Warning: Permanently added '[localhost]:24808' (ECDSA) to the list of known hosts.
2025/08/30 06:34:39 fuzzer started
2025/08/30 06:34:39 dialing manager at localhost:43077
syzkaller login: [   50.835294] cgroup: Unknown subsys name 'net'
[   50.902758] cgroup: Unknown subsys name 'cpuset'
[   50.926752] cgroup: Unknown subsys name 'rlimit'
2025/08/30 06:34:50 syscalls: 2214
2025/08/30 06:34:50 code coverage: enabled
2025/08/30 06:34:50 comparison tracing: enabled
2025/08/30 06:34:50 extra coverage: enabled
2025/08/30 06:34:50 setuid sandbox: enabled
2025/08/30 06:34:50 namespace sandbox: enabled
2025/08/30 06:34:50 Android sandbox: enabled
2025/08/30 06:34:50 fault injection: enabled
2025/08/30 06:34:50 leak checking: enabled
2025/08/30 06:34:50 net packet injection: enabled
2025/08/30 06:34:50 net device setup: enabled
2025/08/30 06:34:50 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/08/30 06:34:50 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/08/30 06:34:50 USB emulation: enabled
2025/08/30 06:34:50 hci packet injection: enabled
2025/08/30 06:34:50 wifi device emulation: enabled
2025/08/30 06:34:50 802.15.4 emulation: enabled
2025/08/30 06:34:50 fetching corpus: 50, signal 20572/22358 (executing program)
2025/08/30 06:34:50 fetching corpus: 100, signal 29236/32668 (executing program)
2025/08/30 06:34:50 fetching corpus: 150, signal 33478/38524 (executing program)
2025/08/30 06:34:50 fetching corpus: 200, signal 39489/45987 (executing program)
2025/08/30 06:34:50 fetching corpus: 250, signal 43377/51320 (executing program)
2025/08/30 06:34:51 fetching corpus: 300, signal 50895/59989 (executing program)
2025/08/30 06:34:51 fetching corpus: 350, signal 55260/65574 (executing program)
2025/08/30 06:34:51 fetching corpus: 400, signal 59644/71107 (executing program)
2025/08/30 06:34:51 fetching corpus: 450, signal 63113/75757 (executing program)
2025/08/30 06:34:51 fetching corpus: 500, signal 66181/79961 (executing program)
2025/08/30 06:34:51 fetching corpus: 550, signal 69432/84289 (executing program)
2025/08/30 06:34:51 fetching corpus: 600, signal 72481/88368 (executing program)
2025/08/30 06:34:51 fetching corpus: 650, signal 77799/94357 (executing program)
2025/08/30 06:34:51 fetching corpus: 700, signal 80872/98317 (executing program)
2025/08/30 06:34:51 fetching corpus: 750, signal 82818/101242 (executing program)
2025/08/30 06:34:51 fetching corpus: 800, signal 85874/105067 (executing program)
2025/08/30 06:34:51 fetching corpus: 850, signal 87954/107967 (executing program)
2025/08/30 06:34:51 fetching corpus: 900, signal 89795/110682 (executing program)
2025/08/30 06:34:52 fetching corpus: 950, signal 91329/113106 (executing program)
2025/08/30 06:34:52 fetching corpus: 1000, signal 94369/116673 (executing program)
2025/08/30 06:34:52 fetching corpus: 1050, signal 96299/119346 (executing program)
2025/08/30 06:34:52 fetching corpus: 1100, signal 98067/121848 (executing program)
2025/08/30 06:34:52 fetching corpus: 1150, signal 99568/124132 (executing program)
2025/08/30 06:34:52 fetching corpus: 1200, signal 101179/126453 (executing program)
2025/08/30 06:34:52 fetching corpus: 1250, signal 102072/128180 (executing program)
2025/08/30 06:34:52 fetching corpus: 1300, signal 103152/130061 (executing program)
2025/08/30 06:34:53 fetching corpus: 1350, signal 104429/132031 (executing program)
2025/08/30 06:34:53 fetching corpus: 1400, signal 105768/134062 (executing program)
2025/08/30 06:34:53 fetching corpus: 1450, signal 107683/136492 (executing program)
2025/08/30 06:34:53 fetching corpus: 1500, signal 109213/138575 (executing program)
2025/08/30 06:34:53 fetching corpus: 1550, signal 110253/140303 (executing program)
2025/08/30 06:34:53 fetching corpus: 1600, signal 111868/142414 (executing program)
2025/08/30 06:34:53 fetching corpus: 1650, signal 113028/144195 (executing program)
2025/08/30 06:34:53 fetching corpus: 1700, signal 113914/145774 (executing program)
2025/08/30 06:34:53 fetching corpus: 1750, signal 116081/148211 (executing program)
2025/08/30 06:34:53 fetching corpus: 1800, signal 117371/149980 (executing program)
2025/08/30 06:34:54 fetching corpus: 1850, signal 118624/151726 (executing program)
2025/08/30 06:34:54 fetching corpus: 1900, signal 119590/153256 (executing program)
2025/08/30 06:34:54 fetching corpus: 1950, signal 120307/154610 (executing program)
2025/08/30 06:34:54 fetching corpus: 2000, signal 121420/156265 (executing program)
2025/08/30 06:34:54 fetching corpus: 2050, signal 122485/157790 (executing program)
2025/08/30 06:34:54 fetching corpus: 2100, signal 123263/159093 (executing program)
2025/08/30 06:34:54 fetching corpus: 2150, signal 123997/160371 (executing program)
2025/08/30 06:34:54 fetching corpus: 2200, signal 125173/161885 (executing program)
2025/08/30 06:34:54 fetching corpus: 2250, signal 126112/163275 (executing program)
2025/08/30 06:34:54 fetching corpus: 2300, signal 126939/164553 (executing program)
2025/08/30 06:34:55 fetching corpus: 2350, signal 128202/166078 (executing program)
2025/08/30 06:34:55 fetching corpus: 2400, signal 129190/167393 (executing program)
2025/08/30 06:34:55 fetching corpus: 2450, signal 130126/168731 (executing program)
2025/08/30 06:34:55 fetching corpus: 2500, signal 131102/170056 (executing program)
2025/08/30 06:34:55 fetching corpus: 2550, signal 132194/171411 (executing program)
2025/08/30 06:34:55 fetching corpus: 2600, signal 132969/172591 (executing program)
2025/08/30 06:34:55 fetching corpus: 2650, signal 133776/173727 (executing program)
2025/08/30 06:34:55 fetching corpus: 2700, signal 134580/174890 (executing program)
2025/08/30 06:34:55 fetching corpus: 2750, signal 135768/176171 (executing program)
2025/08/30 06:34:55 fetching corpus: 2800, signal 136598/177356 (executing program)
2025/08/30 06:34:55 fetching corpus: 2850, signal 137049/178321 (executing program)
2025/08/30 06:34:56 fetching corpus: 2900, signal 137877/179452 (executing program)
2025/08/30 06:34:56 fetching corpus: 2950, signal 138411/180365 (executing program)
2025/08/30 06:34:56 fetching corpus: 3000, signal 138753/181224 (executing program)
2025/08/30 06:34:56 fetching corpus: 3050, signal 139359/182203 (executing program)
2025/08/30 06:34:56 fetching corpus: 3100, signal 140164/183274 (executing program)
2025/08/30 06:34:56 fetching corpus: 3150, signal 140961/184315 (executing program)
2025/08/30 06:34:56 fetching corpus: 3200, signal 141769/185330 (executing program)
2025/08/30 06:34:56 fetching corpus: 3250, signal 142331/186263 (executing program)
2025/08/30 06:34:56 fetching corpus: 3300, signal 142897/187283 (executing program)
2025/08/30 06:34:56 fetching corpus: 3350, signal 143236/188086 (executing program)
2025/08/30 06:34:56 fetching corpus: 3400, signal 144012/189061 (executing program)
2025/08/30 06:34:57 fetching corpus: 3450, signal 144584/189925 (executing program)
2025/08/30 06:34:57 fetching corpus: 3500, signal 145172/190778 (executing program)
2025/08/30 06:34:57 fetching corpus: 3550, signal 145723/191632 (executing program)
2025/08/30 06:34:57 fetching corpus: 3600, signal 146208/192413 (executing program)
2025/08/30 06:34:57 fetching corpus: 3650, signal 146998/193262 (executing program)
2025/08/30 06:34:57 fetching corpus: 3700, signal 147615/194106 (executing program)
2025/08/30 06:34:57 fetching corpus: 3750, signal 148007/194847 (executing program)
2025/08/30 06:34:57 fetching corpus: 3800, signal 148844/195717 (executing program)
2025/08/30 06:34:57 fetching corpus: 3850, signal 149807/196687 (executing program)
2025/08/30 06:34:57 fetching corpus: 3900, signal 150373/197458 (executing program)
2025/08/30 06:34:57 fetching corpus: 3950, signal 150826/198180 (executing program)
2025/08/30 06:34:57 fetching corpus: 4000, signal 151344/198887 (executing program)
2025/08/30 06:34:58 fetching corpus: 4050, signal 151795/199654 (executing program)
2025/08/30 06:34:58 fetching corpus: 4100, signal 152289/200399 (executing program)
2025/08/30 06:34:58 fetching corpus: 4150, signal 152804/201119 (executing program)
2025/08/30 06:34:58 fetching corpus: 4200, signal 153165/201767 (executing program)
2025/08/30 06:34:58 fetching corpus: 4250, signal 153602/202436 (executing program)
2025/08/30 06:34:58 fetching corpus: 4300, signal 153974/203070 (executing program)
2025/08/30 06:34:58 fetching corpus: 4350, signal 154649/203818 (executing program)
2025/08/30 06:34:58 fetching corpus: 4400, signal 155187/204460 (executing program)
2025/08/30 06:34:58 fetching corpus: 4450, signal 155809/205093 (executing program)
2025/08/30 06:34:58 fetching corpus: 4500, signal 156236/205721 (executing program)
2025/08/30 06:34:58 fetching corpus: 4550, signal 156730/206328 (executing program)
2025/08/30 06:34:59 fetching corpus: 4600, signal 157465/206971 (executing program)
2025/08/30 06:34:59 fetching corpus: 4650, signal 158066/207605 (executing program)
2025/08/30 06:34:59 fetching corpus: 4700, signal 158497/208173 (executing program)
2025/08/30 06:34:59 fetching corpus: 4750, signal 158893/208741 (executing program)
2025/08/30 06:34:59 fetching corpus: 4800, signal 159461/209327 (executing program)
2025/08/30 06:34:59 fetching corpus: 4850, signal 159883/209926 (executing program)
2025/08/30 06:34:59 fetching corpus: 4900, signal 160658/210479 (executing program)
2025/08/30 06:34:59 fetching corpus: 4950, signal 161092/211051 (executing program)
2025/08/30 06:34:59 fetching corpus: 5000, signal 161726/211677 (executing program)
2025/08/30 06:34:59 fetching corpus: 5050, signal 162343/212275 (executing program)
2025/08/30 06:34:59 fetching corpus: 5100, signal 162856/212777 (executing program)
2025/08/30 06:35:00 fetching corpus: 5150, signal 163306/213257 (executing program)
2025/08/30 06:35:00 fetching corpus: 5200, signal 163645/213790 (executing program)
2025/08/30 06:35:00 fetching corpus: 5250, signal 163979/214267 (executing program)
2025/08/30 06:35:00 fetching corpus: 5300, signal 164334/214543 (executing program)
2025/08/30 06:35:00 fetching corpus: 5350, signal 164751/214543 (executing program)
2025/08/30 06:35:00 fetching corpus: 5400, signal 165020/214557 (executing program)
2025/08/30 06:35:00 fetching corpus: 5450, signal 165865/214619 (executing program)
2025/08/30 06:35:00 fetching corpus: 5500, signal 166249/214624 (executing program)
2025/08/30 06:35:00 fetching corpus: 5550, signal 166608/214624 (executing program)
2025/08/30 06:35:00 fetching corpus: 5600, signal 166972/214634 (executing program)
2025/08/30 06:35:00 fetching corpus: 5650, signal 167493/214642 (executing program)
2025/08/30 06:35:01 fetching corpus: 5700, signal 167987/214643 (executing program)
2025/08/30 06:35:01 fetching corpus: 5750, signal 168450/214670 (executing program)
2025/08/30 06:35:01 fetching corpus: 5800, signal 168819/214677 (executing program)
2025/08/30 06:35:01 fetching corpus: 5850, signal 169150/214680 (executing program)
2025/08/30 06:35:01 fetching corpus: 5900, signal 169590/214720 (executing program)
2025/08/30 06:35:01 fetching corpus: 5950, signal 169869/214727 (executing program)
2025/08/30 06:35:01 fetching corpus: 6000, signal 170301/214742 (executing program)
2025/08/30 06:35:01 fetching corpus: 6050, signal 170680/214745 (executing program)
2025/08/30 06:35:01 fetching corpus: 6100, signal 170999/214746 (executing program)
2025/08/30 06:35:01 fetching corpus: 6150, signal 171373/214747 (executing program)
2025/08/30 06:35:01 fetching corpus: 6200, signal 171773/214753 (executing program)
2025/08/30 06:35:01 fetching corpus: 6250, signal 172061/214759 (executing program)
2025/08/30 06:35:02 fetching corpus: 6300, signal 172542/214765 (executing program)
2025/08/30 06:35:02 fetching corpus: 6350, signal 172985/214789 (executing program)
2025/08/30 06:35:02 fetching corpus: 6400, signal 173291/214818 (executing program)
2025/08/30 06:35:02 fetching corpus: 6450, signal 173764/214836 (executing program)
2025/08/30 06:35:02 fetching corpus: 6500, signal 174095/214844 (executing program)
2025/08/30 06:35:02 fetching corpus: 6550, signal 174474/214848 (executing program)
2025/08/30 06:35:02 fetching corpus: 6600, signal 174898/214849 (executing program)
2025/08/30 06:35:02 fetching corpus: 6650, signal 175211/214887 (executing program)
2025/08/30 06:35:02 fetching corpus: 6700, signal 175579/214889 (executing program)
2025/08/30 06:35:02 fetching corpus: 6750, signal 176187/214892 (executing program)
2025/08/30 06:35:02 fetching corpus: 6800, signal 176522/214892 (executing program)
2025/08/30 06:35:03 fetching corpus: 6850, signal 176821/214903 (executing program)
2025/08/30 06:35:03 fetching corpus: 6900, signal 177134/214912 (executing program)
2025/08/30 06:35:03 fetching corpus: 6950, signal 177525/214912 (executing program)
2025/08/30 06:35:03 fetching corpus: 7000, signal 178036/214923 (executing program)
2025/08/30 06:35:03 fetching corpus: 7050, signal 178362/214924 (executing program)
2025/08/30 06:35:03 fetching corpus: 7100, signal 178707/214932 (executing program)
2025/08/30 06:35:03 fetching corpus: 7150, signal 178913/214940 (executing program)
2025/08/30 06:35:03 fetching corpus: 7200, signal 179159/214942 (executing program)
2025/08/30 06:35:03 fetching corpus: 7250, signal 179351/214967 (executing program)
2025/08/30 06:35:03 fetching corpus: 7300, signal 179645/214993 (executing program)
2025/08/30 06:35:03 fetching corpus: 7350, signal 179844/214994 (executing program)
2025/08/30 06:35:04 fetching corpus: 7400, signal 180047/214995 (executing program)
2025/08/30 06:35:04 fetching corpus: 7450, signal 180502/214997 (executing program)
2025/08/30 06:35:04 fetching corpus: 7500, signal 180800/215011 (executing program)
2025/08/30 06:35:04 fetching corpus: 7550, signal 181099/215017 (executing program)
2025/08/30 06:35:04 fetching corpus: 7600, signal 181354/215018 (executing program)
2025/08/30 06:35:04 fetching corpus: 7650, signal 181684/215020 (executing program)
2025/08/30 06:35:04 fetching corpus: 7700, signal 181995/215025 (executing program)
2025/08/30 06:35:04 fetching corpus: 7750, signal 182271/215084 (executing program)
2025/08/30 06:35:04 fetching corpus: 7800, signal 182541/215085 (executing program)
2025/08/30 06:35:04 fetching corpus: 7850, signal 182927/215086 (executing program)
2025/08/30 06:35:04 fetching corpus: 7900, signal 183123/215090 (executing program)
2025/08/30 06:35:04 fetching corpus: 7950, signal 183399/215090 (executing program)
2025/08/30 06:35:05 fetching corpus: 8000, signal 183841/215091 (executing program)
2025/08/30 06:35:05 fetching corpus: 8050, signal 184083/215093 (executing program)
2025/08/30 06:35:05 fetching corpus: 8100, signal 184628/215097 (executing program)
2025/08/30 06:35:05 fetching corpus: 8150, signal 184843/215105 (executing program)
2025/08/30 06:35:05 fetching corpus: 8200, signal 185180/215122 (executing program)
2025/08/30 06:35:05 fetching corpus: 8250, signal 185400/215125 (executing program)
2025/08/30 06:35:05 fetching corpus: 8300, signal 185620/215125 (executing program)
2025/08/30 06:35:05 fetching corpus: 8350, signal 185902/215134 (executing program)
2025/08/30 06:35:05 fetching corpus: 8400, signal 186141/215135 (executing program)
2025/08/30 06:35:05 fetching corpus: 8450, signal 186380/215141 (executing program)
2025/08/30 06:35:05 fetching corpus: 8500, signal 186611/215143 (executing program)
2025/08/30 06:35:05 fetching corpus: 8550, signal 187149/215148 (executing program)
2025/08/30 06:35:06 fetching corpus: 8600, signal 187358/215148 (executing program)
2025/08/30 06:35:06 fetching corpus: 8650, signal 187663/215148 (executing program)
2025/08/30 06:35:06 fetching corpus: 8700, signal 187862/215148 (executing program)
2025/08/30 06:35:06 fetching corpus: 8750, signal 188040/215159 (executing program)
2025/08/30 06:35:06 fetching corpus: 8800, signal 188306/215192 (executing program)
2025/08/30 06:35:06 fetching corpus: 8850, signal 188466/215192 (executing program)
2025/08/30 06:35:06 fetching corpus: 8900, signal 188758/215198 (executing program)
2025/08/30 06:35:06 fetching corpus: 8950, signal 189006/215201 (executing program)
2025/08/30 06:35:06 fetching corpus: 9000, signal 189219/215206 (executing program)
2025/08/30 06:35:06 fetching corpus: 9050, signal 189529/215208 (executing program)
2025/08/30 06:35:06 fetching corpus: 9100, signal 189845/215224 (executing program)
2025/08/30 06:35:06 fetching corpus: 9150, signal 190067/215225 (executing program)
2025/08/30 06:35:06 fetching corpus: 9200, signal 190312/215253 (executing program)
2025/08/30 06:35:07 fetching corpus: 9250, signal 190654/215325 (executing program)
2025/08/30 06:35:07 fetching corpus: 9300, signal 190836/215328 (executing program)
2025/08/30 06:35:07 fetching corpus: 9350, signal 191067/215346 (executing program)
2025/08/30 06:35:07 fetching corpus: 9400, signal 191792/215347 (executing program)
2025/08/30 06:35:07 fetching corpus: 9450, signal 192060/215350 (executing program)
2025/08/30 06:35:07 fetching corpus: 9500, signal 192264/215358 (executing program)
2025/08/30 06:35:07 fetching corpus: 9550, signal 192487/215370 (executing program)
2025/08/30 06:35:07 fetching corpus: 9600, signal 192750/215372 (executing program)
2025/08/30 06:35:07 fetching corpus: 9650, signal 192962/215448 (executing program)
2025/08/30 06:35:07 fetching corpus: 9700, signal 193283/215503 (executing program)
2025/08/30 06:35:07 fetching corpus: 9750, signal 193512/215507 (executing program)
2025/08/30 06:35:07 fetching corpus: 9800, signal 193719/215509 (executing program)
2025/08/30 06:35:08 fetching corpus: 9850, signal 193954/215509 (executing program)
2025/08/30 06:35:08 fetching corpus: 9900, signal 194124/215511 (executing program)
2025/08/30 06:35:08 fetching corpus: 9950, signal 194418/215512 (executing program)
2025/08/30 06:35:08 fetching corpus: 10000, signal 194661/215535 (executing program)
2025/08/30 06:35:08 fetching corpus: 10050, signal 194946/215541 (executing program)
2025/08/30 06:35:08 fetching corpus: 10100, signal 195169/215551 (executing program)
2025/08/30 06:35:08 fetching corpus: 10150, signal 195376/215556 (executing program)
2025/08/30 06:35:08 fetching corpus: 10200, signal 195540/215562 (executing program)
2025/08/30 06:35:08 fetching corpus: 10250, signal 195771/215562 (executing program)
2025/08/30 06:35:08 fetching corpus: 10300, signal 195954/215562 (executing program)
2025/08/30 06:35:08 fetching corpus: 10350, signal 196133/215574 (executing program)
2025/08/30 06:35:08 fetching corpus: 10400, signal 196274/215578 (executing program)
2025/08/30 06:35:08 fetching corpus: 10450, signal 196438/215587 (executing program)
2025/08/30 06:35:09 fetching corpus: 10500, signal 196657/215625 (executing program)
2025/08/30 06:35:09 fetching corpus: 10550, signal 196896/215626 (executing program)
2025/08/30 06:35:09 fetching corpus: 10600, signal 197102/215631 (executing program)
2025/08/30 06:35:09 fetching corpus: 10650, signal 197334/215646 (executing program)
2025/08/30 06:35:09 fetching corpus: 10700, signal 197613/215648 (executing program)
2025/08/30 06:35:09 fetching corpus: 10750, signal 197836/215651 (executing program)
2025/08/30 06:35:09 fetching corpus: 10800, signal 198045/215660 (executing program)
2025/08/30 06:35:09 fetching corpus: 10850, signal 198343/215661 (executing program)
2025/08/30 06:35:09 fetching corpus: 10900, signal 198539/215662 (executing program)
2025/08/30 06:35:09 fetching corpus: 10950, signal 198770/215664 (executing program)
2025/08/30 06:35:09 fetching corpus: 11000, signal 199023/215668 (executing program)
2025/08/30 06:35:09 fetching corpus: 11050, signal 199188/215674 (executing program)
2025/08/30 06:35:10 fetching corpus: 11100, signal 199356/215696 (executing program)
2025/08/30 06:35:10 fetching corpus: 11150, signal 199703/215701 (executing program)
2025/08/30 06:35:10 fetching corpus: 11200, signal 199890/215713 (executing program)
2025/08/30 06:35:10 fetching corpus: 11250, signal 200110/215716 (executing program)
2025/08/30 06:35:10 fetching corpus: 11300, signal 200418/215723 (executing program)
2025/08/30 06:35:10 fetching corpus: 11350, signal 200579/215725 (executing program)
2025/08/30 06:35:10 fetching corpus: 11400, signal 200734/215734 (executing program)
2025/08/30 06:35:10 fetching corpus: 11450, signal 200943/215748 (executing program)
2025/08/30 06:35:10 fetching corpus: 11500, signal 201116/215754 (executing program)
2025/08/30 06:35:10 fetching corpus: 11550, signal 201262/215754 (executing program)
2025/08/30 06:35:10 fetching corpus: 11600, signal 201451/215762 (executing program)
2025/08/30 06:35:10 fetching corpus: 11650, signal 201670/215762 (executing program)
2025/08/30 06:35:10 fetching corpus: 11700, signal 201901/215762 (executing program)
2025/08/30 06:35:11 fetching corpus: 11750, signal 202071/215766 (executing program)
2025/08/30 06:35:11 fetching corpus: 11800, signal 202352/215769 (executing program)
2025/08/30 06:35:11 fetching corpus: 11850, signal 202551/215770 (executing program)
2025/08/30 06:35:11 fetching corpus: 11900, signal 202784/215782 (executing program)
2025/08/30 06:35:11 fetching corpus: 11950, signal 203011/215788 (executing program)
2025/08/30 06:35:11 fetching corpus: 12000, signal 203232/215837 (executing program)
2025/08/30 06:35:11 fetching corpus: 12049, signal 203375/215852 (executing program)
2025/08/30 06:35:11 fetching corpus: 12049, signal 203375/215852 (executing program)
2025/08/30 06:35:13 starting 8 fuzzer processes
06:35:13 executing program 0:
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000))
r0 = timerfd_create(0x7, 0x80000)
ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000080))
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000000c0)={<r1=>r0, 0x4, 0x4, 0xcd6})
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r2=>r0, {0x6}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r3=>r2}, './file0\x00'})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000180)={0x0, 0x2, r0, 0x9, 0x80000})
r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$AUTOFS_IOC_FAIL(r4, 0x9361, 0xfffffffffffffffe)
sendmsg$NL80211_CMD_SET_WDS_PEER(r4, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000040}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_MAC={0xa, 0x6, @random="1dc3689f4bad"}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x40040)
ioctl$FAT_IOCTL_GET_ATTRIBUTES(r1, 0x80047210, &(0x7f0000000300))
syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r2)
r5 = openat$cgroup_ro(r3, &(0x7f0000000380)='memory.events\x00', 0x0, 0x0)
name_to_handle_at(r5, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)=@fuse_with_parent={0x18, 0x82, {{0x7, 0xff, 0x9}, {0x7ff, 0x8000000, 0x9}}}, &(0x7f0000000440), 0x0)
ioctl$FS_IOC_GETVERSION(r5, 0x80087601, &(0x7f0000000480))
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r7 = openat$cgroup_int(r1, &(0x7f00000004c0)='memory.max\x00', 0x2, 0x0)
ppoll(&(0x7f0000000500)=[{r3, 0x18}, {r5, 0x4001}, {r6, 0x1198}, {r5, 0x440}, {r7, 0x2000}], 0x5, &(0x7f0000000540), &(0x7f0000000580), 0x8)
r8 = syz_open_pts(r3, 0x40000)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r8, 0xc0096616, &(0x7f00000005c0)={0x3, [0x0, 0x0, 0x0]})

06:35:13 executing program 1:
sendmsg$NL80211_CMD_PROBE_CLIENT(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, 0x0, 0x400, 0x3, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x200, 0x41}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x68}, 0x1, 0x0, 0x0, 0x40010}, 0x41)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x54, 0x0, 0x8, 0x5, 0x0, 0x0, {0x7}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xa01}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x2b3}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x80}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x7}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x1)
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={<r0=>0xffffffffffffffff, 0x9, 0x4, 0x6})
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000340)={0x1d8, r1, 0x100, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x400}, @NL80211_ATTR_FRAME_MATCH={0x19, 0x5b, "55e0a4bcfd2239c0f225007c6c61595f177c2586bf"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x7fff}, @NL80211_ATTR_FRAME_MATCH={0x85, 0x5b, "e2edb217d49fd9539697e1f97df418f085bbafaa90343a4367d5ffd76409e36af1aee28a5eff9e3a68d7935ce06499975835d6315a07481d7620cbf0edcdcede24578d40ec82f500f893d293ba6447291152943ccaeb63c911ac2c964c5594a304749663681ab0fba057a7b949d1c85835809fbbea50311cc417e14e1dbfe86ffe"}, @NL80211_ATTR_FRAME_MATCH={0xff, 0x5b, "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"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x9}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x6}]}, 0x1d8}}, 0x8010)
syz_genetlink_get_family_id$ethtool(&(0x7f00000005c0), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x64, r1, 0x200, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}]}], @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x40)
sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x48, r1, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x1d, 0x5b, "d5379ec4b5e36daa332622e1a8a68b05aac2788808de5c0ed6"}, @NL80211_ATTR_FRAME_MATCH={0x13, 0x5b, "b9cb1d96f4aaf7106faccbb1138ce3"}]}, 0x48}, 0x1, 0x0, 0x0, 0x48010}, 0xc000000)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000900), r0)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x24, r3, 0x8, 0x70bd28, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x2}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20008080}, 0x8451)
sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x1c, 0x0, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x40000)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b40), r0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x2c, r4, 0x4, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xcc0, 0x2}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040000}, 0x8000)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c80), r0)
sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x30, r5, 0x400, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x7e}, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7, 0x7f}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x44040}, 0x5)
pwritev2(r0, &(0x7f0000000f80)=[{&(0x7f0000000d80)="5fcefe61cc9d3d0830f392eee34255aee0858f1d3e2a7e499a5dfdecf86d832b0e593a92bb744b3ac4f65e653f855514d107b3", 0x33}, {&(0x7f0000000dc0)="44a112fc42388560787630dc55f44cf102448d39ffb70f6535c009a51c33c75381e3de6ee5600e4f7542a37c614ec3bedd7bb3b06c66143a8295534c0a73", 0x3e}, {&(0x7f0000000e00)="7aa357558957a6d046a6253b0ccc2ea589de1eeee466aedffea19f8ddfcc9c02f88bfcc0b7bcbc4901a45f06ab4e91ecb482d3892da40effff0ac4f416a86ebd487f888bb4dc6b4d5476f190190675f4e3477b4baa45eae9d0619db8d565ba6fa874283ff09ff6c0a59fdb2257a77cc70c054add9217711d2865a3a7cfba875b52e00934ba30ed2cfeff1d3a956fb8a66ff913504c47a326821e8ad0cf4ca815059219b81325e76d3cc72fd9b33853ed", 0xb0}, {&(0x7f0000000ec0)="a2b03a24fc6d390a728c64b9253fff11f248c001f3ddfd31fca9375fcee37956b490eaaedff6959c32fccfc5bfd0efe7aad22b34ca3e5515fe1ed9cfb55974bc07e9f9c6d4c1e2b290d1b22a473091248262ebb07e45ebc2132a5abfc553449685971494ebc8fca3e1f6b4466581ddc889008aaab141bf3e162f75b90ca28560d5b4893db59bf04dd384caef7910261d6f2d8c845200ce327d1c7f54f8de200cc65c4d844dbdac15128b986e726a2ba0dc4fc7cc04", 0xb5}], 0x4, 0x4, 0x8, 0x1)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000001000), r0)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f00000010c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x24, r6, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x4}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x41050}, 0x850)
sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f0000001280)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001240)={&(0x7f0000001180)={0xb0, 0x0, 0x8, 0x70bd28, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1000}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4000001}, 0x800)

06:35:13 executing program 2:
lsetxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000080)={0x0, 0xfb, 0xf2, 0x4, 0xe3, "70a09b4e458e466a4d356630866f23d5", "e803ab9f224f1f776be68a12046a1a53456355ce917376f38f8a9bf6574afc5901f50ceb0328740ca3c8600089402bc1b5e7a0d7b23967eda7405727d3cc6afdbf8c3a02b0d07ee84958d10fc3506184f597f206e7b04fd1faf0ea17f4d40d1170f69fdd72a942ef3358d5aa2e9d01e13dcb3e92d92ddf3a9f264bdc64f156178e8531a75609d892951168cb152a6479680d1827285041634fd9811f640d6cc93f2917fec524798e57e70f082f99331a5222742e2986084858770fbde6502d84827e4fb21b9ccac6a506c03c20c9df9ec1f8266051e1b032109afa8b6e"}, 0xf2, 0x1)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$sock(r0, &(0x7f00000026c0)={&(0x7f0000000180)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x3, 0x4, 0x2, {0xa, 0x4e24, 0x7f, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}}}, 0x80, &(0x7f00000025c0)=[{&(0x7f0000000200)="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", 0x1000}, {&(0x7f0000001200)="1db1d2d4c2c9c4a5c00369a730a945eacdd81acc82426e0130d32b7d89b1750d263f35fe67e3a2173049fe64b4abe68962aa1f7d912dbc9c85fde86281041c51731fc2063e186e2a8d68d1156896c4297afef63f128c3e85f55ae8ddbdec16bc", 0x60}, {&(0x7f0000001280)="279e08076803eb6b39bdc2f00b6df3a290a31389c6fb479e869ed78cf38725617e3f29c9ef5690451e526d87e979f2b454cc6ddb5eedc4316be74b664ed7cd4af7d405d9a81c658688bfb6100ed4224027b56af37432dd4ab3dc0f543def5ab798b4e65178352acee9efe9653a5ad810ede74bf7d8e060f1beb17884f31ba875a3e5a9fd876229da497684bc14c79d9a9f22f3c75734cdc48567d53d143ef5500246aacef7ca54f64414933694d626174f6c53b2476416f9230785bdd847", 0xbe}, {&(0x7f0000001340)="6f84149212f08f49778722cebf1ba690627eab75afe257d8a5988f3fe0b56c4c00896724364d34ae009a75670eeaab7feefd315afc207354178c078ad0c72b0081c5cee195a470dd8b854bf989f1bcaf787ad12147f4bcacdd9f8681e68326ad5fb0c2f88a8a924e13ecfe3b73ce5761b753e250f08d61288ce321608e2bf213392b32874c5686480cf1773b01a45677b1e38d87b218246b5efa457c4ad4c745fff577db37bc257b292ca3dcbca46e08783f8731da46392b1bc8eeb45b35454ac085b106f38de89d6ac46d338c6f6a7bd171c658b757f6f836c124cc52f99d82cd6953e56347c34a", 0xe8}, {&(0x7f0000001440)="de9ceaed8324146dd6aee11187761b1b877531cb0b3ff98a1cce29332c5b95565bdef7b010bab47593450dbe85880b9fd5e4d390a051e4d2d21a1b7b303def81e12fa418f1c598a8fe636dcc00d058fa9319e0be6d49b2a2f15e", 0x5a}, {&(0x7f00000014c0)="fe5c76d562eb94ad43f0c6feb5c021f98f01927239bfef23921a91016b46597157c328e82b0600b8db1c4d47f672ec13532f3e715a35d5957a267d6fb9c1a2cabe500c9c5e846a04a078b127e23434443422ae262dc0cbf480b84c90731d52e22e4f06b26fec646b5988bb7222d642c352b51f2b021d23ad31422fddc120648b99a3b267a70f8a12b89be39fca24f8d0e9d0134401d7673e80aa19e3be3ddfb5ae46d0f9", 0xa4}, {&(0x7f0000001580)="53edc0de85c3adfa9f597a1849385383a16a768ca3007dcb0171db567560851eb2", 0x21}, {&(0x7f00000015c0)="6b7cc0e7e4a4df887204549a95b9b83bd7bc20563409452067727f72b293183b06a0dea0e2057a03bfd67fa65f9b948f725359b1e09406ecd1b9312f2ac0fbfa07085789ce29bb35bec0dfd303325783d8ef450a9880b2d0518ddf4f52a13e8f40e4c21efe0ae703099e98530141424083952b21edaec9974c5b06b5c392ab817a902d15ba56c5dbdd638985ecc96e5946cb5212c0c9801c3718e970436e51da938530ca2f82b4d0ec35969ac41b1c8146fcb52456af50f093fa597fdb0113931f6b2348f06ebb0441939922c43deb2330f6516c04c2610c15e9574e18220e32ccfce3a93eb0f4c21acdb7d82049659b1542e82924cbfd57d4eda75bfce0f2a767e939a9e7ca5f90b1aba5d0df37083dc5f8655e52a9121314e26fd06c078010f32fb2188cf62e1272611001401ce7fe9f4e6329c7bc6058a0aac303cb73096a3e5465e128fcaf8e6202843c6f244b18c9313b84e463801713b670ef8db7a8ebc8e5adca92a42087b4251d7fa0377310aa5c5ff25ced8bc833adb78a1999e940a3f1612bf146a85cb02d1a73ff76359cdfe058d11317cd9b3dc8f737c9dd8f6c0f07ed4ba1c15bf255f6070d035dff5245d9dea121f3aa9dfcf3364f75e1696378b9e9c87885eec24bc9cfeff9017e834ce00ded07417b5763c6fe9ec23cef1205652a95a127708839d5b44cced16f9ea5ea4ec5d78db6a73207322232a905d8beec85ac7cd9eb2959f211558d3e0fd069884dc5438b7cc738c035b7897b1ba708e9f1354822bc5715eb49ae51162164cf300e68c7d3c62801058264ef00fb6dc24d48028341d5aa91f32d656e4200ac6bbc1f6652035225eee7213793a7f6b79589192028c4ecf21c685006a946f380a7e93be1d4d8c488fa3398d013b8737ab088fd41f8d7f14b9eb3541626ad285c94fda342c0f7337a16e15d4534fa703da4376926fbcf4c8b5b1d9bfa6a2160685b541286cc5492ad7f34465aaf41ed403708f8dcab08f6b33b95463890b721edf8a3dad677411c3b1e517e9381a482f9137af5c844cd1d59baec4ceb67319636de5777eb5e2143a8a02346f8ba1fab0324d5b47e478c5ea3ddc9a1f73e4e2a4bd57310db5ccdca7e23b371ec56a1d12f3b8cd13e34fe8fbd5ad2e3f9f5749e4b9d5a56f6f7a92ed1406c3a62d15f48ed60b2da4d18bb95e1f5b8dea3ad549b11afaa766dce8099a998394f2a4560e96896a4650730b19404d094b8016e9be5bbb0fae76bc93bd801d48b38bc0d2a57e6af5a01c8d803ea37ea0b35d8ecfab712c813b1c4fe592f91f562b6208a2f1867b0f9decb3f6f86957d9b1ecc698012396ee0bb4e8a7be66042cb0d29b1120c294e091fa52aeddb46d29cb4e6912351979c96fb55ca37d12a61f2205fd179f8c5de5acfcb1c1f9ecd6839c57d09b74161d96b4b09df11685b21b22315c8f79da53dcca219acba13989ea8314955ba72f1dd0277d671f2295a96141816d8a7b2a304be3c89614a8f1547f3a26aedd5241e0f497ad880b055f2845870a635e586a3b1c8eff71e673168a7f4b9083340feeed8af77b1dace62c8e827db104cb22d5afd3557f246baaaf29ca98edc68553053f0e46aa892ad79ccc5054c417c8a43eea5a12f2f8e8592eded1d3989d32e8e2617bec2c89b9e2bec3d6d7024d8e768795f11163405d403c18523c725628adc8323d06030cf9295757c9ed2b1746037a8c28701e412776d02c892d2b66fa593b41289ebf47def75d67a6a6dc89f049d021f99d8f32cbb8370ddb608460dfad58dc2819d8fc34f9ab4afc57efa7879f4e699439246d82b9dc378bcac8e36295ff9fa4f526f6d3f6793cde502e18a42fba9f9d6df23df68a664f0dd4ca9cef995aa47df94b3ca7e85ae67c686240f70ce38980511bfa69d0910dfd043d7d7cb1b65fb28b34e186110d28cedec7427df4422c38c2dbf3d39713f92891e195f77fe02cd0d11b3bf1138cea50d95e47d3a846ce0c1239ea6216bd39ea9ff42b51ad6e048fb9826d9bc57d25a27800be91c1cefd8f10bda84317f20a51c101d7974f81724d67ee4b59f7e9bfad54d0d864cf2732889d790e263966509359f414d591ce7a2aaf3ca1feb78418e014fdfe1c68b420e1452c3f768275fe2b04259c357176615d15dd74d5b4d79d394d6927625628687a14cdcff49e4174fcd92e87a8bb363c654921dc2be8bdf8f85e65ea04252ad021af57c5c4985393082cb9404dbda9840f42ba95ab0920757103d1e22c7bf730516aab0d3684ceee72c448fdb50d1a7a3e40ef0d00ef82ac203e50ccf757158319e4260082cfaaf7abd36422f9ad021253a639fb166940853aba0f7c1111a03c00a9673fd4f2680c2487883baa25894b55a99a34ffc14ef2c0f4f34273cbe87a937f3b68e0b25fec7132fb44be70af49f50a2e6a9e7fa6848802d5cd0a6cef64d7bc9c59f60921a4589b2b663b79fe35792326a3e5c305c6b55761bcb9047c189d1da8150b1d8655fc88a230e70eca200d1dded61235465cc52d41a412bd076772c0663ab501dd39d9bb9391d53a98557e7d21b6e94be61b6227f0648b23376ebc739a5942fc15472613c550333f76537ed0e726cd12000a39d4a6b98a2ddf93218e85765de216fbd5f574b18f85482f5a2a66d006d1dfbb36626bc09d0366aeb362be61c6ed271e76f911b352e6f6ba8830daf9f6fbfc8947c9ec0852a43c9f7045d430758cb84e5a0546ff056bc61e255bd61f183fe8d47486c87f388daf19ac71a4041580cf3bf6fe7270042a1b9af5c860c179eddb2ecb48757938f09ce81cc10e01f1a278cf167998cd3cfa99c045e2f89d6d82e3827da6e30f1e7237fa47a31d98ba92fcf056a982b36a1718fbd21f8b33ea784338ce0d373402a5fc5930cac611fe144f981dd704e8f3a43f54df611bc0329ec18a8eaa8408510c6d10e2f78b47f05f9c8965563cc5f6499d520de9258900c715055c2411e1c8f7605798ab006da933102b0e6f70dc2af08f3cb90ef35b3b357f40394f2cd717a7fdb23427fa5b7e4846dc9454ea048bd33fdbf7d53eda5a74d62f7cdcd315e88dc71859e0069f925a8ef4a5f11a39c5fc383be22aeb8f39a5f229522be7636b0c9c2788c0690ca3e71e5b98bd847d8c5307ed5a8b8ea4e3a83cef6a47bb69c719bd357f2bd8e38124d577022f6b6f164b12f09e46bc246b3227a37925e5a9dedd269a69bd22cd9fd58f080a05e28d24a7cd9da3e1e81d59f985bde549fbf67f4281ac7b1d787be64a64b46bc941f5b4a1ffe1636f2554819498c79ae3940f55d30907116bbb01c954331a15aa10bf724f31e644099b610af61651e0c712e5ca62622a7fa5fe30a6872d118dfe54f8e093177d7567712292ff8fe548500383892268020d1f49a85d086f48fbdcd10211a00d7c2f55eee3a75453a8f484b96527b331fc5f822e71c67fbc0c43423d16555ed145f94106c3b19254c8c94caa9457a59f69ca67a149614091d82ec6ed76f8a32be641efa06fee839254be048e2180e301bb4008fd45921ac6a3e87bfb1e50bdd445765a25dfdf8dae2d40fe37be1352da8346628731a1238081b8b014fb05a4fb4be63fcc4b0d78aa039ec2851b1ac3b16a0f47e60d9e29357cbc67b9f0109add8774dbdef269b169200ce1327ae6519a0cb2616126f6fa53bf4133a0d0f9ef935efa0a091884bcd6b0c108a92f31ba398989619255f407e67d0b638a8d0cd36e4449fae9e8b8f9cffb1eb53257aeecfc48383b896f46e2879dbc4d38f737b887476318ef7c472e92fdf37fd5220e7ec0f073baaddf4333edc90f215aafbec5154fd5851b2f48eb7518205523f60db5b679e109aebff6d1cd53283a28d594e6e24868bdb2dc8ee090db274badf52ef665500e4c4b1eb8255036a9a80919f4c0cef9907ed357ca784a3380bb91e39c27d62e257ce9b82a6e82441e5b27fdba5b9ebcbe21f1b0d7a34cd2bd90237ff7a1cc741c5f4c70222bd442c12340016e12b11bf59dfcd9a5db089fb477c18109ddd05cb34dbf60273f386b5f685058b6094228537e95dc592eaddcd526ed8fbe2089fd0c1cd798fe13c4d0c6a395ddd70f47ed7b717efc5f89c5dbb6f75a09cf9e8fd951c266c0231dae2bb450bae7099ede5fa76d801b03efaa2271505c9eda40cf98b32e2aa8d07a48a8a8043f4761406514fa1f1bb8d56995ce802217251220ff94f5d3b5c1b665fcf306755e049925332bd1623c41bf86b715a33bcdb1f80ce8ef67b2661fd4fe298ca7f85dbf952c6294b5ed2fe2730bde44bb531d30cd36bd1e8bbef0a9c786748d75cdd1f7326d6ddf6f3c40ab5a8f275b90c8ff8fa349b559245f7b6301798b7ba99b071c2323981e53bcbf2af3c47092574f54c0f46fddf114f2d38ef46c7ee11bbf86224ede1346a6d92d9eedc56c8959872673bb909c889adaa036ffd9a0568cfa21f334a96c703cc857d501981753934bcea0a188795725517f1d1584f6723370e76a94ad25f4a530b4d0818c4dbb1ce6dba138939b80c118848705579efb662221567e6d9fb992bc46af55a73b09b1513370f1aad9ee869c651fb0cbd691220abf14087075398fdfbc6ebb76510bb848dcfcf1857d6b676ad1832437147362ec23057a8f545c08473ead3e67ec1d0c7d1a6c3e661ce64f53cc732650c4ed761602dc05e2868293a6ee49953c9ea4e2a9c3efbcf8d75ee91dec377d17e25f95c99e946685822e16d72c0a439244a2b7478026129883a65a9edb675053fb1a3a60595981b3696e7ff84a9df73ea00facbda3124a150c38b3908147fd60197ad47184d0cf4a5d4aba8c9b87ea4cbc5df6b07a1994f11d88cf794879f0d5ead886e35d2cb352a46ee5123b14e82e24bafa0501f1386509d9426490dc0fb9e7ad137d4f81aa8abbfeff56e4edb5b324741243b1ef77086a9bd66a4534c32a87f1bd472f0a704988455ff598c49986979d887c047ea28859d6fbf6afef8c69a2156c633fd68bcfd514c8f775d562de6995c3bf8b0d563a18078a22f00f27771094213bc48bbc937b16f56b0c91dcbc2f551f8d3b14fcf5777c66496894bf823fa52a30be5d04e024b8b1155f9bbe242d958b537b96a15f74f9d08ce700f87d2efc9b15071552752d39938a715e732ea8a67d479126803ed1e51d70a202146bbc25dd8ea4e58fb7f47b65043bebd724cbaa43d401281a84a371aa25ffacf165b855e8fdccad4d3d0f61357ea43c4e71783227dba4419c8153b961c8912f81671f407a702740df5bbba0a27ff38ea16c33412449e0fb22370346c9af9de4c76619b17e3436e688e37897642e4f56dcea7e2b3d7be7d092e9a0bda6cf12ae499008db1e7fe6a92bc88d0f07b0c7217bda14bf0c3804787a2740a63d4d7e8b3d01c9cfc7f516096ae5f3aab3d0c255a65280d1e564acc6368681f1b35a8acd5da35d416fce913395723f075c22b8141b109de7edf72dafd2724b8c23829873d2d2978071ae68e615f5bb7d410f2a2578e49a2b79b571357b7f5b7c9d5ffda7bf481c1ecc8013971916c1758bfbba373eb310aecf916e51de6706dd89513ba8f3b9745163e27867bdacb2ca58d620334f36087f9d7923ef35c0d36a0010e5f490398ba29281252604f5efc3b1ac56986e3176cbfe1d926165eb947f3133b7f0febae717c2b92ab0458f71bdd36527782173c40061e85ddbd7966c3810bca8403cc7c2f50e8aa8ab23374895cfe1e3fadc7e4af2d010712f1e2591df63989cd6eb5377282c4bc9bef326164ffd122b343e6175ec1379d49d01d581c", 0x1000}], 0x8, &(0x7f0000002640)=[@mark={{0x14, 0x1, 0x24, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @mark={{0x14, 0x1, 0x24, 0x3f}}, @timestamping={{0x14, 0x1, 0x25, 0x1f}}], 0x60}, 0xb66f563be4a79bf4)
lsetxattr$security_capability(&(0x7f0000002700)='./file0\x00', &(0x7f0000002740), &(0x7f0000002780)=@v2={0x2000000, [{0x5, 0x8}, {0x3, 0x7}]}, 0x14, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000002840), 0x8e, 0x80)
fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, &(0x7f00000027c0)='trusted.overlay.upper\x00', &(0x7f0000002800)='./file0\x00', r1)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000002980)={&(0x7f0000002880)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002940)={&(0x7f00000028c0)={0x68, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x7, @media='udp\x00'}}}, ["", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x40000)
write$P9_RREADDIR(r1, &(0x7f00000029c0)={0x2a, 0x29, 0x2, {0x4, [{{0x10, 0x2}, 0x7, 0xe, 0x7, './file0'}]}}, 0x2a)
setxattr(&(0x7f0000002a00)='./file0\x00', &(0x7f0000002a40)=@known='user.syz\x00', &(0x7f0000002a80)='security.capability\x00', 0x14, 0x3)
setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000002ac0)={@remote, @loopback, @empty}, 0xc)
clock_gettime(0x0, &(0x7f0000002b40)={<r2=>0x0, <r3=>0x0})
futimesat(r1, &(0x7f0000002b00)='./file0\x00', &(0x7f0000002b80)={{r2, r3/1000+60000}, {0x77359400}})
r4 = syz_open_dev$vcsa(&(0x7f0000002bc0), 0xffffffffffffff9a, 0x8001)
r5 = signalfd(r1, &(0x7f0000002c40)={[0x1f]}, 0x8)
renameat2(r4, &(0x7f0000002c00)='./file0\x00', r5, &(0x7f0000002c80)='./file0\x00', 0x4)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000003140)={{{@in6=@loopback, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}, {{@in6=@dev}, 0x0, @in6=@loopback}}, &(0x7f0000003240)=0xe8)
syz_mount_image$msdos(&(0x7f0000002cc0), &(0x7f0000002d00)='./file0\x00', 0x81, 0x6, &(0x7f0000003080)=[{&(0x7f0000002d40), 0x0, 0x9}, {&(0x7f0000002d80)="7df5a7708bb7a675636220d2dd0e58d7f334a8b6ccfdc74a1c0ae1dc59f1f729fe7926165500d4a89ac5905ea09f5bfcf97c6d2292e913f47ac891ddac0cc264c7708ee9aed2e14c926e5b8f4c1892027e05abf2613488a0bc91d742b9ee1f7a349f21406515ed6596726221dcb6bec4117c29cb989204d47ac7bf5d8d13b2c4aa256b4f97fa6d8a7bcd31568c73c0f491778075805f93a4667549ccd8c6b67b45045170328665e5884ec8e264803eca29da290948caa32f34", 0xb9, 0x100000000}, {&(0x7f0000002e40)="4a504c6d70f4f906fd6c32b9eae1851e988bbf8d195baa86dfc1e897de7005ae69d2652f673082fba34f307fc36ddfdca1bf806d2e87b84629f211446704cef95ca76bb44be86dd712780e729dbf695cb5ccb76789061b163ffb69d888ca1f2dc9286bf1c44dff1cd59dce5cd1cb83018a0b301f975f5e0ea9a23b3008c00a731b8ac8cfd3e5af3942e2e67514f5e0b6ba958546b864f98a4d42c46c4a8d81ad947a8f3348789b0a8969de2b1887afa89d93cb6bf8179ee1ba4a8722e764325a921e5dcb20", 0xc5, 0x400}, {&(0x7f0000002f40)="97f06053ffd9a0e2cf25fc63782119308bc8487967db05e65322b35d202756c839823573fd112300b46b372293f2f1b9e69529b875631a41dc3fad8a7d88f4a09a4ad661a76b295c4b287c1174df564e257b900c6ff1786312cc5b4e8048ffac6ffe", 0x62, 0x1}, {&(0x7f0000002fc0)="87a2aa27382692cc6522a0e67f52c6a459547b127d4b2f30de980232af8050dec718e909d20082cd27ae8dad9f8f4b29420fa47875de65103e4e13783db28854047c37071f9a5ddcea2bf65574f64c425f4ef11d82de8d5bbf9a8f81a2e1d3b3530cf58c122e92ea8826454c2cbc1bc6195d", 0x72, 0x6}, {&(0x7f0000003040)="636178577e64827ce7e25bd6551701d6bef3939f1493dc2e3f5beae31fe0e0a07c250870c09accf5fb", 0x29, 0x100000000}], 0x2000000, &(0x7f0000003280)={[{@nodots}], [{@subj_role={'subj_role', 0x3d, 'trusted.overlay.upper\x00'}}, {@smackfshat={'smackfshat', 0x3d, 'trusted.overlay.upper\x00'}}, {@uid_lt={'uid<', r6}}]})
clock_gettime(0x0, &(0x7f0000005900)={<r7=>0x0, <r8=>0x0})
recvmmsg$unix(r1, &(0x7f0000005880)=[{{&(0x7f0000003300)=@abs, 0x6e, &(0x7f0000004540)=[{&(0x7f0000003380)=""/4096, 0x1000}, {&(0x7f0000004380)=""/127, 0x7f}, {&(0x7f0000004400)=""/53, 0x35}, {&(0x7f0000004440)=""/198, 0xc6}], 0x4, &(0x7f0000004580)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [<r9=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x100}}, {{&(0x7f0000004680)=@abs, 0x6e, &(0x7f0000005800)=[{&(0x7f0000004700)=""/229, 0xe5}, {&(0x7f0000004800)=""/4096, 0x1000}], 0x2, &(0x7f0000005840)=[@cred={{0x1c}}], 0x20}}], 0x2, 0x40, &(0x7f0000005940)={r7, r8+10000000})
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r9, &(0x7f0000005ac0)={&(0x7f0000005980)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000005a80)={&(0x7f0000005a00)={0x68, 0x0, 0x630, 0x70bd28, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x4000000)

06:35:13 executing program 3:
getsockname(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, <r0=>0xffffffffffffffff}}, &(0x7f0000000080)=0x80)
sendmsg$ETHTOOL_MSG_DEBUG_GET(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x120, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x20000001}, 0x40000)
r1 = dup3(r0, r0, 0x0)
sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f00000005c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000580)={&(0x7f0000000300)={0x264, 0x0, 0x0, 0x70bd26, 0x25dfdbfd, {}, [{{0x8}, {0x248, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x471}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x5, 0xe1, 0x8, 0x400}, {0x9, 0x5, 0x3f}, {0x1, 0x7, 0x35, 0x6}, {0x8, 0x0, 0x1f, 0x800}]}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffff4d}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x8, 0x1, 0xce, 0x64b}, {0x3, 0x0, 0x81, 0x8}, {0x7f, 0x3f, 0x81, 0x400}]}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x264}, 0x1, 0x0, 0x0, 0x4004}, 0x10)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/diskstats\x00', 0x0, 0x0)
r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000680), r1)
sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x68, r3, 0x0, 0x70bd25, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bridge_slave_1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'gretap0\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0xf2803b6040f680a4}, 0x4000004)
r4 = socket$inet6_icmp(0xa, 0x2, 0x3a)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r4, 0x8983, &(0x7f00000007c0)={0x6, 'ip6erspan0\x00', {0xfffffff7}, 0x1})
getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000800)={0x0, @multicast2, @multicast1}, &(0x7f0000000840)=0xc)
getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f0000000880), &(0x7f00000008c0)=0x8)
r5 = syz_mount_image$ext4(&(0x7f0000000900)='ext3\x00', &(0x7f0000000940)='./file0\x00', 0x3, 0x2, &(0x7f0000000a40)=[{&(0x7f0000000980)="38cf1d1704978db96546159d56381c003c3098d65568ed6253b486fcc0a8fb1fab7e8cac9d450c29ef2774115fb6fb36912ddd2b3c30d2395ce9549130b18fc8bd420101f6d77f161b4a2f13", 0x4c, 0x20}, {&(0x7f0000000a00)="ca0cb97ba55544dc048a", 0xa, 0xea2}], 0x881002, &(0x7f0000000a80)={[{@jqfmt_vfsold}, {@jqfmt_vfsold}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@nouid32}], [{@subj_role={'subj_role', 0x3d, ')m\xda!*,-:'}}, {@dont_measure}, {@obj_role={'obj_role', 0x3d, '.'}}, {@pcr={'pcr', 0x3d, 0x28}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@context={'context', 0x3d, 'user_u'}}]})
ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000b40)={<r6=>r5, 0x6, 0x3, 0x8})
ioctl$CDROMPLAYTRKIND(r6, 0x5304, &(0x7f0000000b80)={0x3f, 0x0, 0x6, 0x3})
openat$cgroup_devices(r6, &(0x7f0000000bc0)='devices.deny\x00', 0x2, 0x0)
r7 = syz_open_dev$vcsn(&(0x7f0000000c00), 0x2, 0x22080)
sendmsg$NFT_MSG_GETSET(r7, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x24, 0xa, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_POLICY={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004000}, 0x4048805)
r8 = dup2(r6, r1)
sendmsg$NL80211_CMD_REQ_SET_REG(r8, &(0x7f0000000f40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000d80)={0x168, 0x0, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_REG_RULES={0x78, 0x22, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x8001}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x8d}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x371}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x20}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x3}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x800}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x800}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xff}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x25}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x3}]}]}, @NL80211_ATTR_REG_RULES={0xcc, 0x22, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xff}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x80000000}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x9}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xf0000000}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xffff0000}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x266}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x3ff}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x9}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x9}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x4}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x4}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x9}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x4e5f}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x2}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x6}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x200}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x5}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x1000}]}, {0x4}]}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}]}, 0x168}, 0x1, 0x0, 0x0, 0x4040014}, 0x4000001)
connect(0xffffffffffffffff, &(0x7f0000000fc0)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x1}, 0x80)

06:35:14 executing program 4:
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000000)={'NETMAP\x00'}, &(0x7f0000000040)=0x1e)
r0 = socket(0x10, 0x2, 0x0)
getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f0000000140)={'filter\x00', 0x0, 0x3, 0x6c, [0x3ff, 0x8, 0x85, 0x100000000, 0x5, 0xaf6], 0x1, &(0x7f0000000080)=[{}], &(0x7f00000000c0)=""/108}, &(0x7f00000001c0)=0x78)
sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, 0x1, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}]}, 0x20}, 0x1, 0x0, 0x0, 0x8d4}, 0x14000100)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000300)={{0x1, 0x1, 0x18, <r1=>r0, {0x10000}}, './file0\x00'})
sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8001}, 0x800)
r2 = creat(&(0x7f0000000440)='./file0\x00', 0x30)
openat(r2, &(0x7f0000000480)='./file0\x00', 0x80, 0x81)
getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f00000004c0)={'icmp\x00'}, &(0x7f0000000500)=0x1e)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
fcntl$setpipe(r3, 0x407, 0x4a)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000540)={{{@in6=@remote, @in6=@private0}}, {{@in6=@ipv4={""/10, ""/2, @dev}}, 0x0, @in6}}, &(0x7f0000000640)=0xe8)
r5 = syz_open_dev$vcsu(&(0x7f0000000680), 0x0, 0xa0082)
getsockopt$ARPT_SO_GET_REVISION_TARGET(r5, 0x0, 0x63, &(0x7f00000006c0)={'ah\x00'}, &(0x7f0000000700)=0x1e)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r5, 0x8982, &(0x7f0000000740)={0x3, 'veth0\x00', {0x1}, 0x101})
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000780)={{0x1, 0x1, 0x18, <r6=>r5, {<r7=>r2}}, './file0\x00'})
sendmsg$NFT_MSG_GETCHAIN(r6, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000008c0)={&(0x7f0000000800)={0xc0, 0x4, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_CHAIN_COUNTERS={0x4c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8000}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xb8a}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x19}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x9c54}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x800}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x6}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7}]}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x5}]}, 0xc0}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000980), r5)
sendmsg$ETHTOOL_MSG_WOL_SET(r7, &(0x7f0000001100)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x552c18c6e9f41b4f}, 0xc, &(0x7f00000010c0)={&(0x7f0000000b40)={0x574, r8, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_WOL_SOPASS={0xa6, 0x3, "dd1fa1d47678093dcb7080acb602efb868e76f83e99d0a9eb255e6da631e980641e1598fa9371b941868e4f1d1cfb75fd212d00f2a3f314406890a6f1ba039af9e519a13e56be38cf89d9c0af4549b6aed4afc4289e6de8c4393f7368ef0e2f978a32e68352a830b3f384d55c937509e79c8db91df6ae487520a7b6071a0427fce43bf5ddb48f5fc3ea5a19b53601701185ec89d9bb08af78c66d62bc7bf3fa3b841"}, @ETHTOOL_A_WOL_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}]}, @ETHTOOL_A_WOL_SOPASS={0xf5, 0x3, "851a722932043a2f19713cc827ccfc9bc712cb86a90d8a81d49ed365d79d8bf9d2bb3619e50b9e5cad9a3a89edbd20888398ac440fbd56d8a3b661c1e2486172d5373be0a80c226b4b111adb9c5069974ecd12b0c50057edce5a8ee2ae145ed4e41d96544bcf29b52e52ddaad11a062fcc43924c3003ebd4c3aada8836dd823b8bf5bec1bfbefffde5ac37084ab32115ff4287a82339d60f2af9842a81a60f0b3271880834f590d4a51277bd7fcc3c0dbb5e0a2f4ba5ef4c9d548b43aefe29d90d9653ed19d9bb31a99dd5c088a8230535b969eb64fd7fd6b9e06cf9a494d049c262e56642eb23c7cfec37621c2994962b"}, @ETHTOOL_A_WOL_MODES={0x370, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x8f, 0x4, "40d964a2faea0bbc1317b4f7c4ded89d70887b862ba2537b7d28d517535092fba054ceac8455541f0ca60d5ca98548f0f6feac2879f4d080f7f41a050aedf875ded5578b9b7f49764042426dd06ee9c1b9eb79ce5d5901b99f43023b604d77236deda97cb488f728a500217b76da1aa934706342cd8990637c15c51b1787e3dd95349ee18b8fcdbf8c2441"}, @ETHTOOL_A_BITSET_BITS={0xc0, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '}!\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffe01}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'syz1\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x790}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'NETMAP\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'NETMAP\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'syz1\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'NETMAP\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_BITS={0xbc, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'filter\x00'}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'NETMAP\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '%.!+\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, ',}[%\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fffffff}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'filter\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'NETMAP\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '*\x00'}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'filter\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, ':)%\'\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x20}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xec}]}]}, @ETHTOOL_A_BITSET_VALUE={0x2f, 0x4, "d868462910c380e5edc3dfe6f898535f721c40c4a68b8d9fe17b453960be1b2626d4c27df644e20e715d86"}, @ETHTOOL_A_BITSET_BITS={0x6c, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'NETMAP\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'syz0\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}]}, @ETHTOOL_A_BITSET_MASK={0xbb, 0x5, "c7f4c0985bc3742d4e57ab15195460f3d0d4cb2da45a8f9ff943de6f17f6903110803212558bcbc9a8d0b919dea57a0c2e43932b85be51e30c5608c86f4ae8a221061811d99816cd338fb7c4ec751474db131384ef085601abc352d6f5d63cf14dc2ff276ac935a8bb22267f851c05cfd3c5cb802d1ddc851701795f025a82970108e39f64d553637b890c119b9de50202a6e87862bdf5035a2a4d1613bed8809db1678787b41238ab5b129edecdfd4aefe49b463432e6"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x2}]}, @ETHTOOL_A_WOL_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x574}, 0x1, 0x0, 0x0, 0x4000004}, 0x20000014)

06:35:14 executing program 5:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x826]}, 0x8)
sendmsg$AUDIT_USER(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x74, 0x3ed, 0x308, 0x70bd26, 0x25dfdbfe, "30e8035d86efb34bf95ca5f7482ca59ae23a9a5226f84acd93a0e951746f358e4169bde392d313195bcaf8b00b9b49b93311add5d744b22cdc6ab9a909d28bce0dba8bafdd361e1813eff4735d31140d59754e31434d8cd2ed6d27ad4eb0d6a636329ad3", [""]}, 0x74}, 0x1, 0x0, 0x0, 0x8010}, 0x4000)
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x60, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4884}, 0x40)
fcntl$getown(r0, 0x9)
r1 = openat2(r0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x1, 0x8, 0x14}, 0x18)
ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000000340))
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000003c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wpan3\x00', <r3=>0x0})
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, r2, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}]}, 0x30}, 0x1, 0x0, 0x0, 0x48c1}, 0x810)
creat(&(0x7f0000000500)='./file0\x00', 0x104)
sendmsg$NL802154_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x3c, 0x0, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004}, 0x0)
fcntl$getownex(r0, 0x10, &(0x7f0000000640)={0x0, <r4=>0x0})
fcntl$lock(r1, 0x25, &(0x7f0000000680)={0x2, 0x4, 0x1ff, 0xb08f, r4})
fsync(r0)
r5 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r5, 0x8983, &(0x7f00000006c0)={0x6, 'ip6gretap0\x00', {0x9}, 0x3f})
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000700)='/proc/asound/seq/clients\x00', 0x0, 0x0)
sendmsg$TIPC_CMD_SET_LINK_PRI(r6, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x68, 0x0, 0x10, 0x70bd2a, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0x6, @media='ib\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x4801)
fsetxattr$trusted_overlay_nlink(r6, &(0x7f0000000880), &(0x7f00000008c0)={'L-', 0x4}, 0x16, 0x2)
sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x1a}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x10}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0xd5)

06:35:14 executing program 6:
ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000000)={0x0, 0x6, 0x0, [0x2, 0x9c8, 0x5, 0x5, 0x7], [0x5, 0x7, 0x6, 0x1000, 0x8, 0x8, 0x9d, 0x8, 0xfffffffffffffff9, 0x4, 0x280000000, 0x80000000, 0x7ff, 0xd46, 0x7, 0xb1, 0x3ff, 0xffffffff00000001, 0x9, 0x8001, 0x4, 0x2, 0x3, 0x1, 0x2, 0x16, 0x100, 0xb493, 0x4, 0x6, 0x0, 0x400, 0x8, 0x4, 0x8, 0x5, 0x88, 0x9, 0x100000000, 0x0, 0x7ff, 0xff, 0x1, 0xfffffffffffffff7, 0x6, 0x7, 0xff, 0x0, 0x6, 0x4, 0x3, 0x7ff, 0x20, 0xfffffffffffffffd, 0x9, 0x5, 0x2, 0x2, 0x0, 0xea9, 0x6, 0x0, 0x39, 0x656c, 0x1ff, 0x215800, 0x7, 0xd5cf, 0x45, 0x3, 0x40, 0x401, 0x100000000, 0x6, 0x7, 0x80000001, 0x3, 0x4, 0x9, 0x94d9, 0x8, 0xf800000000000000, 0x2179, 0x5, 0x4, 0x6, 0xfffffffffffffffe, 0x10000, 0x7fff, 0x6, 0x3, 0x9, 0x400, 0x6, 0x18000000000000, 0x200, 0xfff, 0x3ba2, 0x5, 0x1, 0x10001, 0xe7f, 0x9, 0x1, 0x5, 0x3ff, 0x81, 0x1, 0x7, 0x5, 0x244, 0x0, 0x81, 0x0, 0x7ff, 0x13, 0x0, 0xff, 0x10000, 0x5]})
process_mrelease(0xffffffffffffffff, 0x0)
read$rfkill(0xffffffffffffffff, &(0x7f0000000440), 0x8)
read$rfkill(0xffffffffffffffff, &(0x7f0000000480), 0x8)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000004c0), 0x80402, 0x0)
sendmsg$unix(r0, &(0x7f0000000700)={&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000580)="e3542eb3ac2f5fe664efe1625b0e0fdf8608f9d8a1c8a1b2207dd5f5bda4272a7742c7a69b127fa0747b71e7d0d05e2a6ea40f90b1a5bf10210d21096a747f3259b5920725014ddba43edae6cad6f57427511a6e9a9953590e1dfe36a82898d2507644e58ce6e83716941f3f459cb38ccfb22eb50fbe1f8ad18f3de93df15f1ceb2844", 0x83}, {&(0x7f0000000640)="8dc35ebbd8250d90eef198d3aee95efc3dc8318caf77248e233bc77aef2874cc39c570ecfe344ad69f0ec13844b001d222c63ccc4d6bd35ab0b9c6acbc551ea837730df15dbccfba2557ce214edab1d3dc8f0ef1b7861436", 0x58}], 0x2, 0x0, 0x0, 0x80}, 0x4044000)
r1 = socket$nl_sock_diag(0x10, 0x3, 0x4)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000740), 0x402000, 0x0)
close_range(r1, r2, 0x2)
syncfs(r1)
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000008c0)={&(0x7f00000007c0)={0xd0, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1000, 0x4e}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0xf6}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HT_OPMODE={0x6, 0x16, 0x3}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x7b}, @NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL={0x6, 0x19, 0x8}, @NL80211_MESHCONF_GATE_ANNOUNCEMENTS={0x5}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x4}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0x5}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xcb}, @NL80211_MESHCONF_POWER_MODE={0x8, 0x1a, 0x3}]}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16d5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7fff}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xff}]]}, 0xd0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000940)={{0x1, 0x1, 0x18, <r3=>r1}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000980)={{0x1, 0x1, 0x18, <r4=>r1, {0x6, 0x4}}, '.\x00'})
close_range(r4, r4, 0x2)
vmsplice(r4, &(0x7f0000000d00)=[{&(0x7f00000009c0)="6d5be6e7233d100e9b9283c97f4a98988e0fa73f1812ed52fd9791f295f97f65a42059a9268dc4e226d2417650ed0bee9ae59d65", 0x34}, {&(0x7f0000000a00)="fc6ebb8b839a677438a0bb7a6b5c9b3087ccc137a826e8049772943297c7bd1893f96bd0505f911f0a3ab2242a8fbb759627809980f3f85a4e7e6c5eec8b37", 0x3f}, {&(0x7f0000000a40)="4f23e653044aeb04f96bb0ae03ecefd402d6e9983bebad1df85f0ca1c0a9c685093da2e614179fd9d17a438e6de288b8da33e9ce61a4681f25a6a7ae78af7ccf41acbd13229c448a401836904a1489571051f67bac2a74961fb87dc4627d992b36622a6684d675d4b35554cb5d8bfa6f7eb75ed8d39d9d", 0x77}, {&(0x7f0000000ac0)="663df1695bbfa4c049310b30358600d4424714c67a67e74f55f9348535daf370ef3d33f2e249fc2fdadb1282b6e9a439a44404915669f654ee5e4879e8747e5a99862a39b7e353779d44306517f93aff6a9fe3e5c43feda8cc9a6c78c10fa858af839194fb68e31f056bc8b96f17873602bd73209ea54b8c4e5dde656f04b9690ddfe130a2178caf796ad828cb6cb1e4f49880804a7d1f454c7fa5da2e6ffb2eb5c6c83514d32219a1f0f9055646e26fa6e04f2d2eae9d523aa1b1092d0f779283896f85a501aefb9d0632a11f67efc5b5f5", 0xd2}, {&(0x7f0000000bc0)="12f236f52fd91805c04956487496c0192278770133b1a694b067f9fe376373ba9e08ad8a43d114d14f08818af2a314930b920f4db5d41f689375af9f5964a202cf09aaf188b9c6b62866c2fd08f5bb03f0cf540ac8e7b76ec0d1b6f457e28778e898171cdd22424d977e08554087d800ca76939ccd097ebc57d71faa892239e671adb243d5f06a50f6325dfc8c07a92b79e353f9fc92a1e61df5907cec949f2f8eebac9f4f03", 0xa6}, {&(0x7f0000000c80)="bec64e14abc51d36363d2148dc4309905d63909ba4c457745902006775c6c2b10a16b540d87cef0609a2e0b3f4dd7ae9e9668a50f74f02d50bca3f89f49077eb78793764f8e2279a7eeeb2cbc1bb43df33a1223eff05ad259a2fef966181208cc5db50ed86047bf636d88af979c41cfe2cfa054c6186941cf8610f3d1e5fc3", 0x7f}], 0x6, 0x4)
r5 = dup3(r2, 0xffffffffffffffff, 0x0)
read$rfkill(r5, &(0x7f0000000d80), 0x8)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000dc0)={'vlan0\x00'})
splice(r3, &(0x7f0000000e00)=0x1f, r1, &(0x7f0000000e40)=0x3, 0x3, 0x3)
fcntl$getown(r3, 0x9)

06:35:14 executing program 7:
mkdirat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs\x00', 0x1ff)
mkdirat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2\x00', 0x1ff)
mkdirat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs\x00', 0x1ff)
mkdirat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs\x00', 0x1ff)
mkdirat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs\x00', 0x1ff)
mkdirat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs\x00', 0x1ff)
mkdirat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs2\x00', 0x1ff)
mkdirat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs\x00', 0x1ff)
mkdirat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs2\x00', 0x1ff)
mkdirat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs\x00', 0x1ff)
mkdirat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs\x00', 0x1ff)
mkdirat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs2\x00', 0x1ff)
mkdirat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs\x00', 0x1ff)
mkdirat$binderfs(0xffffffffffffff9c, &(0x7f0000000340)='./binderfs2\x00', 0x1ff)
mkdirat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs2\x00', 0x1ff)
mkdirat$binderfs(0xffffffffffffff9c, &(0x7f00000003c0)='./binderfs2\x00', 0x1ff)
mkdirat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs\x00', 0x1ff)
mkdirat$binderfs(0xffffffffffffff9c, &(0x7f0000000440)='./binderfs\x00', 0x1ff)
mkdirat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2\x00', 0x1ff)
mkdirat$binderfs(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs2\x00', 0x1ff)

[   85.336337] audit: type=1400 audit(1756535714.106:7): avc:  denied  { execmem } for  pid=272 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
[   86.544980] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   86.547454] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   86.550556] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   86.554246] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   86.557603] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   86.605771] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   86.609985] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   86.611351] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   86.615280] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   86.617442] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   86.622146] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   86.625232] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   86.626141] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   86.640158] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   86.642361] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   86.680283] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   86.697903] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   86.699572] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   86.702184] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[   86.703835] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[   86.705789] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   86.707020] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   86.708234] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[   86.708742] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[   86.711542] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   86.713155] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[   86.719592] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   86.722219] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   86.726999] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   86.733512] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   86.738826] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[   86.742652] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   86.743804] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[   86.747419] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[   86.752693] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   86.759893] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   86.768145] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[   86.769962] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   86.774178] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   86.775351] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[   88.636388] Bluetooth: hci0: command tx timeout
[   88.699724] Bluetooth: hci2: command tx timeout
[   88.700359] Bluetooth: hci1: command tx timeout
[   88.762973] Bluetooth: hci3: command tx timeout
[   88.827996] Bluetooth: hci6: command tx timeout
[   88.828557] Bluetooth: hci4: command tx timeout
[   88.828563] Bluetooth: hci5: command tx timeout
[   88.829505] Bluetooth: hci7: command tx timeout
[   90.685025] Bluetooth: hci0: command tx timeout
[   90.746963] Bluetooth: hci1: command tx timeout
[   90.748127] Bluetooth: hci2: command tx timeout
[   90.811898] Bluetooth: hci3: command tx timeout
[   90.874964] Bluetooth: hci4: command tx timeout
[   90.876046] Bluetooth: hci7: command tx timeout
[   90.877026] Bluetooth: hci5: command tx timeout
[   90.877741] Bluetooth: hci6: command tx timeout
[   92.730988] Bluetooth: hci0: command tx timeout
[   92.794986] Bluetooth: hci2: command tx timeout
[   92.795440] Bluetooth: hci1: command tx timeout
[   92.859893] Bluetooth: hci3: command tx timeout
[   92.922980] Bluetooth: hci7: command tx timeout
[   92.923716] Bluetooth: hci6: command tx timeout
[   92.924671] Bluetooth: hci4: command tx timeout
[   92.924814] Bluetooth: hci5: command tx timeout
[   94.778902] Bluetooth: hci0: command tx timeout
[   94.842939] Bluetooth: hci2: command tx timeout
[   94.843391] Bluetooth: hci1: command tx timeout
[   94.907384] Bluetooth: hci3: command tx timeout
[   94.971069] Bluetooth: hci6: command tx timeout
[   94.971515] Bluetooth: hci4: command tx timeout
[   94.972648] Bluetooth: hci5: command tx timeout
[   94.973075] Bluetooth: hci7: command tx timeout
[  129.654138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  129.654785] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  129.937566] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  129.938207] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  130.167778] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  130.168475] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  130.276618] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  130.277283] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  130.327772] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  130.328511] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  130.526378] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  130.527221] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
06:35:59 executing program 5:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
pwritev2(r0, &(0x7f0000000b80)=[{&(0x7f00000008c0)='!', 0x1}], 0x1, 0x0, 0x0, 0x0)
r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
pwritev2(r1, &(0x7f0000000340)=[{&(0x7f0000000040)="7ec644f75143308fef5069c7b7bc7fe2d3162ec2c821b193d38b54e5be32e983d1f9aef98d3339d3422c1c081f05c084cdd4dc16f8d74b43545c23dc01d8dd0a95d5128288d9c172c4eda43a", 0x4c}, {&(0x7f00000000c0)="9f67eb21b1b83d9da63740abc7eac2fb2f657457f73ac39897ffd1f89ce7df6bbf5d27ec67fa958f7b054d700b8e181dab9bb5755a55de93a4b89ac74041ec4fd482a86262c315ecf375fa6d7a5277", 0x4f}, {&(0x7f0000000140)="4a76ea3b903c068dc7c4d86891c8b73414c1847fef2705c2f021a61b6d8bc5111ffc0bddc7e5c9c58b3bff106e87c05984517903d590461e5c487728a74425f39f6a45b2c985748697530af59a83f6bdfc169976cb56188fdf8e067aabf56c98f5651cad67ef979d10c690fe9b61db932b3d57c8f77272705e2fabf8d96ecbe573201c49aa158c856662a33578e6940906a91dbb9db00ae470f1423c7589b3e4e4a4d76e70bb8455333f8acdb3d5112c6c6bcb5882fb72fa0293f4a5928e2d49d33b965ba0559a4d8e0235f11d5dc919501cd457116ef56afc3d3ce7770774", 0xdf}, {&(0x7f0000000240)="3acd91db7ffc18b27af7f9dca44e5fed69172ef67ac4aedf325bd4773b04840d5d200a58a9b3abaaf2ca985ee373f8219fa575654d840fcacad1898c573c39d598142d2d09c7880cbe68c9dfec814aefeab1ac58cec7d48a11d2e97d0d92bbe4b67c492e37f94219e4866227eb83d077fbb5ec02269c1f88f315b299e39c3e7da416d8e13f8c68c0e66398929ff14e34df6706ef686bf0f57544c339bcfaa4bcdc982ba29ae2fc77feaa98f9c092933d46c5647c9f246706ff89b838c90a2ca0358bc06da2c9b3b555af0cb934e97b759ca86dcba399a013d6182cff54d87064bd0f8811eac363c94ab02474614478", 0xef}, {&(0x7f0000000400)="0d332825a274c168daa12fc3c84aa90791e5b02186045c42a8fcd5496e3be71118d430dc20f4b452d404717a61e17543d8a0ba6869e86faaaa73de262536c59abdb190ea5f7394b5c6c7c358cbf05b623d0d651f7dabb2aa3c48e97e28a0d02da4a9335738939bd686747ba1f7a444c8445111688f14cbfe22bdffb5f51da7cc683ca43267bc6b5bb1140735fabab38bf1f290ee60f7f084dd69cdf75ec3fc943ddea430ad0fdb53ee5da3bfee5a12a74cd0b4f3a7f006e4", 0xb8}], 0x5, 0xffff0000, 0x7, 0x4)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0xc9, 0x0, 0x0, 0x82})

[  130.652907] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  130.653447] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
06:35:59 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x20)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x220000)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe)
r2 = dup(r1)
listen(r2, 0x0)
accept$packet(r2, 0x0, 0x0)
write$eventfd(r2, &(0x7f00000000c0)=0x99fd, 0x8)
readv(r0, &(0x7f0000002540)=[{0x0}, {&(0x7f0000001140)=""/132, 0x84}], 0x2)

[  130.778374] audit: type=1400 audit(1756535759.547:8): avc:  denied  { open } for  pid=3842 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[  130.781030] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2561 sclass=netlink_route_socket pid=3845 comm=syz-executor.4
[  130.783383] audit: type=1400 audit(1756535759.547:9): avc:  denied  { kernel } for  pid=3842 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[  130.788063] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  130.811253] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2561 sclass=netlink_route_socket pid=3845 comm=syz-executor.4
[  130.852208] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  130.852900] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
06:35:59 executing program 4:
io_uring_register$IORING_UNREGISTER_EVENTFD(0xffffffffffffffff, 0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs$userns(0x0, &(0x7f0000000040))

06:35:59 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', <r1=>0x0})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r4=>0x0})
setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10)
setsockopt$packet_add_memb(r2, 0x107, 0x2, &(0x7f0000000180)={r1, 0x1, 0x6, @multicast}, 0x10)

[  131.045364] mac80211_hwsim hwsim6 wlan1: entered promiscuous mode
[  131.046393] mac80211_hwsim hwsim6 wlan1: left promiscuous mode
[  131.078889] mac80211_hwsim hwsim6 wlan1: entered promiscuous mode
[  131.079723] mac80211_hwsim hwsim6 wlan1: left promiscuous mode
[  131.122128] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  131.122716] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
06:35:59 executing program 4:
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = accept(r0, &(0x7f0000000280)=@nl=@unspec, &(0x7f0000000300)=0x80)
ioctl$BTRFS_IOC_SET_FEATURES(r1, 0x40309439, &(0x7f0000000340)={0x3, 0x0, 0x1e})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'lo\x00', <r4=>0x0})
setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x2, 0x6, @link_local}, 0x10)
sendmsg$nl_xfrm(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0c010000130000082bbd7000fedbdf1d00000000000000000000000000000000ac1414aa0000010000000000000000004e2200074e2300000a00406029000000", @ANYRES32=r4, @ANYRES32=0xee00, @ANYBLOB="09000000000000000900000000000000010000000000000004000000000000000400000000000000018000000000000008000000000000000600000000000000ff030000000000004c0000000000000000040000000000000100000000000000ff0000000700000000000003000000001c00040000004e214e240000ff0100000000000000000000000000010a00100000000000000000000c000f00060400000000000020001700010000002bbd700029bd700026bd700025bd70000100000000000000"], 0x10c}, 0x1, 0x0, 0x0, 0x800}, 0x4)
pipe(&(0x7f0000000000))
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe)
r6 = dup(r5)
listen(r6, 0x0)
accept$packet(r6, 0x0, 0x0)
setsockopt$packet_int(r6, 0x107, 0x11, &(0x7f0000000380)=0xace3, 0x4)
fstatfs(r0, &(0x7f0000000040)=""/20)

[  131.221896] lo: entered allmulticast mode
06:36:00 executing program 7:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
io_setup(0x7, &(0x7f0000000100)=<r1=>0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="0179a6bec90000000000001a00"/27], 0x14}}, 0x0)
r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
pwritev2(r4, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x16, 0x1008, 0x0, 0x0)
io_submit(r1, 0x1, &(0x7f00000001c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0x9, r2, &(0x7f0000000140)="19c442210570fe2ecb24a1e905cbbb289cec1dbba201ff533ae056309655de5540b26ad6d84da02a816d962760c899", 0x2f, 0x5, 0x0, 0x2, r4}])
io_setup(0xc76, &(0x7f0000000200)=<r5=>0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r6=>0xffffffffffffffff})
io_submit(r5, 0x3, &(0x7f0000000480)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x76, r2, &(0x7f0000000240)="20e8d44e83eed6ee04bf9c93924cb8d66c4f51aa187abdc5206d6e1e03f48f13e8d3378e437d8ced97b975b9cc5621738db47ccdec91f9", 0x37, 0x9, 0x0, 0x2}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x2, 0x177f, r6, &(0x7f0000000300)="8b51014d7ed0e82845146fd647db42fcf28b370d245a19f2e89d0f343afe0aa3d4d71f85c02c1cee504952a0f08b0f43fe7e354797d7e8b39b55e03406742c4574107e641ad37cfe0dd1d17bc870f96fb6202c60ee9591d51444e52152567242c5af528a2d92e9bae97f7dde181fbf6a9d9a142072a72244a2312101b16c5ad17c8f2ea8e13209e1526aa9", 0x8b, 0x8, 0x0, 0x1, r4}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x2, 0x9, r0, &(0x7f0000000400)="c9797cd180e997d0814cc844d32df9d3191cab04bc95211220971b18f1839a", 0x1f, 0x3, 0x0, 0x1, r4}])
dup(0xffffffffffffffff)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

[  131.262337] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  131.263246] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  131.302504] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  131.303369] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  131.415111] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  131.415698] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  131.562081] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  131.562661] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  131.626395] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  131.627041] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  131.688877] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  131.689446] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  131.726165] loop3: detected capacity change from 0 to 14
[  131.767533] loop3: detected capacity change from 0 to 14
[  131.795192] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  131.795851] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  132.011253] loop2: detected capacity change from 0 to 264192
[  132.012757] msdos: Unknown parameter 'subj_role'
[  132.019947] loop2: detected capacity change from 0 to 264192
[  132.020722] msdos: Unknown parameter 'subj_role'
[  132.030862] lo: left allmulticast mode
06:36:12 executing program 7:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'})
socket$inet_tcp(0x2, 0x1, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe)
r2 = dup(r1)
listen(r2, 0x0)
accept$packet(r2, 0x0, 0x0)
setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x1)

06:36:12 executing program 2:
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = accept(r0, &(0x7f0000000280)=@nl=@unspec, &(0x7f0000000300)=0x80)
ioctl$BTRFS_IOC_SET_FEATURES(r1, 0x40309439, &(0x7f0000000340)={0x3, 0x0, 0x1e})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'lo\x00', <r4=>0x0})
setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x2, 0x6, @link_local}, 0x10)
sendmsg$nl_xfrm(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0c010000130000082bbd7000fedbdf1d00000000000000000000000000000000ac1414aa0000010000000000000000004e2200074e2300000a00406029000000", @ANYRES32=r4, @ANYRES32=0xee00, @ANYBLOB="09000000000000000900000000000000010000000000000004000000000000000400000000000000018000000000000008000000000000000600000000000000ff030000000000004c0000000000000000040000000000000100000000000000ff0000000700000000000003000000001c00040000004e214e240000ff0100000000000000000000000000010a00100000000000000000000c000f00060400000000000020001700010000002bbd700029bd700026bd700025bd70000100000000000000"], 0x10c}, 0x1, 0x0, 0x0, 0x800}, 0x4)
pipe(&(0x7f0000000000))
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe)
r6 = dup(r5)
listen(r6, 0x0)
accept$packet(r6, 0x0, 0x0)
setsockopt$packet_int(r6, 0x107, 0x11, &(0x7f0000000380)=0xace3, 0x4)
fstatfs(r0, &(0x7f0000000040)=""/20)

06:36:12 executing program 0:
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000040)=0x2, 0x4)
getsockopt$WPAN_SECURITY(r0, 0x0, 0x1, 0x0, &(0x7f0000000140))
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x7, @fixed}, 0x3b)
r2 = dup(r1)
listen(r2, 0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe)
r4 = dup(r3)
listen(r4, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
fcntl$setown(r5, 0x8, 0xffffffffffffffff)
fcntl$getownex(r5, 0x10, &(0x7f0000000040))
ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r5)
accept$packet(r4, 0x0, 0x0)
getsockopt$bt_l2cap_L2CAP_LM(r4, 0x6, 0x3, &(0x7f0000000080), &(0x7f0000000100)=0x4)
accept$packet(r2, 0x0, 0x0)
fsmount(r2, 0x31d0b226b744332c, 0x7a)
getsockopt$WPAN_WANTLQI(r2, 0x0, 0x3, &(0x7f0000000000), &(0x7f00000000c0)=0x4)

06:36:12 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x20)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x220000)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe)
r2 = dup(r1)
listen(r2, 0x0)
accept$packet(r2, 0x0, 0x0)
write$eventfd(r2, &(0x7f00000000c0)=0x99fd, 0x8)
readv(r0, &(0x7f0000002540)=[{0x0}, {&(0x7f0000001140)=""/132, 0x84}], 0x2)

06:36:12 executing program 1:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r0 = openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f00000001c0)=ANY=[@ANYBLOB='2'])
r1 = syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f0000001480), 0x0, &(0x7f0000001540)={[{@session={'session', 0x3d, 0x4a}}, {@overriderock}, {@session}]})
fspick(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x0)
io_setup(0x9b7f, &(0x7f0000000080))
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x1000}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0)

06:36:12 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x20)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x220000)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe)
r2 = dup(r1)
listen(r2, 0x0)
accept$packet(r2, 0x0, 0x0)
write$eventfd(r2, &(0x7f00000000c0)=0x99fd, 0x8)
readv(r0, &(0x7f0000002540)=[{0x0}, {&(0x7f0000001140)=""/132, 0x84}], 0x2)

06:36:12 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x20)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x220000)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe)
r2 = dup(r1)
listen(r2, 0x0)
accept$packet(r2, 0x0, 0x0)
write$eventfd(r2, &(0x7f00000000c0)=0x99fd, 0x8)
readv(r0, &(0x7f0000002540)=[{0x0}, {&(0x7f0000001140)=""/132, 0x84}], 0x2)

06:36:12 executing program 4:
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = accept(r0, &(0x7f0000000280)=@nl=@unspec, &(0x7f0000000300)=0x80)
ioctl$BTRFS_IOC_SET_FEATURES(r1, 0x40309439, &(0x7f0000000340)={0x3, 0x0, 0x1e})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'lo\x00', <r4=>0x0})
setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x2, 0x6, @link_local}, 0x10)
sendmsg$nl_xfrm(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0c010000130000082bbd7000fedbdf1d00000000000000000000000000000000ac1414aa0000010000000000000000004e2200074e2300000a00406029000000", @ANYRES32=r4, @ANYRES32=0xee00, @ANYBLOB="09000000000000000900000000000000010000000000000004000000000000000400000000000000018000000000000008000000000000000600000000000000ff030000000000004c0000000000000000040000000000000100000000000000ff0000000700000000000003000000001c00040000004e214e240000ff0100000000000000000000000000010a00100000000000000000000c000f00060400000000000020001700010000002bbd700029bd700026bd700025bd70000100000000000000"], 0x10c}, 0x1, 0x0, 0x0, 0x800}, 0x4)
pipe(&(0x7f0000000000))
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe)
r6 = dup(r5)
listen(r6, 0x0)
accept$packet(r6, 0x0, 0x0)
setsockopt$packet_int(r6, 0x107, 0x11, &(0x7f0000000380)=0xace3, 0x4)
fstatfs(r0, &(0x7f0000000040)=""/20)

[  143.789249] lo: entered allmulticast mode
[  143.825644] lo: entered allmulticast mode
[  143.837177] I/O error, dev loop1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  143.838179] isofs_fill_super: bread failed, dev=loop1, iso_blknum=16, block=32
06:36:12 executing program 1:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r0 = openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f00000001c0)=ANY=[@ANYBLOB='2'])
r1 = syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f0000001480), 0x0, &(0x7f0000001540)={[{@session={'session', 0x3d, 0x4a}}, {@overriderock}, {@session}]})
fspick(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x0)
io_setup(0x9b7f, &(0x7f0000000080))
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x1000}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0)

[  143.909789] I/O error, dev loop1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  143.911643] isofs_fill_super: bread failed, dev=loop1, iso_blknum=16, block=32
06:36:12 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe)
r2 = dup(r1)
listen(r2, 0x0)
accept$packet(r2, 0x0, 0x0)
r3 = syz_open_dev$mouse(&(0x7f0000000180), 0xfffffffffffffff8, 0xa000)
r4 = syz_open_dev$vcsn(&(0x7f00000001c0), 0x80, 0x200000)
setsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, &(0x7f0000000200), 0x4)
perf_event_open$cgroup(&(0x7f0000000100)={0x0, 0x80, 0xd1, 0x3, 0x5, 0x80, 0x0, 0xfd1e, 0x94020, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_bp={&(0x7f0000000080), 0x2}, 0x20, 0x100, 0xffff, 0x0, 0x54b, 0x50f, 0x5, 0x0, 0x1f, 0x0, 0x58d3}, r2, 0xffffffffffffffff, r3, 0x1)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="a20e73f1b1812c8df6967520cdbfb383417a9437ee7abadfd3289b31374c", 0x1e}], 0x1)

[  144.621757] lo: left allmulticast mode
06:36:13 executing program 2:
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = accept(r0, &(0x7f0000000280)=@nl=@unspec, &(0x7f0000000300)=0x80)
ioctl$BTRFS_IOC_SET_FEATURES(r1, 0x40309439, &(0x7f0000000340)={0x3, 0x0, 0x1e})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'lo\x00', <r4=>0x0})
setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x2, 0x6, @link_local}, 0x10)
sendmsg$nl_xfrm(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0c010000130000082bbd7000fedbdf1d00000000000000000000000000000000ac1414aa0000010000000000000000004e2200074e2300000a00406029000000", @ANYRES32=r4, @ANYRES32=0xee00, @ANYBLOB="09000000000000000900000000000000010000000000000004000000000000000400000000000000018000000000000008000000000000000600000000000000ff030000000000004c0000000000000000040000000000000100000000000000ff0000000700000000000003000000001c00040000004e214e240000ff0100000000000000000000000000010a00100000000000000000000c000f00060400000000000020001700010000002bbd700029bd700026bd700025bd70000100000000000000"], 0x10c}, 0x1, 0x0, 0x0, 0x800}, 0x4)
pipe(&(0x7f0000000000))
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe)
r6 = dup(r5)
listen(r6, 0x0)
accept$packet(r6, 0x0, 0x0)
setsockopt$packet_int(r6, 0x107, 0x11, &(0x7f0000000380)=0xace3, 0x4)
fstatfs(r0, &(0x7f0000000040)=""/20)

06:36:13 executing program 3:
r0 = shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x6000)
mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000)
shmctl$SHM_LOCK(0x0, 0xb)
mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x2)
r1 = shmget(0x0, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
shmctl$SHM_UNLOCK(r1, 0xc)
shmdt(r0)

06:36:13 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x20)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x220000)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe)
r2 = dup(r1)
listen(r2, 0x0)
accept$packet(r2, 0x0, 0x0)
write$eventfd(r2, &(0x7f00000000c0)=0x99fd, 0x8)
readv(r0, &(0x7f0000002540)=[{0x0}, {&(0x7f0000001140)=""/132, 0x84}], 0x2)

[  144.739810] lo: left allmulticast mode
06:36:13 executing program 7:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$unix(0x1, 0x5, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000200)={0x1, &(0x7f0000000240)=[{0x6}]}, 0x10)

[  144.767190] lo: entered allmulticast mode
06:36:13 executing program 4:
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = accept(r0, &(0x7f0000000280)=@nl=@unspec, &(0x7f0000000300)=0x80)
ioctl$BTRFS_IOC_SET_FEATURES(r1, 0x40309439, &(0x7f0000000340)={0x3, 0x0, 0x1e})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'lo\x00', <r4=>0x0})
setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x2, 0x6, @link_local}, 0x10)
sendmsg$nl_xfrm(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0c010000130000082bbd7000fedbdf1d00000000000000000000000000000000ac1414aa0000010000000000000000004e2200074e2300000a00406029000000", @ANYRES32=r4, @ANYRES32=0xee00, @ANYBLOB="09000000000000000900000000000000010000000000000004000000000000000400000000000000018000000000000008000000000000000600000000000000ff030000000000004c0000000000000000040000000000000100000000000000ff0000000700000000000003000000001c00040000004e214e240000ff0100000000000000000000000000010a00100000000000000000000c000f00060400000000000020001700010000002bbd700029bd700026bd700025bd70000100000000000000"], 0x10c}, 0x1, 0x0, 0x0, 0x800}, 0x4)
pipe(&(0x7f0000000000))
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe)
r6 = dup(r5)
listen(r6, 0x0)
accept$packet(r6, 0x0, 0x0)
setsockopt$packet_int(r6, 0x107, 0x11, &(0x7f0000000380)=0xace3, 0x4)
fstatfs(r0, &(0x7f0000000040)=""/20)

06:36:13 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
fcntl$setown(r0, 0x8, 0xffffffffffffffff)
fcntl$getownex(r0, 0x10, &(0x7f0000000040))
close(r0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0)

[  144.868299] lo: entered allmulticast mode
[  144.917498] kmemleak: Found object by alias at 0x607f1a639a5c
[  144.917524] CPU: 0 UID: 0 PID: 3994 Comm: syz-executor.7 Tainted: G        W           6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) 
[  144.917557] Tainted: [W]=WARN
[  144.917563] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  144.917575] Call Trace:
[  144.917582]  <TASK>
[  144.917590]  dump_stack_lvl+0xca/0x120
[  144.917630]  __lookup_object+0x94/0xb0
[  144.917659]  delete_object_full+0x27/0x70
[  144.917687]  free_percpu+0x30/0x1160
[  144.917716]  ? arch_uprobe_clear_state+0x16/0x140
[  144.917751]  futex_hash_free+0x38/0xc0
[  144.917775]  mmput+0x2d3/0x390
[  144.917808]  do_exit+0x79d/0x2970
[  144.917832]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  144.917877]  ? zap_other_threads+0x2b9/0x3a0
[  144.917907]  ? __pfx_do_exit+0x10/0x10
[  144.917934]  ? do_group_exit+0x1c3/0x2a0
[  144.917961]  ? _raw_spin_unlock_irq+0x23/0x40
[  144.917992]  do_group_exit+0xd3/0x2a0
[  144.918019]  __x64_sys_exit_group+0x3e/0x50
[  144.918044]  x64_sys_call+0x18c5/0x18d0
[  144.918071]  do_syscall_64+0xbf/0x360
[  144.918091]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  144.918112] RIP: 0033:0x7fb597064b19
[  144.918127] Code: Unable to access opcode bytes at 0x7fb597064aef.
[  144.918136] RSP: 002b:00007ffeb1b25428 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[  144.918157] RAX: ffffffffffffffda RBX: 000000000000001e RCX: 00007fb597064b19
[  144.918170] RDX: 00007fb59701772b RSI: ffffffffffffffbc RDI: 0000000000000000
[  144.918183] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000001
[  144.918195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  144.918207] R13: 0000000000000001 R14: 0000000000000001 R15: 00007ffeb1b25510
[  144.918235]  </TASK>
[  144.918242] kmemleak: Object (percpu) 0x607f1a639a58 (size 16):
[  144.918254] kmemleak:   comm "syz-executor.7", pid 285, jiffies 4294811470
[  144.918267] kmemleak:   min_count = 1
[  144.918274] kmemleak:   count = 0
[  144.918280] kmemleak:   flags = 0x21
[  144.918287] kmemleak:   checksum = 0
[  144.918294] kmemleak:   backtrace:
[  144.918300]  pcpu_alloc_noprof+0x87a/0x1170
[  144.918327]  mm_init+0x99b/0x1170
[  144.918341]  copy_process+0x3ab7/0x73c0
[  144.918359]  kernel_clone+0xea/0x7f0
[  144.918377]  __do_sys_clone+0xce/0x120
[  144.918395]  do_syscall_64+0xbf/0x360
[  144.918410]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  145.573202] lo: left allmulticast mode
[  145.700761] lo: left allmulticast mode
06:36:22 executing program 7:
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
fcntl$setown(r1, 0x8, 0xffffffffffffffff)
fcntl$getownex(r1, 0x10, &(0x7f0000000040))
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'lo\x00', <r4=>0x0})
setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x2, 0x6, @link_local}, 0x10)
bind(r1, &(0x7f00000001c0)=@xdp={0x2c, 0x8, r4, 0x16}, 0x80)
write(r0, &(0x7f00000000c0)="88e34de11927d486da092df1d72852bd106579", 0x13)
sendmsg$802154_raw(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x24, @short={0x2, 0xffff, 0xaaa1}}, 0x14, &(0x7f0000000040)={&(0x7f0000000100)="7efdf6b5e171cce49c35e8bffa5e3a2cb21d4cf46dd56cf851e3aa3814dd32a2e578f4c6bb380cdec82138883754ea963027b2e301ba01367685d0fa9888eff7c5040fe9a1708c9f533b891968b118c3a7326839eea03586b5a7df9f3665d9b4a38f88c36de78134d20014f07d450ddffcd6f64660b9075cd409eb832334d79e1a59b9e2f05337413fc592efdc1fddc0867ebdec9c22a49f2758906737e630a2ad17b17fa62a42f2f44cc68cdf719c03", 0xb0}, 0x1, 0x0, 0x0, 0x20000010}, 0x804)
sendmsg$inet6(r3, &(0x7f00000005c0)={&(0x7f0000000240)={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x3f}, 0x1c, &(0x7f0000000600)=[{&(0x7f0000000280)="58baeeb99c29993d3e3436f7fcc8262082371f1c3c59a1c79a3f78f53badbb6ccf0a0edfa3c5b4e515fd5cbeb4fbcbf98a260141d2757ab93adbcf6803c45202d43d27c3a5d197b075e649860837b9e6ab9481f9f7cee8a3fc62763fc24c54932f0400cfa13d5250ca9e0a8380c985962b5a18", 0x73}, {&(0x7f0000000300)="7561d4d895e7cd1f7ac724e9503a448787f6e00d02f35714065e6dff1fbaeff546050a9a83ee07fb2798431ebbc0f120ea5656fbf34121f448ce8b4f0dea320bc066f1371b63f21417d59cc3bc1088e888c05ef329c3b356c6f9c9e608c13b8412a9f5c5743b87178e469eba85bc2247a21128fb0875d03190d0c05d0e76f4bf8e689233f32d7125a1a8aa003d8f72c310fb4edbd6bfaf09dbac8b11cd946ea8ad0db114b7998a8f03ab580a148dd0956c49ce5249f1cbbe108be668cd5440ca0aaf014edc035369bbb40e92992702e1a2109423ed83583ad657cf39bc5e181119985f427119fa3909c6a8406273d2854838484fe0d6ea60", 0xf8}, {&(0x7f0000000400)="697bb6e4e2cb166247fcf2ada4db4e91bd1934ff1489c52f7062dc579387fa8bd8297f8c8a3921375596dd6a0b209993380123df90f544001fc5fa9aeb27c544f965ef6bd5d12805bace0aeb63", 0x4d}, {&(0x7f0000000480)="9ba531b43baeb0ed32f0befbe8fb4d4b19d741aa2d9410", 0x17}], 0x4, &(0x7f0000000500)=[@rthdr={{0x28, 0x29, 0x39, {0x0, 0x2, 0x1, 0x4, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}}}, @hoplimit={{0x14, 0x29, 0x34, 0x4}}, @tclass={{0x14, 0x29, 0x43, 0xff}}, @rthdr={{0x28, 0x29, 0x39, {0x29, 0x2, 0x1, 0x81, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x1}}], 0x98}, 0x20084851)

06:36:22 executing program 4:
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = accept(r0, &(0x7f0000000280)=@nl=@unspec, &(0x7f0000000300)=0x80)
ioctl$BTRFS_IOC_SET_FEATURES(r1, 0x40309439, &(0x7f0000000340)={0x3, 0x0, 0x1e})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'lo\x00', <r4=>0x0})
setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x2, 0x6, @link_local}, 0x10)
sendmsg$nl_xfrm(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0c010000130000082bbd7000fedbdf1d00000000000000000000000000000000ac1414aa0000010000000000000000004e2200074e2300000a00406029000000", @ANYRES32=r4, @ANYRES32=0xee00, @ANYBLOB="09000000000000000900000000000000010000000000000004000000000000000400000000000000018000000000000008000000000000000600000000000000ff030000000000004c0000000000000000040000000000000100000000000000ff0000000700000000000003000000001c00040000004e214e240000ff0100000000000000000000000000010a00100000000000000000000c000f00060400000000000020001700010000002bbd700029bd700026bd700025bd70000100000000000000"], 0x10c}, 0x1, 0x0, 0x0, 0x800}, 0x4)
pipe(&(0x7f0000000000))
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe)
r6 = dup(r5)
listen(r6, 0x0)
accept$packet(r6, 0x0, 0x0)
setsockopt$packet_int(r6, 0x107, 0x11, &(0x7f0000000380)=0xace3, 0x4)
fstatfs(r0, &(0x7f0000000040)=""/20)

06:36:22 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
fcntl$setown(r0, 0x8, 0xffffffffffffffff)
fcntl$getownex(r0, 0x10, &(0x7f0000000040))
close(r0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0)

06:36:22 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x20)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x220000)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe)
r2 = dup(r1)
listen(r2, 0x0)
accept$packet(r2, 0x0, 0x0)
write$eventfd(r2, &(0x7f00000000c0)=0x99fd, 0x8)
readv(r0, &(0x7f0000002540)=[{0x0}, {&(0x7f0000001140)=""/132, 0x84}], 0x2)

06:36:22 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
fcntl$setown(r0, 0x8, 0xffffffffffffffff)
fcntl$getownex(r0, 0x10, &(0x7f0000000040))
close(r0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0)

06:36:22 executing program 3:
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x1ca)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe)
r2 = dup(r1)
listen(r2, 0x0)
accept$packet(r2, 0x0, 0x0)
sendmsg$nl_netfilter(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="840500000e07010204000000ffdbdf250100000a37017b80be3136935f49b9262ab49624a6b09286a71430622259b9666126f6c62b19dd9c5402faea7d08d36fe5c66abac7339dbd0a13700e23a2563e1de14cd23c528028861fdcce84eaecfd5c7d915747264e9514acf62878b74fd143b402c65ee04c17ec18240c60111cfcac55e60ff6ee74dcb5a1c3e157db4a34b80818ac57402c90cbeb02fbdb9486b174e0f09ffe7d21ffa0357f207f36e4ecf509935bc43fc71e32e814b4b257cf946f2accf89f86dede93f41e86cac07b26c3ea219ee7177525a0c6505740ee6b0b25e47c56e719789600a3e9635d8887eaa674ab95e2e899385b1a474dd5f0c94910bd0a2d647c221d7381cbfe33af6bd6e699d9b31fded840cae4874a75508b185b19aafb2e85e3543dda2f488ec530884c99bdfb46ea03a31e9e6c34980110ee28d24b1da40a188d5fd9cf54f2ef086bec98caf100b4005a00f8b4a70a5701f8e9be68ea46c127c5414e49baa50fdb335831df2c347ac8e4d38f1a2f4c5ed8afd697c2f52eb383c35c40b64750e794784622c7378add152ab753b38126426b6cbe850de06be4c74fc6591eb59325b834757b8d2d645d1aa699a645337faebe729cbf161b2f826411533caf126f6bd4679f4d00585f0b7d4e6ecd6b4030a3e242c17c54bf3dbd278497afcb59bb51e39e354c3af972f46cfd60ad6b32484eed97eb9f47fc48c150b7fdfc47c4032804ae526d21506720447f0d2c35ea6d31c6bac0e0d84e77eae4e40a0b1d7418eab3c9b4c5ac2da405ea380e0b1198d0d0427ab914004d0000000000000000000000000000000000d5897b806ae7d3da33c033880796a100bcf81d2f5b3e4ecdb3a57489c18b00000000000015322f7c1eb1a36deb", @ANYRES32, @ANYBLOB="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"], 0x584}, 0x1, 0x0, 0x0, 0x4008011}, 0x4000)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x400000, 0x0)
getpeername$packet(r0, &(0x7f0000000140)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe)
r6 = dup(r5)
listen(r6, 0x4)
accept$packet(r6, 0x0, 0x0)
ioctl$TCSBRK(r6, 0x5409, 0x0)
connect$packet(r0, &(0x7f00000001c0)={0x11, 0x1b, r4, 0x1, 0x8, 0x6, @broadcast}, 0x14)
ioctl$TIOCSPTLCK(r3, 0x540f, 0xfffffffffffffffd)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000008c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, <r7=>0x0})
ioctl$BTRFS_IOC_WAIT_SYNC(r1, 0x40089416, &(0x7f0000000100)=r7)

06:36:22 executing program 2:
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = accept(r0, &(0x7f0000000280)=@nl=@unspec, &(0x7f0000000300)=0x80)
ioctl$BTRFS_IOC_SET_FEATURES(r1, 0x40309439, &(0x7f0000000340)={0x3, 0x0, 0x1e})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'lo\x00', <r4=>0x0})
setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x2, 0x6, @link_local}, 0x10)
sendmsg$nl_xfrm(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0c010000130000082bbd7000fedbdf1d00000000000000000000000000000000ac1414aa0000010000000000000000004e2200074e2300000a00406029000000", @ANYRES32=r4, @ANYRES32=0xee00, @ANYBLOB="09000000000000000900000000000000010000000000000004000000000000000400000000000000018000000000000008000000000000000600000000000000ff030000000000004c0000000000000000040000000000000100000000000000ff0000000700000000000003000000001c00040000004e214e240000ff0100000000000000000000000000010a00100000000000000000000c000f00060400000000000020001700010000002bbd700029bd700026bd700025bd70000100000000000000"], 0x10c}, 0x1, 0x0, 0x0, 0x800}, 0x4)
pipe(&(0x7f0000000000))
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe)
r6 = dup(r5)
listen(r6, 0x0)
accept$packet(r6, 0x0, 0x0)
setsockopt$packet_int(r6, 0x107, 0x11, &(0x7f0000000380)=0xace3, 0x4)
fstatfs(r0, &(0x7f0000000040)=""/20)

06:36:22 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe)
r2 = dup(r1)
listen(r2, 0x0)
accept$packet(r2, 0x0, 0x0)
r3 = syz_open_dev$mouse(&(0x7f0000000180), 0xfffffffffffffff8, 0xa000)
r4 = syz_open_dev$vcsn(&(0x7f00000001c0), 0x80, 0x200000)
setsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, &(0x7f0000000200), 0x4)
perf_event_open$cgroup(&(0x7f0000000100)={0x0, 0x80, 0xd1, 0x3, 0x5, 0x80, 0x0, 0xfd1e, 0x94020, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_bp={&(0x7f0000000080), 0x2}, 0x20, 0x100, 0xffff, 0x0, 0x54b, 0x50f, 0x5, 0x0, 0x1f, 0x0, 0x58d3}, r2, 0xffffffffffffffff, r3, 0x1)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="a20e73f1b1812c8df6967520cdbfb383417a9437ee7abadfd3289b31374c", 0x1e}], 0x1)

[  153.785803] lo: entered allmulticast mode
[  153.786577] lo: entered allmulticast mode
[  153.817868] lo: entered allmulticast mode
[  153.822045] lo: left allmulticast mode
[  153.827775] lo: entered allmulticast mode
[  153.831212] lo: left allmulticast mode
[  153.882587] kmemleak: Found object by alias at 0x607f1a639a5c
[  153.882612] CPU: 0 UID: 0 PID: 4027 Comm: syz-executor.7 Tainted: G        W           6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) 
[  153.882644] Tainted: [W]=WARN
[  153.882651] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  153.882663] Call Trace:
[  153.882670]  <TASK>
[  153.882677]  dump_stack_lvl+0xca/0x120
[  153.882716]  __lookup_object+0x94/0xb0
[  153.882745]  delete_object_full+0x27/0x70
[  153.882773]  free_percpu+0x30/0x1160
[  153.882801]  ? arch_uprobe_clear_state+0x16/0x140
[  153.882845]  futex_hash_free+0x38/0xc0
[  153.882869]  mmput+0x2d3/0x390
[  153.882902]  do_exit+0x79d/0x2970
[  153.882925]  ? lock_release+0xc8/0x290
[  153.882952]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  153.882989]  ? __pfx_do_exit+0x10/0x10
[  153.883014]  ? find_held_lock+0x2b/0x80
[  153.883044]  ? get_signal+0x835/0x2340
[  153.883079]  do_group_exit+0xd3/0x2a0
[  153.883106]  get_signal+0x2315/0x2340
[  153.883137]  ? trace_irq_enable.constprop.0+0xc2/0x100
[  153.883165]  ? __pfx_get_signal+0x10/0x10
[  153.883194]  ? do_futex+0x135/0x370
[  153.883219]  ? __pfx_do_futex+0x10/0x10
[  153.883247]  arch_do_signal_or_restart+0x80/0x790
[  153.883277]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  153.883307]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  153.883343]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  153.883378]  ? __pfx___x64_sys_futex+0x10/0x10
[  153.883400]  ? ksys_write+0x1a3/0x240
[  153.883421]  ? xfd_validate_state+0x55/0x180
[  153.883458]  exit_to_user_mode_loop+0x8b/0x110
[  153.883480]  do_syscall_64+0x2f7/0x360
[  153.883501]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  153.883522] RIP: 0033:0x7fb597064b19
[  153.883538] Code: Unable to access opcode bytes at 0x7fb597064aef.
[  153.883547] RSP: 002b:00007fb5945b9218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  153.883567] RAX: fffffffffffffe00 RBX: 00007fb597178028 RCX: 00007fb597064b19
[  153.883580] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fb597178028
[  153.883593] RBP: 00007fb597178020 R08: 0000000000000000 R09: 0000000000000000
[  153.883605] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb59717802c
[  153.883618] R13: 00007ffeb1b251ff R14: 00007fb5945b9300 R15: 0000000000022000
[  153.883646]  </TASK>
[  153.883653] kmemleak: Object (percpu) 0x607f1a639a58 (size 16):
[  153.883665] kmemleak:   comm "syz-executor.5", pid 284, jiffies 4294820452
[  153.883677] kmemleak:   min_count = 1
[  153.883684] kmemleak:   count = 0
[  153.883691] kmemleak:   flags = 0x21
[  153.883697] kmemleak:   checksum = 0
[  153.883704] kmemleak:   backtrace:
[  153.883710]  pcpu_alloc_noprof+0x87a/0x1170
[  153.883737]  mm_init+0x99b/0x1170
[  153.883751]  copy_process+0x3ab7/0x73c0
[  153.883769]  kernel_clone+0xea/0x7f0
[  153.883787]  __do_sys_clone+0xce/0x120
[  153.883805]  do_syscall_64+0xbf/0x360
[  153.883820]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  154.615296] lo: left allmulticast mode
[  154.616917] lo: left allmulticast mode
06:36:31 executing program 3:
prctl$PR_SET_SECCOMP(0x35, 0x1, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0xc1b, 0x6, 0x9, 0x3f}]})

06:36:31 executing program 2:
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = accept(r0, &(0x7f0000000280)=@nl=@unspec, &(0x7f0000000300)=0x80)
ioctl$BTRFS_IOC_SET_FEATURES(r1, 0x40309439, &(0x7f0000000340)={0x3, 0x0, 0x1e})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'lo\x00', <r4=>0x0})
setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x2, 0x6, @link_local}, 0x10)
sendmsg$nl_xfrm(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0c010000130000082bbd7000fedbdf1d00000000000000000000000000000000ac1414aa0000010000000000000000004e2200074e2300000a00406029000000", @ANYRES32=r4, @ANYRES32=0xee00, @ANYBLOB="09000000000000000900000000000000010000000000000004000000000000000400000000000000018000000000000008000000000000000600000000000000ff030000000000004c0000000000000000040000000000000100000000000000ff0000000700000000000003000000001c00040000004e214e240000ff0100000000000000000000000000010a00100000000000000000000c000f00060400000000000020001700010000002bbd700029bd700026bd700025bd70000100000000000000"], 0x10c}, 0x1, 0x0, 0x0, 0x800}, 0x4)
pipe(&(0x7f0000000000))
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe)
r6 = dup(r5)
listen(r6, 0x0)
accept$packet(r6, 0x0, 0x0)
setsockopt$packet_int(r6, 0x107, 0x11, &(0x7f0000000380)=0xace3, 0x4)

06:36:31 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
fcntl$setown(r0, 0x8, 0xffffffffffffffff)
fcntl$getownex(r0, 0x10, &(0x7f0000000040))
close(r0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0)

06:36:31 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
fcntl$setown(r0, 0x8, 0xffffffffffffffff)
fcntl$getownex(r0, 0x10, &(0x7f0000000040))
close(r0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0)

06:36:31 executing program 4:
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = accept(r0, &(0x7f0000000280)=@nl=@unspec, &(0x7f0000000300)=0x80)
ioctl$BTRFS_IOC_SET_FEATURES(r1, 0x40309439, &(0x7f0000000340)={0x3, 0x0, 0x1e})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'lo\x00', <r4=>0x0})
setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x2, 0x6, @link_local}, 0x10)
sendmsg$nl_xfrm(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0c010000130000082bbd7000fedbdf1d00000000000000000000000000000000ac1414aa0000010000000000000000004e2200074e2300000a00406029000000", @ANYRES32=r4, @ANYRES32=0xee00, @ANYBLOB="09000000000000000900000000000000010000000000000004000000000000000400000000000000018000000000000008000000000000000600000000000000ff030000000000004c0000000000000000040000000000000100000000000000ff0000000700000000000003000000001c00040000004e214e240000ff0100000000000000000000000000010a00100000000000000000000c000f00060400000000000020001700010000002bbd700029bd700026bd700025bd70000100000000000000"], 0x10c}, 0x1, 0x0, 0x0, 0x800}, 0x4)
pipe(&(0x7f0000000000))
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe)
r6 = dup(r5)
listen(r6, 0x0)
accept$packet(r6, 0x0, 0x0)
setsockopt$packet_int(r6, 0x107, 0x11, &(0x7f0000000380)=0xace3, 0x4)

06:36:31 executing program 7:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmstat\x00', 0x0, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe)
r2 = dup(r1)
listen(r2, 0x0)
accept$packet(r2, 0x0, 0x0)
ioctl$EVIOCSABS0(r2, 0x401845c0, &(0x7f0000000000)={0x6, 0x7, 0xd7, 0x7dce, 0x2, 0x80})
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
fcntl$setown(r3, 0x8, 0xffffffffffffffff)
fcntl$getownex(r3, 0x10, &(0x7f0000000040))
r4 = accept4$bt_l2cap(r0, 0x0, &(0x7f0000000080), 0x0)
sendfile(r4, r0, 0x0, 0x8001)

06:36:31 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
eventfd(0x20)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x220000)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe)
r1 = dup(r0)
listen(r1, 0x0)
accept$packet(r1, 0x0, 0x0)
write$eventfd(r1, &(0x7f00000000c0)=0x99fd, 0x8)

06:36:31 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe)
r2 = dup(r1)
listen(r2, 0x0)
accept$packet(r2, 0x0, 0x0)
r3 = syz_open_dev$mouse(&(0x7f0000000180), 0xfffffffffffffff8, 0xa000)
r4 = syz_open_dev$vcsn(&(0x7f00000001c0), 0x80, 0x200000)
setsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, &(0x7f0000000200), 0x4)
perf_event_open$cgroup(&(0x7f0000000100)={0x0, 0x80, 0xd1, 0x3, 0x5, 0x80, 0x0, 0xfd1e, 0x94020, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_bp={&(0x7f0000000080), 0x2}, 0x20, 0x100, 0xffff, 0x0, 0x54b, 0x50f, 0x5, 0x0, 0x1f, 0x0, 0x58d3}, r2, 0xffffffffffffffff, r3, 0x1)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="a20e73f1b1812c8df6967520cdbfb383417a9437ee7abadfd3289b31374c", 0x1e}], 0x1)

[  163.209339] lo: entered allmulticast mode
[  163.233601] lo: entered allmulticast mode
06:36:32 executing program 3:
r0 = perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/stat\x00', 0x0, 0x0)
io_submit(0x0, 0x1, &(0x7f00000003c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000)="fa", 0x1}])
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000880)=ANY=[@ANYBLOB="018e00000100000018000080473200004000efb21a2b133b89900dc63bb0b62de6a3366a066a6ecfd1de035aa5a5b31e6818fe45b5da8afd92d5da32e02b406306890f5694e1d3", @ANYRES32=r1, @ANYRES32=<r2=>r0, @ANYBLOB='\x00\x00\x00\x00./file0\x00'])
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
fcntl$setown(r3, 0x8, 0xffffffffffffffff)
fcntl$getownex(r3, 0x10, &(0x7f0000000040))
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe)
r5 = dup(r4)
listen(r5, 0x0)
accept$packet(r5, 0x0, 0x0)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
fcntl$setown(r6, 0x8, 0xffffffffffffffff)
fcntl$getownex(r6, 0x10, &(0x7f0000000040))
r7 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000480))
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
fcntl$setown(r8, 0x8, 0xffffffffffffffff)
fcntl$getownex(r8, 0x10, &(0x7f0000000040))
io_submit(0x0, 0x8, &(0x7f0000000840)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0x9, r1, &(0x7f0000000000)="ffa4f548169a9289b114af2ede27a58e73b8c09e9e45249d83d6897bf2a3eb5b67dcc29e8f8b10bd23f5defc8289533c4c5ba1b3eb0a14174688cb1bcfb8047fb61fcca90e17a9ad903c013a26440a7d1f164400a1f7cd376e2b9d6844defc7407dfd9718da1b00d8735000664497e9700ae6b2adc64840eae002cb80b6146e68aca502f4c6a0176d266bc9c7d67fd26ef23e3a17b82118c808bca37c1a3f797d218de34b53989107a2be071d20d6cc4ca04119a25ab898d6b2d564c3878", 0xbe, 0x4, 0x0, 0x6, r1}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x6, 0xfff8, r0, &(0x7f0000000140)="40e4ec00ede0dca9a0256bfc62503c519aa3c7d40d840526364dfad7de5769dd4cc9db81c9a8fc508a8b0661ae31bd4c3598fb552df70e7679712f883783fe2c9ad8f313b0ad93503ebf56fd989871f31544040b2ad86a6a4eb616227bd5143e6f37cae3faef60b508bb1977110f9b2afccebabe2867a4d25d18b9198e6df3216c464d135ec9a72979edd91484eef97e306f2be6127ddb9476926791be2d4bbca914bad23a4165bb5dcc047433af070ff4dcc3a7efe590b259", 0xb9, 0x269, 0x0, 0x1, r1}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)="6abff7e60c98aa0ec85777cb283cb57ae2700ab39544fc2a0c9317848c454604e1cc3902229941cc78e72a3fca8787d97424d42963a4686e83edf4a620418c5a0cce8c660a353699622822be1b241382563555cac0e2fa68bab55b614aa17aa65c8c1d867400609df16ec66b64a4a1186ac5d2acb8a3569816e85d5a9f9db4897f197d953dc70949ccff0ed610079873373f84aebd626d7678ed9b5d45cee68b99b1599b426dcab94fc31f32572875", 0xaf, 0x100000001, 0x0, 0x1, r2}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x3, 0x8, r3, &(0x7f0000000380)="592073d2e637ee453e8f8b1c892e2fbed9fb7c89cc48c2d448e0d946c308802b989775080d", 0x25, 0x80, 0x0, 0x0, r5}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x8, 0x0, r6, &(0x7f0000000400)="800f286b2c19d61626de3beb88649f963d730fb897bd1080d7850c23655fff9e1c17962c9b6f2e9671d4b544ff19", 0x2e, 0x8, 0x0, 0x3, r1}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x3f, r7, &(0x7f0000000540)="26f8bab65c268b36210ff3537833cc6caf2d1af5bf615d2bde308b4d25ec9419d96e3b5b7c880a3edc79d4e7f707b2b7c559249e27f12f02d42cd832cda747103b6cd5ae40e2cb922519433900487ac57761e179d1dc50be0a7fd48a885abe38fcb74fc4515d654a491ac90e1ab65f81a274ede30d7cd1e33058d0316032213aa783a02b258591b892434bb82ebb345d4ebdbe0a3b82f4b29648663354aec7bcf5e0ebd7a6086ed798cc4e1de1ed00b33648579ad2f7d46a7e94d63f38", 0xbd, 0x7c4, 0x0, 0x1}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x1, r0, &(0x7f0000000640)="799a541a7d6227213e83d040eb0d672cf6b54a766675c0fd775294480476ca470464791d0b6d37cc8a10a391683b42ef651018b7457530b92f354fc8686f63533e91b6199a6fdffc6e388aaab45b35899cad703eec09bfe448c1930c3f8291bfe05441ed7ce0c9ba4b02ed6d8fce2ebab0d8f35063c2afe98f3f3c704c8cdc92614b76b1e0d058d13075", 0x8a, 0x7, 0x0, 0x3}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x3, 0xfff7, r8, &(0x7f0000000740)="919e85d5d77e93388e697e699ecf4b647d396585aae888cef6b375839a45b93f84da9eb8cf36f33722a4a1f089acaf7d5dc54fee171a70191c63fadae883174b192c87589ea370efd49922bc468dec3016f4ea09b7efacee7266d957eff318d3abac8343cac3e607781916a380569e47a76f612e912e4eec8cbd205f871a5bd8b075ad64049f052913cf5362e11cf040b0ab3ce479dcffb044ec1ff95a0aa564f000ae407a841a1e37389a791e235517958e0b8f", 0xb4, 0x1d2f, 0x0, 0x1}])

06:36:32 executing program 5:
r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x141802, 0x0)
preadv2(r0, &(0x7f0000000280)=[{&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000100)=""/84, 0x54}, {&(0x7f0000000180)=""/249, 0xf9}], 0x4, 0x3, 0xfffffffc, 0x18)
ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000000000)=""/204)

06:36:32 executing program 0:
syz_io_uring_setup(0x5993, &(0x7f0000000bc0)={0x0, 0x0, 0x4000}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000c40), &(0x7f0000000c80))
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe)
r1 = dup(r0)
listen(r1, 0x0)
accept$packet(r1, 0x0, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)=""/89, 0x59}, {&(0x7f0000000080)=""/200, 0xc8}, {&(0x7f0000000180)=""/111, 0x6f}, {&(0x7f0000000cc0)=""/4096, 0x1000}, {&(0x7f0000000200)=""/237, 0xed}, {&(0x7f0000000300)=""/43, 0x2b}], 0x6)

[  163.376410] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s
[  163.377370] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] 
[  163.378089] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present
[  163.378632] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 10 00
[  163.379360] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 8 prio class 2
[  163.413934] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s
[  163.414739] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] 
[  163.415423] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present
[  163.416076] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 10 00
[  163.416698] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 8 prio class 2
06:36:32 executing program 5:
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
write(0xffffffffffffffff, &(0x7f0000000bc0)="5ed0b2ff68d76fb346352b602a2a1295cbe01cb3f64fbed9e7f9bc9be0f300cb97f6a204cc586e45dfb949002f61f8fb969dd435dd0c0000000000000000fd75205e215b167323a3b971b0ec98e6c3d4d825cae01271cb35cdd091e4872367f354e0dc81a7e4ac79775bc1dcaafe2f5079da79d1989f1ddce6722fc438a7217526cfe75d53471624d6f091e19a7fb699ea27efa9e0fd1914e7c35f297afd9b9b85ff0ce7a982f4fa0c172edcf090a5f0", 0xb0)
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
write(r0, &(0x7f0000000900)="5ed0b2ff68d76fb346352b602a2a1295cbe01cb3f64fbed9e7f9bc9be0f300cb97f6a204cc586e45dfb949002f61f8fb969dd435dd0c37c5077e5b10cfeafd75205e215b167323a3b971b0ec98e6c3d4d825cae01271cb35cdd091e4872367f354e0dc81a7e4ac79775bc1dcaafe2f5079da79d1989f1ddce6722fc438a7217526cfe75d53471624d6f091e19a7fb699ea27efa9e0fd1914e7c35f297afd9b9b85ff0ce7a982f4fa0c172ea5f06479eec302f30e5df66273717e028f4ca7d4c5b6bc8a3c3c67f688195f22488a15d9e1f7e5fed3a6c2aba7bc308b0e2c5657f4538f4a3bf9b975bb887a901ab3c85261be3e331b741313e78b5ad63b7b1b378e9c79dc4a95b2b4d15cd1d1b808844378f882a72af1e5b0eefd356e0247246e60643204c3b46183dbe4e066c55cb1dcdaa7b70ef43ab2fa4d2b8c4c1a89cb0e325fd9716874d3856cf368efd1f92d21214e55e4de647c37c71887d11f74f9afe1616e3054ceae601e4b3555e243c1882ad42c7730caeb309e7714ad87c55e9fba308cfc4161e562abde3ac4f3d7e0a3584d4928100197f102307c05c0b4b4898b0591bc1433af443478979f28e6136ffb21aaeac2be5490475a08e96bb94fd9d9d3aa2f8a1e147a80ba9bfd04dac3f476ff128476c693ea71f7be47a508c98eddc479eb703d6f17cc5be2182f7c39b0a47eb23e0808b5d87dd2a9ce88eb48a601781c53677b642fa92a7b767d76e208d17a13940ff013466264e16a26d7f004dfb575a75317d1eded2d32cbd9c6789c474435873ebc769bfbf0a064e61b363a4c45bc4b5fc77b81c120bbd2ecf508e7485bfcf1facea6f5763bb13023aed4cd7ff200554cb5d3307dfc43e8fc49878f7ac27e2226a48d87471708d036d5448c20207731438839301058c114dce8bd59355705c1d94d99aa6a2a394a94ddd456c3b66ea43e84253bab73e0699ea6778861b1cf71ce86ffe512040a7c274b4e07", 0x2bf)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x2858, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2)
r2 = getpgid(0x0)
r3 = getpgrp(0x0)
kcmp(r2, r3, 0x2, 0xffffffffffffffff, 0xffffffffffffffff)
r4 = getpgid(0x0)
r5 = getpgrp(0x0)
kcmp(r4, r5, 0x2, 0xffffffffffffffff, 0xffffffffffffffff)
r6 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x141802, 0x0)
ioctl$SG_SET_RESERVED_SIZE(r6, 0x2275, &(0x7f00000000c0)=0xfffffffe)
clone3(&(0x7f0000002080)={0x40200000, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), {0x38}, &(0x7f0000000180)=""/166, 0xa6, &(0x7f0000000240)=""/12, &(0x7f0000002040)=[0x0, 0x0, 0x0, 0x0, 0x0, r2, r5], 0x7, {r6}}, 0x58)
mq_getsetattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_script(r1, 0x0, 0x0)
fcntl$setstatus(r0, 0x4, 0x44000)
sendfile(r0, r1, 0x0, 0xfdef)

06:36:32 executing program 5:
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
write(0xffffffffffffffff, &(0x7f0000000bc0)="5ed0b2ff68d76fb346352b602a2a1295cbe01cb3f64fbed9e7f9bc9be0f300cb97f6a204cc586e45dfb949002f61f8fb969dd435dd0c0000000000000000fd75205e215b167323a3b971b0ec98e6c3d4d825cae01271cb35cdd091e4872367f354e0dc81a7e4ac79775bc1dcaafe2f5079da79d1989f1ddce6722fc438a7217526cfe75d53471624d6f091e19a7fb699ea27efa9e0fd1914e7c35f297afd9b9b85ff0ce7a982f4fa0c172edcf090a5f0", 0xb0)
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
write(r0, &(0x7f0000000900)="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", 0x2bf)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x2858, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2)
r2 = getpgid(0x0)
r3 = getpgrp(0x0)
kcmp(r2, r3, 0x2, 0xffffffffffffffff, 0xffffffffffffffff)
r4 = getpgid(0x0)
r5 = getpgrp(0x0)
kcmp(r4, r5, 0x2, 0xffffffffffffffff, 0xffffffffffffffff)
r6 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x141802, 0x0)
ioctl$SG_SET_RESERVED_SIZE(r6, 0x2275, &(0x7f00000000c0)=0xfffffffe)
clone3(&(0x7f0000002080)={0x40200000, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), {0x38}, &(0x7f0000000180)=""/166, 0xa6, &(0x7f0000000240)=""/12, &(0x7f0000002040)=[0x0, 0x0, 0x0, 0x0, 0x0, r2, r5], 0x7, {r6}}, 0x58)
mq_getsetattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_script(r1, 0x0, 0x0)
fcntl$setstatus(r0, 0x4, 0x44000)
sendfile(r0, r1, 0x0, 0xfdef)

[  164.063770] lo: left allmulticast mode
[  164.067777] lo: left allmulticast mode
06:36:32 executing program 2:
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = accept(r0, &(0x7f0000000280)=@nl=@unspec, &(0x7f0000000300)=0x80)
ioctl$BTRFS_IOC_SET_FEATURES(r1, 0x40309439, &(0x7f0000000340)={0x3, 0x0, 0x1e})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'lo\x00', <r4=>0x0})
setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x2, 0x6, @link_local}, 0x10)
sendmsg$nl_xfrm(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0c010000130000082bbd7000fedbdf1d00000000000000000000000000000000ac1414aa0000010000000000000000004e2200074e2300000a00406029000000", @ANYRES32=r4, @ANYRES32=0xee00, @ANYBLOB="09000000000000000900000000000000010000000000000004000000000000000400000000000000018000000000000008000000000000000600000000000000ff030000000000004c0000000000000000040000000000000100000000000000ff0000000700000000000003000000001c00040000004e214e240000ff0100000000000000000000000000010a00100000000000000000000c000f00060400000000000020001700010000002bbd700029bd700026bd700025bd70000100000000000000"], 0x10c}, 0x1, 0x0, 0x0, 0x800}, 0x4)
pipe(&(0x7f0000000000))
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe)
r6 = dup(r5)
listen(r6, 0x0)
accept$packet(r6, 0x0, 0x0)

[  164.101520] kmemleak: Found object by alias at 0x607f1a638f04
[  164.101542] CPU: 0 UID: 0 PID: 4046 Comm: syz-executor.1 Tainted: G        W           6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) 
[  164.101560] Tainted: [W]=WARN
[  164.101564] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  164.101571] Call Trace:
[  164.101575]  <TASK>
[  164.101580]  dump_stack_lvl+0xca/0x120
[  164.101605]  __lookup_object+0x94/0xb0
[  164.101622]  delete_object_full+0x27/0x70
[  164.101643]  free_percpu+0x30/0x1160
[  164.101659]  ? arch_uprobe_clear_state+0x16/0x140
[  164.101680]  futex_hash_free+0x38/0xc0
[  164.101694]  mmput+0x2d3/0x390
[  164.101713]  do_exit+0x79d/0x2970
[  164.101730]  ? __pfx_do_exit+0x10/0x10
[  164.101744]  ? find_held_lock+0x2b/0x80
[  164.101762]  ? get_signal+0x835/0x2340
[  164.101782]  do_group_exit+0xd3/0x2a0
[  164.101797]  get_signal+0x2315/0x2340
[  164.101815]  ? __pfx_task_work_add+0x10/0x10
[  164.101833]  ? __pfx_get_signal+0x10/0x10
[  164.101850]  ? __fput_deferred+0x21a/0x490
[  164.101866]  ? __pfx___fput_deferred+0x10/0x10
[  164.101883]  arch_do_signal_or_restart+0x80/0x790
[  164.101900]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  164.101917]  ? fput+0xc5/0x100
[  164.101931]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  164.101951]  ? __pfx___sys_accept4+0x10/0x10
[  164.101966]  ? l2cap_sock_listen+0x2cb/0x3e0
[  164.101986]  exit_to_user_mode_loop+0x8b/0x110
[  164.101999]  do_syscall_64+0x2f7/0x360
[  164.102011]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  164.102023] RIP: 0033:0x7ff491567b19
[  164.102032] Code: Unable to access opcode bytes at 0x7ff491567aef.
[  164.102037] RSP: 002b:00007ff48eadd188 EFLAGS: 00000246 ORIG_RAX: 000000000000002b
[  164.102048] RAX: fffffffffffffe00 RBX: 00007ff49167af60 RCX: 00007ff491567b19
[  164.102056] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005
[  164.102062] RBP: 00007ff4915c1f6d R08: 0000000000000000 R09: 0000000000000000
[  164.102069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  164.102075] R13: 00007fff93a18c5f R14: 00007ff48eadd300 R15: 0000000000022000
[  164.102093]  </TASK>
[  164.102097] kmemleak: Object (percpu) 0x607f1a638f00 (size 8):
[  164.102103] kmemleak:   comm "syz-executor.5", pid 4069, jiffies 4294830059
[  164.102110] kmemleak:   min_count = 1
[  164.102114] kmemleak:   count = 0
[  164.102118] kmemleak:   flags = 0x21
[  164.102121] kmemleak:   checksum = 0
[  164.102125] kmemleak:   backtrace:
[  164.102128]  pcpu_alloc_noprof+0x87a/0x1170
[  164.102143]  percpu_ref_init+0x37/0x400
[  164.102161]  blkg_alloc+0xe9/0x7d0
[  164.102172]  blkg_create+0xe08/0x1420
[  164.102184]  bio_associate_blkg_from_css+0xe06/0x1380
[  164.102198]  bio_associate_blkg+0x10e/0x2a0
[  164.102212]  bio_init+0x2dd/0x570
[  164.102226]  bio_alloc_bioset+0x4c5/0x8c0
[  164.102240]  do_mpage_readpage.isra.0+0xc9c/0x15e0
[  164.102253]  mpage_readahead+0x31e/0x550
[  164.102265]  read_pages+0x196/0xb10
[  164.102279]  page_cache_ra_unbounded+0x391/0x6a0
[  164.102292]  page_cache_ra_order+0x236/0x2f0
[  164.102305]  page_cache_sync_ra+0x54d/0xaa0
[  164.102318]  filemap_get_pages+0x354/0x18e0
[  164.102328]  filemap_read+0x388/0xcf0
06:36:32 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe)
r2 = dup(r1)
listen(r2, 0x0)
accept$packet(r2, 0x0, 0x0)
r3 = syz_open_dev$mouse(&(0x7f0000000180), 0xfffffffffffffff8, 0xa000)
r4 = syz_open_dev$vcsn(&(0x7f00000001c0), 0x80, 0x200000)
setsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, &(0x7f0000000200), 0x4)
perf_event_open$cgroup(&(0x7f0000000100)={0x0, 0x80, 0xd1, 0x3, 0x5, 0x80, 0x0, 0xfd1e, 0x94020, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_bp={&(0x7f0000000080), 0x2}, 0x20, 0x100, 0xffff, 0x0, 0x54b, 0x50f, 0x5, 0x0, 0x1f, 0x0, 0x58d3}, r2, 0xffffffffffffffff, r3, 0x1)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="a20e73f1b1812c8df6967520cdbfb383417a9437ee7abadfd3289b31374c", 0x1e}], 0x1)

06:36:32 executing program 7:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmstat\x00', 0x0, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe)
r2 = dup(r1)
listen(r2, 0x0)
accept$packet(r2, 0x0, 0x0)
ioctl$EVIOCSABS0(r2, 0x401845c0, &(0x7f0000000000)={0x6, 0x7, 0xd7, 0x7dce, 0x2, 0x80})
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
fcntl$setown(r3, 0x8, 0xffffffffffffffff)
fcntl$getownex(r3, 0x10, &(0x7f0000000040))
r4 = accept4$bt_l2cap(r0, 0x0, &(0x7f0000000080), 0x0)
sendfile(r4, r0, 0x0, 0x8001)

06:36:32 executing program 4:
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = accept(r0, &(0x7f0000000280)=@nl=@unspec, &(0x7f0000000300)=0x80)
ioctl$BTRFS_IOC_SET_FEATURES(r1, 0x40309439, &(0x7f0000000340)={0x3, 0x0, 0x1e})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'lo\x00', <r4=>0x0})
setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x2, 0x6, @link_local}, 0x10)
sendmsg$nl_xfrm(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0c010000130000082bbd7000fedbdf1d00000000000000000000000000000000ac1414aa0000010000000000000000004e2200074e2300000a00406029000000", @ANYRES32=r4, @ANYRES32=0xee00, @ANYBLOB="09000000000000000900000000000000010000000000000004000000000000000400000000000000018000000000000008000000000000000600000000000000ff030000000000004c0000000000000000040000000000000100000000000000ff0000000700000000000003000000001c00040000004e214e240000ff0100000000000000000000000000010a00100000000000000000000c000f00060400000000000020001700010000002bbd700029bd700026bd700025bd70000100000000000000"], 0x10c}, 0x1, 0x0, 0x0, 0x800}, 0x4)
pipe(&(0x7f0000000000))
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe)
r6 = dup(r5)
listen(r6, 0x0)
accept$packet(r6, 0x0, 0x0)

[  164.198310] lo: entered allmulticast mode
[  164.205100] kmemleak: Found object by alias at 0x607f1a639a60
[  164.205129] CPU: 1 UID: 0 PID: 4056 Comm: syz-executor.6 Tainted: G        W           6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) 
[  164.205164] Tainted: [W]=WARN
[  164.205171] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  164.205183] Call Trace:
[  164.205191]  <TASK>
[  164.205200]  dump_stack_lvl+0xca/0x120
[  164.205242]  __lookup_object+0x94/0xb0
[  164.205272]  delete_object_full+0x27/0x70
[  164.205303]  free_percpu+0x30/0x1160
[  164.205334]  ? arch_uprobe_clear_state+0x16/0x140
[  164.205373]  futex_hash_free+0x38/0xc0
[  164.205400]  mmput+0x2d3/0x390
[  164.205436]  do_exit+0x79d/0x2970
[  164.205471]  ? __pfx_do_exit+0x10/0x10
[  164.205499]  ? find_held_lock+0x2b/0x80
[  164.205533]  ? get_signal+0x835/0x2340
[  164.205571]  do_group_exit+0xd3/0x2a0
[  164.205601]  get_signal+0x2315/0x2340
[  164.205636]  ? __pfx_task_work_add+0x10/0x10
[  164.205672]  ? __pfx_get_signal+0x10/0x10
[  164.205706]  ? __fput_deferred+0x21a/0x490
[  164.205736]  ? __pfx___fput_deferred+0x10/0x10
[  164.205770]  arch_do_signal_or_restart+0x80/0x790
[  164.205803]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  164.205844]  ? fput+0xc5/0x100
[  164.205871]  ? __sys_accept4+0x14c/0x1c0
[  164.205901]  ? __pfx___sys_accept4+0x10/0x10
[  164.205941]  exit_to_user_mode_loop+0x8b/0x110
[  164.205965]  do_syscall_64+0x2f7/0x360
[  164.205988]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  164.206011] RIP: 0033:0x7f110b39eb19
[  164.206027] Code: Unable to access opcode bytes at 0x7f110b39eaef.
[  164.206037] RSP: 002b:00007f1108914188 EFLAGS: 00000246 ORIG_RAX: 000000000000002b
[  164.206059] RAX: fffffffffffffe00 RBX: 00007f110b4b1f60 RCX: 00007f110b39eb19
[  164.206073] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006
[  164.206086] RBP: 00007f110b3f8f6d R08: 0000000000000000 R09: 0000000000000000
[  164.206099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  164.206112] R13: 00007ffd3341b11f R14: 00007f1108914300 R15: 0000000000022000
[  164.206146]  </TASK>
[  164.206154] kmemleak: Object (percpu) 0x607f1a639a58 (size 16):
[  164.206167] kmemleak:   comm "syz-executor.7", pid 285, jiffies 4294830886
[  164.206180] kmemleak:   min_count = 1
[  164.206187] kmemleak:   count = 0
[  164.206195] kmemleak:   flags = 0x21
[  164.206202] kmemleak:   checksum = 0
[  164.206209] kmemleak:   backtrace:
[  164.206215]  pcpu_alloc_noprof+0x87a/0x1170
[  164.206244]  __percpu_counter_init_many+0x44/0x360
[  164.206268]  mm_init+0xcac/0x1170
[  164.206284]  copy_process+0x3ab7/0x73c0
[  164.206303]  kernel_clone+0xea/0x7f0
[  164.206322]  __do_sys_clone+0xce/0x120
[  164.206341]  do_syscall_64+0xbf/0x360
[  164.206358]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
06:36:33 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
eventfd(0x20)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x220000)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe)
r1 = dup(r0)
listen(r1, 0x0)
accept$packet(r1, 0x0, 0x0)

06:36:33 executing program 3:
r0 = perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/stat\x00', 0x0, 0x0)
io_submit(0x0, 0x1, &(0x7f00000003c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000)="fa", 0x1}])
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000880)=ANY=[@ANYBLOB="018e00000100000018000080473200004000efb21a2b133b89900dc63bb0b62de6a3366a066a6ecfd1de035aa5a5b31e6818fe45b5da8afd92d5da32e02b406306890f5694e1d3", @ANYRES32=r1, @ANYRES32=<r2=>r0, @ANYBLOB='\x00\x00\x00\x00./file0\x00'])
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
fcntl$setown(r3, 0x8, 0xffffffffffffffff)
fcntl$getownex(r3, 0x10, &(0x7f0000000040))
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe)
r5 = dup(r4)
listen(r5, 0x0)
accept$packet(r5, 0x0, 0x0)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
fcntl$setown(r6, 0x8, 0xffffffffffffffff)
fcntl$getownex(r6, 0x10, &(0x7f0000000040))
r7 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000480))
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
fcntl$setown(r8, 0x8, 0xffffffffffffffff)
fcntl$getownex(r8, 0x10, &(0x7f0000000040))
io_submit(0x0, 0x8, &(0x7f0000000840)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0x9, r1, &(0x7f0000000000)="ffa4f548169a9289b114af2ede27a58e73b8c09e9e45249d83d6897bf2a3eb5b67dcc29e8f8b10bd23f5defc8289533c4c5ba1b3eb0a14174688cb1bcfb8047fb61fcca90e17a9ad903c013a26440a7d1f164400a1f7cd376e2b9d6844defc7407dfd9718da1b00d8735000664497e9700ae6b2adc64840eae002cb80b6146e68aca502f4c6a0176d266bc9c7d67fd26ef23e3a17b82118c808bca37c1a3f797d218de34b53989107a2be071d20d6cc4ca04119a25ab898d6b2d564c3878", 0xbe, 0x4, 0x0, 0x6, r1}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x6, 0xfff8, r0, &(0x7f0000000140)="40e4ec00ede0dca9a0256bfc62503c519aa3c7d40d840526364dfad7de5769dd4cc9db81c9a8fc508a8b0661ae31bd4c3598fb552df70e7679712f883783fe2c9ad8f313b0ad93503ebf56fd989871f31544040b2ad86a6a4eb616227bd5143e6f37cae3faef60b508bb1977110f9b2afccebabe2867a4d25d18b9198e6df3216c464d135ec9a72979edd91484eef97e306f2be6127ddb9476926791be2d4bbca914bad23a4165bb5dcc047433af070ff4dcc3a7efe590b259", 0xb9, 0x269, 0x0, 0x1, r1}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)="6abff7e60c98aa0ec85777cb283cb57ae2700ab39544fc2a0c9317848c454604e1cc3902229941cc78e72a3fca8787d97424d42963a4686e83edf4a620418c5a0cce8c660a353699622822be1b241382563555cac0e2fa68bab55b614aa17aa65c8c1d867400609df16ec66b64a4a1186ac5d2acb8a3569816e85d5a9f9db4897f197d953dc70949ccff0ed610079873373f84aebd626d7678ed9b5d45cee68b99b1599b426dcab94fc31f32572875", 0xaf, 0x100000001, 0x0, 0x1, r2}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x3, 0x8, r3, &(0x7f0000000380)="592073d2e637ee453e8f8b1c892e2fbed9fb7c89cc48c2d448e0d946c308802b989775080d", 0x25, 0x80, 0x0, 0x0, r5}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x8, 0x0, r6, &(0x7f0000000400)="800f286b2c19d61626de3beb88649f963d730fb897bd1080d7850c23655fff9e1c17962c9b6f2e9671d4b544ff19", 0x2e, 0x8, 0x0, 0x3, r1}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x3f, r7, &(0x7f0000000540)="26f8bab65c268b36210ff3537833cc6caf2d1af5bf615d2bde308b4d25ec9419d96e3b5b7c880a3edc79d4e7f707b2b7c559249e27f12f02d42cd832cda747103b6cd5ae40e2cb922519433900487ac57761e179d1dc50be0a7fd48a885abe38fcb74fc4515d654a491ac90e1ab65f81a274ede30d7cd1e33058d0316032213aa783a02b258591b892434bb82ebb345d4ebdbe0a3b82f4b29648663354aec7bcf5e0ebd7a6086ed798cc4e1de1ed00b33648579ad2f7d46a7e94d63f38", 0xbd, 0x7c4, 0x0, 0x1}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x1, r0, &(0x7f0000000640)="799a541a7d6227213e83d040eb0d672cf6b54a766675c0fd775294480476ca470464791d0b6d37cc8a10a391683b42ef651018b7457530b92f354fc8686f63533e91b6199a6fdffc6e388aaab45b35899cad703eec09bfe448c1930c3f8291bfe05441ed7ce0c9ba4b02ed6d8fce2ebab0d8f35063c2afe98f3f3c704c8cdc92614b76b1e0d058d13075", 0x8a, 0x7, 0x0, 0x3}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x3, 0xfff7, r8, &(0x7f0000000740)="919e85d5d77e93388e697e699ecf4b647d396585aae888cef6b375839a45b93f84da9eb8cf36f33722a4a1f089acaf7d5dc54fee171a70191c63fadae883174b192c87589ea370efd49922bc468dec3016f4ea09b7efacee7266d957eff318d3abac8343cac3e607781916a380569e47a76f612e912e4eec8cbd205f871a5bd8b075ad64049f052913cf5362e11cf040b0ab3ce479dcffb044ec1ff95a0aa564f000ae407a841a1e37389a791e235517958e0b8f", 0xb4, 0x1d2f, 0x0, 0x1}])

[  164.386449] lo: entered allmulticast mode
[  164.426732] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000032: 0000 [#1] SMP KASAN NOPTI
[  164.428925] KASAN: null-ptr-deref in range [0x0000000000000190-0x0000000000000197]
[  164.430274] CPU: 1 UID: 0 PID: 4105 Comm: syz-executor.3 Tainted: G        W           6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) 
[  164.437912] Tainted: [W]=WARN
[  164.438412] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  164.439953] RIP: 0010:perf_tp_event+0x175/0xe70
[  164.440837] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[  164.443954] RSP: 0018:ffff88801ab57780 EFLAGS: 00010012
[  164.444894] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: ffffc90000de4000
[  164.446223] RDX: 0000000000040000 RSI: ffffffff818995b7 RDI: 0000000000000191
[  164.447434] RBP: ffff88801ab579f0 R08: ffff88806cf31340 R09: ffffe8ffffd15f00
[  164.448733] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
[  164.450086] R13: 0000000000000014 R14: ffff88806cf31340 R15: dffffc0000000000
[  164.451365] FS:  00007f14c79e1700(0000) GS:ffff8880e56dd000(0000) knlGS:0000000000000000
[  164.452711] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  164.453854] CR2: 00007f14ca57f018 CR3: 000000001fd76000 CR4: 0000000000350ef0
[  164.455020] Call Trace:
[  164.455472]  <TASK>
[  164.455919]  ? perf_trace_lock+0xb5/0x5d0
[  164.456688]  ? __pfx_perf_tp_event+0x10/0x10
[  164.457520]  ? visit_groups_merge.constprop.0.isra.0+0x6e7/0x1150
[  164.458586]  ? lock_acquire+0x15e/0x2f0
[  164.459319]  ? __pfx_visit_groups_merge.constprop.0.isra.0+0x10/0x10
[  164.460449]  ? lock_is_held_type+0x9e/0x120
[  164.461262]  ? lock_is_held_type+0x9e/0x120
[  164.462053]  ? perf_trace_lock+0xb5/0x5d0
[  164.462823]  ? perf_trace_lock+0xb5/0x5d0
[  164.463480]  ? __pfx_perf_trace_lock+0x10/0x10
[  164.464317]  ? __pfx_perf_trace_lock+0x10/0x10
[  164.465179]  ? find_held_lock+0x2b/0x80
[  164.465953]  ? perf_trace_run_bpf_submit+0xef/0x180
[  164.466853]  ? lock_release+0xc8/0x290
[  164.467471]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  164.468501]  perf_trace_run_bpf_submit+0xef/0x180
[  164.469395]  perf_trace_preemptirq_template+0x259/0x430
[  164.470382]  ? mark_held_locks+0x49/0x80
[  164.471025]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  164.472093]  ? perf_trace_lock+0xb5/0x5d0
[  164.472855]  ? _raw_spin_lock_irqsave+0x53/0x60
[  164.473726]  trace_irq_disable.constprop.0+0xa6/0x100
[  164.474620]  _raw_spin_lock_irqsave+0x53/0x60
[  164.475332]  try_to_wake_up+0xa0/0x11d0
[  164.475973]  ? __pfx_try_to_wake_up+0x10/0x10
[  164.476845]  ? plist_del+0x122/0x270
[  164.477561]  ? find_held_lock+0x2b/0x80
[  164.478310]  ? futex_wake+0x474/0x540
[  164.479033]  wake_up_q+0xa1/0x130
[  164.479709]  futex_wake+0x47e/0x540
[  164.480392]  ? __pfx_futex_wake+0x10/0x10
[  164.481080]  ? __do_sys_perf_event_open+0x44d/0x2c20
[  164.482013]  ? lock_release+0xc8/0x290
[  164.482649]  do_futex+0x26d/0x370
[  164.483357]  ? __pfx_do_futex+0x10/0x10
[  164.483989]  ? __pfx___do_sys_perf_event_open+0x10/0x10
[  164.484816]  ? find_held_lock+0x2b/0x80
[  164.485464]  __x64_sys_futex+0x1c9/0x4d0
[  164.486108]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  164.487161]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  164.488165]  ? __pfx___x64_sys_futex+0x10/0x10
[  164.488889]  ? xfd_validate_state+0x55/0x180
[  164.489725]  do_syscall_64+0xbf/0x360
[  164.490457]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  164.491385] RIP: 0033:0x7f14ca46bb19
[  164.492086] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  164.495188] RSP: 002b:00007f14c79e1218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  164.496470] RAX: ffffffffffffffda RBX: 00007f14ca57ef68 RCX: 00007f14ca46bb19
[  164.497713] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f14ca57ef6c
[  164.499021] RBP: 00007f14ca57ef60 R08: 000000000000000e R09: 0000000000000000
[  164.500342] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f14ca57ef6c
[  164.501667] R13: 00007ffc4974a7cf R14: 00007f14c79e1300 R15: 0000000000022000
[  164.502912]  </TASK>
[  164.503341] Modules linked in:
[  164.503878] ---[ end trace 0000000000000000 ]---
[  164.504723] RIP: 0010:perf_tp_event+0x175/0xe70
[  164.505602] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[  164.508723] RSP: 0018:ffff88801ab57780 EFLAGS: 00010012
[  164.509701] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: ffffc90000de4000
[  164.510915] RDX: 0000000000040000 RSI: ffffffff818995b7 RDI: 0000000000000191
[  164.512229] RBP: ffff88801ab579f0 R08: ffff88806cf31340 R09: ffffe8ffffd15f00
[  164.513575] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
[  164.514848] R13: 0000000000000014 R14: ffff88806cf31340 R15: dffffc0000000000
[  164.516194] FS:  00007f14c79e1700(0000) GS:ffff8880e56dd000(0000) knlGS:0000000000000000
[  164.517620] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  164.518678] CR2: 00007f14ca57f018 CR3: 000000001fd76000 CR4: 0000000000350ef0
[  164.519897] note: syz-executor.3[4105] exited with irqs disabled
[  164.521174] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000032: 0000 [#2] SMP KASAN NOPTI
[  164.523115] KASAN: null-ptr-deref in range [0x0000000000000190-0x0000000000000197]
[  164.524518] CPU: 1 UID: 0 PID: 4105 Comm: syz-executor.3 Tainted: G      D W           6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) 
[  164.526596] Tainted: [D]=DIE, [W]=WARN
[  164.527328] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  164.528706] RIP: 0010:perf_tp_event+0x175/0xe70
[  164.529655] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[  164.532871] RSP: 0018:ffff88806cf08b40 EFLAGS: 00010012
[  164.533942] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: 0000000000000002
[  164.535256] RDX: ffff888015b51b80 RSI: ffffffff818995b7 RDI: 0000000000000191
[  164.536468] RBP: ffff88806cf08db0 R08: ffff88806cf313e8 R09: ffffe8ffffd15f00
[  164.537795] R10: 0000000000000000 R11: ffff888017cb5898 R12: dffffc0000000000
[  164.538891] R13: 0000000000000014 R14: ffff88806cf313e8 R15: dffffc0000000000
[  164.540240] FS:  00007f14c79e1700(0000) GS:ffff8880e56dd000(0000) knlGS:0000000000000000
[  164.541745] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  164.542761] CR2: 00007f14ca57f018 CR3: 000000001fd76000 CR4: 0000000000350ef0
[  164.544078] Call Trace:
[  164.544488]  <IRQ>
[  164.544848]  ? __pfx_perf_tp_event+0x10/0x10
[  164.545685]  ? update_load_avg+0x17d/0x1ef0
[  164.546449]  ? perf_trace_lock+0xb5/0x5d0
[  164.547227]  ? perf_trace_lock+0xb5/0x5d0
[  164.548001]  ? update_cfs_group+0x11d/0x260
[  164.548684]  ? kvm_sched_clock_read+0x16/0x30
[  164.549410]  ? __pfx_perf_trace_lock+0x10/0x10
[  164.550137]  ? __pfx_perf_trace_lock+0x10/0x10
[  164.550874]  ? check_preempt_wakeup_fair+0x6e/0x950
[  164.551673]  ? try_to_wake_up+0x8ae/0x11d0
[  164.552352]  ? lock_release+0x1c7/0x290
[  164.552989]  ? lock_release+0x1c7/0x290
[  164.553624]  ? do_raw_spin_unlock+0x53/0x220
[  164.554343]  ? _raw_spin_unlock_irqrestore+0x22/0x50
[  164.555153]  ? try_to_wake_up+0x8ae/0x11d0
[  164.555829]  ? perf_trace_lock+0xb5/0x5d0
[  164.556492]  ? perf_trace_run_bpf_submit+0xef/0x180
[  164.557295]  ? lock_release+0x1c7/0x290
[  164.557937]  ? perf_trace_lock+0xb5/0x5d0
[  164.558592]  perf_trace_run_bpf_submit+0xef/0x180
[  164.559360]  perf_trace_preemptirq_template+0x259/0x430
[  164.560209]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  164.561136]  ? read_tsc+0x9/0x20
[  164.561686]  ? ktime_get+0x16d/0x270
[  164.562281]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  164.563205]  ? __pfx_lapic_next_deadline+0x10/0x10
[  164.563978]  ? clockevents_program_event+0x135/0x360
[  164.564787]  ? _raw_spin_lock_irq+0x42/0x50
[  164.565458]  trace_irq_disable.constprop.0+0xa6/0x100
[  164.566269]  _raw_spin_lock_irq+0x42/0x50
[  164.566943]  run_timer_softirq+0x190/0x210
[  164.567622]  handle_softirqs+0x1b1/0x770
[  164.568289]  __irq_exit_rcu+0xc4/0x100
[  164.568932]  irq_exit_rcu+0x9/0x20
[  164.569514]  sysvec_apic_timer_interrupt+0x70/0x80
[  164.570305]  </IRQ>
[  164.570672]  <TASK>
[  164.571039]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  164.571860] RIP: 0010:make_task_dead+0xa2/0x3b0
[  164.572616] Code: 38 00 85 db 0f 84 21 01 00 00 e8 d9 96 38 00 9c 5b 81 e3 00 02 00 00 31 ff 48 89 de e8 27 92 38 00 48 85 db 0f 84 17 01 00 00 <e8> b9 96 38 00 31 ff 65 8b 1d 60 df 48 06 81 e3 ff ff ff 7f 89 de
[  164.575457] RSP: 0018:ffff88801ab57f28 EFLAGS: 00000246
[  164.576296] RAX: 0000000000000001 RBX: ffff888015b51b80 RCX: ffffffff817c2b86
[  164.577410] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff813b5234
[  164.578518] RBP: 000000000000000b R08: 0000000000000000 R09: 0000000000000000
[  164.579627] R10: ffffffff8643ac57 R11: 0000000000000001 R12: ffff888015b51b80
[  164.580741] R13: 0000000000000000 R14: dffffc0000000032 R15: 0000000000000000
[  164.581876]  ? trace_irq_enable.constprop.0+0x26/0x100
[  164.582706]  ? make_task_dead+0x214/0x3b0
[  164.583378]  ? make_task_dead+0x214/0x3b0
[  164.584043]  ? do_syscall_64+0xbf/0x360
[  164.584679]  rewind_stack_and_make_dead+0x16/0x20
[  164.585454] RIP: 0033:0x7f14ca46bb19
[  164.586049] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  164.588813] RSP: 002b:00007f14c79e1218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  164.590003] RAX: ffffffffffffffda RBX: 00007f14ca57ef68 RCX: 00007f14ca46bb19
[  164.591123] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f14ca57ef6c
[  164.592238] RBP: 00007f14ca57ef60 R08: 000000000000000e R09: 0000000000000000
[  164.593365] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f14ca57ef6c
[  164.594481] R13: 00007ffc4974a7cf R14: 00007f14c79e1300 R15: 0000000000022000
[  164.595623]  </TASK>
[  164.596000] Modules linked in:
[  164.596515] ---[ end trace 0000000000000000 ]---
[  164.597260] RIP: 0010:perf_tp_event+0x175/0xe70
[  164.598010] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[  164.600822] RSP: 0018:ffff88801ab57780 EFLAGS: 00010012
[  164.601667] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: ffffc90000de4000
[  164.602783] RDX: 0000000000040000 RSI: ffffffff818995b7 RDI: 0000000000000191
[  164.603899] RBP: ffff88801ab579f0 R08: ffff88806cf31340 R09: ffffe8ffffd15f00
[  164.605034] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
[  164.606144] R13: 0000000000000014 R14: ffff88806cf31340 R15: dffffc0000000000
[  164.607260] FS:  00007f14c79e1700(0000) GS:ffff8880e56dd000(0000) knlGS:0000000000000000
[  164.608521] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  164.609440] CR2: 00007f14ca57f018 CR3: 000000001fd76000 CR4: 0000000000350ef0
[  164.610572] Kernel panic - not syncing: Fatal exception in interrupt
[  164.611789] Kernel Offset: disabled
[  164.612367] ---[ end Kernel panic - not syncing: Fatal exception in interrupt ]---

VM DIAGNOSIS:
06:36:33  Registers:
info registers vcpu 0
RAX=0000000000040050 RBX=ffff88800a9f8000 RCX=ffffc90006a12000 RDX=00000000000101f7
RSI=ffffffff82549154 RDI=0000000000000007 RBP=ffffffff860d0540 RSP=ffff8880158d6d28
R8 =0000000000000000 R9 =0000000000006d2c R10=00000000000101f7 R11=0000000000000000
R12=00000000000101f7 R13=ffffed100153f001 R14=dffffc0000000000 R15=ffff88800a9f8060
RIP=ffffffff82549158 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007f99f268e700 00000000 00000000
GS =0000 ffff8880e55dd000 00000000 00000000
LDT=0000 fffffe2400000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000564d130d6ff8 CR3=000000001eefc000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=ff00000000ff000000000000000000ff XMM01=25252525252525252525252525252525
XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000
XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd
RSI=ffffffff828e3230 RDI=ffffffff88724180 RBP=ffffffff88724140 RSP=ffff88801ab57088
R8 =0000000000000000 R9 =ffffed10016cd046 R10=00000000000fe503 R11=552031203a555043
R12=0000000000000823 R13=0000000000000020 R14=fffffbfff10e4882 R15=dffffc0000000000
RIP=ffffffff828e3285 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007f14c79e1700 00000000 00000000
GS =0000 ffff8880e56dd000 00000000 00000000
LDT=0000 fffffe5e00000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f14ca57f018 CR3=000000001fd76000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00007f14ca5527c000007f14ca5527c8
XMM02=00007f14ca5527e000007f14ca5527c0 XMM03=00007f14ca5527c800007f14ca5527c0
XMM04=ffffffff0000ff00000000ff00000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000