000000
[  143.784955] R13: 000000000000001c R14: ffff88806cf31340 R15: dffffc0000000000
[  143.784972] FS:  0000000001f21870(0000) GS:ffff8880e56d8000(0000) knlGS:0000000000000000
[  143.784992] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  143.785007] CR2: 000055558cc24c58 CR3: 0000000009f13000 CR4: 0000000000350ef0
[  143.787749] R13: 000000000000001c R14: ffff88806ce31340 R15: dffffc0000000000
[  143.788377] Call Trace:
[  143.789257] FS:  0000555580a47400(0000) GS:ffff8880e55d8000(0000) knlGS:0000000000000000
[  143.790154]  <TASK>
[  143.790170]  ? __pfx_perf_tp_event+0x10/0x10
[  143.790205]  ? futex_wait+0x10e/0x380
[  143.790247]  ? __pfx_futex_wait+0x10/0x10
[  143.790277]  ? __pfx_futex_wake+0x10/0x10
[  143.791416] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  143.792309]  ? perf_trace_lock_acquire+0xc9/0x700
[  143.792343]  ? __pfx_perf_trace_lock_acquire+0x10/0x10
[  143.792370]  ? perf_trace_lock_acquire+0xc9/0x700
[  143.792406]  ? perf_trace_run_bpf_submit+0xef/0x180
[  143.793552] CR2: 0000000020000300 CR3: 0000000039e4a000 CR4: 0000000000350ef0
[  143.794466]  ? lock_release+0x1c7/0x290
[  143.794491]  perf_trace_run_bpf_submit+0xef/0x180
[  143.794526]  perf_trace_sys_exit+0xcb/0x110
[  143.794552]  syscall_exit_work+0x15a/0x200
[  143.794575]  do_syscall_64+0x2e7/0x360
[  143.794956] note: syz-executor.6[281] exited with preempt_count 1
[  143.795973]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  143.795997] RIP: 0033:0x466533
[  143.796013] Code: 24 20 c3 cc cc cc cc 48 8b 7c 24 08 8b 74 24 10 8b 54 24 14 4c 8b 54 24 18 4c 8b 44 24 20 44 8b 4c 24 28 b8 ca 00 00 00 0f 05 <89> 44 24 30 c3 cc cc cc cc cc cc cc cc 8b 7c 24 08 48 8b 74 24 10
[  143.796033] RSP: 002b:000000c0000296d8 EFLAGS: 00000286 ORIG_RAX: 00000000000000ca
[  143.796055] RAX: fffffffffffffe00 RBX: 0000000001f217e0 RCX: 0000000000466533
[  143.796070] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 0000000001f4c000
[  143.841702] RBP: 000000c000029720 R08: 0000000000000000 R09: 0000000000000000
[  143.842737] R10: 0000000000000000 R11: 0000000000000286 R12: 0000000000000000
[  143.843760] R13: 0000000001f21040 R14: 0000000000000008 R15: 0000000000000008
[  143.844801]  </TASK>
[  143.845146] Modules linked in:
[  143.846686] ---[ end trace 0000000000000000 ]---
[  143.848123] RIP: 0010:perf_tp_event+0x175/0xe70
[  143.848864] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[  143.851529] RSP: 0018:ffff8880168d7bc0 EFLAGS: 00010212
[  143.852331] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: 0000000000000002
[  143.853387] RDX: ffff888016379b80 RSI: ffffffff8189a4e7 RDI: 0000000000000191
[  143.854483] RBP: ffff8880168d7e30 R08: ffff88806ce31340 R09: ffffe8ffffc16740
[  143.855579] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
[  143.856659] R13: 000000000000001c R14: ffff88806ce31340 R15: dffffc0000000000
[  143.857745] FS:  0000000001f21870(0000) GS:ffff8880e56d8000(0000) knlGS:0000000000000000
[  143.858965] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  143.859853] CR2: 000055558cc24c58 CR3: 0000000009f13000 CR4: 0000000000350ef0
[  143.860934] note: syz-fuzzer[253] exited with preempt_count 1
[  143.886849] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000032: 0000 [#13] SMP KASAN NOPTI
[  143.888504] KASAN: null-ptr-deref in range [0x0000000000000190-0x0000000000000197]
[  143.889605] CPU: 1 UID: 0 PID: 1 Comm: systemd Tainted: G      D W           6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) 
[  143.891236] Tainted: [D]=DIE, [W]=WARN
[  143.891810] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  143.893013] RIP: 0010:perf_tp_event+0x175/0xe70
[  143.893704] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[  143.896356] RSP: 0018:ffff888009547bc0 EFLAGS: 00010212
[  143.897145] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: 0000000000000002
[  143.898178] RDX: ffff8880094f8000 RSI: ffffffff8189a4e7 RDI: 0000000000000191
[  143.899222] RBP: ffff888009547e30 R08: ffff88806cf31340 R09: ffffe8ffffd16740
[  143.900256] R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000
[  143.901303] R13: 000000000000001c R14: ffff88806cf31340 R15: dffffc0000000000
[  143.902370] FS:  00007ff122ae2900(0000) GS:ffff8880e56d8000(0000) knlGS:0000000000000000
[  143.903539] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  143.904380] CR2: 000055558cc24c58 CR3: 000000000e849000 CR4: 0000000000350ef0
[  143.905421] Call Trace:
[  143.905805]  <TASK>
[  143.906156]  ? __pfx_perf_tp_event+0x10/0x10
[  143.906837]  ? lock_release+0xc8/0x290
[  143.907427]  ? do_epoll_wait+0x56f/0xee0
[  143.908042]  ? perf_trace_lock_acquire+0xc9/0x700
[  143.908780]  ? __pfx_perf_trace_lock_acquire+0x10/0x10
[  143.909559]  ? perf_trace_lock_acquire+0xc9/0x700
[  143.910294]  ? perf_trace_run_bpf_submit+0xef/0x180
[  143.911026]  ? lock_release+0x1c7/0x290
[  143.911614]  perf_trace_run_bpf_submit+0xef/0x180
[  143.912335]  perf_trace_sys_exit+0xcb/0x110
[  143.912978]  syscall_exit_work+0x15a/0x200
[  143.913601]  do_syscall_64+0x2e7/0x360
[  143.914174]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  143.914932] RIP: 0033:0x7ff1232bf116
[  143.915476] Code: 10 89 7c 24 0c 89 4c 24 1c e8 86 6c f8 ff 44 8b 54 24 1c 8b 54 24 18 41 89 c0 48 8b 74 24 10 8b 7c 24 0c b8 e8 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 32 44 89 c7 89 44 24 0c e8 b6 6c f8 ff 8b 44
[  143.918097] RSP: 002b:00007ffd685a34d0 EFLAGS: 00000293 ORIG_RAX: 00000000000000e8
[  143.919202] RAX: 0000000000000003 RBX: 000055a1e170fb70 RCX: 00007ff1232bf116
[  143.920239] RDX: 000000000000002d RSI: 000055a1e1f6ff80 RDI: 0000000000000005
[  143.921266] RBP: ffffffffffffffff R08: 0000000000000000 R09: 7f43c2639807f12b
[  143.922299] R10: 00000000ffffffff R11: 0000000000000293 R12: 0000000000000001
[  143.923321] R13: 000000000000002d R14: 0000000000000000 R15: 000055a1adbd6b4e
[  143.924350]  </TASK>
[  143.924704] Modules linked in:
[  143.925407] Oops: general protection fault, probably for non-canonical address 0xdffffc0020000031: 0000 [#14] SMP KASAN NOPTI
[  143.925462] ---[ end trace 0000000000000000 ]---
[  143.927094] KASAN: probably user-memory-access in range [0x0000000100000188-0x000000010000018f]
[  143.927122] CPU: 0 UID: 0 PID: 256 Comm: syz-fuzzer Tainted: G      D W           6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) 
[  143.927158] Tainted: [D]=DIE, [W]=WARN
[  143.927166] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  143.927179] RIP: 0010:perf_tp_event+0x175/0xe70
[  143.927218] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[  143.927239] RSP: 0018:ffff8880189b7bc0 EFLAGS: 00010213
[  143.927258] RAX: 0000000020000031 RBX: 00000000ffffff9c RCX: 0000000000000002
[  143.927272] RDX: ffff88801a7dd280 RSI: ffffffff8189a4e7 RDI: 000000010000018c
[  143.927287] RBP: ffff8880189b7e30 R08: ffff88806ce31340 R09: ffffe8ffffc16740
[  143.927302] R10: 0000000000000000 R11: 1ffff1100d9c6f7b R12: dffffc0000000000
[  143.927316] R13: 000000000000001c R14: ffff88806ce31340 R15: dffffc0000000000
[  143.927333] FS:  000000c000030790(0000) GS:ffff8880e55d8000(0000) knlGS:0000000000000000
[  143.927355] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  143.927370] CR2: 0000000020000300 CR3: 0000000009f13000 CR4: 0000000000350ef0
[  143.928296] RIP: 0010:perf_tp_event+0x175/0xe70
[  143.929278] Call Trace:
[  143.929288]  <TASK>
[  143.929303]  ? __pfx_perf_tp_event+0x10/0x10
[  143.929338]  ? futex_wait+0x10e/0x380
[  143.929367]  ? flush_tlb_mm_range+0xa99/0x1420
[  143.929393]  ? __pfx_futex_wait+0x10/0x10
[  143.929426]  ? perf_trace_lock_acquire+0xc9/0x700
[  143.929460]  ? __pfx_perf_trace_lock_acquire+0x10/0x10
[  143.929487]  ? perf_trace_lock_acquire+0xc9/0x700
[  143.929523]  ? perf_trace_run_bpf_submit+0xef/0x180
[  143.932331] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[  143.932943]  ? lock_release+0x1c7/0x290
[  143.932970]  perf_trace_run_bpf_submit+0xef/0x180
[  143.933006]  perf_trace_sys_exit+0xcb/0x110
[  143.933033]  syscall_exit_work+0x15a/0x200
[  143.933056]  do_syscall_64+0x2e7/0x360
[  143.933081]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  143.933105] RIP: 0033:0x466533
[  143.934067] RSP: 0018:ffff8880168d7bc0 EFLAGS: 00010212
[  143.936381] Code: 24 20 c3 cc cc cc cc 48 8b 7c 24 08 8b 74 24 10 8b 54 24 14 4c 8b 54 24 18 4c 8b 44 24 20 44 8b 4c 24 28 b8 ca 00 00 00 0f 05 <89> 44 24 30 c3 cc cc cc cc cc cc cc cc 8b 7c 24 08 48 8b 74 24 10
[  143.936405] RSP: 002b:000000c00003bd98 EFLAGS: 00000286 ORIG_RAX: 00000000000000ca
[  143.936426] RAX: fffffffffffffe00 RBX: 000000c000030700 RCX: 0000000000466533
[  143.936441] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000c000030848
[  143.936455] RBP: 000000c00003bde0 R08: 0000000000000000 R09: 0000000000000000
[  143.936468] R10: 0000000000000000 R11: 0000000000000286 R12: 0000000000000003
[  143.936481] R13: 000000c000000f00 R14: 00000021a46610a9 R15: 0000000000000039
[  143.936506]  </TASK>
[  143.936513] Modules linked in:
[  143.938682] ---[ end trace 0000000000000000 ]---
[  143.938696] RIP: 0010:perf_tp_event+0x175/0xe70
[  143.940782] 
[  143.941715] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[  143.942858] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: 0000000000000002
[  143.943881] RSP: 0018:ffff8880168d7bc0 EFLAGS: 00010212
[  143.944921] RDX: ffff888016379b80 RSI: ffffffff8189a4e7 RDI: 0000000000000191
[  143.945858] 
[  143.945866] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: 0000000000000002
[  143.945882] RDX: ffff888016379b80 RSI: ffffffff8189a4e7 RDI: 0000000000000191
[  143.945897] RBP: ffff8880168d7e30 R08: ffff88806ce31340 R09: ffffe8ffffc16740
[  143.945912] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
[  143.945926] R13: 000000000000001c R14: ffff88806ce31340 R15: dffffc0000000000
[  143.945944] FS:  000000c000030790(0000) GS:ffff8880e55d8000(0000) knlGS:0000000000000000
[  143.945965] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  143.945980] CR2: 0000000020000300 CR3: 0000000009f13000 CR4: 0000000000350ef0
[  143.945996] note: syz-fuzzer[256] exited with preempt_count 1
[  143.947449] Oops: general protection fault, probably for non-canonical address 0xdffffc0020000031: 0000 [#15] SMP KASAN NOPTI
[  143.948304] RBP: ffff8880168d7e30 R08: ffff88806ce31340 R09: ffffe8ffffc16740
[  143.948799] KASAN: probably user-memory-access in range [0x0000000100000188-0x000000010000018f]
[  143.948823] CPU: 0 UID: 0 PID: 257 Comm: syz-fuzzer Tainted: G      D W           6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) 
[  143.948857] Tainted: [D]=DIE, [W]=WARN
[  143.948865] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  143.948878] RIP: 0010:perf_tp_event+0x175/0xe70
[  143.948909] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[  143.948930] RSP: 0018:ffff88800f6c7bc0 EFLAGS: 00010213
[  143.948949] RAX: 0000000020000031 RBX: 00000000ffffff9c RCX: 0000000000000002
[  143.949320] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
[  143.949655] RDX: ffff8880162e5280 RSI: ffffffff8189a4e7 RDI: 000000010000018c
[  143.950458] R13: 000000000000001c R14: ffff88806ce31340 R15: dffffc0000000000
[  143.950851] RBP: ffff88800f6c7e30 R08: ffff88806ce31340 R09: ffffe8ffffc16740
[  143.950867] R10: 0000000000000000 R11: ffff88801a7dd738 R12: dffffc0000000000
[  143.950882] R13: 000000000000001c R14: ffff88806ce31340 R15: dffffc0000000000
[  143.950899] FS:  000000c0002d8b10(0000) GS:ffff8880e55d8000(0000) knlGS:0000000000000000
[  143.950920] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  143.950934] CR2: 0000000020000300 CR3: 0000000009f13000 CR4: 0000000000350ef0
[  143.950949] Call Trace:
[  143.950956]  <TASK>
[  143.950971]  ? __pfx_perf_tp_event+0x10/0x10
[  143.951005]  ? futex_wait+0x10e/0x380
[  143.951662] FS:  00007ff122ae2900(0000) GS:ffff8880e56d8000(0000) knlGS:0000000000000000
[  143.952243]  ? __pfx_futex_wait+0x10/0x10
[  143.952276]  ? security_file_permission+0x22/0x90
[  143.952313]  ? perf_trace_lock_acquire+0xc9/0x700
[  143.952342]  ? vfs_read+0x242/0xc70
[  143.952367]  ? __pfx_perf_trace_lock_acquire+0x10/0x10
[  143.952394]  ? perf_trace_lock_acquire+0xc9/0x700
[  143.953246] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  143.953835]  ? perf_trace_run_bpf_submit+0xef/0x180
[  143.953868]  ? lock_release+0x1c7/0x290
[  143.953892]  perf_trace_run_bpf_submit+0xef/0x180
[  143.953926]  perf_trace_sys_exit+0xcb/0x110
[  143.953953]  syscall_exit_work+0x15a/0x200
[  143.953976]  do_syscall_64+0x2e7/0x360
[  143.954676] CR2: 000055558cc24c58 CR3: 000000000e849000 CR4: 0000000000350ef0
[  143.955379]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  143.955403] RIP: 0033:0x466533
[  143.955418] Code: 24 20 c3 cc cc cc cc 48 8b 7c 24 08 8b 74 24 10 8b 54 24 14 4c 8b 54 24 18 4c 8b 44 24 20 44 8b 4c 24 28 b8 ca 00 00 00 0f 05 <89> 44 24 30 c3 cc cc cc cc cc cc cc cc 8b 7c 24 08 48 8b 74 24 10
[  143.955439] RSP: 002b:000000c00003dd98 EFLAGS: 00000286 ORIG_RAX: 00000000000000ca
[  143.955460] RAX: fffffffffffffe00 RBX: 000000c0002d8a80 RCX: 0000000000466533
[  143.955475] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000c0002d8bc8
[  143.955488] RBP: 000000c00003dde0 R08: 0000000000000000 R09: 0000000000000000
[  143.955502] R10: 0000000000000000 R11: 0000000000000286 R12: 0000000000000000
[  143.955515] R13: 0000000000000001 R14: 000000c002bc7560 R15: 0000000000000000
[  143.955539]  </TASK>
[  143.955546] Modules linked in:
[  143.955642] ---[ end trace 0000000000000000 ]---
[  143.959009] note: systemd[1] exited with preempt_count 1
[  143.959532] RIP: 0010:perf_tp_event+0x175/0xe70
[  143.964776] Kernel panic - not syncing: Attempted to kill init! exitcode=0x0000000b
[  143.966194] Kernel Offset: disabled
[  144.037833] ---[ end Kernel panic - not syncing: Attempted to kill init! exitcode=0x0000000b ]---

VM DIAGNOSIS:
03:54:10  Registers:
info registers vcpu 0
RAX=0000000000000053 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff828e5105 RDI=ffffffff88729280 RBP=ffffffff88729240 RSP=ffff8880168d7530
R8 =0000000000000000 R9 =ffffed100148f046 R10=0000000000000053 R11=313030203a505352
R12=0000000000000053 R13=0000000000000010 R14=ffffffff88729240 R15=ffffffff828e50f0
RIP=ffffffff828e515d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007feda9ffd8c0 00000000 00000000
GS =0000 ffff8880e55d8000 00000000 00000000
LDT=0000 fffffe5100000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000000020000300 CR3=000000000c731000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=000000000000002f002f2e2e2f002e2e XMM01=0000000000000000696c61766e49002f
XMM02=ffffffffffffff0f0e0d0c0b0a090807 XMM03=0000000000000021000065756575712f
XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=000056240cdce240000056240ce16b00
XMM06=000056240cdfb9c00000000400000002 XMM07=00000000000000000000000000000000
XMM08=2f63697361622f6372732f2e2e000d0a XMM09=00000000000000000000000000000000
XMM10=00000000002000000000000000200000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000000 RBX=ffff88806ce3de20 RCX=ffffffff816880fc RDX=ffff8880166b1b80
RSI=ffffffff816880d6 RDI=0000000000000005 RBP=0000000000000003 RSP=ffff88801752eec8
R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000001 R11=1ffff1100d9e6bb1
R12=ffffed100d9c7bc5 R13=ffff88806ce3de28 R14=0000000000000001 R15=dffffc0000000000
RIP=ffffffff816880d8 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007ff53f6fd700 00000000 00000000
GS =0000 ffff8880e56d8000 00000000 00000000
LDT=0000 fffffe4400000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ff53f789180 CR3=000000000e773000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=ff000000000000000000000000000000
XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000
XMM04=ef63d2b7339aa72c00000000001512c0 XMM05=d3fdd5f48436fbd700000000000aead0
XMM06=89b11df4103f76c600000000000ae988 XMM07=a1fcdcf819d7e1e500000000000ae728
XMM08=44495f474f4c5359530069253d595449 XMM09=00000000000000000000000000000000
XMM10=00000000000000000020000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000