Warning: Permanently added '[localhost]:1804' (ECDSA) to the list of known hosts.
2025/08/30 00:08:12 fuzzer started
2025/08/30 00:08:13 dialing manager at localhost:43077
syzkaller login: [   52.000633] cgroup: Unknown subsys name 'net'
[   52.059099] cgroup: Unknown subsys name 'cpuset'
[   52.073630] cgroup: Unknown subsys name 'rlimit'
2025/08/30 00:08:23 syscalls: 2214
2025/08/30 00:08:23 code coverage: enabled
2025/08/30 00:08:23 comparison tracing: enabled
2025/08/30 00:08:23 extra coverage: enabled
2025/08/30 00:08:23 setuid sandbox: enabled
2025/08/30 00:08:23 namespace sandbox: enabled
2025/08/30 00:08:23 Android sandbox: enabled
2025/08/30 00:08:23 fault injection: enabled
2025/08/30 00:08:23 leak checking: enabled
2025/08/30 00:08:23 net packet injection: enabled
2025/08/30 00:08:23 net device setup: enabled
2025/08/30 00:08:23 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/08/30 00:08:23 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/08/30 00:08:23 USB emulation: enabled
2025/08/30 00:08:23 hci packet injection: enabled
2025/08/30 00:08:23 wifi device emulation: enabled
2025/08/30 00:08:23 802.15.4 emulation: enabled
2025/08/30 00:08:23 fetching corpus: 50, signal 16811/18650 (executing program)
2025/08/30 00:08:23 fetching corpus: 100, signal 32324/35699 (executing program)
2025/08/30 00:08:23 fetching corpus: 150, signal 42042/46792 (executing program)
2025/08/30 00:08:23 fetching corpus: 200, signal 49349/55444 (executing program)
2025/08/30 00:08:23 fetching corpus: 250, signal 52572/60059 (executing program)
2025/08/30 00:08:23 fetching corpus: 300, signal 58432/67081 (executing program)
2025/08/30 00:08:24 fetching corpus: 350, signal 64308/74005 (executing program)
2025/08/30 00:08:24 fetching corpus: 400, signal 67564/78469 (executing program)
2025/08/30 00:08:24 fetching corpus: 450, signal 71795/83768 (executing program)
2025/08/30 00:08:24 fetching corpus: 500, signal 74940/87946 (executing program)
2025/08/30 00:08:24 fetching corpus: 550, signal 78615/92533 (executing program)
2025/08/30 00:08:24 fetching corpus: 600, signal 81181/96098 (executing program)
2025/08/30 00:08:24 fetching corpus: 650, signal 83351/99255 (executing program)
2025/08/30 00:08:24 fetching corpus: 700, signal 85136/102022 (executing program)
2025/08/30 00:08:24 fetching corpus: 750, signal 86921/104769 (executing program)
2025/08/30 00:08:24 fetching corpus: 800, signal 89751/108282 (executing program)
2025/08/30 00:08:24 fetching corpus: 850, signal 91689/111071 (executing program)
2025/08/30 00:08:25 fetching corpus: 900, signal 92771/113111 (executing program)
2025/08/30 00:08:25 fetching corpus: 950, signal 94259/115459 (executing program)
2025/08/30 00:08:25 fetching corpus: 1000, signal 96759/118536 (executing program)
2025/08/30 00:08:25 fetching corpus: 1050, signal 98155/120722 (executing program)
2025/08/30 00:08:25 fetching corpus: 1100, signal 99422/122777 (executing program)
2025/08/30 00:08:25 fetching corpus: 1150, signal 101630/125605 (executing program)
2025/08/30 00:08:25 fetching corpus: 1200, signal 103269/127908 (executing program)
2025/08/30 00:08:25 fetching corpus: 1250, signal 104805/130113 (executing program)
2025/08/30 00:08:25 fetching corpus: 1300, signal 106050/132050 (executing program)
2025/08/30 00:08:25 fetching corpus: 1350, signal 106944/133752 (executing program)
2025/08/30 00:08:25 fetching corpus: 1400, signal 108877/136185 (executing program)
2025/08/30 00:08:26 fetching corpus: 1450, signal 109979/137970 (executing program)
2025/08/30 00:08:26 fetching corpus: 1500, signal 111608/140091 (executing program)
2025/08/30 00:08:26 fetching corpus: 1550, signal 114213/142928 (executing program)
2025/08/30 00:08:26 fetching corpus: 1600, signal 115224/144557 (executing program)
2025/08/30 00:08:26 fetching corpus: 1650, signal 116133/146106 (executing program)
2025/08/30 00:08:26 fetching corpus: 1700, signal 117527/148000 (executing program)
2025/08/30 00:08:26 fetching corpus: 1750, signal 118309/149434 (executing program)
2025/08/30 00:08:26 fetching corpus: 1800, signal 119535/151157 (executing program)
2025/08/30 00:08:26 fetching corpus: 1850, signal 120607/152725 (executing program)
2025/08/30 00:08:26 fetching corpus: 1900, signal 121470/154159 (executing program)
2025/08/30 00:08:26 fetching corpus: 1950, signal 122505/155682 (executing program)
2025/08/30 00:08:27 fetching corpus: 2000, signal 123141/156910 (executing program)
2025/08/30 00:08:27 fetching corpus: 2050, signal 124746/158700 (executing program)
2025/08/30 00:08:27 fetching corpus: 2100, signal 125508/159963 (executing program)
2025/08/30 00:08:27 fetching corpus: 2150, signal 126418/161293 (executing program)
2025/08/30 00:08:27 fetching corpus: 2200, signal 127381/162755 (executing program)
2025/08/30 00:08:27 fetching corpus: 2250, signal 128219/164046 (executing program)
2025/08/30 00:08:27 fetching corpus: 2300, signal 129073/165356 (executing program)
2025/08/30 00:08:27 fetching corpus: 2350, signal 129774/166507 (executing program)
2025/08/30 00:08:27 fetching corpus: 2400, signal 131924/168435 (executing program)
2025/08/30 00:08:27 fetching corpus: 2450, signal 133036/169752 (executing program)
2025/08/30 00:08:28 fetching corpus: 2500, signal 134164/171086 (executing program)
2025/08/30 00:08:28 fetching corpus: 2550, signal 134881/172193 (executing program)
2025/08/30 00:08:28 fetching corpus: 2600, signal 135866/173423 (executing program)
2025/08/30 00:08:28 fetching corpus: 2650, signal 136614/174547 (executing program)
2025/08/30 00:08:28 fetching corpus: 2700, signal 137120/175485 (executing program)
2025/08/30 00:08:28 fetching corpus: 2750, signal 138212/176727 (executing program)
2025/08/30 00:08:28 fetching corpus: 2800, signal 139668/178109 (executing program)
2025/08/30 00:08:28 fetching corpus: 2850, signal 140325/179106 (executing program)
2025/08/30 00:08:28 fetching corpus: 2900, signal 141019/180141 (executing program)
2025/08/30 00:08:28 fetching corpus: 2950, signal 141778/181247 (executing program)
2025/08/30 00:08:28 fetching corpus: 3000, signal 142541/182258 (executing program)
2025/08/30 00:08:29 fetching corpus: 3050, signal 143198/183137 (executing program)
2025/08/30 00:08:29 fetching corpus: 3100, signal 143823/184031 (executing program)
2025/08/30 00:08:29 fetching corpus: 3150, signal 144466/184938 (executing program)
2025/08/30 00:08:29 fetching corpus: 3200, signal 145034/185791 (executing program)
2025/08/30 00:08:29 fetching corpus: 3250, signal 145707/186742 (executing program)
2025/08/30 00:08:29 fetching corpus: 3300, signal 146210/187501 (executing program)
2025/08/30 00:08:29 fetching corpus: 3350, signal 146807/188361 (executing program)
2025/08/30 00:08:29 fetching corpus: 3400, signal 147468/189225 (executing program)
2025/08/30 00:08:29 fetching corpus: 3450, signal 147964/189982 (executing program)
2025/08/30 00:08:29 fetching corpus: 3500, signal 148402/190746 (executing program)
2025/08/30 00:08:30 fetching corpus: 3550, signal 148984/191525 (executing program)
2025/08/30 00:08:30 fetching corpus: 3600, signal 149429/192258 (executing program)
2025/08/30 00:08:30 fetching corpus: 3650, signal 149774/192984 (executing program)
2025/08/30 00:08:30 fetching corpus: 3700, signal 150652/193831 (executing program)
2025/08/30 00:08:30 fetching corpus: 3750, signal 151224/194615 (executing program)
2025/08/30 00:08:30 fetching corpus: 3800, signal 151633/195313 (executing program)
2025/08/30 00:08:30 fetching corpus: 3850, signal 152325/196099 (executing program)
2025/08/30 00:08:30 fetching corpus: 3900, signal 153008/196847 (executing program)
2025/08/30 00:08:30 fetching corpus: 3950, signal 153569/197579 (executing program)
2025/08/30 00:08:30 fetching corpus: 4000, signal 154106/198278 (executing program)
2025/08/30 00:08:30 fetching corpus: 4050, signal 154524/198892 (executing program)
2025/08/30 00:08:30 fetching corpus: 4100, signal 155168/199605 (executing program)
2025/08/30 00:08:31 fetching corpus: 4150, signal 155775/200269 (executing program)
2025/08/30 00:08:31 fetching corpus: 4200, signal 156349/200924 (executing program)
2025/08/30 00:08:31 fetching corpus: 4250, signal 156792/201565 (executing program)
2025/08/30 00:08:31 fetching corpus: 4300, signal 157187/202163 (executing program)
2025/08/30 00:08:31 fetching corpus: 4350, signal 157945/202847 (executing program)
2025/08/30 00:08:31 fetching corpus: 4400, signal 158226/203384 (executing program)
2025/08/30 00:08:31 fetching corpus: 4450, signal 158758/203974 (executing program)
2025/08/30 00:08:31 fetching corpus: 4500, signal 159131/204531 (executing program)
2025/08/30 00:08:31 fetching corpus: 4550, signal 159386/205090 (executing program)
2025/08/30 00:08:31 fetching corpus: 4600, signal 159805/205643 (executing program)
2025/08/30 00:08:31 fetching corpus: 4650, signal 160194/206217 (executing program)
2025/08/30 00:08:31 fetching corpus: 4700, signal 160782/206805 (executing program)
2025/08/30 00:08:32 fetching corpus: 4750, signal 161294/207380 (executing program)
2025/08/30 00:08:32 fetching corpus: 4800, signal 161697/207883 (executing program)
2025/08/30 00:08:32 fetching corpus: 4850, signal 162166/208415 (executing program)
2025/08/30 00:08:32 fetching corpus: 4900, signal 162460/208935 (executing program)
2025/08/30 00:08:32 fetching corpus: 4950, signal 162890/209534 (executing program)
2025/08/30 00:08:32 fetching corpus: 5000, signal 163242/210025 (executing program)
2025/08/30 00:08:32 fetching corpus: 5050, signal 163501/210498 (executing program)
2025/08/30 00:08:32 fetching corpus: 5100, signal 163961/210974 (executing program)
2025/08/30 00:08:32 fetching corpus: 5150, signal 164581/211443 (executing program)
2025/08/30 00:08:32 fetching corpus: 5200, signal 165053/211999 (executing program)
2025/08/30 00:08:32 fetching corpus: 5250, signal 165358/212113 (executing program)
2025/08/30 00:08:32 fetching corpus: 5300, signal 165728/212189 (executing program)
2025/08/30 00:08:33 fetching corpus: 5350, signal 166189/212189 (executing program)
2025/08/30 00:08:33 fetching corpus: 5400, signal 166522/212191 (executing program)
2025/08/30 00:08:33 fetching corpus: 5450, signal 166935/212194 (executing program)
2025/08/30 00:08:33 fetching corpus: 5500, signal 167190/212197 (executing program)
2025/08/30 00:08:33 fetching corpus: 5550, signal 167480/212205 (executing program)
2025/08/30 00:08:33 fetching corpus: 5600, signal 167802/212232 (executing program)
2025/08/30 00:08:33 fetching corpus: 5650, signal 168378/212346 (executing program)
2025/08/30 00:08:33 fetching corpus: 5700, signal 168784/212351 (executing program)
2025/08/30 00:08:33 fetching corpus: 5750, signal 169574/212354 (executing program)
2025/08/30 00:08:33 fetching corpus: 5800, signal 169829/212356 (executing program)
2025/08/30 00:08:33 fetching corpus: 5850, signal 170430/212379 (executing program)
2025/08/30 00:08:33 fetching corpus: 5900, signal 170719/212388 (executing program)
2025/08/30 00:08:33 fetching corpus: 5950, signal 171035/212473 (executing program)
2025/08/30 00:08:34 fetching corpus: 6000, signal 171459/212480 (executing program)
2025/08/30 00:08:34 fetching corpus: 6050, signal 171864/212604 (executing program)
2025/08/30 00:08:34 fetching corpus: 6100, signal 172179/212610 (executing program)
2025/08/30 00:08:34 fetching corpus: 6150, signal 172534/212615 (executing program)
2025/08/30 00:08:34 fetching corpus: 6200, signal 172993/212618 (executing program)
2025/08/30 00:08:34 fetching corpus: 6250, signal 173391/212635 (executing program)
2025/08/30 00:08:34 fetching corpus: 6300, signal 173906/212642 (executing program)
2025/08/30 00:08:34 fetching corpus: 6350, signal 174190/212667 (executing program)
2025/08/30 00:08:34 fetching corpus: 6400, signal 174440/212671 (executing program)
2025/08/30 00:08:34 fetching corpus: 6450, signal 174727/212675 (executing program)
2025/08/30 00:08:34 fetching corpus: 6500, signal 174931/212683 (executing program)
2025/08/30 00:08:35 fetching corpus: 6550, signal 175382/212717 (executing program)
2025/08/30 00:08:35 fetching corpus: 6600, signal 175814/212719 (executing program)
2025/08/30 00:08:35 fetching corpus: 6650, signal 176077/212719 (executing program)
2025/08/30 00:08:35 fetching corpus: 6700, signal 176450/212719 (executing program)
2025/08/30 00:08:35 fetching corpus: 6750, signal 176766/212732 (executing program)
2025/08/30 00:08:35 fetching corpus: 6800, signal 177495/212732 (executing program)
2025/08/30 00:08:35 fetching corpus: 6850, signal 177735/212744 (executing program)
2025/08/30 00:08:35 fetching corpus: 6900, signal 178091/212748 (executing program)
2025/08/30 00:08:35 fetching corpus: 6950, signal 178699/212757 (executing program)
2025/08/30 00:08:35 fetching corpus: 7000, signal 179034/212774 (executing program)
2025/08/30 00:08:35 fetching corpus: 7050, signal 179306/212778 (executing program)
2025/08/30 00:08:35 fetching corpus: 7100, signal 179685/212806 (executing program)
2025/08/30 00:08:35 fetching corpus: 7150, signal 179973/212809 (executing program)
2025/08/30 00:08:36 fetching corpus: 7200, signal 180447/212809 (executing program)
2025/08/30 00:08:36 fetching corpus: 7250, signal 180817/212810 (executing program)
2025/08/30 00:08:36 fetching corpus: 7300, signal 181098/212813 (executing program)
2025/08/30 00:08:36 fetching corpus: 7350, signal 181368/212821 (executing program)
2025/08/30 00:08:36 fetching corpus: 7400, signal 181530/212829 (executing program)
2025/08/30 00:08:36 fetching corpus: 7450, signal 181851/212842 (executing program)
2025/08/30 00:08:36 fetching corpus: 7500, signal 182127/212847 (executing program)
2025/08/30 00:08:36 fetching corpus: 7550, signal 182488/212849 (executing program)
2025/08/30 00:08:36 fetching corpus: 7600, signal 182756/212850 (executing program)
2025/08/30 00:08:36 fetching corpus: 7650, signal 183036/212859 (executing program)
2025/08/30 00:08:37 fetching corpus: 7700, signal 183466/212859 (executing program)
2025/08/30 00:08:37 fetching corpus: 7750, signal 183643/212859 (executing program)
2025/08/30 00:08:37 fetching corpus: 7800, signal 184037/212869 (executing program)
2025/08/30 00:08:37 fetching corpus: 7850, signal 184302/212871 (executing program)
2025/08/30 00:08:37 fetching corpus: 7900, signal 184557/212889 (executing program)
2025/08/30 00:08:37 fetching corpus: 7950, signal 184961/212889 (executing program)
2025/08/30 00:08:37 fetching corpus: 8000, signal 185318/212889 (executing program)
2025/08/30 00:08:37 fetching corpus: 8050, signal 185652/212893 (executing program)
2025/08/30 00:08:37 fetching corpus: 8100, signal 185988/212916 (executing program)
2025/08/30 00:08:37 fetching corpus: 8150, signal 186265/212916 (executing program)
2025/08/30 00:08:37 fetching corpus: 8200, signal 186523/212920 (executing program)
2025/08/30 00:08:37 fetching corpus: 8250, signal 186792/212925 (executing program)
2025/08/30 00:08:38 fetching corpus: 8300, signal 186998/212926 (executing program)
2025/08/30 00:08:38 fetching corpus: 8350, signal 187193/212928 (executing program)
2025/08/30 00:08:38 fetching corpus: 8400, signal 187472/212954 (executing program)
2025/08/30 00:08:38 fetching corpus: 8450, signal 187672/212959 (executing program)
2025/08/30 00:08:38 fetching corpus: 8500, signal 187889/212966 (executing program)
2025/08/30 00:08:38 fetching corpus: 8550, signal 188139/212976 (executing program)
2025/08/30 00:08:38 fetching corpus: 8600, signal 188350/212977 (executing program)
2025/08/30 00:08:38 fetching corpus: 8650, signal 188544/212978 (executing program)
2025/08/30 00:08:38 fetching corpus: 8700, signal 188959/212983 (executing program)
2025/08/30 00:08:38 fetching corpus: 8750, signal 189256/212996 (executing program)
2025/08/30 00:08:38 fetching corpus: 8800, signal 189675/212998 (executing program)
2025/08/30 00:08:39 fetching corpus: 8850, signal 189826/213007 (executing program)
2025/08/30 00:08:39 fetching corpus: 8900, signal 190145/213021 (executing program)
2025/08/30 00:08:39 fetching corpus: 8950, signal 190357/213029 (executing program)
2025/08/30 00:08:39 fetching corpus: 9000, signal 190627/213038 (executing program)
2025/08/30 00:08:39 fetching corpus: 9050, signal 190898/213044 (executing program)
2025/08/30 00:08:39 fetching corpus: 9100, signal 191107/213047 (executing program)
2025/08/30 00:08:39 fetching corpus: 9150, signal 191329/213056 (executing program)
2025/08/30 00:08:39 fetching corpus: 9200, signal 191602/213056 (executing program)
2025/08/30 00:08:39 fetching corpus: 9250, signal 191882/213056 (executing program)
2025/08/30 00:08:39 fetching corpus: 9300, signal 192137/213059 (executing program)
2025/08/30 00:08:39 fetching corpus: 9350, signal 192330/213070 (executing program)
2025/08/30 00:08:39 fetching corpus: 9400, signal 192600/213070 (executing program)
2025/08/30 00:08:40 fetching corpus: 9450, signal 192848/213072 (executing program)
2025/08/30 00:08:40 fetching corpus: 9500, signal 193033/213079 (executing program)
2025/08/30 00:08:40 fetching corpus: 9550, signal 193307/213186 (executing program)
2025/08/30 00:08:40 fetching corpus: 9600, signal 193568/213188 (executing program)
2025/08/30 00:08:40 fetching corpus: 9650, signal 193888/213201 (executing program)
2025/08/30 00:08:40 fetching corpus: 9700, signal 194131/213202 (executing program)
2025/08/30 00:08:40 fetching corpus: 9750, signal 194356/213204 (executing program)
2025/08/30 00:08:40 fetching corpus: 9800, signal 194580/213213 (executing program)
2025/08/30 00:08:40 fetching corpus: 9850, signal 194804/213218 (executing program)
2025/08/30 00:08:40 fetching corpus: 9900, signal 194961/213219 (executing program)
2025/08/30 00:08:41 fetching corpus: 9950, signal 195182/213241 (executing program)
2025/08/30 00:08:41 fetching corpus: 10000, signal 195434/213245 (executing program)
2025/08/30 00:08:41 fetching corpus: 10050, signal 195737/213322 (executing program)
2025/08/30 00:08:41 fetching corpus: 10100, signal 195916/213322 (executing program)
2025/08/30 00:08:41 fetching corpus: 10150, signal 196218/213323 (executing program)
2025/08/30 00:08:41 fetching corpus: 10200, signal 196485/213334 (executing program)
2025/08/30 00:08:41 fetching corpus: 10250, signal 196708/213345 (executing program)
2025/08/30 00:08:41 fetching corpus: 10300, signal 196938/213351 (executing program)
2025/08/30 00:08:41 fetching corpus: 10350, signal 197245/213383 (executing program)
2025/08/30 00:08:41 fetching corpus: 10400, signal 197637/213418 (executing program)
2025/08/30 00:08:41 fetching corpus: 10450, signal 197804/213418 (executing program)
2025/08/30 00:08:41 fetching corpus: 10500, signal 198134/213418 (executing program)
2025/08/30 00:08:42 fetching corpus: 10550, signal 198410/213420 (executing program)
2025/08/30 00:08:42 fetching corpus: 10600, signal 198656/213448 (executing program)
2025/08/30 00:08:42 fetching corpus: 10650, signal 198821/213451 (executing program)
2025/08/30 00:08:42 fetching corpus: 10700, signal 198984/213451 (executing program)
2025/08/30 00:08:42 fetching corpus: 10750, signal 199158/213453 (executing program)
2025/08/30 00:08:42 fetching corpus: 10800, signal 199389/213456 (executing program)
2025/08/30 00:08:42 fetching corpus: 10850, signal 199589/213468 (executing program)
2025/08/30 00:08:42 fetching corpus: 10900, signal 199740/213468 (executing program)
2025/08/30 00:08:42 fetching corpus: 10950, signal 199897/213475 (executing program)
2025/08/30 00:08:42 fetching corpus: 11000, signal 200106/213476 (executing program)
2025/08/30 00:08:42 fetching corpus: 11050, signal 200260/213477 (executing program)
2025/08/30 00:08:42 fetching corpus: 11100, signal 200405/213481 (executing program)
2025/08/30 00:08:43 fetching corpus: 11150, signal 200585/213488 (executing program)
2025/08/30 00:08:43 fetching corpus: 11200, signal 200867/213554 (executing program)
2025/08/30 00:08:43 fetching corpus: 11250, signal 201051/213589 (executing program)
2025/08/30 00:08:43 fetching corpus: 11300, signal 201225/213611 (executing program)
2025/08/30 00:08:43 fetching corpus: 11350, signal 201358/213615 (executing program)
2025/08/30 00:08:43 fetching corpus: 11400, signal 201652/213621 (executing program)
2025/08/30 00:08:43 fetching corpus: 11450, signal 201767/213622 (executing program)
2025/08/30 00:08:43 fetching corpus: 11500, signal 201962/213625 (executing program)
2025/08/30 00:08:43 fetching corpus: 11550, signal 202216/213630 (executing program)
2025/08/30 00:08:43 fetching corpus: 11600, signal 202395/213631 (executing program)
2025/08/30 00:08:43 fetching corpus: 11650, signal 202535/213636 (executing program)
2025/08/30 00:08:43 fetching corpus: 11700, signal 202699/213645 (executing program)
2025/08/30 00:08:44 fetching corpus: 11718, signal 202750/213645 (executing program)
2025/08/30 00:08:44 fetching corpus: 11718, signal 202750/213645 (executing program)
2025/08/30 00:08:45 starting 8 fuzzer processes
00:08:45 executing program 0:
sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xa5a}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3f}]}, 0x3c}, 0x1, 0x0, 0x0, 0x7ff7afffd9fe6278}, 0x4054)
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x58, r1, 0x800, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x81}, 0x20000000)
sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r1, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x4b}, @void, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0)
r3 = syz_open_dev$vcsu(&(0x7f00000003c0), 0x1e8000000000, 0x410880)
sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x4c, 0x0, 0x300, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x38}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, 0x9, 0x6, 0x3, 0x0, 0x0, {0xc}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8880}, 0x800)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000640)={{0x1, 0x1, 0x18, <r4=>r3, {0xfffffff9}}, './file0\x00'})
sendmsg$BATADV_CMD_GET_NEIGHBORS(r4, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x3c, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7fff}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4800000}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0xc0)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, &(0x7f0000000780)={{0x1, 0x1, 0x18, <r5=>r4, {0x5bda}}, './file0\x00'})
ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000880)={'ip6gre0\x00', &(0x7f0000000800)={'syztnl1\x00', <r6=>0x0, 0x4, 0xe0, 0x4, 0x3, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x1, 0x7800, 0x5, 0x5}})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000009c0)={'erspan0\x00', &(0x7f00000008c0)={'syztnl2\x00', <r7=>0x0, 0x700, 0x80, 0x9, 0x5, {{0x2d, 0x4, 0x1, 0x6, 0xb4, 0x67, 0x0, 0xe9, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x28}, {[@ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x3c, 0x77, 0x3, 0x3, [{@loopback, 0x401}, {@broadcast, 0xfa22019}, {@remote, 0x5dbf}, {@multicast2, 0x1}, {@rand_addr=0x64010102, 0x3}, {@multicast2, 0x2}, {@loopback, 0xb213}]}, @timestamp_prespec={0x44, 0x54, 0x0, 0x3, 0x2, [{@private=0xa010102, 0x9}, {@local, 0x5}, {@private=0xa010102, 0x6}, {@multicast2, 0x3}, {@remote, 0x2}, {@broadcast, 0x1f7}, {@empty, 0xffffffff}, {@local, 0x7}, {@loopback, 0xad54}, {@multicast1, 0x80000000}]}, @lsrr={0x83, 0x7, 0x39, [@dev={0xac, 0x14, 0x14, 0x26}]}, @ra={0x94, 0x4}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r4, 0x89f7, &(0x7f0000000a80)={'ip6tnl0\x00', &(0x7f0000000a00)={'syztnl1\x00', <r8=>0x0, 0x2f, 0x87, 0x4, 0x37f, 0x10, @dev={0xfe, 0x80, '\x00', 0x13}, @dev={0xfe, 0x80, '\x00', 0x39}, 0x20, 0x0, 0x8, 0x50}})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000c00)={'syztnl2\x00', &(0x7f0000000b80)={'ip6gre0\x00', <r9=>0x0, 0x4, 0x8, 0x2, 0x8, 0x18, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80, 0x10, 0x2, 0x8}})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000c40)={'batadv_slave_0\x00', <r10=>0x0})
sendmsg$ETHTOOL_MSG_EEE_GET(r5, &(0x7f0000000ec0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000e80)={&(0x7f0000000c80)={0x1e4, 0x0, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}]}, 0x1e4}, 0x1, 0x0, 0x0, 0xc0}, 0x850)
sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f00000010c0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001080)={&(0x7f0000000f40)={0x138, r2, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_REG_RULES={0xe8, 0x22, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x10001}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x34c}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7b68}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x4}, @NL80211_ATTR_REG_RULE_FLAGS={0x8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x8001}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xfffffffc}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8b4}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xa8}, @NL80211_ATTR_DFS_CAC_TIME={0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x861d}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xfffffe01}, @NL80211_ATTR_FREQ_RANGE_END={0x8}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x5}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x6}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x3}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x5}]}]}, @NL80211_ATTR_REG_RULES={0x10, 0x22, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x57}]}]}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x80}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}]}, 0x138}, 0x1, 0x0, 0x0, 0x40}, 0x8000)
sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)={0x28, r1, 0x300, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @crypto_settings=[@NL80211_ATTR_SAE_PASSWORD={0xc, 0x115, "42f046d944fe9ffa"}, @NL80211_ATTR_SOCKET_OWNER={0x4}]]}, 0x28}, 0x1, 0x0, 0x0, 0x894}, 0x20000000)

00:08:45 executing program 7:
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(0xffffffffffffffff, 0xc04c5349, &(0x7f0000000000)={0x5, 0x555, 0x4})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(0xffffffffffffffff, 0xc04c5349, &(0x7f0000000080)={0x9, 0x1, 0x6})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(0xffffffffffffffff, 0xc04c5349, &(0x7f0000000100)={0x3f, 0x8000, 0x10001})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(0xffffffffffffffff, 0xc04c5349, &(0x7f0000000180)={0x20, 0x1, 0x5})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(0xffffffffffffffff, 0xc04c5349, &(0x7f0000000200)={0x6, 0x1, 0x1})
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000003c80)=[{{&(0x7f0000000280), 0x6e, &(0x7f00000004c0)=[{&(0x7f0000000300)=""/244, 0xf4}, {&(0x7f0000000400)=""/49, 0x31}, {&(0x7f0000000440)=""/75, 0x4b}], 0x3, &(0x7f0000000500)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r0=>0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, <r1=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc8}}, {{&(0x7f0000000600), 0x6e, &(0x7f0000000880)=[{&(0x7f0000000680)=""/101, 0x65}, {&(0x7f0000000700)=""/120, 0x78}, {&(0x7f0000000780)=""/238, 0xee}], 0x3, &(0x7f00000008c0)=[@rights={{0x18, 0x1, 0x1, [<r2=>0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x88}}, {{&(0x7f0000000980)=@abs, 0x6e, &(0x7f0000000b00)=[{&(0x7f0000000a00)=""/219, 0xdb}], 0x1, &(0x7f0000000b40)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x48}}, {{0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000000bc0)=""/81, 0x51}, {&(0x7f0000000c40)=""/4096, 0x1000}, {&(0x7f0000001c40)=""/122, 0x7a}, {&(0x7f0000001cc0)=""/75, 0x4b}, {&(0x7f0000001d40)=""/101, 0x65}, {&(0x7f0000001dc0)=""/74, 0x4a}, {&(0x7f0000001e40)=""/144, 0x90}], 0x7, &(0x7f0000001f80)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{&(0x7f0000002000)=@abs, 0x6e, &(0x7f00000021c0)=[{&(0x7f0000002080)=""/51, 0x33}, {&(0x7f00000020c0)=""/13, 0xd}, {&(0x7f0000002100)=""/149, 0x95}], 0x3, &(0x7f0000002200)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, <r3=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, <r4=>0xffffffffffffffff]}}], 0xa0}}, {{&(0x7f00000022c0), 0x6e, &(0x7f00000024c0)=[{&(0x7f0000002340)=""/104, 0x68}, {&(0x7f00000023c0)=""/205, 0xcd}], 0x2, &(0x7f0000002500)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r5=>0xffffffffffffffff, 0xffffffffffffffff, <r6=>0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x120}}, {{&(0x7f0000002640)=@abs, 0x6e, &(0x7f0000002800)=[{&(0x7f00000026c0)=""/54, 0x36}, {&(0x7f0000002700)=""/248, 0xf8}], 0x2}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{&(0x7f0000002840)=""/46, 0x2e}, {&(0x7f0000002880)=""/240, 0xf0}, {&(0x7f0000002980)=""/214, 0xd6}, {&(0x7f0000002a80)=""/39, 0x27}, {&(0x7f0000002ac0)=""/4096, 0x1000}, {&(0x7f0000003ac0)=""/254, 0xfe}], 0x6, &(0x7f0000003c40)=[@cred={{0x1c}}], 0x20}}], 0x8, 0x12020, &(0x7f0000003e80)={0x77359400})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r1, 0xc04c5349, &(0x7f0000003ec0)={0x54, 0x80000, 0x45dc})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r5, 0x404c534a, &(0x7f0000003f40)={0x1ff, 0x7ff, 0xff})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r4, 0x404c534a, &(0x7f0000003fc0)={0x7, 0xe0, 0x3})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r3, 0xc04c5349, &(0x7f0000004040)={0x0, 0x5, 0x80000000})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc04c5349, &(0x7f00000040c0)={0x5, 0x7, 0x561c})
openat$sndseq(0xffffffffffffff9c, &(0x7f0000004140), 0x1800)
r7 = syz_open_dev$evdev(&(0x7f0000004180), 0x400000000, 0x801)
fsetxattr$trusted_overlay_nlink(r7, &(0x7f00000041c0), &(0x7f0000004200)={'L-', 0x100000001}, 0x16, 0x3)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000004240)={0x280, @time={0x800, 0x2e0}, 0x8, {0x7f, 0x7e}, 0x8, 0x2, 0x72})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000004280)={{0x1, 0x1, 0x18, <r8=>r6}, './file0\x00'})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r8, 0xc04c5349, &(0x7f00000042c0)={0x3, 0x4, 0x32c})
r9 = open(&(0x7f0000004340)='./file0\x00', 0x0, 0x14)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r9, 0xc04c5349, &(0x7f0000004380)={0x800, 0x6, 0x1})
openat$hpet(0xffffffffffffff9c, &(0x7f0000004400), 0x2001, 0x0)

00:08:45 executing program 1:
setfsuid(0xee00)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0, <r0=>0x0}, &(0x7f0000000080)=0xc)
getgroups(0x4, &(0x7f00000000c0)=[<r1=>0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0])
lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0})
lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0})
newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, <r4=>0x0, <r5=>0x0}, 0x4000)
fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000340)={{}, {0x1, 0x5}, [{0x2, 0x4, 0xee01}, {0x2, 0x0, r0}, {0x2, 0x5}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x0, 0xee00}], {0x4, 0x6}, [{0x8, 0x3, r1}, {0x8, 0x2, 0xee00}, {0x8, 0x6, 0xffffffffffffffff}, {0x8, 0x1, r2}, {0x8, 0x4, 0xee00}, {0x8, 0x5, r3}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x5, r5}], {}, {0x20, 0x3}}, 0x8c, 0x2)
mknod(&(0x7f0000000400)='./file0\x00', 0x100, 0xff)
lsetxattr$trusted_overlay_nlink(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480), &(0x7f00000004c0)={'U+', 0x6}, 0x16, 0x3)
bind$unix(0xffffffffffffffff, &(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000600), 0x6e, &(0x7f0000000a40)=[{&(0x7f0000000680)}, {&(0x7f00000006c0)=""/213, 0xd5}, {&(0x7f00000007c0)=""/29, 0x1d}, {&(0x7f0000000800)=""/177, 0xb1}, {&(0x7f00000008c0)=""/124, 0x7c}, {&(0x7f0000000940)=""/227, 0xe3}], 0x6, &(0x7f0000000ac0)=[@rights={{0x20, 0x1, 0x1, [<r6=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r7=>0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r8=>0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, <r9=>0x0}}}], 0x110}, 0x10001)
lstat(&(0x7f0000000c40)='./file0\x00', &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, <r10=>0x0})
mount$cgroup2(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0), 0x200420, &(0x7f0000000d00)={[{@memory_recursiveprot}, {@memory_localevents}, {@memory_localevents}, {}, {}, {@memory_localevents}, {}, {}], [{@audit}, {@euid_lt={'euid<', r4}}, {@obj_type}, {@measure}, {@euid_gt={'euid>', r9}}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@euid_gt={'euid>', r10}}, {@obj_role={'obj_role', 0x3d, 'U+'}}, {@uid_gt={'uid>', r0}}]})
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r6, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r8, {0x4}}, './file0\x00'})
r11 = inotify_init1(0x800)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r11, 0x6612)
r12 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
readv(r12, &(0x7f0000000f40)=[{&(0x7f0000000e80)=""/181, 0xb5}], 0x1)
bind$bt_hci(r6, &(0x7f0000000f80)={0x1f, 0x3, 0x3}, 0x6)
setsockopt$bt_hci_HCI_FILTER(r7, 0x0, 0x2, &(0x7f0000000fc0)={0xceb, [0x937, 0x100], 0x36}, 0x10)

00:08:45 executing program 2:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0)
r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x40040, 0x0)
kcmp(0xffffffffffffffff, 0x0, 0x5, r0, r1)
preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/69, 0x45}, {&(0x7f0000000100)=""/154, 0x9a}], 0x2, 0xf9, 0xffffffff)
ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0x123198)
r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000200), 0x111000, 0x0)
fsetxattr$security_ima(r2, &(0x7f0000000240), &(0x7f0000000280)=@md5={0x1, "1e8505dc530dccca2406a9b07912a9a6"}, 0x11, 0x2)
ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000300)={&(0x7f00000002c0)=[0x0], 0x1, 0x80000000})
fsetxattr$security_selinux(r0, &(0x7f0000000340), &(0x7f0000000380)='system_u:object_r:netcontrol_device_t:s0\x00', 0x29, 0x2)
ioctl$INCFS_IOC_FILL_BLOCKS(r1, 0x80106720, &(0x7f0000000480)={0x1, &(0x7f0000000440)=[{0x2, 0x6a, &(0x7f00000003c0)="882045cd667fc91ecce77929041d8d1b06b7de8bbf2657a762ce3868ee0f431eb9b9d9efe4877f3220a0a50be32a38315f5114feda93e83c0e68c9c9383ea50610b4d2f6bb855f60cdebcabb547bf3e1ccfead996255620e14319a24e0bd0f5698bad81374bc4ca3febd"}]})
fadvise64(r0, 0xfffffffffffffff7, 0x43f8, 0x1)
r3 = accept$unix(r0, &(0x7f00000004c0)=@abs, &(0x7f0000000540)=0x6e)
ioctl$AUTOFS_IOC_CATATONIC(r3, 0x9362, 0x0)
ioctl$PTP_PIN_SETFUNC(r1, 0x40603d07, &(0x7f0000000580)={'\x00', 0x9, 0x1, 0xfffffeff})
recvmmsg$unix(r0, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000600)=""/253, 0xfd}, {&(0x7f0000000700)=""/72, 0x48}, {&(0x7f0000000780)=""/69, 0x45}, {&(0x7f0000000800)=""/131, 0x83}, {&(0x7f00000008c0)=""/102, 0x66}, {&(0x7f0000000940)=""/121, 0x79}, {&(0x7f00000009c0)=""/1, 0x1}], 0x7, &(0x7f0000000a80)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r4=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}}, {{&(0x7f0000000b00)=@abs, 0x6e, &(0x7f0000000cc0)=[{&(0x7f0000000b80)=""/205, 0xcd}, {&(0x7f0000000c80)=""/40, 0x28}], 0x2, &(0x7f0000000d00)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, <r5=>0x0}}}, @cred={{0x1c, 0x1, 0x2, {0x0, <r6=>0x0}}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r7=>0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x128}}], 0x2, 0x2000, &(0x7f0000000ec0)={0x77359400})
r8 = syz_open_dev$hiddev(&(0x7f0000000f00), 0x2da4, 0x4000)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000f40)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x4007, @fd=r8, 0x8, 0x0, 0x0, 0x8, 0x1}, 0x100)
write$P9_RSTATu(r7, &(0x7f0000000f80)={0x8b, 0x7d, 0x2, {{0x0, 0x4d, 0x7, 0xfffffffe, {0x80, 0x3, 0x5}, 0x40000, 0x9, 0x6, 0x7, 0xa, '/dev/vcsu\x00', 0xa, '/dev/vcsu\x00', 0x6, '*/\xdb,#.'}, 0x29, 'system_u:object_r:netcontrol_device_t:s0\x00', r6, r5, r6}}, 0x8b)
r9 = io_uring_setup(0x2dca, &(0x7f0000001040)={0x0, 0x7450, 0x0, 0x3, 0x1ec, 0x0, r4})
ioctl$FITRIM(r9, 0xc0185879, &(0x7f00000010c0)={0x2, 0x35, 0x8})

00:08:45 executing program 3:
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x4}}, '.\x00'})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0x0, 0x800, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x1333}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x8, 0xcd, [0x7, 0x8]}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x69d}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x40)
syz_genetlink_get_family_id$SEG6(&(0x7f0000000140), r0)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000180)={{0x0, 0x9, 0xff, 0x10001, 0x900, 0x5, 0x9, 0xd38, 0x1f, 0x7, 0x7f, 0x4, 0x5, 0x36, 0x3}, 0x30, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff)
ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000240)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x7})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000280)={0x0, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}}, 0x10)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0xb0, 0x0, 0x300, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}], @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x2c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}]}], @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "bd4d274185a30452f586fcef81f783e73f850c4dee4f60cc"}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x5}, @NL80211_ATTR_4ADDR={0x5}]}, 0xb0}, 0x1, 0x0, 0x0, 0x40840}, 0x40000)
r1 = memfd_secret(0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000500)={'gretap0\x00', &(0x7f0000000440)={'tunl0\x00', <r2=>0x0, 0x10, 0x40, 0x3ff, 0x5, {{0x1f, 0x4, 0x0, 0x3b, 0x7c, 0x67, 0x0, 0x1, 0x29, 0x0, @empty, @broadcast, {[@cipso={0x86, 0x19, 0x3, [{0x6, 0xa, "52ab71687a57f559"}, {0x2, 0x3, '%'}, {0x5, 0x6, "abb76e41"}]}, @generic={0x94, 0xd, "cfc933a2dc732116d92b04"}, @rr={0x7, 0x7, 0xe1, [@empty]}, @rr={0x7, 0x17, 0xa3, [@remote, @remote, @multicast1, @loopback, @broadcast]}, @timestamp_addr={0x44, 0x24, 0x2b, 0x1, 0xa, [{@rand_addr=0x64010102, 0x401}, {@loopback}, {@empty}, {@multicast2, 0xfff}]}]}}}}})
ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r1, 0xf505, 0x0)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000580), r1)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x4c, r3, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x50009)
r4 = epoll_create(0x0)
syncfs(r4)
ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f00000006c0)={@mcast2, 0x4f, r2})
r5 = syz_open_dev$vcsn(&(0x7f0000000740), 0x6, 0x450000)
syz_genetlink_get_family_id$fou(&(0x7f0000000700), r5)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000780)={{0x1, 0x1, 0x18, r4, {<r6=>r1}}, './file0\x00'})
sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r6, &(0x7f00000009c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000980)={&(0x7f0000000800)={0x14c, 0x0, 0x300, 0x70bd25, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x8001}, {0x6, 0x11, 0x20}, {0x8, 0x15, 0x1f}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x2}, {0x8, 0x15, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xffffff00}, {0x6, 0x11, 0x4}, {0x8, 0x15, 0x7bd5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8}, {0x6, 0x11, 0x9}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x1000}, {0x8, 0x15, 0xffff}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x81}, 0xc1)

00:08:45 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuset.memory_pressure\x00', 0x0, 0x0)
sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x60)
ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40103d0b, &(0x7f0000000140)={0xa9, 0x1})
ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f0000000180)={0x1ca101f09fa2fbec, 0x1, 0x14})
r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x201, 0x0)
r2 = accept4$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, &(0x7f0000000240)=0x10, 0x800)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r3=>r2}, './file0\x00'})
getsockopt$ARPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x63, &(0x7f00000002c0)={'ah\x00'}, &(0x7f0000000300)=0x1e)
ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r3, 0x80489439, &(0x7f0000000340))
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0), 0x501200, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r4, 0xc0505350, &(0x7f0000000400)={{0x80, 0xff}, {0xff, 0x80}, 0x4, 0x1, 0x32})
r5 = pidfd_getfd(r4, r3, 0x0)
ioctl$EVIOCSABS3F(r5, 0x401845ff, &(0x7f0000000480)={0x5, 0x2, 0xc394, 0x8, 0x3, 0x9})
getsockopt$bt_sco_SCO_CONNINFO(r3, 0x11, 0x2, &(0x7f00000004c0)=""/252, &(0x7f00000005c0)=0xfc)
r6 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x0)
lstat(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, <r7=>0x0})
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f00000006c0)={{0x1, 0x1, 0x18, r6, {r7}}, './file0\x00'})
ioctl$PTP_CLOCK_GETCAPS(r5, 0x80503d01, &(0x7f0000000700))
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000780)={0x5, 0x1, 0x1f, 0xfffffff9, 0x3}, 0x14)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f00000007c0)={{0x0, 0x1, 0x5, 0xa, 0x8, 0x0, 0x1, 0x5, 0x0, 0x6, 0x4, 0x0, 0x10000, 0x20, 0x5}, 0x28, [0x0, 0x0, 0x0, 0x0, 0x0]})

00:08:45 executing program 5:
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x1f, 0xc0, 0x20, 0x80, 0x0, 0x6, 0x0, 0x18, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x4}, 0x44001, 0x3, 0x4, 0x0, 0x400, 0x6, 0x5, 0x0, 0x80000000, 0x0, 0x10000}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0xa)
clock_gettime(0x0, &(0x7f0000007f00)={<r0=>0x0, <r1=>0x0})
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000007d40)=[{{&(0x7f0000000080)=@abs, 0x6e, &(0x7f0000001340)=[{&(0x7f0000000100)=""/246, 0xf6}, {&(0x7f0000000200)=""/7, 0x7}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/201, 0xc9}], 0x4, &(0x7f0000001380)=[@rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {<r2=>0x0, 0x0, <r3=>0x0}}}, @cred={{0x1c, 0x1, 0x2, {<r4=>0x0}}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, <r5=>0x0}}}], 0xa8}}, {{&(0x7f0000001440), 0x6e, &(0x7f0000002780)=[{&(0x7f00000014c0)=""/157, 0x9d}, {&(0x7f0000001580)=""/178, 0xb2}, {&(0x7f0000001640)=""/236, 0xec}, {&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000002740)=""/59, 0x3b}], 0x5, &(0x7f0000002800)=[@rights={{0x14, 0x1, 0x1, [<r6=>0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, <r7=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r8=>0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x108}}, {{&(0x7f0000002940), 0x6e, &(0x7f0000002a80)=[{&(0x7f00000029c0)=""/17, 0x11}, {&(0x7f0000002a00)=""/4, 0x4}, {&(0x7f0000002a40)=""/16, 0x10}], 0x3, &(0x7f0000002ac0)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, <r11=>0xffffffffffffffff, <r12=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r13=>0xffffffffffffffff, <r14=>0xffffffffffffffff, <r15=>0xffffffffffffffff, <r16=>0xffffffffffffffff, <r17=>0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {<r18=>0x0}}}, @cred={{0x1c}}], 0x78}}, {{&(0x7f0000002b40), 0x6e, &(0x7f0000003f40)=[{&(0x7f0000002bc0)=""/4096, 0x1000}, {&(0x7f0000003bc0)=""/105, 0x69}, {&(0x7f0000003c40)=""/34, 0x22}, {&(0x7f0000003c80)=""/197, 0xc5}, {&(0x7f0000003d80)=""/46, 0x2e}, {&(0x7f0000003dc0)=""/214, 0xd6}, {&(0x7f0000003ec0)=""/65, 0x41}], 0x7}}, {{&(0x7f0000003fc0)=@abs, 0x6e, &(0x7f00000053c0)=[{&(0x7f0000004040)=""/4096, 0x1000}, {&(0x7f0000005040)=""/53, 0x35}, {&(0x7f0000005080)=""/111, 0x6f}, {&(0x7f0000005100)=""/25, 0x19}, {&(0x7f0000005140)=""/186, 0xba}, {&(0x7f0000005200)=""/22, 0x16}, {&(0x7f0000005240)=""/136, 0x88}, {&(0x7f0000005300)=""/140, 0x8c}], 0x8}}, {{&(0x7f0000005440)=@abs, 0x6e, &(0x7f0000005a40)=[{&(0x7f00000054c0)=""/96, 0x60}, {&(0x7f0000005540)=""/79, 0x4f}, {&(0x7f00000055c0)=""/191, 0xbf}, {&(0x7f0000005680)=""/231, 0xe7}, {&(0x7f0000005780)=""/241, 0xf1}, {&(0x7f0000005880)=""/174, 0xae}, {&(0x7f0000005940)=""/206, 0xce}], 0x7, &(0x7f0000005ac0)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000007c00)=[{&(0x7f0000005b00)=""/4096, 0x1000}, {&(0x7f0000006b00)=""/4096, 0x1000}, {&(0x7f0000007b00)=""/109, 0x6d}, {&(0x7f0000007b80)=""/88, 0x58}], 0x4, &(0x7f0000007c40)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {<r19=>0x0}}}, @rights={{0x20, 0x1, 0x1, [<r20=>0xffffffffffffffff, <r21=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, <r22=>0x0, <r23=>0x0}}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, <r24=>0x0}}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [<r25=>0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf8}}], 0x7, 0x140, &(0x7f0000007f40)={r0, r1+60000000})
syz_open_procfs(r4, &(0x7f0000007f80)='stack\x00')
stat(&(0x7f0000009100)='./file0\x00', &(0x7f0000009140)={0x0, 0x0, 0x0, 0x0, <r26=>0x0})
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r17, 0xc018937b, &(0x7f00000091c0)={{0x1, 0x1, 0x18, <r27=>r25, {r24, <r28=>0xffffffffffffffff}}, './file0\x00'})
sendmmsg$unix(r14, &(0x7f0000009240)=[{{&(0x7f0000007fc0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000090c0)=[{&(0x7f0000008040)="9207585d0ed339e019a377cc665746fcbaae676180fff563d376544cd311f229d2c7eee88b9879912eb0517aba2af4b22dc7955c0cbb2127db84c58b638539970d5d59d8319b863090d0e2de5976d609baa1ccf18e3dd902cc5a5d2716fc21817c61f044730606e91e4d3487d63277c7da5a35082aad310d6cffc24b1c245e3fd3923b824869eb0f28877e6491bc676ffbd6789c0a7c3e05abe214ab21a1f374d6a9434a906b716bbebb5d6d0d1b3c15879f1e2f862d801b6b1418faee2153a3c952f737df569a0259782a5ec6dce5f654d056e0ae219035d1f4d17755d622bdb04e2a37f0ee3f5461f97bd57e634887e2b70350b48219c0e3d4ed9df8f7a5d1d7edd19abdd85549856d16b7b48d806d66307ca01582af9f2d3b023cb85fcf769cc9dc1eb9e832266c94ec9fc3f267d8ca468ef365bf571027cf39a83043a2c130c9828618138d2128eb92390718a0c1886fd5377f73409814bfbf0624b5a0be9d1918441284e20268615130cb1e9e35eaa9e1ba2c8c4ed1b99e4bc92302f6139a758e85f0934b86831fa976384c12bbb811ce63df69aa045ee1496e6359aa2de69e5893c94fe891acf41526e425a69af1e6860571e791a2eaa558cb242e3cd94d98418706634fa765311271292d7e29420193adc935ae36152fecd928e512c5a9c31519f9dda74b00260b2fcedd67054ae84fc596d92b4d74c287ab2485db07a10d9fe0eda6dccc6e53cebc596a1fdea39910bec0c88b9c32cd1083375ae5cb394092f1123b9494c8890b1bd51418e45d45253c01911e7fc02bb9b8aa31d0d3f5993fcc800b2ee31d7e02dd071a107293fcb540de764d16a4b0ccdbef1bc933c9e1cce40ab9535a3c8b8c265d6bb15a6d057b984407e8b678bdad2542bd4770fdd8916d52a61d7c810a1805f318b423db2fd19b4012ba260b48aa0cfc71e4201911eafffe65993ad540bfa2e4396364ceb290e6d0a351b5eb0a1b2b2205a622fce12bfa0b78d1b0ef1e2c2efe9cf6163383a16b343771bca6287c2f95876d51bc7e84dc16b444d6bd93937d9590550d9c215f209538e2522d14d22cd0c2523eaf8d33e0310744e909d13094c6609a62a6bf3c250d6ec147e0864ebdddac0ee8309bd1ef155acbe5155d2bd75f1d50399c90204013a37066899a0160f2f7d1c832887c162a41e57f783b00381cf2b9b38bf8eaf34f9acc12b80b1cfbd5adece85f6597731834c0d283ba67806970882f644581e267b95881953fc845852de14e2349233481762d554b645c7118a99511b68bccf62da9b6454cbbb2484996dae5ed5db6e9afcd33e3129e81b1249d336c8fee4969723ffeadfa9546e45784f8007ee7f7a36bb3a5ba173d3ae749c03b91ccde9b588659498a4e3ae85031f4af908cc20892ff7fbef4db4f9eb47ba84225638ae16445c1b9a2b80702f6d63fbe3cabf4b5296f7ec98f47433ab651775d43243692a4c7c3aa2f8f619d54c2033ae8fbe84642885d152779f2f877eb5bd650eac3489a24c390e014013654bd71e3fafdb1aa191dbaee718d94cad03e5afc1bb1824e13ef568e5941ffe724bdf7fa5ac02ad8d89a2b663b6586c77565f48b8f827024573ca3d1f29f943e9fda4f3bc26ff637931dfb4e210aa05b9d5a9d113f93488524c69ff6ee80041d07a3e87d8babf5584c025c8dd4c34f98ba635a086de1a39d9460fce3d893de7a71cdeed0fd4d5cd35323c6993b3987bba44f09df6505fa7f3baa53691e77c5627ca4903139695d4ceefea4d6ca946740dc69e6188bc05d5e49a4baa6c93c855b9b265fc85c374e8ae0c9defb8fe377a9e63039a48dee3cdb86ccc034b59a636e5dbbf89a592450309d1c98739a4ebb909bf0b81a6e6b9d547b79f919bc4ff5218efe58ad92ce6fa05f4f699a4e74a77ecce5137e7f1c5cd14052000c1c855fc09b939098aba8e5627f1b3440972a7293ae855859a019fc50e6475c7346c1b344a52173ddbc2a535f3ab20788e64fcb6c9dbd2b88d7538f364a368e62d7bc0c014d952b6644c8105eb065ab1e6e2a803c39fa5c9c098396e9a7e6ce6e45dfdf4b6d67504268d27816b6c920ce6792fb5ee3e1551d3443ce3e3a0d7b472e7a01cc40d2315802ae292f01b2d8a8b483d4377a263aa2e8c535547998b5e9238547b08a7243cb05e876470e16d79db967be3780385acc584a80b7fd20c88cf6242a5c016b283a2374e5df4639727b4bf2d54ab81ef6896638c0a8b6f76523c2d4360cc190a049a631732f53fb38eef50bedaa9d36417e111db0d3e520080c5355769d550ba34f2a73d18640be1c90545fc0151212f0d3bde13b8a2a42c564cff9c7c656b1c0405489603fd9445c83ec39ba2a3001f8c4c88073ee84fd43e89ce886202a0fa0258688fda9540525ffef6b86dc40a8924718c616234e07f404606e12a5fa30f4b65c335c6e84d34d09d3cca754b162f2dfc5d8f6d0525a9a136efcd09a39321d188c2a7a625c355c9c52cfd59f27dee371ec4b344ef5a0a8c728b9a0dbda62a4c54ddd1d8257d52589ac721d0114e47ab0ada9860ba70afaaf3197e12f046e095719b41dd4dac3b903c67ddfceac0a4a8d401df4218a99a390f2115452ef484f2ff3c484afa65acd30b729151375a7a82b09038fbcd30da1012a7b6789d1fcff9db55fa7909dc41c98efcaff5dce8eb0303d664f575301f3d12bb7ce1dd10bac4af80e12d8a6c2b55fb38b8963b70fcb2eabf1dddbb9d35e18d2e25b482988ae8a933720d23ded98925c446752053d8d2041e35a3dfb551242854f2c2270d0413df0fd28953f83478c2ed202c12a528994d0598343b5e04694cb86114c762440af0a1837308259e281623a686e5864bbf56c1c61c599eb9833585fd1233552452739fcaae5b4a0bf17f1a8f6d9d536ffad49e3c7c56825436b698cbd8b696427e28326bf3cd5c8d961422cf6c5115a8c3d9ae8f357e2560ae87dc84a20a0de634d3c694df5d462425813c648ce7829eb38f52918fd475c43f1b5ffdaa085b973ae14804b9dd3abaa5a69e9b2e7c12bc857e83617a4b1655012bc192700c9f6c9d4a423469591c57d3ec40001863cc8941282b9b6c8d00ce67834ea984bf35759725f1e2130d6f1c15324c08df87f6b06c0a8430b05f346f9ebe8d3e2bc5ea98db79413699bfc18e566a245653f3460a4fe1f2b8852d704e81786f5995872ea93de1d30985d87126332cd86b1414d6ee9082f7e07bb2ec6427f69e85a927df98a417e6ac6b5cabfea889fdf3c11cbc79a5dee5020f9eca8a42085034df109c9ed5ce0a6524c98b62f163811e06eee5b43edba7af612966fdc475e13c72ff72e731868154b4f8d3ef25db8536771ff84504f9970b742957d296a12b3a222311def381612ab70d26ce6f063d300ee84ff6a21579a8cf3a8cd5bdbf24b18b756cb83e20b060af2686a68178f9ce8d40b148409f29845d02f34556f4f1952f0cf8cf888d606685d239e3d9da24afd0ef39c826375efdbf43e78f3ecce8b495ef47e08bc2050d4a8c90fdee8b6e731b04b0ed9cb1ee36abc9defe9101d7063364ae1ab9c0c31042e158d649ca30f5850683e193ed0fb0c5230e62b361529cedbcafcf97c404f5145a8c7589fc3d03b60d00b19cb24d8a7c20adc016fd7cb01ace10c048a5b16e55f7c3435d3f387c47843935ebdb564e9072cde4afb9d495d56932e0b4e06f1ab796c79f03f82c6811f93b223df35c9dae53a26724bbc89769cc444ac894c43556be255941b13088d785831ca391bddd7149516d8507c215f6952ace1ed4717d761bb812f9d08e8102a11e2081ecbff5eed487353e6dfdabd89b26e61c1723f8e1933718c693697e8cb1abac4edb1ef04afb9678ff29c7cea82c7674b97e3c18dae9fe9d35cd581730b8abdd5f1f237f5850e1a229b02dee7faa714e37eee6579fc811a2eae111ef79fffdff32e56c3fad43bfb0598863b5b4ca8c1b0785df12ce243f13a4ff6a2214e46d0bda1c04b54448ba2b34072a68d99095dc3aedf8d73a4daf042a3b53c0b360d860b24b6e368bd64654bbbc98ce03763d7727ced4ec1711a901118814f8babc57d373acc0dadd93faef95a28dc59ff191df4a249fb7fa5a425ae112bf89a42635ea19ada6c3c421487751a1f61fa9742458dabdf6d2970cac52d11615d904dc596999c683e296ed098c98db1cf17085984fb7133164feb2b3ad00b39474bbc0d03befa322a8123975ddb9f1cd8ba1ae80af3daff5c5fd61c9f58f3c69d6a6f823188a33170b4357cfbc5c5a8ee38cad60d9fe1f7fd295df07632b237eab2f30e2c1dd5163336a830d7897ec7630fc72bf767ca35be201e727899a7e284494ee92b25266838e66a5b36dd08db400116cc4f8dddf294f41e546a8b6a28a456d8a8e328e191494a1194c401601418735517b8231856bb127e4ac801efcb22dd48767c154277faa0f25745c62641502b55a8bef977891d5256a1984dbd2b633d2a0a32e9187af1bd8981a59585dd2ca57c4f68e9fdb1bfccb976495a68a1e4d93e2ba0024210c975564e15c0cb5abfb3247cd0e4a08d13b796e8c1d74b5433efaabb7d64303a0efc8a119d868d94b0e30f00ba8d0a3e889664792b79efa8aa51124bb3430eb7d770f5ecf5efd4142507bc1c631fcfba09d170b6ab99cdadb9184aacdf2c6ae155ea71d1435c118cf474656270ed9014a44d6919bd40c016af2f2a82efe418ba396eda86026b3623cd0611b534c209e7f5e785532e93b38a4e4c8bd4a2408014e71a023977058d48109efded8b6117470b46cc2bc272127e0bb872350be679db50904e795061882a266e850a27f57234a4dce3e39195bdc8639e72266560b9c3de62def854d8c063b8fc4788cde1c8a6ee95977ac4494ac2e862b2025a8da0e01a7c301ec20524f5811c3d159d1df091d23a90e6602d411ae66a79a1b40bb1ad3becf744e11bff28ae3208c8af1fad2cb9b3a0afc0afb1862ff2476ea25567777acaaaecef459850a2419358d85e237ce1483bbb1a065131a473cc52b6ff870de477a20880394a9dc4c171cfa8505f81304116aca14f9658d8b08268206b1fbb96c8e4c7f55c5d99d0ca173475c9e4751a108b79def531d38e3c89433dd8f4799c2a638119f33ba1c31823997384387d3e450a796b293d78fb03ad290a60784b7db376a3b5403a768ed3e3699cd61c38fc6f03c613f7440c747557b02f4e5dab1a0e381ac19a70fdc97a6bc1b342524eb8fdb64883be0164b991a52ab1af7312f0ff295b7b245d63353e7a6a2572e35bf398c7f920b1d046d2ca92ba2ae095ea31c492d6ad866f92463b12379a2b94cf00918e8f929e466265d93d3bb2c8999ee943354644458dde2bab41b0589f0626433341f44758e77d2ae06c335b1b6fecf23797507be56110e5c8ef9d37568d9ac57a6064dfcb8e7e8c6f7cee33d98b6d7dba53b4322fe4463ce8b13cf52aa9a751fa421040e40407eae215cb778481bce60ffd8069b20956db4a58ec620d93fd4b0ce10f1ae6a1f4b90dc502c5de658d68af164ed57db631ec61651e179b751d99e6cd34e47556e9a5b856d34eb59055a6d6f50532491b1113862a8c7238355293a06266ad7425bf4a554e0d0233573a68ba372d4e10071103b77e308cc8f67e58bd2aecce8ea3691ba87385519f4e34ec4112175ba9dcf7b458d5baaf9d1439c715a8246b6a4fd330b861789854ef7331de89e3685202ff5fad610a1c7a6e873481bdf98f8f087541ddae9c3ef87f20a3745203fa6b4d699967f509514cac41", 0x1000}, {&(0x7f0000009040)="f77dbdff477b5f6aa3a8e903c987bcbf417fdff33db094382c0ee1054421", 0x1e}, {&(0x7f0000009080)="63e4b51339845753915ca12372fce73156d934", 0x13}], 0x3, &(0x7f0000009200)=[@cred={{0x1c, 0x1, 0x2, {r19, r26, r28}}}], 0x20, 0x20040001}}], 0x1, 0x14004094)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r10, 0xc0189372, &(0x7f0000009900)={{0x1, 0x1, 0x18, <r29=>0xffffffffffffffff, {0x75}}, '.\x00'})
r30 = openat2$dir(0xffffffffffffff9c, &(0x7f0000009940)='./file0\x00', &(0x7f0000009980)={0xc4340, 0x0, 0x7}, 0x18)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f00000099c0)={0x0, <r31=>0x0})
r32 = socket$inet(0x2, 0x4, 0x0)
r33 = openat(r7, &(0x7f0000009a40)='./file0\x00', 0x101040, 0x4)
pipe(&(0x7f0000009a80)={0xffffffffffffffff, <r34=>0xffffffffffffffff})
[   84.275780] audit: type=1400 audit(1756512525.631:7): avc:  denied  { execmem } for  pid=272 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
sendmmsg$unix(r9, &(0x7f000000a100)=[{{&(0x7f0000009280)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000009700)=[{&(0x7f0000009300)="cf60e02d0805323cff12105b6dd74ba3ef08250f9fb5516c0c0804080d492e48ff3069bfdc68194e9b7a14baeba3a770e8", 0x31}, {&(0x7f0000009340)="69b7bb9104d712b98f8c5f875edd391eedf23eb3bb48d40f215473b96a6e73b5cab120332c2120e9e637de05ba58cb7eed5046828e9605cf3db8035a154b51e0c6415916eecfeaf4a780ef885664ae59f0c2e0bf7a35aff39883e557b3f02e893d565e87b5b196099987f39b9b7146fce7cbca77b945d5647a84e0f2d551f52dd8e310d6331a1147de93dd5022338ee881b2127794abbfb032dea706288eefa79549", 0xa2}, {&(0x7f0000009400)="8864501fee11ba63b1ba8604baf8f4a6892c76f764fddf5e073b62fbddcff69e70b4a0f7c81a4597c109200dbd75647acff8250622ad5afe03445684f2abeb92d360c5ecc37d2199f43a6e2ab1c9d797997b3d3e60ddceaa66dddee49bb26f9ca97c4812250b61a816751ea97abb730f3563dbb00de51cb24babc8c2560ee627419a735d5640b4cb81c91c91c2667909e6d1befe20fef4addec335cec080fee3062f59beb0e9e2e4f9b4a4e2c5a00678f8ec65632fb5714650f33e616603be6d1673a772b9265aaab6", 0xc9}, {&(0x7f0000009500)="a7f0c67cbf02e2b6daae75ba93ef04fc2f4729e15deebe68440c9cb216d1d4211593a40e5f28f24c23b4fbba3597739d95eb96cee83c1c525650a4ed5ae4c8dc3c927645b7b3ff5183f332847a38756bb284a092b57616906fd9ebf4c050a0e66194fbd30cc3da008e9799a1505e75f69ca0e32eff582f7c12082b08c1938665aba668d85e7092f09629af726cee9e8cd4ff66a0fffde2f010ddd4ef26c0c6f4cd741f5e5f3bb7faa7a67e954b6d00a7ac8f6c5499c668ef233fb47d9278b3cdf4930df8379d074aa9fa2fbcf09069d2e32e72810eeedf", 0xd7}, {&(0x7f0000009600)="fe24179ea09de70e1c78f8c11afc6521d209f29b1d5b9e56a5de8bb27bf2c2b6134e7f6ee1309f1abf06412694fce67290c81d6cb54bf8db1ce89da9e91a95e068ce8511dc5442b1d5c0e62d2b766b9f22e803f797157a2c8174f954cf733cab0a60698f88357e54", 0x68}, {&(0x7f0000009680)="dbd59f37ae03941ce3221f3bc34727dbc14c87451e8ea4cb772040352a3ee5671af19b7162af3de9ed2883f637c715e553a16ddedeb9cc3038e0280813348eedaf8b0d241931b9f76928cf5db56ff13caf908102518c612cf3f25984c9a6efcc75f546edef3cdb2a89bba4c4c3128f1300337f14ec3d409f6b7abe1c11", 0x7d}], 0x6, 0x0, 0x0, 0x40}}, {{0x0, 0x0, &(0x7f00000098c0)=[{&(0x7f0000009780)="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", 0xfc}, {&(0x7f0000009880)="61175e003f08957c3be092c786004b484da84ce1b8", 0x15}], 0x2, &(0x7f0000009ac0)=[@cred={{0x1c, 0x1, 0x2, {r18, r22, r23}}}, @rights={{0x28, 0x1, 0x1, [r13, r16, r29, r15, r30, r20]}}, @cred={{0x1c, 0x1, 0x2, {r31, r5, r3}}}, @rights={{0x28, 0x1, 0x1, [r32, r33, r15, r34, r21, r12]}}], 0x90, 0x220540d5}}, {{&(0x7f0000009b80)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f000000a080)=[{&(0x7f0000009c00)="30c0", 0x2}, {&(0x7f0000009c40)="35f30506431fe4d3548e06f12dd7752774c8f778904e8e5d14a89c6b30f03e1ed948ce847cb09c686fa91f58b8aed07149451ac71ad686fb531b891b36a2979066275a1f9af6b9fa6c16154af9e4b827be5ece3d67ebb124adb224882fa438581df19696e61c19130dfaf697390e", 0x6e}, {&(0x7f0000009cc0)="fe3c58e693c096038a0b0f13719d320c738a61888eaa6fd913928bf8a985452f6fcbe91cdcd82a8aef8367b126945f18fa020b256c71f10a6af2dcb8dde9f88d2685dc95248cf99366029b26125413b97dba39c0dd619cf552090caf5b37ba03e927004f1f3eafd97a8057e3773135f5e2244888740b51aacc95b41c570b416446021157c0e032fea56fabe251b60cf843fdf6b16711e1e79cd542395530fb4ec8bb8b068e67317ca16fbe767ec3634868403478a2e479ec2eaaf7303ad07a5bf701b7bea17987b81f18d463ba5b0bed30cd77db70563eed7a9ff0", 0xdb}, {&(0x7f0000009dc0)="ed172eb3b71a71a4cf20376394c3978db854a3cb256c0ae5be0653d6177b213e9b2c8e09453ccb4e73dbbaecb026d7187008d83193ce9d4dc40eb8e76b3f414eeeadc3ae87d351c382ffe30cd6", 0x4d}, {&(0x7f0000009e40)="a7792fc524604312d9dd2e1c6e4562396d6c1f998c6959dd96a70cc811ce82dd87e662f17cf553ca6083feff13dba2209ff029abf43c3fc83bf1bfcd746ca7fce0f4934b8423bedf1e3101247b2ecc68f67c28e6fde9072feee47ae99f7792af8ab92c1618e042152f9954a54427554611ec981477b477e64f4c122f", 0x7c}, {&(0x7f0000009ec0)="76bb5a488c3c0a700380ddd95d42b3aa613153baea1a9e6ca7d3ea45ef9b206b39f6a4885195cc8182e736cce3179d6ef0885c555495735b409412f0ab5fa4db4682e01c35f7d6fe45f85d2728906c39bf01804b1c5b73fa67fa66a2bf0707b93f17e4fa1385f6d834bd1cfa12a45ef64862b622a04b6a5598a1df97d31d0ed6d1b41607e2497d8c4c2f98152d05bb48c33b06476d2d101168c08b02b74b127dba575f03b57fa8836ceb909ea401200139b88523bad70fb5eaceeb8f0d138579d52c127b8b3382e6aea24e844bc51df2ec2c4fbf7d6860fbe9690eb569d6a2c22b80f07f330c6a5bf93a59d756a27d618a3c", 0xf2}, {&(0x7f0000009fc0)="ac3d6c3ca8959cf0cc", 0x9}, {&(0x7f000000a000)="ff8fa6d2d5541614dca1551fdec0a6ad79a48148dc5b4920dcfa5d3141bae4df56137802738fa9bd52a07ff90bf32cad9e3da69aa956acb4818ca577c669537be8cc5a4c06fc853d2831e832e5b5d5d6954a9ba83c863e30c19acde59e0f2f9d076ac18094fd5774", 0x68}], 0x8, 0x0, 0x0, 0x48000}}], 0x3, 0x0)
epoll_pwait2(r27, &(0x7f000000a1c0)=[{}, {}, {}, {}], 0x4, &(0x7f000000a200), &(0x7f000000a240)={[0x2]}, 0x8)
lgetxattr(&(0x7f000000a280)='./file0\x00', &(0x7f000000a2c0)=@random={'os2.', 'stack\x00'}, &(0x7f000000a300)=""/252, 0xfc)
ioctl$BTRFS_IOC_SCRUB_CANCEL(r25, 0x941c, 0x0)
epoll_ctl$EPOLL_CTL_MOD(r8, 0x3, 0xffffffffffffffff, &(0x7f000000a400)={0x10000006})
r35 = getpgid(0xffffffffffffffff)
sendmsg$nl_netfilter(r11, &(0x7f000000a8c0)={&(0x7f000000a440)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f000000a880)={&(0x7f000000a480)={0x3e4, 0x2, 0x3, 0x3, 0x70bd26, 0x25dfdbfb, {0x7, 0x0, 0x7}, [@generic="9b0f141d51069b6ec98c86bd86a10df0066b9a3a6851dd1fd95f0d22da5c7ef976ec7abe98a2cd891e719da3b767ca53bf7aec6bdc4dd632ea9f", @typed={0x4, 0x82}, @typed={0x8, 0x1a, 0x0, 0x0, @ipv4=@private=0xa010100}, @nested={0xfc, 0xf, 0x0, 0x1, [@generic="acba5c7aced824607b7e53a95796b8c14c6ce44f425e8be7", @generic="fd55a676c6de2cca3cdfa40419c195fc001bb9948f8c152b5c4a8163fa2ce1d49ff03611d36921ecac69fde0f9ed3fca7fb51241b721adc0229b2864310221de0dfe599059f0092426887d8ad20a80ebd17501c3b360162325d69faec942f4ef143361c94f75352cf2338f9c5609b420d232833eeb2309275e126d94597acbb4e9d6b94fb4a9354444a32dd4b46e1ef5c3bf9f8ae734e77e72e9d6618b58676784a4760747f57b2239a3cbdbb205e04773f8f179242b9bd228e068a7d4fffce7291372eac6fe411b84aef40e54b6261792bf76df5a3f0e47", @typed={0x8, 0x6b, 0x0, 0x0, @pid=r2}]}, @nested={0x1f0, 0x15, 0x0, 0x1, [@typed={0x8, 0x46, 0x0, 0x0, @ipv4=@multicast2}, @generic="14931525868ea8ac9401a0d12940ad5547d32dc1b5877a2d9c45c963b443e48f2a3948f31a47abc3aaf91f4878e392cb14b0296c9347102d7f67c3582facfeadbee171931ad81848e666e80e6c4749cfc5a2473fdcfd6da4fd5f243db4711ba37aeabf8247c3e282e38745d919f7e54854ab171ad8008cb5fd439aa0a3234be3ee282ee15c8c4a01fe09abc694eed713f3645e7244fae5c2968218d845eb456804da3d4b3ca02af52d5752d24355e74f6b283a143f13634a50f5ba9a7f0b62d2fe04b4e9ba079a926db836ddd72fa964cb4369985be5a8e7c5cbce26b325b8924e6d641f43d8452b46ed588546", @typed={0x14, 0x3e, 0x0, 0x0, @ipv6=@mcast1}, @generic="5f3e38f53c0755021626cfa46424c7baef8ad96bf7689f61e6dc4983c092d1ae01186002d1913b5cac9812760ca5ba25081f0390cf64a68d33f4662025c8f86cd85e111ebe08c02555937c12cfaa21e416c40c85bb361809e0b7441222458d138508decbc5bd01d36c8a82d059a9a5a0af9dfc7719daf5931a2d036e8ff043ba13e42512d461295b902139761fdfc304d5266cc1fc268872b67d54262491295166f957fec4da6035f75afce5bc58b8870e2e3a58180e9e148c166021208ae26e995e9b6f3d5bbe522a376d72af08282ed9852d87e8db6e396eb1cfd6b15c63b28c9dc7"]}, @generic="1a906538b5a4883e7e20f9d212db268bcec14e7f902460f873c0f8b52252daea8098d7eb240718b75f3b1f1e50793fc81467ea291219d50ea6b0f0feb7de7ebc26ea", @typed={0x8, 0x68, 0x0, 0x0, @pid=r35}, @nested={0x52, 0x40, 0x0, 0x1, [@generic="3ed4772ae2303c26eaecfb55dd483c7107b9dabc04d99f9be1bca6b28c4b46b2f36fcec0db50b1f88773", @typed={0x8, 0x5f, 0x0, 0x0, @ipv4=@rand_addr=0x64010100}, @typed={0x14, 0x61, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @typed={0x4, 0x31}, @typed={0x4, 0x89}]}]}, 0x3e4}, 0x1, 0x0, 0x0, 0x200000c0}, 0x800)

00:08:45 executing program 6:
r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x3, 0x1, &(0x7f0000000140)=[{&(0x7f0000000080)="fd7306d21159f1b577ed01b5067703f61520ddf36aa98581bad9e42a3c5a11df51c6c2d32ba752942a0abccf7d06d8a0a5f5fd10d2517f3f1fcb9b48bac1ab530eb82b79cc14e738bf18fdc241b2d6651e08260e54e45bbb6f0af7c89d62955510c84640ff0386646dfb904ff9e4d422931f87945b7a9f4487aa17f698cda5b23859210c56ca45b58372b172b8d53bb064901a06776a0cf9e5e74f8b5069626c61e74ca04c947528161deafd35b62a809aa5fd6f09688a00f9753f612cffd2", 0xbf, 0x5}], 0x20, &(0x7f0000000180)={[{@nr_inodes={'nr_inodes', 0x3d, [0x36, 0x70, 0x32, 0x38, 0x78, 0x6d, 0x35, 0x78, 0x70]}}], [{@dont_hash}, {@appraise_type}, {@hash}, {@smackfsdef={'smackfsdef', 0x3d, ']!-'}}, {@obj_user={'obj_user', 0x3d, '+)-'}}, {@obj_user={'obj_user', 0x3d, '({'}}, {@permit_directio}, {@dont_appraise}]})
mknodat$loop(r0, &(0x7f0000000200)='./file0\x00', 0x20, 0x1)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r1=>r0, {0x6}}, './file0\x00'})
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000002c0)={0x0, <r2=>0x0}, &(0x7f0000000300)=0xc)
fchownat(r1, &(0x7f0000000280)='./file0\x00', r2, 0xee00, 0x1000)
accept$packet(r1, &(0x7f0000000440)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000480)=0x14)
ioctl$sock_ipv6_tunnel_SIOCGETPRL(r1, 0x89f4, &(0x7f0000000540)={'syztnl1\x00', &(0x7f00000004c0)={'ip6gre0\x00', <r4=>0x0, 0x2f, 0x4, 0x4, 0x5, 0x2, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x707, 0x9, 0x1}})
ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000600)={'syztnl0\x00', &(0x7f0000000580)={'ip6_vti0\x00', <r5=>0x0, 0x0, 0x9, 0xc1, 0xfef, 0x40, @local, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8000, 0x10, 0xfffff33a, 0x2}})
sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000000e00)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000640)={0x748, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [{{0x8}, {0x1b0, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}]}}, {{0x8}, {0x124, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x17}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8}, {0x15c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffff}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6a}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}, {0x8}}}]}}, {{0x8}, {0x1e8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x8, 0x0, 0x81, 0x401}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}}, {0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0x5, 0xbe, 0x3f}, {0x7, 0xb, 0xd0, 0x3}, {0x0, 0x2, 0x12}, {0x3, 0x5, 0x5, 0xa3}, {0x3a3, 0x4, 0x2, 0xfffffff8}, {0x1f, 0xeb, 0xb6, 0x4}, {0x1, 0x1f, 0x3, 0x2}, {0x200, 0x16, 0x6, 0x6}]}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4c38}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}, {0x8}}}]}}]}, 0x748}, 0x1, 0x0, 0x0, 0x24004810}, 0x20004884)
r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000e40)='./file0\x00', &(0x7f0000000e80)={0x100000, 0x2}, 0x18)
mknodat$loop(r6, &(0x7f0000000ec0)='./file0\x00', 0x100, 0x1)
truncate(&(0x7f0000000f00)='./file0\x00', 0x4)
r7 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000f40), 0x50080, 0x0)
r8 = syz_genetlink_get_family_id$gtp(&(0x7f0000000fc0), r1)
sendmsg$GTP_CMD_NEWPDP(r7, &(0x7f0000001080)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001040)={&(0x7f0000001000)={0x1c, r8, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40001}, 0x40000011)
r9 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r9, 0x50009417, &(0x7f00000010c0)={{r7}, 0x0, 0x16, @unused=[0x1, 0xd8, 0x7f, 0x2], @subvolid=0x7f})
getpeername$inet6(0xffffffffffffffff, &(0x7f00000020c0)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @remote}}, &(0x7f0000002100)=0x1c)
sendmmsg$inet6(r1, &(0x7f00000026c0)=[{{0x0, 0x0, &(0x7f0000002400)=[{&(0x7f0000002140)="472a4fdf95dfe732464467b9aeed39480bb6728eac49d81e4d60809dfa4cfa50dcf0a8ec25d358c3fbe0eb391e38439b58cb69d8123cfd1eb323dbfab1948a0116b936b5589d8ccad5eb6ec17256957cefb564c3dc33c9487419e823f050b09d19a3df3012e1dcd1448d86c3dc9d53740a13a2265a3b923a0691d00ce9a2d8b1e4df", 0x82}, {&(0x7f0000002200)="f73d734bf1ce39b07a3283b2dd9fc9b8", 0x10}, {&(0x7f0000002240)="91afb206029454b38feea0c34abe774a91f091c3bbfcd3b64a49cf55acae060a934f0ff24df2b70632a3", 0x2a}, {&(0x7f0000002280)="1059d3ea9ab061f93ce6de15424d0a525fccfbb2b0a11e141ce9cffcd42aba2d3a1da791c2962cc41d3c4c4635d7c32a805830847e563f4ac90b8c4d82f94d1e76681ed5f5bcc0e26c18c028c43ba6f010b5ab45744445d9a86119afedd355630d4b749ce8e8a35f808aba308d3709a2e5ecedd8dee7ec675d1b73ceaa93266ffacddcc112ebceae951e8ed07bb464aed60a2cdeb213938949473251b46a9fef32036ab61e", 0xa5}, {&(0x7f0000002340)="cd13c989aa22e35aea80e0e5ab4786dc092cee63a9ac1c0d9fee319ff8f16abf13edc2d23554a5e1fa86376d9fd5f2a101d6f593b11d792753cb36a32f216ff2abf6de40fa7f04b45f0692030bf3fbba91bd5d9eecc8aeacb92adbad9ef929c2927e74adff8614877af872e9ea26fc2f23f67d334b2926f156aff66088303aaafec1ad615fa971dc7a86ab8874d8c5ad78c779334197c7ebcc224b3b41b38ae58f645c9d8f8e", 0xa6}], 0x5, &(0x7f0000002480)=[@rthdr={{0x88, 0x29, 0x39, {0x3a, 0xe, 0x0, 0x0, 0x0, [@dev={0xfe, 0x80, '\x00', 0x32}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, @empty, @empty, @local, @private0={0xfc, 0x0, '\x00', 0x1}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x7}}, @dstopts={{0xf0, 0x29, 0x37, {0x1d, 0x1a, '\x00', [@generic={0x3, 0xd5, "88eeff0c3e1865b81f5b494396095070456cc181c39253e8c44317e8c75150ca36bcb6dda11eefb9319647b7b3ad7bc1d1e466be20a585b9cd82bf590bbda1547af3a2ff4a15047c09eaac436dc55b23dc614849367dc5aaf874f9adf19b3f508b5212c0a3490f821f2b92e691314b2089cfd0980e05c771411223ea3ef4306c7eabe3cc9a446354e031970cc5ee4364b823d67662a6a95ad214e2b25a8141a6128e32cefeb2519c0122f43053c4189c1a3794c1802f11c303974475f2d6b59a4a34017d9c969600458133434157a98517a92649bc"}]}}}, @tclass={{0x14, 0x29, 0x43, 0x5}}, @dstopts={{0x28, 0x29, 0x37, {0x4, 0x1, '\x00', [@padn, @jumbo={0xc2, 0x4, 0x8}, @enc_lim={0x4, 0x1, 0x9}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x1ff}}, @hoplimit={{0x14, 0x29, 0x34, 0x7}}, @pktinfo={{0x24, 0x29, 0x32, {@mcast1, r3}}}], 0x228}}], 0x1, 0x200c880)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000002800)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000002740)=0x80, &(0x7f0000002780)=@generic}, 0xffff7b9e)

[   85.454520] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   85.455851] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   85.459828] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   85.464808] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   85.469562] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   85.512841] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   85.518222] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   85.520304] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   85.524121] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   85.526111] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   85.547728] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   85.554670] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   85.558480] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   85.561521] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   85.564773] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   85.570460] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   85.579375] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   85.582086] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   85.584072] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   85.586942] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   85.614523] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[   85.627165] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[   85.630057] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[   85.636748] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   85.638835] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   85.641463] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   85.644644] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   85.646796] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   85.648495] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[   85.658890] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   85.660493] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[   85.660893] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   85.666563] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[   85.672478] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   85.673249] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[   85.673709] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[   85.684496] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   85.706523] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[   85.708782] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   85.724322] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[   87.552217] Bluetooth: hci1: command tx timeout
[   87.553024] Bluetooth: hci0: command tx timeout
[   87.679353] Bluetooth: hci2: command tx timeout
[   87.680298] Bluetooth: hci3: command tx timeout
[   87.743677] Bluetooth: hci6: command tx timeout
[   87.744347] Bluetooth: hci5: command tx timeout
[   87.807317] Bluetooth: hci4: command tx timeout
[   87.808011] Bluetooth: hci7: command tx timeout
[   89.601213] Bluetooth: hci0: command tx timeout
[   89.601988] Bluetooth: hci1: command tx timeout
[   89.727424] Bluetooth: hci2: command tx timeout
[   89.729213] Bluetooth: hci3: command tx timeout
[   89.791330] Bluetooth: hci6: command tx timeout
[   89.792070] Bluetooth: hci5: command tx timeout
[   89.855289] Bluetooth: hci4: command tx timeout
[   89.856028] Bluetooth: hci7: command tx timeout
[   91.647254] Bluetooth: hci1: command tx timeout
[   91.647713] Bluetooth: hci0: command tx timeout
[   91.775233] Bluetooth: hci2: command tx timeout
[   91.775682] Bluetooth: hci3: command tx timeout
[   91.839245] Bluetooth: hci5: command tx timeout
[   91.839700] Bluetooth: hci6: command tx timeout
[   91.903309] Bluetooth: hci7: command tx timeout
[   91.903763] Bluetooth: hci4: command tx timeout
[   93.695353] Bluetooth: hci1: command tx timeout
[   93.695456] Bluetooth: hci0: command tx timeout
[   93.823254] Bluetooth: hci3: command tx timeout
[   93.823727] Bluetooth: hci2: command tx timeout
[   93.889211] Bluetooth: hci6: command tx timeout
[   93.889232] Bluetooth: hci5: command tx timeout
[   93.951225] Bluetooth: hci7: command tx timeout
[   93.952367] Bluetooth: hci4: command tx timeout
[  125.136245] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  125.136927] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  125.323346] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  125.323996] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  125.522263] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  125.522907] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
00:09:26 executing program 2:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0)
r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x40040, 0x0)
kcmp(0xffffffffffffffff, 0x0, 0x5, r0, r1)
preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/69, 0x45}, {&(0x7f0000000100)=""/154, 0x9a}], 0x2, 0xf9, 0xffffffff)
ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0x123198)
r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000200), 0x111000, 0x0)
fsetxattr$security_ima(r2, &(0x7f0000000240), &(0x7f0000000280)=@md5={0x1, "1e8505dc530dccca2406a9b07912a9a6"}, 0x11, 0x2)
ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000300)={&(0x7f00000002c0)=[0x0], 0x1, 0x80000000})
fsetxattr$security_selinux(r0, &(0x7f0000000340), &(0x7f0000000380)='system_u:object_r:netcontrol_device_t:s0\x00', 0x29, 0x2)
ioctl$INCFS_IOC_FILL_BLOCKS(r1, 0x80106720, &(0x7f0000000480)={0x1, &(0x7f0000000440)=[{0x2, 0x6a, &(0x7f00000003c0)="882045cd667fc91ecce77929041d8d1b06b7de8bbf2657a762ce3868ee0f431eb9b9d9efe4877f3220a0a50be32a38315f5114feda93e83c0e68c9c9383ea50610b4d2f6bb855f60cdebcabb547bf3e1ccfead996255620e14319a24e0bd0f5698bad81374bc4ca3febd"}]})
fadvise64(r0, 0xfffffffffffffff7, 0x43f8, 0x1)
r3 = accept$unix(r0, &(0x7f00000004c0)=@abs, &(0x7f0000000540)=0x6e)
ioctl$AUTOFS_IOC_CATATONIC(r3, 0x9362, 0x0)
ioctl$PTP_PIN_SETFUNC(r1, 0x40603d07, &(0x7f0000000580)={'\x00', 0x9, 0x1, 0xfffffeff})
recvmmsg$unix(r0, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000600)=""/253, 0xfd}, {&(0x7f0000000700)=""/72, 0x48}, {&(0x7f0000000780)=""/69, 0x45}, {&(0x7f0000000800)=""/131, 0x83}, {&(0x7f00000008c0)=""/102, 0x66}, {&(0x7f0000000940)=""/121, 0x79}, {&(0x7f00000009c0)=""/1, 0x1}], 0x7, &(0x7f0000000a80)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r4=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}}, {{&(0x7f0000000b00)=@abs, 0x6e, &(0x7f0000000cc0)=[{&(0x7f0000000b80)=""/205, 0xcd}, {&(0x7f0000000c80)=""/40, 0x28}], 0x2, &(0x7f0000000d00)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, <r5=>0x0}}}, @cred={{0x1c, 0x1, 0x2, {0x0, <r6=>0x0}}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r7=>0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x128}}], 0x2, 0x2000, &(0x7f0000000ec0)={0x77359400})
r8 = syz_open_dev$hiddev(&(0x7f0000000f00), 0x2da4, 0x4000)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000f40)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x4007, @fd=r8, 0x8, 0x0, 0x0, 0x8, 0x1}, 0x100)
write$P9_RSTATu(r7, &(0x7f0000000f80)={0x8b, 0x7d, 0x2, {{0x0, 0x4d, 0x7, 0xfffffffe, {0x80, 0x3, 0x5}, 0x40000, 0x9, 0x6, 0x7, 0xa, '/dev/vcsu\x00', 0xa, '/dev/vcsu\x00', 0x6, '*/\xdb,#.'}, 0x29, 'system_u:object_r:netcontrol_device_t:s0\x00', r6, r5, r6}}, 0x8b)
r9 = io_uring_setup(0x2dca, &(0x7f0000001040)={0x0, 0x7450, 0x0, 0x3, 0x1ec, 0x0, r4})
ioctl$FITRIM(r9, 0xc0185879, &(0x7f00000010c0)={0x2, 0x35, 0x8})

[  125.674440] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  125.675056] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
00:09:27 executing program 2:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0)
r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x40040, 0x0)
kcmp(0xffffffffffffffff, 0x0, 0x5, r0, r1)
preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/69, 0x45}, {&(0x7f0000000100)=""/154, 0x9a}], 0x2, 0xf9, 0xffffffff)
ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0x123198)
r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000200), 0x111000, 0x0)
fsetxattr$security_ima(r2, &(0x7f0000000240), &(0x7f0000000280)=@md5={0x1, "1e8505dc530dccca2406a9b07912a9a6"}, 0x11, 0x2)
ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000300)={&(0x7f00000002c0)=[0x0], 0x1, 0x80000000})
fsetxattr$security_selinux(r0, &(0x7f0000000340), &(0x7f0000000380)='system_u:object_r:netcontrol_device_t:s0\x00', 0x29, 0x2)
ioctl$INCFS_IOC_FILL_BLOCKS(r1, 0x80106720, &(0x7f0000000480)={0x1, &(0x7f0000000440)=[{0x2, 0x6a, &(0x7f00000003c0)="882045cd667fc91ecce77929041d8d1b06b7de8bbf2657a762ce3868ee0f431eb9b9d9efe4877f3220a0a50be32a38315f5114feda93e83c0e68c9c9383ea50610b4d2f6bb855f60cdebcabb547bf3e1ccfead996255620e14319a24e0bd0f5698bad81374bc4ca3febd"}]})
fadvise64(r0, 0xfffffffffffffff7, 0x43f8, 0x1)
r3 = accept$unix(r0, &(0x7f00000004c0)=@abs, &(0x7f0000000540)=0x6e)
ioctl$AUTOFS_IOC_CATATONIC(r3, 0x9362, 0x0)
ioctl$PTP_PIN_SETFUNC(r1, 0x40603d07, &(0x7f0000000580)={'\x00', 0x9, 0x1, 0xfffffeff})
recvmmsg$unix(r0, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000600)=""/253, 0xfd}, {&(0x7f0000000700)=""/72, 0x48}, {&(0x7f0000000780)=""/69, 0x45}, {&(0x7f0000000800)=""/131, 0x83}, {&(0x7f00000008c0)=""/102, 0x66}, {&(0x7f0000000940)=""/121, 0x79}, {&(0x7f00000009c0)=""/1, 0x1}], 0x7, &(0x7f0000000a80)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r4=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}}, {{&(0x7f0000000b00)=@abs, 0x6e, &(0x7f0000000cc0)=[{&(0x7f0000000b80)=""/205, 0xcd}, {&(0x7f0000000c80)=""/40, 0x28}], 0x2, &(0x7f0000000d00)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, <r5=>0x0}}}, @cred={{0x1c, 0x1, 0x2, {0x0, <r6=>0x0}}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r7=>0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x128}}], 0x2, 0x2000, &(0x7f0000000ec0)={0x77359400})
r8 = syz_open_dev$hiddev(&(0x7f0000000f00), 0x2da4, 0x4000)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000f40)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x4007, @fd=r8, 0x8, 0x0, 0x0, 0x8, 0x1}, 0x100)
write$P9_RSTATu(r7, &(0x7f0000000f80)={0x8b, 0x7d, 0x2, {{0x0, 0x4d, 0x7, 0xfffffffe, {0x80, 0x3, 0x5}, 0x40000, 0x9, 0x6, 0x7, 0xa, '/dev/vcsu\x00', 0xa, '/dev/vcsu\x00', 0x6, '*/\xdb,#.'}, 0x29, 'system_u:object_r:netcontrol_device_t:s0\x00', r6, r5, r6}}, 0x8b)
r9 = io_uring_setup(0x2dca, &(0x7f0000001040)={0x0, 0x7450, 0x0, 0x3, 0x1ec, 0x0, r4})
ioctl$FITRIM(r9, 0xc0185879, &(0x7f00000010c0)={0x2, 0x35, 0x8})

00:09:27 executing program 2:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0)
r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x40040, 0x0)
kcmp(0xffffffffffffffff, 0x0, 0x5, r0, r1)
preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/69, 0x45}, {&(0x7f0000000100)=""/154, 0x9a}], 0x2, 0xf9, 0xffffffff)
ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0x123198)
r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000200), 0x111000, 0x0)
fsetxattr$security_ima(r2, &(0x7f0000000240), &(0x7f0000000280)=@md5={0x1, "1e8505dc530dccca2406a9b07912a9a6"}, 0x11, 0x2)
ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000300)={&(0x7f00000002c0)=[0x0], 0x1, 0x80000000})
fsetxattr$security_selinux(r0, &(0x7f0000000340), &(0x7f0000000380)='system_u:object_r:netcontrol_device_t:s0\x00', 0x29, 0x2)
ioctl$INCFS_IOC_FILL_BLOCKS(r1, 0x80106720, &(0x7f0000000480)={0x1, &(0x7f0000000440)=[{0x2, 0x6a, &(0x7f00000003c0)="882045cd667fc91ecce77929041d8d1b06b7de8bbf2657a762ce3868ee0f431eb9b9d9efe4877f3220a0a50be32a38315f5114feda93e83c0e68c9c9383ea50610b4d2f6bb855f60cdebcabb547bf3e1ccfead996255620e14319a24e0bd0f5698bad81374bc4ca3febd"}]})
fadvise64(r0, 0xfffffffffffffff7, 0x43f8, 0x1)
r3 = accept$unix(r0, &(0x7f00000004c0)=@abs, &(0x7f0000000540)=0x6e)
ioctl$AUTOFS_IOC_CATATONIC(r3, 0x9362, 0x0)
ioctl$PTP_PIN_SETFUNC(r1, 0x40603d07, &(0x7f0000000580)={'\x00', 0x9, 0x1, 0xfffffeff})
recvmmsg$unix(r0, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000600)=""/253, 0xfd}, {&(0x7f0000000700)=""/72, 0x48}, {&(0x7f0000000780)=""/69, 0x45}, {&(0x7f0000000800)=""/131, 0x83}, {&(0x7f00000008c0)=""/102, 0x66}, {&(0x7f0000000940)=""/121, 0x79}, {&(0x7f00000009c0)=""/1, 0x1}], 0x7, &(0x7f0000000a80)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r4=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}}, {{&(0x7f0000000b00)=@abs, 0x6e, &(0x7f0000000cc0)=[{&(0x7f0000000b80)=""/205, 0xcd}, {&(0x7f0000000c80)=""/40, 0x28}], 0x2, &(0x7f0000000d00)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, <r5=>0x0}}}, @cred={{0x1c, 0x1, 0x2, {0x0, <r6=>0x0}}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r7=>0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x128}}], 0x2, 0x2000, &(0x7f0000000ec0)={0x77359400})
r8 = syz_open_dev$hiddev(&(0x7f0000000f00), 0x2da4, 0x4000)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000f40)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x4007, @fd=r8, 0x8, 0x0, 0x0, 0x8, 0x1}, 0x100)
write$P9_RSTATu(r7, &(0x7f0000000f80)={0x8b, 0x7d, 0x2, {{0x0, 0x4d, 0x7, 0xfffffffe, {0x80, 0x3, 0x5}, 0x40000, 0x9, 0x6, 0x7, 0xa, '/dev/vcsu\x00', 0xa, '/dev/vcsu\x00', 0x6, '*/\xdb,#.'}, 0x29, 'system_u:object_r:netcontrol_device_t:s0\x00', r6, r5, r6}}, 0x8b)
r9 = io_uring_setup(0x2dca, &(0x7f0000001040)={0x0, 0x7450, 0x0, 0x3, 0x1ec, 0x0, r4})
ioctl$FITRIM(r9, 0xc0185879, &(0x7f00000010c0)={0x2, 0x35, 0x8})

00:09:27 executing program 2:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0)
r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x40040, 0x0)
kcmp(0xffffffffffffffff, 0x0, 0x5, r0, r1)
preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/69, 0x45}, {&(0x7f0000000100)=""/154, 0x9a}], 0x2, 0xf9, 0xffffffff)
ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0x123198)
r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000200), 0x111000, 0x0)
fsetxattr$security_ima(r2, &(0x7f0000000240), &(0x7f0000000280)=@md5={0x1, "1e8505dc530dccca2406a9b07912a9a6"}, 0x11, 0x2)
ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000300)={&(0x7f00000002c0)=[0x0], 0x1, 0x80000000})
fsetxattr$security_selinux(r0, &(0x7f0000000340), &(0x7f0000000380)='system_u:object_r:netcontrol_device_t:s0\x00', 0x29, 0x2)
ioctl$INCFS_IOC_FILL_BLOCKS(r1, 0x80106720, &(0x7f0000000480)={0x1, &(0x7f0000000440)=[{0x2, 0x6a, &(0x7f00000003c0)="882045cd667fc91ecce77929041d8d1b06b7de8bbf2657a762ce3868ee0f431eb9b9d9efe4877f3220a0a50be32a38315f5114feda93e83c0e68c9c9383ea50610b4d2f6bb855f60cdebcabb547bf3e1ccfead996255620e14319a24e0bd0f5698bad81374bc4ca3febd"}]})
fadvise64(r0, 0xfffffffffffffff7, 0x43f8, 0x1)
r3 = accept$unix(r0, &(0x7f00000004c0)=@abs, &(0x7f0000000540)=0x6e)
ioctl$AUTOFS_IOC_CATATONIC(r3, 0x9362, 0x0)
ioctl$PTP_PIN_SETFUNC(r1, 0x40603d07, &(0x7f0000000580)={'\x00', 0x9, 0x1, 0xfffffeff})
recvmmsg$unix(r0, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000600)=""/253, 0xfd}, {&(0x7f0000000700)=""/72, 0x48}, {&(0x7f0000000780)=""/69, 0x45}, {&(0x7f0000000800)=""/131, 0x83}, {&(0x7f00000008c0)=""/102, 0x66}, {&(0x7f0000000940)=""/121, 0x79}, {&(0x7f00000009c0)=""/1, 0x1}], 0x7, &(0x7f0000000a80)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r4=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}}, {{&(0x7f0000000b00)=@abs, 0x6e, &(0x7f0000000cc0)=[{&(0x7f0000000b80)=""/205, 0xcd}, {&(0x7f0000000c80)=""/40, 0x28}], 0x2, &(0x7f0000000d00)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, <r5=>0x0}}}, @cred={{0x1c, 0x1, 0x2, {0x0, <r6=>0x0}}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r7=>0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x128}}], 0x2, 0x2000, &(0x7f0000000ec0)={0x77359400})
r8 = syz_open_dev$hiddev(&(0x7f0000000f00), 0x2da4, 0x4000)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000f40)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x4007, @fd=r8, 0x8, 0x0, 0x0, 0x8, 0x1}, 0x100)
write$P9_RSTATu(r7, &(0x7f0000000f80)={0x8b, 0x7d, 0x2, {{0x0, 0x4d, 0x7, 0xfffffffe, {0x80, 0x3, 0x5}, 0x40000, 0x9, 0x6, 0x7, 0xa, '/dev/vcsu\x00', 0xa, '/dev/vcsu\x00', 0x6, '*/\xdb,#.'}, 0x29, 'system_u:object_r:netcontrol_device_t:s0\x00', r6, r5, r6}}, 0x8b)
io_uring_setup(0x2dca, &(0x7f0000001040)={0x0, 0x7450, 0x0, 0x3, 0x1ec, 0x0, r4})

00:09:27 executing program 2:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0)
r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x40040, 0x0)
kcmp(0xffffffffffffffff, 0x0, 0x5, r0, r1)
preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/69, 0x45}, {&(0x7f0000000100)=""/154, 0x9a}], 0x2, 0xf9, 0xffffffff)
ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0x123198)
r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000200), 0x111000, 0x0)
fsetxattr$security_ima(r2, &(0x7f0000000240), &(0x7f0000000280)=@md5={0x1, "1e8505dc530dccca2406a9b07912a9a6"}, 0x11, 0x2)
ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000300)={&(0x7f00000002c0)=[0x0], 0x1, 0x80000000})
fsetxattr$security_selinux(r0, &(0x7f0000000340), &(0x7f0000000380)='system_u:object_r:netcontrol_device_t:s0\x00', 0x29, 0x2)
ioctl$INCFS_IOC_FILL_BLOCKS(r1, 0x80106720, &(0x7f0000000480)={0x1, &(0x7f0000000440)=[{0x2, 0x6a, &(0x7f00000003c0)="882045cd667fc91ecce77929041d8d1b06b7de8bbf2657a762ce3868ee0f431eb9b9d9efe4877f3220a0a50be32a38315f5114feda93e83c0e68c9c9383ea50610b4d2f6bb855f60cdebcabb547bf3e1ccfead996255620e14319a24e0bd0f5698bad81374bc4ca3febd"}]})
fadvise64(r0, 0xfffffffffffffff7, 0x43f8, 0x1)
r3 = accept$unix(r0, &(0x7f00000004c0)=@abs, &(0x7f0000000540)=0x6e)
ioctl$AUTOFS_IOC_CATATONIC(r3, 0x9362, 0x0)
ioctl$PTP_PIN_SETFUNC(r1, 0x40603d07, &(0x7f0000000580)={'\x00', 0x9, 0x1, 0xfffffeff})
recvmmsg$unix(r0, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000600)=""/253, 0xfd}, {&(0x7f0000000700)=""/72, 0x48}, {&(0x7f0000000780)=""/69, 0x45}, {&(0x7f0000000800)=""/131, 0x83}, {&(0x7f00000008c0)=""/102, 0x66}, {&(0x7f0000000940)=""/121, 0x79}, {&(0x7f00000009c0)=""/1, 0x1}], 0x7, &(0x7f0000000a80)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}}, {{&(0x7f0000000b00)=@abs, 0x6e, &(0x7f0000000cc0)=[{&(0x7f0000000b80)=""/205, 0xcd}, {&(0x7f0000000c80)=""/40, 0x28}], 0x2, &(0x7f0000000d00)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, <r4=>0x0}}}, @cred={{0x1c, 0x1, 0x2, {0x0, <r5=>0x0}}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r6=>0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x128}}], 0x2, 0x2000, &(0x7f0000000ec0)={0x77359400})
r7 = syz_open_dev$hiddev(&(0x7f0000000f00), 0x2da4, 0x4000)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000f40)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x4007, @fd=r7, 0x8, 0x0, 0x0, 0x8, 0x1}, 0x100)
write$P9_RSTATu(r6, &(0x7f0000000f80)={0x8b, 0x7d, 0x2, {{0x0, 0x4d, 0x7, 0xfffffffe, {0x80, 0x3, 0x5}, 0x40000, 0x9, 0x6, 0x7, 0xa, '/dev/vcsu\x00', 0xa, '/dev/vcsu\x00', 0x6, '*/\xdb,#.'}, 0x29, 'system_u:object_r:netcontrol_device_t:s0\x00', r5, r4, r5}}, 0x8b)

[  126.049219] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  126.049840] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
00:09:27 executing program 2:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0)
r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x40040, 0x0)
kcmp(0xffffffffffffffff, 0x0, 0x5, r0, r1)
preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/69, 0x45}, {&(0x7f0000000100)=""/154, 0x9a}], 0x2, 0xf9, 0xffffffff)
ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0x123198)
r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000200), 0x111000, 0x0)
fsetxattr$security_ima(r2, &(0x7f0000000240), &(0x7f0000000280)=@md5={0x1, "1e8505dc530dccca2406a9b07912a9a6"}, 0x11, 0x2)
ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000300)={&(0x7f00000002c0)=[0x0], 0x1, 0x80000000})
fsetxattr$security_selinux(r0, &(0x7f0000000340), &(0x7f0000000380)='system_u:object_r:netcontrol_device_t:s0\x00', 0x29, 0x2)
ioctl$INCFS_IOC_FILL_BLOCKS(r1, 0x80106720, &(0x7f0000000480)={0x1, &(0x7f0000000440)=[{0x2, 0x6a, &(0x7f00000003c0)="882045cd667fc91ecce77929041d8d1b06b7de8bbf2657a762ce3868ee0f431eb9b9d9efe4877f3220a0a50be32a38315f5114feda93e83c0e68c9c9383ea50610b4d2f6bb855f60cdebcabb547bf3e1ccfead996255620e14319a24e0bd0f5698bad81374bc4ca3febd"}]})
fadvise64(r0, 0xfffffffffffffff7, 0x43f8, 0x1)
r3 = accept$unix(r0, &(0x7f00000004c0)=@abs, &(0x7f0000000540)=0x6e)
ioctl$AUTOFS_IOC_CATATONIC(r3, 0x9362, 0x0)
ioctl$PTP_PIN_SETFUNC(r1, 0x40603d07, &(0x7f0000000580)={'\x00', 0x9, 0x1, 0xfffffeff})
recvmmsg$unix(r0, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000600)=""/253, 0xfd}, {&(0x7f0000000700)=""/72, 0x48}, {&(0x7f0000000780)=""/69, 0x45}, {&(0x7f0000000800)=""/131, 0x83}, {&(0x7f00000008c0)=""/102, 0x66}, {&(0x7f0000000940)=""/121, 0x79}, {&(0x7f00000009c0)=""/1, 0x1}], 0x7, &(0x7f0000000a80)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}}, {{&(0x7f0000000b00)=@abs, 0x6e, &(0x7f0000000cc0)=[{&(0x7f0000000b80)=""/205, 0xcd}, {&(0x7f0000000c80)=""/40, 0x28}], 0x2, &(0x7f0000000d00)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x128}}], 0x2, 0x2000, &(0x7f0000000ec0)={0x77359400})
r4 = syz_open_dev$hiddev(&(0x7f0000000f00), 0x2da4, 0x4000)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000f40)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x4007, @fd=r4, 0x8, 0x0, 0x0, 0x8, 0x1}, 0x100)

[  126.179960] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  126.180641] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
00:09:27 executing program 2:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0)
r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x40040, 0x0)
kcmp(0xffffffffffffffff, 0x0, 0x5, r0, r1)
preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/69, 0x45}, {&(0x7f0000000100)=""/154, 0x9a}], 0x2, 0xf9, 0xffffffff)
ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0x123198)
r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000200), 0x111000, 0x0)
fsetxattr$security_ima(r2, &(0x7f0000000240), &(0x7f0000000280)=@md5={0x1, "1e8505dc530dccca2406a9b07912a9a6"}, 0x11, 0x2)
ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000300)={&(0x7f00000002c0)=[0x0], 0x1, 0x80000000})
fsetxattr$security_selinux(r0, &(0x7f0000000340), &(0x7f0000000380)='system_u:object_r:netcontrol_device_t:s0\x00', 0x29, 0x2)
ioctl$INCFS_IOC_FILL_BLOCKS(r1, 0x80106720, &(0x7f0000000480)={0x1, &(0x7f0000000440)=[{0x2, 0x6a, &(0x7f00000003c0)="882045cd667fc91ecce77929041d8d1b06b7de8bbf2657a762ce3868ee0f431eb9b9d9efe4877f3220a0a50be32a38315f5114feda93e83c0e68c9c9383ea50610b4d2f6bb855f60cdebcabb547bf3e1ccfead996255620e14319a24e0bd0f5698bad81374bc4ca3febd"}]})
fadvise64(r0, 0xfffffffffffffff7, 0x43f8, 0x1)
r3 = accept$unix(r0, &(0x7f00000004c0)=@abs, &(0x7f0000000540)=0x6e)
ioctl$AUTOFS_IOC_CATATONIC(r3, 0x9362, 0x0)
ioctl$PTP_PIN_SETFUNC(r1, 0x40603d07, &(0x7f0000000580)={'\x00', 0x9, 0x1, 0xfffffeff})
recvmmsg$unix(r0, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000600)=""/253, 0xfd}, {&(0x7f0000000700)=""/72, 0x48}, {&(0x7f0000000780)=""/69, 0x45}, {&(0x7f0000000800)=""/131, 0x83}, {&(0x7f00000008c0)=""/102, 0x66}, {&(0x7f0000000940)=""/121, 0x79}, {&(0x7f00000009c0)=""/1, 0x1}], 0x7, &(0x7f0000000a80)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}}, {{&(0x7f0000000b00)=@abs, 0x6e, &(0x7f0000000cc0)=[{&(0x7f0000000b80)=""/205, 0xcd}, {&(0x7f0000000c80)=""/40, 0x28}], 0x2, &(0x7f0000000d00)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x128}}], 0x2, 0x2000, &(0x7f0000000ec0)={0x77359400})
syz_open_dev$hiddev(&(0x7f0000000f00), 0x2da4, 0x4000)

[  126.292852] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
00:09:27 executing program 2:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0)
r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x40040, 0x0)
kcmp(0xffffffffffffffff, 0x0, 0x5, r0, r1)
preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/69, 0x45}, {&(0x7f0000000100)=""/154, 0x9a}], 0x2, 0xf9, 0xffffffff)
ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0x123198)
r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000200), 0x111000, 0x0)
fsetxattr$security_ima(r2, &(0x7f0000000240), &(0x7f0000000280)=@md5={0x1, "1e8505dc530dccca2406a9b07912a9a6"}, 0x11, 0x2)
ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000300)={&(0x7f00000002c0)=[0x0], 0x1, 0x80000000})
fsetxattr$security_selinux(r0, &(0x7f0000000340), &(0x7f0000000380)='system_u:object_r:netcontrol_device_t:s0\x00', 0x29, 0x2)
ioctl$INCFS_IOC_FILL_BLOCKS(r1, 0x80106720, &(0x7f0000000480)={0x1, &(0x7f0000000440)=[{0x2, 0x6a, &(0x7f00000003c0)="882045cd667fc91ecce77929041d8d1b06b7de8bbf2657a762ce3868ee0f431eb9b9d9efe4877f3220a0a50be32a38315f5114feda93e83c0e68c9c9383ea50610b4d2f6bb855f60cdebcabb547bf3e1ccfead996255620e14319a24e0bd0f5698bad81374bc4ca3febd"}]})
fadvise64(r0, 0xfffffffffffffff7, 0x43f8, 0x1)
r3 = accept$unix(r0, &(0x7f00000004c0)=@abs, &(0x7f0000000540)=0x6e)
ioctl$AUTOFS_IOC_CATATONIC(r3, 0x9362, 0x0)
ioctl$PTP_PIN_SETFUNC(r1, 0x40603d07, &(0x7f0000000580)={'\x00', 0x9, 0x1, 0xfffffeff})
recvmmsg$unix(r0, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000600)=""/253, 0xfd}, {&(0x7f0000000700)=""/72, 0x48}, {&(0x7f0000000780)=""/69, 0x45}, {&(0x7f0000000800)=""/131, 0x83}, {&(0x7f00000008c0)=""/102, 0x66}, {&(0x7f0000000940)=""/121, 0x79}, {&(0x7f00000009c0)=""/1, 0x1}], 0x7, &(0x7f0000000a80)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}}, {{&(0x7f0000000b00)=@abs, 0x6e, &(0x7f0000000cc0)=[{&(0x7f0000000b80)=""/205, 0xcd}, {&(0x7f0000000c80)=""/40, 0x28}], 0x2, &(0x7f0000000d00)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x128}}], 0x2, 0x2000, &(0x7f0000000ec0)={0x77359400})

[  126.293507] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  126.368241] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  126.368893] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  126.385288] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  126.385874] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  126.428035] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  126.429149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  126.444863] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  126.445536] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  126.519948] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  126.521318] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  126.578340] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  126.578965] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  126.652714] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  126.653457] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  126.749385] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  126.750048] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  126.770232] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  126.770833] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  126.923393] audit: type=1400 audit(1756512568.278:8): avc:  denied  { open } for  pid=3915 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[  126.931307] audit: type=1400 audit(1756512568.278:9): avc:  denied  { kernel } for  pid=3915 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[  126.989011] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
00:09:41 executing program 5:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x1)
r1 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd)
r2 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r1)
r3 = add_key(&(0x7f0000000240)='dns_resolver\x00', &(0x7f0000000000)={'syz', 0x3}, &(0x7f0000000280)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xbc, r2)
fadvise64(r0, 0x400000000000000, 0x6, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0xa00, 0x38)
keyctl$read(0xb, r3, &(0x7f0000000340)=""/216, 0xd8)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f0000000100)={{0x7f}, 'port1\x00', 0x0, 0x40, 0x4, 0xfffffc01, 0x8, 0x9e11, 0xfffff34f, 0x0, 0x6, 0x35})
acct(&(0x7f0000000040)='./file0\x00')
acct(&(0x7f0000000580)='./file0\x00')
acct(0x0)
openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x101080, 0x40)
sendto(r0, &(0x7f0000000480)="18cf1086009c468378780184b847d823e8256db105af9abcc79f29c1ff0c2f7090", 0x21, 0x20000001, &(0x7f00000004c0)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x80)
mkdirat(r0, &(0x7f0000000440)='./file0\x00', 0x100)
mknodat(r0, &(0x7f0000000080)='./file0\x00', 0x8000, 0x80)
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0)
sendfile(r4, r4, 0x0, 0x1000)
r5 = accept4(r0, 0x0, &(0x7f00000005c0), 0x80000)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r5, 0xf503, 0x0)

00:09:41 executing program 6:
prctl$PR_SET_SECCOMP(0x41, 0x3, 0x0)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
clone(0x80000, &(0x7f0000000000)="c2d86f93295ee96af7ba5d1798a986139192fc5ce33aaac4d74c573a5b774b", &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)="70c78281dec5ddf34b1b05d75337e5c7248f15f2257edecefe8cb243fda0cd84549474f6")

00:09:41 executing program 2:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0)
r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x40040, 0x0)
kcmp(0xffffffffffffffff, 0x0, 0x5, r0, r1)
preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/69, 0x45}, {&(0x7f0000000100)=""/154, 0x9a}], 0x2, 0xf9, 0xffffffff)
ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0x123198)
r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000200), 0x111000, 0x0)
fsetxattr$security_ima(r2, &(0x7f0000000240), &(0x7f0000000280)=@md5={0x1, "1e8505dc530dccca2406a9b07912a9a6"}, 0x11, 0x2)
ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000300)={&(0x7f00000002c0)=[0x0], 0x1, 0x80000000})
fsetxattr$security_selinux(r0, &(0x7f0000000340), &(0x7f0000000380)='system_u:object_r:netcontrol_device_t:s0\x00', 0x29, 0x2)
ioctl$INCFS_IOC_FILL_BLOCKS(r1, 0x80106720, &(0x7f0000000480)={0x1, &(0x7f0000000440)=[{0x2, 0x6a, &(0x7f00000003c0)="882045cd667fc91ecce77929041d8d1b06b7de8bbf2657a762ce3868ee0f431eb9b9d9efe4877f3220a0a50be32a38315f5114feda93e83c0e68c9c9383ea50610b4d2f6bb855f60cdebcabb547bf3e1ccfead996255620e14319a24e0bd0f5698bad81374bc4ca3febd"}]})
fadvise64(r0, 0xfffffffffffffff7, 0x43f8, 0x1)
r3 = accept$unix(r0, &(0x7f00000004c0)=@abs, &(0x7f0000000540)=0x6e)
ioctl$AUTOFS_IOC_CATATONIC(r3, 0x9362, 0x0)
ioctl$PTP_PIN_SETFUNC(r1, 0x40603d07, &(0x7f0000000580)={'\x00', 0x9, 0x1, 0xfffffeff})

00:09:41 executing program 0:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x44000)
llistxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)=""/152, 0x98)
io_setup(0xfff, &(0x7f0000000040)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x8, 0x1, 0x0, r0, &(0x7f00000000c0)="d3", 0x1}])

00:09:41 executing program 7:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000200)={0x2c, r0, 0x4, 0x70bd2c, 0x0, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x6d}}}}, [@NL80211_ATTR_PROBE_RESP={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000a80)=ANY=[@ANYBLOB="88050000", @ANYRES16=r0, @ANYBLOB="040026bd7000fcdbdf25210000000600f7000001000028002d800a0000000202020202020000180000009342876a9ea879d483e5cffbb1df77234c696b510800dc00020000003000848008000200ff7f0000090001001baeacacb60000000a000500ffffffffffff00000a0005000802110000000000fc047d80bf0002000f0a7513683860b9f134e6cb48b6854c354479c215d2102df28b7822f5a8ca5bd082831eeb1324352eedc7cbaca322043fea670d59238f68fe1c3bca6d9d7ee63d77d568200339b812cf983e9f9e6934865a70350324b0568935be9f4ca8a849937d8018d719f48f73cc0e8806b80195418914b9fcea08c854a2131273c32ed0369238ae74d51ddd8e09d2c162c9e5b02a2e789e3261de739054e8ff0507a873dbad86dce3047a7c8c3aaa6b5359d41aecb181cbb4aa152254a2b300b500030085fcd1593ec7a4e9fe8a4a3f0df94d74252aea2391b51262e10558ff5a921357e9f3535a90d2d8b6cc2a6017ac163330e3e78a8d94671621773b86bfdaaea8126935124e7adc0db6180175bb511ba30bac63348d1892b11c1beaf4a2f1d24f209e4d1a452b67cb494a0184c12d5b67c491c1989e4d7c361cdfc8fa559a1164bafd06dc5bbb1799af6abd86deaca42ff2a9015f0e30fb9b25ecf61a22be70e260b5c4d1d2da59655c569639e7a19437af54000000d300000013724df28f5ac104b589df1eb6cbc664c5aaf67f7b9810600319edce126fe6d3e972f713fceb6c8a2daeeacb11e6b793a4cf015d0e141d890b97ef436df34125b2ea96f13f97315e0ba2338f94ef85c8b21c3985b86530fd1223fdc7ee1fc551ee38031657a87c4f33d96afd47db74e838f4eff574ab7979bba87d8a49201960283c050a3185dfbe8172243bb0a7758ae26fbaf047149841ea99d4d4bac74e60f38513b2553375680d76fefc457e90a6fea38e2c12b2a72509a85fb8b67ee0bc05f791422841948b23c9ad6f444b03007c0001001e12721760f382bcd9638ced7c39c2383867b33a67bc6a986ee9eccf0bb73ed1a80aa627da78d9a3e2074bf1d5788ce1b1fc65b93373c95a0b1d94bdda3efa95b25e00ee1c9738414534c4800174641cf97f4dd7d8820dd14b27f8a281b096b16620f241c8626f4d06b65db1068cb0c75c760001009ca9412d72e81f5b2f7a9db7da6ac52eac48e63566904ad2729c0bfd545ac1f966e03d59a77eac779c5f254e053c21f4f5fc1c1e54274284618fc39ca59bd3a75964069fcb70023ed9e5c5caca2d952b8fb52ed449c6e66b2d13816c385e7dd053c04e81e98d3861218efa90f38803fc8e870000ff000200b949885697883058a8ef3e75c46e0a533a03ab612501a133084d26c624db4d7241fc99e61aa4eef2f51354dc735f9d9c4a832b200508b9ff5a30a3f82a4575f4bd040bae5096f35939b93c19c0f67bcc1216d6413a7485d59494a61619fef5f9f2f459dee32f3e875310c12971f7d938903ecde64de4999cd355214980a7a96fb7c7492799975f9b56ee9aee0d05e4d497afc33195283fb301f76a46e3fcc83e12fb40017c846044aa45584738807ef6514dc786566878898216b9f3d43d7e03091aa52aec1786f254d0e84f8f31c4e7f19564aa6ea391d3c86a8d7ce6661ae4f4e52ce66dc4ae594dd8d35b70619427fb3d00ad000000fc03e3c8e778f87039011e82a78b8845da62e97fd38e3b8a2ecefcf637924604e279364395bc917a1ce567b1beb0212c094bf9da9fb7a0472888bceaea5e99e1c814d11ea897e6120dd8c801d2a42daa3be5c7b3482736817b4dc73c8aa3eb105e1a61a7e7bdf84db2a7182e7af177b5cb58e5cb606900c08c787463d9b407d0ff27b9b6589cd86d7c5fc8705a1f821299ce94196e10eb7d07ebffa84079ae2ea2cd58ef70663948b300000005000000800000000400ec000400ff000800dc000900"/1401], 0x588}, 0x1, 0x0, 0x0, 0x4}, 0x90)
syz_mount_image$iso9660(&(0x7f0000000a40), &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mode={'mode', 0x3d, 0x7f}}], [{@smackfsroot}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@subj_user={'subj_user', 0x3d, '-'}}, {@smackfsfloor}, {@seclabel}, {@seclabel}]})

00:09:41 executing program 4:
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x1d, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000000000004000000000002000020000020000000e0f4655fe0f4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000018000000c28500002b0200000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e32303330363131363700"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000ab7a0e3e026c4410ac9856e86774ba11010040000c00000000000000ddf4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000100000000000500400000000000000000000000000000003100000000000000", 0x40, 0x540}, {&(0x7f0000010300)="03000000040000000500000019000f0003000400"/32, 0x20, 0x800}, {&(0x7f0000010400)="7f000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0100ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000ddf4655fddf4655fddf4655f00"/2080, 0x820, 0xc00}, {&(0x7f0000010d00)="ed41000000040000ddf4655fe0f4655fe0f4655f00000000000004002000000000000800050000000af301000400000000000000000000000100000010000000", 0x40, 0x1500}, {&(0x7f0000010e00)="20000000c8946f1dc8946f1d00000000ddf4655f00"/32, 0x20, 0x1580}, {&(0x7f0000010f00)="8081000000300404ddf4655fddf4655fddf4655f00000000000001002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000ddf4655f00"/160, 0xa0, 0x1a00}, {&(0x7f0000011000)="c0410000002c0000ddf4655fddf4655fddf4655f00000000000002002000000000000800000000000af301000400000000000000000000000b00000020000000", 0x40, 0x1e00}, {&(0x7f0000011100)="20000000000000000000000000000000ddf4655f000000000000000000000000000002ea00"/64, 0x40, 0x1e80}, {&(0x7f0000011200)="ed4100003c000000e0f4655fe0f4655fe0f4655f0000000000000200000000000000001003000000020000000d0000001000050166696c65300000000e0000002800050766696c65310000000000000000000000000000000000000000000000000000004d5f6b7100000000000000000000000000000000000000000000000020000000c8946f1dc8946f1dc8946f1de0f4655fc8946f1d0000000000000000000002ea04070000000000000000000000000000646174610000000000000000", 0xc0, 0x1f00}, {&(0x7f0000011300)="ed8100001a040000e0f4655fe0f4655fe0f4655f00000000000001002000000000000800010000000af30100040000000000000000000000020000005000000000000000000000000000000000000000000000000000000000000000000000000000000048dad3ce00000000000000000000000000000000000000000000000020000000c8946f1dc8946f1dc8946f1de0f4655fc8946f1d0000000000000000", 0xa0, 0x2000}, {&(0x7f0000011400)="ffa1000026000000e0f4655fe0f4655fe0f4655f00000000000001000000000000000000010000002f746d702f73797a2d696d61676567656e3230333036313136372f66696c65302f66696c653000000000000000000000000000000000000000000000c7982f7500000000000000000000000000000000000000000000000020000000c8946f1dc8946f1dc8946f1de0f4655fc8946f1d0000000000000000", 0xa0, 0x2100}, {&(0x7f0000011500)="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", 0x1a0, 0x2200}, {&(0x7f0000011700)="ed81000064000000e0f4655fe0f4655fe0f4655f000000000000010000000000000000100100000073797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c288d50b800000000000000000000000000000000000000000000000020000000c8946f1dc8946f1dc8946f1de0f4655fc8946f1d0000000000000000000002ea040734000000000028000000000000006461746100000000000000000000000000000000000000000000000000000000000000006c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273", 0x100, 0x2400}, {&(0x7f0000011800)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531000000100000001000050166696c6532000000100000001000050166696c6533000000110000009403090166696c652e636f6c64000000", 0x80, 0x4000}, {&(0x7f0000011900)="0b0000000c0001022e000000020000000c0002022e2e000000000000e8030000", 0x20, 0x8000}, {&(0x7f0000011a00)="00000000000400"/32, 0x20, 0x8400}, {&(0x7f0000011b00)="00000000000400"/32, 0x20, 0x8810}, {&(0x7f0000011c00)="00000000000400"/32, 0x20, 0x8c00}, {&(0x7f0000011d00)="00000000000400"/32, 0x20, 0x9000}, {&(0x7f0000011e00)="00000000000400"/32, 0x20, 0x9400}, {&(0x7f0000011f00)="00000000000400"/32, 0x20, 0x9800}, {&(0x7f0000012000)="00000000000400"/32, 0x20, 0x9c00}, {&(0x7f0000012100)="00000000000400"/32, 0x20, 0xa000}, {&(0x7f0000012200)="00000000000400"/32, 0x20, 0xa400}, {&(0x7f0000012300)="00000000000400"/32, 0x20, 0x76}, {&(0x7f0000012400)="504d4d00504d4dffe0f4655f00000000647679756b6f762d676c6170746f70320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006c6f6f7033310075782f746573742f73797a5f6d6f756e745f696d6167655f650500"/128, 0x80, 0x10000}, {&(0x7f0000012500)="73797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c65727379046b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273060000006c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c655073797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c000000000000", 0x420, 0x9}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="59ee1db5d1c1825ff0c24d54bf2616a63cd5aaae3a3dce6e220c51dc5a1017805016ebeee65aec12fe7c5fdaf0321b7cdded02efe66b5c304804fdd3a07ee6362051710c8af1443daf2ed32c65e3771009dbca1afacd1101e72fb1b744310ea6ad662671f252db82d9f362d0620e7624d7"])
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x40086806, 0x4000)
r2 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ppoll(&(0x7f0000000100)=[{r1}, {r2}], 0x2, 0x0, 0x0, 0x0)
r3 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f00000001c0))
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x120000, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_none}], [{@rootcontext={'rootcontext', 0x3d, 'staff_u'}}]}})
mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x80)

00:09:41 executing program 3:
syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0)
open$dir(&(0x7f0000000000)='./file0\x00', 0x4801, 0x4)

00:09:41 executing program 1:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
rename(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00')
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='ramfs\x00', 0x0, 0x0)
umount2(&(0x7f0000000000)='./file0\x00', 0x0)

[  139.785854] SELinux: security_context_str_to_sid (root) failed with errno=-22
[  139.787576] debugfs: Bad value for 'source'
[  139.789924] debugfs: Bad value for 'source'
00:09:41 executing program 3:
syz_mount_image$tmpfs(&(0x7f0000000680), &(0x7f00000006c0)='./file0\x00', 0x0, 0x3, &(0x7f0000001ac0)=[{&(0x7f0000000700)="db", 0x1}, {&(0x7f0000000880), 0x0, 0x80000001}, {&(0x7f0000000040)="98", 0x1, 0x4}], 0x882400, &(0x7f0000000080)={[{@huge_within_size}, {@mpol={'mpol', 0x3d, {'default', '', @val={0x3a, [0x39, 0x2f, 0x3a, 0xa]}}}}]})

00:09:41 executing program 7:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0x1)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000000400)={0x14, 0x10, 0x4, 0x801}, 0x14}}, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000180)={0x5, &(0x7f0000000000)=[{0x6, 0x0, 0xf1, 0xffff2ef6}, {0x5, 0x83, 0x1f, 0x8}, {0xa50a, 0x1, 0x20, 0x8}, {0xf800, 0x7f, 0x3f, 0x81}, {0x7, 0x1f, 0x8, 0x2}]}, 0x10)
lsetxattr$trusted_overlay_nlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, 0x0, 0x0)

[  139.828318] loop4: detected capacity change from 0 to 1024
[  139.835691] Process accounting resumed
[  139.839656] ext4: Unknown parameter 'YîµÑÁ‚_ðÂMT¿&¦<Õª®:'
[  139.854201] Process accounting resumed
00:09:41 executing program 2:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0)
r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x40040, 0x0)
kcmp(0xffffffffffffffff, 0x0, 0x5, r0, r1)
preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/69, 0x45}, {&(0x7f0000000100)=""/154, 0x9a}], 0x2, 0xf9, 0xffffffff)
ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0x123198)
r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000200), 0x111000, 0x0)
fsetxattr$security_ima(r2, &(0x7f0000000240), &(0x7f0000000280)=@md5={0x1, "1e8505dc530dccca2406a9b07912a9a6"}, 0x11, 0x2)
ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000300)={&(0x7f00000002c0)=[0x0], 0x1, 0x80000000})
fsetxattr$security_selinux(r0, &(0x7f0000000340), &(0x7f0000000380)='system_u:object_r:netcontrol_device_t:s0\x00', 0x29, 0x2)
ioctl$INCFS_IOC_FILL_BLOCKS(r1, 0x80106720, &(0x7f0000000480)={0x1, &(0x7f0000000440)=[{0x2, 0x6a, &(0x7f00000003c0)="882045cd667fc91ecce77929041d8d1b06b7de8bbf2657a762ce3868ee0f431eb9b9d9efe4877f3220a0a50be32a38315f5114feda93e83c0e68c9c9383ea50610b4d2f6bb855f60cdebcabb547bf3e1ccfead996255620e14319a24e0bd0f5698bad81374bc4ca3febd"}]})
fadvise64(r0, 0xfffffffffffffff7, 0x43f8, 0x1)
r3 = accept$unix(r0, &(0x7f00000004c0)=@abs, &(0x7f0000000540)=0x6e)
ioctl$AUTOFS_IOC_CATATONIC(r3, 0x9362, 0x0)

[  139.884528] Process accounting resumed
[  139.888662] loop3: detected capacity change from 0 to 264192
[  139.889530] Process accounting resumed
[  139.896940] loop3: detected capacity change from 0 to 264192
[  139.900623] loop4: detected capacity change from 0 to 1024
[  139.908928] ext4: Unknown parameter 'YîµÑÁ‚_ðÂMT¿&¦<Õª®:'
00:09:41 executing program 3:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f000000a040), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r1=>r0, {0x1, 0x400}}, './file0\x00'})
ioctl$SNAPSHOT_ATOMIC_RESTORE(r1, 0x3304)

[  139.992905] kmemleak: Found object by alias at 0x607f1a62bae4
[  139.992925] CPU: 0 UID: 0 PID: 3964 Comm: syz-executor.7 Tainted: G        W           6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) 
[  139.992944] Tainted: [W]=WARN
[  139.992947] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  139.992954] Call Trace:
[  139.992958]  <TASK>
[  139.992963]  dump_stack_lvl+0xca/0x120
[  139.992987]  __lookup_object+0x94/0xb0
[  139.993004]  delete_object_full+0x27/0x70
[  139.993019]  free_percpu+0x30/0x1160
[  139.993035]  ? arch_uprobe_clear_state+0x16/0x140
[  139.993056]  futex_hash_free+0x38/0xc0
[  139.993070]  mmput+0x2d3/0x390
[  139.993089]  do_exit+0x79d/0x2970
[  139.993107]  ? __pfx_do_exit+0x10/0x10
[  139.993121]  ? find_held_lock+0x2b/0x80
[  139.993139]  ? get_signal+0x835/0x2340
[  139.993159]  do_group_exit+0xd3/0x2a0
[  139.993178]  get_signal+0x2315/0x2340
[  139.993196]  ? trace_irq_enable.constprop.0+0xc2/0x100
[  139.993214]  ? __pfx_get_signal+0x10/0x10
[  139.993229]  ? __schedule+0xe91/0x3590
[  139.993250]  arch_do_signal_or_restart+0x80/0x790
[  139.993267]  ? __sys_sendmsg+0x174/0x200
[  139.993284]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  139.993300]  ? __x64_sys_futex+0x1c9/0x4d0
[  139.993324]  exit_to_user_mode_loop+0x8b/0x110
[  139.993337]  do_syscall_64+0x2f7/0x360
[  139.993349]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  139.993361] RIP: 0033:0x7f0f3d445b19
[  139.993369] Code: Unable to access opcode bytes at 0x7f0f3d445aef.
[  139.993375] RSP: 002b:00007f0f3a99a188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  139.993386] RAX: 0000000000000014 RBX: 00007f0f3d559020 RCX: 00007f0f3d445b19
[  139.993393] RDX: 0000000000000000 RSI: 0000000020001880 RDI: 0000000000000003
[  139.993399] RBP: 00007f0f3d49ff6d R08: 0000000000000000 R09: 0000000000000000
[  139.993406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  139.993412] R13: 00007ffd14bb13ff R14: 00007f0f3a99a300 R15: 0000000000022000
[  139.993430]  </TASK>
[  139.993433] kmemleak: Object (percpu) 0x607f1a62bae0 (size 8):
[  139.993440] kmemleak:   comm "syz-executor.3", pid 3956, jiffies 4294806636
[  139.993447] kmemleak:   min_count = 1
[  139.993450] kmemleak:   count = 0
[  139.993454] kmemleak:   flags = 0x21
[  139.993458] kmemleak:   checksum = 0
[  139.993461] kmemleak:   backtrace:
[  139.993465]  pcpu_alloc_noprof+0x87a/0x1170
[  139.993479]  __alloc_workqueue+0x74b/0x1820
[  139.993496]  alloc_workqueue_noprof+0xc7/0x200
[  139.993505]  loop_configure+0xf73/0x1590
[  139.993519]  lo_ioctl+0x66d/0x1c70
[  139.993530]  blkdev_ioctl+0x27c/0x6c0
[  139.993548]  __x64_sys_ioctl+0x18f/0x210
[  139.993563]  do_syscall_64+0xbf/0x360
[  139.993571]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  140.846706] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  140.848019] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  140.855587] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  140.861546] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  140.862917] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  140.867842] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  140.875641] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  140.878807] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  140.882667] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  140.886298] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  140.888685] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  140.897607] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  140.902135] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  140.903010] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  140.908714] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  140.911405] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  140.913257] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  140.917387] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  140.922406] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[  140.923798] Bluetooth: hci6: Opcode 0x0406 failed: -4
[  140.928713] Bluetooth: hci6: Opcode 0x0406 failed: -4
[  140.932866] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[  140.934528] Bluetooth: hci7: Opcode 0x0406 failed: -4
[  140.938940] Bluetooth: hci7: Opcode 0x0406 failed: -4
[  142.015275] Bluetooth: hci0: command 0x0c1a tx timeout
[  142.911353] Bluetooth: hci4: command 0x0c1a tx timeout
[  142.911446] Bluetooth: hci3: command 0x0c1a tx timeout
[  142.912496] Bluetooth: hci2: command 0x0c1a tx timeout
[  142.913254] Bluetooth: hci1: command 0x0c1a tx timeout
[  142.975324] Bluetooth: hci7: command 0x0c1a tx timeout
[  142.975433] Bluetooth: hci6: command 0x0c1a tx timeout
[  142.976331] Bluetooth: hci5: command 0x0c1a tx timeout
[  144.063343] Bluetooth: hci0: command 0x0c1a tx timeout
[  144.959337] Bluetooth: hci2: command 0x0c1a tx timeout
[  144.959357] Bluetooth: hci3: command 0x0c1a tx timeout
[  144.959842] Bluetooth: hci4: command 0x0c1a tx timeout
[  144.961038] Bluetooth: hci1: command 0x0c1a tx timeout
[  145.023286] Bluetooth: hci6: command 0x0c1a tx timeout
[  145.024519] Bluetooth: hci7: command 0x0c1a tx timeout
[  145.024536] Bluetooth: hci5: command 0x0c1a tx timeout
[  146.111382] Bluetooth: hci0: command 0x0c1a tx timeout
[  147.007324] Bluetooth: hci4: command 0x0c1a tx timeout
[  147.008578] Bluetooth: hci3: command 0x0c1a tx timeout
[  147.008627] Bluetooth: hci2: command 0x0c1a tx timeout
[  147.009600] Bluetooth: hci1: command 0x0c1a tx timeout
[  147.071303] Bluetooth: hci5: command 0x0c1a tx timeout
[  147.072327] Bluetooth: hci6: command 0x0c1a tx timeout
[  147.072353] Bluetooth: hci7: command 0x0c1a tx timeout
00:09:52 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000140)=@abs, 0x6e, &(0x7f00000003c0)=[{&(0x7f00000001c0)=""/63, 0x3f}, {&(0x7f0000000200)=""/230, 0xe6}, {&(0x7f0000000300)=""/164, 0xa4}], 0x3, &(0x7f0000000400)=[@rights={{0x18, 0x1, 0x1, [<r0=>0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x78}, 0x1)
perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x20, 0x8, 0x5f, 0x0, 0xeab, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_config_ext={0x8001, 0xfffffffffffffff9}, 0x312a, 0x3, 0x40, 0x8, 0x4, 0xa, 0xfffb, 0x0, 0x7, 0x0, 0x5}, 0x0, 0x2, r0, 0xa)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$KDSIGACCEPT(r1, 0x4b4e, 0x13)
fcntl$F_GET_RW_HINT(r1, 0x40b, &(0x7f0000000080))

00:09:52 executing program 3:
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000040))
symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00')
r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x40086806, 0x4000)
r1 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="cc001b09f201000072010000018000001c01000005000000000000000000000008fe8d8a85913b9314469a2500ddd94148f9a6f99137735a8e58bd1e232a9802f700"/2625], 0xa41)
ppoll(&(0x7f0000000100)=[{r0}, {r1}], 0x2, 0x0, 0x0, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x1b)
ioctl$TCSETS(r2, 0x5402, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0xcb2}}, './file0\x00'})
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x10001, 0x6, &(0x7f00000000c0)=0x1)
getpid()

00:09:52 executing program 6:
r0 = memfd_create(&(0x7f0000000000)=':^/\x00', 0x0)
ftruncate(r0, 0x8007)
finit_module(r0, 0x0, 0x5)

00:09:52 executing program 1:
syz_mount_image$iso9660(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x3, &(0x7f0000000040)=[{0x7, 0x7, 0x5}, {0xef5, 0x7e, 0x3, 0x81}, {0x40, 0xc, 0x64, 0x1}]})
umount2(&(0x7f0000000000)='./file0\x00', 0x0)

00:09:52 executing program 4:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setregid(0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, <r1=>0x0}}, './file0\x00'})
setgid(r1)
setgid(0x0)
sendfile(r0, r0, 0x0, 0x0)
creat(&(0x7f0000000080)='./file0\x00', 0x80)
pipe2(&(0x7f00000000c0)={<r2=>0xffffffffffffffff}, 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x1b)
ioctl$TCSETS(r3, 0x5402, 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@access_uid}]}})

00:09:52 executing program 7:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
syz_io_uring_setup(0x7ffd, &(0x7f00000000c0)={0x0, 0xdb63, 0x36, 0x0, 0x25d, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume_offset', 0x0, 0x0)
read(r1, &(0x7f0000000080)=""/74, 0x4a)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
shutdown(r2, 0x0)
shutdown(r2, 0x1)
ppoll(&(0x7f0000000280)=[{r2}], 0x1, 0x0, 0x0, 0x0)
fork()
r3 = fork()
ptrace(0x10, r3)
tkill(r3, 0x1a)
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume_offset', 0x0, 0x0)
read(r4, &(0x7f00000001c0)=""/74, 0x4a)

00:09:52 executing program 2:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0)
r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x40040, 0x0)
kcmp(0xffffffffffffffff, 0x0, 0x5, r0, r1)
preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/69, 0x45}, {&(0x7f0000000100)=""/154, 0x9a}], 0x2, 0xf9, 0xffffffff)
ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0x123198)
r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000200), 0x111000, 0x0)
fsetxattr$security_ima(r2, &(0x7f0000000240), &(0x7f0000000280)=@md5={0x1, "1e8505dc530dccca2406a9b07912a9a6"}, 0x11, 0x2)
ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000300)={&(0x7f00000002c0)=[0x0], 0x1, 0x80000000})
fsetxattr$security_selinux(r0, &(0x7f0000000340), &(0x7f0000000380)='system_u:object_r:netcontrol_device_t:s0\x00', 0x29, 0x2)
ioctl$INCFS_IOC_FILL_BLOCKS(r1, 0x80106720, &(0x7f0000000480)={0x1, &(0x7f0000000440)=[{0x2, 0x6a, &(0x7f00000003c0)="882045cd667fc91ecce77929041d8d1b06b7de8bbf2657a762ce3868ee0f431eb9b9d9efe4877f3220a0a50be32a38315f5114feda93e83c0e68c9c9383ea50610b4d2f6bb855f60cdebcabb547bf3e1ccfead996255620e14319a24e0bd0f5698bad81374bc4ca3febd"}]})
fadvise64(r0, 0xfffffffffffffff7, 0x43f8, 0x1)
accept$unix(r0, &(0x7f00000004c0)=@abs, &(0x7f0000000540)=0x6e)

00:09:52 executing program 5:
r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x40086806, 0x4000)
r1 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ppoll(&(0x7f0000000100)=[{r0}, {r1}], 0x2, 0x0, 0x0, 0x0)
r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00')
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000080)={0x10000006})
r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00')
r4 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x40086806, 0x4000)
r5 = accept$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000001c0)=0x14)
ioctl$F2FS_IOC_FLUSH_DEVICE(r5, 0x4008f50a, &(0x7f0000000200)={0xdc, 0x3})
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r4, 0xc018937a, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r6=>r0, {0x100000001}}, './file0\x00'})
r7 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8000, 0xa, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x8, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, r6, 0x0)
ppoll(&(0x7f0000000100)=[{r4}, {r7}], 0x2, 0x0, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {r3}}, './file0\x00'})
setns(r3, 0x0)
clone3(&(0x7f00000002c0)={0x1720e0180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
getpid()

[  150.982445] audit: type=1400 audit(1756512592.337:10): avc:  denied  { module_load } for  pid=3988 comm="syz-executor.6" path=2F6D656D66643A3A5E2F202864656C6574656429 dev="tmpfs" ino=6 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=system permissive=1
00:09:52 executing program 2:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0)
r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x40040, 0x0)
kcmp(0xffffffffffffffff, 0x0, 0x5, r0, r1)
preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/69, 0x45}, {&(0x7f0000000100)=""/154, 0x9a}], 0x2, 0xf9, 0xffffffff)
ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0x123198)
r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000200), 0x111000, 0x0)
fsetxattr$security_ima(r2, &(0x7f0000000240), &(0x7f0000000280)=@md5={0x1, "1e8505dc530dccca2406a9b07912a9a6"}, 0x11, 0x2)
ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000300)={&(0x7f00000002c0)=[0x0], 0x1, 0x80000000})
fsetxattr$security_selinux(r0, &(0x7f0000000340), &(0x7f0000000380)='system_u:object_r:netcontrol_device_t:s0\x00', 0x29, 0x2)
ioctl$INCFS_IOC_FILL_BLOCKS(r1, 0x80106720, &(0x7f0000000480)={0x1, &(0x7f0000000440)=[{0x2, 0x6a, &(0x7f00000003c0)="882045cd667fc91ecce77929041d8d1b06b7de8bbf2657a762ce3868ee0f431eb9b9d9efe4877f3220a0a50be32a38315f5114feda93e83c0e68c9c9383ea50610b4d2f6bb855f60cdebcabb547bf3e1ccfead996255620e14319a24e0bd0f5698bad81374bc4ca3febd"}]})
fadvise64(r0, 0xfffffffffffffff7, 0x43f8, 0x1)

[  151.018417] Oops: general protection fault, probably for non-canonical address 0xdffffc0020000032: 0000 [#1] SMP KASAN NOPTI
[  151.018436] KASAN: probably user-memory-access in range [0x0000000100000190-0x0000000100000197]
[  151.018452] CPU: 0 UID: 0 PID: 3987 Comm: syz-executor.7 Tainted: G        W           6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) 
[  151.018472] Tainted: [W]=WARN
[  151.018476] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  151.018484] RIP: 0010:perf_tp_event+0x175/0xe70
[  151.018509] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[  151.018522] RSP: 0018:ffff88800f9a7780 EFLAGS: 00010012
[  151.018533] RAX: 0000000020000032 RBX: 00000000ffffffa0 RCX: ffffc90001bfb000
[  151.018542] RDX: 0000000000040000 RSI: ffffffff818995b7 RDI: 0000000100000190
[  151.018550] RBP: ffff88800f9a79f0 R08: ffff88806ce31340 R09: ffffe8ffffc08ae0
[  151.018559] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
[  151.018567] R13: 0000000000000014 R14: ffff88806ce31340 R15: dffffc0000000000
[  151.018578] FS:  00007f0f3a9bb700(0000) GS:ffff8880e55dd000(0000) knlGS:0000000000000000
[  151.018590] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  151.018598] CR2: 00007f0f3d559018 CR3: 000000004661d000 CR4: 0000000000350ef0
[  151.018606] Call Trace:
[  151.018611]  <TASK>
[  151.018620]  ? __pfx_perf_tp_event+0x10/0x10
[  151.018644]  ? trace_mm_page_alloc+0xfc/0x150
[  151.018661]  ? __alloc_frozen_pages_noprof+0x296/0x1f20
[  151.018680]  ? __asan_memset+0x24/0x50
[  151.018703]  ? perf_trace_run_bpf_submit+0xef/0x180
[  151.018721]  ? perf_trace_lock+0xb5/0x5d0
[  151.018736]  perf_trace_run_bpf_submit+0xef/0x180
[  151.018755]  perf_trace_preemptirq_template+0x259/0x430
[  151.018779]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  151.018800]  ? perf_trace_lock+0xb5/0x5d0
[  151.018817]  ? _raw_spin_lock_irqsave+0x53/0x60
[  151.018834]  trace_irq_disable.constprop.0+0xa6/0x100
[  151.018846]  _raw_spin_lock_irqsave+0x53/0x60
[  151.018862]  try_to_wake_up+0xa0/0x11d0
[  151.018882]  ? __pfx_try_to_wake_up+0x10/0x10
[  151.018899]  ? plist_del+0x122/0x270
[  151.018914]  ? find_held_lock+0x2b/0x80
[  151.018933]  ? futex_wake+0x474/0x540
[  151.018951]  wake_up_q+0xa1/0x130
[  151.018969]  futex_wake+0x47e/0x540
[  151.018986]  ? __pfx_futex_wake+0x10/0x10
[  151.019002]  ? __handle_mm_fault+0x753/0x3260
[  151.019022]  ? perf_trace_lock+0xb5/0x5d0
[  151.019038]  do_futex+0x26d/0x370
[  151.019052]  ? __pfx_do_futex+0x10/0x10
[  151.019066]  ? __pfx_perf_trace_lock+0x10/0x10
[  151.019081]  ? find_held_lock+0x2b/0x80
[  151.019100]  __x64_sys_futex+0x1c9/0x4d0
[  151.019115]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  151.019135]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  151.019156]  ? __pfx___x64_sys_futex+0x10/0x10
[  151.019174]  do_syscall_64+0xbf/0x360
[  151.019186]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  151.019200] RIP: 0033:0x7f0f3d445b19
[  151.019209] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  151.019221] RSP: 002b:00007f0f3a9bb218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  151.019233] RAX: ffffffffffffffda RBX: 00007f0f3d558f68 RCX: 00007f0f3d445b19
[  151.019241] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f0f3d558f6c
[  151.019249] RBP: 00007f0f3d558f60 R08: 000000000000000e R09: 0000000000000000
[  151.019257] R10: 0000000000000011 R11: 0000000000000246 R12: 00007f0f3d558f6c
[  151.019265] R13: 00007ffd14bb13ff R14: 00007f0f3a9bb300 R15: 0000000000022000
[  151.019278]  </TASK>
[  151.019282] Modules linked in:
[  151.019291] ---[ end trace 0000000000000000 ]---
[  151.019296] RIP: 0010:perf_tp_event+0x175/0xe70
[  151.019313] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[  151.019324] RSP: 0018:ffff88800f9a7780 EFLAGS: 00010012
[  151.019334] RAX: 0000000020000032 RBX: 00000000ffffffa0 RCX: ffffc90001bfb000
[  151.019342] RDX: 0000000000040000 RSI: ffffffff818995b7 RDI: 0000000100000190
[  151.019350] RBP: ffff88800f9a79f0 R08: ffff88806ce31340 R09: ffffe8ffffc08ae0
[  151.019359] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
[  151.019366] R13: 0000000000000014 R14: ffff88806ce31340 R15: dffffc0000000000
[  151.019376] FS:  00007f0f3a9bb700(0000) GS:ffff8880e55dd000(0000) knlGS:0000000000000000
[  151.019387] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  151.019395] CR2: 00007f0f3d559018 CR3: 000000004661d000 CR4: 0000000000350ef0
[  151.019404] note: syz-executor.7[3987] exited with irqs disabled
[  151.019467] Oops: general protection fault, probably for non-canonical address 0xdffffc0020000032: 0000 [#2] SMP KASAN NOPTI
[  151.019483] KASAN: probably user-memory-access in range [0x0000000100000190-0x0000000100000197]
[  151.019497] CPU: 0 UID: 0 PID: 3987 Comm: syz-executor.7 Tainted: G      D W           6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) 
[  151.019517] Tainted: [D]=DIE, [W]=WARN
[  151.019521] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  151.019528] RIP: 0010:perf_tp_event+0x175/0xe70
[  151.019546] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[  151.019558] RSP: 0018:ffff88806ce08a40 EFLAGS: 00010012
[  151.019569] RAX: 0000000020000032 RBX: 00000000ffffffa0 RCX: 0000000000000002
[  151.019577] RDX: ffff88804755d280 RSI: ffffffff818995b7 RDI: 0000000100000190
[  151.019585] RBP: ffff88806ce08cb0 R08: ffff88806ce313e8 R09: ffffe8ffffc08ae0
[  151.019593] R10: 0000000000000000 R11: ffff888013f46898 R12: dffffc0000000000
[  151.019601] R13: 0000000000000014 R14: ffff88806ce313e8 R15: dffffc0000000000
[  151.019611] FS:  00007f0f3a9bb700(0000) GS:ffff8880e55dd000(0000) knlGS:0000000000000000
[  151.019622] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  151.019630] CR2: 00007f0f3d559018 CR3: 000000004661d000 CR4: 0000000000350ef0
[  151.019638] Call Trace:
[  151.019642]  <IRQ>
[  151.019650]  ? __pfx_perf_tp_event+0x10/0x10
[  151.019666]  ? __pfx_perf_trace_lock+0x10/0x10
[  151.019682]  ? css_rstat_updated+0x1b8/0x4d0
[  151.019700]  ? __pfx_css_rstat_updated+0x10/0x10
[  151.019719]  ? trace_pelt_se_tp+0xdf/0x130
[  151.019731]  ? __update_load_avg_se+0x428/0xa40
[  151.019750]  ? __cgroup_account_cputime+0x30/0xc0
[  151.019769]  ? update_load_avg+0x17d/0x1ef0
[  151.019782]  ? perf_trace_lock+0xb5/0x5d0
[  151.019795]  ? perf_trace_lock+0xb5/0x5d0
[  151.019808]  ? update_cfs_group+0x11d/0x260
[  151.019822]  ? kvm_sched_clock_read+0x16/0x30
[  151.019840]  ? __pfx_perf_trace_lock+0x10/0x10
[  151.019854]  ? __pfx_perf_trace_lock+0x10/0x10
[  151.019870]  ? perf_trace_run_bpf_submit+0xef/0x180
[  151.019886]  ? try_to_wake_up+0x8ae/0x11d0
[  151.019904]  perf_trace_run_bpf_submit+0xef/0x180
[  151.019923]  perf_trace_preemptirq_template+0x259/0x430
[  151.019944]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  151.019965]  ? do_raw_spin_lock+0x123/0x260
[  151.019982]  ? lock_release+0x1c7/0x290
[  151.019998]  ? note_gp_changes+0x172/0x1b0
[  151.020011]  trace_irq_disable.constprop.0+0xa6/0x100
[  151.020023]  note_gp_changes+0x172/0x1b0
[  151.020038]  rcu_core+0x131/0x1800
[  151.020053]  ? ktime_get+0x16d/0x270
[  151.020067]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  151.020088]  ? __pfx_rcu_core+0x10/0x10
[  151.020102]  ? clockevents_program_event+0x135/0x360
[  151.020120]  ? tick_program_event+0xac/0x140
[  151.020134]  handle_softirqs+0x1b1/0x770
[  151.020156]  __irq_exit_rcu+0xc4/0x100
[  151.020178]  irq_exit_rcu+0x9/0x20
[  151.020189]  sysvec_apic_timer_interrupt+0x70/0x80
[  151.020205]  </IRQ>
[  151.020209]  <TASK>
[  151.020213]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  151.020227] RIP: 0010:make_task_dead+0xa2/0x3b0
[  151.020243] Code: 38 00 85 db 0f 84 21 01 00 00 e8 d9 96 38 00 9c 5b 81 e3 00 02 00 00 31 ff 48 89 de e8 27 92 38 00 48 85 db 0f 84 17 01 00 00 <e8> b9 96 38 00 31 ff 65 8b 1d 60 df 48 06 81 e3 ff ff ff 7f 89 de
[  151.020254] RSP: 0018:ffff88800f9a7f28 EFLAGS: 00000246
[  151.020264] RAX: 0000000000000001 RBX: ffff88804755d280 RCX: ffffffff817c2b86
[  151.020272] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff813b5234
[  151.020280] RBP: 000000000000000b R08: 0000000000000000 R09: 0000000000000000
[  151.020287] R10: ffffffff8643ac57 R11: 0000000000000001 R12: ffff88804755d280
[  151.020295] R13: 0000000000000000 R14: dffffc0020000032 R15: 0000000000000000
[  151.020305]  ? trace_irq_enable.constprop.0+0x26/0x100
[  151.020318]  ? make_task_dead+0x214/0x3b0
[  151.020333]  ? make_task_dead+0x214/0x3b0
[  151.020355]  ? do_syscall_64+0xbf/0x360
[  151.020366]  rewind_stack_and_make_dead+0x16/0x20
[  151.020383] RIP: 0033:0x7f0f3d445b19
[  151.020391] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  151.020403] RSP: 002b:00007f0f3a9bb218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  151.020414] RAX: ffffffffffffffda RBX: 00007f0f3d558f68 RCX: 00007f0f3d445b19
[  151.020422] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f0f3d558f6c
[  151.020430] RBP: 00007f0f3d558f60 R08: 000000000000000e R09: 0000000000000000
[  151.020438] R10: 0000000000000011 R11: 0000000000000246 R12: 00007f0f3d558f6c
[  151.020445] R13: 00007ffd14bb13ff R14: 00007f0f3a9bb300 R15: 0000000000022000
[  151.020459]  </TASK>
[  151.020463] Modules linked in:
[  151.020470] ---[ end trace 0000000000000000 ]---
[  151.020475] RIP: 0010:perf_tp_event+0x175/0xe70
[  151.020492] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[  151.020503] RSP: 0018:ffff88800f9a7780 EFLAGS: 00010012
[  151.020513] RAX: 0000000020000032 RBX: 00000000ffffffa0 RCX: ffffc90001bfb000
[  151.020521] RDX: 0000000000040000 RSI: ffffffff818995b7 RDI: 0000000100000190
[  151.020529] RBP: ffff88800f9a79f0 R08: ffff88806ce31340 R09: ffffe8ffffc08ae0
[  151.020537] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
[  151.020544] R13: 0000000000000014 R14: ffff88806ce31340 R15: dffffc0000000000
[  151.020554] FS:  00007f0f3a9bb700(0000) GS:ffff8880e55dd000(0000) knlGS:0000000000000000
[  151.020565] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  151.020573] CR2: 00007f0f3d559018 CR3: 000000004661d000 CR4: 0000000000350ef0
[  151.020583] Kernel panic - not syncing: Fatal exception in interrupt
[  151.020956] Kernel Offset: disabled
[  151.108144] ---[ end Kernel panic - not syncing: Fatal exception in interrupt ]---

VM DIAGNOSIS:
00:09:52  Registers:
info registers vcpu 0
RAX=dffffc0000000005 RBX=00000000000003f9 RCX=0000000000000000 RDX=00000000000003f9
RSI=ffffffff828e3230 RDI=ffffffff88724180 RBP=ffffffff88724140 RSP=ffff88806ce084d8
R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=3030303030302052
R12=0000000000000051 R13=ffffffff88724190 R14=ffffffff88724140 R15=ffffffff88724400
RIP=ffffffff828e3285 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007f0f3a9bb700 00000000 00000000
GS =0000 ffff8880e55dd000 00000000 00000000
LDT=0000 fffffe2400000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f0f3d559018 CR3=000000004661d000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00007f0f3d52c7c000007f0f3d52c7c8
XMM02=00007f0f3d52c7e000007f0f3d52c7c0 XMM03=00007f0f3d52c7c800007f0f3d52c7c0
XMM04=ffffffff0000ff00000000ff00000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000080010000 RBX=0000000000000000 RCX=ffffffff812c6331 RDX=ffff888014329b80
RSI=ffffffff812c6379 RDI=ffffffff87878d20 RBP=0000000000000001 RSP=ffff88806cf08fd0
R8 =0000000000000001 R9 =fffffbfff0f0f1a4 R10=ffffffff87878d27 R11=ffff88806cf08ff8
R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000
RIP=ffffffff812c637a RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007fbc57d28700 00000000 00000000
GS =0000 ffff8880e56dd000 00000000 00000000
LDT=0000 fffffe4300000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b2cb26000 CR3=0000000046526000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000a60ce07b00000000cec3662e XMM01=000000000000000003515b82db34ca11
XMM02=0000000000000000333bebdfd0a6a21d XMM03=00007fbc5a8997c800007fbc5a8997c0
XMM04=ffffffff0000ff00000000ff00000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000