Warning: Permanently added '[localhost]:44916' (ECDSA) to the list of known hosts. 2025/08/30 17:37:08 fuzzer started 2025/08/30 17:37:09 dialing manager at localhost:43077 syzkaller login: [ 55.950591] cgroup: Unknown subsys name 'net' [ 56.133464] cgroup: Unknown subsys name 'cpuset' [ 56.168519] cgroup: Unknown subsys name 'rlimit' 2025/08/30 17:37:19 syscalls: 2214 2025/08/30 17:37:19 code coverage: enabled 2025/08/30 17:37:19 comparison tracing: enabled 2025/08/30 17:37:19 extra coverage: enabled 2025/08/30 17:37:19 setuid sandbox: enabled 2025/08/30 17:37:19 namespace sandbox: enabled 2025/08/30 17:37:19 Android sandbox: enabled 2025/08/30 17:37:19 fault injection: enabled 2025/08/30 17:37:19 leak checking: enabled 2025/08/30 17:37:19 net packet injection: enabled 2025/08/30 17:37:19 net device setup: enabled 2025/08/30 17:37:19 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/08/30 17:37:19 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/08/30 17:37:19 USB emulation: enabled 2025/08/30 17:37:19 hci packet injection: enabled 2025/08/30 17:37:19 wifi device emulation: enabled 2025/08/30 17:37:19 802.15.4 emulation: enabled 2025/08/30 17:37:19 fetching corpus: 50, signal 20686/22493 (executing program) 2025/08/30 17:37:19 fetching corpus: 100, signal 25682/29203 (executing program) 2025/08/30 17:37:20 fetching corpus: 150, signal 36424/41400 (executing program) 2025/08/30 17:37:20 fetching corpus: 200, signal 41562/48001 (executing program) 2025/08/30 17:37:20 fetching corpus: 250, signal 46016/53852 (executing program) 2025/08/30 17:37:20 fetching corpus: 300, signal 49777/59005 (executing program) 2025/08/30 17:37:20 fetching corpus: 350, signal 53430/63975 (executing program) 2025/08/30 17:37:20 fetching corpus: 400, signal 59056/70647 (executing program) 2025/08/30 17:37:20 fetching corpus: 450, signal 61578/74449 (executing program) 2025/08/30 17:37:20 fetching corpus: 500, signal 64566/78605 (executing program) 2025/08/30 17:37:20 fetching corpus: 550, signal 69728/84667 (executing program) 2025/08/30 17:37:20 fetching corpus: 600, signal 72097/88128 (executing program) 2025/08/30 17:37:20 fetching corpus: 650, signal 76032/92965 (executing program) 2025/08/30 17:37:20 fetching corpus: 700, signal 79231/96998 (executing program) 2025/08/30 17:37:20 fetching corpus: 750, signal 81764/100458 (executing program) 2025/08/30 17:37:21 fetching corpus: 800, signal 83647/103289 (executing program) 2025/08/30 17:37:21 fetching corpus: 850, signal 87172/107514 (executing program) 2025/08/30 17:37:21 fetching corpus: 900, signal 89635/110767 (executing program) 2025/08/30 17:37:21 fetching corpus: 950, signal 92003/113895 (executing program) 2025/08/30 17:37:21 fetching corpus: 1000, signal 95358/117767 (executing program) 2025/08/30 17:37:21 fetching corpus: 1050, signal 96698/119981 (executing program) 2025/08/30 17:37:21 fetching corpus: 1100, signal 98257/122287 (executing program) 2025/08/30 17:37:21 fetching corpus: 1150, signal 99813/124680 (executing program) 2025/08/30 17:37:21 fetching corpus: 1200, signal 102698/128034 (executing program) 2025/08/30 17:37:21 fetching corpus: 1250, signal 104933/130813 (executing program) 2025/08/30 17:37:21 fetching corpus: 1300, signal 107162/133619 (executing program) 2025/08/30 17:37:22 fetching corpus: 1350, signal 108326/135531 (executing program) 2025/08/30 17:37:22 fetching corpus: 1400, signal 110480/138133 (executing program) 2025/08/30 17:37:22 fetching corpus: 1450, signal 111636/139984 (executing program) 2025/08/30 17:37:22 fetching corpus: 1500, signal 112615/141756 (executing program) 2025/08/30 17:37:22 fetching corpus: 1550, signal 113558/143404 (executing program) 2025/08/30 17:37:22 fetching corpus: 1600, signal 115007/145387 (executing program) 2025/08/30 17:37:22 fetching corpus: 1650, signal 116649/147480 (executing program) 2025/08/30 17:37:22 fetching corpus: 1700, signal 117152/148733 (executing program) 2025/08/30 17:37:22 fetching corpus: 1750, signal 118254/150422 (executing program) 2025/08/30 17:37:22 fetching corpus: 1800, signal 119119/151962 (executing program) 2025/08/30 17:37:22 fetching corpus: 1850, signal 120046/153507 (executing program) 2025/08/30 17:37:22 fetching corpus: 1900, signal 120884/154942 (executing program) 2025/08/30 17:37:23 fetching corpus: 1950, signal 121918/156514 (executing program) 2025/08/30 17:37:23 fetching corpus: 2000, signal 122932/158059 (executing program) 2025/08/30 17:37:23 fetching corpus: 2050, signal 123657/159386 (executing program) 2025/08/30 17:37:23 fetching corpus: 2100, signal 124390/160679 (executing program) 2025/08/30 17:37:23 fetching corpus: 2150, signal 124953/161856 (executing program) 2025/08/30 17:37:23 fetching corpus: 2200, signal 125780/163184 (executing program) 2025/08/30 17:37:23 fetching corpus: 2250, signal 127116/164939 (executing program) 2025/08/30 17:37:23 fetching corpus: 2300, signal 128213/166376 (executing program) 2025/08/30 17:37:23 fetching corpus: 2350, signal 129204/167741 (executing program) 2025/08/30 17:37:23 fetching corpus: 2400, signal 129783/168917 (executing program) 2025/08/30 17:37:24 fetching corpus: 2450, signal 130577/170127 (executing program) 2025/08/30 17:37:24 fetching corpus: 2500, signal 131583/171516 (executing program) 2025/08/30 17:37:24 fetching corpus: 2550, signal 132298/172661 (executing program) 2025/08/30 17:37:24 fetching corpus: 2600, signal 132880/173744 (executing program) 2025/08/30 17:37:24 fetching corpus: 2650, signal 133471/174818 (executing program) 2025/08/30 17:37:24 fetching corpus: 2700, signal 134237/176040 (executing program) 2025/08/30 17:37:24 fetching corpus: 2750, signal 135112/177244 (executing program) 2025/08/30 17:37:24 fetching corpus: 2800, signal 135608/178231 (executing program) 2025/08/30 17:37:24 fetching corpus: 2850, signal 137004/179642 (executing program) 2025/08/30 17:37:24 fetching corpus: 2900, signal 137795/180738 (executing program) 2025/08/30 17:37:24 fetching corpus: 2950, signal 138408/181771 (executing program) 2025/08/30 17:37:25 fetching corpus: 3000, signal 138935/182753 (executing program) 2025/08/30 17:37:25 fetching corpus: 3050, signal 139967/183921 (executing program) 2025/08/30 17:37:25 fetching corpus: 3100, signal 140569/184864 (executing program) 2025/08/30 17:37:25 fetching corpus: 3150, signal 141465/185956 (executing program) 2025/08/30 17:37:25 fetching corpus: 3200, signal 142205/187075 (executing program) 2025/08/30 17:37:25 fetching corpus: 3250, signal 142933/188078 (executing program) 2025/08/30 17:37:25 fetching corpus: 3300, signal 144382/189390 (executing program) 2025/08/30 17:37:25 fetching corpus: 3350, signal 145053/190338 (executing program) 2025/08/30 17:37:25 fetching corpus: 3400, signal 145546/191209 (executing program) 2025/08/30 17:37:25 fetching corpus: 3450, signal 146241/192151 (executing program) 2025/08/30 17:37:25 fetching corpus: 3500, signal 146934/193064 (executing program) 2025/08/30 17:37:26 fetching corpus: 3550, signal 147372/193856 (executing program) 2025/08/30 17:37:26 fetching corpus: 3600, signal 148063/194765 (executing program) 2025/08/30 17:37:26 fetching corpus: 3650, signal 148566/195559 (executing program) 2025/08/30 17:37:26 fetching corpus: 3700, signal 149241/196435 (executing program) 2025/08/30 17:37:26 fetching corpus: 3750, signal 149756/197268 (executing program) 2025/08/30 17:37:26 fetching corpus: 3800, signal 150177/198012 (executing program) 2025/08/30 17:37:26 fetching corpus: 3850, signal 150885/198817 (executing program) 2025/08/30 17:37:26 fetching corpus: 3900, signal 151362/199590 (executing program) 2025/08/30 17:37:26 fetching corpus: 3950, signal 151785/200321 (executing program) 2025/08/30 17:37:26 fetching corpus: 4000, signal 152336/201111 (executing program) 2025/08/30 17:37:26 fetching corpus: 4050, signal 152771/201861 (executing program) 2025/08/30 17:37:27 fetching corpus: 4100, signal 153249/202568 (executing program) 2025/08/30 17:37:27 fetching corpus: 4150, signal 153922/203316 (executing program) 2025/08/30 17:37:27 fetching corpus: 4200, signal 154561/204057 (executing program) 2025/08/30 17:37:27 fetching corpus: 4250, signal 155097/204784 (executing program) 2025/08/30 17:37:27 fetching corpus: 4300, signal 155586/205504 (executing program) 2025/08/30 17:37:27 fetching corpus: 4350, signal 156093/206183 (executing program) 2025/08/30 17:37:27 fetching corpus: 4400, signal 156500/206886 (executing program) 2025/08/30 17:37:27 fetching corpus: 4450, signal 156910/207544 (executing program) 2025/08/30 17:37:27 fetching corpus: 4500, signal 157258/208178 (executing program) 2025/08/30 17:37:27 fetching corpus: 4550, signal 157797/208855 (executing program) 2025/08/30 17:37:27 fetching corpus: 4600, signal 158326/209518 (executing program) 2025/08/30 17:37:27 fetching corpus: 4650, signal 159007/210209 (executing program) 2025/08/30 17:37:28 fetching corpus: 4700, signal 159498/210810 (executing program) 2025/08/30 17:37:28 fetching corpus: 4750, signal 159777/211359 (executing program) 2025/08/30 17:37:28 fetching corpus: 4800, signal 160134/211938 (executing program) 2025/08/30 17:37:28 fetching corpus: 4850, signal 160671/212549 (executing program) 2025/08/30 17:37:28 fetching corpus: 4900, signal 161039/213100 (executing program) 2025/08/30 17:37:28 fetching corpus: 4950, signal 161553/213721 (executing program) 2025/08/30 17:37:28 fetching corpus: 5000, signal 161954/214239 (executing program) 2025/08/30 17:37:28 fetching corpus: 5050, signal 162220/214781 (executing program) 2025/08/30 17:37:29 fetching corpus: 5100, signal 162608/215313 (executing program) 2025/08/30 17:37:29 fetching corpus: 5150, signal 163053/215851 (executing program) 2025/08/30 17:37:29 fetching corpus: 5200, signal 163433/216368 (executing program) 2025/08/30 17:37:29 fetching corpus: 5250, signal 163804/216861 (executing program) 2025/08/30 17:37:29 fetching corpus: 5300, signal 164370/217401 (executing program) 2025/08/30 17:37:29 fetching corpus: 5350, signal 164752/217889 (executing program) 2025/08/30 17:37:29 fetching corpus: 5400, signal 165305/218113 (executing program) 2025/08/30 17:37:29 fetching corpus: 5450, signal 165750/218114 (executing program) 2025/08/30 17:37:29 fetching corpus: 5500, signal 166116/218184 (executing program) 2025/08/30 17:37:29 fetching corpus: 5550, signal 166506/218185 (executing program) 2025/08/30 17:37:30 fetching corpus: 5600, signal 166848/218185 (executing program) 2025/08/30 17:37:30 fetching corpus: 5650, signal 167144/218187 (executing program) 2025/08/30 17:37:30 fetching corpus: 5700, signal 167846/218205 (executing program) 2025/08/30 17:37:30 fetching corpus: 5750, signal 168183/218238 (executing program) 2025/08/30 17:37:30 fetching corpus: 5800, signal 168545/218278 (executing program) 2025/08/30 17:37:30 fetching corpus: 5850, signal 169021/218285 (executing program) 2025/08/30 17:37:30 fetching corpus: 5900, signal 169429/218290 (executing program) 2025/08/30 17:37:30 fetching corpus: 5950, signal 169783/218301 (executing program) 2025/08/30 17:37:30 fetching corpus: 6000, signal 170058/218303 (executing program) 2025/08/30 17:37:30 fetching corpus: 6050, signal 170697/218351 (executing program) 2025/08/30 17:37:30 fetching corpus: 6100, signal 171028/218352 (executing program) 2025/08/30 17:37:30 fetching corpus: 6150, signal 171968/218356 (executing program) 2025/08/30 17:37:31 fetching corpus: 6200, signal 172202/218373 (executing program) 2025/08/30 17:37:31 fetching corpus: 6250, signal 172697/218389 (executing program) 2025/08/30 17:37:31 fetching corpus: 6300, signal 173077/218402 (executing program) 2025/08/30 17:37:31 fetching corpus: 6350, signal 173586/218408 (executing program) 2025/08/30 17:37:31 fetching corpus: 6400, signal 173893/218419 (executing program) 2025/08/30 17:37:31 fetching corpus: 6450, signal 174161/218441 (executing program) 2025/08/30 17:37:31 fetching corpus: 6500, signal 174703/218543 (executing program) 2025/08/30 17:37:31 fetching corpus: 6550, signal 175001/218551 (executing program) 2025/08/30 17:37:31 fetching corpus: 6600, signal 175203/218553 (executing program) 2025/08/30 17:37:31 fetching corpus: 6650, signal 175649/218561 (executing program) 2025/08/30 17:37:31 fetching corpus: 6700, signal 175854/218571 (executing program) 2025/08/30 17:37:32 fetching corpus: 6750, signal 176238/218572 (executing program) 2025/08/30 17:37:32 fetching corpus: 6800, signal 176576/218577 (executing program) 2025/08/30 17:37:32 fetching corpus: 6850, signal 176841/218583 (executing program) 2025/08/30 17:37:32 fetching corpus: 6900, signal 177256/218588 (executing program) 2025/08/30 17:37:32 fetching corpus: 6950, signal 177508/218588 (executing program) 2025/08/30 17:37:32 fetching corpus: 7000, signal 177760/218589 (executing program) 2025/08/30 17:37:32 fetching corpus: 7050, signal 177986/218591 (executing program) 2025/08/30 17:37:32 fetching corpus: 7100, signal 178247/218599 (executing program) 2025/08/30 17:37:32 fetching corpus: 7150, signal 178656/218610 (executing program) 2025/08/30 17:37:32 fetching corpus: 7200, signal 178955/218611 (executing program) 2025/08/30 17:37:32 fetching corpus: 7250, signal 179229/218691 (executing program) 2025/08/30 17:37:32 fetching corpus: 7300, signal 179437/218711 (executing program) 2025/08/30 17:37:32 fetching corpus: 7350, signal 179793/218719 (executing program) 2025/08/30 17:37:33 fetching corpus: 7400, signal 180152/218732 (executing program) 2025/08/30 17:37:33 fetching corpus: 7450, signal 180460/218761 (executing program) 2025/08/30 17:37:33 fetching corpus: 7500, signal 180757/218764 (executing program) 2025/08/30 17:37:33 fetching corpus: 7550, signal 181080/218777 (executing program) 2025/08/30 17:37:33 fetching corpus: 7600, signal 181321/218780 (executing program) 2025/08/30 17:37:33 fetching corpus: 7650, signal 181705/218866 (executing program) 2025/08/30 17:37:33 fetching corpus: 7700, signal 181961/218896 (executing program) 2025/08/30 17:37:33 fetching corpus: 7750, signal 182313/218896 (executing program) 2025/08/30 17:37:33 fetching corpus: 7800, signal 182562/218898 (executing program) 2025/08/30 17:37:33 fetching corpus: 7850, signal 182886/218907 (executing program) 2025/08/30 17:37:33 fetching corpus: 7900, signal 183174/218909 (executing program) 2025/08/30 17:37:33 fetching corpus: 7950, signal 183453/218932 (executing program) 2025/08/30 17:37:34 fetching corpus: 8000, signal 183749/218934 (executing program) 2025/08/30 17:37:34 fetching corpus: 8050, signal 183933/218935 (executing program) 2025/08/30 17:37:34 fetching corpus: 8100, signal 184347/218935 (executing program) 2025/08/30 17:37:34 fetching corpus: 8150, signal 184610/218942 (executing program) 2025/08/30 17:37:34 fetching corpus: 8200, signal 184771/218945 (executing program) 2025/08/30 17:37:34 fetching corpus: 8250, signal 185117/218945 (executing program) 2025/08/30 17:37:34 fetching corpus: 8300, signal 185580/218950 (executing program) 2025/08/30 17:37:34 fetching corpus: 8350, signal 185857/218950 (executing program) 2025/08/30 17:37:34 fetching corpus: 8400, signal 186073/218953 (executing program) 2025/08/30 17:37:34 fetching corpus: 8450, signal 186387/218956 (executing program) 2025/08/30 17:37:34 fetching corpus: 8500, signal 186628/218963 (executing program) 2025/08/30 17:37:35 fetching corpus: 8550, signal 186977/218963 (executing program) 2025/08/30 17:37:35 fetching corpus: 8600, signal 187325/218963 (executing program) 2025/08/30 17:37:35 fetching corpus: 8650, signal 187510/218970 (executing program) 2025/08/30 17:37:35 fetching corpus: 8700, signal 187735/218975 (executing program) 2025/08/30 17:37:35 fetching corpus: 8750, signal 188057/218977 (executing program) 2025/08/30 17:37:35 fetching corpus: 8800, signal 188332/218981 (executing program) 2025/08/30 17:37:35 fetching corpus: 8850, signal 188537/218981 (executing program) 2025/08/30 17:37:35 fetching corpus: 8900, signal 188776/218982 (executing program) 2025/08/30 17:37:35 fetching corpus: 8950, signal 188942/218991 (executing program) 2025/08/30 17:37:35 fetching corpus: 9000, signal 189190/219000 (executing program) 2025/08/30 17:37:35 fetching corpus: 9050, signal 189468/219022 (executing program) 2025/08/30 17:37:36 fetching corpus: 9100, signal 189870/219024 (executing program) 2025/08/30 17:37:36 fetching corpus: 9150, signal 190140/219029 (executing program) 2025/08/30 17:37:36 fetching corpus: 9200, signal 190378/219038 (executing program) 2025/08/30 17:37:36 fetching corpus: 9250, signal 190643/219045 (executing program) 2025/08/30 17:37:36 fetching corpus: 9300, signal 190873/219070 (executing program) 2025/08/30 17:37:36 fetching corpus: 9350, signal 191106/219074 (executing program) 2025/08/30 17:37:36 fetching corpus: 9400, signal 191314/219081 (executing program) 2025/08/30 17:37:36 fetching corpus: 9450, signal 191548/219085 (executing program) 2025/08/30 17:37:36 fetching corpus: 9500, signal 191758/219088 (executing program) 2025/08/30 17:37:36 fetching corpus: 9550, signal 191969/219119 (executing program) 2025/08/30 17:37:36 fetching corpus: 9600, signal 192262/219119 (executing program) 2025/08/30 17:37:37 fetching corpus: 9650, signal 192463/219119 (executing program) 2025/08/30 17:37:37 fetching corpus: 9700, signal 192702/219127 (executing program) 2025/08/30 17:37:37 fetching corpus: 9750, signal 192971/219128 (executing program) 2025/08/30 17:37:37 fetching corpus: 9800, signal 193297/219141 (executing program) 2025/08/30 17:37:37 fetching corpus: 9850, signal 193475/219146 (executing program) 2025/08/30 17:37:37 fetching corpus: 9900, signal 193716/219148 (executing program) 2025/08/30 17:37:37 fetching corpus: 9950, signal 193968/219153 (executing program) 2025/08/30 17:37:37 fetching corpus: 10000, signal 194242/219160 (executing program) 2025/08/30 17:37:37 fetching corpus: 10050, signal 194421/219160 (executing program) 2025/08/30 17:37:37 fetching corpus: 10100, signal 194779/219161 (executing program) 2025/08/30 17:37:37 fetching corpus: 10150, signal 195059/219166 (executing program) 2025/08/30 17:37:37 fetching corpus: 10200, signal 195365/219179 (executing program) 2025/08/30 17:37:38 fetching corpus: 10250, signal 196087/219182 (executing program) 2025/08/30 17:37:38 fetching corpus: 10300, signal 196254/219193 (executing program) 2025/08/30 17:37:38 fetching corpus: 10350, signal 196503/219198 (executing program) 2025/08/30 17:37:38 fetching corpus: 10400, signal 196658/219207 (executing program) 2025/08/30 17:37:38 fetching corpus: 10450, signal 197013/219210 (executing program) 2025/08/30 17:37:38 fetching corpus: 10500, signal 197216/219210 (executing program) 2025/08/30 17:37:38 fetching corpus: 10550, signal 197419/219211 (executing program) 2025/08/30 17:37:38 fetching corpus: 10600, signal 197616/219228 (executing program) 2025/08/30 17:37:38 fetching corpus: 10650, signal 197806/219230 (executing program) 2025/08/30 17:37:38 fetching corpus: 10700, signal 198017/219248 (executing program) 2025/08/30 17:37:38 fetching corpus: 10750, signal 198203/219251 (executing program) 2025/08/30 17:37:38 fetching corpus: 10800, signal 198357/219251 (executing program) 2025/08/30 17:37:38 fetching corpus: 10850, signal 198562/219251 (executing program) 2025/08/30 17:37:39 fetching corpus: 10900, signal 198797/219255 (executing program) 2025/08/30 17:37:39 fetching corpus: 10950, signal 198997/219258 (executing program) 2025/08/30 17:37:39 fetching corpus: 11000, signal 199150/219259 (executing program) 2025/08/30 17:37:39 fetching corpus: 11050, signal 199322/219262 (executing program) 2025/08/30 17:37:39 fetching corpus: 11100, signal 199589/219270 (executing program) 2025/08/30 17:37:39 fetching corpus: 11150, signal 199765/219277 (executing program) 2025/08/30 17:37:39 fetching corpus: 11200, signal 200112/219282 (executing program) 2025/08/30 17:37:39 fetching corpus: 11250, signal 200308/219329 (executing program) 2025/08/30 17:37:39 fetching corpus: 11300, signal 200465/219333 (executing program) 2025/08/30 17:37:39 fetching corpus: 11350, signal 200699/219349 (executing program) 2025/08/30 17:37:39 fetching corpus: 11400, signal 200862/219349 (executing program) 2025/08/30 17:37:40 fetching corpus: 11450, signal 201030/219359 (executing program) 2025/08/30 17:37:40 fetching corpus: 11500, signal 201212/219362 (executing program) 2025/08/30 17:37:40 fetching corpus: 11550, signal 201456/219365 (executing program) 2025/08/30 17:37:40 fetching corpus: 11600, signal 201649/219369 (executing program) 2025/08/30 17:37:40 fetching corpus: 11650, signal 201848/219369 (executing program) 2025/08/30 17:37:40 fetching corpus: 11700, signal 202013/219369 (executing program) 2025/08/30 17:37:40 fetching corpus: 11750, signal 202202/219376 (executing program) 2025/08/30 17:37:40 fetching corpus: 11800, signal 202335/219378 (executing program) 2025/08/30 17:37:40 fetching corpus: 11850, signal 202496/219379 (executing program) 2025/08/30 17:37:40 fetching corpus: 11900, signal 202751/219382 (executing program) 2025/08/30 17:37:40 fetching corpus: 11950, signal 202944/219385 (executing program) 2025/08/30 17:37:40 fetching corpus: 12000, signal 203104/219389 (executing program) 2025/08/30 17:37:41 fetching corpus: 12050, signal 203293/219391 (executing program) 2025/08/30 17:37:41 fetching corpus: 12100, signal 203537/219401 (executing program) 2025/08/30 17:37:41 fetching corpus: 12150, signal 203740/219402 (executing program) 2025/08/30 17:37:41 fetching corpus: 12200, signal 203889/219402 (executing program) 2025/08/30 17:37:41 fetching corpus: 12223, signal 203970/219402 (executing program) 2025/08/30 17:37:41 fetching corpus: 12223, signal 203970/219402 (executing program) 2025/08/30 17:37:43 starting 8 fuzzer processes 17:37:43 executing program 0: ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000000)={0x0, 0x9, 0x1, 0x1}) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000400)={r0, 0x6, 0x8000, 0x1}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000800)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r2 = syz_mount_image$iso9660(&(0x7f0000000840), &(0x7f0000000880)='./file0\x00', 0x7fffffff, 0x5, &(0x7f0000000b40)=[{&(0x7f00000008c0)="d3c6", 0x2, 0x8}, {&(0x7f0000000900)="0a348ed8cd59d1b9e2539dbad293d37159e8df3dddcae2ebf499189222d9fbf56ed3adad5757eeec8a16bcd12194db5743e0324408290423e1274cf3f2701e316428f74192d3b6a3a1848d2932fa37efd87403f724ebc212aec226aad22352051a989d4eb97ea95baa6e1c2b393e230acac5e45a84d420c8dd0d438a1a0fd6d34449ee38bfc1bf1da0d23e141b5b15e01c91dbe16e2794de95f3bc85551e57d6aa09256f14f6efc74165ece59cbe85ba97dce6df569f338da0e98f789239a6d8350cd8e092fad25525b7196c0762408e1a97a939c48ac0474849e78cfb907e0a82c23d57e802566b025e82", 0xeb, 0x5}, {&(0x7f0000000a00)="5d358f97f9f302c395b0aad0d4a68647509e544f658698944edfe08748", 0x1d}, {&(0x7f0000000a40), 0x0, 0xfffffffffffffffe}, {&(0x7f0000000a80)="f940f99278e418720128b28237ccc46ea1cc3baaeff293bc5276f889668a06d7ff0bf9e5e7c0a14355169a2bb649607bb88e34c2450b788a8fe21af4776edd3528dfe4d895826f2770b34b4e379abdcc503660de7aa7d4cb2f282e7b123f66433509d2bd87ca79d8e19e3a9b5ffc84830f07219f57a7c0727547ef9f1b08aea9c1a54ffb2e", 0x85, 0x9}], 0x18010, &(0x7f0000000bc0)={[{@check_strict}], [{@audit}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@euid_lt}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}]}) flistxattr(r2, &(0x7f0000000c40)=""/4096, 0x1000) mount(&(0x7f0000001c40)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000001c80)='./file0\x00', &(0x7f0000001cc0)='erofs\x00', 0x41080, &(0x7f0000001d00)='\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000002400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x80000000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000002440)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000027c0)={0x0, 0x0}, &(0x7f0000002800)=0xc) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000002840)={{{@in=@initdev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@loopback}}, &(0x7f0000002940)=0xe8) syz_mount_image$iso9660(&(0x7f0000002480), &(0x7f00000024c0)='./file0\x00', 0x10000, 0x5, &(0x7f0000002740)=[{&(0x7f0000002500)="1c0aaef96ada8a66c2c3c29a13644a447135b7af4a02", 0x16, 0x7c}, {&(0x7f0000002540)="13644d64e05a74b8c2bf090e8cd2fec3b7ba3eeb4c34d4429a78e905018ff37efbc3c6878f516ca3b5743019e1ea7b761616cb7cc84d03e599991a52f35214ab185eb9a04f4de09fba60b0428ca11bea68", 0x51, 0x5}, {&(0x7f00000025c0)="a7d326f8", 0x4, 0x10001}, {&(0x7f0000002600)="17e0fbd2b0659983d9754d1c448fbe9407735cb8ea5ea81da7ee15f04d29cd734e74efdae08bbf2214792d6b8f6db2a41625cfb394e53d3d1a29316a69c056bda9c5f6f75fd8ae0b741992b9ca09a4386a4ecc033b9981dc126211d47ed7c5eab9a46503a8575668bd3fdababadf84786f71ffbc665fd53e882fb4774404eb55ac649a702cb079d4b302792aafb0598ed9f223749be8a5075d28a4c11c69b1ca57d0fbf09f1440a82de64e7ac6e78530a5c81585fd6a", 0xb6, 0x2bff46be}, {&(0x7f00000026c0)="0cd44e945dd1c6a2d3489496ee7cd1f0cd2531e93676255a750a59300b43eba5822bc57e71afd5627a855f64acf13b0d1a31d61b3f2bea616c4b139735357add5d180e7a90aec3d0d252a475f03db63a9bef03", 0x53, 0x1}], 0x208000, &(0x7f0000002980)={[{}], [{@euid_lt}, {@fowner_gt}, {@uid_lt={'uid<', r6}}, {@uid_gt={'uid>', r7}}, {@subj_role={'subj_role', 0x3d, 'MAY_WRITE'}}, {@smackfsdef={'smackfsdef', 0x3d, 'euid<'}}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@permit_directio}]}) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000002a40)={0x0, 0x0, 0x5, 0x0, '\x00', [{0x4, 0x7f14cb3b, 0x0, 0x6, 0x1d8b, 0x2}, {0x9, 0x40, 0x19b40000000000, 0x1, 0x814f, 0x101}], ['\x00', '\x00', '\x00', '\x00', '\x00']}) umount2(&(0x7f0000002c40)='./file0\x00', 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) read(r8, &(0x7f0000002c80)=""/41, 0x29) ioctl$CDROMVOLCTRL(r1, 0x530a, &(0x7f0000002cc0)={0x9d, 0x30, 0x3, 0x2}) clone3(&(0x7f0000002f80)={0x40000, &(0x7f0000002d00)=0xffffffffffffffff, &(0x7f0000002d40), &(0x7f0000002d80), {0x3b}, &(0x7f0000002dc0)=""/248, 0xf8, &(0x7f0000002ec0)=""/74, &(0x7f0000002f40)=[r5, r5], 0x2, {r4}}, 0x58) ioctl$BTRFS_IOC_SEND(r9, 0x40489426, &(0x7f0000003040)={{}, 0x6, &(0x7f0000003000)=[0x9a, 0x9b6, 0x2, 0x20, 0x2, 0x1], 0xfff, 0x2, [0x4, 0x4, 0x7]}) r10 = signalfd4(r2, &(0x7f00000030c0)={[0x100000001]}, 0x8, 0x80800) openat(r10, &(0x7f0000003100)='./file1\x00', 0x113502, 0x20) 17:37:43 executing program 1: write(0xffffffffffffffff, &(0x7f0000000000)="7bdddf795e951f297efe848cb477ae1e7b06c3dc4be5b6f19d0a04dea8dbb0828ea03caac225024d9f6714", 0x2b) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) ioctl$SG_SET_TIMEOUT(0xffffffffffffffff, 0x2201, &(0x7f0000000040)) r0 = dup(0xffffffffffffffff) setsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, &(0x7f0000000080)=0x1, 0x4) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000000c0)={0x7, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x0, "6c41f8f14ce888"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f00000010c0)={{r1, 0x1, 0x3, 0x2, 0x800, 0xb7, 0x0, 0x3f, 0x6, 0x7, 0x101, 0x5df, 0x401, 0xd9, 0xf2}, 0x38, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000001180), 0x40840, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000001200)={0x1, &(0x7f00000011c0)=[{0x0, 0x4, 0x8e, 0xafe}]}, 0x10) r3 = openat$cgroup_procs(r0, &(0x7f0000001240)='cgroup.threads\x00', 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) writev(r3, &(0x7f00000013c0)=[{&(0x7f0000001280)="da6400f7cc2ea1a5aea7cac64e63bd92f2b555b754215038dab9f2910584e55ead20f0c3648cf11712027879aa4d962646fed9c92cc2a0ad68ec4bbfcbe5999a1e7cb150b9", 0x45}, {&(0x7f0000001300)="451b1fcf85720bed756e510bb740dce706fa042b7fe13fb814aa9666a5d4eeb216", 0x21}, {&(0x7f0000001340)="cd674a8bf25fa62fa9484a378cdd27b7d4a16ec9b55bedd72f8ca5567c01d592207fa636344747dafa234158b1cfc39fdc09ff5bbf2f013c4e6eb1e846d1922012ca30edb562165ef535193f", 0x4c}], 0x3) r4 = mq_open(&(0x7f0000001400)='/dev/null\x00', 0x2, 0x122, &(0x7f0000001440)={0x3, 0xffffffffffff0001, 0x7c9d30d3, 0x9}) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000001480)={0x0, 0x400, 0x1000}) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001880)={r5, "435935ee0a345cd37ddffcd9089d4091"}) r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000003b00), 0x4000, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000003b40)={{{@in6=@private1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@local}}, &(0x7f0000003c40)=0xe8) stat(&(0x7f0000003c80)='./file0\x00', &(0x7f0000003cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000003d40)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000003e80)={0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000002880)={0x1200, 0x37, 0x800, 0x70bd29, 0x25dfdbfd, "", [@nested={0x1199, 0x53, 0x0, 0x1, [@typed={0x8, 0x7b, 0x0, 0x0, @u32=0x400}, @typed={0x8, 0x60, 0x0, 0x0, @u32=0xffff}, @generic="49d97dc21b6195d0e55cf5998b19fe29cf02bd01de3264f7e4e9fa10f78be0298971b40027d03ccf25ba7fbab0aada92ba1ae6872f617e84da9bd6ba628c8409378736d67953db56dbb8492366782cc90c6519b5e804eaddda2a70ad560bc0d64d5c6f91593302d1fc0c9653416fde6d00595cf0a6a5df793c418d16c9f7625324645e90f959e26021c2a24f2ef5cf3cd537e5831135f72f949ff13de1f1d46f8c5d06b5cc4cbcf7ba7b30570d350fdea9f62d9d1fbbdfe52f6ab7a9e15b2f72295ec167e13befe0b3e0fda298aeacb2405af1a16a2100b789e156be827ba6584a728692c3a18e80230bbb5165eee6bd2fd9cfe2ba7f9960bd2fb227e9a8ff589c10b8a2a2ef423c3dc16320d942286e8315bf165d39de46209ed6e0bbd1351df85574c8ee54a0b5029b29d7f7fe85e5540952f3b83b7bd336cb8f6d6dc666d7de8782301322c025b383e420f1ef6aacc10c28a59f2fafc92e0b44ee7ae27a025c2de4c0ec1d4b32b7d54eb10508da847529666eec1962030d4a7b483c8740718e12248dde5c07f5d83176a75622d4f202feac77e7c5e61b87d20f25093def8adb329ce2423c8188449c51e7e7037f6da18db071e6353a1357c100c8d754652d921dfe317c3cdfc4e42392718e2332f8465037829ccf29040f3cc7be09659eb6bafcaea0f8198d8396394ac8cf8a44316d4b4a47bae8e4e7b61116efad396bc6b908e26d224b78cb3595e897b732255f60eb692144f3a6031a4557e19114828a45803a06b213cbf26e3e7ca3df4a55593fcd8623a11abf584f03c83c04c29c59305265246c283446f96b9d256a4deacc43eb032c74759655c533afbf5d13b2b4863fce430634ff942623a5d008790c4904192ec3f350142f1bb2e5463ce63164f529298d3f29e988be8c052bf2171afa8c749a53ee5ce0e291afecd933db2c0c7939d426cac31cc1d3d1f6769e3506fceff4e884e72c1a5cb3b449a8f3a8daccca101e09a5e8063720ee154237b6c26586ef0da4d65bb51c05723a5b69f177565ca5e130dc7f2f4bc6b18bf5b4d8a273eda07fbfd6ef49212287772bb9a3f9d18e7401179477e09f62e7692425bd1814bde6a501290231a735ed3ec9f3e7a44fbe22524a5c34d359e317e8f0903ec7c2e53622a527b3cb55d4c5fdff1e85a39fccc6604ac52f9be3630a542d2aeb7fcb3300341fa30589f276ac9386cd6aa687dcfb8ea51cb6b1d31628538801858136c945562c7de47b2033fd0361a13e96049e78e21d17940517cb4489dd45c2cc866d471de2c9bafc1f544dfa72f259eef9820fa5ad76ae81946575cfddc89e88ed18a1de73557a8c4acc18bf715919386229d4b5d4a2335fd23102654fb0ce2d4ff6317e0b2308ec14829b3651ca78275078ab7ceb01de508e4e7c19917e3de37a54091cc8f5c29ab71dd6d79433a3627da68983c1fc58788dbe736f5f2f38119a5f3ee5e74dcf8b386063af41788beaab32bb18213e08c715cbc75ecded25dfeba0f5a5ef198539e396aad6f1552ef482be93d71abeb436618f1e8dcc8963b611eb170d1b33aa1752f57afa026796b138d3156d576b1cd0be875e434ab9f2ca0673451cd398c3b9cb196e0ae59d8410c6b7044b094049d7ea5fb0a0e2abf798d6d2249c8438d7ec551b93818d9fe21cfcd8d26c8a0afe01f68bf17265c0dd2531e4853c19230c0446c714342df17b530e2de7e5e5a8550fb26d71e9c8ea65623c7c5797a825b6637a841649a236e132227920bfbd340c91aba087c72968e472b4c512ff6a48e2c0e13d3a564d6daa495cb4292fe78b12846d88144d76ca3aa052728f0e6aee16b42b41081b63080904dbaa7e488bd05406ab2675a6e7f73bf1719a3f60ee7df424cd870523c7be647b3c908126826e49d0009521a08ac9f7a2e1223e52ad0a07d658e9064a467083354585ec2ea19213497a3a5e9f20c07fab6e1f7917965a9dc406abc52836315e418929c59079076c1d9ce3015e9a246447f5fdd9a973bc0b9fabaf5dafbf684e96649c326e62b4d3bb505f6fc1ab791eae4ffd0cf2108f94f077a21e7740cf6664012d732b59cfd5e01a6f1b9d36b272b21d54831363ca247642b070d38a06816a01b55f75af3c2bcd2ebf0df48e6402679f6a96028878302ce5f99afaba8256def5c36bc07519c97626570d171febf59862fe929d8461185c50864886a68f039cc9272764b09e4de9e62da758cc313559fb0c29896c94bd6888475cc7705f1f8c691d162b61cdce82724aa097a105a2dfd045ac4a1c440800eed66cb6d32e2c74496ba5004f06829595cc5965797f811e94836ad47b711d4baadee99f18abab2add2a389b559f21b28fce0a92155c1049e27fceb5aaff4050b346baf3b4c918e60688d4f46728f36d2fca3c2939221f5f817baa4ea10ccc25b0ca597228412a5782656a645e2c605277d6e66831329a6dd8474a46c41c89a1f98979013abbc33969219f8c54aca10ed5f350537e829f583c2551e4ad872880e8c2409b937180ff4072d6210d867926b7d66cffba98a888c37b0084e4821d103e3a8c3a089b3f03c549e37846da70cbc9c26f10710bf13f1921bfcf896702c86dfd76498ead6357d21bcce7bd78256908100f852f55d2d3517c1c8074438dafc0aca0ee044b4ffe93fa7494d62ec976880324e3810dce7fe6d97a10ee65bbadd69de8bc6d83835dc912ccf6a5cf77c9722084d197539c1dc41d8a261949c3ee3a94f1d1517ad84dda63a55023f3d040e5d5e644bdab6cfa0945db82fe6fff4c563514829abd5864e46eaa4ce0b556475f0e697a33a8ec9977fb7d01befbf067fe3cfe1d9a8f7423969ed8c34e31392585fbe814259f03b83742ca13495f4c4dbd33a210bbcd1803f46f94b399814278df5883ec14b21fd0fc4c64e6b0a177f0c9d54eaccf21fcaab536a65954ba62388059d8c2ed7b4d5c57485d46426a50b37b3a95fa17f275f2f479976e0cb43530877bf105ae911503c1691d545feea40a62a30bca088633c797bd3c929a3dbab307cec4c0daf9e3b1fc2697f9f5ee8a19fcd08aca7284aa98a60e3d2aae3c4fa1db7ef5b4eea2dc7f6af29c388a62380010cee7f430b6df063adb49ecf3e7cc3639db2c93d7f359a89286aec1952bf3bf17528cba72e920b666ae452a8880049418af9b8e011bdbece74f4325bdfe00002549ae8225ded3cac3af97d2a0e0ad7f3508cf1379abd856a2655382c28e81ec6c3fef9cde3e850a410b36323b3dcc7b17f95cdc33da2d9a7e9fbd36c065a6f24339cbac2e3f09a13567b1c21311f3eec7b03e7fde698ed5f1ff7c6a75dd5b5cc1f95a127eb0b5b77ef7d5b1f3e47826a6cc8d147cb64ab218465d44f534351ef3c71784762e915575978a2adbd8155be0cea3c662b00ff64297412114b74ef8ee9308cd5b19fda9fbe09eddd366ba54dc6be1fbd564c4c3ba65ddc791b004bc9e52c7846252faaf9a36da5ab0afcc401120541749028a3182575bbd2f81968de3dac930df26f2eca2071a84ef5ea17cc23b350ec74168078fe0be3490432edb31006c09128579a5ffb346e8f535c77221a91a45d5c2fb98e74dd6b01c64cfe81426da208d51f8b2ba47b6767593cf67c25384ac484a398e4f1d8d35a23a8923b12b7cf7998b3e120928eb9eeb16ac0601adb3fe551bd8809db2686fbd0378f22bc5cdd80e538d2473c9c3ca9caf03e158aa0e80b18169ecfa480a1f103f31355949dc48e195ba3f22adfaf6c537ad157676b42b3696ff8da2da7e3bcb53c9df312e7b73e75f5ac42de9f195db77f0ce52c755f648a97654f15826e0472419358f7265f9ee4b57b93c51d3ea7cc7e18c38905776157755bb18b88b394855b92ee41dea5d9e7dca22eebfe9f5fbea359e5ba79aa329c2d7ef123a0110727a789d4d4d06a89371da0e15cd0b6d71dfe50a5927b55aacee05e4979becd04b2e35d741089e4bfcb4c936733039ca97e99b08c440bab113e7fa8b3968094ca16952e7ba4e0df79569019f3d954716b6a6cea2d24db97e12757726614d4ea89cec17d150af2fd9dd28e59c303485094f6b83aefafbd94784e7aa308ac64c86591d9c6f214746ecbe378babf8317b465cddbb482fb6250f230e2f39dee0e3bb5c6c2af04f4223e26b403734f5539c914cbf42908f6fae59dd76344cc4aa54667336d3b2c8add9d4a6fe60f44cc7091ac4c04bc0021d87e1b038fe6fff9a96c91eb1e5d4544f14cea4a6cdcb53a3e267125eb19afd87e34c0dad740dba30e0fead49e324316474f5bd276bd3cfb017d5762dce55092f48dc0c57359473f3949d1e759c845c21ab17aca69e9f1a72f59d80176f47f89620e84e87e64b8dceed694b2e767ee28d7199d706d39d9254ecf8aa43e61523f05cd539fe70907ffbc9d85ae48100a33e56cb048c1a77daa83544dd635f387b6bf5049cd9c0cce906e4a26e1e5498d5d51b66987c996478403cc21929855ec2a5f38f37f7c6dbc886661d80e6006c74abadbf9a61203962c97ecfd108732b9d024178fd44c1d5e75ec35a95c5b26d565d48bcad6a9ba7168774f01576182c5cd62d8b5510ea5a3d57e61a59f6f6a509de6668766a78201cfa915c01ccc65c4b087b4b64a3346fa5d1deaebadc3ee3c978fbcbab6872a1f6abc6bb769d1835eb875abd9f337b5d2bf6915ff990635ec86e283627631072e647dd1064ff02d414b397c08f0262b757a6ab3ef23a465364e2f3bf6518aad40b77c4e95481ccd1267c319b5caff5e6d793655f7223e133622998f047130d865d8b693ab83fefdb27589803ba0970b212c6788172133ba14119b7f2b9650f33fd23d07c8b092718d98f862f4e9308d3cd818cde2b6b103fadd09d89f838970370109c1cc34f88d3b92e2ac03512888286b0721bbbe9dac4dacddc1fa0e2e0f1096d6813c51873ac692fa4cda3579a256d620dce0eb2e63973a3c2ecc2e1bce38bb89d43f8153e255b2fee8977a6a4570000b5edc92bbc159e6feae68c9cd829c341632b6efc6dce5377d2d841dfb4364b4b1239f2494fe1e3c45b01bbff27c825351056204450657b4f50d96f25d3100d7c11fcc149d4562429823c675ccdb65a3a0dbe9da4d443db482e016cd9266505eb76713337a5fd359b72eec2c882c496ef68db8d4179ea63aa05a5477ca7817af12887b054c44bfdd26f44aa59a98b240863f998e15b33376202057aa0b09d02eb8d1caa018809a54a285d3521309a28ba7a37221280332f0aa5d68869c917ff39e9f701454f2b1110fa2e4d4f8a622abcf54f7f1b215630d0d178f861afcaf7ee0fd63219b1488284963d4a3dbc1366a92427f79410a8df6732f9e489bc8569f2d51e29f982b3d109ef89ea98e006207fcf87f63c565a18e0e7e72a4d71c088879bf8f1206ac32b9c348042dc86cabec03c28b00a76abb81150b111a65a651f0c506a4c16e95a44e1b8c743e746ef0b9ed912c888a51f5e9f75e7e09bcc728839e9c79adb879ebcd613d96adf7a1d11cba6ec0f4b6c91848f5811213e25aebb284e626cf09f41598be12d0858ef8dc858028c87b229d8fe9593ff470d100131d0475633df35bf152b21681e2475bb15c6d4e19d76d3ae86d7e5840d2b07072e8d1aed5b0345e35cc8faece995f026a26874a137f0217683aa14b538bd029d28a33d6863babc6370e7c28bdd0894adeec76a9bdf59318ad708b4e4d152118a94f288509208d3bd787df12b327b8c2c95060f996db2cc3be1fbc9249c721b66b7929b8b70d0013028f5ff88ca0a3e7b2e", @generic="1164cdd3f3d069d8d7dd01f32dcc8e4ada9643e94e7afd1292ce8ae51dbc4f487f8b3b4589326a306ee73f47f0c18ca23d859d448e49860183b9c590b4eb6457c308a9db158fae54b81e15c568230499365e2d5056e090141149064be3cb7f6ea7", @generic="91aa645053dc69fc0ada55c3d55b094d0281d2fa5b14c36b3c3e", @generic="08221108442d8d41448a7aa78c38071942740949f8c5a84c8ff09ef79768a72ed4eea88d626d426891166b18caf024f6fb3c1f49f3efbe0ee14827a58c9dd64abeeef4c572ec3c2b8ea596987be3149c6762d7d50066ea0601ec39440e2aaa62133b03c71d537a95fb938c667ffd10dfbdddde4cdb29177426d54623ace21aa792273100fa6df7e979d436693dc6cd7bc2ad4f58890eb31694f0679d52f386deeb3e23518174e29b4f53f3d8f3db7941013e0c4e79bc55c94eee5fc7c04982de93e0b6247631b04ef57a4d1750e355782dcbd5774a0ff1313fe9d485a54cb4a3ac0ae561a691a2bb6bae25573335cb85911699fc4972a83899cb", @typed={0x8, 0x8a, 0x0, 0x0, @fd}, @typed={0x8, 0x33, 0x0, 0x0, @ipv4=@loopback}]}, @generic="85d3f999a20ae7e6723eabc745f9d597ce1648346f8f769b581fdfc31a5777d71fd43ab4dcf236cb1ee379f7ece2d1b57f7e0420e6da0b61a04abb5d6d5d818b7016e8aebb8473150e091bc65ffc86ada8f698"]}, 0x1200}, {&(0x7f0000003a80)={0x14, 0x26, 0xa00, 0x70bd2c, 0x25dfdbfe, "", [@typed={0x4, 0x54}]}, 0x14}], 0x2, &(0x7f0000003e00)=[@rights={{0x14, 0x1, 0x1, [r6]}}, @rights={{0x14, 0x1, 0x1, [r3]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r7, r8}}}, @rights={{0x30, 0x1, 0x1, [r4, r9, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, r3, 0xffffffffffffffff]}}], 0x80, 0x8001}, 0x811) 17:37:43 executing program 7: ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000000)={0x0, 0x1, 0x3, 0x1000}) r0 = syz_open_procfs$userns(0x0, &(0x7f0000000040)) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="b8cd1bee0b396989310d02ce76dbad495ed0f2792234a56b", 0x18}, {&(0x7f00000000c0)="6ff7db3c5b4b9fd40997b3d0601b8ee52921da5e4512609f9d78c72faea92555113b4773b77962cd1b5643de662f905487c0705a667126c1cf80c1d5a7f2406d35b5ab162d461b8d", 0x48}], 0x2, 0x3f, 0x100) setns(r0, 0x10000000) r1 = openat$incfs(0xffffffffffffffff, &(0x7f00000001c0)='.log\x00', 0x20640, 0x20) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x8100, &(0x7f0000000200)={0x0, 0xc, 0x100000, {r1}}, 0x20) getdents(r1, &(0x7f0000000240)=""/38, 0x26) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000480)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r1) sendmsg$NL80211_CMD_DISASSOCIATE(r2, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x82081200}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x4c, r3, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x80000001, 0x19}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @random="37d331ce0282"}, @NL80211_ATTR_SSID={0x12, 0x34, @random="26075fb1181b21b31ab47e1829a3"}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2}, 0x90) r4 = dup3(r2, r0, 0x0) flock(r4, 0x2) r5 = syz_io_uring_complete(0x0) ioctl$EXT4_IOC_GROUP_ADD(r5, 0x40286608, &(0x7f0000000640)={0x7, 0x1944, 0x8, 0x1, 0x4, 0xe6c0}) sendmsg$NL80211_CMD_SET_REG(r4, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x20, r3, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2a}]}, 0x20}}, 0x8008004) ioctl$AUTOFS_DEV_IOCTL_READY(r4, 0xc0189376, &(0x7f0000000780)={{0x1, 0x1, 0x18, r1, {0x8}}, './file0\x00'}) fsetxattr$trusted_overlay_opaque(r6, &(0x7f00000007c0), &(0x7f0000000800), 0x2, 0x2) r7 = openat$sr(0xffffffffffffff9c, &(0x7f0000000840), 0x400000, 0x0) inotify_add_watch(r7, &(0x7f0000000880)='./file1\x00', 0xe00) sendmsg$IEEE802154_SET_MACPARAMS(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x30, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0x1}, @IEEE802154_ATTR_CSMA_RETRIES={0x5, 0x25, 0xd4}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x44811}, 0x1) 17:37:43 executing program 2: ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, &(0x7f0000000000)={0x0, 0x8, 0x10000}) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000080)=0x40, 0x4) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f00000000c0)={'veth1_macvtap\x00', {0x2, 0x0, @private}}) r1 = fcntl$dupfd(r0, 0x0, r0) getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000100), &(0x7f0000000140)=0x4) fcntl$setsig(r1, 0xa, 0x13) r2 = openat$incfs(r1, &(0x7f0000000180)='.log\x00', 0x200040, 0x20) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000240)={'gretap0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x20, 0x700, 0x7fffffff, 0xc3, {{0x8, 0x4, 0x3, 0x2, 0x20, 0x67, 0x0, 0xff, 0x4, 0x0, @local, @loopback, {[@end, @lsrr={0x83, 0xb, 0xeb, [@local, @multicast1]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000280)={'wg1\x00', 0x0}) accept$packet(0xffffffffffffffff, &(0x7f0000003180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000031c0)=0x14) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000003440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000003400)={&(0x7f0000003200)={0x1d8, 0x0, 0x20, 0x70bd2d, 0x1f, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xe662913699dae226}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x80}, 0x8000) r6 = openat$sr(0xffffffffffffff9c, &(0x7f0000003480), 0x80100, 0x0) ioctl$CDROMRESET(0xffffffffffffffff, 0x5312) r7 = accept(0xffffffffffffffff, &(0x7f00000034c0)=@x25={0x9, @remote}, &(0x7f0000003540)=0x80) ioctl$BTRFS_IOC_QGROUP_CREATE(r7, 0x4010942a, &(0x7f0000003580)={0x1, 0x6}) ioctl$TIOCGICOUNT(0xffffffffffffffff, 0x545d, 0x0) syz_io_uring_setup(0x2485, &(0x7f00000035c0)={0x0, 0x1887, 0x2, 0x3, 0xde, 0x0, r6}, &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000003640), &(0x7f0000003680)=0x0) syz_io_uring_submit(0x0, r8, &(0x7f00000036c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x4d55) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000003880)={r5, 0x1, 0x6, @random="f26c39c663f8"}, 0x10) 17:37:43 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x111400, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x600, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, ["", ""]}, 0x1c}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x12) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000180), r0) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r2, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x24}}, 0x20000054) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/module/pcmcia_core', 0x420000, 0x40) sendmsg$ETHTOOL_MSG_PAUSE_SET(r3, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x28, 0x0, 0x425, 0x70bd29, 0x25dfdbfe, {}, [@ETHTOOL_A_PAUSE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x20044005}, 0x40000) r4 = fcntl$getown(r3, 0x9) fcntl$setown(r0, 0x8, r4) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000880)={@mcast1, 0x0}, &(0x7f00000008c0)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r3, 0x89f6, &(0x7f0000000980)={'syztnl0\x00', &(0x7f0000000900)={'syztnl1\x00', r5, 0x4, 0x7, 0xee, 0x9, 0x58, @dev={0xfe, 0x80, '\x00', 0x16}, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x1, 0x1, 0x3, 0x1}}) r7 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000009c0), 0x1, 0x0) sendfile(r7, r0, &(0x7f0000000a00)=0x4, 0xff) r8 = pidfd_getfd(r3, r1, 0x0) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a80), r3) sendmsg$ETHTOOL_MSG_WOL_SET(r8, &(0x7f0000000f00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000ac0)={0x3c8, r9, 0x8, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_WOL_HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_WOL_SOPASS={0xc4, 0x3, "c5c2d7b7d208421549326e9d62dbb831c5f06f672104a085a5e3fe2fef10bcad0f05ac4a6e80f45223acecf197a36c2bdbbd85d17e79803cb5c0cb9315293e1c9fd1e45a395d3e7d96bb3e84002bc31108e8fe3207c34ff176d9234411763aa57ab90f072717bf6eaca3711a0a7e5f820228648f55ee8be47c6d39f8df765b1f1fc99c67a00bcacfed5f3034c2f87087e09fb0d86e56f7cdd42b02d0f4a2b0ced5ee22247e5f690838ee8963567757a7cc74745edc492ee842aa415962de0475"}, @ETHTOOL_A_WOL_MODES={0x274, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4e, 0x4, "8c72bf1839a54427e6832c4096e5620b58021721ac800435b4612e4e533f92eb8b3ba3c393363c07f593e959d0d192e39b71fd27dcef488885f6cf6bcfa3faef64e7e249afbdf62b420c"}, @ETHTOOL_A_BITSET_BITS={0x78, 0x3, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xff}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '$Z/\'/#\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffff01}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syztnl0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '+\xca!\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ':\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '&\\-%\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_MASK={0xfe, 0x5, "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"}, @ETHTOOL_A_BITSET_BITS={0xa8, 0x3, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syztnl1\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7f}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '!\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '](.\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\\\xf8/&}\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syztnl1\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, ']-:\x00'}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '-}\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x200}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}]}, 0x3c8}, 0x1, 0x0, 0x0, 0x80}, 0x4000) kcmp(r4, r4, 0x0, r8, r0) pipe2(&(0x7f0000000f40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r10, 0x0, 0x2a, &(0x7f0000000f80)={0xfffeffff, {{0x2, 0x4e20, @private=0xa010100}}}, 0x88) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000001080)={0x1, 0x2, 0x393, 0x8, 0xffffffffffffffff}) [ 89.799593] audit: type=1400 audit(1756575463.750:7): avc: denied { execmem } for pid=271 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 17:37:43 executing program 3: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x16c, r1, 0x200, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x2, 0x41}}}}, [@NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_BSS_BASIC_RATES={0xd, 0x24, [{0x18, 0x1}, {0x16, 0x1}, {0x6c}, {0x60}, {0x30}, {0x6c, 0x1}, {0x60}, {0x9, 0x1}, {0x1b, 0x1}]}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x3}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x100}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0x5}, @NL80211_MESHCONF_POWER_MODE={0x8, 0x1a, 0x3}, @NL80211_MESHCONF_GATE_ANNOUNCEMENTS={0x5, 0x11, 0x1}, @NL80211_MESHCONF_CONNECTED_TO_GATE={0x5, 0x1d, 0x1}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0x3f}, @NL80211_MESHCONF_HT_OPMODE={0x6, 0x16, 0x10}]}, @NL80211_ATTR_MESH_SETUP={0xe8, 0x70, [@NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC={0x5}, @NL80211_MESH_SETUP_IE={0xca, 0x3, "a0bbd002acdf6ca73156e17c6228a3182602aca4f63c6a39ac5eb716485124b24dbb7d9e59fff144558fee3ea8e6a68767b7fb1aa9906f63756d6ced37e6cd695cb838cf060b5146678ac525452d4878bdb9527d687ac62348ecdb7c48a39e16e486a4d464008f77b24643f145de9bed890aa01fd3d2341f3c234b2cf3a132958cb994002fa52ef8247e71817afcaa6675c741ddb3772aae7cb1fd4eb8e926b14642797c00997ea298d877567d0d5b34af93079b8b2e2aad3a087137a8ca7c56d98ef0b0ffdc"}, @NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC={0x5}, @NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5, 0x8, 0x9b}]}]}, 0x16c}}, 0x4000) getdents(r0, &(0x7f0000000280)=""/54, 0x36) r2 = open_tree(r0, &(0x7f00000002c0)='./file0\x00', 0x1) sendmsg$NL80211_CMD_DEL_PMKSA(r2, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xb0, r1, 0x20, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x832}, @NL80211_ATTR_PMKID={0x14, 0x55, "caf5ebe36b8d12695911152e7726ed25"}, @NL80211_ATTR_PMK={0x14, 0xfe, "95092e7160bbc734c37a306a5b1a5d2a"}, @NL80211_ATTR_PMK={0x14, 0xfe, "600945373bf386c7fc1bf6efbe3a619a"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x4}, @NL80211_ATTR_PMKID={0x14, 0x55, "393dffc797ef78fdd1a8253381fb61ec"}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x101}, @NL80211_ATTR_PMK={0x14, 0xfe, "5b6aba0b6291cc188448108765f1bfa6"}, @NL80211_ATTR_PMK={0x14, 0xfe, "a7c14af6ed9e174b2970aabcf08f29f5"}]}, 0xb0}, 0x1, 0x0, 0x0, 0x880}, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000480), 0x7f, 0x4040) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r3, &(0x7f0000001600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000015c0)={&(0x7f0000000500)={0x1090, r1, 0x300, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x4}], @NL80211_ATTR_IE={0x25, 0x2a, [@ssid={0x0, 0x19, @random="0a64e063726c31e54ce892b2b63dc6da9360607782d7b5ea48"}, @supported_rates={0x1, 0x4, [{0x12}, {0x16, 0x1}, {0xc, 0x1}, {0x3b, 0x1}]}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0xfa}, @NL80211_ATTR_FILS_ERP_USERNAME={0xb, 0xf9, "02250cc437f1ba"}, @NL80211_ATTR_FILS_ERP_USERNAME={0xe, 0xf9, "35345d6ed20c5f4984e0"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x7}, @NL80211_ATTR_FILS_ERP_REALM={0x1004, 0xfa, "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"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x8, 0xf9, "79012101"}], @NL80211_ATTR_IE={0xc, 0x2a, [@mesh_id={0x72, 0x6}]}]}, 0x1090}, 0x1, 0x0, 0x0, 0x11}, 0x4000004) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f0000001740)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001700)={&(0x7f0000001680)={0x80, r1, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0x5b}}}}, [@NL80211_ATTR_TX_RATES={0x50, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x4c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x11, 0x1, [0x16, 0x5, 0x36, 0xb, 0x30, 0x24, 0x6, 0x1, 0x16, 0x5, 0x6, 0x30, 0x9]}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x30, 0x4, 0x16, 0x48, 0x5, 0x16, 0xc, 0x9, 0x24, 0x6, 0x12, 0x48, 0x30, 0x1f]}, @NL80211_TXRATE_HT={0x16, 0x2, [{0x0, 0x4}, {0x5, 0x3}, {0x4, 0x9}, {0x1, 0x8}, {0x4, 0x7}, {0x1, 0x4}, {0x0, 0x3}, {0x5, 0x7}, {0x5, 0x5}, {0x7}, {0x0, 0x4}, {0x7, 0x9}, {}, {0x6, 0x3}, {0x0, 0x5}, {0x4, 0x4}, {0x4, 0x6}, {0x4}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6}]}, 0x80}, 0x1, 0x0, 0x0, 0x24000010}, 0x8004) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000017c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000001880)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001840)={&(0x7f0000001800)={0x20, r4, 0x700, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x44}, 0x2) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f00000018c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) getdents(r5, &(0x7f0000001900)=""/86, 0x56) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000019c0), 0xffffffffffffffff) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000001a80)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001a40)={&(0x7f0000001a00)={0x20, r6, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}]}, 0x20}}, 0x4000) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001b00), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001b40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r5, &(0x7f0000001c40)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001c00)={&(0x7f0000001b80)={0x54, r7, 0x20, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000081}, 0x40000) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x3964bfee1977c901}, 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x28, r4, 0x2, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x4) 17:37:43 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x8, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x20}}, 0x24008010) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) sendmsg$IPSET_CMD_GET_BYNAME(r1, &(0x7f0000000200)={&(0x7f0000000140), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, 0xe, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40090}, 0x40000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x54, r2, 0x2, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x4}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x80}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x4}, @NL80211_ATTR_BANDS={0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xff}]}, 0x54}}, 0x4000) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xb8, r4, 0x8, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x9e, 0x3e}}}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x90, 0x3, 0x0, 0x1, [{0x80, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x7b, 0x2, "770c5b32425fe249b328e3cfcc779c17249fd781be10fda2545a316d5915bd08fbe2c1154b6deb701d1a3545519c800c63422cbaa0c1976b26a8bc5472176cdd7dd3714bfad601634dbcd8989dc66ca4d392eebd4edbc28247b50d5d71b6c76c37520232a3132fb783f3ec7011518fa3682a386794a6f5"}}, {0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x1ff}}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000640), r1) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f00000008c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000680)={0x1d8, r6, 0x2, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x68, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x200}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7e48}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xba}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffff8}]}, @TIPC_NLA_BEARER={0x94, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x7, @local, 0x9}}, {0x14, 0x2, @in={0x2, 0x4e20, @local}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x10000}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'team_slave_0\x00'}}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffb}]}, @TIPC_NLA_NODE={0x90, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "7410a5cf3723d56664046c4960e9add4714e0ae9aa7d997a89687a"}}, @TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "ba1b724b5f5528898f846f74d1ec18c70ed3921010651306e914a58834382235"}}]}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x80}, 0x4040800) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000a40)={&(0x7f0000000900), 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x80, r7, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7ff, 0x48}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x6}, @NL80211_ATTR_SCAN_FREQUENCIES={0xc, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x4}]}, @NL80211_ATTR_SCAN_SSIDS={0x1c, 0x2d, 0x0, 0x1, [{0x17, 0x0, @random="54223f265aad50c5101f089e0df235debe1886"}]}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@device_b}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x401}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x80}, 0x1, 0x0, 0x0, 0x1}, 0x200000c0) r8 = openat$null(0xffffffffffffff9c, &(0x7f0000000a80), 0x40100, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r8, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x28, r4, 0x10, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x8ed, 0x71}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r8, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x40, r7, 0xc, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_SCHED_SCAN_MATCH={0x2c, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac=@broadcast}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x3ff}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x26}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="5bb1a26a51a2"}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) r9 = syz_io_uring_complete(0x0) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r9, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0x7, 0x0, 0x2}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20004010}, 0x40010) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000e00)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) 17:37:43 executing program 4: ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'ip6tnl0\x00', 0x0, 0x2f, 0xfe, 0x2, 0x8000, 0x50, @loopback, @local, 0x8000, 0x700, 0x6, 0x7}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wg1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'vxcan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1402000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000400)={0x1bc, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x48814}, 0x40400) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000640)={'team0\x00', 0x0}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000680)={{0x1, 0x1, 0x18, r3, {0x8000}}, './file0\x00'}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r3) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f00000009c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000980)={&(0x7f0000000740)={0x218, r6, 0x300, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x49, 0x48}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_BSS_BASIC_RATES={0x21, 0x24, [{0x18, 0x1}, {0x12, 0x1}, {0x36, 0x1}, {0x48, 0x1}, {0x6c}, {0x2}, {0x36}, {0x12}, {0x5}, {0x60}, {0x30}, {0x3}, {0x9, 0x1}, {0x18, 0x1}, {0x9, 0x1}, {0x24}, {0x24}, {0x2}, {0x3}, {0x4, 0x1}, {0x78}, {0x4}, {0x14, 0x1}, {0xd2}, {0x0, 0x1}, {0x24}, {0x16}, {0x18}, {0xc, 0x1}]}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_TX_RATES={0x16c, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x9c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x18, 0x2, [{0x5, 0x9}, {0x1, 0xa}, {0x5}, {0x7, 0x7}, {0x1, 0x5}, {0x5, 0xa}, {0x5, 0x7}, {0x7, 0x3}, {0x1, 0x8}, {0x0, 0xa}, {}, {0x4, 0xa}, {0x6, 0x1}, {0x3, 0x9}, {0x7, 0x8}, {0x6, 0x2}, {0x7, 0x1}, {0x0, 0x4}, {0x3, 0x1}, {0x4, 0x2}]}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x1, 0x9, 0x1b, 0x6, 0x16, 0x36, 0x9, 0xb, 0x12, 0x9, 0x24, 0x4, 0x3, 0x1b, 0x1b, 0x3, 0x60, 0x48, 0x12]}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x1b, 0x60, 0x24, 0xc, 0x18, 0x36, 0x16, 0x3, 0x48, 0xc, 0x30, 0xcb8145a4b46ddee4, 0x60, 0x3, 0x12, 0x1c, 0x36, 0x4, 0x4, 0x1, 0x64df6fb38ae681d8, 0x9, 0x9, 0x48]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x60, 0x90, 0x3, 0x1b, 0x2, 0x30, 0x30, 0x18, 0x16, 0x60, 0x36, 0x4, 0x1b, 0x6, 0x1, 0x1b, 0x2]}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x36, 0xb, 0xb, 0x4, 0x2, 0x12, 0x24, 0xb, 0x5, 0xc, 0x30, 0x63, 0xc, 0x48, 0x18, 0xc, 0x9, 0x3, 0x17, 0x6c, 0x17, 0x6, 0x4, 0x6, 0x1b, 0x36, 0x12, 0x60, 0x0, 0x60, 0x24]}]}, @NL80211_BAND_6GHZ={0xcc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffa, 0x6, 0x5, 0x6d, 0x800, 0x7ff, 0x0, 0x2]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x40, 0x36, 0xb, 0xd, 0x16, 0x24, 0x5, 0xc, 0x0, 0x30, 0x4, 0x55, 0x1, 0x1]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x4, 0x4, 0xff, 0xfffc, 0x7ff, 0x5, 0x2]}}, @NL80211_TXRATE_HT={0x43, 0x2, [{0x6}, {0x1, 0x5}, {0x0, 0x3}, {0x7, 0x6}, {0x0, 0x4}, {0x1, 0x9}, {0x0, 0x1}, {0x0, 0x9}, {0x2, 0x4}, {0x7, 0x9}, {0x5, 0x2}, {0x0, 0x4}, {0x6}, {0x3}, {0x4}, {0x0, 0x6}, {0x4, 0x4}, {0x0, 0x8}, {0x1, 0x2}, {0x2, 0x9}, {0x6, 0x2}, {0x6, 0x5}, {0x6, 0x4}, {0x5, 0x9}, {0x1}, {0x3, 0x6}, {0x2, 0x9}, {0x1}, {0x4, 0x16}, {0x4, 0x6}, {0x5, 0x3}, {0x2, 0x1}, {0x0, 0x3}, {0x1, 0x8}, {0x5, 0x4}, {0x0, 0x2}, {0x0, 0x7}, {0x0, 0x7}, {0x2, 0x7}, {0x1, 0x5}, {0x0, 0x5}, {0x1, 0x9}, {0x4, 0x5}, {0x1, 0x4}, {0x3, 0x5}, {0x3}, {0x3, 0x2}, {0x6, 0x1}, {0x7, 0x8}, {0x2, 0x7}, {0x1, 0x7}, {0x7, 0x1}, {0x6, 0x3}, {0x4, 0x5}, {0x0, 0x8}, {0x0, 0x8}, {0x5, 0xa}, {0x4, 0x3}, {0x5, 0x8}, {0x6, 0x4}, {0x1, 0x5}, {0x4, 0x18}, {0x4, 0xa}]}, @NL80211_TXRATE_HT={0x1c, 0x2, [{0x3, 0x2}, {0x7, 0xa}, {0x3, 0x2}, {0x1, 0x7}, {0x4, 0xa}, {0x4, 0xa}, {0x0, 0x5}, {0x5, 0x4}, {0x4, 0x6}, {0x0, 0x7}, {0x1, 0x9}, {0x1, 0x9}, {0x0, 0x1}, {0x2, 0x9}, {0x5, 0x6}, {0x0, 0x4}, {0x6}, {0x1, 0x9}, {0x0, 0x4}, {0x4, 0x5}, {0x0, 0x1}, {0x0, 0x4}, {0x6, 0x2}, {0x2, 0x6}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x6, 0x9, 0x6c, 0x3, 0xc4feb70e5e4193ab, 0x60]}]}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x3ed}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x5}, @NL80211_ATTR_BSS_BASIC_RATES={0xc, 0x24, [{0x5}, {0x18, 0x1}, {0xc}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {0x30, 0x1}, {0xc}]}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2ec}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xe}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x5b}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfffffffc}], @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0x218}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008000) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_MPP(r7, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x28, r6, 0x400, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xfffffe00, 0x4f}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x4000040) r8 = syz_open_dev$vcsn(&(0x7f0000000b00), 0x400, 0x8800) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000b80), r7) ioctl$sock_SIOCDELRT(r5, 0x890c, &(0x7f0000000bc0)={0x0, @generic={0xf, "302d470144e5a6bd6c527eae558c"}, @xdp={0x2c, 0xc, r2, 0x2b}, @can={0x1d, r2}, 0xd9, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfffffffffffffffd, 0x0, 0x6}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000cc0)={'syztnl1\x00', &(0x7f0000000c40)={'sit0\x00', r2, 0x4, 0x6, 0x6, 0x280000, 0x8, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10, 0x700, 0x0, 0x8000}}) sendmsg$ETHTOOL_MSG_WOL_GET(r8, &(0x7f0000000ec0)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000d00)={0x158, r9, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x158}, 0x1, 0x0, 0x0, 0x4}, 0x40) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000f40), r3) sendmsg$ETHTOOL_MSG_STRSET_GET(r7, &(0x7f00000011c0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000000f80)={0x1d0, r13, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x28, 0x2, 0x0, 0x1, [{0x4}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x16c, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000001200)) sendmsg$SEG6_CMD_DUMPHMAC(r8, &(0x7f0000001300)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x40, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xfffffffd}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x1}, @SEG6_ATTR_DST={0x14, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x4008000) [ 90.921337] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 90.923733] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 90.925641] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 90.929894] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 90.933281] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 91.047088] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 91.057416] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 91.059684] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 91.075445] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 91.088203] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 91.120909] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 91.126201] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 91.128301] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 91.130429] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 91.132468] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 91.135735] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 91.141821] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 91.144905] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 91.148124] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 91.151622] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 91.176983] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 91.181391] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 91.192449] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 91.203782] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 91.209545] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 91.219266] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 91.222740] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 91.224184] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 91.224218] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 91.241354] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 91.243323] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 91.246717] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 91.248247] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 91.250717] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 91.252051] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 91.258746] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 91.259054] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 91.264044] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 91.265506] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 91.291566] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 92.951815] Bluetooth: hci0: command tx timeout [ 93.144977] Bluetooth: hci1: command tx timeout [ 93.208026] Bluetooth: hci4: command tx timeout [ 93.271987] Bluetooth: hci2: command tx timeout [ 93.336226] Bluetooth: hci7: command tx timeout [ 93.336845] Bluetooth: hci3: command tx timeout [ 93.337684] Bluetooth: hci5: command tx timeout [ 93.338286] Bluetooth: hci6: command tx timeout [ 94.999619] Bluetooth: hci0: command tx timeout [ 95.191993] Bluetooth: hci1: command tx timeout [ 95.256027] Bluetooth: hci4: command tx timeout [ 95.321996] Bluetooth: hci2: command tx timeout [ 95.384010] Bluetooth: hci5: command tx timeout [ 95.384419] Bluetooth: hci6: command tx timeout [ 95.384801] Bluetooth: hci3: command tx timeout [ 95.385223] Bluetooth: hci7: command tx timeout [ 97.047017] Bluetooth: hci0: command tx timeout [ 97.239969] Bluetooth: hci1: command tx timeout [ 97.303961] Bluetooth: hci4: command tx timeout [ 97.367964] Bluetooth: hci2: command tx timeout [ 97.434053] Bluetooth: hci5: command tx timeout [ 97.434479] Bluetooth: hci7: command tx timeout [ 97.434865] Bluetooth: hci3: command tx timeout [ 97.436035] Bluetooth: hci6: command tx timeout [ 99.095998] Bluetooth: hci0: command tx timeout [ 99.287935] Bluetooth: hci1: command tx timeout [ 99.351948] Bluetooth: hci4: command tx timeout [ 99.414974] Bluetooth: hci2: command tx timeout [ 99.479118] Bluetooth: hci3: command tx timeout [ 99.480693] Bluetooth: hci6: command tx timeout [ 99.481228] Bluetooth: hci7: command tx timeout [ 99.481613] Bluetooth: hci5: command tx timeout [ 127.084444] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.085134] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.287545] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.288298] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.933289] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.933956] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.109156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.109771] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 17:38:22 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = epoll_create1(0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0x541b, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)={0x34, 0x28, 0x1, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64=0x1}, @nested={0x18, 0x0, 0x0, 0x1, [@typed={0x14, 0x0, 0x0, 0x0, @ipv6=@local}]}]}, 0x34}], 0x1}, 0x0) [ 128.230405] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 128.239120] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. 17:38:22 executing program 3: r0 = syz_mount_image$tmpfs(&(0x7f0000002840), &(0x7f0000002880)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="6d706f6c3dad601f64656661756c74"]) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x7ec}}, './file0\x00'}) mknodat$loop(r1, &(0x7f0000000040)='./file0\x00', 0x2, 0x0) getdents64(r0, &(0x7f0000000280)=""/4096, 0x1000) [ 128.346851] tmpfs: Bad value for 'mpol' [ 128.349902] tmpfs: Bad value for 'mpol' 17:38:22 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x8, 0x6, 0x4, 0x7, 0x0, 0xfffffffffffffffa, 0x2000, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x25, 0x2}, 0xc104, 0x8, 0x8, 0x9, 0x8, 0x4800, 0x517, 0x0, 0x2, 0x0, 0x81}, 0xffffffffffffffff, 0x3, r0, 0x2) r1 = inotify_init() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000000000000a5c68994f5f39491c2796ae83856a00f174263274d2bb0006d90840420b6d2c61e0f0d5a098ed484d1b0c11fda066beff90773cf7927b45141a17688b7d79eafbb5ddbe8b5bcb7dd2295b44dfb0001897929e853d0c0450000000001000000d986bf0100000000000000d767d84b8d75d0a06b087d9791334006e45bd2a8d40d4ac5ce5604ffb3eae4"]) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x80010, r2, 0x77824000) inotify_rm_watch(r1, 0x0) close(r1) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000005c0)='net/icmp\x00') inotify_add_watch(r1, &(0x7f0000000000)='./file0\x00', 0x4000008) perf_event_open(0x0, 0x0, 0xa, 0xffffffffffffffff, 0x0) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r5 = dup(r4) copy_file_range(r5, 0x0, r3, 0x0, 0x401, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000040)=0x2) [ 128.458678] audit: type=1400 audit(1756575502.410:8): avc: denied { open } for pid=3828 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 128.467074] audit: type=1400 audit(1756575502.410:9): avc: denied { kernel } for pid=3828 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 17:38:22 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$vcsa(&(0x7f0000000280), 0x7f, 0x20400) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40001}, 0x14) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x5cf11da8d9f3d315}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, r2, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_RULES={0x20, 0x22, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xffff}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x36}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x6}]}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1e}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x4}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x4008000}, 0x8080) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x34, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4}]}]}]}, 0x34}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x3c, r4, 0x904, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x24044048) [ 128.648148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.648794] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 17:38:22 executing program 3: keyctl$search(0xa, 0x0, 0x0, &(0x7f0000000180)={'syz', 0x3}, 0xfffffffffffffff8) keyctl$clear(0x7, 0x0) r0 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f00000001c0), &(0x7f0000000340)={'syz', 0x1}, 0x0, 0x0, r0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) keyctl$negate(0xd, 0x0, 0x8, 0x0) add_key$user(&(0x7f00000002c0), 0x0, 0x0, 0x0, 0xfffffffffffffff8) openat$sr(0xffffffffffffff9c, &(0x7f0000000500), 0x10200, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000580), 0xffffffffffffffff) syz_genetlink_get_family_id$batadv(&(0x7f0000000b40), 0xffffffffffffffff) 17:38:22 executing program 4: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900)='^', 0x1) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x44000) sendfile(r0, r1, 0x0, 0xfdef) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f0000000040)={0x8, 0x3, 0x8001, 0xff}, 0x10) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000100)=0x8010) [ 128.839575] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.840247] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 17:38:23 executing program 4: syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8200, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="2321202e2f664ee8ecfc37"], 0x19) r2 = dup(r1) copy_file_range(r2, 0x0, r0, 0x0, 0x401, 0x0) sendfile(r0, r1, 0x0, 0x0) bind$802154_raw(r2, &(0x7f0000000000)={0x24, @short={0x2, 0xffff, 0xaaa2}}, 0x14) 17:38:23 executing program 4: ioperm(0x5, 0x6, 0xffffffffffffffff) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000001300)=[{0x0}], 0x0, 0x0) [ 129.211702] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.212834] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.428696] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.429827] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.494266] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.494892] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.577698] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.578532] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.629341] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.630472] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.645838] loop0: detected capacity change from 0 to 264192 [ 129.647581] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 129.650309] loop0: detected capacity change from 0 to 241478 [ 129.651167] iso9660: Unknown parameter 'euid<00000000000000000000' [ 129.673156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.673799] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.689503] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.690128] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.774752] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.775570] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.092086] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.093325] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.137010] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.138486] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.474196] loop0: detected capacity change from 0 to 264192 [ 130.476814] SELinux: security_context_str_to_sid (root) failed with errno=-22 17:38:37 executing program 6: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = epoll_create1(0x8d1650bdf5168db0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x20000004}) epoll_pwait(r1, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}, {}], 0x7, 0x6, 0x0, 0x0) epoll_pwait2(r1, &(0x7f0000000080)=[{}], 0x1, 0x0, 0x0, 0x0) 17:38:37 executing program 3: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x200, 0x1) lgetxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=@random={'security.', '\'!$)%[&/$#\x00'}, &(0x7f0000000180)=""/59, 0x3b) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x100) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x1, 0x8, 0x81}) write$P9_RREADDIR(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0b08000029c5e000000600"], 0xb) 17:38:37 executing program 4: ioperm(0x5, 0x6, 0xffffffffffffffff) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000001300)=[{0x0}], 0x0, 0x0) 17:38:37 executing program 7: socket$inet6(0xa, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000280)={0x20, 0x0, 0x1, 0x0, 0x0, {0x1a}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x1}) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r1, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {0x1a}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, r4}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r6, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000280)={0x20, r7, 0x1, 0x0, 0x0, {0x1a}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}]}, 0x20}}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000000)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, r9}) accept$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000100)={0x1c4, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@HEADER={0x88, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x1c4}}, 0x801) 17:38:37 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x10) r0 = shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmdt(r0) munmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000) 17:38:37 executing program 2: syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi={{0x22, 0x7f}, {0x9, [{@none, 0x80, 0x2, "2571ac", 0x3, 0x1}, {@any, 0x4, 0x40, "f3e2f6", 0x69, 0x8}, {@any, 0x6, 0xfc, "3a4303", 0x800, 0x5}, {@any, 0x3, 0x9, "d597d2", 0x6, 0x13}, {@any, 0x20, 0x0, "acc749", 0x5, 0x5a}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3, 0x2, "b88488", 0xa8c, 0x3}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x6, 0x1f, "cfc133", 0xa60e, 0x1}, {@any, 0x4, 0x5, "f76e7a", 0x2, 0xff}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x67, "a58ea6", 0xff, 0x6}]}}}, 0x82) syz_emit_vhci(&(0x7f00000003c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x81, 0x0, 0x804}}}, 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000280)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x0, 0x14}, @l2cap_cid_le_signaling={{0x10}, @l2cap_ecred_conn_req={{0x17, 0x3, 0xc}, {0x401, 0x6a7, 0x4, 0xff, [0x1, 0x6]}}}}, 0x19) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="030000502bbbe9325c2f4825ed4e2e792fdda73f228ffd7503c16d40f44ecf7770235540cb73eb566be07629ad9d0d92926932bbae11c89a05bab2b57521c5d80fdc4c248dbc73be336b0e1cb2cf1f2859a4c280e00466"], 0x54) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="02c91014001000050017000ce4bd85cf500772f10001800400ccc3cf49b6000300"], 0x19) getdents64(r0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_VENDOR_PKT, 0x15c) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x0, 0x14}, @l2cap_cid_signaling={{0x10}, [@l2cap_move_chan_cfm={{0x10, 0x0, 0x4}, {0x8, 0xfe00}}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0xfff8, 0x1}}]}}, 0x19) syz_emit_vhci(&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x12) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT, 0x2) r1 = syz_open_dev$sg(&(0x7f0000000380), 0x1fb, 0x2000) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f00000000c0)={0x0, 0xffffffff, 0xffffff85}) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="02c9e00a8da2fc2600131b02038000"], 0xf) syz_emit_vhci(&(0x7f0000000500)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x8c}, "b85bd39cdd9c8132caf9a52aaed54f1beac66b0d20609795f390b6e6bd67517df18abe884c05ed0745a531794b2f525f129dab6f54a99c60c7e214bf21b034e69f08e326aef661b51cb4e9cd7eeb3572dd65d0bb6a60899dde430f28eb92f08f1a14ea87df5dec048a0b787386a6a3b5216632f1f1a8f5be29ffb813b5b0c5905eb9d38e163ef73386531ce3"}, 0x90) clone(0x2801f980, 0x0, &(0x7f0000000080), 0x0, 0x0) 17:38:37 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x4, 0xe1, 0x1, 0x6, 0x0, 0x81, 0x9000, 0x4fcc6c6c320417fc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8f, 0x1, @perf_config_ext={0x9, 0x4}, 0x80, 0xa70f, 0x8, 0x2, 0x8000, 0xf43, 0x2, 0x0, 0x361a, 0x0, 0x5}, 0x0, 0x7, r0, 0x9) r1 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x6c000, 0x0) r2 = fork() ptrace(0x10, r2) wait4(r2, 0x0, 0x80000000, &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_WRITE_FIXED={0x5, 0x4, 0x2007, @fd=r1, 0x3f, 0x2, 0x1ff, 0x21, 0x0, {0x1}}, 0x1) r3 = fork() ptrace(0x11, r2) ptrace(0x10, r3) kcmp(r2, r3, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) r4 = fork() ptrace(0x8, 0x0) wait4(r4, 0x0, 0x80000000, &(0x7f0000000240)) r5 = fork() ptrace(0x10, r5) kcmp(r4, r5, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000080), 0x2, 0x0) 17:38:37 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setregid(0x0, 0x0) setgid(0x0) sendfile(r0, r0, 0x0, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="abcb3800747ceae28836b06dd42de1c236ca40046b60c9b4cdf821d8d3af0ef3580d1aa4af05a96c36218ab6a870c4bdec015b83a42ec592d64a9fc24a7ceed07dba2718d9d7d1fe3ce3bc3957e8327c1af3262e35669d18ada7a198efc7134b83239d478025b92d052a0791eca3b0"]) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@private0, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@private}}, &(0x7f0000000200)=0xe8) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setresuid(0x0, r4, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000b80)={{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@private}}, &(0x7f00000003c0)=0xe8) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x2000401, &(0x7f0000000840)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="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", @ANYRESDEC=r3, @ANYBLOB=',loose,euid=', @ANYRESDEC=r4, @ANYBLOB="2c61707072616973652c6673757569643d32663606303561392d306537662d626139662d640f35312d33616162666661642c66736e616d653d3a21252b275c2c66736d616769633d3078303030303030303030303030303037662c6d6561737572652c666f776e65723d", @ANYRESDEC=r5, @ANYBLOB="2c7375626a5f726f6c653d272e2c6673757569643d30003037033663302d663765322d643534342d610555342d30323635373463362c00"]) creat(&(0x7f0000000080)='./file0\x00', 0x80) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r8 = dup(0xffffffffffffffff) copy_file_range(r8, 0x0, 0xffffffffffffffff, 0x0, 0x401, 0x0) getsockname$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000500)=0x1c) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@access_uid}]}}) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendfile(r9, r1, &(0x7f0000000580)=0x8, 0x27) [ 143.118334] Bluetooth: Unexpected continuation frame (len 20) [ 143.119105] Bluetooth: hci3: SCO packet for unknown connection handle 0 [ 143.119146] Bluetooth: Unexpected continuation frame (len 20) [ 143.121766] Bluetooth: hci3: link tx timeout [ 143.122520] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa 17:38:37 executing program 1: mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) mlock(&(0x7f0000a8c000/0x3000)=nil, 0x3000) mlock2(&(0x7f00007df000/0x3000)=nil, 0x3000, 0x0) munmap(&(0x7f00004a2000/0x1000)=nil, 0x1000) munmap(&(0x7f0000479000/0x2000)=nil, 0x2000) mlock(&(0x7f00005bf000/0x4000)=nil, 0x4000) mlock(&(0x7f0000b6e000/0x2000)=nil, 0x2000) munmap(&(0x7f00008b4000/0x3000)=nil, 0x3000) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000000)=0x97d, 0x8000, 0x0) madvise(&(0x7f00007f6000/0x2000)=nil, 0x2000, 0x1) mlock(&(0x7f00009a9000/0x2000)=nil, 0x2000) mlock2(&(0x7f00004db000/0x2000)=nil, 0x2000, 0x0) munmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) 17:38:37 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_score_adj\x00') write$tcp_mem(r0, &(0x7f00000000c0), 0x48) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) pipe(&(0x7f0000000080)={0xffffffffffffffff}) sendmsg$nl_xfrm(r2, &(0x7f0000000440)={&(0x7f0000000140), 0xc, &(0x7f0000000400)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c020000190000082bbd7000fcdbdf25640101020000000000000000000000007f0000010000000000000000000000004e2200094e2000090a00008062000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1e0101000000000000000000000000000004d5ff00000000000000000000000000ffffffffffff060000000000000009000000000000000300000000000000ff0f000000000000ffffffff000000000000000000000000030000000000000009000000000000000100000000000000020000000000000000000000000000001f00000000000000e7d0127704000000ff07000028bd7000000000000a00002020000000000000000c000f00a6c700000000000008001e00090000002c001300ac1414aa000000000000000000000000fe8800000000000000000000000000010000000002000000"], 0x24c}, 0x1, 0x0, 0x0, 0x400c005}, 0x4800) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r3) write$tcp_mem(r0, &(0x7f0000000540), 0x48) [ 143.339022] kmemleak: Found object by alias at 0x607f1a629f24 [ 143.339052] CPU: 0 UID: 0 PID: 3968 Comm: syz-executor.0 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 143.339087] Tainted: [W]=WARN [ 143.339094] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 143.339107] Call Trace: [ 143.339114] [ 143.339123] dump_stack_lvl+0xca/0x120 [ 143.339163] __lookup_object+0x94/0xb0 [ 143.339193] delete_object_full+0x27/0x70 [ 143.339224] free_percpu+0x30/0x1160 [ 143.339254] ? arch_uprobe_clear_state+0x16/0x140 [ 143.339299] futex_hash_free+0x38/0xc0 [ 143.339325] mmput+0x2d3/0x390 [ 143.339360] do_exit+0x79d/0x2970 [ 143.339386] ? signal_wake_up_state+0x85/0x120 [ 143.339415] ? zap_other_threads+0x2b9/0x3a0 [ 143.339446] ? __pfx_do_exit+0x10/0x10 [ 143.339470] ? do_group_exit+0x1c3/0x2a0 [ 143.339497] ? lock_release+0xc8/0x290 [ 143.339529] do_group_exit+0xd3/0x2a0 [ 143.339557] __x64_sys_exit_group+0x3e/0x50 [ 143.339584] x64_sys_call+0x18c5/0x18d0 [ 143.339613] do_syscall_64+0xbf/0x360 [ 143.339635] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.339657] RIP: 0033:0x7f52dff02b19 [ 143.339674] Code: Unable to access opcode bytes at 0x7f52dff02aef. [ 143.339683] RSP: 002b:00007ffcdad6baf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 143.339705] RAX: ffffffffffffffda RBX: 000000000000001e RCX: 00007f52dff02b19 [ 143.339720] RDX: 00007f52dfeb572b RSI: ffffffffffffffbc RDI: 0000000000000000 [ 143.339734] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000001 [ 143.339746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 143.339759] R13: 0000000000000001 R14: 0000000000000001 R15: 00007ffcdad6bbe0 [ 143.339801] [ 143.339808] kmemleak: Object (percpu) 0x607f1a629f20 (size 8): [ 143.339821] kmemleak: comm "syz-executor.0", pid 3968, jiffies 4294810062 [ 143.339834] kmemleak: min_count = 1 [ 143.339842] kmemleak: count = 0 [ 143.339849] kmemleak: flags = 0x21 [ 143.339856] kmemleak: checksum = 0 [ 143.339863] kmemleak: backtrace: [ 143.339869] pcpu_alloc_noprof+0x87a/0x1170 [ 143.339898] percpu_ref_init+0x37/0x400 [ 143.339931] blkg_alloc+0xe9/0x7d0 [ 143.339952] blkg_create+0xe08/0x1420 [ 143.339975] bio_associate_blkg_from_css+0xe06/0x1380 [ 143.340002] bio_associate_blkg+0x10e/0x2a0 [ 143.340026] bio_init+0x2dd/0x570 [ 143.340048] bio_alloc_bioset+0x2cf/0x8c0 [ 143.340075] submit_bh_wbc+0x286/0x720 [ 143.340105] ext4_read_bh_nowait+0x156/0x240 [ 143.340128] __ext4_get_inode_loc+0x813/0x1390 [ 143.340160] ext4_get_inode_loc+0xbd/0x160 [ 143.340180] ext4_reserve_inode_write+0x155/0x350 [ 143.340204] ext4_xattr_set_handle+0x403/0x14c0 [ 143.340224] ext4_initxattrs+0xb9/0x120 [ 143.340249] security_inode_init_security+0x26d/0x390 [ 145.175190] Bluetooth: hci3: command 0x0406 tx timeout [ 147.159691] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 147.161292] Bluetooth: hci3: Injecting HCI hardware error event [ 147.163752] Bluetooth: hci3: hardware error 0x00 [ 149.207020] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 152.541359] cgroup: none used incorrectly 17:38:46 executing program 6: creat(&(0x7f0000000100)='./file0\x00', 0x8) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x5a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = dup(r1) ioctl$int_out(r1, 0x0, &(0x7f0000000040)) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@posixacl}, {@version_L}, {@cache_fscache}, {@debug={'debug', 0x3d, 0x8}}], [{@fsuuid={'fsuuid', 0x3d, {[0x37, 0x64, 0x61, 0x33, 0x64, 0x30, 0x63, 0x34], 0x2d, [0x65, 0x65, 0x38, 0x34], 0x2d, [0x65, 0x35, 0x61, 0x66], 0x2d, [0x37, 0x6e, 0x34, 0x6b], 0x2d, [0x31, 0x39, 0x30, 0x63, 0x30, 0x36, 0x63, 0x62]}}}]}}) futex(0x0, 0x7, 0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) 17:38:46 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ptrace(0xffffffffffffffff, 0x0) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x0, 0x0, 0x9, 0x0, 0x0, 0x5, 0x180, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000480)}, 0x0, 0x1000, 0x0, 0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x100000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) r4 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f00000002c0)={0x2, 0x80, 0x3f, 0x0, 0x1, 0x4, 0x0, 0x8000, 0x10, 0xc, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x9, 0x8}, 0x8000, 0x1, 0x80000001, 0x9, 0x5, 0x6, 0x1ff, 0x0, 0x2, 0x0, 0x1}) r5 = syz_open_dev$sg(0x0, 0x200, 0x0) dup2(0xffffffffffffffff, r5) perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x6, 0x7f, 0x5, 0x1, 0x0, 0x7, 0x20094, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x8, 0x1, @perf_bp={&(0x7f0000000340), 0xc}, 0x8020, 0x0, 0x6, 0x8, 0xffffffff, 0x2, 0x3, 0x0, 0x81, 0x0, 0x100000000}, 0x0, 0x1, 0xffffffffffffffff, 0x1) ioctl$BLKTRACESETUP(r4, 0xc0481273, 0x0) io_submit(r3, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000000000)="fa", 0x1, 0x40}]) r6 = getpid() perf_event_open(&(0x7f0000000240)={0x3, 0x80, 0x9, 0x6, 0x0, 0x3, 0x0, 0x5, 0x22800, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000000380), 0xb}, 0x41494, 0x9, 0x7, 0x4, 0x6, 0x5, 0xfff, 0x0, 0x4, 0x0, 0x1ff}, r6, 0x6, 0xffffffffffffffff, 0xa) r7 = getpid() kcmp(r6, r7, 0x3, r0, r4) epoll_create(0x0) r8 = openat$cgroup_ro(r2, &(0x7f00000001c0)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r8, 0x2275, &(0x7f0000000200)=0x8) 17:38:46 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)={[{}, {@none}, {@xattr}, {@name={'name', 0x3d, 'tmpfs\x00'}}], [{@pcr={'pcr', 0x3d, 0x2c}}, {@measure}]}) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x3f, 0x4, &(0x7f0000000380)=[{&(0x7f0000000240)="8eaa115091247bc5ef6b149897d9b985d380ed117fec2d90c791f22240de1d2a8f57d25fc44543289e04f8eb7f42864e9a9cef59ef22c2e4e118213534541803fd1a2a88a79a58c7584140398d33354e62369d5e2fa52a9eb8e644862c00183a8a66865f15ee2f643c022e2ab0d503c5f5dfb692a9f2cfe2f58b69506491dc9e29fd45ffb859b6950a5a0052e7823bde30f05fbe994f5705d0b3bf2363e49287b1abcb574a", 0xa5, 0x9}, {&(0x7f0000000140)="e3525e786aaa5f301114a1ed6b89e92289d93fd9fd964c8c339e3230119488d9aa00c18a15ac29136ffbfa81047c7826619a6ef60462f9c1c24ec7c29b17c30d3e8c7bb4", 0x44, 0x1}, {&(0x7f0000000300)="482a0982b9d9b995d5094d0fb58ba319662288324b4db523a464b3a5b8e250e6c3cff2c37553aa84db1494cdaca5bebf8f77e5e8b756b43ac8ca87dfd22f40de0877651b45416b44c4288662f22243fd70d0b32bec2b9bb539bb927a05ed4be7470f", 0x62, 0x9}, {&(0x7f00000000c0)="e91d445d00a59033026af308b6cfb38c80b3c63910297ca8f7fdd8f0f46d272f7bd343d92cafb7112241f9d37f", 0x2d, 0x9}], 0x2020, &(0x7f0000000400)={[{@mpol={'mpol', 0x3d, {'bind', '=relative', @void}}}, {@nr_inodes={'nr_inodes', 0x3d, [0x6b, 0x65, 0x67, 0x25]}}, {@huge_within_size}], [{@appraise}, {@euid_gt={'euid>', 0xffffffffffffffff}}, {@fsname={'fsname', 0x3d, '\'+-)-+(-,@%}'}}, {@obj_type={'obj_type', 0x3d, '+'}}, {@subj_type={'subj_type', 0x3d, '&+!\f'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'xattr'}}]}) r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) fsetxattr$system_posix_acl(r0, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000180)={{}, {}, [], {}, [{0x8, 0x0, r2}]}, 0x2c, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setresuid(0x0, r3, 0x0) syz_mount_image$tmpfs(&(0x7f0000000500), &(0x7f0000000540)='./file1\x00', 0x6, 0x1, &(0x7f0000000600)=[{&(0x7f0000000580)="0e535a7f09a9517b0359a701c64513a0925d4043e4cce30b2a6810d7b224d8253146b4ecaed62fc44a2d3658c5f48c34e7d4f942e453138a7e53511bacefe857337abcc1cb6b2d32fbee94992a44762d2798b8dbd2cc5cf117a20f3fccc90c25b5fbbe9421c85926f715047818e88f7cf583b49371eb46aebea9eac3e7001efc", 0x80, 0x4}], 0x4000000, &(0x7f0000000640)={[{}, {@gid={'gid', 0x3d, r2}}, {@huge_never}, {@huge_always}, {@uid={'uid', 0x3d, 0xffffffffffffffff}}, {@huge_within_size}, {@mode}], [{@rootcontext={'rootcontext', 0x3d, 'root'}}, {@uid_eq={'uid', 0x3d, r3}}, {@fsmagic={'fsmagic', 0x3d, 0x7ff}}, {@context={'context', 0x3d, 'root'}}]}) chmod(&(0x7f00000004c0)='./file1\x00', 0x17) 17:38:46 executing program 3: r0 = gettid() r1 = getpgrp(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000380)={0x1, &(0x7f0000000340)=[{0x6}]}) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) rt_tgsigqueueinfo(r1, r0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x80000001}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000180)=0x0) perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0x4, 0x63, 0x3, 0x5, 0x0, 0x4783, 0x1300, 0x4, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x7, @perf_bp={&(0x7f0000000040), 0x4}, 0x8002, 0x2, 0xeffa, 0x7, 0x802, 0xbe7, 0x200, 0x0, 0x200, 0x0, 0xe828}, r3, 0xa, 0xffffffffffffffff, 0x3) ioctl$F2FS_IOC_GARBAGE_COLLECT(r2, 0x4004f506, &(0x7f0000000000)=0x1) 17:38:46 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0xd8c4, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) recvmmsg$unix(r0, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0}}], 0x50a, 0x0, 0x0) 17:38:46 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000500000000f000000000000000200000006000000000008000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000008000000018000000c20500002b82", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000039c043f6970341999833e8e90d2470c4010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000dbf4655fdcf4655fdcf4655f00000000000004008000000000000800050000000af301000400000000000000000000000100000010", 0x3d, 0x4080}, {&(0x7f0000012800)="ed41000000100000dcf4655fdcf4655fdcf4655f00000000000002", 0x1b, 0x4580}, {&(0x7f0000012b00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x10000}, {&(0x7f0000013000)="504d4d00504d4dff", 0x8, 0x40000}, {0x0, 0x0, 0x80000}], 0x0, &(0x7f0000013b00)) r1 = openat(r0, &(0x7f0000000140)='./file0/file0\x00', 0x680000, 0x24) lstat(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000080)) pwrite64(r1, &(0x7f0000000300)="0da6362aa84d495b4f23396c77d2da2e44bdaf915f81b778a266e5e0d8b2866040c0dec9fc97f81202ec5b494341b07446ac049ef871e486f38ab19fcbee06b455585cd6360578d55a48aeebbd269795556c58ecdf83c778a0e41061522561722d9b6274e6257233de0a310c82ea0d28c2900b7dad90638332df31cdc8c427a9bd892cf96e396c74eb8b930488429b1539671b51564112298888651b669c53c1aebeaba6da04eded65b6939a609a44f5f60b192a81ba41ab2b887c9e7cf0ad32114d064ccdf4b5d53eb7e18427e424ca0ac839fd44818d4b077fdedf56528ee6823e0e193bf8bce5b6296556d449b6f7", 0xf0, 0xc48) 17:38:46 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r3, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000280)={0x20, r4, 0x1, 0x0, 0x0, {0x1a}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x20}}, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r8 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x12, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r8, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x1, 0x0, @fd_index=0x8, 0x0, 0x0, 0x0, {0x4}, 0x0, {0x0, r7}}, 0x2f5a) syz_io_uring_submit(0x0, r8, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x1, 0x0, @fd_index=0xa, 0x0, 0x0, 0x4, 0x0, 0x1}, 0xd3) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, 0x0, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x6b45906f3714b3c4}, 0x85) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, r6}) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setresuid(0x0, r9, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setresuid(0x0, r10, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)=@delpolicy={0x13c, 0x14, 0x9, 0x70bd2a, 0x25dfdbff, {{@in6=@mcast2, @in=@local, 0x4e23, 0x2, 0x4e21, 0x0, 0xa, 0x0, 0x20, 0x3c, r6, r9}, 0x6e6bb3}, [@user_kmaddress={0x2c, 0x13, {@in6=@remote, @in=@private=0xa010101, 0x0, 0xa}}, @policy={0xac, 0x7, {{@in=@dev={0xac, 0x14, 0x14, 0x26}, @in6=@private2, 0x4e23, 0x7fff, 0x4e20, 0x8d8, 0xa, 0x0, 0xa0, 0x0, 0x0, r10}, {0x10000, 0x4, 0x0, 0x2, 0x6ed, 0x8, 0x4, 0x5}, {0x3, 0x9, 0x79f, 0xc922}, 0x6, 0x6e6bba, 0x2, 0x1, 0x0, 0x3}}, @srcaddr={0x14, 0xd, @in=@loopback}]}, 0x13c}, 0x1, 0x0, 0x0, 0x11}, 0x4001) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'wlan0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="2c0000000000000000000000000000000000000000000000000000000000000000000000d3340f8831937766058a4ae7fb11"]}) 17:38:46 executing program 2: syz_extract_tcp_res$synack(&(0x7f00000000c0)={0x41424344}, 0x1, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000100)={0x41424344}, 0x1, 0x0) syz_emit_ethernet(0xbc, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd607437b800862b00ff020000000000000000000000000001ff0100000000000000000000000000013c000004", @ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="50000000907800f946bdbff6151f915db06e2783fb908d9508d84712d677629ae3294a8637438b90c135d04fe567f96cbf6267dd8eaff6a332344ab6e7079db778601c9ede2c79460cc1146d2897342c71c1c292479f109d2ebbdf67656945dd50361f62881b1f4ae2b6ff21ee60000000000000000000000000000000728d43d5a50c508e4815565766c3c9f97d41"], 0x0) clock_gettime(0x0, &(0x7f0000002540)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000002440)=[{{&(0x7f0000000000)=@generic, 0x80, &(0x7f0000000340)=[{&(0x7f0000000280)=""/167, 0xa7}, {&(0x7f0000000080)=""/14, 0xe}], 0x2, &(0x7f0000000380)=""/119, 0x77}, 0x5}, {{&(0x7f0000000400)=@nl=@proc, 0x80, &(0x7f0000001980)=[{&(0x7f0000000480)=""/221, 0xdd}, {&(0x7f0000000580)=""/177, 0xb1}, {&(0x7f0000000640)=""/78, 0x4e}, {&(0x7f00000006c0)=""/241, 0xf1}, {&(0x7f00000007c0)=""/162, 0xa2}, {&(0x7f0000000880)=""/131, 0x83}, {&(0x7f0000000940)}, {&(0x7f0000000980)=""/4096, 0x1000}], 0x8, &(0x7f0000001a00)=""/95, 0x5f}, 0x80}, {{0x0, 0x0, &(0x7f0000002040)=[{&(0x7f0000001a80)=""/137, 0x89}, {&(0x7f0000001b40)=""/155, 0x9b}, {&(0x7f0000001c00)=""/149, 0x95}, {&(0x7f0000001cc0)=""/51, 0x33}, {&(0x7f0000001d00)=""/203, 0xcb}, {&(0x7f0000001e00)=""/102, 0x66}, {&(0x7f0000001e80)=""/38, 0x26}, {&(0x7f0000001ec0)=""/181, 0xb5}, {&(0x7f0000001f80)=""/189, 0xbd}], 0x9, &(0x7f0000002100)=""/238, 0xee}, 0x60f}, {{0x0, 0x0, &(0x7f0000002300)=[{&(0x7f0000002200)=""/196, 0xc4}], 0x1, &(0x7f0000002340)=""/233, 0xe9}, 0xffff}], 0x4, 0x40010100, &(0x7f0000002580)={r2, r3+60000000}) write$tun(0xffffffffffffffff, &(0x7f00000025c0)={@val={0x0, 0xf6}, @void, @mpls={[{0x7fff, 0x0, 0x1}, {0x7e475}], @ipv6=@udp={0x4, 0x6, "1e6b1e", 0xb8, 0x11, 0xff, @private2, @ipv4={'\x00', '\xff\xff', @remote}, {[@fragment={0x63, 0x0, 0x1, 0x1, 0x0, 0xc, 0x65}, @routing={0x0, 0xc, 0x0, 0xff, 0x0, [@dev={0xfe, 0x80, '\x00', 0x14}, @private1, @mcast2, @private0, @loopback, @mcast2]}], {0x4e23, 0x4e22, 0x48, 0x0, @wg=@cookie={0x3, 0x1, "943518eb4258948c9890a2ea896c558b60eb8e466df225f1", "1180eb8d5dcb48f8e8011f8a0dae9f6b21ecfc8b20a9c94ebb2130f42d68419a"}}}}}}, 0xec) syz_extract_tcp_res$synack(&(0x7f0000000140), 0x1, 0x0) [ 152.628437] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000032: 0000 [#1] SMP KASAN NOPTI [ 152.630372] KASAN: null-ptr-deref in range [0x0000000000000190-0x0000000000000197] [ 152.631633] CPU: 1 UID: 0 PID: 4018 Comm: syz-executor.3 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 152.636370] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 152.637349] Tainted: [W]=WARN [ 152.637363] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 152.637378] RIP: 0010:perf_tp_event+0x175/0xe70 [ 152.641091] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 152.644170] RSP: 0018:ffff888020f2f800 EFLAGS: 00010212 [ 152.645077] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: 0000000000000002 [ 152.646331] RDX: ffff888017bc1b80 RSI: ffffffff818995b7 RDI: 0000000000000191 [ 152.647520] RBP: ffff888020f2fa70 R08: ffff88806cf31340 R09: ffffe8ffffd0e440 [ 152.648714] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 [ 152.649896] R13: 000000000000002c R14: ffff88806cf31340 R15: dffffc0000000000 [ 152.651086] FS: 000055556b0f9400(0000) GS:ffff8880e56dd000(0000) knlGS:0000000000000000 [ 152.652461] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 152.653448] CR2: 000055556b0fac18 CR3: 00000000138f3000 CR4: 0000000000350ef0 [ 152.654627] Call Trace: [ 152.655069] [ 152.655477] ? arch_scale_cpu_capacity+0x17/0xa0 [ 152.656330] ? __pfx_perf_tp_event+0x10/0x10 [ 152.657086] ? __asan_memset+0x24/0x50 [ 152.657805] ? perf_trace_lock+0xb5/0x5d0 [ 152.658528] ? kvm_sched_clock_read+0x16/0x30 [ 152.659319] ? sched_clock+0x37/0x60 [ 152.659983] ? sched_clock_cpu+0x6c/0x4e0 [ 152.660721] ? lock_is_held_type+0x9e/0x120 [ 152.661491] ? perf_trace_run_bpf_submit+0xef/0x180 [ 152.662341] perf_trace_run_bpf_submit+0xef/0x180 [ 152.663178] perf_trace_lock+0x337/0x5d0 [ 152.663911] ? __pfx_perf_trace_lock+0x10/0x10 [ 152.664707] ? lock_acquire+0x15e/0x2f0 [ 152.665397] ? futex_ref_get+0x48/0x300 [ 152.666095] ? futex_ref_get+0x114/0x300 [ 152.666797] ? futex_hash+0x15c/0x390 [ 152.667453] lock_release+0x1ab/0x290 [ 152.668128] ? futex_hash+0x15c/0x390 [ 152.668784] futex_ref_get+0x119/0x300 [ 152.669447] ? futex_hash+0x15c/0x390 [ 152.670073] futex_hash+0x70/0x390 [ 152.670703] futex_wake+0x143/0x540 [ 152.671348] ? put_pid+0x1f/0x30 [ 152.671939] ? kernel_clone+0x204/0x7f0 [ 152.672619] ? __pfx_futex_wake+0x10/0x10 [ 152.673339] ? __pfx_kernel_clone+0x10/0x10 [ 152.674062] ? perf_trace_lock+0xb5/0x5d0 [ 152.674785] do_futex+0x26d/0x370 [ 152.675392] ? __pfx_do_futex+0x10/0x10 [ 152.676079] ? __pfx___do_sys_clone+0x10/0x10 [ 152.676840] ? find_held_lock+0x2b/0x80 [ 152.677525] __x64_sys_futex+0x1c9/0x4d0 [ 152.678233] ? __pfx___x64_sys_futex+0x10/0x10 [ 152.678996] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 152.679884] do_syscall_64+0xbf/0x360 [ 152.680544] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.681415] RIP: 0033:0x7f7522a6db19 [ 152.682045] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 152.685013] RSP: 002b:00007ffe36134b78 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 152.686297] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f7522a6db19 [ 152.687460] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f7522b80f68 [ 152.688766] RBP: 00007f7522b80f60 R08: 00007f751ffe3700 R09: 0000000000000000 [ 152.690201] R10: 00007f751ffe3700 R11: 0000000000000246 R12: 00007f7522b85018 [ 152.691628] R13: 00007ffe36134c80 R14: 00007f7522b80f60 R15: 00000000000253c7 [ 152.692979] [ 152.693405] Modules linked in: [ 152.694007] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000032: 0000 [#2] SMP KASAN NOPTI [ 152.695887] KASAN: null-ptr-deref in range [0x0000000000000190-0x0000000000000197] [ 152.697115] CPU: 1 UID: 0 PID: 4018 Comm: syz-executor.3 Tainted: G D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 152.699026] Tainted: [D]=DIE, [W]=WARN [ 152.699653] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 152.700974] RIP: 0010:perf_tp_event+0x175/0xe70 [ 152.701753] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 152.704666] RSP: 0018:ffff88806cf08a80 EFLAGS: 00010012 [ 152.705520] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: 0000000000000002 [ 152.706653] RDX: ffff888017bc1b80 RSI: ffffffff818995b7 RDI: 0000000000000191 [ 152.707800] RBP: ffff88806cf08cf0 R08: ffff88806cf31490 R09: ffffe8ffffd0e440 [ 152.708944] R10: 0000000000000000 R11: ffff88806cf37018 R12: dffffc0000000000 [ 152.710068] R13: 0000000000000024 R14: ffff88806cf31490 R15: dffffc0000000000 [ 152.711230] FS: 000055556b0f9400(0000) GS:ffff8880e56dd000(0000) knlGS:0000000000000000 [ 152.712564] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 152.713497] CR2: 000055556b0fac18 CR3: 00000000138f3000 CR4: 0000000000350ef0 [ 152.714649] Call Trace: [ 152.715066] [ 152.715492] ? __pfx_perf_tp_event+0x10/0x10 [ 152.716265] ? perf_trace_lock+0xb5/0x5d0 [ 152.716944] ? __pfx_perf_trace_lock+0x10/0x10 [ 152.717695] ? perf_trace_lock_acquire+0xc9/0x700 [ 152.718483] ? perf_trace_lock_acquire+0xc9/0x700 [ 152.719273] ? perf_trace_lock+0xb5/0x5d0 [ 152.719951] ? __pfx_perf_trace_lock+0x10/0x10 [ 152.720709] ? kvm_sched_clock_read+0x16/0x30 [ 152.721449] ? sched_clock+0x37/0x60 [ 152.722050] ? sched_clock_cpu+0x6c/0x4e0 [ 152.722728] ? perf_trace_run_bpf_submit+0xef/0x180 [ 152.723542] perf_trace_run_bpf_submit+0xef/0x180 [ 152.724354] perf_trace_lock+0x337/0x5d0 [ 152.725010] ? place_entity+0x300/0x410 [ 152.725654] ? kvm_sched_clock_read+0x16/0x30 [ 152.726388] ? __pfx_perf_trace_lock+0x10/0x10 [ 152.727139] ? check_preempt_wakeup_fair+0x6e/0x950 [ 152.727962] ? sched_ttwu_pending+0x2e0/0x4a0 [ 152.728705] lock_release+0x1ab/0x290 [ 152.729338] ? ttwu_do_activate+0x1a4/0x8a0 [ 152.730035] _raw_spin_unlock+0x16/0x40 [ 152.730679] sched_ttwu_pending+0x2e0/0x4a0 [ 152.731385] ? __pfx_sched_ttwu_pending+0x10/0x10 [ 152.732182] ? hrtimer_interrupt+0x652/0x830 [ 152.732881] __flush_smp_call_function_queue+0x434/0x740 [ 152.733760] __sysvec_call_function_single+0x6d/0x370 [ 152.734598] sysvec_call_function_single+0xa1/0xc0 [ 152.735393] [ 152.735756] [ 152.736149] asm_sysvec_call_function_single+0x1a/0x20 [ 152.736961] RIP: 0010:oops_exit+0x0/0x50 [ 152.737631] Code: f1 39 00 be ff ff ff ff 48 c7 c7 50 ac 43 86 e8 c6 0f f9 ff 5b e9 20 f1 39 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <66> 0f 1f 00 53 e8 06 f1 39 00 8b 1d c0 ed 4e 06 31 ff 89 de e8 27 [ 152.740450] RSP: 0018:ffff888020f2f690 EFLAGS: 00000202 [ 152.741284] RAX: 0000000000000000 RBX: 0000000000000293 RCX: ffffffff8139f06f [ 152.742404] RDX: ffff888017bc1b80 RSI: ffffffff812a3dca RDI: 0000000000000007 [ 152.743517] RBP: 000000000000000b R08: 0000000000000001 R09: fffffbfff0f11c90 [ 152.744641] R10: 0000000000000000 R11: 0000000000000001 R12: ffff888020f2f758 [ 152.745744] R13: 0000000000000000 R14: dffffc0000000032 R15: 0000000000000000 [ 152.746859] ? add_taint+0x5f/0xd0 [ 152.747437] ? oops_end+0x4a/0xe0 [ 152.748012] oops_end+0x65/0xe0 [ 152.748563] exc_general_protection+0x1a2/0x330 [ 152.749316] asm_exc_general_protection+0x26/0x30 [ 152.750067] RIP: 0010:perf_tp_event+0x175/0xe70 [ 152.750814] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 152.753613] RSP: 0018:ffff888020f2f800 EFLAGS: 00010212 [ 152.754440] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: 0000000000000002 [ 152.755548] RDX: ffff888017bc1b80 RSI: ffffffff818995b7 RDI: 0000000000000191 [ 152.756676] RBP: ffff888020f2fa70 R08: ffff88806cf31340 R09: ffffe8ffffd0e440 [ 152.757784] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 [ 152.758883] R13: 000000000000002c R14: ffff88806cf31340 R15: dffffc0000000000 [ 152.760012] ? perf_tp_event+0x167/0xe70 [ 152.760701] ? arch_scale_cpu_capacity+0x17/0xa0 [ 152.761481] ? __pfx_perf_tp_event+0x10/0x10 [ 152.762198] ? __asan_memset+0x24/0x50 [ 152.762838] ? perf_trace_lock+0xb5/0x5d0 [ 152.763525] ? kvm_sched_clock_read+0x16/0x30 [ 152.764281] ? sched_clock+0x37/0x60 [ 152.764869] ? sched_clock_cpu+0x6c/0x4e0 [ 152.765548] ? lock_is_held_type+0x9e/0x120 [ 152.766256] ? perf_trace_run_bpf_submit+0xef/0x180 [ 152.767055] perf_trace_run_bpf_submit+0xef/0x180 [ 152.767829] perf_trace_lock+0x337/0x5d0 [ 152.768511] ? __pfx_perf_trace_lock+0x10/0x10 [ 152.769251] ? lock_acquire+0x15e/0x2f0 [ 152.769886] ? futex_ref_get+0x48/0x300 [ 152.770534] ? futex_ref_get+0x114/0x300 [ 152.771194] ? futex_hash+0x15c/0x390 [ 152.771790] lock_release+0x1ab/0x290 [ 152.772426] ? futex_hash+0x15c/0x390 [ 152.773032] futex_ref_get+0x119/0x300 [ 152.773652] ? futex_hash+0x15c/0x390 [ 152.774268] futex_hash+0x70/0x390 [ 152.774821] futex_wake+0x143/0x540 [ 152.775397] ? put_pid+0x1f/0x30 [ 152.775930] ? kernel_clone+0x204/0x7f0 [ 152.776547] ? __pfx_futex_wake+0x10/0x10 [ 152.777210] ? __pfx_kernel_clone+0x10/0x10 [ 152.777866] ? perf_trace_lock+0xb5/0x5d0 [ 152.778516] do_futex+0x26d/0x370 [ 152.779055] ? __pfx_do_futex+0x10/0x10 [ 152.779672] ? __pfx___do_sys_clone+0x10/0x10 [ 152.780380] ? find_held_lock+0x2b/0x80 [ 152.780995] __x64_sys_futex+0x1c9/0x4d0 [ 152.781651] ? __pfx___x64_sys_futex+0x10/0x10 [ 152.782370] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 152.783177] do_syscall_64+0xbf/0x360 [ 152.783755] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.784557] RIP: 0033:0x7f7522a6db19 [ 152.785145] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 152.787889] RSP: 002b:00007ffe36134b78 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 152.789036] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f7522a6db19 [ 152.790094] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f7522b80f68 [ 152.791327] RBP: 00007f7522b80f60 R08: 00007f751ffe3700 R09: 0000000000000000 [ 152.792673] R10: 00007f751ffe3700 R11: 0000000000000246 R12: 00007f7522b85018 [ 152.794012] R13: 00007ffe36134c80 R14: 00007f7522b80f60 R15: 00000000000253c7 [ 152.795213] [ 152.795576] Modules linked in: [ 152.796082] ---[ end trace 0000000000000000 ]--- [ 152.796796] RIP: 0010:perf_tp_event+0x175/0xe70 [ 152.797537] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 152.800374] RSP: 0018:ffff888020f2f800 EFLAGS: 00010212 [ 152.801156] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: 0000000000000002 [ 152.802234] RDX: ffff888017bc1b80 RSI: ffffffff818995b7 RDI: 0000000000000191 [ 152.803279] RBP: ffff888020f2fa70 R08: ffff88806cf31340 R09: ffffe8ffffd0e440 [ 152.804346] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 [ 152.805388] R13: 000000000000002c R14: ffff88806cf31340 R15: dffffc0000000000 [ 152.806474] FS: 000055556b0f9400(0000) GS:ffff8880e56dd000(0000) knlGS:0000000000000000 [ 152.807656] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 152.808530] CR2: 000055556b0fac18 CR3: 00000000138f3000 CR4: 0000000000350ef0 [ 152.809582] Kernel panic - not syncing: Fatal exception in interrupt [ 152.810811] Kernel Offset: disabled [ 152.811345] ---[ end Kernel panic - not syncing: Fatal exception in interrupt ]--- VM DIAGNOSIS: 17:38:46 Registers: info registers vcpu 0 RAX=ffffffff85cfee40 RBX=1ffff11001c6af1d RCX=0000000000000003 RDX=ffffffff85b236a0 RSI=ffffffff85cfee40 RDI=ffffffff85b236a0 RBP=ffff88800e357990 RSP=ffff88800e3578a0 R8 =ffffffff84d1d6e0 R9 =0000000000000001 R10=ffffffff85b23640 R11=0000000000000001 R12=ffffffff85cfee58 R13=ffff88800e357968 R14=0000000000000000 R15=0000000000000023 RIP=ffffffff8150e410 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000555572ce3400 00000000 00000000 GS =0000 ffff8880e55dd000 00000000 00000000 LDT=0000 fffffe0600000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f5a78815718 CR3=000000001d9d7000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00007f5a7b3a77c000007f5a7b3a77c8 XMM02=00007f5a7b3a77e000007f5a7b3a77c0 XMM03=00007f5a7b3a77c800007f5a7b3a77c0 XMM04=5d911f15f6bfbd46f900789000000050 XMM05=417df9c9c366575615488e500ca5d543 XMM06=8d720000000000000000000000000000 XMM07=0060ee21ffb6e24a1f1b88621f3650dd XMM08=45696567dfbb2e9d109f4792c2c1712c XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff828e32c5 RDI=ffffffff88724180 RBP=ffffffff88724140 RSP=ffff888020f2f160 R8 =0000000000000000 R9 =ffffed10016cf046 R10=0000000000000020 R11=552031203a555043 R12=0000000000000020 R13=0000000000000010 R14=ffffffff88724140 R15=ffffffff828e32b0 RIP=ffffffff828e331d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 000055556b0f9400 00000000 00000000 GS =0000 ffff8880e56dd000 00000000 00000000 LDT=0000 fffffe6300000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055556b0fac18 CR3=00000000138f3000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00007f7522b547c000007f7522b547c8 XMM02=00007f7522b547e000007f7522b547c0 XMM03=00007f7522b547c800007f7522b547c0 XMM04=ffffffff0000ff00000000ff00000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000