Warning: Permanently added '[localhost]:17268' (ECDSA) to the list of known hosts. 2025/08/30 21:33:50 fuzzer started 2025/08/30 21:33:50 dialing manager at localhost:43077 syzkaller login: [ 51.255053] cgroup: Unknown subsys name 'net' [ 51.330385] cgroup: Unknown subsys name 'cpuset' [ 51.345086] cgroup: Unknown subsys name 'rlimit' 2025/08/30 21:34:00 syscalls: 2214 2025/08/30 21:34:00 code coverage: enabled 2025/08/30 21:34:00 comparison tracing: enabled 2025/08/30 21:34:00 extra coverage: enabled 2025/08/30 21:34:00 setuid sandbox: enabled 2025/08/30 21:34:00 namespace sandbox: enabled 2025/08/30 21:34:00 Android sandbox: enabled 2025/08/30 21:34:00 fault injection: enabled 2025/08/30 21:34:00 leak checking: enabled 2025/08/30 21:34:00 net packet injection: enabled 2025/08/30 21:34:00 net device setup: enabled 2025/08/30 21:34:00 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/08/30 21:34:00 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/08/30 21:34:00 USB emulation: enabled 2025/08/30 21:34:00 hci packet injection: enabled 2025/08/30 21:34:00 wifi device emulation: enabled 2025/08/30 21:34:00 802.15.4 emulation: enabled 2025/08/30 21:34:00 fetching corpus: 50, signal 17034/18887 (executing program) 2025/08/30 21:34:01 fetching corpus: 100, signal 31181/34614 (executing program) 2025/08/30 21:34:01 fetching corpus: 150, signal 37021/41979 (executing program) 2025/08/30 21:34:01 fetching corpus: 200, signal 43641/50021 (executing program) 2025/08/30 21:34:01 fetching corpus: 250, signal 49337/57061 (executing program) 2025/08/30 21:34:01 fetching corpus: 300, signal 56628/65472 (executing program) 2025/08/30 21:34:01 fetching corpus: 350, signal 59893/70006 (executing program) 2025/08/30 21:34:01 fetching corpus: 400, signal 63054/74375 (executing program) 2025/08/30 21:34:01 fetching corpus: 450, signal 65950/78491 (executing program) 2025/08/30 21:34:01 fetching corpus: 500, signal 70794/84261 (executing program) 2025/08/30 21:34:01 fetching corpus: 550, signal 74004/88518 (executing program) 2025/08/30 21:34:01 fetching corpus: 600, signal 76173/91800 (executing program) 2025/08/30 21:34:01 fetching corpus: 650, signal 78811/95455 (executing program) 2025/08/30 21:34:02 fetching corpus: 700, signal 81556/99116 (executing program) 2025/08/30 21:34:02 fetching corpus: 750, signal 86228/104321 (executing program) 2025/08/30 21:34:02 fetching corpus: 800, signal 88948/107866 (executing program) 2025/08/30 21:34:02 fetching corpus: 850, signal 90630/110489 (executing program) 2025/08/30 21:34:02 fetching corpus: 900, signal 93382/114016 (executing program) 2025/08/30 21:34:02 fetching corpus: 950, signal 95497/116877 (executing program) 2025/08/30 21:34:02 fetching corpus: 1000, signal 97125/119336 (executing program) 2025/08/30 21:34:02 fetching corpus: 1050, signal 99463/122400 (executing program) 2025/08/30 21:34:02 fetching corpus: 1100, signal 101083/124803 (executing program) 2025/08/30 21:34:02 fetching corpus: 1150, signal 102181/126791 (executing program) 2025/08/30 21:34:02 fetching corpus: 1200, signal 103512/128881 (executing program) 2025/08/30 21:34:02 fetching corpus: 1250, signal 105102/131098 (executing program) 2025/08/30 21:34:03 fetching corpus: 1300, signal 106491/133216 (executing program) 2025/08/30 21:34:03 fetching corpus: 1350, signal 108086/135396 (executing program) 2025/08/30 21:34:03 fetching corpus: 1400, signal 109131/137147 (executing program) 2025/08/30 21:34:03 fetching corpus: 1450, signal 110062/138856 (executing program) 2025/08/30 21:34:03 fetching corpus: 1500, signal 111058/140604 (executing program) 2025/08/30 21:34:03 fetching corpus: 1550, signal 112186/142461 (executing program) 2025/08/30 21:34:03 fetching corpus: 1600, signal 113413/144335 (executing program) 2025/08/30 21:34:03 fetching corpus: 1650, signal 114804/146319 (executing program) 2025/08/30 21:34:03 fetching corpus: 1700, signal 115904/147949 (executing program) 2025/08/30 21:34:03 fetching corpus: 1750, signal 116607/149373 (executing program) 2025/08/30 21:34:03 fetching corpus: 1800, signal 118076/151315 (executing program) 2025/08/30 21:34:03 fetching corpus: 1850, signal 118846/152730 (executing program) 2025/08/30 21:34:03 fetching corpus: 1900, signal 119906/154288 (executing program) 2025/08/30 21:34:04 fetching corpus: 1950, signal 120695/155707 (executing program) 2025/08/30 21:34:04 fetching corpus: 2000, signal 121619/157174 (executing program) 2025/08/30 21:34:04 fetching corpus: 2050, signal 122581/158672 (executing program) 2025/08/30 21:34:04 fetching corpus: 2100, signal 123643/160205 (executing program) 2025/08/30 21:34:04 fetching corpus: 2150, signal 124832/161847 (executing program) 2025/08/30 21:34:04 fetching corpus: 2200, signal 125552/163231 (executing program) 2025/08/30 21:34:04 fetching corpus: 2250, signal 126441/164607 (executing program) 2025/08/30 21:34:04 fetching corpus: 2300, signal 127125/165829 (executing program) 2025/08/30 21:34:04 fetching corpus: 2350, signal 128063/167195 (executing program) 2025/08/30 21:34:04 fetching corpus: 2400, signal 128708/168389 (executing program) 2025/08/30 21:34:04 fetching corpus: 2450, signal 129325/169543 (executing program) 2025/08/30 21:34:04 fetching corpus: 2500, signal 130193/170831 (executing program) 2025/08/30 21:34:05 fetching corpus: 2550, signal 130856/171999 (executing program) 2025/08/30 21:34:05 fetching corpus: 2600, signal 131651/173248 (executing program) 2025/08/30 21:34:05 fetching corpus: 2650, signal 132469/174431 (executing program) 2025/08/30 21:34:05 fetching corpus: 2700, signal 133668/175800 (executing program) 2025/08/30 21:34:05 fetching corpus: 2750, signal 134577/177088 (executing program) 2025/08/30 21:34:05 fetching corpus: 2800, signal 135090/178131 (executing program) 2025/08/30 21:34:05 fetching corpus: 2850, signal 136355/179600 (executing program) 2025/08/30 21:34:05 fetching corpus: 2900, signal 137199/180782 (executing program) 2025/08/30 21:34:05 fetching corpus: 2950, signal 137892/181842 (executing program) 2025/08/30 21:34:05 fetching corpus: 3000, signal 138673/182941 (executing program) 2025/08/30 21:34:05 fetching corpus: 3050, signal 139251/183912 (executing program) 2025/08/30 21:34:06 fetching corpus: 3100, signal 140069/185075 (executing program) 2025/08/30 21:34:06 fetching corpus: 3150, signal 140755/186080 (executing program) 2025/08/30 21:34:06 fetching corpus: 3200, signal 141175/186953 (executing program) 2025/08/30 21:34:06 fetching corpus: 3250, signal 141829/187960 (executing program) 2025/08/30 21:34:06 fetching corpus: 3300, signal 142643/189030 (executing program) 2025/08/30 21:34:06 fetching corpus: 3350, signal 143899/190236 (executing program) 2025/08/30 21:34:06 fetching corpus: 3400, signal 144381/191156 (executing program) 2025/08/30 21:34:06 fetching corpus: 3450, signal 145131/192103 (executing program) 2025/08/30 21:34:06 fetching corpus: 3500, signal 145702/192982 (executing program) 2025/08/30 21:34:06 fetching corpus: 3550, signal 146215/193881 (executing program) 2025/08/30 21:34:06 fetching corpus: 3600, signal 146879/194876 (executing program) 2025/08/30 21:34:07 fetching corpus: 3650, signal 147462/195715 (executing program) 2025/08/30 21:34:07 fetching corpus: 3700, signal 148239/196736 (executing program) 2025/08/30 21:34:07 fetching corpus: 3750, signal 148660/197569 (executing program) 2025/08/30 21:34:07 fetching corpus: 3800, signal 149355/198422 (executing program) 2025/08/30 21:34:07 fetching corpus: 3850, signal 150051/199289 (executing program) 2025/08/30 21:34:07 fetching corpus: 3900, signal 150565/200063 (executing program) 2025/08/30 21:34:07 fetching corpus: 3950, signal 151063/200864 (executing program) 2025/08/30 21:34:07 fetching corpus: 4000, signal 151443/201608 (executing program) 2025/08/30 21:34:07 fetching corpus: 4050, signal 151793/202312 (executing program) 2025/08/30 21:34:07 fetching corpus: 4100, signal 152307/203099 (executing program) 2025/08/30 21:34:07 fetching corpus: 4150, signal 152739/203840 (executing program) 2025/08/30 21:34:07 fetching corpus: 4200, signal 153387/204599 (executing program) 2025/08/30 21:34:08 fetching corpus: 4250, signal 153865/205328 (executing program) 2025/08/30 21:34:08 fetching corpus: 4300, signal 154261/206003 (executing program) 2025/08/30 21:34:08 fetching corpus: 4350, signal 154761/206714 (executing program) 2025/08/30 21:34:08 fetching corpus: 4400, signal 155409/207442 (executing program) 2025/08/30 21:34:08 fetching corpus: 4450, signal 155756/208100 (executing program) 2025/08/30 21:34:08 fetching corpus: 4500, signal 156211/208735 (executing program) 2025/08/30 21:34:08 fetching corpus: 4550, signal 156673/209395 (executing program) 2025/08/30 21:34:08 fetching corpus: 4600, signal 157059/210035 (executing program) 2025/08/30 21:34:08 fetching corpus: 4650, signal 157556/210737 (executing program) 2025/08/30 21:34:08 fetching corpus: 4700, signal 158158/211545 (executing program) 2025/08/30 21:34:08 fetching corpus: 4750, signal 158650/212174 (executing program) 2025/08/30 21:34:09 fetching corpus: 4800, signal 159123/212803 (executing program) 2025/08/30 21:34:09 fetching corpus: 4850, signal 159621/213421 (executing program) 2025/08/30 21:34:09 fetching corpus: 4900, signal 160129/214055 (executing program) 2025/08/30 21:34:09 fetching corpus: 4950, signal 160570/214634 (executing program) 2025/08/30 21:34:09 fetching corpus: 5000, signal 161111/215213 (executing program) 2025/08/30 21:34:09 fetching corpus: 5050, signal 161639/215838 (executing program) 2025/08/30 21:34:09 fetching corpus: 5100, signal 161995/216363 (executing program) 2025/08/30 21:34:09 fetching corpus: 5150, signal 162453/217004 (executing program) 2025/08/30 21:34:09 fetching corpus: 5200, signal 162907/217505 (executing program) 2025/08/30 21:34:09 fetching corpus: 5250, signal 163261/218058 (executing program) 2025/08/30 21:34:10 fetching corpus: 5300, signal 163675/218553 (executing program) 2025/08/30 21:34:10 fetching corpus: 5350, signal 164069/219094 (executing program) 2025/08/30 21:34:10 fetching corpus: 5400, signal 164676/219639 (executing program) 2025/08/30 21:34:10 fetching corpus: 5450, signal 165007/219742 (executing program) 2025/08/30 21:34:10 fetching corpus: 5500, signal 165669/219749 (executing program) 2025/08/30 21:34:10 fetching corpus: 5550, signal 166099/219769 (executing program) 2025/08/30 21:34:10 fetching corpus: 5600, signal 166392/219777 (executing program) 2025/08/30 21:34:10 fetching corpus: 5650, signal 166680/219786 (executing program) 2025/08/30 21:34:10 fetching corpus: 5700, signal 167150/219805 (executing program) 2025/08/30 21:34:10 fetching corpus: 5750, signal 167649/219838 (executing program) 2025/08/30 21:34:10 fetching corpus: 5800, signal 168281/219893 (executing program) 2025/08/30 21:34:11 fetching corpus: 5850, signal 168671/219894 (executing program) 2025/08/30 21:34:11 fetching corpus: 5900, signal 169046/219901 (executing program) 2025/08/30 21:34:11 fetching corpus: 5950, signal 169432/219907 (executing program) 2025/08/30 21:34:11 fetching corpus: 6000, signal 169819/219907 (executing program) 2025/08/30 21:34:11 fetching corpus: 6050, signal 170338/219908 (executing program) 2025/08/30 21:34:11 fetching corpus: 6100, signal 170872/219909 (executing program) 2025/08/30 21:34:11 fetching corpus: 6150, signal 171388/219918 (executing program) 2025/08/30 21:34:11 fetching corpus: 6200, signal 171724/219942 (executing program) 2025/08/30 21:34:11 fetching corpus: 6250, signal 171936/219946 (executing program) 2025/08/30 21:34:11 fetching corpus: 6300, signal 172256/219954 (executing program) 2025/08/30 21:34:11 fetching corpus: 6350, signal 172492/219964 (executing program) 2025/08/30 21:34:11 fetching corpus: 6400, signal 172953/219966 (executing program) 2025/08/30 21:34:11 fetching corpus: 6450, signal 173267/219967 (executing program) 2025/08/30 21:34:11 fetching corpus: 6500, signal 174145/219970 (executing program) 2025/08/30 21:34:12 fetching corpus: 6550, signal 174476/219979 (executing program) 2025/08/30 21:34:12 fetching corpus: 6600, signal 174754/219981 (executing program) 2025/08/30 21:34:12 fetching corpus: 6650, signal 175107/220000 (executing program) 2025/08/30 21:34:12 fetching corpus: 6700, signal 175707/220005 (executing program) 2025/08/30 21:34:12 fetching corpus: 6750, signal 176053/220008 (executing program) 2025/08/30 21:34:12 fetching corpus: 6800, signal 176490/220022 (executing program) 2025/08/30 21:34:12 fetching corpus: 6850, signal 176755/220023 (executing program) 2025/08/30 21:34:12 fetching corpus: 6900, signal 177067/220036 (executing program) 2025/08/30 21:34:12 fetching corpus: 6950, signal 177576/220055 (executing program) 2025/08/30 21:34:12 fetching corpus: 7000, signal 177923/220055 (executing program) 2025/08/30 21:34:12 fetching corpus: 7050, signal 178427/220059 (executing program) 2025/08/30 21:34:12 fetching corpus: 7100, signal 178671/220067 (executing program) 2025/08/30 21:34:12 fetching corpus: 7150, signal 178971/220079 (executing program) 2025/08/30 21:34:13 fetching corpus: 7200, signal 179216/220084 (executing program) 2025/08/30 21:34:13 fetching corpus: 7250, signal 179547/220091 (executing program) 2025/08/30 21:34:13 fetching corpus: 7300, signal 179807/220095 (executing program) 2025/08/30 21:34:13 fetching corpus: 7350, signal 180107/220102 (executing program) 2025/08/30 21:34:13 fetching corpus: 7400, signal 180292/220105 (executing program) 2025/08/30 21:34:13 fetching corpus: 7450, signal 180539/220107 (executing program) 2025/08/30 21:34:13 fetching corpus: 7500, signal 180853/220126 (executing program) 2025/08/30 21:34:13 fetching corpus: 7550, signal 181140/220127 (executing program) 2025/08/30 21:34:13 fetching corpus: 7600, signal 181418/220138 (executing program) 2025/08/30 21:34:13 fetching corpus: 7650, signal 181709/220140 (executing program) 2025/08/30 21:34:13 fetching corpus: 7700, signal 181936/220142 (executing program) 2025/08/30 21:34:13 fetching corpus: 7750, signal 182307/220161 (executing program) 2025/08/30 21:34:13 fetching corpus: 7800, signal 182656/220168 (executing program) 2025/08/30 21:34:14 fetching corpus: 7850, signal 182936/220200 (executing program) 2025/08/30 21:34:14 fetching corpus: 7900, signal 183147/220204 (executing program) 2025/08/30 21:34:14 fetching corpus: 7950, signal 183484/220205 (executing program) 2025/08/30 21:34:14 fetching corpus: 8000, signal 183755/220206 (executing program) 2025/08/30 21:34:14 fetching corpus: 8050, signal 184039/220209 (executing program) 2025/08/30 21:34:14 fetching corpus: 8100, signal 184306/220211 (executing program) 2025/08/30 21:34:14 fetching corpus: 8150, signal 184627/220212 (executing program) 2025/08/30 21:34:14 fetching corpus: 8200, signal 184796/220225 (executing program) 2025/08/30 21:34:14 fetching corpus: 8250, signal 185058/220228 (executing program) 2025/08/30 21:34:14 fetching corpus: 8300, signal 185449/220245 (executing program) 2025/08/30 21:34:14 fetching corpus: 8350, signal 185706/220263 (executing program) 2025/08/30 21:34:15 fetching corpus: 8400, signal 185967/220265 (executing program) 2025/08/30 21:34:15 fetching corpus: 8450, signal 186145/220272 (executing program) 2025/08/30 21:34:15 fetching corpus: 8500, signal 186412/220302 (executing program) 2025/08/30 21:34:15 fetching corpus: 8550, signal 186710/220310 (executing program) 2025/08/30 21:34:15 fetching corpus: 8600, signal 186959/220326 (executing program) 2025/08/30 21:34:15 fetching corpus: 8650, signal 187193/220345 (executing program) 2025/08/30 21:34:15 fetching corpus: 8700, signal 187456/220418 (executing program) 2025/08/30 21:34:15 fetching corpus: 8750, signal 187774/220422 (executing program) 2025/08/30 21:34:15 fetching corpus: 8800, signal 188134/220423 (executing program) 2025/08/30 21:34:15 fetching corpus: 8850, signal 188445/220426 (executing program) 2025/08/30 21:34:15 fetching corpus: 8900, signal 188796/220475 (executing program) 2025/08/30 21:34:15 fetching corpus: 8950, signal 189040/220479 (executing program) 2025/08/30 21:34:16 fetching corpus: 9000, signal 189357/220481 (executing program) 2025/08/30 21:34:16 fetching corpus: 9050, signal 189623/220495 (executing program) 2025/08/30 21:34:16 fetching corpus: 9100, signal 189968/220496 (executing program) 2025/08/30 21:34:16 fetching corpus: 9150, signal 190218/220499 (executing program) 2025/08/30 21:34:16 fetching corpus: 9200, signal 190514/220499 (executing program) 2025/08/30 21:34:16 fetching corpus: 9250, signal 190786/220501 (executing program) 2025/08/30 21:34:16 fetching corpus: 9300, signal 191067/220502 (executing program) 2025/08/30 21:34:16 fetching corpus: 9350, signal 191383/220502 (executing program) 2025/08/30 21:34:16 fetching corpus: 9400, signal 191655/220502 (executing program) 2025/08/30 21:34:16 fetching corpus: 9450, signal 191952/220507 (executing program) 2025/08/30 21:34:17 fetching corpus: 9500, signal 192265/220520 (executing program) 2025/08/30 21:34:17 fetching corpus: 9550, signal 192517/220520 (executing program) 2025/08/30 21:34:17 fetching corpus: 9600, signal 192713/220521 (executing program) 2025/08/30 21:34:17 fetching corpus: 9650, signal 192904/220523 (executing program) 2025/08/30 21:34:17 fetching corpus: 9700, signal 193103/220538 (executing program) 2025/08/30 21:34:17 fetching corpus: 9750, signal 193302/220543 (executing program) 2025/08/30 21:34:17 fetching corpus: 9800, signal 193452/220545 (executing program) 2025/08/30 21:34:17 fetching corpus: 9850, signal 193689/220551 (executing program) 2025/08/30 21:34:17 fetching corpus: 9900, signal 193919/220566 (executing program) 2025/08/30 21:34:17 fetching corpus: 9950, signal 194274/220613 (executing program) 2025/08/30 21:34:17 fetching corpus: 10000, signal 194432/220617 (executing program) 2025/08/30 21:34:17 fetching corpus: 10050, signal 194625/220618 (executing program) 2025/08/30 21:34:18 fetching corpus: 10100, signal 194864/220623 (executing program) 2025/08/30 21:34:18 fetching corpus: 10150, signal 195120/220634 (executing program) 2025/08/30 21:34:18 fetching corpus: 10200, signal 195341/220635 (executing program) 2025/08/30 21:34:18 fetching corpus: 10250, signal 195545/220646 (executing program) 2025/08/30 21:34:18 fetching corpus: 10300, signal 195726/220652 (executing program) 2025/08/30 21:34:18 fetching corpus: 10350, signal 195954/220654 (executing program) 2025/08/30 21:34:18 fetching corpus: 10400, signal 196102/220654 (executing program) 2025/08/30 21:34:18 fetching corpus: 10450, signal 196295/220654 (executing program) 2025/08/30 21:34:18 fetching corpus: 10500, signal 196548/220655 (executing program) 2025/08/30 21:34:18 fetching corpus: 10550, signal 196772/220668 (executing program) 2025/08/30 21:34:18 fetching corpus: 10600, signal 197018/220668 (executing program) 2025/08/30 21:34:18 fetching corpus: 10650, signal 197148/220669 (executing program) 2025/08/30 21:34:18 fetching corpus: 10700, signal 197369/220670 (executing program) 2025/08/30 21:34:19 fetching corpus: 10750, signal 197550/220677 (executing program) 2025/08/30 21:34:19 fetching corpus: 10800, signal 197894/220681 (executing program) 2025/08/30 21:34:19 fetching corpus: 10850, signal 198137/220687 (executing program) 2025/08/30 21:34:19 fetching corpus: 10900, signal 198309/220688 (executing program) 2025/08/30 21:34:19 fetching corpus: 10950, signal 198597/220689 (executing program) 2025/08/30 21:34:19 fetching corpus: 11000, signal 198832/220693 (executing program) 2025/08/30 21:34:19 fetching corpus: 11050, signal 199054/220696 (executing program) 2025/08/30 21:34:19 fetching corpus: 11100, signal 199297/220698 (executing program) 2025/08/30 21:34:19 fetching corpus: 11150, signal 199510/220706 (executing program) 2025/08/30 21:34:19 fetching corpus: 11200, signal 199715/220710 (executing program) 2025/08/30 21:34:19 fetching corpus: 11250, signal 199976/220719 (executing program) 2025/08/30 21:34:20 fetching corpus: 11300, signal 200270/220720 (executing program) 2025/08/30 21:34:20 fetching corpus: 11350, signal 200467/220721 (executing program) 2025/08/30 21:34:20 fetching corpus: 11400, signal 200713/220773 (executing program) 2025/08/30 21:34:20 fetching corpus: 11450, signal 200953/220781 (executing program) 2025/08/30 21:34:20 fetching corpus: 11500, signal 201100/220781 (executing program) 2025/08/30 21:34:20 fetching corpus: 11550, signal 201300/220781 (executing program) 2025/08/30 21:34:20 fetching corpus: 11600, signal 201446/220784 (executing program) 2025/08/30 21:34:20 fetching corpus: 11650, signal 201668/220785 (executing program) 2025/08/30 21:34:20 fetching corpus: 11700, signal 201834/220797 (executing program) 2025/08/30 21:34:20 fetching corpus: 11750, signal 202148/220808 (executing program) 2025/08/30 21:34:20 fetching corpus: 11800, signal 202718/220815 (executing program) 2025/08/30 21:34:20 fetching corpus: 11850, signal 202829/220825 (executing program) 2025/08/30 21:34:20 fetching corpus: 11900, signal 203025/220845 (executing program) 2025/08/30 21:34:20 fetching corpus: 11950, signal 203240/220846 (executing program) 2025/08/30 21:34:20 fetching corpus: 12000, signal 203371/220847 (executing program) 2025/08/30 21:34:21 fetching corpus: 12050, signal 203574/220852 (executing program) 2025/08/30 21:34:21 fetching corpus: 12100, signal 203846/220854 (executing program) 2025/08/30 21:34:21 fetching corpus: 12150, signal 203975/220856 (executing program) 2025/08/30 21:34:21 fetching corpus: 12184, signal 204088/220861 (executing program) 2025/08/30 21:34:21 fetching corpus: 12184, signal 204088/220861 (executing program) 2025/08/30 21:34:22 starting 8 fuzzer processes 21:34:22 executing program 0: r0 = dup(0xffffffffffffffff) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r1, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}]}, @TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7f}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x44}, 0x40) getsockopt$IP_SET_OP_GET_FNAME(r0, 0x1, 0x53, &(0x7f0000000140)={0x8, 0x7, 0x0, 'syz1\x00'}, &(0x7f0000000180)=0x2c) fgetxattr(r0, &(0x7f00000001c0)=@known='security.apparmor\x00', &(0x7f0000000200)=""/4096, 0x1000) sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000001300)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001240)={0x58, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MLSCATLST={0x34, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x22477d2a}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb7cf}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3c76a805}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7a3e6ebc}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2ade}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0x58}}, 0x20004000) sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f0000001400)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x20, 0x0, 0x0, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x6, 0x39}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0xc0) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000001480), r0) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000001580)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001540)={&(0x7f00000014c0)={0x68, r2, 0x500, 0x70bd28, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_PEER_V6={0x14, 0x9, @mcast1}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}, @FOU_ATTR_PEER_V4={0x8, 0x8, @broadcast}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e22}]}, 0x68}, 0x1, 0x0, 0x0, 0x400c849}, 0x40) sendmsg$NL80211_CMD_SET_PMK(r0, &(0x7f00000016c0)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001680)={&(0x7f0000001600)={0x70, 0x0, 0x800, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_PMK={0x14, 0xfe, "f003e1c955c1e5ab07bee0114fa9a8f2"}, @NL80211_ATTR_PMK={0x14, 0xfe, "6218bdbdaa638e259fb939a30df35e95"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "094f62e9537a968ea999b74c475cc813"}, @NL80211_ATTR_PMK={0x14, 0xfe, "d224146ec4d01157362739d57fd788c4"}]}, 0x70}, 0x1, 0x0, 0x0, 0x4040040}, 0xc840) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001700)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000001780), r0) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000001880)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001840)={&(0x7f00000017c0)={0x5c, r4, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @loopback}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e21}, @FOU_ATTR_PEER_V4={0x8, 0x8, @rand_addr=0x64010101}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @mcast2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @private=0xa010100}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20008840}, 0x40000) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f00000018c0), 0x20000, 0x0) sendmsg$SMC_PNETID_DEL(r5, &(0x7f00000019c0)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001980)={&(0x7f0000001940)={0x34, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c000}, 0x8ec358bd3f5bdfe0) syz_genetlink_get_family_id$tipc(&(0x7f0000001a00), r5) sendmsg$NL80211_CMD_DEL_TX_TS(r0, &(0x7f0000001b40)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001a80)={0x50, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x20, 0x5f}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0xf}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xd}]}, 0x50}, 0x1, 0x0, 0x0, 0x8014}, 0x80) sendmsg$AUDIT_USER(r5, &(0x7f0000001c80)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001c40)={&(0x7f0000001bc0)={0x70, 0x3ed, 0x8, 0x70bd26, 0x25dfdbfc, "32f7ce57c267ad9d009980b2c2cf5ef3fc98b7350b63839878c54c98e86ed5e12a97123a5a423bb7d2766162c5208b6d1e1d614fced09fb37c558b5e7f905d74b387b8fc1d10f6d889b5ee108c049062efbbae98ca25fe62f7593726b4522354", ["", "", "", "", ""]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x50) ioctl$F2FS_IOC_DEFRAGMENT(r5, 0xc010f508, &(0x7f0000001cc0)={0x5, 0x31}) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000001e00)={&(0x7f0000001d00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001d80)={0x34, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x3}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000004}, 0x4004880) 21:34:22 executing program 1: ioctl$F2FS_IOC_FLUSH_DEVICE(0xffffffffffffffff, 0x4008f50a, &(0x7f0000000000)={0x1, 0x101}) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6}}, './file0\x00'}) fstat(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000140)={0x0, 0x80, 0x80, 0xcb, 0x8, 0x2, 0x0, 0x3, 0xa080, 0x4, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x2, @perf_bp={&(0x7f0000000100), 0x9}, 0x411, 0x8000, 0x2, 0x5, 0x8, 0x10000, 0x8, 0x0, 0x4, 0x0, 0x1}) ftruncate(r0, 0x8) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r2, 0x6612) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000200), 0x408000, 0x0) r4 = fsmount(r3, 0x0, 0x84) close_range(r2, r4, 0x0) r5 = syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x3, 0x4, &(0x7f0000000500)=[{&(0x7f00000002c0)="f75dc7d20c76e2dd69d9ea38694f5c4cc26cca7849bd7a5c7541f3a402dacdbea34930a2da7f56db2371afaef17461fd706ea7100a33ffaf8754c8861ccf1168e0bd4acae085dafe384c71192f38d691ca1261e377f8820dfb42bcd09dddf032f449a69880ea94d6caa686cb7b2bbaaea79025839d3bf8d57e5d4bc109c1c770ff0cb780d8ddc4b24166c97f77c7ff6fb8da9b996e3fbcccd13808d9dc54c6bb30fa1d7a391daf5e0de5a50ef974af218fc7d9adb7936fc55ec7219f108a2fa2565fa382e9f78ca96483065946ed", 0xce, 0x8}, {&(0x7f00000003c0)="945fe9d51fc45cff0df046c2e86a1fd09bb32de1e76da9bfad3c804b443921109c221f490ec7f3d8b643914937a43d7ac5357f", 0x33, 0x5}, {&(0x7f0000000400)="f496b6579058d2de0ec8c9cbb9c7d178b827821ef3f99939cba20d38fb7128aa9e0241c6ddda1786f6638cfbcdf3eda14245fbbbede72f4c1e137b8d2de3786e202453a4917e797f2bb3744ed0cbcc0beb5e190b5eab2c9de99f486f7f09aaa96adc74d1ab4ffccb3b737699c9342bf46f0acb260a6e99f14acf7125db151bc9c5728de296de2ac906463d04ba13", 0x8e, 0x4}, {&(0x7f00000004c0)="a10a9213299019ca", 0x8, 0x830f}], 0x61042, &(0x7f0000000580)={[{@shortname_win95}], [{@uid_eq={'uid', 0x3d, r1}}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@func={'func', 0x3d, 'CREDS_CHECK'}}, {@hash}, {@dont_measure}, {@appraise}, {@subj_type={'subj_type', 0x3d, '/dev/null\x00'}}]}) open_by_handle_at(r5, &(0x7f0000000600)=@FILEID_INO32_GEN_PARENT={0x10, 0x2, {{0x5, 0x1ff}, 0x2, 0x3}}, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r4, 0x5386, &(0x7f0000000640)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000680)={{0x1, 0x1, 0x18, r4, {0x1f}}, './file0\x00'}) ioctl$TUNSETSNDBUF(r6, 0x400454d4, &(0x7f00000006c0)=0xb5) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000700)={0x0}, &(0x7f0000000740)=0xc) syz_open_procfs(r7, &(0x7f0000000780)='net/connector\x00') openat2$dir(0xffffffffffffff9c, &(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)={0x141, 0x1}, 0x18) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x40, 0x3, 0x7, 0x301, 0x0, 0x0, {0xc, 0x0, 0x7}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x1}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x80000001}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FLAGS={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 21:34:22 executing program 7: ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, &(0x7f0000000000)) ioctl$SCSI_IOCTL_START_UNIT(0xffffffffffffffff, 0x5) ioctl$SG_SET_TIMEOUT(0xffffffffffffffff, 0x2201, &(0x7f0000000100)=0x8) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x50080, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x5385, &(0x7f0000000180)={0xf9, ""/249}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x100, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x2) mknodat(r1, &(0x7f00000002c0)='./file0\x00', 0x400, 0x6) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r1, 0x5386, &(0x7f0000000300)) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000340)={0x0, 0xafb, 0x1, 0x8, 0x3, [0xa1e, 0x10000, 0x6, 0xff]}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000380)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xf0}}, './file0\x00'}) faccessat2(r2, &(0x7f00000003c0)='./file0\x00', 0x110, 0x1000) r3 = pidfd_open(0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r3, 0x8008f512, &(0x7f0000000400)) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000440)={0x3, 0x80000000, 0x8, 0x7ff, 0x101}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000480)={{0x1, 0x1, 0x18, r0, {r2}}, './file0\x00'}) ioctl$BTRFS_IOC_WAIT_SYNC(r4, 0x40089416, &(0x7f00000004c0)) ioctl$HIDIOCGRDESCSIZE(r5, 0x80044801, &(0x7f0000000500)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000540)={{0x1, 0x1, 0x18, r0}, './file0/file0\x00'}) getsockopt$packet_int(r6, 0x107, 0x8, &(0x7f0000000580), &(0x7f00000005c0)=0x4) 21:34:22 executing program 2: setitimer(0x0, &(0x7f0000000000)={{}, {0x0, 0x2710}}, 0x0) setitimer(0x0, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, &(0x7f0000000080)) futimesat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={{0x0, 0xea60}, {0x77359400}}) setitimer(0x2, &(0x7f0000000140)={{0x77359400}, {0x0, 0xea60}}, &(0x7f0000000180)) setitimer(0x2, &(0x7f00000001c0)={{}, {0x77359400}}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) setitimer(0x2, &(0x7f0000000280)={{r0, r1/1000+60000}, {0x0, 0xea60}}, &(0x7f00000002c0)) setitimer(0x0, &(0x7f0000000300)={{0x77359400}, {0x0, 0x2710}}, &(0x7f0000000340)) setitimer(0x0, &(0x7f0000000380)={{0x0, 0xea60}, {0x0, 0x2710}}, &(0x7f00000003c0)) setitimer(0x1, &(0x7f0000000400)={{0x0, 0xea60}}, &(0x7f0000000440)) setitimer(0x0, &(0x7f0000000480)={{0x77359400}, {0x0, 0x2710}}, &(0x7f00000004c0)) setitimer(0x0, &(0x7f0000000500)={{}, {0x77359400}}, 0x0) setitimer(0x1, &(0x7f0000000540)={{0x77359400}}, &(0x7f0000000580)) clock_gettime(0x0, &(0x7f00000005c0)={0x0, 0x0}) setitimer(0x2, &(0x7f0000000600)={{0x0, 0x2710}, {r2, r3/1000+10000}}, &(0x7f0000000640)) getitimer(0x1, &(0x7f0000000680)) epoll_pwait2(0xffffffffffffffff, &(0x7f00000006c0)=[{}, {}, {}], 0x3, &(0x7f0000000700)={0x0, 0x989680}, &(0x7f0000000740)={[0xffff]}, 0x8) setitimer(0x1, &(0x7f0000000780)={{0x0, 0x2710}, {0x0, 0x2710}}, &(0x7f00000007c0)) getitimer(0x1, &(0x7f0000000800)) setitimer(0x0, &(0x7f0000000840)={{}, {0x77359400}}, &(0x7f0000000880)) [ 83.066918] audit: type=1400 audit(1756589662.675:7): avc: denied { execmem } for pid=270 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 21:34:22 executing program 3: ioctl$DVD_WRITE_STRUCT(0xffffffffffffffff, 0x5390, &(0x7f0000000000)=@type=0x1) r0 = fork() fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000840)={0x0, 0x0}) fcntl$setown(0xffffffffffffffff, 0x8, r1) ptrace(0x4207, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000880)={0x1000, 0x3ff, 0x1, 0x7a6c, 0x3, "3eba6ccdea171c22135adc638969485d06f0d1", 0xd9c, 0x5}) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000008c0), 0x400, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000000900), 0x1, 0x18100) kcmp$KCMP_EPOLL_TFD(r1, r0, 0x7, r2, &(0x7f0000000940)={0xffffffffffffffff, r3, 0xfffffff8}) r4 = fcntl$getown(r3, 0x9) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000a40), 0x400000, 0x0) r6 = perf_event_open(&(0x7f00000009c0)={0x1, 0x80, 0x8, 0x0, 0x9, 0x7, 0x0, 0xbbf, 0x828, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x20, 0x2, @perf_bp={&(0x7f0000000980), 0x4}, 0x300, 0x8, 0xb6a, 0x14, 0x401, 0x339ab968, 0x5fd, 0x0, 0x10001, 0x0, 0x4}, r4, 0x9, r5, 0x1) r7 = openat$sr(0xffffffffffffff9c, &(0x7f0000000a80), 0x802, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r7, 0x29, 0x2d, &(0x7f0000000ac0)={0x80000000, {{0xa, 0x4e23, 0xa8a, @local, 0xffffffff}}}, 0x88) sendfile(r7, r6, &(0x7f0000000b80)=0x3ff, 0x80000000) r8 = perf_event_open(&(0x7f0000000bc0)={0x1, 0x80, 0x8, 0x0, 0x8, 0x6, 0x0, 0x8, 0x8000, 0x5, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, @perf_config_ext={0x7, 0x40}, 0x110, 0x1f, 0x6, 0x6, 0x101, 0x7, 0xc5, 0x0, 0x8, 0x0, 0x8}, r0, 0x1, r6, 0x0) r9 = socket$inet(0x2, 0x4, 0x80000001) dup2(r6, r9) sendmsg$unix(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000000c40)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000f40)=[{&(0x7f0000000cc0)="96cc9cf622b3c5dac49dcdcd411791c784390cb3e3e1de6d06dcf1a04df2d2c03170e1dcc0886770a825e759992ccfc7735cc07c72635bcc2d78ecd4850dd14a5315351b6d7c0bf01be7b161b123ffa6ee4ff284b8941d4c3d83dfe2b30641f2ae4af6704ec2d7ced94b225b104deb96c6343bcbe9605bfb6a6efb197c04c7bea3843273e647f471f60911873cfdd9c5f25deba5664209dab0f922866467e4db2e55f4a306", 0xa5}, {&(0x7f0000000d80)="c67cef9aa87dc70b1e81c8085f876cd3943252dfb5054ce366c537950bd57b641fb566d6e68c37ea1d7193504331e753ea8bc99cb6fda5d9edd217118edefb4ae8", 0x41}, {&(0x7f0000000e00)="89c1e5b53b75800120ba9a3e0615954ee61efaf5c8f7e3ceb374", 0x1a}, {&(0x7f0000000e40)="dc104f95427da1b964df910b192ac08a30eeb37d53a37c38b19af6d5c5af2bd0b6b9c16c3ede14da74525e80ea0aaef6ff6308f5078c972296ea1c830467a89282ea3ae524aab722d67e2b5164c06ef35b2998e46a044110dd58f5e7df218b9c4cc4860e31b7e8a6a975328f34f5dc8a80d157f7f1f006e3e97a855e146828ec8ab3e4c0200beaf86492261bceffe8effde683a64e22d89da9d998621637068a08aaa6b6dc8385062a806b443c1adde953a4cd66d9eae3b6217fa8c4272cb8898b7ae15614054856ce7139c0ebdabca07f5a2e69ae3f5ed044fe492fabc0ad44c81ce9bed3ff13c09029c2270df26410a3eba86d6606", 0xf6}], 0x4, &(0x7f00000011c0)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r9, r3, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [r2]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r1}}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, r9, 0xffffffffffffffff, r5, r8, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [r5, 0xffffffffffffffff, r3, r8]}}], 0xd8}, 0x14800) 21:34:22 executing program 4: r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r0, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy2\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x51}, 0x80) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000380)={'syztnl0\x00', &(0x7f0000000300)={'syztnl0\x00', 0x0, 0x2f, 0x7, 0x9, 0x6, 0x20, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @remote, 0xf831, 0x20, 0x6, 0x8f4}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000004c0)={'ip_vti0\x00', &(0x7f00000003c0)={'syztnl2\x00', 0x0, 0x7800, 0x8, 0x0, 0x4, {{0x2e, 0x4, 0x1, 0x22, 0xb8, 0x68, 0x0, 0x3, 0x2f, 0x0, @multicast2, @rand_addr=0x64010101, {[@generic={0x88, 0x11, "1bcf1d909291fcbd61fbbda41eec5b"}, @lsrr={0x83, 0x23, 0x71, [@multicast2, @local, @rand_addr=0x64010101, @empty, @broadcast, @broadcast, @multicast1, @broadcast]}, @timestamp={0x44, 0x28, 0xa, 0x0, 0x5, [0x1, 0x1, 0x6, 0x7, 0x25, 0x100, 0x10001, 0x5, 0x4]}, @noop, @end, @timestamp_prespec={0x44, 0x44, 0x71, 0x3, 0x9, [{@private=0xa010102, 0x5}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xffff}, {@local, 0xa8f6}, {@private=0xa010100, 0xea8}, {@multicast1, 0x7fffffff}, {@loopback, 0xffff0000}, {@broadcast, 0x9}, {@loopback, 0x7}]}]}}}}}) recvmmsg(0xffffffffffffffff, &(0x7f0000005f80)=[{{&(0x7f0000000500)=@ax25={{0x3, @default}, [@bcast, @default, @null, @null, @rose, @default, @bcast, @rose]}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000580)=""/48, 0x30}, {&(0x7f00000005c0)=""/168, 0xa8}, {&(0x7f0000000680)=""/148, 0x94}, {&(0x7f0000000740)=""/160, 0xa0}, {&(0x7f0000000800)=""/212, 0xd4}], 0x5, &(0x7f0000000980)}, 0x6}, {{&(0x7f00000009c0)=@caif=@rfm, 0x80, &(0x7f0000001e40)=[{&(0x7f0000000a40)=""/2, 0x2}, {&(0x7f0000000a80)=""/135, 0x87}, {&(0x7f0000000b40)=""/192, 0xc0}, {&(0x7f0000000c00)=""/143, 0x8f}, {&(0x7f0000000cc0)=""/116, 0x74}, {&(0x7f0000000d40)=""/76, 0x4c}, {&(0x7f0000000dc0)=""/4096, 0x1000}, {&(0x7f0000001dc0)=""/102, 0x66}], 0x8, &(0x7f0000001ec0)=""/15, 0xf}, 0xa0d5}, {{&(0x7f0000001f00)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f0000003080)=[{&(0x7f0000001f80)=""/231, 0xe7}, {&(0x7f0000002080)=""/4096, 0x1000}], 0x2}, 0x20}, {{&(0x7f00000030c0)=@caif, 0x80, &(0x7f00000043c0)=[{&(0x7f0000003140)=""/106, 0x6a}, {&(0x7f00000031c0)=""/88, 0x58}, {&(0x7f0000003240)=""/137, 0x89}, {&(0x7f0000003300)=""/25, 0x19}, {&(0x7f0000003340)=""/84, 0x54}, {&(0x7f00000033c0)=""/4096, 0x1000}], 0x6, &(0x7f0000004440)=""/161, 0xa1}, 0x2}, {{&(0x7f0000004500), 0x80, &(0x7f0000005580)=[{&(0x7f0000004580)=""/4096, 0x1000}], 0x1, &(0x7f00000055c0)=""/35, 0x23}, 0xcc}, {{&(0x7f0000005600)=@can={0x1d, 0x0}, 0x80, &(0x7f0000005c00)=[{&(0x7f0000005680)=""/171, 0xab}, {&(0x7f0000005740)=""/12, 0xc}, {&(0x7f0000005780)=""/68, 0x44}, {&(0x7f0000005800)=""/95, 0x5f}, {&(0x7f0000005880)=""/157, 0x9d}, {&(0x7f0000005940)=""/53, 0x35}, {&(0x7f0000005980)=""/127, 0x7f}, {&(0x7f0000005a00)=""/156, 0x9c}, {&(0x7f0000005ac0)=""/161, 0xa1}, {&(0x7f0000005b80)=""/76, 0x4c}], 0xa, &(0x7f0000005cc0)=""/39, 0x27}, 0xa2e}, {{&(0x7f0000005d00)=@in6={0xa, 0x0, 0x0, @private2}, 0x80, &(0x7f0000005e40)=[{&(0x7f0000005d80)=""/179, 0xb3}], 0x1, &(0x7f0000005e80)=""/211, 0xd3}, 0x2}], 0x7, 0x142, &(0x7f0000006140)) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000006180)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000006240)={'sit0\x00', &(0x7f00000061c0)={'syztnl0\x00', 0x0, 0x2f, 0x37, 0x0, 0x2, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2, 0x1, 0x40, 0x5, 0xffffffff}}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000006440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000006400)={&(0x7f0000006280)={0x168, r2, 0x100, 0x70bd28, 0x25dfdbff, {}, [@HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x40000}, 0x1) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000064c0), 0xffffffffffffffff) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f00000065c0)={&(0x7f0000006480)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000006580)={&(0x7f0000006500)={0x50, r8, 0x2, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy2\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x1) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f0000006780)={&(0x7f0000006600)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000006740)={&(0x7f0000006640)={0xc4, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5}]}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x88, 0xc, 0x0, 0x1, [{0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd2be}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x60bbfefb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x24449b85}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7cdc7012}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7ce7f8cc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x551d9277}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2d01}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8dfb}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7a31}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdf92}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf237}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1c9a450d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc4b8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3853a1ac}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x12f5}]}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4011}, 0x80) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000006840)={'syztnl1\x00', &(0x7f00000067c0)={'syztnl1\x00', r7, 0x29, 0x9, 0x81, 0x4, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, @mcast1, 0x8, 0x40, 0x2, 0x29fb}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f0000006940)={'syztnl2\x00', &(0x7f00000068c0)={'ip6gre0\x00', r5, 0x4, 0x7, 0x6, 0x54c, 0xa, @loopback, @mcast2, 0x7f87, 0x10, 0x4}}) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000006980)={{{@in=@broadcast, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f0000006a80)=0xe8) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000006b80)={'erspan0\x00', &(0x7f0000006ac0)={'gretap0\x00', r6, 0x700, 0x8000, 0x7b62, 0x9, {{0x20, 0x4, 0x2, 0x32, 0x80, 0x64, 0x0, 0x8, 0x29, 0x0, @local, @remote, {[@end, @ssrr={0x89, 0xf, 0x32, [@loopback, @loopback, @broadcast]}, @noop, @timestamp_addr={0x44, 0x44, 0x78, 0x1, 0xa, [{@rand_addr=0x64010101, 0x7}, {@rand_addr=0x64010101, 0x10000}, {@multicast1, 0x8001}, {@local, 0x1f}, {@empty}, {@private=0xa010100, 0x3}, {@loopback, 0x6}, {@private=0xa010102, 0x1f}]}, @noop, @rr={0x7, 0x13, 0x94, [@multicast2, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast]}]}}}}}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000006d40)={&(0x7f0000006880)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000006d00)={&(0x7f0000006bc0)={0x130, r2, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x1}, 0x20040000) 21:34:22 executing program 5: fstat(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$F2FS_IOC_FLUSH_DEVICE(0xffffffffffffffff, 0x4008f50a, &(0x7f0000000080)={0xffff, 0x1}) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x38100, 0x5) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$sock(r2, &(0x7f0000000ac0)={&(0x7f0000000840)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e20, @rand_addr=0x64010102}, 0x3, 0x4, 0x2, 0x1}}, 0x80, &(0x7f0000000980)=[{&(0x7f00000008c0)="79eeb0f8085860a1b1a1bee0d9647c6fa436dc5b870e465c6a36f2bcea32991ed47ab573ba2302cd044550297c1c6e5805766904b596568f416b669169b9feb4ce67dc465ed6c734a24938edd607e2bd97d252a14a3725479ac4fc7d9261a4f1c29f3086e30446ce195019ea38ef42d51f2d514f36f9e3b939a2743e2d0f63bdfb80c58c9d8b11dfe87e597bc220dc", 0x8f}], 0x1, &(0x7f00000009c0)=[@mark={{0x14, 0x1, 0x24, 0xfffffffc}}, @txtime={{0x18, 0x1, 0x3d, 0x5}}, @mark={{0x14, 0x1, 0x24, 0x39}}, @timestamping={{0x14, 0x1, 0x25, 0x1ff}}, @timestamping={{0x14, 0x1, 0x25, 0x81}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @mark={{0x14, 0x1, 0x24, 0x8000}}, @txtime={{0x18, 0x1, 0x3d, 0xffffffffffff7fff}}, @txtime={{0x18, 0x1, 0x3d, 0x81}}], 0xd8}, 0x24000004) getpeername(r2, &(0x7f0000000b00)=@vsock={0x28, 0x0, 0x0, @my}, &(0x7f0000000b80)=0x80) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000bc0)={{0x1, 0x1, 0x18, r2, {0x9}}, './file0/../file0\x00'}) sendmsg$sock(r4, &(0x7f0000000ec0)={&(0x7f0000000c00)=@can, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000c80)="f9162ee2e7682977b86ab750669a800c320b10891e970e9901b882c4c2a4e8d8397d3b3a9a13ebe9be3757b193f944ce3e1299664b262a71f284e9d669623de5b9c2fa802790ef8fc4c6831a65e0397eeccf6162a7c4fef644a3f3afe9727d9118c38568bb6e058d153e30f1a5c56672db46cc2f26a813ce978d5b21b4dc8497c4f2060275c3047d3b79d24a12b0b5dc8f58aa42f9061f05e4e2b4624cb4e00526208b523233a68c3fe5c0b54df0", 0xae}, {&(0x7f0000000d40)="b9c8f365cc736baa9a2feb737f53e7f9378fe56da58a5a2cfe6779348239837d802242517326afc260a7058d188c612d4d75cc2b312d3281a28027644becfe80823d73d07644b796e5a00c3ed1e745c7f2e6d4c3107c39bdc7c9dff949b71c397dfb2b577bba8a2262530555f59e5be41df56c1663620b7101f5dab32ff6f3f6ed3cbd2bede26fda6e7aef5c3f62d3992ad21e33173558e1890cace35213b07532b1aa", 0xa3}], 0x2, &(0x7f0000000e40)=[@timestamping={{0x14}}, @mark={{0x14, 0x1, 0x24, 0xffff}}, @mark={{0x14, 0x1, 0x24, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0x5}}], 0x60}, 0x40004) r5 = accept4(r4, &(0x7f0000000f00)=@l2tp={0x2, 0x0, @private}, &(0x7f0000000f80)=0x80, 0x0) getsockopt$WPAN_SECURITY_LEVEL(r5, 0x0, 0x2, &(0x7f0000000fc0), &(0x7f0000001000)=0x4) ioctl$int_out(r4, 0x5460, &(0x7f0000001040)) getsockopt$SO_TIMESTAMP(r3, 0x1, 0x0, &(0x7f0000001080), &(0x7f00000010c0)=0x4) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000001100)={{0x1, 0x1, 0x18, r3, {r0, r1}}, './file0/../file0\x00'}) ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x80049367, &(0x7f0000001140)) recvmsg$unix(r4, &(0x7f0000001540)={&(0x7f0000001180), 0x6e, &(0x7f0000001440)=[{&(0x7f0000001200)=""/81, 0x51}, {&(0x7f0000001280)=""/124, 0x7c}, {&(0x7f0000001300)=""/67, 0x43}, {&(0x7f0000001380)=""/126, 0x7e}, {&(0x7f0000001400)=""/49, 0x31}], 0x5, &(0x7f00000014c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}, 0x10021) unlink(&(0x7f0000001580)='./file0\x00') ioctl$IOC_PR_REGISTER(r6, 0x401870c8, &(0x7f00000015c0)={0x8001, 0x1, 0x1}) ioctl$RTC_PIE_ON(r2, 0x7005) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r7, 0xc0189374, &(0x7f0000001600)={{0x1, 0x1, 0x18, r3, {0x1}}, './file0/../file0\x00'}) ioctl$sock_SIOCADDDLCI(r8, 0x8980, &(0x7f0000001640)={'vlan1\x00', 0x2}) 21:34:22 executing program 6: r0 = dup(0xffffffffffffffff) sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x400, 0x70bd29, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x80}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x8000) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/seq/timer\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000280)={&(0x7f0000000140), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x50, r2, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), r0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000600)={&(0x7f0000000380)={0x250, r3, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x64, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}]}, @TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x800}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}]}, @TIPC_NLA_BEARER={0xc8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x2, @mcast1, 0x1e3}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x4, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0xfffffc00}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xd}}}, {0x14, 0x2, @in={0x2, 0x4e22, @rand_addr=0x64010101}}}}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}]}]}, @TIPC_NLA_MEDIA={0x8c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6a9}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff6352}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa8f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3800}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}]}, @TIPC_NLA_BEARER={0x34, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'veth1\x00'}}, @TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'ib', 0x3a, 'veth0_virt_wifi\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}]}]}, 0x250}, 0x1, 0x0, 0x0, 0x800}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x28, r4, 0x4, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x3d}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000880}, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000800), r0) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000980)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000940)={&(0x7f0000000840)={0xc4, r5, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x40, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x800}]}, @TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xc}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3ff}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x80000}, 0xc000) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000a00), r0) sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a40)={0x94, r6, 0x10, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffffffff}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x800}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xab}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x10001}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x4000}, 0x8004) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000d40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000bc0)={0x104, r6, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0xac, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xba1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffff01}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4fe4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MEDIA={0x44, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x636e7bdb}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x93}]}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x20000004}, 0x8080) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000d80)={{{@in=@remote, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e20, 0x144a, 0x4e22, 0x7, 0x2, 0xa0, 0xa0, 0x2e, 0x0, 0xffffffffffffffff}, {0x4, 0x6, 0x10000, 0xfff, 0xfffffffffffffffd, 0x9, 0x7, 0x4}, {0x8, 0x1ff, 0x5, 0x1f}, 0xfff, 0x0, 0x0, 0x1, 0x2, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0x43}, 0x4d5, 0x2b}, 0x2, @in6=@local, 0x3504, 0x1, 0x0, 0x4, 0xae, 0x0, 0xfffffffe}}, 0xe8) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000ec0), r1) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000f00)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f0000001080)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001040)={&(0x7f0000000f40)={0xd4, r7, 0x502, 0x70bd27, 0x25dfdbff, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000000) [ 84.209441] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.212525] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.214601] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.218724] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.221835] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 84.334463] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 84.338288] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 84.342126] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 84.346378] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 84.349765] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 84.396470] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 84.403091] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 84.406932] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 84.409092] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 84.414369] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 84.416244] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 84.420275] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 84.421301] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 84.424085] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 84.427059] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 84.431409] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 84.433989] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 84.436063] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 84.439235] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 84.445123] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 84.458620] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 84.462042] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 84.464041] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 84.494232] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 84.496337] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 84.502049] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 84.508794] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 84.511042] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 84.531687] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 84.533760] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 84.536129] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 84.569760] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 84.571515] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 84.581594] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 84.588243] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 86.242406] Bluetooth: hci0: command tx timeout [ 86.369334] Bluetooth: hci1: command tx timeout [ 86.498006] Bluetooth: hci2: command tx timeout [ 86.498037] Bluetooth: hci4: command tx timeout [ 86.498859] Bluetooth: hci3: command tx timeout [ 86.561957] Bluetooth: hci5: command tx timeout [ 86.625941] Bluetooth: hci6: command tx timeout [ 86.689519] Bluetooth: hci7: command tx timeout [ 88.291357] Bluetooth: hci0: command tx timeout [ 88.417940] Bluetooth: hci1: command tx timeout [ 88.545781] Bluetooth: hci4: command tx timeout [ 88.546086] Bluetooth: hci2: command tx timeout [ 88.546298] Bluetooth: hci3: command tx timeout [ 88.610582] Bluetooth: hci5: command tx timeout [ 88.673994] Bluetooth: hci6: command tx timeout [ 88.737989] Bluetooth: hci7: command tx timeout [ 90.337936] Bluetooth: hci0: command tx timeout [ 90.465938] Bluetooth: hci1: command tx timeout [ 90.593060] Bluetooth: hci2: command tx timeout [ 90.593440] Bluetooth: hci4: command tx timeout [ 90.594468] Bluetooth: hci3: command tx timeout [ 90.658097] Bluetooth: hci5: command tx timeout [ 90.722119] Bluetooth: hci6: command tx timeout [ 90.786145] Bluetooth: hci7: command tx timeout [ 92.386063] Bluetooth: hci0: command tx timeout [ 92.514075] Bluetooth: hci1: command tx timeout [ 92.641946] Bluetooth: hci3: command tx timeout [ 92.641974] Bluetooth: hci4: command tx timeout [ 92.642441] Bluetooth: hci2: command tx timeout [ 92.705943] Bluetooth: hci5: command tx timeout [ 92.769954] Bluetooth: hci6: command tx timeout [ 92.833944] Bluetooth: hci7: command tx timeout [ 122.403196] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.403861] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.545570] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.546310] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.691252] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.691835] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.896529] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.897215] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.105679] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.106427] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.239277] loop1: detected capacity change from 0 to 131 [ 123.240855] ======================================================= [ 123.240855] WARNING: The mand mount option has been deprecated and [ 123.240855] and is ignored by this kernel. Remove the mand [ 123.240855] option from the mount to silence this warning. [ 123.240855] ======================================================= [ 123.252237] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.252805] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.270408] audit: type=1400 audit(1756589702.885:8): avc: denied { kernel } for pid=3764 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 123.295261] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.295836] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 21:35:02 executing program 1: sync() sync() [ 123.415941] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.417232] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 21:35:03 executing program 3: syz_mount_image$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='minix\x00', 0x10000, &(0x7f0000000140)=']@+*\')\x00') openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0xb}, 0x18) [ 123.597868] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.599091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 21:35:03 executing program 1: r0 = fsmount(0xffffffffffffffff, 0x1, 0x70) ioctl$CDROM_SET_OPTIONS(r0, 0x5320, 0x10) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x393b}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f00000000c0)=0x1, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000740)={'syz_tun\x00', &(0x7f0000000700)=@ethtool_rxfh_indir={0x38}}) fcntl$dupfd(r2, 0x0, r4) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000700e9ff0000000000001b7e3c51663690b6a44739ab7f43fff5c66e522935161898f7a4c04273acc870c2dc31373cb60c990c9df824673f46cf30d0912bf73632e8039b932a8fce40a3f6ed159beabf7cd54b55df86a2b7e559f038ebc52db95b72c760561d245ea10eb000000000000000000000000000008488517297d3810ff6a82c3c"]) 21:35:03 executing program 3: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000740)={'syz_tun\x00', &(0x7f0000000700)=@ethtool_rxfh_indir={0x38}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000740)={'syz_tun\x00', &(0x7f0000000700)=@ethtool_rxfh_indir={0x38}}) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000740)={'syz_tun\x00', &(0x7f0000000700)=@ethtool_rxfh_indir={0x38}}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1ff}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008010}, 0x2004c8c0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x5420, 0x0) [ 123.738333] audit: type=1400 audit(1756589703.352:9): avc: denied { open } for pid=3797 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 123.786215] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list 21:35:03 executing program 3: r0 = io_uring_setup(0x5056, &(0x7f0000000040)={0x0, 0x0, 0x10, 0x0, 0x866}) pread64(r0, &(0x7f00000000c0)=""/33, 0x21, 0x1ff80000) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r0], 0x1) io_uring_register$IORING_REGISTER_FILES(r0, 0x17, &(0x7f0000000000), 0x0) [ 123.882731] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.883389] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 21:35:03 executing program 3: ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9}}, './file0\x00'}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in=@multicast1, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@local}}, &(0x7f0000000200)=0xe8) setsockopt$inet_mreqn(r0, 0x0, 0x7, &(0x7f0000000240)={@empty, @local, r1}, 0xc) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/sockstat\x00') r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) r4 = socket$packet(0x11, 0x2, 0x300) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000000)={r3, 0x1, 0x6, @link_local}, 0x10) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000100)={r6, 0x1, 0x6, @multicast}, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000002c0)={'wg1\x00', 0x0}) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00e505000000fedbdf6514000180060001000200000008000700", @ANYRES32=r6, @ANYBLOB="2c000180050002000300000008000700", @ANYRES32=r7, @ANYBLOB="050002007f00000008000300ac1e010108000700", @ANYRES32=r1, @ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0xc4}, 0x8845) 21:35:03 executing program 1: r0 = creat(&(0x7f0000000080)='./file0/file0\x00', 0x1a2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0xb0a50000, 0xa5afab6}) [ 124.041995] syz_tun: entered promiscuous mode [ 124.042839] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 124.071405] mac80211_hwsim hwsim5 wlan1: left promiscuous mode [ 124.072520] syz_tun: left promiscuous mode [ 124.083807] syz_tun: entered promiscuous mode [ 124.084365] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode 21:35:03 executing program 1: set_mempolicy(0x3, &(0x7f0000000040)=0x7ff, 0x6) syz_open_dev$tty20(0xc, 0x4, 0x1) [ 124.097291] mac80211_hwsim hwsim5 wlan1: left promiscuous mode [ 124.098641] syz_tun: left promiscuous mode [ 124.279692] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 125.039240] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.040011] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.151112] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.151684] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.272607] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.273242] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.341626] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.342555] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.133244] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.134202] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.161758] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.162603] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 21:35:18 executing program 3: sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="598e5c00967b45d66008ad2f73e3ec72a5e377d13531155c1b09bb50c05f0bf4c1a909432d287b895e2e69eaefaf4a", @ANYRES16=0x0, @ANYBLOB="00042bbd7000fddbdf250b0000001400038008000200070000000800030000000080"], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x84) r0 = syz_io_uring_setup(0x1722, &(0x7f0000000080)={0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) ppoll(&(0x7f0000000940)=[{r0}], 0x1, &(0x7f00000009c0)={0x0, 0x3938700}, &(0x7f0000000a00), 0x8) 21:35:18 executing program 2: setitimer(0x0, &(0x7f0000000000)={{}, {0x0, 0x2710}}, 0x0) setitimer(0x0, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, &(0x7f0000000080)) futimesat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={{0x0, 0xea60}, {0x77359400}}) setitimer(0x2, &(0x7f0000000140)={{0x77359400}, {0x0, 0xea60}}, &(0x7f0000000180)) setitimer(0x2, &(0x7f00000001c0)={{}, {0x77359400}}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) setitimer(0x2, &(0x7f0000000280)={{r0, r1/1000+60000}, {0x0, 0xea60}}, &(0x7f00000002c0)) setitimer(0x0, &(0x7f0000000300)={{0x77359400}, {0x0, 0x2710}}, &(0x7f0000000340)) setitimer(0x0, &(0x7f0000000380)={{0x0, 0xea60}, {0x0, 0x2710}}, &(0x7f00000003c0)) setitimer(0x1, &(0x7f0000000400)={{0x0, 0xea60}}, &(0x7f0000000440)) setitimer(0x0, &(0x7f0000000480)={{0x77359400}, {0x0, 0x2710}}, &(0x7f00000004c0)) setitimer(0x0, &(0x7f0000000500)={{}, {0x77359400}}, 0x0) setitimer(0x1, &(0x7f0000000540)={{0x77359400}}, &(0x7f0000000580)) clock_gettime(0x0, &(0x7f00000005c0)={0x0, 0x0}) setitimer(0x2, &(0x7f0000000600)={{0x0, 0x2710}, {r2, r3/1000+10000}}, &(0x7f0000000640)) getitimer(0x1, &(0x7f0000000680)) epoll_pwait2(0xffffffffffffffff, &(0x7f00000006c0)=[{}, {}, {}], 0x3, &(0x7f0000000700)={0x0, 0x989680}, &(0x7f0000000740)={[0xffff]}, 0x8) setitimer(0x1, &(0x7f0000000780)={{0x0, 0x2710}, {0x0, 0x2710}}, &(0x7f00000007c0)) getitimer(0x1, &(0x7f0000000800)) setitimer(0x0, &(0x7f0000000840)={{}, {0x77359400}}, &(0x7f0000000880)) 21:35:18 executing program 4: r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4008004}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r0, 0x800, 0x70bd2a, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x10) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="9b45c478e13100fa6ebd6f8589c563e723ca7ed77b662c2665cc0a459f793376ae228b7aeaabb78b7860c8a8fab10b1da27656b34aa2ceec9e8345e9591378ec8e5be400040000000000003d78135e4c4e5805b6e4"]) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000740)={'ipvlan1\x00', &(0x7f0000000200)=@ethtool_channels={0x3c, 0x1000, 0x101, 0x402, 0x7, 0xb7c2, 0x8, 0x1f, 0x3}}) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000040)={0x6, 0x6, 0x6}) 21:35:18 executing program 1: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = pidfd_getfd(r1, r0, 0x0) recvfrom(r1, &(0x7f00000001c0)=""/240, 0xf0, 0x42, &(0x7f00000002c0)=@generic={0x21, "7e68846e7d1fab3ed68fdf01f1c5b50089d67814af7d338ce26ffb0db7d8f0a9a5c6d92e7099165424de6fe4225ccf4e1b3a19c8b3f0c24a30497c020a4d7e7c21bebdf81ca6b98c948f4ef0aa8a05c21c1fe14803d97577ca8b603583972fca49f69131d9ef96040dda031adeebf4b276deb94efd0030d0d445ff2048a6"}, 0x80) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=ANY=[@ANYBLOB="a3fb8c48", @ANYRES16=r3, @ANYBLOB="0008000300000000000000000000ee971dab7be852e800000000e47fd62f3834b28c0b00e48aed2e65e30dbd97d9c6025a7fa48402964dfec0d02551c1384e0a92d3fc52a6ffbe08b9ab405f8aa855fea884373840d209b35432a830f17bac862f6c7a0df01ae8e94c0dd098dfba91c0dd74d6544049503d8b00cca5afac3345dfad4a43cb6531b8796be873ddf7122063d6bc9e0a03c7e96088c1dcf7e37af1dc1c185cc64aa6f9b23cc516cac24b016caf1b57930e433930de7b809e149ea3f1426d41259dd8d3e656db1f148394027ee14444714d15c95a7e630fe1c09ba8", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) 21:35:18 executing program 6: sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x3, 0x3, 0x201, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8041}, 0x40034) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="24000000100001000000000c000000000800008004001a000000000000"], 0x24}], 0x1}, 0x0) 21:35:18 executing program 5: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000007c0)={0x1, &(0x7f0000000780)=[{0x889, 0x0, 0xf8, 0x400}]}) r1 = clone3(&(0x7f0000000700)={0x1020000, &(0x7f00000001c0)=0xffffffffffffffff, &(0x7f0000000140)=0x0, &(0x7f0000000180), {0x38}, &(0x7f0000000c80)=""/204, 0xcc, &(0x7f00000005c0)=""/34, &(0x7f00000006c0)=[0xffffffffffffffff], 0x1}, 0x58) vmsplice(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000004c0)="7b4b77c2fe1a25d4ccc9d5fdd5739b8a55acdf94eb26d84ec75f503fb2cc177b5ef021e86447095c5f4c31ef46af6324f0044f444613817338645d9235f828eb7266a468fb89d1c1e23982e7402e90235d702e477d527c2adfa44d2b8b4adc9f06f8bcfb1ef30dc2566a5de48004f181ae3853a9aaf72d1876896c140c5f8f71aad3326e18c94a2f6082c86cf841013233e258cdc4a870b23930c6da0bd2ff0bead9143c82aeeb3689c96b4e0671e1e0bbe3abd16fdc1951ba6ba4d03e4d4ffeaa2f6d60736c24f8ed2ce20e0413b415bf0abfd3ec2bf3c832bb1689", 0xdc}], 0x1, 0x2) r4 = fcntl$getown(r0, 0x9) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000a80)={0x0, 0x0}) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000b00)=0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000c40)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB="6732e30ab9a05d1b15258255a5b94f0000000000002e2f66696c653000"]) clone3(&(0x7f0000000bc0)={0x8000280, &(0x7f0000000800), &(0x7f0000000840), &(0x7f0000000880), {0x16}, &(0x7f00000008c0)=""/231, 0xe7, &(0x7f00000009c0)=""/175, &(0x7f0000000b40)=[r4, r3, r3, r5, r6, r1], 0x6, {r7}}, 0x58) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x1d, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000002000028020000028401001b0000000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e37303334343838373800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="0000000000000000000000004fe17b6ecf5c42eb82d5ba1095ba954b010000000c00000000000000d0f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000100000000000000000000000000000000000000000000002600000000000000", 0x40, 0x540}, {&(0x7f0000010300)="0000000000000000000000000000000000000000010400"/32, 0x20, 0x640}, {&(0x7f0000010400)="030000000400000005000000d4000f000300040000000000000000000f00c7e0", 0x20, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0100ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000d0f4655fd0f4655fd0f4655f00"/2080, 0x820, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d0f4655fd1f4655fd1f4655f00000000000004000200000000000000050000001500"/64, 0x40, 0x1600}, {&(0x7f0000010f00)="200000008cb1c9158cb1c91500000000d0f4655f00"/32, 0x20, 0x1680}, {&(0x7f0000011000)="c0410000002c0000d0f4655fd0f4655fd0f4655f0000000000000200160000000000000000000000160000001700000018000000190000001a0000001b0000001c0000001d0000001e0000001f00000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000d0f4655f000000000000000000000000000002ea00"/192, 0xc0, 0x2800}, {&(0x7f0000011100)="ed4100003c000000d1f4655fd1f4655fd1f4655f0000000000000200000000000000001003000000020000000d0000001000050166696c65300000000e0000002800050766696c653100000000000000000000000000000000000000000000000000000025c8f397000000000000000000000000000000000000000000000000200000008cb1c9158cb1c9158cb1c915d1f4655f8cb1c9150000000000000000000002ea04070000000000000000000000000000646174610000000000000000", 0xc0, 0x2a00}, {&(0x7f0000011200)="ed8100001a040000d1f4655fd1f4655fd1f4655f000000000000010004000000000000000100000021000000220000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000099aa5620000000000000000000000000000000000000000000000000200000008cb1c9158cb1c9158cb1c915d1f4655f8cb1c9150000000000000000", 0xa0, 0x2c00}, {&(0x7f0000011300)="ffa1000026000000d1f4655fd1f4655fd1f4655f00000000000001000000000000000000010000002f746d702f73797a2d696d61676567656e3730333434383837382f66696c65302f66696c653000000000000000000000000000000000000000000000927823d7000000000000000000000000000000000000000000000000200000008cb1c9158cb1c9158cb1c915d1f4655f8cb1c9150000000000000000", 0xa0, 0x2e00}, {&(0x7f0000011400)="ed8100000a000000d1f4655fd1f4655fd1f4655f000000000000010000000000000000100100000073797a6b616c6c65727300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006d3d99ad000000000000000000000000000000000000000000000000200000008cb1c9158cb1c9178cb1c915d1f4655f8cb1c9150000000000000000000002ea040700000000000000000000000000006461746106015401000000000600000000000000786174747231000006014c0100000000060000000000000078617474733200"/256, 0x100, 0x3000}, {&(0x7f0000011500)="0000000000000000000000000000000078617474723200007861747472310000ed81000028230000d1f4655fd1f4655fd1f4655f0000000000000200120000000000000001000000230000002400000025000000260000002700000028000000290000002a0000002b0000000000000000000000000000000000000000000000000000004e2ca332000000000000000000000000000000000000000000000000200000008cb1c9158cb1c9158cb1c915d1f4655f8cb1c9150000000000000000", 0xc0, 0x31e0}, {&(0x7f0000011600)="ed81000064000000d1f4655fd1f4655fd1f4655f000000000000010000000000000000100100000073797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616cfef66502000000000000000000000000000000000000000000000000200000008cb1c9158cb1c9158cb1c915d1f4655f8cb1c9150000000000000000000002ea04073401000000002800000000000000646174610000000000000000", 0xc0, 0x3400}, {&(0x7f0000011700)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lersyzkallersyzkallersyzkallersyzkallers', 0x40, 0x35c0}, {&(0x7f0000011800)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531000000100000001000050166696c6532000000100000001000050166696c6533000000110000009403090166696c652e636f6c64000000", 0x80, 0x5400}, {&(0x7f0000011900)="0b0000000c0001022e000000020000000c0002022e2e000000000000e8030000", 0x20, 0x5800}, {&(0x7f0000011a00)="00000000000400"/32, 0x20, 0x5c00}, {&(0x7f0000011b00)="00000000000400"/32, 0x20, 0x6000}, {&(0x7f0000011c00)="00000000000400"/32, 0x20, 0x6400}, {&(0x7f0000011d00)="00000000000400"/32, 0x20, 0x6800}, {&(0x7f0000011e00)="00000000000400"/32, 0x20, 0x6c00}, {&(0x7f0000011f00)="00000000000400"/32, 0x20, 0x7000}, {&(0x7f0000012000)="00000000000400"/32, 0x20, 0x7400}, {&(0x7f0000012100)="00000000000400"/32, 0x20, 0x7800}, {&(0x7f0000012200)="00000000000400"/32, 0x20, 0x7c00}, {&(0x7f0000012300)="00000000000400"/32, 0x20, 0x8000}, {&(0x7f0000012400)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x8400}], 0x0, &(0x7f0000012900)) 21:35:18 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x1c, r1, 0x5, 0x0, 0x25dfdbfb, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) [ 139.135317] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 139.139723] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 139.167787] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2 [ 139.204071] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2 [ 139.244496] syz-executor.7 (3955) used greatest stack depth: 22576 bytes left [ 139.247817] program syz-executor.4 is using a deprecated SCSI ioctl, please convert it to SG_IO 21:35:18 executing program 7: r0 = inotify_init() r1 = inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0xd4000a8b) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) unlink(&(0x7f0000000240)='./file0\x00') inotify_rm_watch(r2, r1) read(r0, 0x0, 0x0) [ 139.335395] audit: type=1400 audit(1756589718.950:10): avc: denied { watch_reads } for pid=3974 comm="syz-executor.7" path="/syzkaller-testdir922717549/syzkaller.wIhvxN/2" dev="sda" ino=15977 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 [ 139.345552] loop5: detected capacity change from 0 to 512 21:35:18 executing program 2: setitimer(0x0, &(0x7f0000000000)={{}, {0x0, 0x2710}}, 0x0) setitimer(0x0, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, &(0x7f0000000080)) futimesat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={{0x0, 0xea60}, {0x77359400}}) setitimer(0x2, &(0x7f0000000140)={{0x77359400}, {0x0, 0xea60}}, &(0x7f0000000180)) setitimer(0x2, &(0x7f00000001c0)={{}, {0x77359400}}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) setitimer(0x2, &(0x7f0000000280)={{r0, r1/1000+60000}, {0x0, 0xea60}}, &(0x7f00000002c0)) setitimer(0x0, &(0x7f0000000300)={{0x77359400}, {0x0, 0x2710}}, &(0x7f0000000340)) setitimer(0x0, &(0x7f0000000380)={{0x0, 0xea60}, {0x0, 0x2710}}, &(0x7f00000003c0)) setitimer(0x1, &(0x7f0000000400)={{0x0, 0xea60}}, &(0x7f0000000440)) setitimer(0x0, &(0x7f0000000480)={{0x77359400}, {0x0, 0x2710}}, &(0x7f00000004c0)) setitimer(0x0, &(0x7f0000000500)={{}, {0x77359400}}, 0x0) setitimer(0x1, &(0x7f0000000540)={{0x77359400}}, &(0x7f0000000580)) clock_gettime(0x0, &(0x7f00000005c0)={0x0, 0x0}) setitimer(0x2, &(0x7f0000000600)={{0x0, 0x2710}, {r2, r3/1000+10000}}, &(0x7f0000000640)) getitimer(0x1, &(0x7f0000000680)) epoll_pwait2(0xffffffffffffffff, &(0x7f00000006c0)=[{}, {}, {}], 0x3, &(0x7f0000000700)={0x0, 0x989680}, &(0x7f0000000740)={[0xffff]}, 0x8) setitimer(0x1, &(0x7f0000000780)={{0x0, 0x2710}, {0x0, 0x2710}}, &(0x7f00000007c0)) getitimer(0x1, &(0x7f0000000800)) setitimer(0x0, &(0x7f0000000840)={{}, {0x77359400}}, &(0x7f0000000880)) [ 139.367578] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN NOPTI [ 139.368460] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 139.369075] CPU: 0 UID: 0 PID: 3966 Comm: syz-executor.5 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 139.370030] Tainted: [W]=WARN [ 139.370563] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 139.372442] RIP: 0010:__queue_work+0x202/0x1240 [ 139.373433] Code: 48 8b 6d 00 e8 4f 9e 79 03 31 ff 41 89 c5 89 c6 e8 93 f3 31 00 45 85 ed 0f 85 e1 05 00 00 e8 55 f8 31 00 48 89 e8 48 c1 e8 03 <42> 80 3c 20 00 0f 85 a0 0e 00 00 4c 8b 75 00 48 89 df 4c 89 34 24 [ 139.378245] RSP: 0018:ffff88801accf398 EFLAGS: 00010056 [ 139.379528] RAX: 0000000000000000 RBX: ffff88801fc10f18 RCX: ffffc90002ffd000 [ 139.380089] RDX: 0000000000040000 RSI: ffffffff8141ef2b RDI: 0000000000000005 [ 139.380641] RBP: 0000000000000001 R08: 0000000000000001 R09: fffffbfff0f11ef4 [ 139.381191] R10: 0000000000000001 R11: 0000000000000001 R12: dffffc0000000000 [ 139.381742] R13: 0000000000000001 R14: 0000000000000000 R15: ffff888016ed5800 [ 139.382295] FS: 00007fdc94c28700(0000) GS:ffff8880e55dd000(0000) knlGS:0000000000000000 [ 139.382921] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 139.383373] CR2: 00007f9d84e7c6f4 CR3: 0000000015f2d000 CR4: 0000000000350ef0 [ 139.383929] Call Trace: [ 139.384134] [ 139.384317] ? find_held_lock+0x2b/0x80 [ 139.384642] queue_work_on+0xd0/0xe0 [ 139.384942] loop_queue_rq+0x5c8/0x1180 [ 139.385262] __blk_mq_issue_directly+0xd5/0x260 [ 139.385635] ? __pfx___blk_mq_issue_directly+0x10/0x10 [ 139.386049] ? bdev_count_inflight_rw.part.0+0x5f/0x380 [ 139.386467] blk_mq_request_issue_directly+0x11c/0x1e0 [ 139.386882] blk_mq_issue_direct+0x192/0x640 [ 139.387231] blk_mq_dispatch_queue_requests+0x4b0/0x7c0 [ 139.387650] blk_mq_flush_plug_list+0x1ec/0x5b0 [ 139.388014] ? read_tsc+0x9/0x20 [ 139.388296] ? ktime_get+0x16d/0x270 [ 139.388593] ? trace_block_plug+0x149/0x1b0 [ 139.388934] ? blk_add_rq_to_plug+0x234/0x550 [ 139.389289] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 139.389689] ? blk_mq_submit_bio+0x4fd/0x2220 [ 139.390043] __blk_flush_plug+0x25c/0x460 [ 139.390369] ? __pfx___blk_flush_plug+0x10/0x10 [ 139.390744] __submit_bio+0x480/0x5b0 [ 139.391043] ? __pfx___submit_bio+0x10/0x10 [ 139.391386] ? read_tsc+0x9/0x20 [ 139.391656] ? ktime_get+0x16d/0x270 [ 139.391951] submit_bio_noacct_nocheck+0x68e/0xcb0 [ 139.392333] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 139.392766] submit_bio_noacct+0x359/0x1350 [ 139.393112] ? __pfx_end_buffer_read_sync+0x10/0x10 [ 139.393514] ext4_read_bh+0x15a/0x2e0 [ 139.393824] ext4_read_bh_lock+0x7a/0xd0 [ 139.394154] ext4_sb_bread_unmovable+0x172/0x260 [ 139.394536] ext4_fill_super+0x662/0xba20 [ 139.394882] ? wake_bit_function+0x210/0x240 [ 139.395243] ? snprintf+0xbe/0x100 [ 139.395539] ? __pfx_snprintf+0x10/0x10 [ 139.395866] ? __pfx_ext4_fill_super+0x10/0x10 [ 139.396238] ? find_held_lock+0x2b/0x80 [ 139.396565] ? setup_bdev_super+0x2ed/0x6e0 [ 139.396916] ? set_blocksize+0x1b4/0x470 [ 139.397243] ? lock_release+0xc8/0x290 [ 139.397560] ? sb_set_blocksize+0x177/0x1c0 [ 139.397906] ? setup_bdev_super+0x31f/0x6e0 [ 139.398258] get_tree_bdev_flags+0x38a/0x620 [ 139.398612] ? __pfx_ext4_fill_super+0x10/0x10 [ 139.398991] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 139.399384] ? cap_capable+0xdb/0x3b0 [ 139.399698] ? security_capable+0x2f/0x90 [ 139.400035] vfs_get_tree+0x93/0x340 [ 139.400344] path_mount+0x132d/0x1dd0 [ 139.400655] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 139.401082] ? __pfx_path_mount+0x10/0x10 [ 139.401416] ? kmem_cache_free+0x2a1/0x540 [ 139.401754] ? putname.part.0+0x11b/0x160 [ 139.402091] ? getname_flags.part.0+0x1c6/0x540 [ 139.402473] ? putname.part.0+0x11b/0x160 [ 139.402811] __x64_sys_mount+0x27b/0x300 [ 139.403138] ? __pfx___x64_sys_mount+0x10/0x10 [ 139.403507] do_syscall_64+0xbf/0x360 [ 139.403811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.404221] RIP: 0033:0x7fdc976b404a [ 139.404519] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 139.405935] RSP: 002b:00007fdc94c27fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 139.406531] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007fdc976b404a [ 139.407092] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007fdc94c28000 [ 139.407649] RBP: 00007fdc94c28040 R08: 00007fdc94c28040 R09: 0000000020000000 [ 139.408209] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 139.408769] R13: 0000000020000100 R14: 00007fdc94c28000 R15: 0000000020012900 [ 139.409330] [ 139.409520] Modules linked in: [ 139.409778] ---[ end trace 0000000000000000 ]--- [ 139.410148] RIP: 0010:__queue_work+0x202/0x1240 [ 139.410522] Code: 48 8b 6d 00 e8 4f 9e 79 03 31 ff 41 89 c5 89 c6 e8 93 f3 31 00 45 85 ed 0f 85 e1 05 00 00 e8 55 f8 31 00 48 89 e8 48 c1 e8 03 <42> 80 3c 20 00 0f 85 a0 0e 00 00 4c 8b 75 00 48 89 df 4c 89 34 24 [ 139.411946] RSP: 0018:ffff88801accf398 EFLAGS: 00010056 [ 139.412364] RAX: 0000000000000000 RBX: ffff88801fc10f18 RCX: ffffc90002ffd000 [ 139.412923] RDX: 0000000000040000 RSI: ffffffff8141ef2b RDI: 0000000000000005 [ 139.413482] RBP: 0000000000000001 R08: 0000000000000001 R09: fffffbfff0f11ef4 [ 139.414036] R10: 0000000000000001 R11: 0000000000000001 R12: dffffc0000000000 [ 139.414592] R13: 0000000000000001 R14: 0000000000000000 R15: ffff888016ed5800 [ 139.415152] FS: 00007fdc94c28700(0000) GS:ffff8880e55dd000(0000) knlGS:0000000000000000 [ 139.415778] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 139.416236] CR2: 00007f9d84e7c6f4 CR3: 0000000015f2d000 CR4: 0000000000350ef0 [ 139.416797] note: syz-executor.5[3966] exited with irqs disabled [ 139.417368] note: syz-executor.5[3966] exited with preempt_count 1 [ 139.417871] ------------[ cut here ]------------ [ 139.418311] WARNING: kernel/exit.c:898 at do_exit+0x1c36/0x2970, CPU#0: syz-executor.5/3966 [ 139.419025] Modules linked in: [ 139.419281] CPU: 0 UID: 0 PID: 3966 Comm: syz-executor.5 Tainted: G D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 139.420267] Tainted: [D]=DIE, [W]=WARN [ 139.420564] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 139.421269] RIP: 0010:do_exit+0x1c36/0x2970 [ 139.421607] Code: 96 0a 00 00 c7 43 18 00 00 00 00 e9 21 e6 ff ff e8 bf a4 38 00 bf 02 24 00 00 e8 f5 ab 0b 00 e9 41 ff ff ff e8 ab a4 38 00 90 <0f> 0b 90 e9 87 e4 ff ff e8 9d a4 38 00 4c 89 e6 bf 05 06 00 00 e8 [ 139.423168] RSP: 0018:ffff88801accfe40 EFLAGS: 00010212 [ 139.423577] RAX: 000000000003d66e RBX: 0000000000000200 RCX: ffffc90002ffd000 [ 139.424762] RDX: 0000000000040000 RSI: ffffffff813b42d5 RDI: ffff888046e2e468 [ 139.425775] RBP: ffff888046e2d280 R08: 0000000000000001 R09: fffffbfff0f11cd8 [ 139.426341] R10: 0000000000000200 R11: 0000000000000001 R12: 000000000000000b [ 139.426886] R13: 0000000000002710 R14: dffffc0000000000 R15: 0000000000000000 [ 139.427435] FS: 00007fdc94c28700(0000) GS:ffff8880e55dd000(0000) knlGS:0000000000000000 [ 139.428052] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 139.428492] CR2: 00007f9d84e7c6f4 CR3: 0000000015f2d000 CR4: 0000000000350ef0 [ 139.429041] Call Trace: [ 139.429241] [ 139.429416] ? _printk+0xbe/0xf0 [ 139.429684] ? __pfx__printk+0x10/0x10 [ 139.430004] ? __pfx_do_exit+0x10/0x10 [ 139.430310] make_task_dead+0x174/0x3b0 [ 139.430616] ? do_syscall_64+0xbf/0x360 [ 139.430941] rewind_stack_and_make_dead+0x16/0x20 [ 139.431316] RIP: 0033:0x7fdc976b404a [ 139.431599] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 139.432968] RSP: 002b:00007fdc94c27fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 139.433539] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007fdc976b404a [ 139.434086] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007fdc94c28000 [ 139.434621] RBP: 00007fdc94c28040 R08: 00007fdc94c28040 R09: 0000000020000000 [ 139.435172] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 139.435708] R13: 0000000020000100 R14: 00007fdc94c28000 R15: 0000000020012900 [ 139.436256] [ 139.436438] irq event stamp: 4850 [ 139.436606] kmemleak: Found object by alias at 0x607f1a639504 [ 139.436636] CPU: 1 UID: 0 PID: 3978 Comm: syz-executor.2 Tainted: G D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 139.436673] Tainted: [D]=DIE, [W]=WARN [ 139.436680] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 139.436693] Call Trace: [ 139.436700] [ 139.436708] dump_stack_lvl+0xca/0x120 [ 139.436745] __lookup_object+0x94/0xb0 [ 139.436781] delete_object_full+0x27/0x70 [ 139.436809] free_percpu+0x30/0x1160 [ 139.436839] ? arch_uprobe_clear_state+0x16/0x140 [ 139.436871] futex_hash_free+0x38/0xc0 [ 139.436895] mmput+0x2d3/0x390 [ 139.436928] do_exit+0x79d/0x2970 [ 139.436952] ? signal_wake_up_state+0x85/0x120 [ 139.436980] ? zap_other_threads+0x2b9/0x3a0 [ 139.437007] ? __pfx_do_exit+0x10/0x10 [ 139.437031] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 139.437061] ? lock_release+0x1c7/0x290 [ 139.437087] do_group_exit+0xd3/0x2a0 [ 139.437113] __x64_sys_exit_group+0x3e/0x50 [ 139.437139] x64_sys_call+0x18c5/0x18d0 [ 139.437168] do_syscall_64+0xbf/0x360 [ 139.437187] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.437209] RIP: 0033:0x7f42eaae7b19 [ 139.437225] Code: Unable to access opcode bytes at 0x7f42eaae7aef. [ 139.437235] RSP: 002b:00007fff033d5108 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 139.437257] RAX: ffffffffffffffda RBX: 000000000000001e RCX: 00007f42eaae7b19 [ 139.437271] RDX: 00007f42eaa9a72b RSI: ffffffffffffffbc RDI: 0000000000000000 [ 139.437285] RBP: 0000000000000000 R08: 0000001b2ce22fdc R09: 0000000000000000 [ 139.437298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 139.437311] R13: 0000000000000000 R14: 0000000000000001 R15: 00007fff033d51f0 [ 139.437331] [ 139.437338] kmemleak: Object (percpu) 0x607f1a639500 (size 8): [ 139.437350] kmemleak: comm "syz-executor.5", pid 3966, jiffies 4294806214 [ 139.437364] kmemleak: min_count = 1 [ 139.437371] kmemleak: count = 0 [ 139.437378] kmemleak: flags = 0x21 [ 139.437385] kmemleak: checksum = 0 [ 139.437392] kmemleak: backtrace: [ 139.437398] pcpu_alloc_noprof+0x87a/0x1170 [ 139.437427] percpu_ref_init+0x37/0x400 [ 139.437459] blkg_alloc+0xe9/0x7d0 [ 139.437481] blkg_create+0xe08/0x1420 [ 139.437504] bio_associate_blkg_from_css+0xe06/0x1380 [ 139.437529] bio_associate_blkg+0x10e/0x2a0 [ 139.437554] bio_init+0x2dd/0x570 [ 139.437576] bio_alloc_bioset+0x2cf/0x8c0 [ 139.437603] submit_bh_wbc+0x286/0x720 [ 139.437632] ext4_read_bh+0x15a/0x2e0 [ 139.437653] ext4_read_bh_lock+0x7a/0xd0 [ 139.437674] ext4_sb_bread_unmovable+0x172/0x260 [ 139.437697] ext4_fill_super+0x662/0xba20 [ 139.437725] get_tree_bdev_flags+0x38a/0x620 [ 139.437745] vfs_get_tree+0x93/0x340 [ 139.437772] path_mount+0x132d/0x1dd0 [ 139.455806] hardirqs last enabled at (4849): [] _raw_spin_unlock_irqrestore+0x2c/0x50 [ 139.456516] hardirqs last disabled at (4850): [] _raw_spin_lock_irq+0x42/0x50 [ 139.457168] softirqs last enabled at (4546): [] kernel_fpu_end+0x59/0x70 [ 139.457778] softirqs last disabled at (4544): [] kernel_fpu_begin_mask+0x1b7/0x290 [ 139.458458] ---[ end trace 0000000000000000 ]--- [ 139.458814] BUG: sleeping function called from invalid context at ./include/linux/percpu-rwsem.h:51 [ 139.459480] in_atomic(): 0, irqs_disabled(): 0, non_block: 0, pid: 3966, name: syz-executor.5 [ 139.460113] preempt_count: 0, expected: 0 [ 139.460416] RCU nest depth: 2, expected: 0 [ 139.460722] INFO: lockdep is turned off. [ 139.461035] CPU: 0 UID: 0 PID: 3966 Comm: syz-executor.5 Tainted: G D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 139.461053] Tainted: [D]=DIE, [W]=WARN [ 139.461057] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 139.461063] Call Trace: [ 139.461066] [ 139.461070] dump_stack_lvl+0xfa/0x120 [ 139.461088] __might_resched+0x2f3/0x510 [ 139.461101] exit_signals+0x25/0x940 [ 139.461118] do_exit+0x2db/0x2970 [ 139.461130] ? _printk+0xbe/0xf0 [ 139.461142] ? __pfx__printk+0x10/0x10 [ 139.461154] ? __pfx_do_exit+0x10/0x10 [ 139.461168] make_task_dead+0x174/0x3b0 [ 139.461181] ? do_syscall_64+0xbf/0x360 [ 139.461190] rewind_stack_and_make_dead+0x16/0x20 [ 139.461205] RIP: 0033:0x7fdc976b404a [ 139.461213] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 139.461224] RSP: 002b:00007fdc94c27fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 139.461234] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007fdc976b404a [ 139.461242] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007fdc94c28000 [ 139.461249] RBP: 00007fdc94c28040 R08: 00007fdc94c28040 R09: 0000000020000000 [ 139.461256] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 139.461262] R13: 0000000020000100 R14: 00007fdc94c28000 R15: 0000000020012900 [ 139.461273] 21:35:19 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000740)={'syz_tun\x00', &(0x7f0000000700)=@ethtool_rxfh_indir={0x38}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000740)={'syz_tun\x00', &(0x7f0000000700)=@ethtool_rxfh_indir={0x38}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000740)={'syz_tun\x00', &(0x7f0000000700)=@ethtool_rxfh_indir={0x38}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000740)={'syz_tun\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="3800000000000000dd78e0c13232f5b050dd6fd2bf6442c0fb1fe498a666508d3ab63ab767f9ee332a2ff8a69a3c8ef61eb2e1a36b39cfd29c8c4a98e5b9fb697ff19ba0ccf0d1580eca36015076648fe09369728c6e58867a26f13d03add2f2f02b0face081dad1b548ec250f82f5e6987816e959c8488ed553baee83673e2a47a23ab906f2eba2239e83e200fbb88b9c48aac85e06839f28ec6a9ea5d3dca16d7ba3d471be00f21d06a6d4378ceab820a36274dc093523235adc083cd9bbd5a2db1149d9fdd3760d2cbdc9ade1346992b3285a0666e39b97"]}) r5 = getpgid(0x0) prlimit64(r5, 0x0, 0x0, 0x0) lstat(&(0x7f0000003240)='./file0\x00', &(0x7f0000003280)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getpgid(0x0) prlimit64(r7, 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setresuid(0x0, r8, 0x0) r9 = getegid() sendmsg$netlink(0xffffffffffffffff, &(0x7f0000003440)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)={0x88, 0x1f, 0x100, 0x70bd26, 0x25dfdbff, "", [@generic="6aee16bf7cdfa9f2cdce8bee6330b0da7fd4e25d1e718f188fa293cd79afafda89414191ec33603eae1185f9264e96a2cfb0f82a34aaf379d5b62e854f297019338ef6d829cca0f8ff344c46d4f5af4001f12b09c5eeddc97d437888bbd461235605a7f7fa8a1b8c67e7e480a4037a", @typed={0x8, 0x2, 0x0, 0x0, @uid}]}, 0x88}, {&(0x7f0000000780)={0x610, 0x23, 0x10, 0x70bd28, 0x25dfdbff, "", [@nested={0x27b, 0x51, 0x0, 0x1, [@generic="140a426861ecfbd5a8830e11cb3320873615d9ef5ceb221954db1d4164db58c480366694c0ad1be207a08d9b", @typed={0x8, 0x4e, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x30}}, @typed={0xc, 0x33, 0x0, 0x0, @u64=0xfffffffffffffffa}, @generic="a7c2e395f16b566b849f76396e6aa22c1d7791c6af3ac400661563fe2214cf13a3435bdc695fe392690dd587b9b55b979d128d1d426341e8bd7b", @typed={0x8, 0x22, 0x0, 0x0, @ipv4=@loopback}, @generic="4d00dc8f3a790fedb9316239337a5e46bca244b27846541b5e1b83c8c02675510e97fd9b284cf87b7d265fc2709d05c1d9bb13a6d949664bcc0fa85c1c9603c8769b8b90b9ea44d8f2ffcce8bad57c5ed0e20d5902b5a5022c7362b529b82efdb04ef26a313fc92f97d30a8ca8c71b11d948e0fe419c71f9467f0fdf179cf081b17fee38515651b8626f1dca714c17f57e99aabefd19f194234c13318bd3e1adec34c2f1831348f1595009c823c8728cdb2c5cf6b55b927ded4664a107e3159bfcf859749a0619c93610258b2b9ae48ba81123593942c7c884eeecd48f5fe31e4bde3590bad4139d7c4aed5d7a", @typed={0xc, 0x49, 0x0, 0x0, @u64=0xffffffff}, @generic="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"]}, @generic="74d6495142d95d2485bd5c103832a23f5280ec4c15d35884b1be7273403e4abdfb85f42f6f6f02fc05abacb5eb10731a587bc34dd26e54ccef2f6882e18e4517401fa8dcb8d2818ebe1468b1ef2e26bdf71d29a7352e89131fc55a33b0a49d050a50e67c99247b2c247251", @nested={0x120, 0x2a, 0x0, 0x1, [@generic="aa4c3930227551e287b35e23e351c16a6e18047bd02b58f76fc4b908f1052060b150", @typed={0xc, 0x3e, 0x0, 0x0, @str='syz_tun\x00'}, @generic="09be2da0757ca24b14f5bd8f7e6fba70fb36988e4aa8c3659d7b2e9f9cc5d89e5456a36221c098ee783bd1108e0d6275e10fa455c8b5116b5f8ab5ae53aa00545d8fe485f4d7fae745a4df8e132fbdbd1b4d51d083767d2eec68b3c1a903a420f173c6522b9f332f21d069c73f883dff2c69d2f80d318c16d95999b68326f8e3af4ca3fd1b5162a4f63d4dbcb35e5bd68c658eca01c94603d52d", @typed={0x8, 0x76, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @typed={0x8, 0xb, 0x0, 0x0, @fd}, @generic="d22ac0c3775e3f25cc41458190c23bced17f70a6e68af7060e8b0a48adbe736f0e41c505aac4c8660869b1f0e27ac86a21ff5084d3b2fe5da50a4de4ec8130f9879b6a8d"]}, @generic="282ed17ec4b601e8c41d1f79e31862df9a5073bf73aef35ab668bdd5dfbe3ea057793290211a837e1accb5c7423f4559c764672b5f5406f9e8059e337e1ae6e93affd2f6dce6ce023b26abe6aba07de2b9935c6ca68fbbaf33a843bb3e0a1bd7d28f3819f619d552b0b30080081b403fc07acf4ad5990d123bb03fc2e04c4498ec93f12d306740eed446aefcd0863d319a6ea57d42fc20eb06060c1b8fffea1b1659", @generic="ae5b311e820bdab52a5036987fd4adb3deede7268158910c685f886e8a77d76a1546cf306b6f2c495098e699c145dd95a9229d6f9f0e686c854b26cb2af08a7645f09c00da6e5bb3f78dc560ce1989b0f6f3341f16df0763a3fbaa159dcb681a5475b3bfdcde50028236c540f565aa67e6604d22f53f95cbc59f153ebe33c480dd1c0c5e3238e82dd62d0359606a37b181cbd30b692752f77db553b767a248be09c7a003a6333ea9fabc31fd2fbd61754ba03efd71bf3a315463e27f34c2fb086b675904894ca5ddffa30a4f0e6049a7047c4b33bf575548bd2dac9f4a307e9e809a6270ca95c5b6b7472cde90737f416024fd09", @nested={0x5d, 0x2c, 0x0, 0x1, [@generic="a141dd7acc5e472e33193de7c22b0b7dec5b5d875404e7e6b76710f1198a30dad7d196722556ac5dca037facd7348bc9701d5b95fa3a2e12969bbbc750a6a6b104d5e43abb", @typed={0xc, 0x52, 0x0, 0x0, @u64=0x8}, @typed={0x8, 0x1f, 0x0, 0x0, @u32=0xbfd5}, @generic]}]}, 0x610}, {&(0x7f0000000dc0)={0x1424, 0x23, 0x1, 0x70bd2a, 0x25dfdbfb, "", [@nested={0x1187, 0x73, 0x0, 0x1, [@typed={0x8, 0x1d, 0x0, 0x0, @fd}, @generic="4145a4312d8d28b9076c9ce560cfae81177634655b1ceba2529334fe32f2f435aafcc51ec2c25e2b641b9ffb83819e81632b829618e9879a958d16f410077590d3a47a83680ffe13df9ca0812bb0874f660f625f24b509431ffc29bcff7a70c7f5e2f5d4e920350b69630605a97500b945e1cf9d0e5e075c1f282677e1df3cee243eed1282d63505a3f1f6b69771da089bcbb745640a91cac06c44310a604493a3c79c0bdbf0564b3703383e28a512d074e2b3fc3757a30d9159e2d50c816e20030cfa903873cdee717bb7858aa5950286f4", @generic="e664846d0db55d3d8cae4d4a9bd5d4700271ecbde6001dd34e76f3ec242b1fbd8064aaf9dcfb9fad0dc58b289506a03238e77ecaab479da0040d0327b7f9640e0cdd2b3c3d32dddac57a156778c4575b9bb2b767f2a872bc66b77412c6082450fbab8c01911ef85beeb94f032ffe8e003f3c7e174ae1cd5cb24f349a9a457d299b4da70e9cce9eb1e811fc9b074e60d1e3ef3a9782dfa9f1c17679335d3bfa5d35", @generic="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", @typed={0x8, 0x7e, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @nested={0x19, 0xb, 0x0, 0x1, [@typed={0x14, 0x85, 0x0, 0x0, @ipv6=@remote}, @generic="e2"]}, @typed={0x14, 0x92, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @typed={0xc, 0x73, 0x0, 0x0, @u64=0x20}, @generic="bd20c3be22aa2ce7241aafc638a333b450bc0545379592b8ba9a28a30e76bf2494d0920f391395c4c95d61e46e1649ac47874425fd97ce4faf14872cc426d1754434bfbbd7ded2ec1ecde31bfae271b15086c8fa17de9a09ffde20c3887d7c8849ce416c7cd9f8e34366590bbe0eb5d95e3e15649aa6d34310d010054e34d66dbae6c8f09b2919e9bb0d63127546816912a9a791dfd052bb7bd25b9a40c8d6f45c570efa1aff4298696577c04d722840de1a931aae0e45c464a6a143f0b93df7813e9d81703733337e2a5e3ac0790715768ea9a2636dd9a0e8838c24443a84", @nested={0x16d, 0x37, 0x0, 0x1, [@generic="3224c5b988e5eb9e7cd1844436fd6030692543331fdc639f09b884c0daf00875435cfa2ad8a3a471210ae94ff3133bd0030d8a4327381997807284b88c1ef7f908a43e1a62e61afc943034622c9169d144c4eb8eed8db4d1ca2128c86e0422dc885dbf464dd0a87de9044b043a411d141a378332f5eb2038d63df78e3ff0b1579f5ab3b21a61e687fbcf8efbbcc88a1cc5430d7b9c32931625c609f9ffbe7c81b848d153a556674782eb50fba3647527433ab9ea71d5314b16a0a8c52eb8f3b574aa42359005d22c9b36bb63dc2660acc6e579", @typed={0xc, 0x16, 0x0, 0x0, @u64=0x81}, @typed={0x8, 0x51, 0x0, 0x0, @pid=0xffffffffffffffff}, @typed={0x8, 0x27, 0x0, 0x0, @uid}, @generic="50cbd45727f22cb82dec16fc9f1c3d77809f1fd481e7b87b1cf31a2c6f8a7698feea36bd6b374d4cc209a4449aa9467ee1ed9c08858889a05e065c250f922f6499f9a5734c68c4fbbc2744b4815d155fde91e43fa55f053c87913eace609a4b741f381ecd8dd3d8c56f3d9d1c022d637daa6a9e8ec9e33987176"]}]}, 0x1424}], 0x3, &(0x7f0000003300)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r0, 0xffffffffffffffff, r0]}}, @rights={{0x30, 0x1, 0x1, [r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1]}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, r0, r0, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2, r0, r3, r1, r4]}}, @cred={{0x1c, 0x1, 0x2, {r5, r6, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {r7, r8, r9}}}], 0x110, 0x4048000}, 0x48081) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)=ANY=[@ANYRESOCT=r1], 0x2c}], 0x1, 0x0, 0x0, 0x2008040}, 0x4008004) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) 21:35:19 executing program 2: setitimer(0x0, &(0x7f0000000000)={{}, {0x0, 0x2710}}, 0x0) setitimer(0x0, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, &(0x7f0000000080)) futimesat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={{0x0, 0xea60}, {0x77359400}}) setitimer(0x2, &(0x7f0000000140)={{0x77359400}, {0x0, 0xea60}}, &(0x7f0000000180)) setitimer(0x2, &(0x7f00000001c0)={{}, {0x77359400}}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) setitimer(0x2, &(0x7f0000000280)={{r0, r1/1000+60000}, {0x0, 0xea60}}, &(0x7f00000002c0)) setitimer(0x0, &(0x7f0000000300)={{0x77359400}, {0x0, 0x2710}}, &(0x7f0000000340)) setitimer(0x0, &(0x7f0000000380)={{0x0, 0xea60}, {0x0, 0x2710}}, &(0x7f00000003c0)) setitimer(0x1, &(0x7f0000000400)={{0x0, 0xea60}}, &(0x7f0000000440)) setitimer(0x0, &(0x7f0000000480)={{0x77359400}, {0x0, 0x2710}}, &(0x7f00000004c0)) setitimer(0x0, &(0x7f0000000500)={{}, {0x77359400}}, 0x0) setitimer(0x1, &(0x7f0000000540)={{0x77359400}}, &(0x7f0000000580)) clock_gettime(0x0, &(0x7f00000005c0)={0x0, 0x0}) setitimer(0x2, &(0x7f0000000600)={{0x0, 0x2710}, {r2, r3/1000+10000}}, &(0x7f0000000640)) getitimer(0x1, &(0x7f0000000680)) epoll_pwait2(0xffffffffffffffff, &(0x7f00000006c0)=[{}, {}, {}], 0x3, &(0x7f0000000700)={0x0, 0x989680}, &(0x7f0000000740)={[0xffff]}, 0x8) setitimer(0x1, &(0x7f0000000780)={{0x0, 0x2710}, {0x0, 0x2710}}, &(0x7f00000007c0)) getitimer(0x1, &(0x7f0000000800)) setitimer(0x0, &(0x7f0000000840)={{}, {0x77359400}}, &(0x7f0000000880)) 21:35:19 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x8, 0x1001}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) pwritev(r1, &(0x7f0000000300)=[{&(0x7f0000000440)="85", 0x40000}], 0x1, 0x1000, 0x0) 21:35:19 executing program 6: r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) statx(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x1000, 0x200, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) syz_mount_image$tmpfs(0x0, &(0x7f0000000600)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)={[{@mpol={'mpol', 0x3d, {'interleave', '=static', @void}}}, {@gid={'gid', 0x3d, r2}}]}) fchown(r0, r1, r2) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) ioctl$SG_GET_RESERVED_SIZE(r3, 0x2272, &(0x7f0000000000)) clone3(&(0x7f0000005880)={0x6502c900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r3}}, 0x58) [ 139.532106] program syz-executor.4 is using a deprecated SCSI ioctl, please convert it to SG_IO 21:35:19 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GETSTATE(r0, 0x541b, &(0x7f0000002a00)) [ 139.571288] kmemleak: Found object by alias at 0x607f1a639504 [ 139.571306] CPU: 0 UID: 0 PID: 3985 Comm: syz-executor.2 Tainted: G D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 139.571326] Tainted: [D]=DIE, [W]=WARN [ 139.571330] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 139.571337] Call Trace: [ 139.571341] [ 139.571346] dump_stack_lvl+0xca/0x120 [ 139.571374] __lookup_object+0x94/0xb0 [ 139.571391] delete_object_full+0x27/0x70 [ 139.571407] free_percpu+0x30/0x1160 [ 139.571423] ? arch_uprobe_clear_state+0x16/0x140 [ 139.571441] futex_hash_free+0x38/0xc0 [ 139.571455] mmput+0x2d3/0x390 [ 139.571473] do_exit+0x79d/0x2970 [ 139.571486] ? signal_wake_up_state+0x85/0x120 [ 139.571502] ? zap_other_threads+0x2b9/0x3a0 [ 139.571517] ? __pfx_do_exit+0x10/0x10 [ 139.571529] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 139.571545] ? lock_release+0x1c7/0x290 [ 139.571559] do_group_exit+0xd3/0x2a0 [ 139.571572] __x64_sys_exit_group+0x3e/0x50 [ 139.571586] x64_sys_call+0x18c5/0x18d0 [ 139.571601] do_syscall_64+0xbf/0x360 [ 139.571612] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.571624] RIP: 0033:0x7f42eaae7b19 [ 139.571632] Code: Unable to access opcode bytes at 0x7f42eaae7aef. [ 139.571638] RSP: 002b:00007fff033d5108 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 139.571649] RAX: ffffffffffffffda RBX: 000000000000001e RCX: 00007f42eaae7b19 [ 139.571657] RDX: 00007f42eaa9a72b RSI: ffffffffffffffbc RDI: 0000000000000000 [ 139.571665] RBP: 0000000000000000 R08: 0000001b2ce22f14 R09: 0000000000000000 [ 139.571672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 139.571679] R13: 0000000000000000 R14: 0000000000000001 R15: 00007fff033d51f0 [ 139.571689] [ 139.571693] kmemleak: Object (percpu) 0x607f1a639500 (size 8): [ 139.571700] kmemleak: comm "syz-executor.5", pid 3966, jiffies 4294806214 [ 139.571707] kmemleak: min_count = 1 [ 139.571711] kmemleak: count = 0 [ 139.571714] kmemleak: flags = 0x21 [ 139.571718] kmemleak: checksum = 0 [ 139.571722] kmemleak: backtrace: [ 139.571725] pcpu_alloc_noprof+0x87a/0x1170 [ 139.571740] percpu_ref_init+0x37/0x400 [ 139.571758] blkg_alloc+0xe9/0x7d0 [ 139.571769] blkg_create+0xe08/0x1420 [ 139.571781] bio_associate_blkg_from_css+0xe06/0x1380 [ 139.571795] bio_associate_blkg+0x10e/0x2a0 [ 139.571807] bio_init+0x2dd/0x570 [ 139.571819] bio_alloc_bioset+0x2cf/0x8c0 [ 139.571833] submit_bh_wbc+0x286/0x720 [ 139.571850] ext4_read_bh+0x15a/0x2e0 [ 139.571862] ext4_read_bh_lock+0x7a/0xd0 [ 139.571873] ext4_sb_bread_unmovable+0x172/0x260 [ 139.571889] ext4_fill_super+0x662/0xba20 [ 139.571904] get_tree_bdev_flags+0x38a/0x620 [ 139.571915] vfs_get_tree+0x93/0x340 [ 139.571930] path_mount+0x132d/0x1dd0 [ 139.603589] kmemleak: Cannot insert 0x607f1a639504 into the object search tree (overlaps existing) [ 139.603603] CPU: 0 UID: 0 PID: 3989 Comm: syz-executor.6 Tainted: G D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 139.603621] Tainted: [D]=DIE, [W]=WARN [ 139.603625] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 139.603632] Call Trace: [ 139.603635] [ 139.603639] dump_stack_lvl+0xca/0x120 [ 139.603658] __link_object+0x190/0x210 [ 139.603674] __create_object+0x48/0x80 [ 139.603690] pcpu_alloc_noprof+0x87a/0x1170 [ 139.603709] __percpu_counter_init_many+0x44/0x360 [ 139.603725] ip6_route_net_init+0x51/0x500 [ 139.603740] ? __pfx_ip6_route_net_init+0x10/0x10 [ 139.603754] ops_init+0x1e1/0x650 [ 139.603774] setup_net+0x10d/0x320 [ 139.603790] ? lockdep_init_map_type+0x4b/0x240 [ 139.603805] ? __pfx_setup_net+0x10/0x10 [ 139.603821] ? __raw_spin_lock_init+0x3a/0x110 [ 139.603837] ? debug_mutex_init+0x37/0x70 [ 139.603855] copy_net_ns+0x2e3/0x650 [ 139.603866] create_new_namespaces+0x3f6/0xab0 [ 139.603892] copy_namespaces+0x45c/0x580 [ 139.603909] copy_process+0x2649/0x73c0 [ 139.603921] ? lock_release+0x1c7/0x290 [ 139.603936] ? __pfx_copy_process+0x10/0x10 [ 139.603947] ? __might_fault+0xe0/0x190 [ 139.603963] ? _copy_from_user+0x5b/0xd0 [ 139.603978] kernel_clone+0xea/0x7f0 [ 139.603990] ? __pfx_kernel_clone+0x10/0x10 [ 139.604004] ? __pfx_futex_wake+0x10/0x10 [ 139.604021] __do_sys_clone3+0x1f5/0x280 [ 139.604032] ? __pfx___do_sys_clone3+0x10/0x10 [ 139.604044] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 139.604067] ? __x64_sys_futex+0x1c9/0x4d0 [ 139.604081] ? __x64_sys_futex+0x1d2/0x4d0 [ 139.604094] ? __pfx_blkdev_ioctl+0x10/0x10 [ 139.604113] ? __pfx___x64_sys_futex+0x10/0x10 [ 139.604126] ? selinux_file_ioctl+0xb9/0x280 [ 139.604141] ? xfd_validate_state+0x55/0x180 [ 139.604162] do_syscall_64+0xbf/0x360 [ 139.604172] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.604183] RIP: 0033:0x7f4e1127cb19 [ 139.604192] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 139.604204] RSP: 002b:00007f4e0e7f2188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 139.604216] RAX: ffffffffffffffda RBX: 00007f4e1138ff60 RCX: 00007f4e1127cb19 [ 139.604224] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020005880 [ 139.604231] RBP: 00007f4e112d6f6d R08: 0000000000000000 R09: 0000000000000000 [ 139.604239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 139.604246] R13: 00007fffd7ac9e6f R14: 00007f4e0e7f2300 R15: 0000000000022000 [ 139.604257] [ 139.604266] kmemleak: Kernel memory leak detector disabled [ 139.604270] kmemleak: Object (percpu) 0x607f1a639500 (size 8): [ 139.604277] kmemleak: comm "syz-executor.5", pid 3966, jiffies 4294806214 [ 139.604284] kmemleak: min_count = 1 [ 139.604288] kmemleak: count = 0 [ 139.604292] kmemleak: flags = 0x21 [ 139.604296] kmemleak: checksum = 0 [ 139.604299] kmemleak: backtrace: [ 139.604303] pcpu_alloc_noprof+0x87a/0x1170 [ 139.604318] percpu_ref_init+0x37/0x400 [ 139.604335] blkg_alloc+0xe9/0x7d0 [ 139.604346] blkg_create+0xe08/0x1420 [ 139.604359] bio_associate_blkg_from_css+0xe06/0x1380 [ 139.604373] bio_associate_blkg+0x10e/0x2a0 [ 139.604385] bio_init+0x2dd/0x570 [ 139.604397] bio_alloc_bioset+0x2cf/0x8c0 [ 139.604411] submit_bh_wbc+0x286/0x720 [ 139.604427] ext4_read_bh+0x15a/0x2e0 [ 139.604438] ext4_read_bh_lock+0x7a/0xd0 [ 139.604449] ext4_sb_bread_unmovable+0x172/0x260 [ 139.604462] ext4_fill_super+0x662/0xba20 [ 139.604477] get_tree_bdev_flags+0x38a/0x620 [ 139.604487] vfs_get_tree+0x93/0x340 [ 139.604502] path_mount+0x132d/0x1dd0 [ 139.636958] kmemleak: Automatic memory scanning thread ended SYZFAIL: failed to write(kmemleak, "scan") (errno 1: Operation not permitted) BUG: leak checking failed VM DIAGNOSIS: 21:35:19 Registers: info registers vcpu 0 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff828e32c5 RDI=ffffffff88724180 RBP=ffffffff88724140 RSP=ffff88801accec80 R8 =0000000000000000 R9 =ffffed100175d046 R10=0000000000000020 R11=0000000065646f43 R12=0000000000000020 R13=0000000000000010 R14=ffffffff88724140 R15=ffffffff828e32b0 RIP=ffffffff828e331d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fdc94c28700 00000000 00000000 GS =0000 ffff8880e55dd000 00000000 00000000 LDT=0000 fffffe4400000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f9d84e7c6f4 CR3=0000000015f2d000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ff00000000ff000000000000000000ff XMM01=25252525252525252525252525252525 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=1ffffffff0b0924a RBX=000000000000786a RCX=ffffffff819cd6f7 RDX=dffffc0000000000 RSI=ffffffff819cd734 RDI=0000000000000006 RBP=1ffff1100306cec5 RSP=ffff888018367620 R8 =0000000000000000 R9 =fffff940001c7398 R10=000000000000786a R11=00000000000001ff R12=ffffea0000e39d00 R13=ffff88800b981280 R14=00007f42ea3ab000 R15=000000000007ffdf RIP=ffffffff8173e788 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 000055556f5ba400 00000000 00000000 GS =0000 ffff8880e56dd000 00000000 00000000 LDT=0000 fffffe2c00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffe04f0cff8 CR3=00000000404fd000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=000000ff000000000000000000000000 XMM01=00000001000000000000000000000000 XMM02=7463656a6e695f31313230385f7a7973 XMM03=ec781359e945839eeccea24ab35676a2 XMM04=e4b605584e4c5e13783d000000000000 XMM05=0400e45b8eec781359e945839eeccea2 XMM06=4ab35676a21d0bb1faa8c860788bb7ab XMM07=ea7a8b22ae7633799f450acc65262c66 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000