Warning: Permanently added '[localhost]:60611' (ECDSA) to the list of known hosts. 2025/08/30 05:11:26 fuzzer started 2025/08/30 05:11:27 dialing manager at localhost:43077 syzkaller login: [ 50.463380] cgroup: Unknown subsys name 'net' [ 50.537835] cgroup: Unknown subsys name 'cpuset' [ 50.551904] cgroup: Unknown subsys name 'rlimit' 2025/08/30 05:11:37 syscalls: 2214 2025/08/30 05:11:37 code coverage: enabled 2025/08/30 05:11:37 comparison tracing: enabled 2025/08/30 05:11:37 extra coverage: enabled 2025/08/30 05:11:37 setuid sandbox: enabled 2025/08/30 05:11:37 namespace sandbox: enabled 2025/08/30 05:11:37 Android sandbox: enabled 2025/08/30 05:11:37 fault injection: enabled 2025/08/30 05:11:37 leak checking: enabled 2025/08/30 05:11:37 net packet injection: enabled 2025/08/30 05:11:37 net device setup: enabled 2025/08/30 05:11:37 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/08/30 05:11:37 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/08/30 05:11:37 USB emulation: enabled 2025/08/30 05:11:37 hci packet injection: enabled 2025/08/30 05:11:37 wifi device emulation: enabled 2025/08/30 05:11:37 802.15.4 emulation: enabled 2025/08/30 05:11:38 fetching corpus: 50, signal 18201/20030 (executing program) 2025/08/30 05:11:38 fetching corpus: 100, signal 37352/40636 (executing program) 2025/08/30 05:11:38 fetching corpus: 150, signal 44418/49168 (executing program) 2025/08/30 05:11:38 fetching corpus: 200, signal 48359/54560 (executing program) 2025/08/30 05:11:38 fetching corpus: 250, signal 53455/60932 (executing program) 2025/08/30 05:11:38 fetching corpus: 300, signal 59125/67782 (executing program) 2025/08/30 05:11:38 fetching corpus: 350, signal 61351/71327 (executing program) 2025/08/30 05:11:38 fetching corpus: 400, signal 64260/75418 (executing program) 2025/08/30 05:11:38 fetching corpus: 450, signal 69544/81655 (executing program) 2025/08/30 05:11:38 fetching corpus: 500, signal 71936/85165 (executing program) 2025/08/30 05:11:38 fetching corpus: 550, signal 75380/89530 (executing program) 2025/08/30 05:11:38 fetching corpus: 600, signal 77782/92916 (executing program) 2025/08/30 05:11:38 fetching corpus: 650, signal 79694/95840 (executing program) 2025/08/30 05:11:39 fetching corpus: 700, signal 81093/98318 (executing program) 2025/08/30 05:11:39 fetching corpus: 750, signal 82750/100970 (executing program) 2025/08/30 05:11:39 fetching corpus: 800, signal 84709/103861 (executing program) 2025/08/30 05:11:39 fetching corpus: 850, signal 86149/106251 (executing program) 2025/08/30 05:11:39 fetching corpus: 900, signal 88241/109197 (executing program) 2025/08/30 05:11:39 fetching corpus: 950, signal 89708/111610 (executing program) 2025/08/30 05:11:39 fetching corpus: 1000, signal 92811/115284 (executing program) 2025/08/30 05:11:39 fetching corpus: 1050, signal 95014/118232 (executing program) 2025/08/30 05:11:39 fetching corpus: 1100, signal 96939/120873 (executing program) 2025/08/30 05:11:39 fetching corpus: 1150, signal 99910/124345 (executing program) 2025/08/30 05:11:39 fetching corpus: 1200, signal 102273/127296 (executing program) 2025/08/30 05:11:39 fetching corpus: 1250, signal 103355/129199 (executing program) 2025/08/30 05:11:40 fetching corpus: 1300, signal 104815/131328 (executing program) 2025/08/30 05:11:40 fetching corpus: 1350, signal 106150/133282 (executing program) 2025/08/30 05:11:40 fetching corpus: 1400, signal 109209/136542 (executing program) 2025/08/30 05:11:40 fetching corpus: 1450, signal 110303/138349 (executing program) 2025/08/30 05:11:40 fetching corpus: 1500, signal 111274/140069 (executing program) 2025/08/30 05:11:40 fetching corpus: 1550, signal 112273/141725 (executing program) 2025/08/30 05:11:40 fetching corpus: 1600, signal 113048/143204 (executing program) 2025/08/30 05:11:40 fetching corpus: 1650, signal 114228/145026 (executing program) 2025/08/30 05:11:40 fetching corpus: 1700, signal 115030/146533 (executing program) 2025/08/30 05:11:40 fetching corpus: 1750, signal 115952/148100 (executing program) 2025/08/30 05:11:40 fetching corpus: 1800, signal 116858/149593 (executing program) 2025/08/30 05:11:40 fetching corpus: 1850, signal 117774/151119 (executing program) 2025/08/30 05:11:41 fetching corpus: 1900, signal 118463/152471 (executing program) 2025/08/30 05:11:41 fetching corpus: 1950, signal 119235/153849 (executing program) 2025/08/30 05:11:41 fetching corpus: 2000, signal 120329/155428 (executing program) 2025/08/30 05:11:41 fetching corpus: 2050, signal 121393/156960 (executing program) 2025/08/30 05:11:41 fetching corpus: 2100, signal 122244/158388 (executing program) 2025/08/30 05:11:41 fetching corpus: 2150, signal 122896/159686 (executing program) 2025/08/30 05:11:41 fetching corpus: 2200, signal 124185/161356 (executing program) 2025/08/30 05:11:41 fetching corpus: 2250, signal 125279/162869 (executing program) 2025/08/30 05:11:41 fetching corpus: 2300, signal 126061/164174 (executing program) 2025/08/30 05:11:41 fetching corpus: 2350, signal 126808/165422 (executing program) 2025/08/30 05:11:41 fetching corpus: 2400, signal 127466/166630 (executing program) 2025/08/30 05:11:41 fetching corpus: 2450, signal 128114/167746 (executing program) 2025/08/30 05:11:42 fetching corpus: 2500, signal 128869/168976 (executing program) 2025/08/30 05:11:42 fetching corpus: 2550, signal 129274/169984 (executing program) 2025/08/30 05:11:42 fetching corpus: 2600, signal 129937/171130 (executing program) 2025/08/30 05:11:42 fetching corpus: 2650, signal 130654/172252 (executing program) 2025/08/30 05:11:42 fetching corpus: 2700, signal 132279/173882 (executing program) 2025/08/30 05:11:42 fetching corpus: 2750, signal 132863/174953 (executing program) 2025/08/30 05:11:42 fetching corpus: 2800, signal 134343/176432 (executing program) 2025/08/30 05:11:42 fetching corpus: 2850, signal 135150/177525 (executing program) 2025/08/30 05:11:42 fetching corpus: 2900, signal 136240/178747 (executing program) 2025/08/30 05:11:42 fetching corpus: 2950, signal 136768/179711 (executing program) 2025/08/30 05:11:42 fetching corpus: 3000, signal 137509/180799 (executing program) 2025/08/30 05:11:43 fetching corpus: 3050, signal 138051/181747 (executing program) 2025/08/30 05:11:43 fetching corpus: 3100, signal 138531/182695 (executing program) 2025/08/30 05:11:43 fetching corpus: 3150, signal 139235/183676 (executing program) 2025/08/30 05:11:43 fetching corpus: 3200, signal 139811/184637 (executing program) 2025/08/30 05:11:43 fetching corpus: 3250, signal 140297/185527 (executing program) 2025/08/30 05:11:43 fetching corpus: 3300, signal 141002/186471 (executing program) 2025/08/30 05:11:43 fetching corpus: 3350, signal 142212/187637 (executing program) 2025/08/30 05:11:43 fetching corpus: 3400, signal 142861/188557 (executing program) 2025/08/30 05:11:43 fetching corpus: 3450, signal 143499/189483 (executing program) 2025/08/30 05:11:43 fetching corpus: 3500, signal 143952/190292 (executing program) 2025/08/30 05:11:43 fetching corpus: 3550, signal 144520/191102 (executing program) 2025/08/30 05:11:44 fetching corpus: 3600, signal 145098/191939 (executing program) 2025/08/30 05:11:44 fetching corpus: 3650, signal 145880/192818 (executing program) 2025/08/30 05:11:44 fetching corpus: 3700, signal 146882/193752 (executing program) 2025/08/30 05:11:44 fetching corpus: 3750, signal 147854/194690 (executing program) 2025/08/30 05:11:44 fetching corpus: 3800, signal 148651/195620 (executing program) 2025/08/30 05:11:44 fetching corpus: 3850, signal 149225/196410 (executing program) 2025/08/30 05:11:44 fetching corpus: 3900, signal 149709/197175 (executing program) 2025/08/30 05:11:44 fetching corpus: 3950, signal 150042/197884 (executing program) 2025/08/30 05:11:44 fetching corpus: 4000, signal 150346/198558 (executing program) 2025/08/30 05:11:44 fetching corpus: 4050, signal 151058/199352 (executing program) 2025/08/30 05:11:44 fetching corpus: 4100, signal 151557/200040 (executing program) 2025/08/30 05:11:44 fetching corpus: 4150, signal 152005/200782 (executing program) 2025/08/30 05:11:45 fetching corpus: 4200, signal 153058/201638 (executing program) 2025/08/30 05:11:45 fetching corpus: 4250, signal 153478/202369 (executing program) 2025/08/30 05:11:45 fetching corpus: 4300, signal 153962/203054 (executing program) 2025/08/30 05:11:45 fetching corpus: 4350, signal 154468/203728 (executing program) 2025/08/30 05:11:45 fetching corpus: 4400, signal 155030/204407 (executing program) 2025/08/30 05:11:45 fetching corpus: 4450, signal 155829/205087 (executing program) 2025/08/30 05:11:45 fetching corpus: 4500, signal 156526/205715 (executing program) 2025/08/30 05:11:45 fetching corpus: 4550, signal 156990/206380 (executing program) 2025/08/30 05:11:45 fetching corpus: 4600, signal 157832/207091 (executing program) 2025/08/30 05:11:45 fetching corpus: 4650, signal 158233/207687 (executing program) 2025/08/30 05:11:45 fetching corpus: 4700, signal 158640/208259 (executing program) 2025/08/30 05:11:45 fetching corpus: 4750, signal 159164/208837 (executing program) 2025/08/30 05:11:46 fetching corpus: 4800, signal 159617/209401 (executing program) 2025/08/30 05:11:46 fetching corpus: 4850, signal 160153/209945 (executing program) 2025/08/30 05:11:46 fetching corpus: 4900, signal 160467/210515 (executing program) 2025/08/30 05:11:46 fetching corpus: 4950, signal 160831/211063 (executing program) 2025/08/30 05:11:46 fetching corpus: 5000, signal 161405/211594 (executing program) 2025/08/30 05:11:46 fetching corpus: 5050, signal 161785/212112 (executing program) 2025/08/30 05:11:46 fetching corpus: 5100, signal 162309/212644 (executing program) 2025/08/30 05:11:46 fetching corpus: 5150, signal 162705/213185 (executing program) 2025/08/30 05:11:46 fetching corpus: 5200, signal 162969/213675 (executing program) 2025/08/30 05:11:46 fetching corpus: 5250, signal 163316/214137 (executing program) 2025/08/30 05:11:47 fetching corpus: 5300, signal 164289/214288 (executing program) 2025/08/30 05:11:47 fetching corpus: 5350, signal 164843/214312 (executing program) 2025/08/30 05:11:47 fetching corpus: 5400, signal 165260/214312 (executing program) 2025/08/30 05:11:47 fetching corpus: 5450, signal 165746/214323 (executing program) 2025/08/30 05:11:47 fetching corpus: 5500, signal 166278/214333 (executing program) 2025/08/30 05:11:47 fetching corpus: 5550, signal 166690/214342 (executing program) 2025/08/30 05:11:47 fetching corpus: 5600, signal 167069/214350 (executing program) 2025/08/30 05:11:47 fetching corpus: 5650, signal 167453/214360 (executing program) 2025/08/30 05:11:47 fetching corpus: 5700, signal 167991/214363 (executing program) 2025/08/30 05:11:47 fetching corpus: 5750, signal 168305/214363 (executing program) 2025/08/30 05:11:47 fetching corpus: 5800, signal 168776/214366 (executing program) 2025/08/30 05:11:47 fetching corpus: 5850, signal 169179/214369 (executing program) 2025/08/30 05:11:48 fetching corpus: 5900, signal 169471/214369 (executing program) 2025/08/30 05:11:48 fetching corpus: 5950, signal 169871/214384 (executing program) 2025/08/30 05:11:48 fetching corpus: 6000, signal 170320/214412 (executing program) 2025/08/30 05:11:48 fetching corpus: 6050, signal 170752/214471 (executing program) 2025/08/30 05:11:48 fetching corpus: 6100, signal 171005/214472 (executing program) 2025/08/30 05:11:48 fetching corpus: 6150, signal 171394/214472 (executing program) 2025/08/30 05:11:48 fetching corpus: 6200, signal 171618/214482 (executing program) 2025/08/30 05:11:48 fetching corpus: 6250, signal 171969/214482 (executing program) 2025/08/30 05:11:48 fetching corpus: 6300, signal 172214/214500 (executing program) 2025/08/30 05:11:48 fetching corpus: 6350, signal 172507/214511 (executing program) 2025/08/30 05:11:48 fetching corpus: 6400, signal 173016/214514 (executing program) 2025/08/30 05:11:48 fetching corpus: 6450, signal 173247/214526 (executing program) 2025/08/30 05:11:49 fetching corpus: 6500, signal 173584/214529 (executing program) 2025/08/30 05:11:49 fetching corpus: 6550, signal 174016/214534 (executing program) 2025/08/30 05:11:49 fetching corpus: 6600, signal 174351/214536 (executing program) 2025/08/30 05:11:49 fetching corpus: 6650, signal 174789/214550 (executing program) 2025/08/30 05:11:49 fetching corpus: 6700, signal 175008/214554 (executing program) 2025/08/30 05:11:49 fetching corpus: 6750, signal 175405/214558 (executing program) 2025/08/30 05:11:49 fetching corpus: 6800, signal 175906/214563 (executing program) 2025/08/30 05:11:49 fetching corpus: 6850, signal 176430/214564 (executing program) 2025/08/30 05:11:49 fetching corpus: 6900, signal 176783/214567 (executing program) 2025/08/30 05:11:49 fetching corpus: 6950, signal 177198/214568 (executing program) 2025/08/30 05:11:49 fetching corpus: 7000, signal 177465/214577 (executing program) 2025/08/30 05:11:49 fetching corpus: 7050, signal 177754/214585 (executing program) 2025/08/30 05:11:49 fetching corpus: 7100, signal 178040/214589 (executing program) 2025/08/30 05:11:49 fetching corpus: 7150, signal 178334/214598 (executing program) 2025/08/30 05:11:50 fetching corpus: 7200, signal 178586/214613 (executing program) 2025/08/30 05:11:50 fetching corpus: 7250, signal 178927/214614 (executing program) 2025/08/30 05:11:50 fetching corpus: 7300, signal 179276/214619 (executing program) 2025/08/30 05:11:50 fetching corpus: 7350, signal 179619/214619 (executing program) 2025/08/30 05:11:50 fetching corpus: 7400, signal 179850/214623 (executing program) 2025/08/30 05:11:50 fetching corpus: 7450, signal 180082/214630 (executing program) 2025/08/30 05:11:50 fetching corpus: 7500, signal 180363/214635 (executing program) 2025/08/30 05:11:50 fetching corpus: 7550, signal 180581/214637 (executing program) 2025/08/30 05:11:50 fetching corpus: 7600, signal 180914/214643 (executing program) 2025/08/30 05:11:50 fetching corpus: 7650, signal 181184/214645 (executing program) 2025/08/30 05:11:50 fetching corpus: 7700, signal 181409/214648 (executing program) 2025/08/30 05:11:50 fetching corpus: 7750, signal 181792/214652 (executing program) 2025/08/30 05:11:51 fetching corpus: 7800, signal 182078/214654 (executing program) 2025/08/30 05:11:51 fetching corpus: 7850, signal 182584/214655 (executing program) 2025/08/30 05:11:51 fetching corpus: 7900, signal 182903/214662 (executing program) 2025/08/30 05:11:51 fetching corpus: 7950, signal 183158/214681 (executing program) 2025/08/30 05:11:51 fetching corpus: 8000, signal 183633/214766 (executing program) 2025/08/30 05:11:51 fetching corpus: 8050, signal 183850/214776 (executing program) 2025/08/30 05:11:51 fetching corpus: 8100, signal 184320/214781 (executing program) 2025/08/30 05:11:51 fetching corpus: 8150, signal 184658/214783 (executing program) 2025/08/30 05:11:51 fetching corpus: 8200, signal 184883/214792 (executing program) 2025/08/30 05:11:51 fetching corpus: 8250, signal 185150/214792 (executing program) 2025/08/30 05:11:52 fetching corpus: 8300, signal 185570/214796 (executing program) 2025/08/30 05:11:52 fetching corpus: 8350, signal 185798/214806 (executing program) 2025/08/30 05:11:52 fetching corpus: 8400, signal 185994/214806 (executing program) 2025/08/30 05:11:52 fetching corpus: 8450, signal 186297/214810 (executing program) 2025/08/30 05:11:52 fetching corpus: 8500, signal 186567/214813 (executing program) 2025/08/30 05:11:52 fetching corpus: 8550, signal 186884/214814 (executing program) 2025/08/30 05:11:52 fetching corpus: 8600, signal 187083/214816 (executing program) 2025/08/30 05:11:52 fetching corpus: 8650, signal 187417/214845 (executing program) 2025/08/30 05:11:52 fetching corpus: 8700, signal 187619/214868 (executing program) 2025/08/30 05:11:52 fetching corpus: 8750, signal 187988/214906 (executing program) 2025/08/30 05:11:52 fetching corpus: 8800, signal 188256/214908 (executing program) 2025/08/30 05:11:52 fetching corpus: 8850, signal 188552/214917 (executing program) 2025/08/30 05:11:53 fetching corpus: 8900, signal 188797/214924 (executing program) 2025/08/30 05:11:53 fetching corpus: 8950, signal 189064/214926 (executing program) 2025/08/30 05:11:53 fetching corpus: 9000, signal 189350/214928 (executing program) 2025/08/30 05:11:53 fetching corpus: 9050, signal 189463/214929 (executing program) 2025/08/30 05:11:53 fetching corpus: 9100, signal 189753/214946 (executing program) 2025/08/30 05:11:53 fetching corpus: 9150, signal 189944/214950 (executing program) 2025/08/30 05:11:53 fetching corpus: 9200, signal 190243/214955 (executing program) 2025/08/30 05:11:53 fetching corpus: 9250, signal 190466/214980 (executing program) 2025/08/30 05:11:53 fetching corpus: 9300, signal 190638/214985 (executing program) 2025/08/30 05:11:53 fetching corpus: 9350, signal 190898/214993 (executing program) 2025/08/30 05:11:53 fetching corpus: 9400, signal 191191/214993 (executing program) 2025/08/30 05:11:53 fetching corpus: 9450, signal 191605/214994 (executing program) 2025/08/30 05:11:53 fetching corpus: 9500, signal 191877/214995 (executing program) 2025/08/30 05:11:54 fetching corpus: 9550, signal 192106/214996 (executing program) 2025/08/30 05:11:54 fetching corpus: 9600, signal 192325/214998 (executing program) 2025/08/30 05:11:54 fetching corpus: 9650, signal 192580/215001 (executing program) 2025/08/30 05:11:54 fetching corpus: 9700, signal 192879/215005 (executing program) 2025/08/30 05:11:54 fetching corpus: 9750, signal 193109/215008 (executing program) 2025/08/30 05:11:54 fetching corpus: 9800, signal 193295/215014 (executing program) 2025/08/30 05:11:54 fetching corpus: 9850, signal 193489/215024 (executing program) 2025/08/30 05:11:54 fetching corpus: 9900, signal 193652/215032 (executing program) 2025/08/30 05:11:54 fetching corpus: 9950, signal 193900/215042 (executing program) 2025/08/30 05:11:54 fetching corpus: 10000, signal 194164/215043 (executing program) 2025/08/30 05:11:54 fetching corpus: 10050, signal 194371/215044 (executing program) 2025/08/30 05:11:54 fetching corpus: 10100, signal 194540/215051 (executing program) 2025/08/30 05:11:54 fetching corpus: 10150, signal 194712/215055 (executing program) 2025/08/30 05:11:55 fetching corpus: 10200, signal 194983/215055 (executing program) 2025/08/30 05:11:55 fetching corpus: 10250, signal 195203/215056 (executing program) 2025/08/30 05:11:55 fetching corpus: 10300, signal 195418/215057 (executing program) 2025/08/30 05:11:55 fetching corpus: 10350, signal 195630/215062 (executing program) 2025/08/30 05:11:55 fetching corpus: 10400, signal 195985/215102 (executing program) 2025/08/30 05:11:55 fetching corpus: 10450, signal 196187/215113 (executing program) 2025/08/30 05:11:55 fetching corpus: 10500, signal 196502/215115 (executing program) 2025/08/30 05:11:55 fetching corpus: 10550, signal 196734/215117 (executing program) 2025/08/30 05:11:55 fetching corpus: 10600, signal 197162/215121 (executing program) 2025/08/30 05:11:55 fetching corpus: 10650, signal 197315/215124 (executing program) 2025/08/30 05:11:55 fetching corpus: 10700, signal 197516/215126 (executing program) 2025/08/30 05:11:55 fetching corpus: 10750, signal 197733/215178 (executing program) 2025/08/30 05:11:56 fetching corpus: 10800, signal 197977/215178 (executing program) 2025/08/30 05:11:56 fetching corpus: 10850, signal 198207/215193 (executing program) 2025/08/30 05:11:56 fetching corpus: 10900, signal 198397/215193 (executing program) 2025/08/30 05:11:56 fetching corpus: 10950, signal 198658/215198 (executing program) 2025/08/30 05:11:56 fetching corpus: 11000, signal 198828/215200 (executing program) 2025/08/30 05:11:56 fetching corpus: 11050, signal 199183/215203 (executing program) 2025/08/30 05:11:56 fetching corpus: 11100, signal 199323/215204 (executing program) 2025/08/30 05:11:56 fetching corpus: 11150, signal 199673/215217 (executing program) 2025/08/30 05:11:56 fetching corpus: 11200, signal 199905/215222 (executing program) 2025/08/30 05:11:56 fetching corpus: 11250, signal 200277/215223 (executing program) 2025/08/30 05:11:56 fetching corpus: 11300, signal 200461/215225 (executing program) 2025/08/30 05:11:57 fetching corpus: 11350, signal 200648/215246 (executing program) 2025/08/30 05:11:57 fetching corpus: 11400, signal 200919/215248 (executing program) 2025/08/30 05:11:57 fetching corpus: 11450, signal 201096/215257 (executing program) 2025/08/30 05:11:57 fetching corpus: 11500, signal 201289/215259 (executing program) 2025/08/30 05:11:57 fetching corpus: 11550, signal 201526/215267 (executing program) 2025/08/30 05:11:57 fetching corpus: 11600, signal 201715/215285 (executing program) 2025/08/30 05:11:57 fetching corpus: 11650, signal 201875/215285 (executing program) 2025/08/30 05:11:57 fetching corpus: 11700, signal 202019/215287 (executing program) 2025/08/30 05:11:57 fetching corpus: 11750, signal 202251/215302 (executing program) 2025/08/30 05:11:57 fetching corpus: 11800, signal 202457/215322 (executing program) 2025/08/30 05:11:57 fetching corpus: 11850, signal 202732/215330 (executing program) 2025/08/30 05:11:57 fetching corpus: 11900, signal 202954/215330 (executing program) 2025/08/30 05:11:58 fetching corpus: 11950, signal 203120/215330 (executing program) 2025/08/30 05:11:58 fetching corpus: 12000, signal 203316/215330 (executing program) 2025/08/30 05:11:58 fetching corpus: 12007, signal 203327/215330 (executing program) 2025/08/30 05:11:58 fetching corpus: 12007, signal 203327/215330 (executing program) 2025/08/30 05:11:59 starting 8 fuzzer processes 05:11:59 executing program 0: ioctl$FAT_IOCTL_GET_VOLUME_ID(0xffffffffffffffff, 0x80047213, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x84, 0x0, 0xc, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_QOS_MAP={0xe, 0xc7, {[{0x8, 0x2}], "aa9c2515adf2716e"}}, @NL80211_ATTR_QOS_MAP={0x2e, 0xc7, {[{0x3, 0x1}, {0xa4, 0x5}, {0xd4, 0x4}, {0x4, 0x7}, {0x40, 0x1}, {0xfd, 0x1}, {0xec}, {0x9, 0x3}, {0x20, 0x3}, {0x9, 0x1}, {0x6, 0x4}, {0x0, 0x3}, {0x36, 0x2}, {0x3b, 0x4}, {0x7, 0x2}, {0x7f}, {0x5b, 0x3}], "c4241e6336bed0d4"}}, @NL80211_ATTR_QOS_MAP={0x28, 0xc7, {[{0x3, 0x2}, {0x80, 0x4}, {0x92, 0x4}, {0x1, 0x6}, {0x28, 0x3}, {0xcc}, {0x9}, {0x2, 0x2}, {0x5, 0x5}, {0x7f, 0x4}, {0x8, 0x2}, {0x2, 0x5}, {0x7f, 0x4}, {0x5, 0x4}], "d7c2615a647d2d9e"}}]}, 0x84}, 0x1, 0x0, 0x0, 0x40000}, 0x80) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x130, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x100, 0x6f}}}}, [@NL80211_ATTR_BSS_BASIC_RATES={0x13, 0x24, [{0x60}, {0x25, 0x1}, {0x22, 0x1}, {0x12}, {0x6c}, {0x1b, 0x1}, {0x18, 0x1}, {0x62, 0x1}, {0x30, 0x1}, {0xb, 0x1}, {0x9, 0x1}, {0xc, 0x1}, {0x1b}, {0x36, 0x1}, {0x12, 0x1}]}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xcf}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_BSS_BASIC_RATES={0x1b, 0x24, [{0xb}, {0x50, 0x1}, {0x36}, {0x60}, {0x2, 0x1}, {0x2, 0x1}, {0x16, 0x1}, {0x1}, {0x36}, {0x5}, {0x24}, {0x30, 0x1}, {0x6b, 0x1}, {0x4}, {0x2, 0x1}, {0x1}, {0x5, 0x1}, {0x18}, {0x9}, {0x1, 0x1}, {}, {0x24}, {0x2, 0x1}]}, @NL80211_ATTR_TX_RATES={0x18, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x14, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x10, 0x2, [{0x2, 0x4}, {0x4, 0x3}, {0x1, 0x2}, {0x4, 0xa}, {0x1, 0xa}, {0x4, 0x6}, {0x6, 0x8}, {0x1, 0x6}, {0x7, 0x7}, {0x6, 0xa}, {0x1}, {0x4, 0x6}]}]}]}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_MESH_SETUP={0xb8, 0x70, [@NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5, 0x8, 0x3}, @NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5}, @NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC={0x5, 0x6, 0x1}, @NL80211_MESH_SETUP_IE={0x96, 0x3, "8187bec3f5138ab2d95e94a9bfdb706478f2df06d06dd5381f027df90d4db2fe3f9e4f51a0b89e9fab5227c2f3e095943d0ef85aaa23d527e9b465e115d498a28c5dbce9655c32f45b6ec36a8a96fb75d8c7b7e2a5dc098a2b9ab6285e5d561f8757cc21091294f03b130641831709f8b74c74ccd06f7c8a7f108dab0badf7591407bc23a37723dc30a936f2d26a7397f5ec"}, @NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}]}]}, 0x130}}, 0x44000) read$ptp(0xffffffffffffffff, &(0x7f0000000400)=""/101, 0x65) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x38, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x0, 0x4e}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0xc010}, 0x4) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x38, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast2}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast1}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x8810) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x50, r1, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7fff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x10001}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x800) r2 = openat$incfs(0xffffffffffffffff, &(0x7f0000000800)='.pending_reads\x00', 0xc0240, 0x20) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000b00)={0x4c, 0x0, &(0x7f0000000980)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x58, 0x18, &(0x7f00000008c0)={@flat=@weak_binder={0x77622a85, 0xb}, @flat=@handle={0x73682a85, 0x1100, 0x3}, @ptr={0x70742a85, 0x0, &(0x7f0000000840)=""/126, 0x7e, 0x1, 0x40}}, &(0x7f0000000940)={0x0, 0x18, 0x30}}}], 0xe8, 0x0, &(0x7f0000000a00)="b6d14b36acc709d7594391f8527fad3b06fdd1168a5f0a6fec74e9b55fc4f012d2e23db63010454c630403b9928f0075ff6306111b31d5b01221124afe3a0e345ec45863a50d23bc8fdaa61b6c897d69f139746e19e6670b88a38c226b457bb93b07caf870a3356c577f76723525f588de11a33bfdfb5943b16a5e28621428f1b4f2809c03cd83a4a7ac54a65aeb24732304773a39794b79e34dea0d6024177b4631d78463994017d13486c6e2f493475bfa2b781307d1be22d9e684d310cb827a3b1fd5d24ca275f4d73bccea03b0ad17960171b3cd5a8fc67996eb9a0e630adc2b3f1336283d3f"}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000c00)={'ip6_vti0\x00', &(0x7f0000000b80)={'syztnl1\x00', 0x0, 0x29, 0x9, 0x3, 0xffff0000, 0xb, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, 0x7, 0x8000, 0x2, 0x9}}) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000c40)={0x0, @loopback, @dev}, &(0x7f0000000c80)=0xc) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000d40)={'sit0\x00', &(0x7f0000000cc0)={'syztnl2\x00', 0x0, 0x29, 0x20, 0x2, 0x9, 0x45, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x20, 0x80, 0x3, 0xdae5}}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000000f40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000f00)={&(0x7f0000000d80)={0x16c, 0x0, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x44094}, 0x8000) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000fc0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(0xffffffffffffffff, &(0x7f0000001080)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001040)={&(0x7f0000001000)={0x28, r6, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4048030) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000001140)={'ip6gre0\x00', &(0x7f00000010c0)={'sit0\x00', r3, 0x2f, 0x1, 0x61, 0xe6, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty, 0x40, 0x7, 0xb9, 0x6}}) recvmmsg$unix(r2, &(0x7f0000001380)=[{{&(0x7f0000001180)=@abs, 0x6e, &(0x7f0000001300)=[{&(0x7f0000001200)=""/112, 0x70}, {&(0x7f0000001280)=""/105, 0x69}], 0x2, &(0x7f0000001340)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}}], 0x1, 0x20, &(0x7f00000013c0)={0x77359400}) setsockopt$inet_mreq(r7, 0x0, 0x23, &(0x7f0000001400)={@empty, @rand_addr=0x64010101}, 0x8) 05:11:59 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = fcntl$getown(r0, 0x9) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) statx(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x400, 0x80, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = getpgrp(r1) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000004cc0)=[{{&(0x7f0000000240), 0x6e, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/212, 0xd4}, {&(0x7f00000013c0)=""/225, 0xe1}, {&(0x7f00000014c0)=""/21, 0x15}, {&(0x7f0000001500)}, {&(0x7f0000001540)=""/117, 0x75}, {&(0x7f00000015c0)=""/85, 0x55}], 0x7, &(0x7f00000016c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd0}}, {{&(0x7f00000017c0), 0x6e, &(0x7f00000019c0)=[{&(0x7f0000001840)=""/125, 0x7d}, {&(0x7f00000018c0)=""/34, 0x22}, {&(0x7f0000001900)=""/175, 0xaf}], 0x3}}, {{0x0, 0x0, &(0x7f0000002d40)=[{&(0x7f0000001a00)=""/116, 0x74}, {&(0x7f0000001a80)=""/228, 0xe4}, {&(0x7f0000001b80)=""/225, 0xe1}, {&(0x7f0000001c80)=""/181, 0xb5}, {&(0x7f0000001d40)=""/4096, 0x1000}], 0x5, &(0x7f0000002dc0)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @cred={{0x1c}}], 0xd8}}, {{&(0x7f0000002ec0), 0x6e, &(0x7f0000003140)=[{&(0x7f0000002f40)=""/245, 0xf5}, {&(0x7f0000003040)=""/13, 0xd}, {&(0x7f0000003080)=""/151, 0x97}], 0x3, &(0x7f0000003180)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}], 0x88}}, {{&(0x7f0000003240)=@abs, 0x6e, &(0x7f0000004700)=[{&(0x7f00000032c0)=""/246, 0xf6}, {&(0x7f00000033c0)=""/67, 0x43}, {&(0x7f0000003440)=""/224, 0xe0}, {&(0x7f0000003540)=""/4096, 0x1000}, {&(0x7f0000004540)=""/85, 0x55}, {&(0x7f00000045c0)=""/9, 0x9}, {&(0x7f0000004600)=""/228, 0xe4}], 0x7, &(0x7f0000004780)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xd8}}, {{&(0x7f0000004880)=@abs, 0x6e, &(0x7f0000004bc0)=[{&(0x7f0000004900)=""/192, 0xc0}, {&(0x7f00000049c0)=""/220, 0xdc}, {&(0x7f0000004ac0)=""/88, 0x58}, {&(0x7f0000004b40)=""/105, 0x69}], 0x4, &(0x7f0000004c00)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xb8}}], 0x6, 0x40000000, &(0x7f0000004e40)={0x0, 0x3938700}) stat(&(0x7f0000004e80)='./file0\x00', &(0x7f0000004ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000004f40)='./file0\x00', &(0x7f0000004f80)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) fstat(0xffffffffffffffff, &(0x7f0000005000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000005180)={&(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfc, 0x400}, 0xc, &(0x7f0000000080)=[{&(0x7f0000000040)={0x2c, 0x3c, 0x4, 0x70bd29, 0x25dfdbfc, "", [@nested={0xc, 0x8a, 0x0, 0x1, [@typed={0x8, 0x18, 0x0, 0x0, @pid=r1}]}, @typed={0xe, 0x58, 0x0, 0x0, @str='^)\\&!!^]\x84\x00'}]}, 0x2c}], 0x1, &(0x7f0000005080)=[@rights={{0x14, 0x1, 0x1, [r0]}}, @cred={{0x1c, 0x1, 0x2, {r2, 0x0, r3}}}, @rights={{0x1c, 0x1, 0x1, [r0, 0xffffffffffffffff, r4]}}, @cred={{0x1c, 0x1, 0x2, {r5, r6, r13}}}, @cred={{0x1c, 0x1, 0x2, {r1, r14, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {r1, 0xee00, r15}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}], 0xd8, 0x4000844}, 0x24020081) mount$bind(&(0x7f00000051c0)='./file0\x00', &(0x7f0000005200)='./file0\x00', &(0x7f0000005240), 0x20, 0x0) ioctl$FICLONE(r7, 0x40049409, r12) r16 = fsmount(r10, 0x0, 0xe) mount$9p_fd(0x0, &(0x7f0000005280)='./file0\x00', &(0x7f00000052c0), 0x1000, &(0x7f0000005300)={'trans=fd,', {'rfdno', 0x3d, r16}, 0x2c, {'wfdno', 0x3d, r11}, 0x2c, {[{@noextend}, {@cache_none}], [{@euid_eq={'euid', 0x3d, r8}}]}}) fsconfig$FSCONFIG_SET_FLAG(r9, 0x0, &(0x7f0000005380)='rw\x00', 0x0, 0x0) r17 = openat$vcs(0xffffffffffffff9c, &(0x7f00000053c0), 0x438000, 0x0) readahead(r17, 0x5a94, 0x4) r18 = accept4$packet(r17, 0x0, &(0x7f0000005400), 0x80000) fcntl$setstatus(r18, 0x4, 0x40000) 05:11:59 executing program 7: shutdown(0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'gre0\x00', &(0x7f0000000080)={'tunl0\x00', 0x0, 0x7, 0x10, 0xffffff80, 0x3f, {{0x12, 0x4, 0x0, 0x9, 0x48, 0x68, 0x0, 0x40, 0x2f, 0x0, @remote, @private=0xa010102, {[@ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x30, 0x0, [{0x1, 0x2}, {0x2, 0x5, "4ecc04"}, {0x0, 0x5, "d8e9f1"}, {0x6, 0xf, "517916972a7462bdca04b37655"}, {0x2, 0xb, "cac9a5bca673dd7233"}, {0x5, 0x4, "34f1"}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wg1\x00', 0x0}) clock_gettime(0x0, &(0x7f0000004700)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f00000045c0)=[{{&(0x7f00000011c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f0000002740)=[{&(0x7f0000001240)=""/139, 0x8b}, {&(0x7f0000001300)=""/4096, 0x1000}, {&(0x7f0000002300)=""/248, 0xf8}, {&(0x7f0000002400)=""/158, 0x9e}, {&(0x7f00000024c0)=""/255, 0xff}, {&(0x7f00000025c0)=""/110, 0x6e}, {&(0x7f0000002640)=""/216, 0xd8}], 0x7, &(0x7f00000027c0)=""/190, 0xbe}, 0x80000001}, {{&(0x7f0000002880)=@alg, 0x80, &(0x7f0000003a00)=[{&(0x7f0000002900)=""/4096, 0x1000}, {&(0x7f0000003900)=""/169, 0xa9}, {&(0x7f00000039c0)=""/46, 0x2e}], 0x3}, 0x80000001}, {{0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f0000003a40)=""/225, 0xe1}], 0x1, &(0x7f0000003b80)=""/246, 0xf6}, 0x3ff}, {{&(0x7f0000003c80)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000003d00)=""/55, 0x37}, {&(0x7f0000003d40)=""/135, 0x87}, {&(0x7f0000003e00)=""/62, 0x3e}], 0x3, &(0x7f0000003e80)=""/208, 0xd0}, 0x3}, {{&(0x7f0000003f80)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000004480)=[{&(0x7f0000004000)=""/141, 0x8d}, {&(0x7f00000040c0)=""/83, 0x53}, {&(0x7f0000004140)=""/199, 0xc7}, {&(0x7f0000004240)=""/224, 0xe0}, {&(0x7f0000004340)=""/54, 0x36}, {&(0x7f0000004380)=""/248, 0xf8}], 0x6, &(0x7f0000004500)=""/174, 0xae}, 0x3f}], 0x5, 0x10041, &(0x7f0000004740)={r4, r5+60000000}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f00000048c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000004880)={&(0x7f0000004780)={0xd8, 0x0, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x80, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x8000}, 0x8081) pipe2$9p(&(0x7f0000004900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ppoll(&(0x7f0000004940)=[{r1}, {r6, 0x8000}, {r0}, {0xffffffffffffffff, 0x10}, {r9, 0x84}, {r6, 0x1}, {0xffffffffffffffff, 0x7418}, {r0, 0x400}, {r6, 0x100}], 0x9, &(0x7f00000049c0), &(0x7f0000004a00)={[0x7]}, 0x8) inotify_add_watch(r1, &(0x7f0000004a40)='./file0\x00', 0x640001c0) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000004a80)='net/ip_vs_stats_percpu\x00') connect$bt_sco(r10, &(0x7f0000004ac0)={0x1f, @none}, 0x8) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000004b00)={"856fb77901c9f10ee72653fbdd35e6d6", 0x0, 0x0, {0xffffffffffff8174, 0x8000}, {0x5, 0x5c1}, 0xffffffff, [0x7fff, 0x9, 0x80, 0x17ab, 0x6, 0x7, 0x0, 0x2, 0x4, 0x2, 0x6, 0xc9a7, 0x410, 0xc1d, 0x6, 0x2000000000000000]}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f0000004c00)={{r8}, r11, 0x8, @unused=[0x0, 0x5, 0x8, 0x2fd39ba1], @subvolid=0x7}) write$P9_RCLUNK(r1, &(0x7f0000005c00)={0x7, 0x79, 0x1}, 0x7) clock_gettime(0x0, &(0x7f00000087c0)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000008700)=[{{&(0x7f0000005c40)=@ax25={{0x3, @bcast}, [@netrom, @bcast, @bcast, @remote, @netrom, @netrom, @rose, @netrom]}, 0x80, &(0x7f0000007000)=[{&(0x7f0000005cc0)=""/139, 0x8b}, {&(0x7f0000005d80)=""/4096, 0x1000}, {&(0x7f0000006d80)=""/161, 0xa1}, {&(0x7f0000006e40)=""/208, 0xd0}, {&(0x7f0000006f40)=""/121, 0x79}, {&(0x7f0000006fc0)=""/62, 0x3e}], 0x6, &(0x7f0000007080)=""/45, 0x2d}, 0xa7f}, {{0x0, 0x0, &(0x7f00000073c0)=[{&(0x7f00000070c0)=""/30, 0x1e}, {&(0x7f0000007100)=""/215, 0xd7}, {&(0x7f0000007200)=""/72, 0x48}, {&(0x7f0000007280)=""/5, 0x5}, {&(0x7f00000072c0)=""/53, 0x35}, {&(0x7f0000007300)=""/136, 0x88}], 0x6, &(0x7f0000007440)=""/131, 0x83}, 0x5b2dc118}, {{&(0x7f0000007500)=@l2tp={0x2, 0x0, @multicast2}, 0x80, &(0x7f00000085c0)=[{&(0x7f0000007580)=""/4096, 0x1000}, {&(0x7f0000008580)}], 0x2, &(0x7f0000008600)=""/236, 0xec}, 0x3f}], 0x3, 0x0, &(0x7f0000008800)={r12, r13+10000000}) r14 = accept$unix(r0, 0x0, &(0x7f0000008840)) ioctl$sock_SIOCBRDELBR(r14, 0x89a1, &(0x7f0000008880)='erspan0\x00') accept$unix(0xffffffffffffffff, &(0x7f0000008900), &(0x7f0000008980)=0x6e) 05:12:00 executing program 3: ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0xaa4, 0x1, 0x100}) sendmsg$IPSET_CMD_PROTOCOL(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x1, 0x6, 0x301, 0x0, 0x0, {0x3, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0xc36778c1795714e7}, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x10000, 0x0) copy_file_range(r0, &(0x7f0000000140)=0x2800000000000000, r1, &(0x7f00000001c0)=0x100000001, 0x22, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x4000, 0x0) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x4c, r3, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x2}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x62}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x44}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x150, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SEC_KEY={0x58, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x5}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "e7aafb6b6b9346582d5d69a25fec8a2e3bfaba822393817a47fbade5ee2fab04"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "81ee2dd126319b12039991e154acc4f0"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "442b99e95a8c3c5673269b88686575ce"}]}, @NL802154_ATTR_SEC_KEY={0x98, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x78, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xca3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x34, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xff}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}]}]}, @NL802154_KEY_ATTR_ID={0x14, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x4}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x9e}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_KEY={0x18, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "cb9287d8f74b898ed60ad647ba498a26"}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000001}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x150}, 0x1, 0x0, 0x0, 0x20000004}, 0xc8884) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000640)={r0, 0x3, 0x0, 0x7a}) write$9p(r5, &(0x7f0000000680)="c10e94ce2c3c96feb4c37a2fbd16385c2bfd92e03501356724f13abfc4bebae86fcae475e0d0d9f955a4299bd0c3e328372f4fbeab3157e887bc3399a18b6c2c6ce13054c9dcd555b75f06238d6b2e6d69031049630f68dd6b604b71f37276d29b5a065ec8db9e7b1454e62aeac34fa0bb8371aa29e847c3bba1eb61eb3ea0e86bb68b4458edd3def35c856f45b94c025d06b6502a034aba", 0x98) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x70, r6, 0x0, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_KEY={0x48, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "f1d0dca5b94b40dc0dd0083ad8311aab"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "1ef4cf9d61e099fbaec492cf1e8118c0"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "f14b99ede8112bf72ec551b24e3cb8f9"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x1f}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x70}, 0x1, 0x0, 0x0, 0x8040}, 0x21) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f00000008c0), 0x200000, 0x0) recvmmsg$unix(r7, &(0x7f0000000dc0)=[{{&(0x7f0000000900), 0x6e, &(0x7f0000000a80)=[{&(0x7f0000000980)=""/186, 0xba}, {&(0x7f0000000a40)=""/40, 0x28}], 0x2, &(0x7f0000000ac0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x80}}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000b40)=""/171, 0xab}, {&(0x7f0000000c00)=""/234, 0xea}], 0x2, &(0x7f0000000d40)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x70}}], 0x2, 0x100, &(0x7f0000000e40)) fsetxattr(r5, &(0x7f0000000e80)=@known='com.apple.system.Security\x00', &(0x7f0000000ec0)='802.15.4 MAC\x00', 0xd, 0x1) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000f40)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000f80)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000001080)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001040)={&(0x7f0000000fc0)={0x4c, r6, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x19}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000003}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x13}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000000}, 0x8000) getsockopt$IPT_SO_GET_REVISION_TARGET(r8, 0x0, 0x43, &(0x7f00000010c0)={'icmp\x00'}, &(0x7f0000001100)=0x1e) 05:12:00 executing program 6: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='^^+I\x00') pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000040)="cec3c1b1fd697c8fe7d3befa2bfffdf81badebb24354582758fc3f4ce65644733764a89f2888b141d01397d2fe3449b7a3107733b238350a63143b53a638bf1302e0159730a14fdb7742a01f66c908e1596f953deec3abad8c9219c53aab43592a7d0115c91712c4cfc0011488042744d90d1bab2d6407f38a4cac760361aa2c9934a705a365f0173d8c085e475f29321e841c4f4de504d3129e4c64d5d4a5", 0x9f}, {&(0x7f0000000100)="ad0c94e6790f6533112666fefb1033c0525ab867fd0bde76b18b6d40e0b06e171e829a19e34e9a1ce0a16c7a7a43152f2507ef9f39544e4c34983ec34e8f23a69ba57eafcfa453b19ba1c8b8558fb5073e57d65476545817d0fcec6af7343a70d1062ff0952631c9da233f4ce91ffb0e2a1ce2116a6d4d5484d14f36f21f8aa877ec03583be9e8113edbfeb03bfaf52e8a22e0b9955e973a8c8e49330c99a0831cdbcc95d7b2d8e06fd30b9c70637395", 0xb0}, {&(0x7f00000001c0)="137582754e4043965a662089de77d9dbc2c216004b5cb777da2718498c3f46fcdddc3338f493c283d5f185faaad1856fb8d8dd548e7cca94405c7448d198923a1c148475f085d4e7ad83bfb1554d65fe47e004d765c52df7b49ba2c64c110799f79f7531791eca7581", 0x69}], 0x3, 0x1, 0x1, 0x4) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x35) read$rfkill(r0, &(0x7f00000002c0), 0x8) ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x80189439, &(0x7f0000000300)) r1 = openat$cgroup_subtree(r0, &(0x7f0000000340), 0x2, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r1, 0x810c9365, &(0x7f0000000380)={{0x8, 0x7fff}, 0x100, './file0\x00'}) r2 = syz_open_dev$loop(&(0x7f00000004c0), 0x55, 0x32180) fsetxattr(r2, &(0x7f0000000500)=@random={'osx.', ':fd%*\x00'}, &(0x7f0000000540)='^^+I\x00', 0x5, 0x3) r3 = perf_event_open(&(0x7f00000005c0)={0x0, 0x80, 0x8, 0x2, 0x6, 0x8, 0x0, 0x10000, 0x2000, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x5, 0x1, @perf_bp={&(0x7f0000000580), 0x2}, 0x200, 0x7, 0x7, 0x2, 0xd, 0x1, 0x5, 0x0, 0x9, 0x0, 0x6}, 0xffffffffffffffff, 0x8, r0, 0x0) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000640)='ns/ipc\x00') ioctl$NS_GET_OWNER_UID(r4, 0xb704, &(0x7f0000000680)) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$BTRFS_IOC_RESIZE(r5, 0x50009403, &(0x7f00000006c0)={{r0}, {@val, @actul_num={@val=0x2d, 0x1b4, 0x6b}}}) r6 = syz_open_dev$vcsu(&(0x7f0000000700), 0xffffffffffff8001, 0x420040) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f0000003940)=[{&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f0000001740)=""/228, 0xe4}, {&(0x7f0000001840)=""/4096, 0x1000}, {&(0x7f0000002840)=""/4096, 0x1000}, {&(0x7f0000003840)=""/222, 0xde}], 0x5) connect(r3, &(0x7f00000039c0)=@ethernet={0x306, @multicast}, 0x80) openat$cgroup_subtree(r0, &(0x7f0000003a40), 0x2, 0x0) ftruncate(0xffffffffffffffff, 0x1) 05:12:00 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x109900) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000040)={0x0, @time={0x9, 0x1000}, 0x4, {0x40}, 0xe3, 0x1}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000080)={0xffffffff, 0x7, 0x80000001}) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(0xffffffffffffffff, 0xc0a85322, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000640)={{0x1, 0x1, 0x18, r0, {0x8, 0x1}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0bc5351, &(0x7f0000000680)={0x3, 0x0, 'client1\x00', 0x1, "94986ff4ec76c579", "fbd637597bad84077223b23e5ced3f5aa0d408a4c056b9a08dab698a7ac1e5f7", 0x64c, 0x6a6}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000740)={0x0, 0xf426, 0x2, 0x3, 0x0, 0xffffffff}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000007c0)={{0x7, 0x5}, 'port0\x00', 0x4, 0x0, 0xfff, 0x7ff, 0x20, 0x7, 0x800, 0x0, 0x0, 0x66}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000880)={0x1, @time={0x24, 0x80}, 0xf1, {0x2, 0x2}, 0xd2, 0x1, 0x54}) r2 = syz_mount_image$msdos(&(0x7f00000008c0), &(0x7f0000000900)='./file0\x00', 0x9b5, 0x7, &(0x7f0000001cc0)=[{&(0x7f0000000940)="3d6f9357155ee1360a694fdb6877b5512bde4bf7e4c4983f8472f7bf1849d172", 0x20, 0x1}, {&(0x7f0000000980)="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", 0x1000, 0x100000001}, {&(0x7f0000001980)="5322a629b74b2d516061b957be475358326659c7bbd18cee39849cb507394c313c8e558485f3b896bc59947e2a5500bff66af0dbb5165356edb21bd98c3835cdc9bedbebb447ebbec84e5d5c393357332011b458f9201c1dbede5f69f7c00fb2100cb6815c47de9a5210d79c3c93cc1f8cea1c785bc9f62f07df0cdaae32976866128dabcec764762c728d723d68fbc2e04f50f32a9b153ad813c3af409e9b7fca15d8aaf9c69b292c748fb93873ea351d7a0cc9761db237e934b6", 0xbb, 0x2}, {&(0x7f0000001a40)="02f80c1c0af52cb5240b18e6e48bf4c16410fb009a18190dab87fbd09bf152d044f760219353c88ce7aae6e947975a94262194b7cefb562fe282dd530d0679de2cf3ef38d5c75bd6db51a7cb9dc4632b6055fd21b3e7e42f8b03ee7434a23484b6550800f84ba803b663e242cedb16fe9d3f850e7f6d3f0c543051ff78c5d408b5cf33ace9d2f3313716b943f30aa11d7736a4c35e0dba14cf2a45fb19720f2a", 0xa0, 0x9}, {&(0x7f0000001b00)="798666e358be8f1a3457dd0b95a533ed4fdbbd30cbad5a2c5d00b2520e93aeef0afbd9a56a6b999457346164fb7e01abc2cfdb3858a4822a993df7ca2570a462d2dfce0d020ea160fe81d49c1418119e8aaf42743bf944d9f5d4a78907f1800a61ff8c9a40", 0x65, 0x7fffffff}, {&(0x7f0000001b80)="1e2e8ebd1c6363ec2e83ad53e9f3d616dca9725866e0a6b9dc1fad73ecd9bbd9a6b59a4d01975303bb6da2a721dfcbcb1e427e510cf36074170391842f5614660c00a04b087c0f24ce4c627a71f7cd7a8945095ede200036e3927d242052c3208fa743ce2bacae40e0e7713d012ecee2b0463e4477b9f39d96d3beed5050d60aa72e2422fd32a3fe462d48472f81d214be6f736b8d7199544bd868f12578e5ef4f51012f8e9f308afb1e70b8dcd0c32c618c81cd0513308aa3c41d38b5c8a66481600ae48812db3834586f43e9a94fba4750081f090e8f8bc494def23717e7432f83c13bd78e1db51eae177fde", 0xed, 0x2}, {&(0x7f0000001c80)="ebd5415b852ff56d2f718036f960173cadbe31a838d5aec7129e67821a91bb00fb845e26cc7dd3", 0x27, 0xa22}], 0x42000, &(0x7f0000001d80)={[{@dots}, {@nodots}, {@nodots}, {@fat=@umask={'umask', 0x3d, 0x8}}, {@fat=@usefree}, {@nodots}, {@nodots}], [{@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@appraise}, {@pcr={'pcr', 0x3d, 0x1c}}]}) ioctl$BTRFS_IOC_SPACE_INFO(r2, 0xc0109414, &(0x7f0000001e00)={0x9f, 0x5, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000002d00)='./file0/file0\x00', 0x100, 0x0) statx(r3, &(0x7f0000002d40)='./file0\x00', 0x100, 0x10, &(0x7f0000002d80)) write$sndseq(r1, &(0x7f0000002f40)=[{0x1, 0x4, 0xff, 0x3, @time={0x92, 0x2d}, {0xf5, 0x7f}, {0xcf, 0x2}, @addr={0x0, 0x3}}, {0x9, 0x4, 0x3, 0x81, @tick=0xcd91, {0x2, 0x3e}, {0x3}, @raw8={"08f1ef329e06ca12f2d9ed9e"}}, {0x7, 0x3f, 0xfc, 0x8, @time={0x38000000, 0x234}, {0x8, 0xd6}, {0x8, 0x8}, @time=@time={0x400, 0x7}}, {0x81, 0x1, 0xfd, 0xff, @tick=0x3ff, {0x3f, 0x81}, {0x1f, 0x81}, @note={0x37, 0x3f, 0x1f, 0x4, 0x8001}}, {0x0, 0x2, 0xfb, 0x8, @time={0x7fff, 0x3}, {0x4, 0x4}, {0x5, 0x81}, @control={0x3, 0x0, 0x7f}}, {0x5, 0x2, 0x1f, 0x3f, @tick=0x1, {0x0, 0x80}, {0x9, 0x81}, @raw8={"fb82f5c2b22e015374062d65"}}, {0x5, 0x3f, 0x4, 0x2, @time={0x50, 0x6}, {0x0, 0x7f}, {0x6, 0x28}, @control={0x1f, 0x0, 0x3f}}, {0x0, 0x80, 0x62, 0x0, @tick=0x5, {0x6}, {0x40, 0x9}, @ext={0xa3, &(0x7f0000002e80)="29b1f252bba0c1d73ec0d9686170cecc7bdc74b4a32b0f0792cf3a5c1bd718f92183d0928dc6a91dcaf2a42d0e6de0a5a3d726ff447898a3812dd01635176e997170d4e7e61c97604d31728a5cd0ef4e3d0ec7bcd307151ccf372f3957256e09ad6ffed482134348a8b07197a1af74cef450f1509d5e9e17af50c08b560ab0dbb20992e0c227b6ea33a47604c1f6dce392cd10ff9eaffa958765464603a6f0ed5df763"}}], 0xe0) r4 = creat(&(0x7f0000003040)='./file0/file0\x00', 0x15) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r4, 0x80045300, &(0x7f0000003080)) write$sndseq(r0, &(0x7f0000003100)=[{0x5, 0x6, 0x3f, 0x0, @tick=0xa5f, {0xb6, 0x4}, {0x3, 0x2}, @control={0x8, 0x9, 0x2}}, {0x7f, 0x6, 0x0, 0xc6, @time={0x5, 0x5d}, {0x9, 0x6}, {0x5, 0x20}, @queue={0x80, {0x1000, 0x375}}}, {0x0, 0x8, 0xa3, 0xe3, @time={0x0, 0x1000}, {0x2, 0x5}, {0x62, 0x80}, @raw32={[0x3, 0x1, 0x3]}}, {0x80, 0x4e, 0x4, 0x0, @time={0x7, 0x8}, {0x5, 0x9}, {0x2a, 0x2}, @quote={{0x4, 0x2}, 0x3, &(0x7f00000030c0)={0x81, 0x8, 0x1, 0x9, @time={0x50c4, 0x8}, {0x8, 0xdb}, {0xa8, 0x3}, @control={0x8, 0x401, 0x1}}}}, {0xff, 0x1, 0xc, 0x6, @time={0x8, 0x6}, {0x3e, 0xff}, {0x8, 0x53}, @time=@time={0x3, 0x752}}], 0x8c) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r1, 0x80045300, &(0x7f00000031c0)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000003200)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x2) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r4, 0x404c534a, &(0x7f0000003240)={0x8000, 0x6, 0x1}) 05:12:00 executing program 4: open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=@orangefs={0x14, 0x1, {"2fa23e8d449f5348719bc97f6bd3b1ae", 0x1cb}}, 0x800) r0 = accept4(0xffffffffffffffff, &(0x7f0000000040)=@phonet, &(0x7f00000000c0)=0x80, 0x0) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff) accept$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000001c0)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000200)={0x0, @empty, @multicast1}, &(0x7f0000000240)=0xc) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000380)={'tunl0\x00', &(0x7f0000000280)={'tunl0\x00', 0x0, 0x80, 0x80, 0x7, 0xda9d, {{0x36, 0x4, 0x0, 0x1, 0xd8, 0x66, 0x0, 0x83, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x1d}, @rand_addr=0x64010101, {[@timestamp={0x44, 0x1c, 0x7b, 0x0, 0x1, [0x2, 0x8, 0x9, 0x2, 0x7, 0x1]}, @lsrr={0x83, 0xf, 0x1c, [@private=0xa010102, @rand_addr=0x64010100, @multicast2]}, @timestamp_prespec={0x44, 0x14, 0x63, 0x3, 0x2, [{@multicast2, 0x8}, {@empty, 0x80}]}, @cipso={0x86, 0x3d, 0x0, [{0x5, 0x9, "08858e77fbcbbe"}, {0x5, 0xd, "247084226b2dffd8dd1f60"}, {0x1, 0xa, "60dd405fd60f00af"}, {0x2, 0x5, "ce00c3"}, {0x0, 0x12, "698eddc7eb36863ecc4a2c8ecf08adbf"}]}, @generic={0x94, 0xf, "73478e4738f1c17e9c9dacf45a"}, @timestamp_prespec={0x44, 0x14, 0xdb, 0x3, 0x8, [{@multicast1, 0x8}, {@private=0xa010100, 0xffffffff}]}, @ssrr={0x89, 0xb, 0xa3, [@empty, @dev={0xac, 0x14, 0x14, 0x42}]}, @lsrr={0x83, 0x17, 0x68, [@empty, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @broadcast]}, @noop]}}}}}) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000580)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000540)={&(0x7f00000003c0)={0x15c, r1, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR={0x44, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}]}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x40}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xfc}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x7}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010101}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x3a}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1f}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR={0x54, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x24}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}]}]}, 0x15c}, 0x1, 0x0, 0x0, 0x4004840}, 0x810) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r5, {0x4}}, './file0\x00'}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r0) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, r7, 0x400, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0xdc, 0x1c}}}}, [@NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x8000) r8 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000780), 0x400100, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r8) sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x4c, r7, 0x100, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x160}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x4001) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000900)=0x5, 0x4) setsockopt$packet_buf(r0, 0x107, 0x1, &(0x7f0000000940)="6d41010df15b8f6b58508c0c37ba6e55ec74b73138aaa65b95cf49ba18356d381d3f16e6c11b75024052ac9765cb5cfe4f08e0b0acca246b8f5aabc947834c6b41853ff543aa93ebb3081684ef7f6db849688aa50467e1136ae7cd413df6e40029dcf1835bc352b0a66e60c243e0a8e4cd8269f68ab39cc945c399bfb90152bd4f64717cd22ec958f2ca2b38965415934f7bef7838a10dcf6bc90c5b223db2ef0d90c7efe25018cf9e7dfb9043250dfcdd68d1a6fe0fec3535b1e5", 0xbb) setsockopt$packet_rx_ring(r8, 0x107, 0x5, &(0x7f0000000a00)=@req={0xddc, 0xffffffff, 0x6, 0x7}, 0x10) ioctl$TIOCGPGRP(r6, 0x540f, &(0x7f0000000cc0)=0x0) r10 = fcntl$getown(0xffffffffffffffff, 0x9) clone3(&(0x7f0000000d40)={0x400, &(0x7f0000000a40), &(0x7f0000000a80), &(0x7f0000000ac0), {0x2b}, &(0x7f0000000b00)=""/201, 0xc9, &(0x7f0000000c00)=""/138, &(0x7f0000000d00)=[0xffffffffffffffff, 0x0, r9, r10, 0x0], 0x5, {r6}}, 0x58) 05:12:00 executing program 5: modify_ldt$write2(0x11, &(0x7f0000000000)={0x9, 0x20000000, 0x1000, 0x1, 0x2}, 0x10) modify_ldt$write2(0x11, &(0x7f0000000040)={0x7, 0x20000800, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10) modify_ldt$write2(0x11, &(0x7f0000000080)={0x40, 0x0, 0x400, 0x1, 0x1}, 0x10) modify_ldt$write2(0x11, &(0x7f00000000c0)={0x7a, 0x100000, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1}, 0x10) modify_ldt$write2(0x11, &(0x7f0000000100)={0x7, 0x1000, 0x2000, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x10) modify_ldt$write2(0x11, &(0x7f0000000140)={0x0, 0x20000800, 0xffffffffffffffff, 0x1, 0x3, 0x0, 0x0, 0x1}, 0x10) modify_ldt$write2(0x11, &(0x7f0000000180)={0x0, 0x20001000, 0x2000, 0x1, 0x3, 0x1, 0x1}, 0x10) modify_ldt$write2(0x11, &(0x7f00000001c0)={0x0, 0x0, 0x400, 0x1, 0x0, 0x1, 0x1, 0x1}, 0x10) modify_ldt$write2(0x11, &(0x7f0000000200)={0x4, 0x100000, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1}, 0x10) modify_ldt$write2(0x11, &(0x7f0000000240)={0x2, 0x20000000, 0x0, 0x1, 0x2, 0x1, 0x1, 0x0, 0x1}, 0x10) modify_ldt$write2(0x11, &(0x7f0000000280)={0x8, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x10) modify_ldt$write2(0x11, &(0x7f00000002c0)={0x3, 0x100000, 0x1000, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x10) modify_ldt$write2(0x11, &(0x7f0000000300)={0x37b, 0x20000000, 0x4000, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x10) modify_ldt$write2(0x11, &(0x7f0000000340)={0x7, 0x20000800, 0x4000, 0x0, 0x3, 0x1, 0x1, 0x1}, 0x10) modify_ldt$write2(0x11, &(0x7f0000000380)={0x3ff, 0x20001000, 0x400, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x10) modify_ldt$write2(0x11, &(0x7f00000003c0)={0x40, 0x20000000, 0x400, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1}, 0x10) modify_ldt$write2(0x11, &(0x7f0000000400)={0x1000, 0x100000, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1}, 0x10) modify_ldt$write2(0x11, &(0x7f0000000440)={0xd0000000, 0x20001000, 0x4000, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}, 0x10) modify_ldt$write2(0x11, &(0x7f0000000480)={0x1f, 0x100000, 0xffffffffffffffff, 0x1, 0x2, 0x1}, 0x10) modify_ldt$write2(0x11, &(0x7f00000004c0)={0x3, 0x100000, 0x4000, 0x1}, 0x10) [ 83.155033] audit: type=1400 audit(1756530720.102:7): avc: denied { execmem } for pid=270 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 84.401854] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 84.405926] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 84.413484] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 84.415126] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 84.417511] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 84.421091] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 84.422966] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 84.427488] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 84.429272] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 84.431216] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 84.433354] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.436225] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 84.439405] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 84.443057] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 84.445366] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 84.446874] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.457330] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.459133] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 84.461827] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 84.463256] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 84.466019] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 84.468019] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 84.471937] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 84.473413] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 84.473491] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 84.478587] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 84.482083] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 84.484020] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 84.489040] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 84.492734] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 84.494049] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 84.504101] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 84.505282] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 84.510023] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 84.513017] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.515022] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 84.516542] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 84.519559] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 84.539270] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 84.550766] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 86.553828] Bluetooth: hci1: command tx timeout [ 86.554410] Bluetooth: hci6: command tx timeout [ 86.554927] Bluetooth: hci5: command tx timeout [ 86.555385] Bluetooth: hci4: command tx timeout [ 86.555682] Bluetooth: hci2: command tx timeout [ 86.615705] Bluetooth: hci3: command tx timeout [ 86.618646] Bluetooth: hci7: command tx timeout [ 86.618709] Bluetooth: hci0: command tx timeout [ 88.599728] Bluetooth: hci2: command tx timeout [ 88.600159] Bluetooth: hci1: command tx timeout [ 88.600543] Bluetooth: hci4: command tx timeout [ 88.600985] Bluetooth: hci5: command tx timeout [ 88.601375] Bluetooth: hci6: command tx timeout [ 88.663655] Bluetooth: hci0: command tx timeout [ 88.664060] Bluetooth: hci7: command tx timeout [ 88.664439] Bluetooth: hci3: command tx timeout [ 90.647697] Bluetooth: hci5: command tx timeout [ 90.648135] Bluetooth: hci4: command tx timeout [ 90.648532] Bluetooth: hci1: command tx timeout [ 90.648981] Bluetooth: hci2: command tx timeout [ 90.649426] Bluetooth: hci6: command tx timeout [ 90.711786] Bluetooth: hci7: command tx timeout [ 90.714650] Bluetooth: hci3: command tx timeout [ 90.714753] Bluetooth: hci0: command tx timeout [ 92.695798] Bluetooth: hci5: command tx timeout [ 92.696224] Bluetooth: hci2: command tx timeout [ 92.697246] Bluetooth: hci6: command tx timeout [ 92.697736] Bluetooth: hci4: command tx timeout [ 92.697765] Bluetooth: hci1: command tx timeout [ 92.760446] Bluetooth: hci0: command tx timeout [ 92.761667] Bluetooth: hci3: command tx timeout [ 92.762054] Bluetooth: hci7: command tx timeout [ 120.938338] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.938986] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.157689] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.158308] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.301985] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.302994] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.412239] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.413098] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.515647] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.516290] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.620512] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.621177] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.683551] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.684345] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.755996] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.756836] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.803269] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.803998] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 05:12:38 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, &(0x7f0000000040)}) ioperm(0x0, 0x30, 0x7f) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) ioperm(0x5, 0x3ee000000000000, 0x8) [ 121.859340] audit: type=1326 audit(1756530758.805:8): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=3874 comm="syz-executor.3" exe="/syz-executor.3" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f117f4b5b19 code=0x0 05:12:38 executing program 6: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffcfffd}]}) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil) r1 = dup(r0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000000c0)) [ 121.890156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.890769] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.899637] audit: type=1326 audit(1756530758.846:9): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=3882 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a6e9dfb19 code=0x7ffc0000 [ 121.902372] audit: type=1326 audit(1756530758.846:10): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=3882 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a6e9dfb19 code=0x7ffc0000 [ 121.906228] audit: type=1326 audit(1756530758.847:11): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=3882 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f4a6e9dfb19 code=0x7ffc0000 [ 121.910175] audit: type=1326 audit(1756530758.849:12): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=3882 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a6e9dfb19 code=0x7ffc0000 [ 121.917911] audit: type=1326 audit(1756530758.849:13): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=3882 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f4a6e9dfb19 code=0x7ffc0000 [ 121.920969] audit: type=1326 audit(1756530758.849:14): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=3882 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a6e9dfb19 code=0x7ffc0000 [ 121.926746] audit: type=1326 audit(1756530758.849:15): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=3882 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4a6e9dfb19 code=0x7ffc0000 [ 121.932144] audit: type=1326 audit(1756530758.849:16): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=3882 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a6e9dfb19 code=0x7ffc0000 [ 121.937059] audit: type=1326 audit(1756530758.849:17): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=3882 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f4a6e9dfb19 code=0x7ffc0000 05:12:38 executing program 6: ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) sendto(r0, &(0x7f0000000140)="4881f511a30d8a124913a8fb6bc98fc593be2e11943b0c60bafb4c1281c95e564d6508445d8408ae5cd30e481d5928b8d5973be662171f8e9b76a941", 0x3c, 0x81, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0xf}, 0x1112, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xf7bc, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x2) r1 = socket$inet(0x2, 0xa, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, 0x0, 0x0) bind(r1, &(0x7f0000000180)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x0, 0x3, 0x4, 0x1, {0xa, 0x4e23, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x456}}}, 0x80) r2 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000270000004f801", 0x17}, {&(0x7f0000010300)='S', 0x1, 0x600}], 0x0, &(0x7f0000010d00)=ANY=[]) mknodat$loop(r0, &(0x7f0000000280)='./file0\x00', 0x4, 0x1) mknodat$loop(r2, &(0x7f0000000080)='./file0\x00', 0x0, 0x1) signalfd(r1, &(0x7f0000000240), 0x8) [ 121.989134] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.989750] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.991058] syz-executor.6 uses obsolete (PF_INET,SOCK_PACKET) [ 121.994042] loop6: detected capacity change from 0 to 6 [ 121.998892] FAT-fs (loop6): Directory bread(block 6) failed [ 121.999434] FAT-fs (loop6): Directory bread(block 7) failed [ 122.000433] FAT-fs (loop6): Directory bread(block 8) failed [ 122.002815] FAT-fs (loop6): Directory bread(block 9) failed [ 122.012116] FAT-fs (loop6): Directory bread(block 6) failed [ 122.012152] FAT-fs (loop6): Directory bread(block 7) failed [ 122.012176] FAT-fs (loop6): Directory bread(block 8) failed [ 122.012200] FAT-fs (loop6): Directory bread(block 9) failed [ 122.012621] FAT-fs (loop6): Directory bread(block 6) failed [ 122.013568] FAT-fs (loop6): Directory bread(block 7) failed [ 122.054477] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.055064] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 05:12:39 executing program 6: ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) sendto(r0, &(0x7f0000000140)="4881f511a30d8a124913a8fb6bc98fc593be2e11943b0c60bafb4c1281c95e564d6508445d8408ae5cd30e481d5928b8d5973be662171f8e9b76a941", 0x3c, 0x81, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0xf}, 0x1112, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xf7bc, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x2) r1 = socket$inet(0x2, 0xa, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, 0x0, 0x0) bind(r1, &(0x7f0000000180)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x0, 0x3, 0x4, 0x1, {0xa, 0x4e23, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x456}}}, 0x80) r2 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000270000004f801", 0x17}, {&(0x7f0000010300)='S', 0x1, 0x600}], 0x0, &(0x7f0000010d00)=ANY=[]) mknodat$loop(r0, &(0x7f0000000280)='./file0\x00', 0x4, 0x1) mknodat$loop(r2, &(0x7f0000000080)='./file0\x00', 0x0, 0x1) signalfd(r1, &(0x7f0000000240), 0x8) 05:12:39 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000080)={r1, 0x2}) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x88, 0x41, 0x0, 0x0) [ 122.120802] loop6: detected capacity change from 0 to 6 [ 122.125868] FAT-fs (loop6): Directory bread(block 6) failed [ 122.126327] FAT-fs (loop6): Directory bread(block 7) failed [ 122.127108] FAT-fs (loop6): Directory bread(block 8) failed [ 122.127556] FAT-fs (loop6): Directory bread(block 9) failed [ 122.134890] FAT-fs (loop6): Directory bread(block 6) failed [ 122.135417] FAT-fs (loop6): Directory bread(block 7) failed [ 122.136137] FAT-fs (loop6): Directory bread(block 8) failed [ 122.136588] FAT-fs (loop6): Directory bread(block 9) failed [ 122.139200] FAT-fs (loop6): Directory bread(block 6) failed [ 122.139674] FAT-fs (loop6): Directory bread(block 7) failed [ 122.142343] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.142953] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 05:12:39 executing program 6: ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) sendto(r0, &(0x7f0000000140)="4881f511a30d8a124913a8fb6bc98fc593be2e11943b0c60bafb4c1281c95e564d6508445d8408ae5cd30e481d5928b8d5973be662171f8e9b76a941", 0x3c, 0x81, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0xf}, 0x1112, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xf7bc, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x2) r1 = socket$inet(0x2, 0xa, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, 0x0, 0x0) bind(r1, &(0x7f0000000180)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x0, 0x3, 0x4, 0x1, {0xa, 0x4e23, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x456}}}, 0x80) r2 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000270000004f801", 0x17}, {&(0x7f0000010300)='S', 0x1, 0x600}], 0x0, &(0x7f0000010d00)=ANY=[]) mknodat$loop(r0, &(0x7f0000000280)='./file0\x00', 0x4, 0x1) mknodat$loop(r2, &(0x7f0000000080)='./file0\x00', 0x0, 0x1) signalfd(r1, &(0x7f0000000240), 0x8) 05:12:39 executing program 2: r0 = creat(&(0x7f0000000100)='./file0\x00', 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x688c, 0x0, 0x0, 0x1, 0x20, 0xffff5750, 0xfffe, 0x0, 0xfffffffd, 0x0, 0x7}, 0x0, 0x0, r0, 0xa) r1 = openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000001c0)=ANY=[@ANYBLOB='2']) syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f0000001480), 0x0, &(0x7f0000001540)={[{@session={'session', 0x3d, 0x4a}}, {@overriderock}, {@session}]}) fspick(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x0) io_setup(0x9b7f, &(0x7f0000000080)) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) [ 122.205430] loop6: detected capacity change from 0 to 6 [ 122.209704] FAT-fs (loop6): Directory bread(block 6) failed [ 122.210195] FAT-fs (loop6): Directory bread(block 7) failed [ 122.210976] FAT-fs (loop6): Directory bread(block 8) failed [ 122.211651] FAT-fs (loop6): Directory bread(block 9) failed [ 122.214974] FAT-fs (loop6): Directory bread(block 6) failed [ 122.216003] FAT-fs (loop6): Directory bread(block 7) failed [ 122.216452] FAT-fs (loop6): Directory bread(block 8) failed [ 122.217326] FAT-fs (loop6): Directory bread(block 9) failed [ 122.218641] FAT-fs (loop6): Directory bread(block 6) failed [ 122.221573] FAT-fs (loop6): Directory bread(block 7) failed [ 122.224659] I/O error, dev loop2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 122.226714] isofs_fill_super: bread failed, dev=loop2, iso_blknum=16, block=32 05:12:39 executing program 6: ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) sendto(r0, &(0x7f0000000140)="4881f511a30d8a124913a8fb6bc98fc593be2e11943b0c60bafb4c1281c95e564d6508445d8408ae5cd30e481d5928b8d5973be662171f8e9b76a941", 0x3c, 0x81, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0xf}, 0x1112, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xf7bc, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x2) r1 = socket$inet(0x2, 0xa, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, 0x0, 0x0) bind(r1, &(0x7f0000000180)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x0, 0x3, 0x4, 0x1, {0xa, 0x4e23, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x456}}}, 0x80) r2 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000270000004f801", 0x17}, {&(0x7f0000010300)='S', 0x1, 0x600}], 0x0, &(0x7f0000010d00)=ANY=[]) mknodat$loop(r0, &(0x7f0000000280)='./file0\x00', 0x4, 0x1) mknodat$loop(r2, &(0x7f0000000080)='./file0\x00', 0x0, 0x1) signalfd(r1, &(0x7f0000000240), 0x8) [ 122.252198] I/O error, dev loop2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 122.253519] isofs_fill_super: bread failed, dev=loop2, iso_blknum=16, block=32 [ 122.274803] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.275368] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.283765] loop6: detected capacity change from 0 to 6 [ 122.287267] FAT-fs (loop6): Directory bread(block 6) failed [ 122.287795] FAT-fs (loop6): Directory bread(block 7) failed [ 122.288870] FAT-fs (loop6): Directory bread(block 8) failed [ 122.290547] FAT-fs (loop6): Directory bread(block 9) failed [ 122.309737] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.310310] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.311331] FAT-fs (loop6): Directory bread(block 6) failed [ 122.311961] FAT-fs (loop6): Directory bread(block 7) failed [ 122.312468] FAT-fs (loop6): Directory bread(block 8) failed [ 122.313042] FAT-fs (loop6): Directory bread(block 9) failed [ 122.316520] FAT-fs (loop6): Directory bread(block 6) failed [ 122.317584] FAT-fs (loop6): Directory bread(block 7) failed [ 122.372176] loop1: detected capacity change from 0 to 264192 [ 122.401772] loop1: detected capacity change from 0 to 264192 [ 122.409245] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.409891] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 05:12:52 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000280)={0x20, r3, 0x1, 0x0, 0x0, {0x10}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x20}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)=@newsa={0x124, 0x10, 0x2, 0x70bd29, 0x25dfdbfe, {{@in6=@private2, @in=@local, 0x4e22, 0x54, 0x4e23, 0x5, 0x2, 0x80, 0x573b1e99820ebf0e, 0x0, r5, 0xffffffffffffffff}, {@in=@rand_addr=0x64010102, 0x4d3, 0x2b}, @in6=@dev={0xfe, 0x80, '\x00', 0x19}, {0x8000, 0x4, 0x6fb44ab6, 0x8, 0x8, 0x100000000, 0x9b28, 0x10000}, {0x475, 0x401, 0x6, 0x2}, {0x3, 0x3, 0x5}, 0x70bd2d, 0x3506, 0xa, 0x1, 0x2, 0x10}, [@user_kmaddress={0x2c, 0x13, {@in=@local, @in6=@mcast2, 0x0, 0xa}}, @etimer_thresh={0x8, 0xc, 0x5}]}, 0x124}, 0x1, 0x0, 0x0, 0x4008011}, 0x4) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_rx_ntuple={0x17, {0x0, @tcp_ip4_spec={@rand_addr, @private}, @esp_ip4_spec={@multicast1, @local}}}}) 05:12:52 executing program 0: prlimit64(0x0, 0x0, 0x0, 0x0) sync() clock_gettime(0x0, 0x0) select(0x40, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2e, 0x401, 0x4cf1}, &(0x7f0000000080)={0x8, 0x5, 0xfffffffffffffffe, 0x4}, 0x0, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, 0x0, 0x20000080) 05:12:52 executing program 4: syz_mount_image$tmpfs(&(0x7f0000000640), &(0x7f0000000680)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0aa07b6547fce311543e509bfaf85a2787ac1b95619ce4c8b9c32cca4aafd4770d4e06a7385e38fc8481d9fa0e6ce8c49b507f0716814251af66b2548aa5c1ba0498f4926f2c3ae310a7f7a725916bb216e200000000010000ae4a5993dfc0f469608955252e60f5205ead7803e41a96464090a84e2b36e8f5d8ebadff360034bb4ad2547d9599ca99090079ba3c954cc21a9c25997b56ca0f782e0d75854a47cfaab709c93cf0e1ef3b293d92e08f9b9c26d2b9783b63a8c65b474f45f6869f6500"/207]) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x2092020, &(0x7f0000000500)='huge,never') 05:12:52 executing program 6: ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) sendto(r0, &(0x7f0000000140)="4881f511a30d8a124913a8fb6bc98fc593be2e11943b0c60bafb4c1281c95e564d6508445d8408ae5cd30e481d5928b8d5973be662171f8e9b76a941", 0x3c, 0x81, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0xf}, 0x1112, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xf7bc, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x2) r1 = socket$inet(0x2, 0xa, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, 0x0, 0x0) bind(r1, &(0x7f0000000180)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x0, 0x3, 0x4, 0x1, {0xa, 0x4e23, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x456}}}, 0x80) r2 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000270000004f801", 0x17}, {&(0x7f0000010300)='S', 0x1, 0x600}], 0x0, &(0x7f0000010d00)=ANY=[]) mknodat$loop(r0, &(0x7f0000000280)='./file0\x00', 0x4, 0x1) mknodat$loop(r2, &(0x7f0000000080)='./file0\x00', 0x0, 0x1) 05:12:52 executing program 1: r0 = io_uring_setup(0x3e96, &(0x7f0000000140)={0x0, 0x0, 0x1}) io_uring_enter(r0, 0x743d, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) accept4$unix(r1, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) 05:12:52 executing program 3: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wpan0\x00'}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'wpan4\x00'}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wpan0\x00'}) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000600)={&(0x7f0000001700)=ANY=[], 0x54}}, 0xc080) r0 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f00000003c0)=[{&(0x7f0000000000)="7d7a9ce1c05bbd831f35", 0xa}, {&(0x7f0000000180)="3b840fe93628cbd058e5c65d22877799d49243f38b1ee8c6e92f06fd44cd0087427b8886", 0x24}, {&(0x7f0000000700)="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", 0x1000}, {&(0x7f00000001c0)="9d24498cdb029cd92ecddbf3d85abbfdb1386240d8fed9916efb84532a74bf787237dd1a2e25b4a59514bb59e4a373f79a9dfa8d1cf665f49f183bee5ace0fe966cf64a01457decaa6517c1df6f9ecd1c2f77194fd4780dd281e63077dde7db9122ceaba87901bc28f34a51bff6dcc22539a0f97401966b0ff62b30211630e9d98e03da16bcb41547c6bdb26a09765ab0c497e1193cf7e0932215f3a8dc66158f2b283422974e0f52707a086207df995be933a9ee19a7fb94675a98273fc154897311f22d759b320f4c14bd28ddea29cfd77c24aa2bc3f48bb42a38b15cd4e5c8cb24806d2cb5e990aca4d914dbf4e", 0xef}, {&(0x7f00000002c0)="99a009acd94fa9a763b0315dfc4f94443a9f17ba35d567342ebbafbca908793d35374be5918c2c", 0x27}, {&(0x7f0000000300)="ccfd5eab551a589c7bf83d248e7695422ebdaf66da317405b8daacd3047632aac44ecc80d09ff2b930dede0827ddff10dfc52e936aa04655ded7e67a33828f87508bacf96b6ce9930294fbb0256a02256f8276f771d7dbab9d7d9be996a39a191bf1703caa0d599dfa32", 0x6a}], 0x6, 0x0) write$sndseq(r1, &(0x7f0000000440)=[{0x3, 0x80, 0x6, 0x1, @tick=0x4, {0x6}, {0xe2, 0x6}, @connect={{0x4d, 0x8}, {0x9, 0x2}}}], 0x1c) fdatasync(r0) sendmsg$netlink(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000080)={0xec, 0x41, 0xffffffffffffffff, 0x0, 0x0, "", [@generic="911375e43cb8512cc8a7baa940b76e17c3459eee7566a5c9b3622278f0039f5663f66631b84ee38d781e775463f88099bf4bf2ee8c51e5f25bc855cdad3e98de71506cf5bb0205b60c326c2ab2a74e971c0963098f4e18c44708991b1511492de1ba4d8413cb04f12d9c7816250ee2eded14edd11e04050d2c5d386a29ca3f418e2212c0c6926413871e4aeabed793b4435bbaecd54be682a1e18df38ae9d77d4af183bf9b3f16be5ae3800c32b470ab94e387879a2a553af0eeba1280ab66df347a4a44021327db593a8b5b737fc8a28efff72e5863900a9fe7aa"]}, 0xec}], 0x1}, 0x0) 05:12:52 executing program 7: sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x28, 0x0, 0x10, 0x70bd27, 0x25dfdbfd, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x80) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000}, 0x0, 0x0, 0xffffffffffffffff, 0x9) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) bind$unix(r0, &(0x7f0000000140)=@abs={0x1}, 0x6e) 05:12:52 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24, 0x95e2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x3}, 0x1c) accept4(r0, 0x0, 0x0, 0x80800) r1 = fsmount(0xffffffffffffffff, 0x0, 0x80) r2 = socket$inet(0x2, 0xa, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r2, 0x8982, &(0x7f00000000c0)={0x6, 'veth0_to_hsr\x00', {0xfffffff9}, 0x3}) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000080)=[@sack_perm, @window={0x3, 0x81, 0x4}, @sack_perm, @mss={0x2, 0x2}, @window={0x3, 0xf6e, 0x5}, @window={0x3, 0xa89b, 0x1ff}], 0x6) 05:12:52 executing program 3: syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x2, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x0, 0x4}, {0xffe0, 0x4}}}}, 0x11) syz_emit_vhci(&(0x7f00000003c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x81, 0x0, 0x804}}}, 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000280)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x0, 0x14}, @l2cap_cid_le_signaling={{0x10}, @l2cap_ecred_conn_req={{0x17, 0x3, 0xc}, {0x401, 0x6a7, 0x4, 0xff, [0x1, 0x6]}}}}, 0x19) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="030000502bbbe9325c2f4825ed4e2e792fdda73f228ffd7503c16d40f44ecf7770235540cb73eb566be07629ad9d0d92926932bbae11c89a05bab2b57521c5d80fdc4c248dbc73be336b0e1cb2cf1f2859a4c280e00466"], 0x54) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="02c91014001000050017000ce4bd85cf500772f10001800400ccc3cf49b6000300"], 0x19) getdents64(r0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_VENDOR_PKT, 0x15c) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x0, 0x14}, @l2cap_cid_signaling={{0x10}, [@l2cap_move_chan_cfm={{0x10, 0x0, 0x4}, {0x8, 0xfe00}}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0xfff8, 0x1}}]}}, 0x19) syz_emit_vhci(&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x12) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT, 0x2) r1 = syz_open_dev$sg(&(0x7f0000000380), 0x1fb, 0x2000) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f00000000c0)={0x0, 0xffffffff, 0xffffff85}) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="02c9e00a8da2fc2600131b42038000"], 0xf) syz_emit_vhci(&(0x7f0000000500)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x8c}, "b85bd39cdd9c8132caf9a52aaed54f1beac66b0d20609795f390b6e6bd67517df18abe884c05ed0745a531794b2f525f129dab6f54a99c60c7e214bf21b034e69f08e326aef661b51cb4e9cd7eeb3572dd65d0bb6a60899dde430f28eb92f08f1a14ea87df5dec048a0b787386a6a3b5216632f1f1a8f5be29ffb813b5b0c5905eb9d38e163ef73386531ce3"}, 0x90) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) [ 135.919045] loop6: detected capacity change from 0 to 6 [ 135.936751] tmpfs: Unknown parameter ' [ 135.936751]  {eGüãT>P›úøZ'‡¬•aœäȹÃ' [ 135.936812] FAT-fs (loop6): Directory bread(block 6) failed [ 135.944630] FAT-fs (loop6): Directory bread(block 7) failed [ 135.946423] Bluetooth: Unexpected continuation frame (len 20) [ 135.947557] Bluetooth: hci4: SCO packet for unknown connection handle 0 [ 135.949066] FAT-fs (loop6): Directory bread(block 8) failed [ 135.949687] Bluetooth: Unexpected continuation frame (len 20) [ 135.951589] Bluetooth: hci4: link tx timeout [ 135.952350] FAT-fs (loop6): Directory bread(block 9) failed [ 135.952484] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 135.968838] FAT-fs (loop6): Directory bread(block 6) failed [ 135.969316] FAT-fs (loop6): Directory bread(block 7) failed [ 135.970578] tmpfs: Unknown parameter ' [ 135.970578]  {eGüãT>P›úøZ'‡¬•aœäȹÃ' [ 135.972665] FAT-fs (loop6): Directory bread(block 8) failed [ 135.973142] FAT-fs (loop6): Directory bread(block 9) failed [ 135.983014] FAT-fs (loop6): Directory bread(block 6) failed [ 135.983501] FAT-fs (loop6): Directory bread(block 7) failed 05:12:52 executing program 5: prlimit64(0xffffffffffffffff, 0xe, &(0x7f0000000140)={0x80, 0xff}, 0x0) ptrace(0xffffffffffffffff, 0x0) wait4(0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000000)) r1 = openat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x200302, 0x4a, 0x14}, 0x18) ioctl$TCSETAF(r1, 0x5408, &(0x7f00000000c0)={0xd9, 0x1ff, 0x2, 0x8, 0x2, "5b2be0f43fcfac60"}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) accept4$unix(r2, 0x0, 0x0, 0x0) ioctl$KDDISABIO(r2, 0x4b37) perf_event_open(0x0, 0x0, 0xd, 0xffffffffffffffff, 0x0) listxattr(0x0, 0x0, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000100)={0x0, @multicast2, @multicast1}, &(0x7f0000000180)=0xc) clone(0x13aab180, 0x0, 0x0, 0x0, 0x0) 05:12:53 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SG_IO(r2, 0x2271, &(0x7f00000022c0)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x1, 0xfd, 0x0, 0x9, 0x0, 0xfffffffffffffffd, 0x40000, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000040), 0xf}, 0x40100, 0xfffffffffffffffe, 0x4, 0x9, 0x7ff, 0xfffffffb, 0x9, 0x0, 0x7f, 0x0, 0x2008}, 0xffffffffffffffff, 0x5, r2, 0x0) [ 136.078949] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 136.083042] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 136.108948] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 136.127119] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 136.131397] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 136.151334] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 136.160457] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 136.173641] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 136.185544] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 136.188360] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 136.199235] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 136.200212] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 136.205575] Bluetooth: hci4: unexpected event for opcode 0x0804 [ 136.206455] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 136.206764] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 136.208530] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 136.209728] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 136.211282] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 136.212840] Bluetooth: hci4: SCO packet for unknown connection handle 0 [ 136.213909] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 136.216431] Bluetooth: hci4: SCO packet for unknown connection handle 201 [ 136.219262] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 136.227522] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 136.231411] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 136.237825] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 136.245423] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 136.247928] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 136.276254] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 136.278445] kmemleak: Found object by alias at 0x607f1a639204 [ 136.278470] CPU: 0 UID: 0 PID: 65 Comm: kworker/u8:1 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 136.278505] Tainted: [W]=WARN [ 136.278512] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 136.278526] Workqueue: netns cleanup_net [ 136.278552] Call Trace: [ 136.278559] [ 136.278568] dump_stack_lvl+0xca/0x120 [ 136.278615] __lookup_object+0x94/0xb0 [ 136.278645] delete_object_full+0x27/0x70 [ 136.278676] free_percpu+0x30/0x1160 [ 136.278714] percpu_counter_destroy_many+0x188/0x2b0 [ 136.278746] ? __pfx_xfrm4_net_exit+0x10/0x10 [ 136.278776] ops_undo_list+0x2d5/0xa50 [ 136.278816] ? __pfx_ops_undo_list+0x10/0x10 [ 136.278851] ? lock_release+0xc8/0x290 [ 136.278875] ? idr_destroy+0x62/0x2c0 [ 136.278908] cleanup_net+0x38d/0x770 [ 136.278928] ? lock_acquire+0x15e/0x2f0 [ 136.278954] ? __pfx_cleanup_net+0x10/0x10 [ 136.278976] ? lock_release+0xc8/0x290 [ 136.279007] process_one_work+0x8e1/0x19c0 [ 136.279048] ? __pfx_process_one_work+0x10/0x10 [ 136.279075] ? move_linked_works+0x172/0x270 [ 136.279114] ? assign_work+0x196/0x240 [ 136.279144] worker_thread+0x67e/0xe90 [ 136.279171] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 136.279203] ? __pfx_worker_thread+0x10/0x10 [ 136.279231] kthread+0x3c8/0x740 [ 136.279256] ? __pfx_kthread+0x10/0x10 [ 136.279278] ? ret_from_fork+0x23/0x430 [ 136.279313] ? lock_release+0xc8/0x290 [ 136.279339] ? __pfx_kthread+0x10/0x10 [ 136.279364] ret_from_fork+0x34b/0x430 [ 136.279396] ? __pfx_kthread+0x10/0x10 [ 136.279420] ret_from_fork_asm+0x1a/0x30 [ 136.279466] [ 136.279474] kmemleak: Object (percpu) 0x607f1a639200 (size 8): [ 136.279487] kmemleak: comm "syz-executor.3", pid 3983, jiffies 4294803164 [ 136.279500] kmemleak: min_count = 1 [ 136.279508] kmemleak: count = 0 [ 136.279515] kmemleak: flags = 0x21 [ 136.279522] kmemleak: checksum = 0 [ 136.279529] kmemleak: backtrace: [ 136.279535] pcpu_alloc_noprof+0x87a/0x1170 [ 136.279563] xfrm_state_init+0x1a5/0x640 [ 136.279595] xfrm_net_init+0x1a3/0xb20 [ 136.279615] ops_init+0x1e1/0x650 [ 136.279644] setup_net+0x10d/0x320 [ 136.279674] copy_net_ns+0x2e3/0x650 [ 136.279691] create_new_namespaces+0x3f6/0xab0 [ 136.279721] copy_namespaces+0x45c/0x580 [ 136.279750] copy_process+0x2649/0x73c0 [ 136.279770] kernel_clone+0xea/0x7f0 [ 136.279789] __do_sys_clone+0xce/0x120 [ 136.279809] do_syscall_64+0xbf/0x360 [ 136.279826] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.322437] kmemleak: Found object by alias at 0x607f1a639894 [ 136.322460] CPU: 0 UID: 0 PID: 3977 Comm: syz-executor.4 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 136.322493] Tainted: [W]=WARN [ 136.322500] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 136.322512] Call Trace: [ 136.322519] [ 136.322527] dump_stack_lvl+0xca/0x120 [ 136.322562] __lookup_object+0x94/0xb0 [ 136.322590] delete_object_full+0x27/0x70 [ 136.322628] free_percpu+0x30/0x1160 [ 136.322656] ? arch_uprobe_clear_state+0x16/0x140 [ 136.322692] futex_hash_free+0x38/0xc0 [ 136.322718] mmput+0x2d3/0x390 [ 136.322753] do_exit+0x79d/0x2970 [ 136.322778] ? lock_release+0xc8/0x290 [ 136.322808] ? __pfx_do_exit+0x10/0x10 [ 136.322835] ? find_held_lock+0x2b/0x80 [ 136.322868] ? get_signal+0x835/0x2340 [ 136.322905] do_group_exit+0xd3/0x2a0 [ 136.322934] get_signal+0x2315/0x2340 [ 136.322977] ? __pfx_get_signal+0x10/0x10 [ 136.323009] ? do_futex+0x135/0x370 [ 136.323035] ? __pfx_do_futex+0x10/0x10 [ 136.323064] arch_do_signal_or_restart+0x80/0x790 [ 136.323097] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 136.323129] ? __x64_sys_futex+0x1c9/0x4d0 [ 136.323152] ? __x64_sys_futex+0x1d2/0x4d0 [ 136.323181] ? __pfx___x64_sys_futex+0x10/0x10 [ 136.323207] ? xfd_validate_state+0x55/0x180 [ 136.323246] exit_to_user_mode_loop+0x8b/0x110 [ 136.323270] do_syscall_64+0x2f7/0x360 [ 136.323292] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.323314] RIP: 0033:0x7ff91889cb19 [ 136.323330] Code: Unable to access opcode bytes at 0x7ff91889caef. [ 136.323340] RSP: 002b:00007ff915e12218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 136.323361] RAX: fffffffffffffe00 RBX: 00007ff9189aff68 RCX: 00007ff91889cb19 [ 136.323376] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007ff9189aff68 [ 136.323390] RBP: 00007ff9189aff60 R08: 0000000000000000 R09: 0000000000000000 [ 136.323403] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff9189aff6c [ 136.323416] R13: 00007ffcbc78783f R14: 00007ff915e12300 R15: 0000000000022000 [ 136.323447] [ 136.323454] kmemleak: Object (percpu) 0x607f1a639890 (size 8): [ 136.323467] kmemleak: comm "syz-executor.0", pid 3957, jiffies 4294803086 [ 136.323480] kmemleak: min_count = 1 [ 136.323488] kmemleak: count = 0 [ 136.323495] kmemleak: flags = 0x21 [ 136.323502] kmemleak: checksum = 0 [ 136.323509] kmemleak: backtrace: [ 136.323515] pcpu_alloc_noprof+0x87a/0x1170 [ 136.323543] percpu_ref_init+0x37/0x400 [ 136.323575] blkg_alloc+0xe9/0x7d0 [ 136.323597] blkg_create+0xe08/0x1420 [ 136.323620] bio_associate_blkg_from_css+0xe06/0x1380 [ 136.323646] bio_associate_blkg+0x10e/0x2a0 [ 136.323671] bio_init+0x2dd/0x570 [ 136.323694] bio_alloc_bioset+0x2cf/0x8c0 [ 136.323721] submit_bh_wbc+0x286/0x720 [ 136.323751] __block_write_full_folio+0x723/0xde0 [ 136.323772] block_write_full_folio+0x2d6/0x390 [ 136.323795] blkdev_writepages+0x96/0x120 [ 136.323817] do_writepages+0x244/0x5c0 [ 136.323840] filemap_fdatawrite_wbc+0x10b/0x150 [ 136.323866] __filemap_fdatawrite_range+0xb9/0x100 [ 136.323899] sync_bdevs+0x2e6/0x360 [ 136.325301] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 136.396302] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 136.415702] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 136.439941] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 136.440519] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 136.441300] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 136.442833] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 136.443396] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 136.444165] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 136.444949] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 136.445919] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 138.455776] Bluetooth: hci7: command 0x0c1a tx timeout [ 138.456858] Bluetooth: hci6: command 0x0c1a tx timeout [ 138.456932] Bluetooth: hci5: command 0x0c1a tx timeout [ 138.457896] Bluetooth: hci0: command 0x0c1a tx timeout [ 138.458479] Bluetooth: hci3: command 0x0c1a tx timeout [ 138.459435] Bluetooth: hci2: command 0x0c1a tx timeout [ 138.459979] Bluetooth: hci4: command 0x0406 tx timeout [ 138.460957] Bluetooth: hci1: command 0x0c1a tx timeout [ 140.503712] Bluetooth: hci5: command 0x0c1a tx timeout [ 140.504561] Bluetooth: hci0: command 0x0c1a tx timeout [ 140.505451] Bluetooth: hci2: command 0x0c1a tx timeout [ 140.506315] Bluetooth: hci1: command 0x0c1a tx timeout [ 140.507157] Bluetooth: hci3: command 0x0c1a tx timeout [ 140.507412] Bluetooth: hci7: command 0x0c1a tx timeout [ 140.508021] Bluetooth: hci4: command 0x0406 tx timeout [ 140.508779] Bluetooth: hci6: command 0x0c1a tx timeout [ 142.551925] Bluetooth: hci0: command 0x0c1a tx timeout [ 142.553026] Bluetooth: hci1: command 0x0c1a tx timeout [ 142.553072] Bluetooth: hci7: command 0x0c1a tx timeout [ 142.554045] Bluetooth: hci3: command 0x0c1a tx timeout [ 142.554831] Bluetooth: hci2: command 0x0c1a tx timeout [ 142.555740] Bluetooth: hci5: command 0x0c1a tx timeout [ 142.556489] Bluetooth: hci6: command 0x0c1a tx timeout 05:13:02 executing program 6: ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) sendto(r0, &(0x7f0000000140)="4881f511a30d8a124913a8fb6bc98fc593be2e11943b0c60bafb4c1281c95e564d6508445d8408ae5cd30e481d5928b8d5973be662171f8e9b76a941", 0x3c, 0x81, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0xf}, 0x1112, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xf7bc, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x2) r1 = socket$inet(0x2, 0xa, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, 0x0, 0x0) bind(r1, &(0x7f0000000180)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x0, 0x3, 0x4, 0x1, {0xa, 0x4e23, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x456}}}, 0x80) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000270000004f801", 0x17}, {&(0x7f0000010300)='S', 0x1, 0x600}], 0x0, &(0x7f0000010d00)=ANY=[]) mknodat$loop(r0, &(0x7f0000000280)='./file0\x00', 0x4, 0x1) 05:13:02 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) accept4$unix(r1, 0x0, 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0], 0x3, 0x4f}) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 05:13:02 executing program 7: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000040)) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x2, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x9, 0x2}, {0x100}}}}, 0xf) symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00') 05:13:02 executing program 4: clock_gettime(0x1, &(0x7f0000001a80)) r0 = semget$private(0x0, 0x5, 0x0) semctl$SETALL(r0, 0x0, 0x11, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) r4 = syz_open_dev$hiddev(&(0x7f0000000100), 0x5, 0x40000) r5 = openat2(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x1d080, 0x0, 0x8}, 0x18) r6 = syz_mount_image$nfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x8, 0xa, &(0x7f0000001800)=[{&(0x7f0000000240)="d76c784fbe035ab29862a85fa10514599772561d43119667c29529f79bc7e21af4104e17bd4c4aa2fc5f0358d760029d54d78d40a8a4331db633efa50ff77773ac65aa9d9b36b7432fe5ed32e85b24d4013fe92f10f9f978a8389a91cf9ca3fc28227afc4ba56228a89cd1e1b43b7503f1d87f2a7afa8b495a10a121bf283d6855e811b3b0efcc5cc2c76112524f1fa2f94e208f97acb9f5eea29373e284", 0x9e, 0x7fff}, {&(0x7f0000000300)="e36819c96538c35f62ce902af3257894b7a929f4d68bb4ef67d77d91659bcb4444b04d", 0x23, 0x6c}, {&(0x7f0000000340)="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", 0x1000}, {&(0x7f0000001340)="a9953b642d1535468faf447d405d4204f312be15a83b347ef78c3aa98b79669ba71cfa3e146b2b11f7e254c69b34f3b4c3f6bc319b76e20d9041cd32359cabf5c08e9d538afff9bf8378f845f00d2ae50f4ea9c0d1e68b00a705ebde916cc5d05543bce74f378a21c43c6d980a815746e1e49e3d40cdfe25cb681616756edbe51ad41042deb8f5c809a5c33a95c7d63939fc346163defedb00e72cb96ab11f3f85afd305c9b6ec6c4aa133789b8a72dfbca4940e5be63ed58221a9a7b2eb9813719f4db9a3b5523697a9f60a161dafb597184eb6892210", 0xd7, 0x5}, {&(0x7f0000001440)="380b54f4cbdbfbc85877ebb3f5da8d790b24c9868b8a8d45e231f79e1e6a5f871e7a586e7e0c", 0x26, 0x4}, {&(0x7f0000001480)="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", 0xfe, 0x6}, {&(0x7f0000001580)="175fab112c78dfb03317025f4d4c7d748855692a570c199c29d0cc12b2a710afee623cbd94282e6e64e1627cc5842f617eab2f187b2c8b8d5fcbb0abeb1cef0459891d90d1c85f349fcba3e36b4c0b8fb1d56d9e5ca8a28cce004a840e937f92153167fcc16a0674dfb9a2d7b79b594e1d42d4651e4612ba8df31bbc4d51e1", 0x7f, 0x9}, {&(0x7f0000001600)="462f689377656a96b70b77e9d5c25e4679a7aa6df28e9c448ac75a4f6b62f147eb088c43b089536e8ad00fd21a241ae68796562974c5dc50850472b290507b44dc208051557d02c6c10c888ee1b12682ceef66053867f74b235177c590d0dc735988730d8b0be1f9ae26f54779e8259fb6d208375a55b3e3e88b65729826684048bd9f92556059daafea1e65184fc67fae76592a21197dfc02148dd70bf34c6855f7ebd95ebb38eab364a3ba3d3786eda0192259bbeff5d1a8f9e70a36bc5d5d5e832b7e360f320a974872d796473e3ca1226a9d86d1818520e8dde80132ad3aa3f510a0a82b206d333bc46509", 0xed, 0x3f}, {&(0x7f0000001700)="2265d42aaa65094182fa0204660b9e9aceef9fc96fbbfb1dc3b1d41f5b891a679950b25114e831481e5b643574", 0x2d, 0x1}, {&(0x7f0000001740)="d5a2ea6d9b6a01d881e546fa70d26661853425dd9225ec7742d2f282417e738e539a8a1a6ba265af1f403f4daf0d8ebfec2d6c4bb3439c0493520caf57c9fc08d04dba3dfab15a6bf434c55cc5c458c92ad54ef8b973aec4925494d771fbde7520dedebe5884fca726413c4b8e2c89f1d3a555ac40f0742b5a970394769443fad48071d3f536c98c093829da3027d8c229f1820e54a3fcdc822df8c4928682b38c372f98db4631d8ec78abab89ae", 0xae, 0x4}], 0xa0ef091ddb4435bb, &(0x7f0000001900)={[{']$..*-@-)\x9c/\xb2+:)'}], [{@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@dont_measure}, {@euid_lt={'euid<', 0xee00}}, {@appraise_type}]}) ppoll(&(0x7f0000001980)=[{r3, 0x8000}, {r4}, {r5, 0x100}, {r6, 0x420}], 0x4, &(0x7f00000019c0)={0x0, 0x989680}, &(0x7f0000001a00)={[0x80000001]}, 0x8) semtimedop(r0, &(0x7f0000000000)=[{0x0, 0x7, 0x800}, {0x1, 0x1, 0x1000}, {0x2, 0x759f, 0x1000}, {0x0, 0x8, 0x1800}, {0x4, 0x0, 0x2800}], 0x5, &(0x7f0000000080)={r1, r2+60000000}) 05:13:02 executing program 0: prlimit64(0x0, 0x0, 0x0, 0x0) sync() clock_gettime(0x0, 0x0) select(0x40, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2e, 0x401, 0x4cf1}, &(0x7f0000000080)={0x8, 0x5, 0xfffffffffffffffe, 0x4}, 0x0, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, 0x0, 0x20000080) 05:13:02 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.idle_time\x00', 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r3) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {r3, 0xee01}}, './file0\x00'}) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) getsockopt$inet6_int(r0, 0x29, 0x1, 0x0, &(0x7f00000000c0)) 05:13:02 executing program 1: r0 = io_uring_setup(0x3e96, &(0x7f0000000140)={0x0, 0x0, 0x1}) io_uring_enter(r0, 0x743d, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) accept4$unix(r1, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) 05:13:02 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000003b80)='./file0\x00', 0x0, 0x3, &(0x7f0000004140)=[{&(0x7f0000003bc0)='\\', 0x1}, {&(0x7f0000003f80)="fd", 0x1, 0xb31b}, {&(0x7f0000004100)='e', 0x1, 0xfffffffffffffff7}], 0x0, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) accept4$unix(r0, 0x0, 0x0, 0x0) r1 = accept4$unix(r0, 0x0, &(0x7f00000002c0), 0x800) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="01040000000000008dab2cda50ba1b4e2d212e2f6669"]) r2 = socket$inet(0x2, 0xa, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, 0x0, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) accept4$unix(r3, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast2, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@loopback}}, &(0x7f00000000c0)=0xe8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x40, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="2c70726976706f72742c616acf0000733d757365722c63616368653d667363616368652c6163636573733d636c69656e742c666f776e65723e", @ANYRESDEC=r4, @ANYBLOB=',euid<', @ANYRESDEC, @ANYBLOB=',obj_type=,dont_measure,context=staff_u,\x00']) [ 145.941081] loop4: detected capacity change from 0 to 127 [ 145.964424] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 145.965914] Bluetooth: hci6: ACL packet for unknown connection handle 200 [ 145.968000] Bluetooth: hci6: ACL packet for unknown connection handle 200 05:13:02 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c0}, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)={0x1c, r2, 0x1, 0x0, 0x0, {0x2}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}}, 0x0) [ 146.003105] loop5: detected capacity change from 0 to 16383 [ 146.018295] loop6: detected capacity change from 0 to 6 [ 146.031135] FAT-fs (loop6): Directory bread(block 6) failed [ 146.036657] FAT-fs (loop6): Directory bread(block 7) failed [ 146.040031] FAT-fs (loop6): Directory bread(block 8) failed [ 146.043973] kmemleak: Found object by alias at 0x607f1a63821c [ 146.043988] CPU: 1 UID: 0 PID: 4013 Comm: syz-executor.3 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 146.044005] Tainted: [W]=WARN [ 146.044009] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 146.044016] Call Trace: [ 146.044019] [ 146.044024] dump_stack_lvl+0xca/0x120 [ 146.044047] __lookup_object+0x94/0xb0 [ 146.044063] delete_object_full+0x27/0x70 [ 146.044078] free_percpu+0x30/0x1160 [ 146.044095] ? arch_uprobe_clear_state+0x16/0x140 [ 146.044114] futex_hash_free+0x38/0xc0 [ 146.044129] mmput+0x2d3/0x390 [ 146.044147] do_exit+0x79d/0x2970 [ 146.044159] ? lock_release+0xc8/0x290 [ 146.044176] ? __pfx_do_exit+0x10/0x10 [ 146.044190] ? find_held_lock+0x2b/0x80 [ 146.044206] ? get_signal+0x835/0x2340 [ 146.044226] do_group_exit+0xd3/0x2a0 [ 146.044244] get_signal+0x2315/0x2340 [ 146.044262] ? ip6_datagram_connect+0x3a/0x50 [ 146.044275] ? ip6_datagram_connect+0x3a/0x50 [ 146.044287] ? __pfx_get_signal+0x10/0x10 [ 146.044303] ? do_futex+0x135/0x370 [ 146.044316] ? __pfx_do_futex+0x10/0x10 [ 146.044331] arch_do_signal_or_restart+0x80/0x790 [ 146.044348] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 146.044364] ? __x64_sys_futex+0x1c9/0x4d0 [ 146.044375] ? __x64_sys_futex+0x1d2/0x4d0 [ 146.044388] ? __sys_socket+0x9f/0x260 [ 146.044403] ? __pfx___x64_sys_futex+0x10/0x10 [ 146.044416] ? xfd_validate_state+0x55/0x180 [ 146.044431] ? kcov_ioctl+0x386/0x6c0 [ 146.044449] exit_to_user_mode_loop+0x8b/0x110 [ 146.044461] do_syscall_64+0x2f7/0x360 [ 146.044473] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.044484] RIP: 0033:0x7f117f4b5b19 [ 146.044493] Code: Unable to access opcode bytes at 0x7f117f4b5aef. [ 146.044498] RSP: 002b:00007f117ca0a218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 146.044509] RAX: fffffffffffffe00 RBX: 00007f117f5c9028 RCX: 00007f117f4b5b19 [ 146.044516] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f117f5c9028 [ 146.044523] RBP: 00007f117f5c9020 R08: 0000000000000000 R09: 0000000000000000 [ 146.044530] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f117f5c902c [ 146.044536] R13: 00007ffd0b39463f R14: 00007f117ca0a300 R15: 0000000000022000 [ 146.044552] [ 146.044555] kmemleak: Object (percpu) 0x607f1a638218 (size 8): [ 146.044562] kmemleak: comm "syz-executor.5", pid 4014, jiffies 4294812915 [ 146.044569] kmemleak: min_count = 1 [ 146.044573] kmemleak: count = 0 [ 146.044576] kmemleak: flags = 0x21 [ 146.044580] kmemleak: checksum = 0 [ 146.044583] kmemleak: backtrace: [ 146.044587] pcpu_alloc_noprof+0x87a/0x1170 [ 146.044601] __alloc_workqueue+0x74b/0x1820 [ 146.044618] alloc_workqueue_noprof+0xc7/0x200 [ 146.044627] loop_configure+0xf73/0x1590 [ 146.044641] lo_ioctl+0x66d/0x1c70 [ 146.044653] blkdev_ioctl+0x27c/0x6c0 [ 146.044670] __x64_sys_ioctl+0x18f/0x210 [ 146.044684] do_syscall_64+0xbf/0x360 [ 146.044693] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.068843] FAT-fs (loop6): Directory bread(block 9) failed [ 146.145446] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 146.146185] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 146.146776] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 146.148707] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 146.150460] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 146.155340] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 146.159087] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 146.162100] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 146.168416] ======================================================= [ 146.168416] WARNING: The mand mount option has been deprecated and [ 146.168416] and is ignored by this kernel. Remove the mand [ 146.168416] option from the mount to silence this warning. [ 146.168416] ======================================================= [ 148.055675] Bluetooth: hci1: command 0x0c1a tx timeout [ 148.183745] Bluetooth: hci7: command 0x0c1a tx timeout [ 148.184273] Bluetooth: hci6: command 0x0c1a tx timeout [ 148.184745] Bluetooth: hci5: command 0x0c1a tx timeout [ 148.185182] Bluetooth: hci0: command 0x0c1a tx timeout [ 148.185655] Bluetooth: hci3: command 0x0c1a tx timeout [ 148.186104] Bluetooth: hci2: command 0x0c1a tx timeout [ 148.186555] Bluetooth: hci4: command 0x0406 tx timeout 05:13:11 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r1) fstat(0xffffffffffffffff, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$inet6(0xa, 0x1, 0x80) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000001840), 0x2, 0x0) r6 = socket$inet(0x2, 0xa, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r6, 0x6, 0xe, 0x0, 0x0) r7 = socket$inet(0x2, 0xa, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r7, 0x6, 0xe, 0x0, 0x0) socketpair(0x15, 0x2, 0x2, &(0x7f0000001880)={0xffffffffffffffff}) r9 = socket$inet(0x2, 0xa, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r9, 0x6, 0xe, 0x0, 0x0) r10 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001a00)={&(0x7f0000000000)=@file={0x1, './file1\x00'}, 0x6e, &(0x7f0000001700)=[{&(0x7f0000000140)="98ec2ad6f5e41ca18a68c76e81738b4060239f6252db556425e15ec4ae7a1e38f65bddb93c51091d230884df633e9b53567dd806b889ad4ab83e03dda5a7ef527b63af6308921bf41d19056d37daf25d64db045d31b8ab231a04b6e5979da2c715196f12c61b5f34cfbe6773c369e5b90c250280d110fa598452341b7a8092f5942be775e12ffcc3cb51ed6c2709a8106d60ce9d86825ddced8ae8d021e227c31cf1a0f6ebc5340f09a110c668c1e4bd97bd90f89ae2c55d99fb21ed307c2d5c2a37708d6e1753af6ac3f9039c5bc4ddec4a5573c7dc341bde233de5f84cf194", 0xe0}, {&(0x7f00000003c0)="fa98e6f7f471a3b2b2e62be75adab30233c868f449778b7bdeb017728fe725ef732e6ba617c518452059bae6a24325529576a7bc4b134509abd59d52dbca96400b3c427488b35d756eb5c948f35414a30ff9a928c219449a9d261655bfcbc70bb14e4c34b16b01e8bceadf54ba85e2f04a58e6ee950a165ebbb7b31229759517273e66af0b0a8329849318e4d6a143aae2a3b94547e6cd3856dc730341ca549b0d9bc61c9b7b68ec2c001c5d2dbd9a1adfa112181a243ccea0be1d83a33c9edb0a8366a6de8f39", 0xc7}, {&(0x7f0000000080)="ecaf2f6417bc267ae7b28a8437764ecb623e8230c52913da01eb9fb4aab96e21ea8126175211cfa7cf8a7d0589fc1e129ba996173fa89b94a99ea5b7626c7481d2ce6af4029bbaf86d218fb32ef2b6d656fa0489345035", 0x57}, {&(0x7f0000000240)="5e61dcdd35379aeaf68b8693318d364c4a7eac3919aa7e739e8f4cf6f833da12", 0x20}, {&(0x7f00000004c0)="ab27e8cfd9e1b54c315a7a161a22fe0b1d8af553ae956225cdb8841d7a2f750a29ab89780feb3f0ad055ab5f39e14eef581abdc0bfeca6b0b9e52e758879fed184e02e43f3724c14f86a0393cad4ed6947d7feb150db317efde633add668506aac9c9578c65abfa25b53964911d5d97f4592d4ef6ed8916cfe2271bd0636332aaa067bb07be77f40fc0cc32e89c1e3451e1a4bfa", 0x94}, {&(0x7f00000002c0)="d4298341da1c8248ebab39b8b11c4aa73345fa24d45a70f2e8c533eeb4e01651ffc7f3ffa39355cff2f52428bbab17f7e6dc2e1df1858b2fa0328d57a995ea5b94f986802d7d2b31c3", 0x49}, {&(0x7f0000000580)="bb1391c21a2deb1808beb95a83ca0eb265f6142efb140249e0e5b60e78afd6746f5c60e8e4c0bdd468f5f12ecb7aa474da6444137c46c941710a8bc6b0be04b5ddae8849655995217867f2baf1e9d9c2fb08f7112e7dfec05277fef9940fb1d5a4630311f8462f8debc09bbe087c5a7d811ebe098c2034", 0x77}, {&(0x7f0000000600)="7e3263d7fda146a5a5f0d58ef78f5c6ff0acea08d3b2ea389221cb", 0x1b}, {&(0x7f0000000640)="cbfa7cd7c23b2f7128a9f4bb81b657096052114c92e662ba8dd9f07c97683a72723a94450dcab23330d05509f3b6cd3d8622024f814187acbbf2e69f4340e1c14170d6d8df14c5504ce19db06cde690617beb7929d93b341ab5ee7b6d2f06094c4d014c4b24e8a7907d8fa0218ba736d33b70162a712c0bdb63d4456eb2d07ec04a7736414f2ecf8338c0e6740cbbbd1d35eea400a96c2721e06739f917f54", 0x9f}, {&(0x7f0000000700)="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", 0x1000}], 0xa, &(0x7f00000018c0)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r1, r2}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r3]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, r4, r5, r6, r7, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [r8, r9, 0xffffffffffffffff, r10, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x108, 0x8000}, 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r11, 0x0) close(r11) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, &(0x7f0000000640), 0x0) 05:13:11 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)={0x0, 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, 0x0, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_PID={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_PID={0x8, 0x1c, r4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000080}, 0x44001) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r1) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)={0x34, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x34}}, 0x0) 05:13:11 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x2e, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000001000008000000d2420000120300000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e33323937363736343400"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000def361b116dd4bb681391964ccf077da010040000c00000000000000d0f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000100000000000000000000000000000000000000040000003700000000000000", 0x40, 0x540}, {&(0x7f0000010300)="030000000400"/32, 0x20, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010500)="ff030000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0100ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000d0f4655fd0f4655fd0f4655f00"/2080, 0x820, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d0f4655fd2f4655fd2f4655f00000000000004002000000000000800050000000af301000400000000000000000000000100000010000000", 0x40, 0x1500}, {&(0x7f0000010f00)="20000000100de17a100de17a00000000d0f4655f00"/32, 0x20, 0x1580}, {&(0x7f0000011000)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001002000000010000800000000000af3020004000000000000000000000002000000300000000200000004000000320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000d0f4655f00"/160, 0xa0, 0x1600}, {&(0x7f0000011100)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001002000000010000800000000000af3020004000000000000000000000002000000400000000200000004000000420000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000d0f4655f00"/160, 0xa0, 0x1700}, {&(0x7f0000011200)="c041000000300000d0f4655fd0f4655fd0f4655f00000000000002002000000000000800000000000af301000400000000000000000000000c00000020000000", 0x40, 0x1e00}, {&(0x7f0000011300)="20000000000000000000000000000000d0f4655f00"/32, 0x20, 0x1e80}, {&(0x7f0000011400)="ed41000000040000d2f4655fd2f4655fd2f4655f00000000000002002000000000000800030000000af3010004000000000000000000000001000000500000000000000000000000000000000000000000000000000000000000000000000000000000003f81d1a200000000000000000000000000000000000000000000000020000000100de17a100de17a100de17ad2f4655f100de17a0000000000000000", 0xa0, 0x1f00}, {&(0x7f0000011500)="ed8100001a040000d2f4655fd2f4655fd2f4655f00000000000001002000000000000800010000000af3010004000000000000000000000002000000600000000000000000000000000000000000000000000000000000000000000000000000000000009caef32e00000000000000000000000000000000000000000000000020000000100de17a100de17a100de17ad2f4655f100de17a0000000000000000", 0xa0, 0x2000}, {&(0x7f0000011600)="ffa1000026000000d2f4655fd2f4655fd2f4655f00000000000001000000000000000000010000002f746d702f73797a2d696d61676567656e3332393736373634342f66696c65302f66696c6530000000000000000000000000000000000000000000000ae0cdf100000000000000000000000000000000000000000000000020000000100de17a100de17a100de17ad2f4655f100de17a0000000000000000", 0xa0, 0x2100}, {&(0x7f0000011700)="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", 0x1a0, 0x2200}, {&(0x7f0000011900)="ed81000064000000d2f4655fd2f4655fd2f4655f00000000000001002000000000000800010000000af3010004000000000000000000000001000000900000000000000000000000000000000000000000000000000000000000000000000000000000008880d39500000000000000000000000000000000000000000000000020000000100de17a100de17a100de17ad2f4655f100de17a0000000000000000", 0xa0, 0x2400}, {&(0x7f0000011a00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531000000100000001000050166696c6532000000100000001000050166696c6533000000110000009403090166696c652e636f6c64000000", 0x80, 0x4000}, {&(0x7f0000011b00)="0b0000000c0001022e00000002000000f40302022e2e00"/32, 0x20, 0x8000}, {&(0x7f0000011c00)="00000000000400"/32, 0x20, 0x8400}, {&(0x7f0000011d00)="00000000000400"/32, 0x20, 0x8800}, {&(0x7f0000011e00)="00000000000400"/32, 0x20, 0x8c00}, {&(0x7f0000011f00)="00000000000400"/32, 0x20, 0x9000}, {&(0x7f0000012000)="00000000000400"/32, 0x20, 0x9400}, {&(0x7f0000012100)="00000000000400"/32, 0x20, 0x9800}, {&(0x7f0000012200)="00000000000400"/32, 0x20, 0x9c00}, {&(0x7f0000012300)="00000000000400"/32, 0x20, 0xa000}, {&(0x7f0000012400)="00000000000400"/32, 0x20, 0xa400}, {&(0x7f0000012500)="00000000000400"/32, 0x20, 0xa800}, {&(0x7f0000012600)="00000000000400"/32, 0x20, 0xac00}, {&(0x7f0000012700)="111fc0d901000000803a0900803a090000000000060000000000000005000000", 0x20, 0xc000}, {&(0x7f0000012800)="0200"/32, 0x20, 0xc400}, {&(0x7f0000012900)="0300"/32, 0x20, 0xc800}, {&(0x7f0000012a00)="0400"/32, 0x20, 0xcc00}, {&(0x7f0000012b00)="0500"/32, 0x20, 0xd000}, {&(0x7f0000012c00)="0000000000000000010000000000000000000000e925f2be0000000000000000000000000000000008000000000000000000000000000000000000000000000000c00100"/96, 0x60, 0xd400}, {&(0x7f0000012d00)="2719c0d901000000803a0900803a090000000000060000000000000005000000", 0x20, 0x10000}, {&(0x7f0000012e00)="0200"/32, 0x20, 0x10400}, {&(0x7f0000012f00)="0300"/32, 0x20, 0x10800}, {&(0x7f0000013000)="0400"/32, 0x20, 0x10c00}, {&(0x7f0000013100)="0500"/32, 0x20, 0x11000}, {&(0x7f0000013200)="0000000000000000010000000000000000000000e925f2be0000000000000000000000000000000008000000000000000000000000000000000000000000000000c00100"/96, 0x60, 0x11400}, {&(0x7f0000013300)="0c0000000c0001022e000000020000000c0002022e2e00000d0000001000050166696c65300000000e000000d803050766696c653100"/64, 0x40, 0x14000}, {&(0x7f0000013400)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x18000}, {&(0x7f0000013900)='syzkallers\x00'/32, 0x20, 0x1c000}, {&(0x7f0000013a00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x24000}], 0x0, &(0x7f0000013b00)=ANY=[@ANYBLOB="04"]) 05:13:11 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fsopen(0x0, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x400006}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r1 = socket$inet(0x2, 0x4, 0x1) fcntl$setstatus(r1, 0x4, 0x2800) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) pwritev(r2, &(0x7f0000000240)=[{&(0x7f0000000040)='c', 0x1}], 0x1, 0x498a, 0x0) pwritev(r2, &(0x7f0000000300)=[{&(0x7f0000000440)="85", 0x1}], 0x1, 0x1000, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 05:13:11 executing program 0: perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fremovexattr(0xffffffffffffffff, &(0x7f0000000600)=@known='com.apple.FinderInfo\x00') r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000040)=0x4) recvmsg$unix(r1, &(0x7f0000000500)={&(0x7f0000000100), 0x6e, &(0x7f0000000380)=[{&(0x7f0000000180)=""/223, 0xdf}, {&(0x7f0000000280)=""/226, 0xe2}], 0x2, &(0x7f0000000400)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0xd0}, 0x10020) write(r2, &(0x7f0000000540)="3bbe5d6524d93a0b0f54b5c52822d5e6e34b939a2c0f8898bd047a6c7fc7fa69b3e47d635a0c1c1e2bc43ec513d70e4bf87c61556287f8d5ff96e4d8acca5092037a8c7a7ec7fbafdb07d0860b4973a1537fddc6e16f1980a67c3768a2b7d7522e78380443891c249cd8ef0da01d9807295ee6f65a16ae412abdf4dd6eb80f63d257c6d7e9861584f2a398542f44d230ebcb8547518c14fd6965fa93de70f0", 0x9f) syncfs(r0) 05:13:11 executing program 6: ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) sendto(r0, &(0x7f0000000140)="4881f511a30d8a124913a8fb6bc98fc593be2e11943b0c60bafb4c1281c95e564d6508445d8408ae5cd30e481d5928b8d5973be662171f8e9b76a941", 0x3c, 0x81, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0xf}, 0x1112, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xf7bc, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x2) r1 = socket$inet(0x2, 0xa, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, 0x0, 0x0) bind(r1, &(0x7f0000000180)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x0, 0x3, 0x4, 0x1, {0xa, 0x4e23, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x456}}}, 0x80) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000270000004f801", 0x17}, {&(0x7f0000010300)='S', 0x1, 0x600}], 0x0, &(0x7f0000010d00)=ANY=[]) 05:13:11 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x1}, 0x1c) shutdown(r0, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c) 05:13:11 executing program 1: r0 = io_uring_setup(0x3e96, &(0x7f0000000140)={0x0, 0x0, 0x1}) io_uring_enter(r0, 0x743d, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) accept4$unix(r1, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) [ 155.146913] loop5: detected capacity change from 0 to 1024 [ 155.154323] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000032: 0000 [#1] SMP KASAN NOPTI [ 155.155260] KASAN: null-ptr-deref in range [0x0000000000000190-0x0000000000000197] [ 155.155875] CPU: 1 UID: 0 PID: 4053 Comm: syz-executor.2 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 155.156836] Tainted: [W]=WARN [ 155.157095] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 155.158314] ext4: Unknown parameter '' [ 155.160694] RIP: 0010:perf_tp_event+0x175/0xe70 [ 155.160722] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 155.160736] RSP: 0018:ffff888048787780 EFLAGS: 00010012 [ 155.160748] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: ffffc900054b4000 [ 155.166052] RDX: 0000000000040000 RSI: ffffffff818995b7 RDI: 0000000000000191 [ 155.166621] RBP: ffff8880487879f0 R08: ffff88806cf31340 R09: ffffe8ffffd16200 [ 155.167193] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 [ 155.167320] loop6: detected capacity change from 0 to 6 [ 155.167763] R13: 0000000000000014 R14: ffff88806cf31340 R15: dffffc0000000000 [ 155.167776] FS: 00007f02046dd700(0000) GS:ffff8880e56dd000(0000) knlGS:0000000000000000 [ 155.167788] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 155.167797] CR2: 00007fff0a08cff8 CR3: 000000001eb11000 CR4: 0000000000350ef0 [ 155.171067] Call Trace: [ 155.171364] [ 155.171551] ? __pfx_perf_tp_event+0x10/0x10 [ 155.171918] ? __lock_acquire+0x694/0x1b70 [ 155.172268] ? lock_acquire+0x15e/0x2f0 [ 155.172596] ? __is_insn_slot_addr+0x2e/0x290 [ 155.173106] ? find_held_lock+0x2b/0x80 [ 155.173440] ? __is_insn_slot_addr+0x136/0x290 [ 155.173829] ? lock_release+0xc8/0x290 [ 155.174152] ? __lock_acquire+0x694/0x1b70 [ 155.174499] ? __kernel_text_address+0xd/0x40 [ 155.174871] ? perf_trace_run_bpf_submit+0xef/0x180 [ 155.175280] ? __pfx_usage_match+0x10/0x10 [ 155.175631] ? __pfx_usage_match+0x10/0x10 [ 155.175982] perf_trace_run_bpf_submit+0xef/0x180 [ 155.176382] perf_trace_preemptirq_template+0x259/0x430 [ 155.176824] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 155.177410] ? irqentry_exit+0x3b/0x90 [ 155.177780] trace_irq_enable.constprop.0+0xa6/0x100 [ 155.178343] trace_hardirqs_on+0x26/0x40 [ 155.178677] irqentry_exit+0x3b/0x90 [ 155.178986] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 155.179408] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x80 [ 155.179844] Code: 5d 41 5c 41 5d e9 a0 1f 4a 03 48 c7 c0 f4 ff ff ff eb 92 0f 1f 80 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 48 8b 34 24 65 48 8b 15 88 48 10 06 65 8b 05 99 48 10 [ 155.181420] RSP: 0018:ffff888048787c48 EFLAGS: 00000202 [ 155.181910] RAX: 0000000000000002 RBX: 0000000000000001 RCX: ffffffff816732cd [ 155.182575] RDX: ffff88801a6fd280 RSI: 0000000000000000 RDI: 0000000000000001 [ 155.183151] RBP: dffffc0000000000 R08: 0000000000000001 R09: 0000000000000000 [ 155.183721] R10: 0000000000000001 R11: 0000000000000001 R12: ffff888046b7e4c0 [ 155.184291] R13: ffffffff8167311c R14: ffffed10090f0fa0 R15: 0000000000000001 [ 155.184862] ? futex_hash+0x15c/0x390 [ 155.185181] ? futex_hash+0x30d/0x390 [ 155.185495] futex_hash+0x2ca/0x390 [ 155.185803] futex_wake+0x143/0x540 [ 155.186105] ? __pick_eevdf+0x326/0x570 [ 155.186429] ? update_curr+0x71/0x500 [ 155.186739] ? __pfx_futex_wake+0x10/0x10 [ 155.187080] ? __schedule+0x24e0/0x3590 [ 155.187412] do_futex+0x26d/0x370 [ 155.187705] ? __pfx_do_futex+0x10/0x10 [ 155.188033] ? __pfx___schedule+0x10/0x10 [ 155.188376] __x64_sys_futex+0x1c9/0x4d0 [ 155.188708] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 155.189195] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 155.189623] ? __pfx___x64_sys_futex+0x10/0x10 [ 155.190003] ? __local_bh_enable_ip+0xa1/0x110 [ 155.190379] do_syscall_64+0xbf/0x360 [ 155.190694] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.191115] RIP: 0033:0x7f0207188b19 [ 155.191420] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 155.192849] RSP: 002b:00007f02046dd218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 155.193457] RAX: ffffffffffffffda RBX: 00007f020729c028 RCX: 00007f0207188b19 [ 155.194030] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f020729c02c [ 155.194604] RBP: 00007f020729c020 R08: 000000000000000e R09: 0000000000000000 [ 155.195170] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f020729c02c [ 155.195732] R13: 00007fffdcf5efcf R14: 00007f02046dd300 R15: 0000000000022000 [ 155.196303] [ 155.196499] Modules linked in: [ 155.196763] ---[ end trace 0000000000000000 ]--- [ 155.196768] Oops: general protection fault, probably for non-canonical address 0xdffffc0020000032: 0000 [#2] SMP KASAN NOPTI [ 155.197140] RIP: 0010:perf_tp_event+0x175/0xe70 [ 155.198969] KASAN: probably user-memory-access in range [0x0000000100000190-0x0000000100000197] [ 155.199334] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 155.200722] CPU: 0 UID: 0 PID: 4049 Comm: syz-executor.5 Tainted: G D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 155.202153] RSP: 0018:ffff888048787780 EFLAGS: 00010012 [ 155.204078] Tainted: [D]=DIE, [W]=WARN [ 155.204489] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: ffffc900054b4000 [ 155.205116] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 155.205679] RDX: 0000000000040000 RSI: ffffffff818995b7 RDI: 0000000000000191 [ 155.207032] RIP: 0010:perf_tp_event+0x175/0xe70 [ 155.207589] RBP: ffff8880487879f0 R08: ffff88806cf31340 R09: ffffe8ffffd16200 [ 155.208359] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 155.208919] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 [ 155.211833] RSP: 0018:ffff888049337780 EFLAGS: 00010012 [ 155.212392] R13: 0000000000000014 R14: ffff88806cf31340 R15: dffffc0000000000 [ 155.212396] [ 155.212405] RAX: 0000000020000032 RBX: 00000000ffffffa0 RCX: ffffc9000e2fb000 [ 155.212815] FS: 00007f02046dd700(0000) GS:ffff8880e56dd000(0000) knlGS:0000000000000000 [ 155.213983] RDX: 0000000000040000 RSI: ffffffff818995b7 RDI: 0000000100000190 [ 155.214121] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 155.215308] RBP: ffff8880493379f0 R08: ffff88806ce31340 R09: ffffe8ffffc16200 [ 155.215942] CR2: 00007fff0a08cff8 CR3: 000000001eb11000 CR4: 0000000000350ef0 [ 155.217092] R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000 [ 155.217547] note: syz-executor.2[4053] exited with irqs disabled [ 155.218707] R13: 0000000000000014 R14: ffff88806ce31340 R15: dffffc0000000000 [ 155.222544] FS: 00007f3dd9f47700(0000) GS:ffff8880e55dd000(0000) knlGS:0000000000000000 [ 155.223867] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 155.224821] CR2: 00007fa1b2acb008 CR3: 000000001e4f3000 CR4: 0000000000350ef0 [ 155.226012] Call Trace: [ 155.226450] [ 155.226833] ? lock_acquire+0x18c/0x2f0 [ 155.227493] ? __pfx_perf_tp_event+0x10/0x10 [ 155.228235] ? lock_release+0x1c7/0x290 [ 155.228888] ? __is_insn_slot_addr+0x140/0x290 [ 155.229651] ? kernel_text_address+0x5b/0xc0 [ 155.230405] ? lock_release+0x1c7/0x290 [ 155.231059] ? __kernel_text_address+0xd/0x40 [ 155.231820] ? unwind_get_return_address+0x59/0xa0 [ 155.232646] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 155.233546] ? lock_acquire+0x18c/0x2f0 [ 155.234214] ? lock_release+0x1c7/0x290 [ 155.234874] ? lock_acquire+0x18c/0x2f0 [ 155.235535] ? lock_acquire+0x18c/0x2f0 [ 155.236194] ? lock_release+0x1c7/0x290 [ 155.236864] ? css_rstat_updated+0x1b8/0x4d0 [ 155.237593] ? __pfx_css_rstat_updated+0x10/0x10 [ 155.238382] ? trace_pelt_se_tp+0xdf/0x130 [ 155.239110] ? perf_trace_run_bpf_submit+0xef/0x180 [ 155.239963] perf_trace_run_bpf_submit+0xef/0x180 [ 155.240789] perf_trace_preemptirq_template+0x259/0x430 [ 155.241697] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 155.242698] ? check_preempt_wakeup_fair+0x406/0x950 [ 155.243541] ? wakeup_preempt+0x140/0x2a0 [ 155.244229] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 155.245074] trace_irq_enable.constprop.0+0xa6/0x100 [ 155.245919] trace_hardirqs_on+0x26/0x40 [ 155.246589] _raw_spin_unlock_irqrestore+0x2c/0x50 [ 155.247405] try_to_wake_up+0x8ae/0x11d0 [ 155.248091] ? __pfx_try_to_wake_up+0x10/0x10 [ 155.248842] ? plist_del+0x122/0x270 [ 155.249475] ? __futex_unqueue+0xda/0x1c0 [ 155.250170] wake_up_q+0xa1/0x130 [ 155.250768] futex_wake+0x47e/0x540 [ 155.251387] ? __pfx_futex_wake+0x10/0x10 [ 155.252082] ? __call_rcu_common.constprop.0+0x4c1/0x960 [ 155.252973] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 155.253849] ? __call_rcu_common.constprop.0+0x4c1/0x960 [ 155.254742] do_futex+0x26d/0x370 [ 155.255327] ? __fput+0x67b/0xb50 [ 155.255913] ? __pfx_do_futex+0x10/0x10 [ 155.256576] ? __fput+0x67b/0xb50 [ 155.257161] __x64_sys_futex+0x1c9/0x4d0 [ 155.257847] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 155.258817] ? fput_close_sync+0x114/0x240 [ 155.259519] ? __pfx___x64_sys_futex+0x10/0x10 [ 155.260272] ? __pfx_fput_close_sync+0x10/0x10 [ 155.261038] ? dnotify_flush+0x79/0x4c0 [ 155.261697] ? xfd_validate_state+0x55/0x180 [ 155.262426] do_syscall_64+0xbf/0x360 [ 155.263048] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.263895] RIP: 0033:0x7f3ddc9d1b19 [ 155.264519] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 155.267420] RSP: 002b:00007f3dd9f47218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 155.268653] RAX: ffffffffffffffda RBX: 00007f3ddcae4f68 RCX: 00007f3ddc9d1b19 [ 155.269823] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f3ddcae4f6c [ 155.270949] RBP: 00007f3ddcae4f60 R08: 0000000000000016 R09: 0000000000000000 [ 155.272082] R10: ffffffffffffffff R11: 0000000000000246 R12: 00007f3ddcae4f6c [ 155.273207] R13: 00007ffc5a4a798f R14: 00007f3dd9f47300 R15: 0000000000022000 [ 155.274376] [ 155.274760] Modules linked in: [ 155.275298] ---[ end trace 0000000000000000 ]--- [ 155.275299] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000032: 0000 [#3] SMP KASAN NOPTI [ 155.275317] KASAN: null-ptr-deref in range [0x0000000000000190-0x0000000000000197] [ 155.276054] RIP: 0010:perf_tp_event+0x175/0xe70 [ 155.276936] CPU: 1 UID: 0 PID: 4053 Comm: syz-executor.2 Tainted: G D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 155.278121] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 155.278497] Tainted: [D]=DIE, [W]=WARN [ 155.280352] RSP: 0018:ffff888048787780 EFLAGS: 00010012 [ 155.281792] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 155.282404] [ 155.282820] RIP: 0010:perf_tp_event+0x175/0xe70 [ 155.284112] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: ffffc900054b4000 [ 155.284250] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 155.284956] RDX: 0000000000040000 RSI: ffffffff818995b7 RDI: 0000000000000191 [ 155.285520] RSP: 0018:ffff88806cf08b80 EFLAGS: 00010012 [ 155.288315] RBP: ffff8880487879f0 R08: ffff88806cf31340 R09: ffffe8ffffd16200 [ 155.288878] [ 155.288883] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: 0000000000000002 [ 155.289711] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 [ 155.290273] RDX: ffff88801a6fd280 RSI: ffffffff818995b7 RDI: 0000000000000191 [ 155.290540] R13: 0000000000000014 R14: ffff88806cf31340 R15: dffffc0000000000 [ 155.291099] RBP: ffff88806cf08df0 R08: ffff88806cf313e8 R09: ffffe8ffffd16200 [ 155.292181] FS: 00007f3dd9f47700(0000) GS:ffff8880e55dd000(0000) knlGS:0000000000000000 [ 155.292740] R10: 0000000000000000 R11: ffff88800ddc8498 R12: dffffc0000000000 [ 155.293841] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 155.294396] R13: 0000000000000014 R14: ffff88806cf313e8 R15: dffffc0000000000 [ 155.295611] CR2: 00007fa1b2acb008 CR3: 000000001e4f3000 CR4: 0000000000350ef0 [ 155.296173] FS: 00007f02046dd700(0000) GS:ffff8880e56dd000(0000) knlGS:0000000000000000 [ 155.297047] note: syz-executor.5[4049] exited with irqs disabled [ 155.297609] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 155.300247] CR2: 00007fff0a08cff8 CR3: 000000001eb11000 CR4: 0000000000350ef0 [ 155.300826] Call Trace: [ 155.301038] [ 155.301221] ? __pfx_perf_tp_event+0x10/0x10 [ 155.301587] ? enqueue_task_fair+0xded/0x1e00 [ 155.301969] ? check_preempt_wakeup_fair+0x6e/0x950 [ 155.302375] ? wakeup_preempt+0x140/0x2a0 [ 155.302710] ? lock_release+0x1c7/0x290 [ 155.303039] ? lock_release+0x1c7/0x290 [ 155.303364] ? do_raw_spin_unlock+0x53/0x220 [ 155.303726] ? _raw_spin_unlock_irqrestore+0x22/0x50 [ 155.304143] ? try_to_wake_up+0x8ae/0x11d0 [ 155.304493] ? do_raw_spin_lock+0x123/0x260 [ 155.304846] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 155.305233] ? perf_trace_run_bpf_submit+0xef/0x180 [ 155.305642] perf_trace_run_bpf_submit+0xef/0x180 [ 155.306046] perf_trace_preemptirq_template+0x259/0x430 [ 155.306497] ? read_tsc+0x9/0x20 [ 155.306781] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 155.307264] ? clockevents_program_event+0x135/0x360 [ 155.307683] ? tick_program_event+0xac/0x140 [ 155.308042] ? handle_softirqs+0x16e/0x770 [ 155.308395] trace_irq_enable.constprop.0+0xa6/0x100 [ 155.308804] trace_hardirqs_on+0x26/0x40 [ 155.309140] handle_softirqs+0x16e/0x770 [ 155.309478] __irq_exit_rcu+0xc4/0x100 [ 155.309810] irq_exit_rcu+0x9/0x20 [ 155.310109] sysvec_apic_timer_interrupt+0x70/0x80 [ 155.310514] [ 155.310702] [ 155.310887] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 155.311343] RIP: 0010:make_task_dead+0xa2/0x3b0 [ 155.311748] Code: 38 00 85 db 0f 84 21 01 00 00 e8 d9 96 38 00 9c 5b 81 e3 00 02 00 00 31 ff 48 89 de e8 27 92 38 00 48 85 db 0f 84 17 01 00 00 b9 96 38 00 31 ff 65 8b 1d 60 df 48 06 81 e3 ff ff ff 7f 89 de [ 155.313301] RSP: 0018:ffff888048787f28 EFLAGS: 00000246 [ 155.313766] RAX: 0000000000000001 RBX: ffff88801a6fd280 RCX: ffffffff817c2b86 [ 155.314367] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff813b5234 [ 155.314974] RBP: 000000000000000b R08: 0000000000000000 R09: 0000000000000000 [ 155.315582] R10: ffffffff8643ac57 R11: 3030303030302043 R12: ffff88801a6fd280 [ 155.316182] R13: 0000000000000000 R14: dffffc0000000032 R15: 0000000000000000 [ 155.316764] ? trace_irq_enable.constprop.0+0x26/0x100 [ 155.317191] ? make_task_dead+0x214/0x3b0 [ 155.317557] ? make_task_dead+0x214/0x3b0 [ 155.317922] ? do_syscall_64+0xbf/0x360 [ 155.318269] rewind_stack_and_make_dead+0x16/0x20 [ 155.318667] RIP: 0033:0x7f0207188b19 [ 155.318971] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 155.320490] RSP: 002b:00007f02046dd218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 155.321126] RAX: ffffffffffffffda RBX: 00007f020729c028 RCX: 00007f0207188b19 [ 155.321703] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f020729c02c [ 155.322288] RBP: 00007f020729c020 R08: 000000000000000e R09: 0000000000000000 [ 155.322893] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f020729c02c [ 155.323466] R13: 00007fffdcf5efcf R14: 00007f02046dd300 R15: 0000000000022000 [ 155.324053] [ 155.324257] Modules linked in: [ 155.324534] ---[ end trace 0000000000000000 ]--- [ 155.324538] Oops: general protection fault, probably for non-canonical address 0xdffffc0020000032: 0000 [#4] SMP KASAN NOPTI [ 155.324933] RIP: 0010:perf_tp_event+0x175/0xe70 [ 155.326610] KASAN: probably user-memory-access in range [0x0000000100000190-0x0000000100000197] [ 155.326999] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 155.328288] CPU: 0 UID: 0 PID: 4049 Comm: syz-executor.5 Tainted: G D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 155.329776] RSP: 0018:ffff888048787780 EFLAGS: 00010012 [ 155.331548] Tainted: [D]=DIE, [W]=WARN [ 155.331988] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: ffffc900054b4000 [ 155.332578] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 155.333176] RDX: 0000000000040000 RSI: ffffffff818995b7 RDI: 0000000000000191 [ 155.334418] RIP: 0010:perf_tp_event+0x175/0xe70 [ 155.335002] RBP: ffff8880487879f0 R08: ffff88806cf31340 R09: ffffe8ffffd16200 [ 155.335708] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 155.336298] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 [ 155.339071] RSP: 0018:ffff88806ce08b80 EFLAGS: 00010012 [ 155.339676] R13: 0000000000000014 R14: ffff88806cf31340 R15: dffffc0000000000 [ 155.339682] [ 155.339690] RAX: 0000000020000032 RBX: 00000000ffffffa0 RCX: 0000000000000002 [ 155.340132] FS: 00007f02046dd700(0000) GS:ffff8880e56dd000(0000) knlGS:0000000000000000 [ 155.341209] RDX: ffff888039631b80 RSI: ffffffff818995b7 RDI: 0000000100000190 [ 155.341358] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 155.342447] RBP: ffff88806ce08df0 R08: ffff88806ce313e8 R09: ffffe8ffffc16200 [ 155.343127] CR2: 00007fff0a08cff8 CR3: 000000001eb11000 CR4: 0000000000350ef0 [ 155.344201] R10: 0000000000000000 R11: ffff88801746c498 R12: dffffc0000000000 [ 155.344696] Kernel panic - not syncing: Fatal exception in interrupt [ 156.390828] Shutting down cpus with NMI [ 156.393044] Kernel Offset: disabled [ 156.393343] ---[ end Kernel panic - not syncing: Fatal exception in interrupt ]--- VM DIAGNOSIS: 05:13:12 Registers: info registers vcpu 0 RAX=000000000000653e RBX=1ffff11009266f24 RCX=ffffc9000e2fb000 RDX=0000000000040000 RSI=ffffffff8154bead RDI=0000000000000001 RBP=0000000000000001 RSP=ffff888049337918 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=000000000000001b R13=0000000000000200 R14=ffff88801a6fd280 R15=ffff8880493379d8 RIP=ffffffff8154beaf RFL=00000012 [----A--] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f3dd9f47700 00000000 00000000 GS =0000 ffff8880e55dd000 00000000 00000000 LDT=0000 ffffc90000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000001b2cf23000 CR3=000000001e4f3000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ff00000000ff000000000000000000ff XMM01=25252525252525252525252525252525 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=000000000000d245 RBX=1ffff110090f0e84 RCX=ffffc900054b4000 RDX=0000000000040000 RSI=ffffffff8154bead RDI=0000000000000001 RBP=0000000000000001 RSP=ffff888048787418 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=0000000000000041 R13=0000000000000000 R14=ffff888039631b80 R15=ffff8880487874d8 RIP=ffffffff8154beaf RFL=00000016 [----AP-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f02046dd700 00000000 00000000 GS =0000 ffff8880e56dd000 00000000 00000000 LDT=0000 fffffe0b00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fff0a08cff8 CR3=000000001eb11000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00007f020726f7c000007f020726f7c8 XMM02=00007f020726f7e000007f020726f7c0 XMM03=00007f020726f7c800007f020726f7c0 XMM04=ffffffff0000ff00000000ff00000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000