Warning: Permanently added '[localhost]:3109' (ECDSA) to the list of known hosts.
2025/09/01 13:04:24 fuzzer started
2025/09/01 13:04:25 dialing manager at localhost:35473
syzkaller login: [   51.512186] cgroup: Unknown subsys name 'net'
[   51.575736] cgroup: Unknown subsys name 'cpuset'
[   51.599786] cgroup: Unknown subsys name 'rlimit'
2025/09/01 13:04:35 syscalls: 2214
2025/09/01 13:04:35 code coverage: enabled
2025/09/01 13:04:35 comparison tracing: enabled
2025/09/01 13:04:35 extra coverage: enabled
2025/09/01 13:04:35 setuid sandbox: enabled
2025/09/01 13:04:35 namespace sandbox: enabled
2025/09/01 13:04:35 Android sandbox: enabled
2025/09/01 13:04:35 fault injection: enabled
2025/09/01 13:04:35 leak checking: enabled
2025/09/01 13:04:35 net packet injection: enabled
2025/09/01 13:04:35 net device setup: enabled
2025/09/01 13:04:35 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/09/01 13:04:35 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/09/01 13:04:35 USB emulation: enabled
2025/09/01 13:04:35 hci packet injection: enabled
2025/09/01 13:04:35 wifi device emulation: enabled
2025/09/01 13:04:35 802.15.4 emulation: enabled
2025/09/01 13:04:35 fetching corpus: 50, signal 21497/23300 (executing program)
2025/09/01 13:04:35 fetching corpus: 100, signal 30669/34073 (executing program)
2025/09/01 13:04:35 fetching corpus: 150, signal 37057/41912 (executing program)
2025/09/01 13:04:35 fetching corpus: 200, signal 42669/48941 (executing program)
2025/09/01 13:04:35 fetching corpus: 250, signal 47661/55206 (executing program)
2025/09/01 13:04:35 fetching corpus: 300, signal 56073/64599 (executing program)
2025/09/01 13:04:35 fetching corpus: 350, signal 61563/71139 (executing program)
2025/09/01 13:04:35 fetching corpus: 400, signal 64259/74983 (executing program)
2025/09/01 13:04:35 fetching corpus: 450, signal 67780/79537 (executing program)
2025/09/01 13:04:36 fetching corpus: 500, signal 71752/84417 (executing program)
2025/09/01 13:04:36 fetching corpus: 550, signal 73387/87114 (executing program)
2025/09/01 13:04:36 fetching corpus: 600, signal 78550/92913 (executing program)
2025/09/01 13:04:36 fetching corpus: 650, signal 81029/96323 (executing program)
2025/09/01 13:04:36 fetching corpus: 700, signal 82518/98767 (executing program)
2025/09/01 13:04:36 fetching corpus: 750, signal 84492/101653 (executing program)
2025/09/01 13:04:36 fetching corpus: 800, signal 86317/104298 (executing program)
2025/09/01 13:04:36 fetching corpus: 850, signal 88260/107103 (executing program)
2025/09/01 13:04:36 fetching corpus: 900, signal 89374/109103 (executing program)
2025/09/01 13:04:36 fetching corpus: 950, signal 91083/111562 (executing program)
2025/09/01 13:04:36 fetching corpus: 1000, signal 94090/115032 (executing program)
2025/09/01 13:04:37 fetching corpus: 1050, signal 95738/117364 (executing program)
2025/09/01 13:04:37 fetching corpus: 1100, signal 97144/119510 (executing program)
2025/09/01 13:04:37 fetching corpus: 1150, signal 98529/121593 (executing program)
2025/09/01 13:04:37 fetching corpus: 1200, signal 100325/123971 (executing program)
2025/09/01 13:04:37 fetching corpus: 1250, signal 101613/125915 (executing program)
2025/09/01 13:04:37 fetching corpus: 1300, signal 102702/127670 (executing program)
2025/09/01 13:04:37 fetching corpus: 1350, signal 104080/129629 (executing program)
2025/09/01 13:04:37 fetching corpus: 1400, signal 105288/131458 (executing program)
2025/09/01 13:04:37 fetching corpus: 1450, signal 108763/134841 (executing program)
2025/09/01 13:04:37 fetching corpus: 1500, signal 109811/136450 (executing program)
2025/09/01 13:04:37 fetching corpus: 1550, signal 111534/138529 (executing program)
2025/09/01 13:04:37 fetching corpus: 1600, signal 112947/140314 (executing program)
2025/09/01 13:04:38 fetching corpus: 1650, signal 113903/141866 (executing program)
2025/09/01 13:04:38 fetching corpus: 1700, signal 114953/143431 (executing program)
2025/09/01 13:04:38 fetching corpus: 1750, signal 116382/145225 (executing program)
2025/09/01 13:04:38 fetching corpus: 1800, signal 117705/146908 (executing program)
2025/09/01 13:04:38 fetching corpus: 1850, signal 118868/148434 (executing program)
2025/09/01 13:04:38 fetching corpus: 1900, signal 119833/149855 (executing program)
2025/09/01 13:04:38 fetching corpus: 1950, signal 120634/151173 (executing program)
2025/09/01 13:04:38 fetching corpus: 2000, signal 121407/152389 (executing program)
2025/09/01 13:04:38 fetching corpus: 2050, signal 122256/153713 (executing program)
2025/09/01 13:04:38 fetching corpus: 2100, signal 123267/155084 (executing program)
2025/09/01 13:04:38 fetching corpus: 2150, signal 124126/156316 (executing program)
2025/09/01 13:04:39 fetching corpus: 2200, signal 125199/157669 (executing program)
2025/09/01 13:04:39 fetching corpus: 2250, signal 125968/158805 (executing program)
2025/09/01 13:04:39 fetching corpus: 2300, signal 128644/160949 (executing program)
2025/09/01 13:04:39 fetching corpus: 2350, signal 129501/162077 (executing program)
2025/09/01 13:04:39 fetching corpus: 2400, signal 130327/163156 (executing program)
2025/09/01 13:04:39 fetching corpus: 2450, signal 130989/164226 (executing program)
2025/09/01 13:04:39 fetching corpus: 2500, signal 131681/165235 (executing program)
2025/09/01 13:04:39 fetching corpus: 2550, signal 132758/166435 (executing program)
2025/09/01 13:04:39 fetching corpus: 2600, signal 133714/167590 (executing program)
2025/09/01 13:04:39 fetching corpus: 2650, signal 134574/168664 (executing program)
2025/09/01 13:04:39 fetching corpus: 2700, signal 135203/169603 (executing program)
2025/09/01 13:04:40 fetching corpus: 2750, signal 136199/170718 (executing program)
2025/09/01 13:04:40 fetching corpus: 2800, signal 137269/171817 (executing program)
2025/09/01 13:04:40 fetching corpus: 2850, signal 138219/172856 (executing program)
2025/09/01 13:04:40 fetching corpus: 2900, signal 139088/173801 (executing program)
2025/09/01 13:04:40 fetching corpus: 2950, signal 139579/174595 (executing program)
2025/09/01 13:04:40 fetching corpus: 3000, signal 140306/175460 (executing program)
2025/09/01 13:04:40 fetching corpus: 3050, signal 141166/176411 (executing program)
2025/09/01 13:04:40 fetching corpus: 3100, signal 141930/177293 (executing program)
2025/09/01 13:04:40 fetching corpus: 3150, signal 143008/178279 (executing program)
2025/09/01 13:04:40 fetching corpus: 3200, signal 143350/178954 (executing program)
2025/09/01 13:04:40 fetching corpus: 3250, signal 144226/179836 (executing program)
2025/09/01 13:04:40 fetching corpus: 3300, signal 144752/180603 (executing program)
2025/09/01 13:04:41 fetching corpus: 3350, signal 145350/181337 (executing program)
2025/09/01 13:04:41 fetching corpus: 3400, signal 146387/182137 (executing program)
2025/09/01 13:04:41 fetching corpus: 3450, signal 146909/182795 (executing program)
2025/09/01 13:04:41 fetching corpus: 3500, signal 147738/183599 (executing program)
2025/09/01 13:04:41 fetching corpus: 3550, signal 148238/184276 (executing program)
2025/09/01 13:04:41 fetching corpus: 3600, signal 148989/185029 (executing program)
2025/09/01 13:04:41 fetching corpus: 3650, signal 149664/185737 (executing program)
2025/09/01 13:04:41 fetching corpus: 3700, signal 150243/186381 (executing program)
2025/09/01 13:04:41 fetching corpus: 3750, signal 150764/187047 (executing program)
2025/09/01 13:04:41 fetching corpus: 3800, signal 151619/187733 (executing program)
2025/09/01 13:04:41 fetching corpus: 3850, signal 152070/188295 (executing program)
2025/09/01 13:04:42 fetching corpus: 3900, signal 152575/188915 (executing program)
2025/09/01 13:04:42 fetching corpus: 3950, signal 153325/189566 (executing program)
2025/09/01 13:04:42 fetching corpus: 4000, signal 153854/190116 (executing program)
2025/09/01 13:04:42 fetching corpus: 4050, signal 154327/190661 (executing program)
2025/09/01 13:04:42 fetching corpus: 4100, signal 154911/191200 (executing program)
2025/09/01 13:04:42 fetching corpus: 4150, signal 155353/191742 (executing program)
2025/09/01 13:04:42 fetching corpus: 4200, signal 155710/192238 (executing program)
2025/09/01 13:04:42 fetching corpus: 4250, signal 156556/192840 (executing program)
2025/09/01 13:04:42 fetching corpus: 4300, signal 157159/193331 (executing program)
2025/09/01 13:04:42 fetching corpus: 4350, signal 157814/193824 (executing program)
2025/09/01 13:04:42 fetching corpus: 4400, signal 158375/194292 (executing program)
2025/09/01 13:04:43 fetching corpus: 4450, signal 158902/194736 (executing program)
2025/09/01 13:04:43 fetching corpus: 4500, signal 159585/195173 (executing program)
2025/09/01 13:04:43 fetching corpus: 4550, signal 160008/195600 (executing program)
2025/09/01 13:04:43 fetching corpus: 4600, signal 160692/196045 (executing program)
2025/09/01 13:04:43 fetching corpus: 4650, signal 161298/196475 (executing program)
2025/09/01 13:04:43 fetching corpus: 4700, signal 161915/196995 (executing program)
2025/09/01 13:04:43 fetching corpus: 4750, signal 162287/197388 (executing program)
2025/09/01 13:04:43 fetching corpus: 4800, signal 162901/197791 (executing program)
2025/09/01 13:04:43 fetching corpus: 4850, signal 163317/198182 (executing program)
2025/09/01 13:04:43 fetching corpus: 4900, signal 163835/198558 (executing program)
2025/09/01 13:04:43 fetching corpus: 4950, signal 164190/198565 (executing program)
2025/09/01 13:04:44 fetching corpus: 5000, signal 164631/198581 (executing program)
2025/09/01 13:04:44 fetching corpus: 5050, signal 165456/198587 (executing program)
2025/09/01 13:04:44 fetching corpus: 5100, signal 165874/198604 (executing program)
2025/09/01 13:04:44 fetching corpus: 5150, signal 166443/198669 (executing program)
2025/09/01 13:04:44 fetching corpus: 5200, signal 166946/198670 (executing program)
2025/09/01 13:04:44 fetching corpus: 5250, signal 167369/198678 (executing program)
2025/09/01 13:04:44 fetching corpus: 5300, signal 167712/198680 (executing program)
2025/09/01 13:04:44 fetching corpus: 5350, signal 168234/198694 (executing program)
2025/09/01 13:04:44 fetching corpus: 5400, signal 168523/198694 (executing program)
2025/09/01 13:04:44 fetching corpus: 5450, signal 168998/198701 (executing program)
2025/09/01 13:04:44 fetching corpus: 5500, signal 169596/198706 (executing program)
2025/09/01 13:04:44 fetching corpus: 5550, signal 170074/198713 (executing program)
2025/09/01 13:04:44 fetching corpus: 5600, signal 170718/198714 (executing program)
2025/09/01 13:04:45 fetching corpus: 5650, signal 171078/198715 (executing program)
2025/09/01 13:04:45 fetching corpus: 5700, signal 171402/198726 (executing program)
2025/09/01 13:04:45 fetching corpus: 5750, signal 171860/198730 (executing program)
2025/09/01 13:04:45 fetching corpus: 5800, signal 172305/198742 (executing program)
2025/09/01 13:04:45 fetching corpus: 5850, signal 172649/198783 (executing program)
2025/09/01 13:04:45 fetching corpus: 5900, signal 173191/198803 (executing program)
2025/09/01 13:04:45 fetching corpus: 5950, signal 173466/198807 (executing program)
2025/09/01 13:04:45 fetching corpus: 6000, signal 173874/198810 (executing program)
2025/09/01 13:04:45 fetching corpus: 6050, signal 174258/198814 (executing program)
2025/09/01 13:04:45 fetching corpus: 6100, signal 174666/198814 (executing program)
2025/09/01 13:04:45 fetching corpus: 6150, signal 174888/198823 (executing program)
2025/09/01 13:04:45 fetching corpus: 6200, signal 175310/198891 (executing program)
2025/09/01 13:04:46 fetching corpus: 6250, signal 175591/198892 (executing program)
2025/09/01 13:04:46 fetching corpus: 6300, signal 175958/198899 (executing program)
2025/09/01 13:04:46 fetching corpus: 6350, signal 176276/198920 (executing program)
2025/09/01 13:04:46 fetching corpus: 6400, signal 176596/198922 (executing program)
2025/09/01 13:04:46 fetching corpus: 6450, signal 176940/198956 (executing program)
2025/09/01 13:04:46 fetching corpus: 6500, signal 177260/199013 (executing program)
2025/09/01 13:04:46 fetching corpus: 6550, signal 177551/199014 (executing program)
2025/09/01 13:04:46 fetching corpus: 6600, signal 177905/199015 (executing program)
2025/09/01 13:04:46 fetching corpus: 6650, signal 178230/199017 (executing program)
2025/09/01 13:04:46 fetching corpus: 6700, signal 178687/199021 (executing program)
2025/09/01 13:04:46 fetching corpus: 6750, signal 178980/199040 (executing program)
2025/09/01 13:04:46 fetching corpus: 6800, signal 179215/199042 (executing program)
2025/09/01 13:04:47 fetching corpus: 6850, signal 179524/199073 (executing program)
2025/09/01 13:04:47 fetching corpus: 6900, signal 179860/199077 (executing program)
2025/09/01 13:04:47 fetching corpus: 6950, signal 180281/199077 (executing program)
2025/09/01 13:04:47 fetching corpus: 7000, signal 180576/199077 (executing program)
2025/09/01 13:04:47 fetching corpus: 7050, signal 180918/199079 (executing program)
2025/09/01 13:04:47 fetching corpus: 7100, signal 181150/199083 (executing program)
2025/09/01 13:04:47 fetching corpus: 7150, signal 181453/199083 (executing program)
2025/09/01 13:04:47 fetching corpus: 7200, signal 181697/199113 (executing program)
2025/09/01 13:04:47 fetching corpus: 7250, signal 182032/199143 (executing program)
2025/09/01 13:04:47 fetching corpus: 7300, signal 182268/199143 (executing program)
2025/09/01 13:04:47 fetching corpus: 7350, signal 182550/199144 (executing program)
2025/09/01 13:04:47 fetching corpus: 7400, signal 182823/199154 (executing program)
2025/09/01 13:04:47 fetching corpus: 7450, signal 183104/199158 (executing program)
2025/09/01 13:04:48 fetching corpus: 7500, signal 183446/199167 (executing program)
2025/09/01 13:04:48 fetching corpus: 7550, signal 183687/199182 (executing program)
2025/09/01 13:04:48 fetching corpus: 7600, signal 183982/199183 (executing program)
2025/09/01 13:04:48 fetching corpus: 7650, signal 184328/199195 (executing program)
2025/09/01 13:04:48 fetching corpus: 7700, signal 184513/199213 (executing program)
2025/09/01 13:04:48 fetching corpus: 7750, signal 184841/199224 (executing program)
2025/09/01 13:04:48 fetching corpus: 7800, signal 185287/199230 (executing program)
2025/09/01 13:04:48 fetching corpus: 7850, signal 185496/199232 (executing program)
2025/09/01 13:04:48 fetching corpus: 7900, signal 185777/199234 (executing program)
2025/09/01 13:04:48 fetching corpus: 7950, signal 186035/199236 (executing program)
2025/09/01 13:04:48 fetching corpus: 8000, signal 186310/199268 (executing program)
2025/09/01 13:04:49 fetching corpus: 8050, signal 186578/199268 (executing program)
2025/09/01 13:04:49 fetching corpus: 8100, signal 186795/199276 (executing program)
2025/09/01 13:04:49 fetching corpus: 8150, signal 187044/199278 (executing program)
2025/09/01 13:04:49 fetching corpus: 8200, signal 187295/199283 (executing program)
2025/09/01 13:04:49 fetching corpus: 8250, signal 187579/199288 (executing program)
2025/09/01 13:04:49 fetching corpus: 8300, signal 187884/199289 (executing program)
2025/09/01 13:04:49 fetching corpus: 8350, signal 188065/199296 (executing program)
2025/09/01 13:04:49 fetching corpus: 8400, signal 188276/199299 (executing program)
2025/09/01 13:04:49 fetching corpus: 8450, signal 188547/199304 (executing program)
2025/09/01 13:04:49 fetching corpus: 8500, signal 188788/199310 (executing program)
2025/09/01 13:04:49 fetching corpus: 8550, signal 189157/199337 (executing program)
2025/09/01 13:04:49 fetching corpus: 8600, signal 189393/199346 (executing program)
2025/09/01 13:04:49 fetching corpus: 8650, signal 189620/199346 (executing program)
2025/09/01 13:04:50 fetching corpus: 8700, signal 190328/199352 (executing program)
2025/09/01 13:04:50 fetching corpus: 8750, signal 190508/199368 (executing program)
2025/09/01 13:04:50 fetching corpus: 8800, signal 190756/199371 (executing program)
2025/09/01 13:04:50 fetching corpus: 8850, signal 190927/199373 (executing program)
2025/09/01 13:04:50 fetching corpus: 8900, signal 191148/199377 (executing program)
2025/09/01 13:04:50 fetching corpus: 8950, signal 191465/199378 (executing program)
2025/09/01 13:04:50 fetching corpus: 9000, signal 191649/199391 (executing program)
2025/09/01 13:04:50 fetching corpus: 9050, signal 191913/199394 (executing program)
2025/09/01 13:04:50 fetching corpus: 9100, signal 192168/199417 (executing program)
2025/09/01 13:04:50 fetching corpus: 9150, signal 192339/199431 (executing program)
2025/09/01 13:04:50 fetching corpus: 9200, signal 192561/199431 (executing program)
2025/09/01 13:04:51 fetching corpus: 9250, signal 192719/199433 (executing program)
2025/09/01 13:04:51 fetching corpus: 9300, signal 192954/199435 (executing program)
2025/09/01 13:04:51 fetching corpus: 9350, signal 193160/199483 (executing program)
2025/09/01 13:04:51 fetching corpus: 9400, signal 193337/199484 (executing program)
2025/09/01 13:04:51 fetching corpus: 9450, signal 193538/199489 (executing program)
2025/09/01 13:04:51 fetching corpus: 9500, signal 193712/199492 (executing program)
2025/09/01 13:04:51 fetching corpus: 9550, signal 193891/199494 (executing program)
2025/09/01 13:04:51 fetching corpus: 9600, signal 194094/199495 (executing program)
2025/09/01 13:04:51 fetching corpus: 9650, signal 194582/199495 (executing program)
2025/09/01 13:04:51 fetching corpus: 9700, signal 194776/199508 (executing program)
2025/09/01 13:04:51 fetching corpus: 9750, signal 194995/199525 (executing program)
2025/09/01 13:04:51 fetching corpus: 9800, signal 195206/199525 (executing program)
2025/09/01 13:04:51 fetching corpus: 9841, signal 195448/199528 (executing program)
2025/09/01 13:04:51 fetching corpus: 9841, signal 195448/199528 (executing program)
2025/09/01 13:04:54 starting 8 fuzzer processes
13:04:54 executing program 0:
r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x7, 0x4000)
ioctl$SCSI_IOCTL_START_UNIT(r0, 0x5)
r1 = syz_io_uring_setup(0x2b58, &(0x7f0000000040)={0x0, 0x3aea, 0x2, 0x0, 0x21e, 0x0, r0}, &(0x7f0000fea000/0x14000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100))
ioctl$SG_SET_TIMEOUT(0xffffffffffffffff, 0x2201, &(0x7f0000000140)=0x9)
recvmmsg$unix(r0, &(0x7f00000003c0)=[{{&(0x7f0000000180), 0x6e, &(0x7f0000000300)=[{&(0x7f0000000200)=""/226, 0xe2}], 0x1, &(0x7f0000000340)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [<r6=>0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x68}}], 0x1, 0x2163, &(0x7f0000000400)={0x77359400})
ioctl$BTRFS_IOC_LOGICAL_INO(r6, 0xc0389424, &(0x7f0000000480)={0x7, 0x28, '\x00', 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r6, 0x400c6615, &(0x7f00000004c0)={0x0, @aes128, 0x0, @desc2})
ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f0000000500)={{0x1, 0x1, 0x18, <r7=>r5, {0x101}}, './file0\x00'})
read(0xffffffffffffffff, &(0x7f0000000540)=""/226, 0xe2)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r8, &(0x7f0000000700)={&(0x7f0000000640), 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x2c, 0x3, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x1}, [@CTA_HELP={0x10, 0x5, 0x0, 0x1, {0xb, 0x1, 'amanda\x00'}}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x8041)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000740)={{0x1, 0x1, 0x18, <r9=>r4}, './file0\x00'})
sendmsg$NL80211_CMD_FLUSH_PMKSA(r9, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x14, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
recvmmsg$unix(r9, &(0x7f0000002540)=[{{&(0x7f0000000b40), 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000bc0)=""/49, 0x31}], 0x1, &(0x7f0000000c40)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}, {{&(0x7f0000000d00)=@abs, 0x6e, &(0x7f0000000fc0)=[{&(0x7f0000000d80)=""/55, 0x37}, {&(0x7f0000000dc0)=""/83, 0x53}, {&(0x7f0000000e40)=""/90, 0x5a}, {&(0x7f0000000ec0)=""/211, 0xd3}], 0x4, &(0x7f0000001000)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x88}}, {{&(0x7f00000010c0)=@abs, 0x6e, &(0x7f0000002440)=[{&(0x7f0000001140)=""/145, 0x91}, {&(0x7f0000001200)=""/237, 0xed}, {&(0x7f0000001300)=""/4096, 0x1000}, {&(0x7f0000002300)=""/2, 0x2}, {&(0x7f0000002340)=""/71, 0x47}, {&(0x7f00000023c0)=""/66, 0x42}], 0x6, &(0x7f00000024c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {<r10=>0x0}}}, @cred={{0x1c}}], 0x80}}], 0x3, 0x40002020, &(0x7f0000002600))
r11 = getegid()
r12 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002d00), 0x400, 0x0)
r13 = accept$packet(r9, &(0x7f0000002d40), &(0x7f0000002d80)=0x14)
r14 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000002dc0)='/sys/bus/virtio', 0x4082, 0x80)
stat(&(0x7f0000002e00)='./file0\x00', &(0x7f0000002e40)={0x0, 0x0, 0x0, 0x0, <r15=>0x0})
sendmmsg$unix(r0, &(0x7f0000002f40)=[{{&(0x7f0000000880)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000b00)=[{&(0x7f0000000900)="30a8762a7e03d68376febdc79fb08c3057", 0x11}, {&(0x7f0000000940)="644a7048e184f675ae80f872ce7a5ee9e3d6265db1fd7092672c0006e44a9683ec7b762ea65adeeedd9eb290a8f1b1120007d99db59443ca5714b478f356b40af8238aba95d1630ccc6f1baeca98a65fcb42ff9689555e051cb302a1fed75e0f42d503b1b125d05ddd52a52604427a81931801b9b17f85db771c0ae554842b337bede774571b355dc8b6512d082ee420391cdca982a923f97531e72dad87fc3878978aef94664997949251247068b099bbbd2ee8ff7a38590fece2501ce4081233ed91cc83b5d91b2f913ebec4ff5d0444be98dd2166571635ed7c925809cfddbddb1ef62b37281a4e0457c98b585ff674b065", 0xf3}, {&(0x7f0000000a40)="8ecc64702d9df6a265bf4802ba566392eef60c25a68bf983dda5e80a65ab214faf70586523592eaf43a4bdcbb08e9eda4d10f5a1729704d088d246c7d82fec25be6c5a3a832926cda2231df3892201baf83b6552f98b9f7a08408ce511a3a67c1a2d14c39f8e9937cbae0489fa02446d4a49c6d8e09aee41aa0b49e0523a22b89a7d224a34c9ee7fc50c3de626d103d92622df63d8a57d84896ca17ed3e3cf1078a7834bc44c23cab9b0d18900c97063f7fb", 0xb2}], 0x3, &(0x7f0000002640)=[@rights={{0x14, 0x1, 0x1, [r7]}}, @cred={{0x1c, 0x1, 0x2, {r10, 0x0, r11}}}], 0x38, 0x2000800}}, {{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000002680)="f958b38b58ce729050943c42561f624bb3d19df72126f476ff21bf8298ecf2825055706e6c8afc2ef2279cf2c9ad0c356e08f820ae842ae7ac00b500b175c6dec4e484c59686c00ef89501a7781cd5dadcbba092c6141684dc6647a37e3793dcccfb318f82902c3968b4331c44169ff98ee4c92984f2d11f891ece6813af75c0f7b61947987697f17a86b305eaef621f3644af03348bb1425691dc2fe74e31913c1e06212134ed8b0d07e86be69f2ee36dd71b5eca6fa0bbdc90b6cca5062ad92cfd78daa00f30831a354c29ca843eb26c5f5b3ebea8213045337aec68b4", 0xde}], 0x1, 0x0, 0x0, 0x40000}}, {{0x0, 0x0, &(0x7f00000028c0)=[{&(0x7f00000027c0)="53ccf4b4c8f67f53dea51f75dd4f022f47dc345341009abe9a", 0x19}, {&(0x7f0000002800)="18a620da154da57fa26a52b8aaff08344b0a022209a7c74cff4155365d4024e14ad9910fb58ebe937e7bd432155677f0a85042d60d4a2ed166641d4c9cde7a35b886864dc5f553e85ee3946d570b5e5ff0fb1e536d02b29fff01aa5ec3b0b99d3986975f8309d0301f7c4704711b67a1cfdfe5ce603008b62d93c6af782e0eedd364f768172eeb8f0faf3960249178c9d2143321302834232c0eb50abc411ab282462f", 0xa3}], 0x2, 0x0, 0x0, 0x24000000}}, {{0x0, 0x0, &(0x7f0000002900), 0x0, 0x0, 0x0, 0x40040}}, {{&(0x7f0000002940)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000002cc0)=[{&(0x7f00000029c0)="9165c242e9e6c3b640e8eeffceee474c338798a3ac13149d5b49f2c418be9eb5768af37d033083585e003410a6a2b7795d6f2232048a87b3c8bca2c23640cf51721b3856cb02dca1764d0f55a29d474eed8d9c5aeae7c5ae86c9e7aa48554b868b8a112f722b98f01374553593f355a58c7f80e91de3f9d66255219b3c21fff51e6a8186eeeecf31e2b79720c5257eefaf843861aa8c64fd52d19ea17feaa4309d5a451af76ffc538174ecb571fc189694f77cd8970d3d3e24368be65efc58f69ad419f7198df5ca53f434fef7ab5187c26715da9a4dfe0e", 0xd8}, {&(0x7f0000002ac0)="48d0d1589f8fe98ed33637a128f3d240502a02efd970858d3ac5a68d2bf35fd16116be0173f987faa89b61b485f5bfaeabea9006d2521819c82cd949e3ec8498f2335a9f8aa3c564c78bfa44a6d9795014e64cab2ac37e735e64a25f67c6351b92da16427355ee25efd70ab460dfc6347d624570526ba767612050408e0dd5a94e134abf7893210888c39fa834b3a49ba03347de226ceca364fc67e061e792c733dbb26933f58eafc8c551363ad7fd", 0xaf}, {&(0x7f0000002b80)="08c4189b3f4497d3946d719b346f411fce5acaf9b1a7410871d9643fa708fce1a3ccef092f6afba8b6037acf55a6010ce8ecc0e6d6ce8922c6dfa4a3428228c4d832117c2122dfed6c7554aee8618b0a560a4183e0bb82dc4cecfd0fab4672f88a6f9126274811dd0768c0a43bd6b26b92a4bfb85554ed6ace5dbbbeb90f498f24acd4d7f0f012d786f0c4342e1fd23c635ad8e6853a4af061fc75f2a18f54344e0d22d0d27d64d6d7221bb59b22c2d786547c84e1ff034c9507da6ffdc6e7c22d85ac9f9576d72e9b09bdf443184eec431e02b82eea51", 0xd7}, {&(0x7f0000002c80)="8076fcd5783d", 0x6}], 0x4, &(0x7f0000002ec0)=[@rights={{0x2c, 0x1, 0x1, [r2, r4, r12, r6, r1, r13, r14]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r15}}}, @rights={{0x10}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r4, r0, r3]}}], 0x80, 0xc010}}], 0x5, 0x4000000)

13:04:54 executing program 1:
r0 = open(&(0x7f0000000000)='./file0\x00', 0x8000, 0x30)
open_by_handle_at(r0, &(0x7f0000000040)=@reiserfs_4={0x10, 0x4, {0x5, 0x7, 0x6, 0x7fffffff}}, 0x80000)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x200200, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f00000000c0)={0x0, <r2=>0x0, "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", "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"})
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f00000010c0)={0x0, <r3=>r2, "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", "4cc18bfe6bedfd231b735e03d7ed64b754f01b127329d0506d37192f658db7fdf1a5f5314a81c2931654170034b9d5ebc7b529d40f332909def90b4f67d732a75de879dd0efa5f6e95e9f382f27f404bb1269b268ba54940255d0a30bfc02c484380cfd8125f04baadb86cf3f3d1b190f44ae254f17cff1ca5d5aa25a8302c7d2d49bcab007cc9f07922f24f3070d4b92bad6ab6da0e0ab8de7df54eb7be50e3e110ca4f81be7252a096734e7be6fc9b528e6032cfdab34785f7d2c2c280a8bc71318f8d3faa42db9c8fc87acdf5258c98b98e66c429d93d0b48cd23d404e84dc57af3c770b95a1f62f7b5cc4d8a7c23a2fca02b24a519f13b98002c48275726ba829649acecf42bd9f51c6cab2751480845b5756f48106fcfb14a4d4b3e89ca3cc4a53681b61648bb0e697d81964676f5b6e67fa2bd1c1577afc963e8f915e528e872ac0f6437a276e9718413280a098aeaea4ce11fe55dc23acbcf6bb020ac4bb89ce383dc916ecbdaeba9033c4eb14ff670ca04435b508e44955aee3f33a5a496bf9e098020045056ac7e270a6e7b1f49cfd4d052680666468662e43a719353ed06b305ccd45ebd558b7ff2b657cdce9fdc0494fcfbeaf2a3665dd3aee0f5b69a7deb7e50a2a27898fd9a5bbcac4e80c40d3ba660d0f62da388affdff44e4dffd2a2ea955160bf5f35b0550d1e50ffb68af332ef8b50265df9a0752410b7d5819532159e25d54690e76f90c3ffd570df58538c37009adf0e5c0ef1d8bcf2c132057f3396bfc3080491587471e3bd1eaffd838b9f0f3945ed1c7cfb60215fd46c08882320a1682fe1ced1c502b8896fc793082cd6882c1ca417ae405f22656cb16e95639de4300d0203da2bcd067749c66cb100d532cffa6e5095136bb393f574428ba4cc7d671a5a645c913c42bfa5bcd6bced1328afefd5ca6145559b2cb639926ddce30c0feef5ac979e1258623b9ef1492594e0dfabbc7854a3f1ffe9a4e9e77ee6398b6a8a25f975a2f853fd54098ee6e687e6d487823bda6cb8739da983d700eb86f504a1920f3b820d1b96f9249b3053cb30ef589ea4212c4a1b5c620c6b830f1a14a5598d82e16ed4edc5e0cb94c22fb0d2ae24c3bd0387ab5fc6e899d82c4e2064ba53db8608de4431768e5a1871c1d12a908784e6dea8c2f6b014cddc748f21310568b149e155a3226b7fae7ebad274cfb521aff483643a852421992c3dc6fc2945bb6e7ae260c563a2e9c808b589e4a4d12b21b6e89e0469ba439429d4dc6239ce70e0f638be87c312ff53dc4ca7868dc4e216e0a2ec328a954e2ce797a3209d500e86fe0b93c5f633cb64ee507fdb48d8238bb29352902d2d1db56d3976eeabdd9d4a77089878dd04d91bf697c32bee845ed38b9859a622ae36bff37f8ef8882be9f25a1e5b139025923671141602176b7909f82d8f391640d5d98fdb8d11112cb4a146934c91c6f8365fcca4c2ded8c3cf8fe3601c4ce4492f889a5ca739eafa37b4ad62cf527047c3397d92924b2fc7949c6685d8d2827f66610d03071331d9efcd454bebc713f6769fb11f641a7157536261bf15666b07ed14d09458f84a0646091f95575400060379eca864c796f844176d6cbb1dc834e4ff474c5c49b7bce5cc7a2b5a71c1786a3127a563dbab8fab9d5df198dfd7a78ef7ec0f6d58eeada6a0f8a5a5a4bbfa6cd125047e3b5caa0426354e6ac62b62e539fa41fe641b45ea3765de60690776f37a666e0eb9aea64bedef8a744c0cd2792ba79b54309308eec3202cc4ac55d85b1d6cd092b79877f1a4539f73e630566f24a45df72211f65115a1864fe79b41efd712b5607df0cce93d05fa953c8b6bd21ddeb2de5e4952f9b9059658604a4842be7f70d48e1e727c639f1a1b32e019cb9a4a5919975fc15993d7f882f4798b94019150de47f29a6893ee6185f71375f2d222b03978cfcae4e643d094032c5bc371d700552ba67ed9f31ca730b72af89fdba63ad8c981fad3da103ba0ec84568f0d61092d76da4f41ccab22fe5131d63646a5a6d6a4e11440e58ea3a4cb3b57460db2be742d0e105dab345cd03ac8dd83990efc00978108087f089603de79152afdef843693454677911ff3e2ca134b0b1d4f42d048782f8732269e02476efc3655684f21d205752fcf661c5f5f31940532b510012007a6feffbff7656a1a0bbb5d752439300a458203a8f4266d04b8f74d1099941c5b8e1750359e6372416487c8a5a1eecce2982675516f3c8b1e80f8362dfe796cb9f864c681ea2dab6882404cae606b20f2c8db51b15721a9355f5523ed2e71ff74b73bbf373b034cef49d5cf76f58f024c9f5ac846502d884c4bd45dce7e3a4015de238755dc09a10eee220d6e4885f89126873a6ff91e336bfab79c00782c6f50ca0c870886ea0257a875f75609c1480c4476b2a4a40a0fc3186c26920bb6ce3344197d309bb0e030dc57603173c3979fd52f65dbc3a3cc035e14624a3bcdfe502b02e1cc7a75b4428d8c22c2b32e7bd823cce533bf6de9eefdf41254d598108fbc2618751bb10b49ae753a47335b5dda1bdd343e1acd90cd0f35a5af73884485e48ce7e2096d2dd408236dab1f4342c2976bf6dab9ea6054ba802f6409e271c5c16b56a2160b826369ae6516c0a601e4bbacb865f5d06df1c7a6f4aaa5828d2753de8ce8014ebceb253677e94dac62bc5de431a9cc678eb8c167b4825553c8653658506eaec067c08efa53dea30c48b29241c291710ef9cada887c6687dfd5c9faba6f22f2ed87cf000c48ecdeb01ef9c95dfaf88e8dfd784a8aa8a79f828112e12aca8348a7365b869a3326e7376d3d1d4726247152dbd8d0a80d9b0a4d559263af4fa18cb03822926b757b67b2984d91e7be04badbb78a78c431d999580f9029095b88d88a993134fba6d0d902a620dd576a75454689e8dd37743657cadc65d28ae5ca31e936a5f80d2539d606dd8afd859cebd4c37078ef1572b07b57cb6249d99294ecf1496c8b0ff87e85dbe7f6e590d16301754d2668ac537527e0bdb8d3ab6cbfcb6fea69ad252c18e3e58cc2a96787810e6e4375e26247017d6a07e0c3ae29d00d4ea8e3408a1d56611236608bbba9cf9b29dee8c8c52852481fb6411768d3accf1c777c1b1726dcc1b8d29ea55c7bb6449c22e72433e9776ede24c625788525fbdb7d475e19f19e3691df107db9711aa0c0e3723fe468b161275d3b6094ad022e2261ca0aee16461102ee7c199e1f38cfc02c32da2e7bed97c703625a18e034febd236000602a4baae1544406dbbdff92e85db19d6b8db2979735ea3a5a980636358756403d78f7f9ff5aa1854856a97e0dfc94ba6a4760f7d466f89def42176189160e0511e835def73fef3f3f0d4202c6e03760ad64de16965ba41d0e05ed141cceeb9ba2f396d085bac98617d9777d5c3cf99f52c49fa1286b715f814980ee3c425ba9500d5654b02caf5cca88d3ba7d9363737ffe1748d2d807dbe26dcfcb2d9d48972debe90849f461fddfced97d2d1e4f230fc1dc5f4ed0267d22347cf50187481d9c1d3723c18a82ba6722519d7a843eaf029c46e20ef70568de182feb1881727c93b30bbda9d9ef8d23361e1117ed3c427744ae25f6dcd92678c10226478f2c3f231b4aadb6b0dcb045117ec2ec357deaa917b9ce2bf4357ec16ef696d943e44bd08274e9f4c45321607f0969120e580e4dd883354f81ce50c4e9e369a6208ef03fd5af139011f8e04bf40ce319138ec236fb818dde8758f88ab7e5dcac082523177e3dd0bcb7390b87835b339df59c131fd94b51aceb9d546bd21b60a40234f6b48caaa67eb368f6ec6d2e546ea521712c0088be20227688ef5f75d503ea1e737bee73f330d9cda8ad456f35085405f4faa303d9b5f2d80d5a8f9a396786cb644f18a5b1ec11798df4b342eb487779ba54ad8a912ba25e20d4372f90466dd4c8cc690d59287f82c1129db359ca015a37a4e5fb1b63faf15850dff53a8893f84379440656f8857235a23f05ae592ea360289a7a28d28ce645457b0d4a30339387ec475e5b9d4c71feefec1fb78a4b73c8b481e39c473034e7de629d3bcadc09361483f98613bbab5c600db9a385e90aad6c2d7d7626f26c11c080e2ca068913fefc729662e2229e34a68a5ace2a5da580b0ca15c516a6f183938db980baf435d99c07d34abc4e70d5ab0550295d48cc9f4e15847f0d6751484903cea76a6caa335951ef8fee1f51a58631524cb54b4acbd84a051a5ed4e6dbae9a697c03f3efa8e8817389948f88efe6c20ce66651261e28deb9ce2d5d610ad785917f2d9420d9c7aaf24abdcb0f18b9a7f1ad33a9d144c6e3a1e031305b652ed258e0e7029888139dee450fd5e8c1272a5d1248c7b6f805559345271ef2a47a2f341735a14c4f7d5fce4ba355374d67970887de7ee2962433396d52a2a540070fd73848fcc8178bb04f9d7636bd582dec73b518f72e707ab2a9e062fce2241d7233f132b2182db8b6cb2436f3b2b1234f43deff7463cd16b640b26727916fa3ad1124020ea9761325b40a9969d85202ace6cb8f02f283b21f3d22cc7a9f35cf8e7f0649dc48fc74ed3914910647ad4c45e6e7baf92ee13edadfce174707ec6d6c0e0e44ea7e624a161ac1d187d07e5f09ce07719016ff8233d3207531d3e4c1f232a0f89b57eaaac385288186545d67f5d9f0245f054cea4069226d2443ee783f7cf597422d4d334ad6d2ba0ed8f8ba8e176134ed07832b2777a447d7e33350c163c4a9042bf610ab078f56a0acf767bd0a8c9eaf5b90ed07e0e9fdf1860b8497374ee5b337aeff219c61dce563c7ddca59913993247cfd76dbb388678f1e3813170c49013aa7b47109a275e522946323208d2fd61240c832dfada11d48f82c30997402830c50146501ddfed916815bb3549b7f85d75e07f6c20b4ace51a6c49fd8a1a798391717aba550de77d70f437931f4ef4489b529f2636006fd28182e2f0fed60def82b53c54dc1e0a57bbe66b83a385bea6b2f2c5feb2168c31b73fc088a78fbb769a2f7657e9f6ee6078efa121b9ff9b53a96002f42929fe2de9d51369d445cde926e9ec9d05731cec9da1fda7c3230e21e0597385535b7a0da8783140a1b651495e004aeb10c33c0c7ca055da7da25df2244d4ca7924dcb7ab747cf93c2810bf89134bef42aeb4fd1a4fb386446af8b6f80e92a101cd92285a929a36ab40a3c22b480aebcbeb897138b64895356fc3f0094ffd57c630b17899acb3974a563e6c259f90867e82f2e86ab09f24b877f2f52920834dc26480a4191d9122fbad88479d531e4784383208267f934854f198d608b3c9b19c085dc09be471877a64b70772426be5169a63c9ae5b67720e0f61d4ac0ed19477a4e972151f5b87ec3c4705607e5"})
r4 = syz_open_dev$tty1(0xc, 0x4, 0x2)
fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f00000020c0)=':\x00', 0x0, r4)
ioctl$BTRFS_IOC_SET_FEATURES(r1, 0x40309439, &(0x7f0000002100)={0x2, 0x1, 0x13})
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612)
r5 = openat$cgroup_pressure(r0, &(0x7f0000002140)='io.pressure\x00', 0x2, 0x0)
ioctl$BTRFS_IOC_SPACE_INFO(r5, 0xc0109414, &(0x7f0000002180)={0x897, 0x80, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']})
finit_module(0xffffffffffffffff, &(0x7f000000efc0)='*', 0x2)
ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f000000f000)={0x8, 0x2, 0x8, 0x7, 0xc9, "183857164bc69e6a4bf4e2c4b5fe355a23bd68", 0x7, 0x9})
fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f000000f040)=0x2)
io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f000000f080)=[r5, r1, r4], 0x3)
r6 = accept$inet(r1, &(0x7f000000f0c0)={0x2, 0x0, @initdev}, &(0x7f000000f100)=0x10)
ioctl$BTRFS_IOC_INO_LOOKUP(r6, 0xd0009412, &(0x7f000000f140)={r3, 0x4})
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000010140)={{0x1, 0x1, 0x18, <r7=>r4, {<r8=>r4}}, './file0\x00'})
ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r7, 0x408c5333, &(0x7f0000010180)={0x401, 0x8, 0x1, 'queue1\x00', 0x81})
sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f0000010300)={&(0x7f0000010240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000102c0)={&(0x7f0000010280)={0x34, 0x0, 0x2, 0x70bd26, 0x25dfdbfd, {{}, {}, {0x18, 0x17, {0xb, 0x80, @l2={'eth', 0x3a, 'xfrm0\x00'}}}}, ["", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)

13:04:54 executing program 7:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, r0, 0x8, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1ff, 0x20}}}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x2}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_TX_RATES={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_BSS_BASIC_RATES={0xd, 0x24, [{}, {0x2, 0x1}, {0x9}, {0x16}, {0x24}, {0xb, 0x1}, {0x48, 0x1}, {0xbc}, {0x1, 0x1}]}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x609e982f}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000001c0)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x8, 0x200}}, './file0\x00'})
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x5, 0xf}}}}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x7a}]}, 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x48010)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r1)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000380)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r2, 0x8, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000010)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000004c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000cc0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000500)={0x77c, r0, 0x100, 0x80, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_HIDDEN_SSID={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_TX_RATES={0x90, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x44, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x18, 0x1, [0x2, 0x18, 0x0, 0x36, 0x24, 0x2, 0x24, 0x6c, 0x3, 0x12, 0x5, 0x60, 0xb, 0xb, 0x4a, 0x1b, 0x6c, 0xb, 0x24, 0xa]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x100, 0x101, 0xff, 0x8, 0x9, 0x5, 0x7, 0x1f]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x0, 0x7c, 0xb000, 0xfffc, 0x7f, 0x2, 0x1ff]}}]}, @NL80211_BAND_2GHZ={0x44, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x7, 0xffe1, 0x1, 0x6, 0xd96, 0x3ff, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x7f, 0xaf2, 0x6, 0x1, 0x6, 0x0, 0x2]}}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x60, 0x31, 0x0, 0x36, 0x6, 0x9, 0x24, 0x1b, 0x24, 0x2, 0xc, 0x12, 0x1, 0x6c, 0x30, 0x24, 0x6c]}]}]}, @beacon=[@NL80211_ATTR_IE_PROBE_RESP={0x12d, 0x7f, [@prep={0x83, 0x25, @ext={{}, 0x40, 0xff, @device_b, 0x8, @device_b, 0x81, 0x8, @device_b, 0x7}}, @channel_switch={0x25, 0x3, {0x1, 0xb, 0x1}}, @random={0x3f, 0xd2, "ceeabcceb6745f11d47f109b3addf177b6428c7bc455a92a33933ae1e6b881535becbaabcccb75c3a116b980a96beb09854268da29763ca52051ffa668786035b0f76561bf48bd92eaf1bf909afe82d757e3285c29b5a10bacefcf431ee41d4184dc5df756323737a681b49444861d42552afbbf36f523bc9194273048ccf4aaec3921ec79b9e99ca6e7793a899f91eda5fc8754b4f252e16960f94e64820415022f24ce57e94e7764c245d1aa39a3ee0662e39b06e457c027010376d3948b81a16213f0dbff5d2c2eb52b7138dba73e9381"}, @chsw_timing={0x68, 0x4, {0x5a20, 0xea08}}, @ibss={0x6, 0x2, 0x8}, @rann={0x7e, 0x15, {{0x0, 0x2}, 0xff, 0x81, @device_b, 0xd86e, 0x40}}, @mesh_id={0x72, 0x6}]}, @NL80211_ATTR_FTM_RESPONDER={0x1d8, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0xf3, 0x2, "24ec04299a5245c476a0a3ad391e1606a8fd582344a307239edc54c2a466babef94f1c02fe97ee54e8784c3ad15dd266e36e8a79550bde346709adceca00a42131200cac1a65405c54704904317c6295bbb83eb2cf5b34da682ffc2e4dce6ef833f66c9981fb771272012d8def0e74ecddba1a1b9425ed710bc83ed4d6c4205ded120f8082d35f61e26df5ca0084fa42ca392318d5da580ec9ee0bc5e03588e68c38877002f484c679e4e7634c900cb5b00cf1dda8e4d9f34d566382fc8eec72e25e4749f48505ec954338520e052a6b3644bc3f701f37e3e95a64d08acdd3be19402289d169f806cc32dfd7206200"}, @NL80211_FTM_RESP_ATTR_LCI={0xdd, 0x2, "07901c650539dba385c8e07714736cfb00212d4fe780d26fd7e4447231734795c5e25fc9b75b87b6540256b8fd7754459f30ff06f79ef66d6bfe36db62cc3f0038e2ce7006ee3ec90a424035cd2b582fc96af008e61a4808a7f21bd874ac87706f0f6b8fe7ab2aeaeafeb6f1a772ea7e9bd1f77b7ee97dd8b9ba787d755f46c2f8381d32c301d4f6676fa99cd4207cdadce3805bfc88cf6ed547f8b5d13b6caa37756a0ed13c39e8e5a23cc6a6961b6f07128fb44ba39f0a6653ca3bb73447a7f71840580e0c17ab1985b7a2e92edd5761cd759934d09e0b9b"}]}, @NL80211_ATTR_IE_PROBE_RESP={0xc, 0x7f, [@cf={0x4, 0x6, {0x40, 0xff, 0x2, 0x5757}}]}, @NL80211_ATTR_BEACON_TAIL={0x1d, 0xf, [@chsw_timing={0x68, 0x4, {0x1, 0x7}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x0, 0x30, 0x95}}, @peer_mgmt={0x75, 0x8, {0x1, 0x100, @val=0xffff, @val=0x1a, @void}}, @dsss={0x3, 0x1, 0x6}]}, @NL80211_ATTR_IE_PROBE_RESP={0x1a3, 0x7f, [@mesh_chsw={0x76, 0x6, {0x4e, 0x7, 0x35, 0x5}}, @peer_mgmt={0x75, 0x14, {0x1, 0x0, @void, @void, @val="d0408ee39277b3c899775ddeb14c2096"}}, @measure_req={0x26, 0xd3, {0x0, 0x85, 0xff, "12f77818c17d55d1eb94c9db57d66eb64b7a5df404596676a3e17bbeb079f16e785f86c1a750b6431f0a8a42869cfb261f056272bc04c20345d3d83ed809a6632cf80eec275f686f5d48b9534cc03d0cb2d3d479927e3e66ee68389d53727f6c03aafefa4cec27b3147c3a9d153182e7b76a9f8d26d44e6c02ccb114ae9d2d3900f00f65bb4268104f3e3ab0f4bf3c7a9e615316775f7480d8c8385526bb9b28ce6b917361e46e1af9685d600894c4370fa2e59d63c435534c03dd5d37612dc4d70aa93087ae66c4e4b3384c0ffea171"}}, @peer_mgmt={0x75, 0x14, {0x1, 0x1, @void, @void, @val="56be85c56773c7aef9e1c9531694d978"}}, @preq={0x82, 0x36, @ext={{0x0, 0x1, 0x1}, 0x8, 0x0, 0x4, @device_a, 0x0, @device_a, 0x2, 0x9e, 0x2, [{{0x0, 0x0, 0x1}, @broadcast, 0x4}, {{0x0, 0x0, 0x1}, @broadcast, 0x1}]}}, @prep={0x83, 0x1f, @not_ext={{}, 0x8, 0x5, @device_b, 0xffffffff, "", 0x4000000, 0x80000000, @broadcast, 0x28239aff}}, @link_id={0x65, 0x12, {@random="54d448a92cdd", @broadcast, @broadcast}}, @peer_mgmt={0x75, 0x6, {0x1, 0x3, @val=0xffff, @void, @void}}, @prep={0x83, 0x1f, @not_ext={{}, 0x7f, 0x1, @broadcast, 0x4, "", 0x229, 0x200000, @broadcast, 0x800}}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x1cb, 0x80, [@link_id={0x65, 0x12, {@initial, @device_b, @broadcast}}, @ht={0x2d, 0x1a, {0xc, 0x0, 0x6, 0x0, {0x80000000, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x400, 0xf6, 0x81}}, @supported_rates={0x1, 0x1, [{0x48, 0x1}]}, @supported_rates={0x1, 0x1, [{0x3}]}, @perr={0x84, 0x2, {0x1}}, @mesh_config={0x71, 0x7, {0x1, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x4, 0x41}}, @tim={0x5, 0xa4, {0x0, 0xa8, 0x9, "8f8d06e4d7b32955975ae4a452fda0cee0c98d7e07708313b73def8ab0d5c068c72f4eb3c69e98a18ae1f12a8829a158576137bd69e4372724645674c9390a988b7dfabed388a1144fab5d1846f6e4c51efcb09158f0da691dfd96bb1b749c014439e50d2347f6a4016264b7fe0ff7e1b5d48ac05d9ee1930dfda4e9ea846442f1f9e8b0f598da444bb717d080e65f3089f88ea833e061ec76b6a4de87a3fcb8c1"}}, @perr={0x84, 0xdc, {0x1, 0xe, [@ext={{}, @device_a, 0x3, @device_b, 0x9}, @not_ext={{}, @device_a, 0x6, "", 0x3d}, @not_ext={{}, @device_a, 0x7, "", 0x3c}, @ext={{}, @broadcast, 0x7, @broadcast, 0x37}, @not_ext={{}, @device_a, 0x401, "", 0x36}, @not_ext={{}, @broadcast, 0x0, "", 0x37}, @ext={{}, @device_b, 0x5, @device_a, 0x1d}, @ext={{}, @device_b, 0x7fff, @broadcast, 0x37}, @not_ext={{}, @device_a, 0x8001, "", 0x10}, @not_ext={{}, @device_a, 0x55, "", 0x1f}, @ext={{}, @broadcast, 0x0, @device_a, 0x22}, @ext={{}, @device_b, 0x6, @broadcast, 0x31}, @not_ext={{}, @device_a, 0x65f4, "", 0x22}, @not_ext={{}, @broadcast, 0x3, "", 0x10}]}}]}], @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x2}, @NL80211_ATTR_SMPS_MODE={0x5, 0xd5, 0x2}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_TWT_RESPONDER={0x4}]}, 0x77c}, 0x1, 0x0, 0x0, 0x40c0}, 0x8004)
r5 = syz_io_uring_complete(0x0)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d40), r1)
sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f0000001340)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001300)={&(0x7f0000000d80)={0x578, r6, 0x400, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0xa4, 0xfa, "97b42e48df8df0c422f0f141d238cea80a8a79c207ce1f84ea899a5cf27b7e37dda56d295088580a9e8f1aa48eea43fad8a7de33b629d6a022a795b7c8a0cd977e549ee94106f474d0419d2a37538244badb58084cc4a6217d3f8cfb1544dd15d43f4456c4f6ad076cc719660526dc4529d2f24065c7734957ce772414541d9f124a47ece476e4991ccdfa5e4c2e6c9532bc5e3d6c925507ad7bc0b58c267bc7"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x101}, @NL80211_ATTR_FILS_ERP_RRK={0x5e, 0xfc, "05512fee36b906a58e83db764bef9a89ace0f3b08b2ca0714a22fcabb104aa693cce0e62c4ab101c7c9e53a2e903bb51266e81f9b1bcceb0c655c9dfc87a4436a4c15b27bbaa334f79c2373d1701964e8812c2db43edc3457fa7"}], @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_USE_MFP={0x8}, @NL80211_ATTR_PREV_BSSID={0xa, 0x4f, @random="d5cd528cbf75"}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0x73, 0xfa, "9de0b736d0b2729584f45543655357a0e3aec5841ff77040afc20e47fa6e313d326d984f86b8a512fe9588b7bc4976f6827790a062a794560fb22505989998012be5da22d461669d1d61afad38f8f522c81b1eaeaea1d2ac1c446b5924d9248bc1ec4092f407ae12b01fba6f33989f"}, @NL80211_ATTR_FILS_ERP_REALM={0xfb, 0xfa, "bb432adbcb6b574467d1e6b129b16966465c50b45ab88edcd1be3a5cac7ea8e95e24fc6084ea12c53dc97fd69c105362794752283ab636214ac64eae5bf62115b7de1b6b7d16b7dd5b2a302ae1d4cf940b641c6dab0ba43459339b533b12410589c294aeb38e91430515376980ce71aa73b7c3e127b2bd1ccaea677beb402a38e20ce8d2b9e667fadd922d81c7a946a837a459ab9dae2c4871e2ec1b4d915ccdcf9815e32db337ab6e5d93c67f61ee9f2d2b6ea54f5ac375424ebe2ef6908841c88bdde1a6a012307f50451607611a3bbf9a0fd54790cb73c1e9205a3684693c78f051e1173a578c6cae1ff9683ec543656a7379b4c3bf"}, @NL80211_ATTR_FILS_ERP_RRK={0x3a, 0xfc, "bd822f1f3f0294f5da96c73ce56477f650e495f3d18708f1a0ab9b9b2bc793b9957882cd4b832cfa848b811c3786aea5034d1f0e7378"}, @NL80211_ATTR_FILS_ERP_REALM={0xb6, 0xfa, "223f6470b9dd4ec0c676bebd6d73945eb758a3b60972e1ca4304973331572bb88fc80ba4693fa761d1f73ac7b05cd3228feda2f9ca961c7bd5b12e375f6f84f39041d7dbcbf16e5625bc6e4b6480cc7e8f96789868df7edacb10a323df55e9f38e4efc318efe0f87ff1e9ee1416f87702d8c1f6bc653930be69aac32b6c6fa86b14a570cfe0900e82e0fe1fd3d4163b8187404e3132d8e2609c24ab674f39ff0f59ade987fd618eb5646cd658125bd233086"}, @NL80211_ATTR_FILS_ERP_REALM={0xb3, 0xfa, "0e7445375ba0abe30d92cebeed5ebdb4a6193688fbbd2d294b4d991785433ad4313e981cac97e03e3367dc0797b28c294ae13a2ef63844349d57ad6ddb6adae96a68e5dca7bd83773fffa1cc53b1eef2ba90bd855aba0e7e3ee32ca402ade5fcd27795792ca10b342f8c2b48bf012d24f51fd0028a76befd9e41f1bd0dd08603b18552f3568c2e925deb9921a1b4f541773636194a25ad4e7367dee72e2d6ab5a84ef6248185cb93cd3ef26eb97e96"}, @NL80211_ATTR_FILS_ERP_REALM={0xdf, 0xfa, "bdb01323b830d101220a74a36dcaa98576c9bb0c80c832adcbdc569f944e3bc3f9cb10bd1acb257ea97db7ac0f3793ba590c4e1f9360440d4b0f9a0fdc7b311e6ed0311e766288de270dbc4501e37c91ca979f104bd4926d3a24b5c5f2a2f96f060e0877d4112fad8c8be9234b68914c70007be77a4429a0c70bc5b212e5382fdd163083496f3e22d27226382028cafa69f92e54f78d32d717e2ca3a4c801f33332932963868e092971758653444814451c829a9bd1aea2732cd24fe676c7010f4ddf099a7837b2d54f4ffacfe1070ae2611eac532fa87358f9dd1"}], @NL80211_ATTR_MAC_HINT={0xa}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8, 0xc9, @random=0x16e4}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x80, 0x3, 0x7, 0x0, {0x9, 0x7f, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1}, 0x400, 0x8, 0xfa}}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x4}]}, 0x578}, 0x1, 0x0, 0x0, 0x44001}, 0x90)
r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001380), 0x200002, 0x0)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r7, &(0x7f0000001500)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001400)={0xbc, 0x0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x91}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x20}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0xbc}, 0x1, 0x0, 0x0, 0x8000}, 0x40010)
r8 = syz_genetlink_get_family_id$smc(&(0x7f0000001580), r1)
sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000001680)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001640)={&(0x7f00000015c0)={0x50, r8, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'wlan0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x4008000)
r9 = openat$dir(0xffffffffffffff9c, &(0x7f00000016c0)='./file0\x00', 0x561000, 0x40)
r10 = syz_io_uring_complete(0x0)
sendmsg$SEG6_CMD_DUMPHMAC(r10, &(0x7f0000001800)={&(0x7f0000001700), 0xc, &(0x7f00000017c0)={&(0x7f0000001740)={0x58, 0x0, 0x300, 0x70bd2c, 0x2d5, {}, [@SEG6_ATTR_SECRET={0x18, 0x4, [0x9, 0x7, 0x8d, 0x8001, 0xa00]}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x9, 0x3]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x4a0a}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x5}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1f}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x200}]}, 0x58}, 0x1, 0x0, 0x0, 0x60880}, 0x4)
fcntl$notify(r9, 0x402, 0x20)

13:04:54 executing program 2:
r0 = fspick(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x1)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>r0, @out_args}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x2105}}, './file0\x00'})
r2 = syz_mount_image$msdos(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000200)="03f0bbf3a37a27f5fb4588ca4118b1ca99177f8747829ebdd045b3a1b80f1372777cacd475da6bf047c2cfb78c528bf3a993980c36538aa68af5ecb97339231d526c80d519ed486cafe353dcf3f527feb609f35184a4218a9196902fa7492def979b74854cef0edbcc41f325693bee34cc54fe028567f17ea3c99f5c622d8bf448dff93507dcf9b33f35a7826505cd2ca044ff5dd8c0a85cc07417f64127e7f518fe5110175581004f5bc9162b85ce0a11a3cbca174913437a5e5f28ba466321c6c7e798f2d7320057f185e17a5be7ad4502db2c85c9f971ecd222a13ae642e09eecd67c2d07e2dcef4871afa1c6e70da673178c7da0ad2c723e23d2", 0xfc, 0x7fffffff}], 0x2002400, &(0x7f0000000340)={[{@nodots}], [{@fowner_lt={'fowner<', 0xee01}}, {@dont_hash}]})
ioctl$BTRFS_IOC_DEFRAG_RANGE(r2, 0x40309410, &(0x7f0000000380)={0x100, 0xa8, 0x3, 0x1000, 0x3, [0x1, 0x2, 0x7ff, 0x3ff]})
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f00000003c0)={{0x1, 0x1, 0x18, <r4=>r3, {0x7ff}}, './file0\x00'})
pipe2(&(0x7f0000000400)={<r5=>0xffffffffffffffff}, 0x4800)
newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, <r6=>0x0, <r7=>0x0}, 0x2000)
fchownat(r5, &(0x7f0000000440)='./file0\x00', r6, 0xffffffffffffffff, 0x400)
clock_gettime(0x0, &(0x7f0000000700)={<r8=>0x0, <r9=>0x0})
futimesat(r4, &(0x7f00000006c0)='./file0\x00', &(0x7f0000000740)={{r8, r9/1000+60000}})
chown(&(0x7f0000000780)='./file0\x00', r6, r7)
r10 = syz_open_dev$hiddev(&(0x7f00000007c0), 0x2, 0x80)
ioctl$EXT4_IOC_GROUP_EXTEND(r10, 0x40086607, &(0x7f0000000800)=0x9)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000900)={'ip_vti0\x00', &(0x7f0000000840)={'erspan0\x00', <r11=>0x0, 0x7800, 0x700, 0x0, 0x9, {{0x22, 0x4, 0x3, 0x37, 0x88, 0x65, 0x0, 0x7, 0x2f, 0x0, @loopback, @loopback, {[@noop, @ssrr={0x89, 0x1b, 0xa4, [@multicast1, @broadcast, @local, @broadcast, @empty, @private=0xa010100]}, @timestamp_addr={0x44, 0x4, 0xe, 0x1, 0x2}, @lsrr={0x83, 0xb, 0x79, [@remote, @private=0xa010102]}, @ssrr={0x89, 0xb, 0x6b, [@multicast1, @dev={0xac, 0x14, 0x14, 0x38}]}, @cipso={0x86, 0x3d, 0x3, [{0x6, 0x2}, {0x1, 0xd, "9dae4dc979adae093b070e"}, {0x5, 0x5, "18b549"}, {0x5, 0x4, "47bb"}, {0x0, 0xb, "703f69e5533d87c0e7"}, {0x7, 0x4, "29fd"}, {0x2, 0x10, "c622374507aaf07c69fc2d131187"}]}]}}}}})
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000940)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x57, r11})
r12 = openat$cgroup_ro(r0, &(0x7f0000000980)='freezer.self_freezing\x00', 0x0, 0x0)
ioctl$HIDIOCGDEVINFO(r12, 0x801c4803, &(0x7f00000009c0)=""/164)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)

13:04:54 executing program 3:
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000e40)=[{{&(0x7f0000000000), 0x6e, &(0x7f0000000100)=[{&(0x7f0000000080)=""/82, 0x52}], 0x1, &(0x7f0000000140)=[@cred={{0x1c, 0x1, 0x2, {<r0=>0x0}}}], 0x20}}, {{&(0x7f0000000180)=@abs, 0x6e, &(0x7f00000003c0)=[{&(0x7f0000000200)=""/171, 0xab}, {&(0x7f00000002c0)=""/180, 0xb4}, {&(0x7f0000000380)=""/50, 0x32}], 0x3, &(0x7f0000000400)=[@rights={{0x1c, 0x1, 0x1, [<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}}, {{&(0x7f0000000440)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f00000004c0)=""/237, 0xed}], 0x1, &(0x7f0000000600)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, <r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff]}}], 0x28}}, {{&(0x7f0000000640)=@abs, 0x6e, &(0x7f0000000940)=[{&(0x7f00000006c0)=""/134, 0x86}, {&(0x7f0000000780)=""/207, 0xcf}, {&(0x7f0000000880)=""/136, 0x88}], 0x3, &(0x7f0000000980)=[@rights={{0x1c, 0x1, 0x1, [<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, <r10=>0x0}}}, @cred={{0x1c, 0x1, 0x2, {<r11=>0x0, <r12=>0x0, <r13=>0x0}}}], 0x60}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000a00)=""/71, 0x47}, {&(0x7f0000000a80)=""/136, 0x88}, {&(0x7f0000000b40)=""/14, 0xe}, {&(0x7f0000000b80)=""/207, 0xcf}, {&(0x7f0000000c80)=""/143, 0x8f}], 0x5, &(0x7f0000000dc0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [<r14=>0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {<r15=>0x0, <r16=>0x0, <r17=>0x0}}}], 0x50}}], 0x5, 0x40010023, &(0x7f0000000f80))
fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000fc0), &(0x7f0000001000)='./file0\x00', 0x8, 0x1)
lstat(&(0x7f0000002380)='./file0\x00', &(0x7f00000023c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r18=>0x0})
getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000002680)={{{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r19=>0x0}}, {{@in6=@initdev}, 0x0, @in=@local}}, &(0x7f0000002780)=0xe8)
r20 = getegid()
r21 = socket$unix(0x1, 0x5, 0x0)
r22 = socket$nl_sock_diag(0x10, 0x3, 0x4)
r23 = accept$packet(r8, &(0x7f00000027c0)={0x11, 0x0, <r24=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000002800)=0x14)
r25 = open$dir(&(0x7f0000002840)='./file0\x00', 0x200000, 0x6)
r26 = syz_mount_image$nfs(&(0x7f0000002880), &(0x7f00000028c0)='./file0\x00', 0x101, 0x8, &(0x7f0000002e40)=[{&(0x7f0000002900)="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", 0xfe, 0x3}, {&(0x7f0000002a00)="55f0c99ad870b8d38941bcb6d95687deda", 0x11, 0x2}, {&(0x7f0000002a40)="403d0860676ec1324c488a894ceada5bce0901bc7014cdb6403eb5d0d3198f61168e9a64cb89762074147dd650d24fbd7adb8952cd3be0fb4af07cc17678183e4f8ae222ea95ffb892d8555615d6257783df6a0e76c55e0ef7320d06f7fcfca1bb3fdf", 0x63, 0x5}, {&(0x7f0000002ac0)="6d573654c7479537353759241e7c3db21d4dc9ff0dde68871f60eadbd003c614097adc64aad7a2ab34aeb24ffb779d72504fc2be1f31593a817cb2dfef9309f25e768c3dfe64ad27334f76941deec4c92fd158f45c924683b121564b1232a79d6cd7f558e49f8c68b28a971d2ef5b7b516c7d5969b1f45c1f5b5993a6ef7a4534adf45cd06b8da24e922a4ab5c00fcb78ffc4be00618bd0e7db25d88ad29f46e940325", 0xa3, 0x6}, {&(0x7f0000002b80)="dc3c933f8427813a61014b52f3c4c21bc0f989e16d3270c437dbd4318ba56a0e40a43935877b8b0d2bcd8eb89a797b4a673b929fd3dc719a5bac81097e8c244a92b0c27d70ff2de1b240284acaa59ad43dc1b8208664d020f639e047acbd1cec04c01adbe40d0396f30be789b12d49b81c133370338d3d398851d313f0a85a4712790f89e88fb001c0469ceeea0078a96d2a7e1fd16340b7ce3d9aa2cbe7ed2bc8f30cdc0a5e52d2407e5b78a2a4e5ea7ae51c690877e629cc067018dde68817730ac673374eea456cdd14bbfb474a21f60f03792016258a64826f1ea97ea7ead777874e33b70ea54147e442c5918afb62ede38b563e3d2e5a", 0xf9, 0x7ff}, {&(0x7f0000002c80)="374d04746bfa3a48e1f663a37e5d15266762f9e779cf6b6e082d8e2c83640d42bfea4496846a9d40e0b33b69a9e1192fb58f265115647ee3a017fa572f55a0ee1a6c0c02f37a769b0fc14786ec8bb854e20fc6fb897acb8c9cf754cc610be80b78f95f", 0x63, 0x3}, {&(0x7f0000002d00)="d54721e7767ae08ef062e4536842c862643a8016f4fc0f7d60b04eb4b1a090239ed3cb44dc1132a2623ee6c6d8e6be1fcd550fef6fcb397551df6937b3cbdf55e2ab72e3f0b26ac78078b5882707c5f0b0d7dc3e0e9862591b25c4b028dae4d89ffd4772f3430d8c8741c8c6aa17b5b6662ff5fc70f287a1ec7165e74984b3c9582afa59c9c60b9140912e9be23fac926af8e0008f80dba754850f9523b716a842d4fe9f3a1f95deea714c60531fe86e5f162d167a431b1e170fae4e66068e4dee83e21d9e7b39633e8e75ca38a4f9bad7258c4d8d752fb246b54e614485fb5e26780a8dde4e180fdba00618622ed5f62c5b7fc9c84c93", 0xf7, 0x2}, {&(0x7f0000002e00)="df8fbc16e7210572ede62bcf006c7f0db7269c4055628b", 0x17, 0x5}], 0x240008, &(0x7f0000002f00)={[{'^-\xaf}.$'}, {'{)$*).*'}, {'*,\x0f@-]+.*D$(!\'+\\X(/\\@@\x92.),+[{\\'}, {'trusted.overlay.redirect\x00'}, {'}:'}, {'trusted.overlay.redirect\x00'}], [{@obj_role}, {@uid_eq}, {@fowner_lt={'fowner<', r10}}, {@subj_type={'subj_type', 0x3d, 'trusted.overlay.redirect\x00'}}]})
socketpair(0x1a, 0x800, 0xb8, &(0x7f0000003000)={<r27=>0xffffffffffffffff})
sendmmsg$unix(r4, &(0x7f0000003140)=[{{&(0x7f0000001040)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000021c0)=[{&(0x7f00000010c0)="610b30ce286bfc372f151e68b396d81a9b04ba74a8763d306e30af665a6a36f173e25711a1c408d8150cf0ba44e4ee41a9b92830e9bc697a82f13be6eb16c834c7bb3ac90259c8b5f71838510c1e6ecb9f7f73247c51c06c5d6d712531f1be4a047a17b725656634b76a28838e3b684470e2cb9b74aa2f8132d30403b8c60419c243c604908c94e577433342559c0609c8f38c8d57e4dd579b78256c0ea3e46c1c28837df74a2b1a4f66cf34a0476f29858e3020a47623c77916040404fd62a509f5ac639cf73b7ec69913986dd4c665e425465bc7bb49a340ba6b8271bc462505b1a40557730e3e67ee323da64a261e6f77edb58aff4ff1df44b4049e75af95e1c2084f5f771579bc0903f1a95bbd6c540ebbde7f1d2826decc1418cd2735bb74829a94df52f71bbc286ddac967bc0dcec17425748b5b4120a60459d4ab37b1337f993541f30af1cc4be179266f415b1260218ac3bfe52396c0d8608bac7d2797145fb802d21f3feb1a9d6ab63dfca503cc10487228f1b1898903d297cabddd42f5fff0568aaabc608cadeab0e2c5b9753b9dbbef6c8280fbcfb486cb8fc3c5952b34758b90e788ded52c327e40df7fb7f2040e8306d5fe4575530368acc6f312569e873b5844a9825be661d28d8bf8f9847da704245ecf4d94e01e81f533a7736bb51539894ab4ade7f50cceec43bc169108dc1a46a31ce8ca85ae1778d533e5ff16d3822e32b99838b9816b11521c106e653c87d4defd92cb977dd266269a9a24aec757dc1b3906678a8d19739dbaf8841158699a86c51c1b98ddd35ccfed4d72348e411e1784df73d7650dc5dbc9608b5d39451ce3724f2eba30e6e211a266432e49f5bff61539b5298cf764c6192b5289082e3f038d6f9b80f7d4ec2e70885adeb20d7a0106be794347b7850c67966a26e8acbf052dad9c72990078168c74af04a015b8227a983320c1a4395b63450850b1c74bfd44f54ffa5d233d8ae3f9cfaa2974ea3b8d686df9e23ed0f136d5ddf212316bda777d875e9f27d7a64e3cbf890e339809d51380d735bb87fffb9a00f80dfa16e0e62cd25403afb3585fe5990fff274560f282b7fe25f687a25bc11620ba4aa6f5accf9c3dbe7ecdb75c11bcd20234c252a596a664045299cb0abfe0807583a0805cf471e9fc495f99a26c9c8a68cb77d8edb34f593f27fa7a3f653b27be8d900ff6c8937875dabc5bbd8b69dbbcb15a95a07b5220648ba44e66b12222ad671ee6d4e14dcdf7b32d1f3b9bc6e7695a265bbfb5dd754a5f91fafc32fd80533d68bc21acc2d317f2ef363fe62f9f67dcb7b1d1798e15990941d429ed9639c85ffbdcb83b7194ac6d2161f277a5c05384e68be95e93bab19a20e28db00a171c51659bc4166b4090acfcad342cd5cd489cdc273a042b710f81ec911b89d97a797ab61905a5c807a2c47e4c9427cf75849de19fbfbb5905d3448f321052e9a89306fc43a668d6bb66d2bc7ab4b2609d5c138e507807b6fd104b0ac6b0e08e63d72692929f3a77c4e5fa85403f7574f6baffcd552e44e97eb8e98c1cb0347578a4ae6f94c0b739fe71b7fd2d5f3f7b0eaaecbf49a72f8214e3872cd96b2cf1a562918f58286c13d0f3cab13ee98a5fe97a8a8357ed3c6bdae76b50e718c0ac1e5103e0eb77db4eba49a62f7e486f668bc27155ec9c958428e0dcceb897cb4469e583c02a000033befc7c1ae43a6c1be02f885510156e65fd8b11343b8d4501adee928774fa84df8a8e9ec8916be88fbc2597536b593d59b2f715b863449e52bd7a08a209d4d777c47188987905cb8e7990319c30b238c58aabdc20e1929d78813dd09b26940fb6b62910cf722cdffc121d7d418aac1361b8fa36c3f35091a472cec7ee05ceff665524e8f258026f6a9c976f3068a62011ac7f6dfa81db3f6e81f0d1dfb4820198ed2e6c41ec024a43759fea0f611778b65ff4f85958ef755f365851e26b19436c4093b13e88ea27fef4da24e335efced017228c95bbfeca0bd56c1a0adf4c5e2668244705f354b44a15e9c9dbcd9fc7358de144206ee48397251953804bb52f0ef9039d388b4400a6011a3f1861a553209849a1cb80955d8fc9474d6f2af1633c5cb0b93070d7532d6a0714ed4729d7fa29ea1f98c5c36869e2fa8e5375181c1071a5e64cf84a743eb99932b9748362ed10ceb35cc1679c0457d98b0e556c23cc72f8cd3e1359375dcb05235b848428c967504af35d2337f71964821805a01854f164f6e4f71f255fec0faaee2909f97176d711790de2dceae3174d88350d6e27b471feba8ea9abb5f21fd1709e70db066c32bd9e523eecf2d67b9c2eb5caed331d32b0730d0b4f12bb4ae7a25a73d0417d8b9e78ee69798bd51a6cb7836f6693b612a8ccd43173c0c5d43a70382336dcde51b064b527c92deec3595d9c85d9c5a645df7180ad5f924211d89c287b3744f2813076a3b736a60892aa9840cdb9231362fbe0b40bf4470953caa55c665d3e23c701a0483084717e6ee8006523789244d0199ee1352af32b534f7af00a9c44f14e739fe3c38edd233d5a5cba74b721e98de897972e827c34df2e9b23c3d12158832d08cb585be44c5e8d98560864b3570519db5e45b2f31cb0b8ee7143facb4c071d5a299671e3d9f5b1b4c30080bee3fe6f8b7ed970567a15b37e3b6ed3f8d29191e04c2c212cf2c3baf805ad26912f7c0130cb313bff1054bc27dac92ba52d54f6a3c39fafc1e18338ed705ada2565657df67a5ed31522454ad55da4811312230c2aa7149ff5b196b4eff239bc230a4a939c67ff6b3ecdd8d3ba75143c38ba9e9e3761f50d95eb93f344b66ce777d8a3bfb961cbb62a802d76df870f9ed046a0f7b6de7f16c9b3245eaaf1bb8dc5626bccf4f5fd7b995b474ab69f2d58057488f1878364cc4f0c7ed49b301f1996478f86fee4e3698ff86356bb020d954f6a8b58692cf4be4cc3814e598d87ff2dd211b49ddf1e85c6ec614cd4c12e038e9d779edf9fc6af94eeaa042d068d536b70325315a49dd52b7d0baf263825ed918c965a31f21bddc72f062308ea5e3a45f1a0cfa43a8389ec31161f3f7c2d768de2796f5e5302285464926cc1c7f21e1d0a2438edc3e9fe9cd18c7161f669cb50fc77de8bd95649b72d70ce80e2cccb368411dd9bd352c992148306535fce402856c8e9e5db53f242ba6a0789856248596a6a11ac43b008c9dfd2354eb887ad6503761cae22da568b45ede4fa4feea254e2ef6ccce7513fdc9eee9496ce27986c1713d0821cbf2a6a5cb4a5e73c79f2fe4a53fa7135e2f70e61e51bfd1667640b17770629b61a897122a2fc9688bb31a8b1656b0d74213bc79f8e27abc0ebc523f5d3b2fcce638f0334d462b2f83ac1475eb6167f15c9badae83d25f438a2d245b9e3d236d8337bf968d768699aef46d71e742ef160759712a75ea247ccbb7f93c81ea89afd9568d64bbeae7547e1e0ce92fc55cea406f645051c80de04c1be6a25277e628434cdd891824034617728af4e6c025d6449acc4cce0ef09eeb5c59ec716f12ac7f47fbc55cf7b0c01856070a557f8b516175302967691e153b00876ad600ed54bf272e94c18bfa6a892ac13ca816d960cf6f079d090c2429ed101b478ef1914e18746f07252dd87d08a4ba2b7aab0378188fef743306f1afb78b1ac9de98a5b674278e2a2552ad269fedf3dafd73067f56c450a9e988283a5268c7848a91c498c8beaefebfe3919664db1288fc2c8a8fa4afceb4b7f8b02df514035d0503d99e3e119c758bcd85614513819d43fe2b61a41c3745cbe926a762f3fb16277de5ae61ec15b94f6b72fcecbe952a57cbc88b8825c5437979370a44b6f7d4631dcf494539ae4f00a49866c582d2e9d783d22005a604ae440a9795a4e09b445a99df5784211dccaefe9da6729fbb63e96ba2cad50e1b0d3740ef839771342e915b54cb83f6bb794033858d471ce139ae64ed1bf4a8e4375be79b60f73e3a98ba80c46ed56ae1dea9f10a40e690785c6558aec67ab195b7479a53d5511b3a26ba08f8b8b74cab8614abaf47d44d21c17af95cd0c6f0b58b4d8a3e2591763e2b3cb8553424bf78af78392d272487b6e67b576049bcc6788de80950741feb9c83b5f44e56724b459a0f066c77bd24f8a88cac1727cdbf07aad74b9efbe795c5091db6998d1a3b3e51758551b26a8d8f017cd84527c21e561eabba1781a94efde2557798bec4886912999498caa6592ce335db0f1be4f2d822216fe81293e9de6116faf16567c53c9214ca94368a1262829749bfd6a0f54b93a6c36b596e7bdc4d4e731b7c216272c6f82ea56d91946a63f3fe35a52ae8571d415e13c1a92dbf33a1849d3068c221fc6b6f3da2e382332158e0571909a1a7afedaa8ff5ad308ce9cb87f51e1e6676f2bef85a6c2b58158f96356a6a2df76612ef32b0da585ba807d2684e1c07f595870737e4b75062b2d642162924a32c5c81ab9c531a373fdf35d81c9578be2bcdadbbc0765928da17072eb97c66d651cf78a0f0a62402d7fed74122629b5f4bd93d0d74623ed9db60c27c2425e0416ad517e99dcfb41b220219a331710de6610d15f23d507c5ccbc7ea0eeff73d5e934d110b49b28ddea9a631e71f694d3d816863ffa6c13d262587225f326c95719f0b088b4b72073a853889f07cf811b2c6be8aff29c05817f3962419170ea3a1e6a5ec302f28fa148978dd71b3477adec93757b1d9c4d9547c0786c783b492d67d606606f2f4e2937ec68dcb2837db3a176e46ae7b41028558a466556e42da2c2963ae339e7bf1ed6f86b6dafaf0ee60e960b64664b007e74985467ccf8432b4ec3cf16e92a8ebf59afb6d570674fe8f850af672b5ed49aaaf9c349e86e3103a53e315480f95c77452f0c110277233a381e7e41440487a61349969c0ae03399c04c716b73baa03b508069d7ad1684aafca1a5d4116c4f43bc2188d71138b2dc45efee51f42b16067f94f8dee5d367988942d4c2767c16fa2d75222de0e4726fc453c3fbf9ea2a8c2fb3e94d8f8cf86d0aff0708ddcfddc94b996a56235a4ba3018d55a4506ab799705e5fb9bb1c5c32c1af94f80d8e9df43416caea870cf2c7db6fb58c799fc68c332dd2e81b8e91c58030f8530ab398ef4f5f16dd77afee8d085bb151a19c4af8e51a5e2e960ea644c9ef05bdcd90c0d9657c37aa510901bc6b806a2046a366935a67d36cb0a0ffcf4d6e8a850ac458c6e28bc544dbe2f7ea02734e890f2ab8a7a279957bc9394f176a146920da26bc12f89e287067a91a02b0994c716d51aa0d6093c7bd20eba1b2f218bce5eabf30a6667ee48a393f60b76fc4bb5e99420fc240b07f0aa169c4959920caaa585abda4a7ef07e475ab41cdb581cde3ccd9bd44791aea35540999672c57239b411cd7c8423bdbac90ed900e1b5c7ea1e5d91190ea6d339e6d3438b1b3d2ed797958308356effe4eb92ef1466693c04994366b888f97353ce11ce0cbdd62afb0f88d7128e4a653c60fe5e6abb630b8ad0b2a264142d8ff1dacf9cb1af9f00aa4eea61eca31485bf09e8048c5ae28b308af5c310970f25353dec9b6ee4fe1fb88bd9438ae53d3d44ca8facd66a654cef9b558ed90b34b6777c859969960e7de353e20530e32e9dfec5ff7db12aea5f7a2079945920b630cd81f75902998bcfeb3bd6ed01ea5b5fb94b66416ef75c22fa510787f89561d5355f2892859071e2ce6bc6dddbabc04f96778d26c69d3ca744aa4b5d103d3b4010a5b98e579eb33c311e8547fd08e10b6f41687a25ab3", 0x1000}, {&(0x7f00000020c0)="55e1572849ac1388c215978cb0c0308f0d351cceb1734445d620117ea1a223e2a5905eb0184ecde42121c77b883a5537c6ab3098feb2c51520538ba41ea15da89a2319a1dbcef3e2520752f1aabd39967ce9f472daad2e2377f79ccca84e945b0fa6408e289102160cfbb309754320c0974d5165203bdcdb60d190925e056d752783206cdc26bcefda3abf4e979fa8d8ad4e473defc9", 0x96}, {&(0x7f0000002180)="b6e69ef412387fd288183928911876fa063ba502b462c532c872aa0e430d5de12132fba903dc44", 0x27}], 0x3, &(0x7f0000002200)=[@cred={{0x1c, 0x1, 0x2, {r0, 0x0, r17}}}, @rights={{0x14, 0x1, 0x1, [r6]}}], 0x38}}, {{&(0x7f0000002240)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002340)=[{&(0x7f00000022c0)="60c8caa2fc2469b4769b951237a430629261e06455ced7dfb73995727084ae568588bea62d374cc822cd06516b1ecad21df75d7e307de5ae9ab5aa9e6b4d7c3d623406a01f32438f62ee7cfc551e221083efaab3e8e7191ebabbb8fb413c9ec571ec5cddb67a84d0e3166d4d285f1f6f8d", 0x71}], 0x1, &(0x7f0000003040)=[@cred={{0x1c, 0x1, 0x2, {r11, r12, r18}}}, @rights={{0x18, 0x1, 0x1, [r14, r14]}}, @cred={{0x1c, 0x1, 0x2, {r15, r19, r20}}}, @rights={{0x1c, 0x1, 0x1, [r9, r21, r22]}}, @cred={{0x1c, 0x1, 0x2, {r15, r16, r13}}}, @cred={{0x1c, 0x1, 0x2, {r0, r16, r17}}}, @rights={{0x24, 0x1, 0x1, [r3, r3, r23, r25, r26]}}, @rights={{0x14, 0x1, 0x1, [r27]}}], 0xf8, 0x10}}], 0x2, 0x40)
mkdirat(r3, &(0x7f00000031c0)='./file0\x00', 0xab)
r28 = getegid()
getgroups(0x1, &(0x7f0000003240)=[r28])
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r7, 0xc0189378, &(0x7f00000032c0)={{0x1, 0x1, 0x18, <r29=>r2, {r2}}, './file0\x00'})
renameat2(r7, &(0x7f0000003280)='./file0\x00', r29, &(0x7f0000003300)='./file0\x00', 0x5)
chdir(&(0x7f0000003340)='./file0\x00')
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000003400)={'sit0\x00', &(0x7f0000003380)={'syztnl1\x00', r24, 0x0, 0x3, 0x4, 0x2, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2, 0x78b8, 0x1, 0xfff, 0x40000000}})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000003480)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x3, 0x0, @fd, 0x3ff, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x800)

13:04:54 executing program 4:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x80000)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r2 = dup(r1)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0)
connect$bt_sco(r3, &(0x7f0000000080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8)
r4 = accept4$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14, 0x800)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000140)={'wlan0\x00'})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r3)
sendmsg$NL80211_CMD_GET_WOWLAN(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, r5, 0x100, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x53}, @void, @val={0xc, 0x99, {0x1f6, 0x69}}}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x48840)
preadv2(r0, &(0x7f0000000380)=[{&(0x7f00000002c0)=""/127, 0x7f}, {&(0x7f0000000340)=""/47, 0x2f}], 0x2, 0x4, 0x0, 0x2)
r6 = open_tree(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x8000)
sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r6, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x70, 0x0, 0x2, 0x70bd2b, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x70}, 0x1, 0x0, 0x0, 0x2000000}, 0x18814)
openat$incfs(r6, &(0x7f0000000540)='.log\x00', 0x40000, 0x184)
getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f0000000580)=""/81, &(0x7f0000000600)=0x51)
r7 = creat(&(0x7f0000000640)='./file0\x00', 0x7)
r8 = syz_open_dev$vcsu(&(0x7f0000000700), 0xffffffffffffffff, 0x545000)
fsconfig$FSCONFIG_SET_PATH_EMPTY(r7, 0x4, &(0x7f0000000680)='netdevsim\x00', &(0x7f00000006c0)='./file0\x00', r8)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000740)={{0x1, 0x1, 0x18, <r9=>r2}, './file0\x00'})
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r9, 0x40485404, &(0x7f0000000780)={{0x2, 0x2, 0xf54c, 0x0, 0x101}, 0x3, 0x8000})
openat$incfs(r2, &(0x7f0000000800)='.pending_reads\x00', 0x2040, 0x42)

[   80.451628] audit: type=1400 audit(1756731894.327:7): avc:  denied  { execmem } for  pid=274 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
13:04:54 executing program 5:
r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r0, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x30000001}, 0x44840)
r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000140), 0xe39def6701557df2, 0x0)
ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r1, 0x8008f511, &(0x7f0000000180))
r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0)
r3 = pidfd_getfd(r1, r1, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in6=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000300)=0xe8)
stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, <r5=>0x0})
stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r6=>0x0})
fsetxattr$system_posix_acl(r2, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f00000004c0)={{}, {0x1, 0x6}, [{0x2, 0x3, r4}, {0x2, 0x4, r5}, {0x2, 0x7}, {0x2, 0x2, r6}], {0x4, 0x2}, [{0x8, 0x1, 0xee01}, {0x8, 0x6}, {0x8, 0x4}, {}, {0x8, 0x0, 0xee00}, {0x8, 0x0, 0xee01}], {0x10, 0x1}}, 0x74, 0x3)
lstat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580))
io_uring_setup(0x33d7, &(0x7f0000000600)={0x0, 0x2e4d, 0x0, 0x2, 0x128, 0x0, r2})
ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0)
setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f0000000680)=@dstopts={0x2e, 0x10, '\x00', [@generic={0x8, 0x6f, "336334148a6427769293ae334c69ead951e9825f8663f45e650deab802c8c8bb042e3600b9b9647e22b3af93ad7c032d7e63aeb62b7ca94ee09012ccd60bb0384bb7f5ddee32d28647c473cc556fb1a5f41e11b29244bebe517f0fced31bb694d4da92a2c882f7f716c4b4a99ba2e2"}, @jumbo={0xc2, 0x4, 0x37}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, 0x88)
setsockopt$inet6_tcp_int(r3, 0x6, 0x18, &(0x7f0000000740)=0x1, 0x4)
r7 = openat2(r2, &(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)={0x0, 0x5, 0xa}, 0x18)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r7, 0xc0189377, &(0x7f0000000800)={{0x1, 0x1, 0x18, r8, {0x0, 0x4}}, './file0\x00'})
getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000000840)={'filter\x00', 0x0, [0x1, 0x6d9d, 0x0, 0xf81b]}, &(0x7f00000008c0)=0x54)
mount$9p_unix(&(0x7f0000000900)='./file0\x00', &(0x7f0000000940)='./file0\x00', &(0x7f0000000980), 0x10, &(0x7f00000009c0)={'trans=unix,', {[{@fscache}, {@access_any}, {@aname={'aname', 0x3d, '\x00'}}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@hash}]}})

13:04:54 executing program 6:
prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b)
prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b)
prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b)
prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b)
prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b)
prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b)
prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b)
prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b)
prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b)
prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b)
prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b)
prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b)
prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b)
prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b)
prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b)
prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b)
prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b)
prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b)
prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b)
prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b)

[   81.664970] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   81.667409] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   81.670007] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   81.671630] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   81.673436] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   81.674002] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   81.678717] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   81.678772] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   81.685531] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   81.686767] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   81.830515] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   81.837543] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   81.843167] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   81.845666] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   81.846344] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   81.849475] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   81.850554] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   81.853572] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[   81.855491] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   81.857255] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[   81.859897] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[   81.863317] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   81.864459] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   81.864740] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   81.868265] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[   81.869689] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   81.876044] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[   81.880075] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   81.881160] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   81.887781] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   81.900447] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   81.905310] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   81.912774] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[   81.919567] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   81.927510] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   81.932375] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[   81.938697] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   81.945731] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[   81.959147] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[   81.969823] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[   83.726685] Bluetooth: hci0: command tx timeout
[   83.726694] Bluetooth: hci1: command tx timeout
[   83.919308] Bluetooth: hci6: command tx timeout
[   83.919415] Bluetooth: hci2: command tx timeout
[   83.920000] Bluetooth: hci3: command tx timeout
[   83.982306] Bluetooth: hci4: command tx timeout
[   83.982382] Bluetooth: hci5: command tx timeout
[   84.047487] Bluetooth: hci7: command tx timeout
[   85.774282] Bluetooth: hci0: command tx timeout
[   85.775187] Bluetooth: hci1: command tx timeout
[   85.968194] Bluetooth: hci6: command tx timeout
[   85.968981] Bluetooth: hci3: command tx timeout
[   85.969179] Bluetooth: hci2: command tx timeout
[   86.030206] Bluetooth: hci5: command tx timeout
[   86.030986] Bluetooth: hci4: command tx timeout
[   86.094247] Bluetooth: hci7: command tx timeout
[   87.822190] Bluetooth: hci1: command tx timeout
[   87.822892] Bluetooth: hci0: command tx timeout
[   88.014394] Bluetooth: hci2: command tx timeout
[   88.016599] Bluetooth: hci3: command tx timeout
[   88.017200] Bluetooth: hci6: command tx timeout
[   88.079224] Bluetooth: hci4: command tx timeout
[   88.079805] Bluetooth: hci5: command tx timeout
[   88.142512] Bluetooth: hci7: command tx timeout
[   89.871241] Bluetooth: hci0: command tx timeout
[   89.871699] Bluetooth: hci1: command tx timeout
[   90.063174] Bluetooth: hci3: command tx timeout
[   90.063635] Bluetooth: hci6: command tx timeout
[   90.064014] Bluetooth: hci2: command tx timeout
[   90.126196] Bluetooth: hci4: command tx timeout
[   90.126650] Bluetooth: hci5: command tx timeout
[   90.192172] Bluetooth: hci7: command tx timeout
[  121.829412] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  121.830071] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  121.941306] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  121.941878] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  122.107588] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  122.108605] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  122.243695] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  122.245022] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  122.972794] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  122.973437] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  123.082876] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  123.083537] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  123.254836] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  123.255645] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  123.336362] loop3: detected capacity change from 0 to 7
[  123.372282] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  123.372887] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  123.412796] loop3: detected capacity change from 0 to 7
[  123.671351] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  123.671990] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  123.781481] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  123.782180] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  123.921466] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  123.922040] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  124.029252] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  124.029865] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  124.114160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  124.114794] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  124.175450] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  124.176069] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  124.304326] loop2: detected capacity change from 0 to 264192
[  124.315415] loop2: detected capacity change from 0 to 264192
[  124.586200] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  124.586806] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  124.606355] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  124.606922] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
13:05:52 executing program 0:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x13)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180))
ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000100)={0xfffeffff, 0x0, 0x0, 0x0, 0x0, "f1210b16ad94e37ec2aab08ecc82258476310a"})
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x81)
writev(r0, &(0x7f0000000140)=[{&(0x7f00000004c0)="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", 0x33b}], 0x1)

13:05:52 executing program 4:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x80000)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r2 = dup(r1)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0)
connect$bt_sco(r3, &(0x7f0000000080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8)
r4 = accept4$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14, 0x800)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000140)={'wlan0\x00'})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r3)
sendmsg$NL80211_CMD_GET_WOWLAN(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, r5, 0x100, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x53}, @void, @val={0xc, 0x99, {0x1f6, 0x69}}}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x48840)
preadv2(r0, &(0x7f0000000380)=[{&(0x7f00000002c0)=""/127, 0x7f}, {&(0x7f0000000340)=""/47, 0x2f}], 0x2, 0x4, 0x0, 0x2)
r6 = open_tree(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x8000)
sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r6, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x70, 0x0, 0x2, 0x70bd2b, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x70}, 0x1, 0x0, 0x0, 0x2000000}, 0x18814)
openat$incfs(r6, &(0x7f0000000540)='.log\x00', 0x40000, 0x184)
getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f0000000580)=""/81, &(0x7f0000000600)=0x51)
r7 = creat(&(0x7f0000000640)='./file0\x00', 0x7)
r8 = syz_open_dev$vcsu(&(0x7f0000000700), 0xffffffffffffffff, 0x545000)
fsconfig$FSCONFIG_SET_PATH_EMPTY(r7, 0x4, &(0x7f0000000680)='netdevsim\x00', &(0x7f00000006c0)='./file0\x00', r8)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000740)={{0x1, 0x1, 0x18, <r9=>r2}, './file0\x00'})
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r9, 0x40485404, &(0x7f0000000780)={{0x2, 0x2, 0xf54c, 0x0, 0x101}, 0x3, 0x8000})
openat$incfs(r2, &(0x7f0000000800)='.pending_reads\x00', 0x2040, 0x42)

13:05:52 executing program 2:
r0 = fspick(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x1)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>r0, @out_args}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x2105}}, './file0\x00'})
r2 = syz_mount_image$msdos(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000200)="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", 0xfc, 0x7fffffff}], 0x2002400, &(0x7f0000000340)={[{@nodots}], [{@fowner_lt={'fowner<', 0xee01}}, {@dont_hash}]})
ioctl$BTRFS_IOC_DEFRAG_RANGE(r2, 0x40309410, &(0x7f0000000380)={0x100, 0xa8, 0x3, 0x1000, 0x3, [0x1, 0x2, 0x7ff, 0x3ff]})
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f00000003c0)={{0x1, 0x1, 0x18, <r4=>r3, {0x7ff}}, './file0\x00'})
pipe2(&(0x7f0000000400)={<r5=>0xffffffffffffffff}, 0x4800)
newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, <r6=>0x0, <r7=>0x0}, 0x2000)
fchownat(r5, &(0x7f0000000440)='./file0\x00', r6, 0xffffffffffffffff, 0x400)
clock_gettime(0x0, &(0x7f0000000700)={<r8=>0x0, <r9=>0x0})
futimesat(r4, &(0x7f00000006c0)='./file0\x00', &(0x7f0000000740)={{r8, r9/1000+60000}})
chown(&(0x7f0000000780)='./file0\x00', r6, r7)
r10 = syz_open_dev$hiddev(&(0x7f00000007c0), 0x2, 0x80)
ioctl$EXT4_IOC_GROUP_EXTEND(r10, 0x40086607, &(0x7f0000000800)=0x9)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000900)={'ip_vti0\x00', &(0x7f0000000840)={'erspan0\x00', <r11=>0x0, 0x7800, 0x700, 0x0, 0x9, {{0x22, 0x4, 0x3, 0x37, 0x88, 0x65, 0x0, 0x7, 0x2f, 0x0, @loopback, @loopback, {[@noop, @ssrr={0x89, 0x1b, 0xa4, [@multicast1, @broadcast, @local, @broadcast, @empty, @private=0xa010100]}, @timestamp_addr={0x44, 0x4, 0xe, 0x1, 0x2}, @lsrr={0x83, 0xb, 0x79, [@remote, @private=0xa010102]}, @ssrr={0x89, 0xb, 0x6b, [@multicast1, @dev={0xac, 0x14, 0x14, 0x38}]}, @cipso={0x86, 0x3d, 0x3, [{0x6, 0x2}, {0x1, 0xd, "9dae4dc979adae093b070e"}, {0x5, 0x5, "18b549"}, {0x5, 0x4, "47bb"}, {0x0, 0xb, "703f69e5533d87c0e7"}, {0x7, 0x4, "29fd"}, {0x2, 0x10, "c622374507aaf07c69fc2d131187"}]}]}}}}})
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000940)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x57, r11})
r12 = openat$cgroup_ro(r0, &(0x7f0000000980)='freezer.self_freezing\x00', 0x0, 0x0)
ioctl$HIDIOCGDEVINFO(r12, 0x801c4803, &(0x7f00000009c0)=""/164)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)

13:05:52 executing program 5:
r0 = getpgrp(0xffffffffffffffff)
r1 = perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000000)=0x4000)
perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x5, 0x5, 0x2, 0x9f, 0x0, 0x2, 0x4, 0x8, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000000), 0x2}, 0x40000, 0xdc3, 0x20, 0x6, 0x10000, 0x6, 0x5, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x3, r2, 0x1)

13:05:52 executing program 7:
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x800, 0x0)
pwritev(r0, 0x0, 0x0, 0x0, 0x0)

13:05:52 executing program 3:
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, "7bf0ff581ec66b07"}}}}, 0x0)
syz_emit_ethernet(0x32, &(0x7f0000000040)={@link_local, @broadcast, @void, {@llc_tr={0x11, {@llc={0x1, 0xf0, "94", "ed0ecc97280524d6d5ce49c8be044ec5b98a3d0e25b5a69d63b80255ae0ce5a09a"}}}}}, &(0x7f0000000080)={0x0, 0x1, [0x12d, 0x342, 0x973, 0xa78]})

13:05:52 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000500000000f000000000000000200000006000000000008000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000008000000018000000c1e9", 0x62, 0x400}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000013b00))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
sendmmsg$unix(r0, &(0x7f0000003900)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000003640)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x0)
sendto(r0, &(0x7f0000000040)="dd62f760a7ea56da76724f1d9f471054b042ba0df417a718734286bc3a5b73f4bc42fc", 0x23, 0x4800, 0x0, 0x0)

13:05:52 executing program 1:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip_mr_vif\x00')
r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x43, 0x0)
ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000080)=ANY=[@ANYBLOB="0400000000000000050000000000000002000000020000000500000000000000ac0000000000000004000000000000000100000000000000000000000000000000000000000000000e000000000000000000000000000000000000000000005000000000000000000100000000000000000000000000000000000000000000000200000000000000000000000000000006000000000000003a00000000000000050000000000000000000000000000000000000000000000890b0000000000000000000000000000084000000000000006000000000000003f000000000000000000000000000000000000000000000004000000000000000000000000000000ff0f0000000000000100000000000000ffffff7f0000000000000000000000000000000000000000000100"/312])
r2 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0), 0x104901, 0x0)
getdents(r2, &(0x7f0000000500)=""/4096, 0x1000)
pread64(r0, &(0x7f0000000440)=""/167, 0xa7, 0x0)

[  138.369862] audit: type=1400 audit(1756731952.243:8): avc:  denied  { open } for  pid=3919 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[  138.370658] loop6: detected capacity change from 0 to 16
[  138.383027] loop2: detected capacity change from 0 to 264192
[  138.386880] audit: type=1400 audit(1756731952.243:9): avc:  denied  { kernel } for  pid=3919 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
13:05:52 executing program 1:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x5, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000180)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f0000003900)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000800}}, {{&(0x7f0000003640)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x4008480)
close_range(r1, r0, 0x0)
close(r0)

[  138.401081] audit: type=1400 audit(1756731952.260:10): avc:  denied  { write } for  pid=3919 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[  138.425324] EXT4-fs (loop6): Couldn't mount because of unsupported optional features (801)
13:05:52 executing program 0:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x13)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180))
ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000100)={0xfffeffff, 0x0, 0x0, 0x0, 0x0, "f1210b16ad94e37ec2aab08ecc82258476310a"})
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x81)
writev(r0, &(0x7f0000000140)=[{&(0x7f00000004c0)="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", 0x33b}], 0x1)

13:05:52 executing program 4:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x80000)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r2 = dup(r1)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0)
connect$bt_sco(r3, &(0x7f0000000080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8)
r4 = accept4$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14, 0x800)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000140)={'wlan0\x00'})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r3)
sendmsg$NL80211_CMD_GET_WOWLAN(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, r5, 0x100, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x53}, @void, @val={0xc, 0x99, {0x1f6, 0x69}}}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x48840)
preadv2(r0, &(0x7f0000000380)=[{&(0x7f00000002c0)=""/127, 0x7f}, {&(0x7f0000000340)=""/47, 0x2f}], 0x2, 0x4, 0x0, 0x2)
r6 = open_tree(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x8000)
sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r6, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x70, 0x0, 0x2, 0x70bd2b, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x70}, 0x1, 0x0, 0x0, 0x2000000}, 0x18814)
openat$incfs(r6, &(0x7f0000000540)='.log\x00', 0x40000, 0x184)
getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f0000000580)=""/81, &(0x7f0000000600)=0x51)
r7 = creat(&(0x7f0000000640)='./file0\x00', 0x7)
r8 = syz_open_dev$vcsu(&(0x7f0000000700), 0xffffffffffffffff, 0x545000)
fsconfig$FSCONFIG_SET_PATH_EMPTY(r7, 0x4, &(0x7f0000000680)='netdevsim\x00', &(0x7f00000006c0)='./file0\x00', r8)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000740)={{0x1, 0x1, 0x18, <r9=>r2}, './file0\x00'})
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r9, 0x40485404, &(0x7f0000000780)={{0x2, 0x2, 0xf54c, 0x0, 0x101}, 0x3, 0x8000})
openat$incfs(r2, &(0x7f0000000800)='.pending_reads\x00', 0x2040, 0x42)

13:05:52 executing program 7:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x14}, 0x1000}, 0x0, 0x2, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x94, 0x4, 0x2, 0x6, 0x0, 0x0, 0x80, 0xa, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

[  138.478735] loop6: detected capacity change from 0 to 16
13:05:52 executing program 2:
r0 = fspick(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x1)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>r0, @out_args}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x2105}}, './file0\x00'})
r2 = syz_mount_image$msdos(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000200)="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", 0xfc, 0x7fffffff}], 0x2002400, &(0x7f0000000340)={[{@nodots}], [{@fowner_lt={'fowner<', 0xee01}}, {@dont_hash}]})
ioctl$BTRFS_IOC_DEFRAG_RANGE(r2, 0x40309410, &(0x7f0000000380)={0x100, 0xa8, 0x3, 0x1000, 0x3, [0x1, 0x2, 0x7ff, 0x3ff]})
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f00000003c0)={{0x1, 0x1, 0x18, <r4=>r3, {0x7ff}}, './file0\x00'})
pipe2(&(0x7f0000000400)={<r5=>0xffffffffffffffff}, 0x4800)
newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, <r6=>0x0, <r7=>0x0}, 0x2000)
fchownat(r5, &(0x7f0000000440)='./file0\x00', r6, 0xffffffffffffffff, 0x400)
clock_gettime(0x0, &(0x7f0000000700)={<r8=>0x0, <r9=>0x0})
futimesat(r4, &(0x7f00000006c0)='./file0\x00', &(0x7f0000000740)={{r8, r9/1000+60000}})
chown(&(0x7f0000000780)='./file0\x00', r6, r7)
r10 = syz_open_dev$hiddev(&(0x7f00000007c0), 0x2, 0x80)
ioctl$EXT4_IOC_GROUP_EXTEND(r10, 0x40086607, &(0x7f0000000800)=0x9)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000900)={'ip_vti0\x00', &(0x7f0000000840)={'erspan0\x00', <r11=>0x0, 0x7800, 0x700, 0x0, 0x9, {{0x22, 0x4, 0x3, 0x37, 0x88, 0x65, 0x0, 0x7, 0x2f, 0x0, @loopback, @loopback, {[@noop, @ssrr={0x89, 0x1b, 0xa4, [@multicast1, @broadcast, @local, @broadcast, @empty, @private=0xa010100]}, @timestamp_addr={0x44, 0x4, 0xe, 0x1, 0x2}, @lsrr={0x83, 0xb, 0x79, [@remote, @private=0xa010102]}, @ssrr={0x89, 0xb, 0x6b, [@multicast1, @dev={0xac, 0x14, 0x14, 0x38}]}, @cipso={0x86, 0x3d, 0x3, [{0x6, 0x2}, {0x1, 0xd, "9dae4dc979adae093b070e"}, {0x5, 0x5, "18b549"}, {0x5, 0x4, "47bb"}, {0x0, 0xb, "703f69e5533d87c0e7"}, {0x7, 0x4, "29fd"}, {0x2, 0x10, "c622374507aaf07c69fc2d131187"}]}]}}}}})
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000940)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x57, r11})
r12 = openat$cgroup_ro(r0, &(0x7f0000000980)='freezer.self_freezing\x00', 0x0, 0x0)
ioctl$HIDIOCGDEVINFO(r12, 0x801c4803, &(0x7f00000009c0)=""/164)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)

[  138.491129] EXT4-fs (loop6): Couldn't mount because of unsupported optional features (801)
13:05:52 executing program 5:
fsmount(0xffffffffffffffff, 0x0, 0x0)
open_tree(0xffffffffffffffff, 0x0, 0x8000)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000000080)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000000340)="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", 0x13e, 0x8c60}], 0x0, &(0x7f00000000c0))

13:05:52 executing program 6:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x16, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e1f4655f000000000000000001000000000000000b0000000002000028020000028401001b0000000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e35383633343136333700"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000bdcefad9b4924007bb7e3623d7c96baa010000000c00000000000000e1f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000100000000000000000000000000000000000000000000003900000000000000", 0x40, 0x540}, {&(0x7f0000010300)="0000000000000000000000000000000000000000010400"/32, 0x20, 0x640}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000010500)="ffff000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0100ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000e1f4655fe1f4655fe1f4655f00"/8224, 0x2020, 0x2000}, {&(0x7f0000012600)="ed41000000100000e1f4655fe2f4655fe2f4655f00000000000004000800000000000000050000000800"/64, 0x40, 0x4200}, {&(0x7f0000012700)="20000000d4c49a2ed4c49a2e00000000e1f4655f00"/32, 0x20, 0x4280}, {&(0x7f0000012800)="c041000000300000e1f4655fe1f4655fe1f4655f0000000000000200180000000000000000000000090000000a0000000b00"/64, 0x40, 0x5400}, {&(0x7f0000012900)="20000000000000000000000000000000e1f4655f000000000000000000000000000002ea00"/64, 0x40, 0x5480}, {&(0x7f0000012a00)="ed4100003c000000e2f4655fe2f4655fe2f4655f0000000000000200000000000000001003000000020000000d0000001000050166696c65300000000e0000002800050766696c653100000000000000000000000000000000000000000000000000000048c5e5fc00000000000000000000000000000000000000000000000020000000d4c49a2ed4c49a2ed4c49a2ee2f4655fd4c49a2e0000000000000000000002ea04070000000000000000000000000000646174610000000000000000", 0xc0, 0x5600}, {&(0x7f0000012b00)="ed8100001a040000e2f4655fe2f4655fe2f4655f00000000000001000800000000000000010000000c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b6a4ff5400000000000000000000000000000000000000000000000020000000d4c49a2ed4c49a2ed4c49a2ee2f4655fd4c49a2e0000000000000000", 0xa0, 0x5800}, {&(0x7f0000012c00)="ffa1000026000000e2f4655fe2f4655fe2f4655f00000000000001000000000000000000010000002f746d702f73797a2d696d61676567656e3538363334313633372f66696c65302f66696c6530000000000000000000000000000000000000000000005960499000000000000000000000000000000000000000000000000020000000d4c49a2ed4c49a2ed4c49a2ee2f4655fd4c49a2e0000000000000000", 0xa0, 0x5a00}, {&(0x7f0000012d00)="ed8100000a000000e2f4655fe2f4655fe2f4655f000000000000010000000000000000100100000073797a6b616c6c6572730000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fd265a5700000000000000000000000000000000000000000000000020000000d4c49a2ed4c49a2ed4c49a2ee2f4655fd4c49a2e0000000000000000000002ea040700000000000000000000000000006461746106015401000000000600000000000000786174747231000006014c0100000000060000000000000078617474723200"/256, 0x100, 0x5c00}, {&(0x7f0000012e00)="0000000000000000000000000000000078617474723200007861747472310000ed81000028230000e2f4655fe2f4655fe2f4655f00000000000002001800000000000000010000000d0000000e0000000f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e970470900000000000000000000000000000000000000000000000020000000d4c49a2ed4c49a2ed4c49a2ee2f4655fd4c49a2e0000000000000000", 0xc0, 0x5de0}, {&(0x7f0000012f00)="ed81000064000000e2f4655fe2f4655fe2f4655f000000000000010000000000000000100100000073797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c979cb91e00000000000000000000000000000000000000000000000020000000d4c49a2ed4c49a2ed4c49a2ee2f4655fd4c49a2e0000000000000000000002ea04073401000000002800000000000000646174610000000000000000", 0xc0, 0x6000}, {&(0x7f0000013000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lersyzkallersyzkallersyzkallersyzkallers', 0x40, 0x61c0}, {&(0x7f0000013100)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531000000100000001000050166696c6532000000100000001000050166696c653300000011000000940f090166696c652e636f6c64000000", 0x80, 0x8000}, {&(0x7f0000013200)="0b0000000c0001022e000000020000000c0002022e2e000000000000e80f0000", 0x20, 0x9000}, {&(0x7f0000013300)="00000000001000"/32, 0x20, 0xa000}, {&(0x7f0000013400)="00000000001000"/32, 0x20, 0xb000}, {&(0x7f0000013500)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0xc000}], 0x0, &(0x7f0000013a00)=ANY=[@ANYBLOB="e7"])

[  138.592334] loop5: detected capacity change from 0 to 140
13:05:52 executing program 4:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x80000)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r2 = dup(r1)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0)
connect$bt_sco(r3, &(0x7f0000000080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8)
r4 = accept4$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14, 0x800)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000140)={'wlan0\x00'})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r3)
sendmsg$NL80211_CMD_GET_WOWLAN(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, r5, 0x100, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x53}, @void, @val={0xc, 0x99, {0x1f6, 0x69}}}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x48840)
preadv2(r0, &(0x7f0000000380)=[{&(0x7f00000002c0)=""/127, 0x7f}, {&(0x7f0000000340)=""/47, 0x2f}], 0x2, 0x4, 0x0, 0x2)
r6 = open_tree(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x8000)
sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r6, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x70, 0x0, 0x2, 0x70bd2b, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x70}, 0x1, 0x0, 0x0, 0x2000000}, 0x18814)
openat$incfs(r6, &(0x7f0000000540)='.log\x00', 0x40000, 0x184)
getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f0000000580)=""/81, &(0x7f0000000600)=0x51)
r7 = creat(&(0x7f0000000640)='./file0\x00', 0x7)
r8 = syz_open_dev$vcsu(&(0x7f0000000700), 0xffffffffffffffff, 0x545000)
fsconfig$FSCONFIG_SET_PATH_EMPTY(r7, 0x4, &(0x7f0000000680)='netdevsim\x00', &(0x7f00000006c0)='./file0\x00', r8)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000740)={{0x1, 0x1, 0x18, <r9=>r2}, './file0\x00'})
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r9, 0x40485404, &(0x7f0000000780)={{0x2, 0x2, 0xf54c, 0x0, 0x101}, 0x3, 0x8000})
openat$incfs(r2, &(0x7f0000000800)='.pending_reads\x00', 0x2040, 0x42)

13:05:52 executing program 7:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
creat(&(0x7f0000000300)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10060, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00')
r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x101000, 0x0)
write$binfmt_script(r2, &(0x7f0000000240)={'#! ', './file0', [{0x20, '9p\x00'}, {0x20, '-,'}], 0xa, "56b6296e5241b3e5c268f884afac1a03fecce803ae339c40fc2629339c4161ed24fdda1441a9fbadcb7a1bb30201cedebb06a4f1382b03e2762e77bac0f3b87b1fd50c2ccf2379de60245703174fb40c3d9b607f3e8ff6059081ed55249ccae25e3f1c0c26635f2dba63e78699b8cb5b43399152a8365e37c293e318a796a9"}, 0x91)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup2(r3, r1)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd6rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="2c0014193139e260f4ec5969adc09f8630ed5369104a3375f6fb3de6514732730fa4a0cd0829529e98fec0d9bc2c9c8f90203ee754ad1ccc77ec0baf7232f2d33367b19292dcc2dcdeb3760feb1b735a8ff035d47b3d35701ece81cff540cf8d7a3c722e4fe6a1f9c5a2deb494fecece8d033c27c6000000"])

[  138.601293] loop2: detected capacity change from 0 to 264192
[  138.614153] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem
[  138.625145] loop6: detected capacity change from 0 to 512
[  138.629987] EXT4-fs error (device loop5): __ext4_fill_super:5510: inode #2: comm syz-executor.5: iget: bad extended attribute block 3442517925
[  138.633274] ext4: Unknown parameter 'ç'
[  138.641179] EXT4-fs (loop5): get root inode failed
[  138.641617] EXT4-fs (loop5): mount failed
[  138.646779] loop6: detected capacity change from 0 to 512
[  138.651485] ext4: Unknown parameter 'ç'
[  138.688941] loop5: detected capacity change from 0 to 140
[  138.693539] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem
[  138.701636] EXT4-fs error (device loop5): __ext4_fill_super:5510: inode #2: comm syz-executor.5: iget: bad extended attribute block 3442517925
[  138.704614] kmemleak: Found object by alias at 0x607f1a63e764
[  138.704639] CPU: 1 UID: 0 PID: 3954 Comm: syz-executor.2 Tainted: G        W           6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) 
[  138.704671] Tainted: [W]=WARN
[  138.704678] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  138.704690] Call Trace:
[  138.704697]  <TASK>
[  138.704705]  dump_stack_lvl+0xca/0x120
[  138.704746]  __lookup_object+0x94/0xb0
[  138.704777]  delete_object_full+0x27/0x70
[  138.704808]  free_percpu+0x30/0x1160
[  138.704839]  ? arch_uprobe_clear_state+0x16/0x140
[  138.704877]  futex_hash_free+0x38/0xc0
[  138.704903]  mmput+0x2d3/0x390
[  138.704938]  do_exit+0x79d/0x2970
[  138.704964]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  138.704990]  ? zap_other_threads+0x2b9/0x3a0
[  138.705021]  ? __pfx_do_exit+0x10/0x10
[  138.705046]  ? do_group_exit+0x1c3/0x2a0
[  138.705075]  ? _raw_spin_unlock_irq+0x23/0x40
[  138.705117]  do_group_exit+0xd3/0x2a0
[  138.705146]  __x64_sys_exit_group+0x3e/0x50
[  138.705173]  x64_sys_call+0x18c5/0x18d0
[  138.705202]  do_syscall_64+0xbf/0x360
[  138.705225]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  138.705248] RIP: 0033:0x7fa92c654b19
[  138.705266] Code: Unable to access opcode bytes at 0x7fa92c654aef.
[  138.705277] RSP: 002b:00007fff6094aa88 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[  138.705298] RAX: ffffffffffffffda RBX: 000000000000001e RCX: 00007fa92c654b19
[  138.705311] RDX: 00007fa92c60772b RSI: ffffffffffffffbc RDI: 0000000000000000
[  138.705325] RBP: 0000000000000000 R08: 0000001b2d12a264 R09: 0000000000000000
[  138.705338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  138.705350] R13: 0000000000000000 R14: 0000000000000001 R15: 00007fff6094ab70
[  138.705382]  </TASK>
[  138.705389] kmemleak: Object (percpu) 0x607f1a63e760 (size 16):
[  138.705402] kmemleak:   comm "kworker/u9:4", pid 3965, jiffies 4294805341
[  138.705414] kmemleak:   min_count = 1
[  138.705422] kmemleak:   count = 0
[  138.705428] kmemleak:   flags = 0x21
[  138.705435] kmemleak:   checksum = 0
[  138.705442] kmemleak:   backtrace:
[  138.705448]  pcpu_alloc_noprof+0x87a/0x1170
[  138.705477]  __percpu_counter_init_many+0x44/0x360
[  138.705502]  mm_init+0xcac/0x1170
[  138.705517]  mm_alloc+0xa0/0xd0
[  138.705533]  alloc_bprm+0x2e3/0x6e0
[  138.705549]  kernel_execve+0xb0/0x3d0
[  138.705567]  call_usermodehelper_exec_async+0x25f/0x4e0
[  138.705596]  ret_from_fork+0x34b/0x430
[  138.705627]  ret_from_fork_asm+0x1a/0x30
[  138.707073] EXT4-fs (loop5): get root inode failed
[  138.726860] EXT4-fs (loop5): mount failed
[  138.742943] 9pnet: Could not find request transport: fd6rfdno=0x0000000000000006
[  138.841041] 9pnet: Could not find request transport: fd6rfdno=0x0000000000000006
13:06:02 executing program 7:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
creat(&(0x7f0000000300)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10060, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00')
r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x101000, 0x0)
write$binfmt_script(r2, &(0x7f0000000240)={'#! ', './file0', [{0x20, '9p\x00'}, {0x20, '-,'}], 0xa, "56b6296e5241b3e5c268f884afac1a03fecce803ae339c40fc2629339c4161ed24fdda1441a9fbadcb7a1bb30201cedebb06a4f1382b03e2762e77bac0f3b87b1fd50c2ccf2379de60245703174fb40c3d9b607f3e8ff6059081ed55249ccae25e3f1c0c26635f2dba63e78699b8cb5b43399152a8365e37c293e318a796a9"}, 0x91)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup2(r3, r1)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd6rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="2c0014193139e260f4ec5969adc09f8630ed5369104a3375f6fb3de6514732730fa4a0cd0829529e98fec0d9bc2c9c8f90203ee754ad1ccc77ec0baf7232f2d33367b19292dcc2dcdeb3760feb1b735a8ff035d47b3d35701ece81cff540cf8d7a3c722e4fe6a1f9c5a2deb494fecece8d033c27c6000000"])

13:06:02 executing program 5:
fsmount(0xffffffffffffffff, 0x0, 0x0)
open_tree(0xffffffffffffffff, 0x0, 0x8000)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000000080)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000000340)="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", 0x13e, 0x8c60}], 0x0, &(0x7f00000000c0))

13:06:02 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
creat(&(0x7f0000000300)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10060, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00')
r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x101000, 0x0)
write$binfmt_script(r2, &(0x7f0000000240)={'#! ', './file0', [{0x20, '9p\x00'}, {0x20, '-,'}], 0xa, "56b6296e5241b3e5c268f884afac1a03fecce803ae339c40fc2629339c4161ed24fdda1441a9fbadcb7a1bb30201cedebb06a4f1382b03e2762e77bac0f3b87b1fd50c2ccf2379de60245703174fb40c3d9b607f3e8ff6059081ed55249ccae25e3f1c0c26635f2dba63e78699b8cb5b43399152a8365e37c293e318a796a9"}, 0x91)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup2(r3, r1)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd6rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="2c0014193139e260f4ec5969adc09f8630ed5369104a3375f6fb3de6514732730fa4a0cd0829529e98fec0d9bc2c9c8f90203ee754ad1ccc77ec0baf7232f2d33367b19292dcc2dcdeb3760feb1b735a8ff035d47b3d35701ece81cff540cf8d7a3c722e4fe6a1f9c5a2deb494fecece8d033c27c6000000"])

13:06:02 executing program 3:
r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x6, 0x12, r0, 0x0)
mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000)
r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x600000, 0x0)
r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, r2)
mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000)
munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, <r5=>0x0}, &(0x7f0000008600)=0xc)
setgroups(0x1, &(0x7f0000000340)=[r5])
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000000)={0x0, <r7=>0x0}, &(0x7f0000000040)=0x5)
setuid(r7)
write$P9_RSTATu(r1, &(0x7f0000000100)={0x5e, 0x7d, 0x1, {{0x0, 0x40, 0x0, 0xae1, {0x2, 0x1, 0x4}, 0x30810000, 0xf00, 0x7891024, 0x4, 0x3, ']}\'', 0x4, '-{&(', 0x4, '[7(&', 0x2, '\'x'}, 0x9, '/dev/sr0\x00', r3, r5, r7}}, 0x5e)

13:06:02 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe2(0x0, 0x0)
io_submit(0x0, 0x0, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
dup2(r0, r1)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000180)="7ecd1910ac64870b652bbd4eadd9a5c3c682530129a348a8b9e04cb4f8311bb649be7e393e764499566c6a6f9964daeac7b0007aae0d95c8dab375beb9f7ce0a53110ad30997bd7bf193440bdd7b9df426c6d4d4fe554a5d626013c550deb80f8441405cf99d7e835d56bf3f66c16c0069c4f2cb154dce658bbc6f12fcec1125d3ec221754782ac50a48e216880ca4d16f52709f526511caad208d5b7be3dbcbba94d4ff58e863df1ef8148b33fc71e506f879e7a00825c8c7059c3f165f14c0ae7c9f018ceec162419e276e206b46abe2df1ce64ccae88cd263f9792cd820e216cb5d3fe220cad2e170fce80a6324e8613d62091322bb71363008111ffbec3d")

13:06:02 executing program 6:
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d0020002000200020002000200020002000200020002000000000000000004f0200000000024f252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000002880)='\"', 0x1, 0xf000}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='cruFt,\x00'])

13:06:02 executing program 4:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x80000)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r2 = dup(r1)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0)
connect$bt_sco(r3, &(0x7f0000000080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8)
r4 = accept4$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14, 0x800)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000140)={'wlan0\x00'})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r3)
sendmsg$NL80211_CMD_GET_WOWLAN(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, r5, 0x100, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x53}, @void, @val={0xc, 0x99, {0x1f6, 0x69}}}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x48840)
preadv2(r0, &(0x7f0000000380)=[{&(0x7f00000002c0)=""/127, 0x7f}, {&(0x7f0000000340)=""/47, 0x2f}], 0x2, 0x4, 0x0, 0x2)
r6 = open_tree(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x8000)
sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r6, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x70, 0x0, 0x2, 0x70bd2b, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x70}, 0x1, 0x0, 0x0, 0x2000000}, 0x18814)
openat$incfs(r6, &(0x7f0000000540)='.log\x00', 0x40000, 0x184)
getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f0000000580)=""/81, &(0x7f0000000600)=0x51)
r7 = creat(&(0x7f0000000640)='./file0\x00', 0x7)
r8 = syz_open_dev$vcsu(&(0x7f0000000700), 0xffffffffffffffff, 0x545000)
fsconfig$FSCONFIG_SET_PATH_EMPTY(r7, 0x4, &(0x7f0000000680)='netdevsim\x00', &(0x7f00000006c0)='./file0\x00', r8)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000740)={{0x1, 0x1, 0x18, <r9=>r2}, './file0\x00'})
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r9, 0x40485404, &(0x7f0000000780)={{0x2, 0x2, 0xf54c, 0x0, 0x101}, 0x3, 0x8000})

13:06:02 executing program 2:
r0 = fspick(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x1)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>r0, @out_args}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x2105}}, './file0\x00'})
r2 = syz_mount_image$msdos(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000200)="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", 0xfc, 0x7fffffff}], 0x2002400, &(0x7f0000000340)={[{@nodots}], [{@fowner_lt={'fowner<', 0xee01}}, {@dont_hash}]})
ioctl$BTRFS_IOC_DEFRAG_RANGE(r2, 0x40309410, &(0x7f0000000380)={0x100, 0xa8, 0x3, 0x1000, 0x3, [0x1, 0x2, 0x7ff, 0x3ff]})
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f00000003c0)={{0x1, 0x1, 0x18, <r4=>r3, {0x7ff}}, './file0\x00'})
pipe2(&(0x7f0000000400)={<r5=>0xffffffffffffffff}, 0x4800)
newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, <r6=>0x0, <r7=>0x0}, 0x2000)
fchownat(r5, &(0x7f0000000440)='./file0\x00', r6, 0xffffffffffffffff, 0x400)
clock_gettime(0x0, &(0x7f0000000700)={<r8=>0x0, <r9=>0x0})
futimesat(r4, &(0x7f00000006c0)='./file0\x00', &(0x7f0000000740)={{r8, r9/1000+60000}})
chown(&(0x7f0000000780)='./file0\x00', r6, r7)
r10 = syz_open_dev$hiddev(&(0x7f00000007c0), 0x2, 0x80)
ioctl$EXT4_IOC_GROUP_EXTEND(r10, 0x40086607, &(0x7f0000000800)=0x9)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000900)={'ip_vti0\x00', &(0x7f0000000840)={'erspan0\x00', <r11=>0x0, 0x7800, 0x700, 0x0, 0x9, {{0x22, 0x4, 0x3, 0x37, 0x88, 0x65, 0x0, 0x7, 0x2f, 0x0, @loopback, @loopback, {[@noop, @ssrr={0x89, 0x1b, 0xa4, [@multicast1, @broadcast, @local, @broadcast, @empty, @private=0xa010100]}, @timestamp_addr={0x44, 0x4, 0xe, 0x1, 0x2}, @lsrr={0x83, 0xb, 0x79, [@remote, @private=0xa010102]}, @ssrr={0x89, 0xb, 0x6b, [@multicast1, @dev={0xac, 0x14, 0x14, 0x38}]}, @cipso={0x86, 0x3d, 0x3, [{0x6, 0x2}, {0x1, 0xd, "9dae4dc979adae093b070e"}, {0x5, 0x5, "18b549"}, {0x5, 0x4, "47bb"}, {0x0, 0xb, "703f69e5533d87c0e7"}, {0x7, 0x4, "29fd"}, {0x2, 0x10, "c622374507aaf07c69fc2d131187"}]}]}}}}})
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000940)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x57, r11})
r12 = openat$cgroup_ro(r0, &(0x7f0000000980)='freezer.self_freezing\x00', 0x0, 0x0)
ioctl$HIDIOCGDEVINFO(r12, 0x801c4803, &(0x7f00000009c0)=""/164)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)

[  148.772525] loop6: detected capacity change from 0 to 240
[  148.778357] loop2: detected capacity change from 0 to 264192
[  148.791019] iso9660: Unknown parameter 'cruFt'
[  148.814051] loop6: detected capacity change from 0 to 240
[  148.818024] loop5: detected capacity change from 0 to 140
[  148.824062] iso9660: Unknown parameter 'cruFt'
[  148.840622] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem
[  148.848534] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s
[  148.850012] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] 
[  148.851069] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present
[  148.852069] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 02 00 00 02 00
[  148.853214] I/O error, dev sr0, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  148.855097] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  148.856197] I/O error, dev sr0, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  148.857586] Buffer I/O error on dev sr0, logical block 8, async page read
[  148.869160] EXT4-fs error (device loop5): __ext4_fill_super:5510: inode #2: comm syz-executor.5: iget: bad extended attribute block 3442517925
[  148.873778] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  148.874730] I/O error, dev sr0, sector 9 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  148.876036] Buffer I/O error on dev sr0, logical block 9, async page read
[  148.877502] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  148.878410] I/O error, dev sr0, sector 10 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  148.879506] EXT4-fs (loop5): get root inode failed
[  148.879834] Buffer I/O error on dev sr0, logical block 10, async page read
[  148.880525] EXT4-fs (loop5): mount failed
[  148.882768] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  148.883891] I/O error, dev sr0, sector 11 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  148.885229] Buffer I/O error on dev sr0, logical block 11, async page read
[  148.887152] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  148.888024] I/O error, dev sr0, sector 12 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  148.889552] Buffer I/O error on dev sr0, logical block 12, async page read
[  148.891362] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  148.892482] I/O error, dev sr0, sector 13 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  148.893789] Buffer I/O error on dev sr0, logical block 13, async page read
[  148.895294] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  148.896594] I/O error, dev sr0, sector 14 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  148.897917] Buffer I/O error on dev sr0, logical block 14, async page read
[  148.919691] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  148.920703] I/O error, dev sr0, sector 15 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  148.922144] Buffer I/O error on dev sr0, logical block 15, async page read
[  148.937526] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s
[  148.939310] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] 
[  148.940524] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present
[  148.941612] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 02 00
[  148.942860] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  148.944593] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  148.945742] Buffer I/O error on dev sr0, logical block 8, async page read
[  148.947551] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  148.948452] Buffer I/O error on dev sr0, logical block 0, async page read
[  148.949679] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  148.952642] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  148.955352] kmemleak: Found object by alias at 0x607f1a63e764
[  148.955375] CPU: 1 UID: 0 PID: 3983 Comm: syz-executor.2 Tainted: G        W           6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) 
[  148.955407] Tainted: [W]=WARN
[  148.955414] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  148.955426] Call Trace:
[  148.955433]  <TASK>
[  148.955441]  dump_stack_lvl+0xca/0x120
[  148.955482]  __lookup_object+0x94/0xb0
[  148.955512]  delete_object_full+0x27/0x70
[  148.955541]  free_percpu+0x30/0x1160
[  148.955570]  ? arch_uprobe_clear_state+0x16/0x140
[  148.955606]  futex_hash_free+0x38/0xc0
[  148.955631]  mmput+0x2d3/0x390
[  148.955665]  do_exit+0x79d/0x2970
[  148.955694]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  148.955719]  ? __pfx_do_exit+0x10/0x10
[  148.955745]  ? find_held_lock+0x2b/0x80
[  148.955776]  ? get_signal+0x835/0x2340
[  148.955812]  do_group_exit+0xd3/0x2a0
[  148.955839]  get_signal+0x2315/0x2340
[  148.955884]  ? trace_irq_enable.constprop.0+0xc2/0x100
[  148.955914]  ? __pfx_get_signal+0x10/0x10
[  148.955943]  ? __schedule+0xe91/0x3590
[  148.955982]  arch_do_signal_or_restart+0x80/0x790
[  148.956013]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  148.956044]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  148.956067]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  148.956090]  ? __pfx___x64_sys_futex+0x10/0x10
[  148.956120]  ? xfd_validate_state+0x55/0x180
[  148.956158]  exit_to_user_mode_loop+0x8b/0x110
[  148.956181]  do_syscall_64+0x2f7/0x360
[  148.956204]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  148.956225] RIP: 0033:0x7fa92c654b19
[  148.956241] Code: Unable to access opcode bytes at 0x7fa92c654aef.
[  148.956250] RSP: 002b:00007fa929bca218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  148.956269] RAX: 0000000000000001 RBX: 00007fa92c767f68 RCX: 00007fa92c654b19
[  148.956283] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fa92c767f6c
[  148.956295] RBP: 00007fa92c767f60 R08: 000000000000000e R09: 0000000000000000
[  148.956307] R10: 0000000000000006 R11: 0000000000000246 R12: 00007fa92c767f6c
[  148.956320] R13: 00007fff6094a85f R14: 00007fa929bca300 R15: 0000000000022000
[  148.956351]  </TASK>
[  148.956357] kmemleak: Object (percpu) 0x607f1a63e760 (size 16):
[  148.956369] kmemleak:   comm "syz-executor.1", pid 279, jiffies 4294815399
[  148.956381] kmemleak:   min_count = 1
[  148.956388] kmemleak:   count = 0
[  148.956394] kmemleak:   flags = 0x21
[  148.956401] kmemleak:   checksum = 0
[  148.956407] kmemleak:   backtrace:
[  148.956413]  pcpu_alloc_noprof+0x87a/0x1170
[  148.956440]  __percpu_counter_init_many+0x44/0x360
[  148.956464]  mm_init+0xcac/0x1170
[  148.956478]  copy_process+0x3ab7/0x73c0
[  148.956496]  kernel_clone+0xea/0x7f0
[  148.956513]  __do_sys_clone+0xce/0x120
[  148.956531]  do_syscall_64+0xbf/0x360
[  148.956548]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  148.961324] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  148.969323] kmemleak: Found object by alias at 0x607f1a63e768
[  148.969345] CPU: 1 UID: 0 PID: 3985 Comm: syz-executor.4 Tainted: G        W           6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) 
[  148.969376] Tainted: [W]=WARN
[  148.969382] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  148.969393] Call Trace:
[  148.969399]  <TASK>
[  148.969407]  dump_stack_lvl+0xca/0x120
[  148.969441]  __lookup_object+0x94/0xb0
[  148.969468]  delete_object_full+0x27/0x70
[  148.969497]  free_percpu+0x30/0x1160
[  148.969524]  ? arch_uprobe_clear_state+0x16/0x140
[  148.969559]  futex_hash_free+0x38/0xc0
[  148.969588]  mmput+0x2d3/0x390
[  148.969621]  do_exit+0x79d/0x2970
[  148.969645]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  148.969668]  ? zap_other_threads+0x2b9/0x3a0
[  148.969698]  ? __pfx_do_exit+0x10/0x10
[  148.969721]  ? do_group_exit+0x1c3/0x2a0
[  148.969748]  ? _raw_spin_unlock_irq+0x23/0x40
[  148.969780]  do_group_exit+0xd3/0x2a0
[  148.969808]  __x64_sys_exit_group+0x3e/0x50
[  148.969833]  x64_sys_call+0x18c5/0x18d0
[  148.969859]  do_syscall_64+0xbf/0x360
[  148.969880]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  148.969900] RIP: 0033:0x7f35a80acb19
[  148.969915] Code: Unable to access opcode bytes at 0x7f35a80acaef.
[  148.969924] RSP: 002b:00007fffab310248 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[  148.969943] RAX: ffffffffffffffda RBX: 000000000000001e RCX: 00007f35a80acb19
[  148.969957] RDX: 00007f35a805f72b RSI: ffffffffffffffbc RDI: 0000000000000000
[  148.969969] RBP: 0000000000000000 R08: 0000001b2d0244b4 R09: 0000000000000000
[  148.969982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  148.969994] R13: 0000000000000000 R14: 0000000000000001 R15: 00007fffab310330
[  148.970024]  </TASK>
[  148.970031] kmemleak: Object (percpu) 0x607f1a63e760 (size 16):
[  148.970042] kmemleak:   comm "syz-executor.1", pid 279, jiffies 4294815399
[  148.970054] kmemleak:   min_count = 1
[  148.970061] kmemleak:   count = 0
[  148.970068] kmemleak:   flags = 0x21
[  148.970074] kmemleak:   checksum = 0
[  148.970081] kmemleak:   backtrace:
[  148.970086]  pcpu_alloc_noprof+0x87a/0x1170
[  148.970113]  __percpu_counter_init_many+0x44/0x360
[  148.970135]  mm_init+0xcac/0x1170
[  148.970149]  copy_process+0x3ab7/0x73c0
[  148.970167]  kernel_clone+0xea/0x7f0
[  148.970185]  __do_sys_clone+0xce/0x120
[  148.970203]  do_syscall_64+0xbf/0x360
[  148.970219]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  149.042333] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  149.044053] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  149.045350] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
13:06:02 executing program 6:
sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000280)={0x20, 0x0, 0x1, 0x0, 0x0, {0x1d}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', <r3=>0x0})
sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000280)={0x20, r1, 0x1, 0x0, 0x0, {0x1d}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'wlan1\x00', <r7=>0x0})
sendmsg$ETHTOOL_MSG_PAUSE_GET(r4, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000001d0000000c00018008000100", @ANYRES32=r7, @ANYBLOB="b0881fdb07ed5dc97e967910c5954f3400d8abc207e27c402946baad5037363e3f4f832a3eb4e2d93a687cbe661ba3dea94d93820018977b7673921ecb63"], 0x20}}, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff)
r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000200)={'wlan1\x00', <r11=>0x0})
sendmsg$ETHTOOL_MSG_PAUSE_GET(r8, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000280)={0x20, r9, 0x1, 0x0, 0x0, {0x1d}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}]}, 0x20}}, 0x0)
sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x160, 0x0, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x160}, 0x1, 0x0, 0x0, 0x4010}, 0x4000)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r12 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCFLSH(r12, 0x4b63, 0x0)

13:06:02 executing program 0:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x80000)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r2 = dup(r1)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0)
connect$bt_sco(r3, &(0x7f0000000080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8)
r4 = accept4$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14, 0x800)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000140)={'wlan0\x00'})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r3)
sendmsg$NL80211_CMD_GET_WOWLAN(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, r5, 0x100, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x53}, @void, @val={0xc, 0x99, {0x1f6, 0x69}}}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x48840)
preadv2(r0, &(0x7f0000000380)=[{&(0x7f00000002c0)=""/127, 0x7f}, {&(0x7f0000000340)=""/47, 0x2f}], 0x2, 0x4, 0x0, 0x2)
r6 = open_tree(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x8000)
sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r6, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x70, 0x0, 0x2, 0x70bd2b, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x70}, 0x1, 0x0, 0x0, 0x2000000}, 0x18814)
openat$incfs(r6, &(0x7f0000000540)='.log\x00', 0x40000, 0x184)
getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f0000000580)=""/81, &(0x7f0000000600)=0x51)
r7 = creat(&(0x7f0000000640)='./file0\x00', 0x7)
r8 = syz_open_dev$vcsu(&(0x7f0000000700), 0xffffffffffffffff, 0x545000)
fsconfig$FSCONFIG_SET_PATH_EMPTY(r7, 0x4, &(0x7f0000000680)='netdevsim\x00', &(0x7f00000006c0)='./file0\x00', r8)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000740)={{0x1, 0x1, 0x18, <r9=>r2}, './file0\x00'})
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r9, 0x40485404, &(0x7f0000000780)={{0x2, 0x2, 0xf54c, 0x0, 0x101}, 0x3, 0x8000})

13:06:02 executing program 4:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x80000)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r2 = dup(r1)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0)
connect$bt_sco(r3, &(0x7f0000000080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8)
r4 = accept4$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14, 0x800)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000140)={'wlan0\x00'})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r3)
sendmsg$NL80211_CMD_GET_WOWLAN(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, r5, 0x100, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x53}, @void, @val={0xc, 0x99, {0x1f6, 0x69}}}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x48840)
preadv2(r0, &(0x7f0000000380)=[{&(0x7f00000002c0)=""/127, 0x7f}, {&(0x7f0000000340)=""/47, 0x2f}], 0x2, 0x4, 0x0, 0x2)
r6 = open_tree(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x8000)
sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r6, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x70, 0x0, 0x2, 0x70bd2b, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x70}, 0x1, 0x0, 0x0, 0x2000000}, 0x18814)
openat$incfs(r6, &(0x7f0000000540)='.log\x00', 0x40000, 0x184)
getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f0000000580)=""/81, &(0x7f0000000600)=0x51)
r7 = creat(&(0x7f0000000640)='./file0\x00', 0x7)
r8 = syz_open_dev$vcsu(&(0x7f0000000700), 0xffffffffffffffff, 0x545000)
fsconfig$FSCONFIG_SET_PATH_EMPTY(r7, 0x4, &(0x7f0000000680)='netdevsim\x00', &(0x7f00000006c0)='./file0\x00', r8)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000740)={{0x1, 0x1, 0x18, r2}, './file0\x00'})

[  149.082585] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  149.092551] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  149.103343] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  149.132680] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  149.137438] 9pnet: Could not find request transport: fd6rfdno=0x0000000000000006
[  149.140393] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  149.141708] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  149.143510] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  149.157342] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  149.163683] 9pnet: Could not find request transport: fd6rfdno=0x0000000000000006
[  149.172742] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  149.176767] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  149.190269] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  149.191208] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  149.218079] kmemleak: Found object by alias at 0x607f1a63e768
[  149.218108] CPU: 1 UID: 0 PID: 4000 Comm: syz-executor.4 Tainted: G        W           6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) 
[  149.218135] Tainted: [W]=WARN
[  149.218141] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  149.218151] Call Trace:
[  149.218158]  <TASK>
[  149.218164]  dump_stack_lvl+0xca/0x120
[  149.218199]  __lookup_object+0x94/0xb0
[  149.218224]  delete_object_full+0x27/0x70
[  149.218249]  free_percpu+0x30/0x1160
[  149.218275]  ? arch_uprobe_clear_state+0x16/0x140
[  149.218305]  futex_hash_free+0x38/0xc0
[  149.218327]  mmput+0x2d3/0x390
[  149.218355]  do_exit+0x79d/0x2970
[  149.218376]  ? signal_wake_up_state+0x85/0x120
[  149.218400]  ? zap_other_threads+0x2b9/0x3a0
[  149.218425]  ? __pfx_do_exit+0x10/0x10
[  149.218444]  ? do_group_exit+0x1c3/0x2a0
[  149.218466]  ? lock_release+0xc8/0x290
[  149.218491]  do_group_exit+0xd3/0x2a0
[  149.218514]  __x64_sys_exit_group+0x3e/0x50
[  149.218535]  x64_sys_call+0x18c5/0x18d0
[  149.218559]  do_syscall_64+0xbf/0x360
[  149.218579]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  149.218597] RIP: 0033:0x7f35a80acb19
[  149.218610] Code: Unable to access opcode bytes at 0x7f35a80acaef.
[  149.218618] RSP: 002b:00007fffab310248 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[  149.218635] RAX: ffffffffffffffda RBX: 000000000000001e RCX: 00007f35a80acb19
[  149.218647] RDX: 00007f35a805f72b RSI: ffffffffffffffbc RDI: 0000000000000000
[  149.218658] RBP: 0000000000000000 R08: 0000001b2d0245e0 R09: 0000000000000000
[  149.218669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  149.218679] R13: 0000000000000000 R14: 0000000000000001 R15: 00007fffab310330
[  149.218702]  </TASK>
[  149.218708] kmemleak: Object (percpu) 0x607f1a63e760 (size 16):
[  149.218719] kmemleak:   comm "syz-executor.1", pid 279, jiffies 4294815399
[  149.218729] kmemleak:   min_count = 1
[  149.218735] kmemleak:   count = 0
[  149.218741] kmemleak:   flags = 0x21
[  149.218747] kmemleak:   checksum = 0
[  149.218752] kmemleak:   backtrace:
[  149.218757]  pcpu_alloc_noprof+0x87a/0x1170
[  149.218781]  __percpu_counter_init_many+0x44/0x360
[  149.218802]  mm_init+0xcac/0x1170
[  149.218815]  copy_process+0x3ab7/0x73c0
[  149.218830]  kernel_clone+0xea/0x7f0
[  149.218845]  __do_sys_clone+0xce/0x120
[  149.218861]  do_syscall_64+0xbf/0x360
[  149.218875]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  149.341049] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s
[  149.342164] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] 
[  149.342909] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present
[  149.343762] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 04 00
[  149.345170] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  149.346441] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  149.351401] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  149.357569] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  149.364361] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  149.370041] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  149.375043] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  149.385920] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  153.903502] BUG: Bad rss-counter state mm:00000000f407942f type:MM_FILEPAGES val:-4 Comm:systemd-udevd Pid:4013
13:06:12 executing program 2:
r0 = fspick(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x1)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>r0, @out_args}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x2105}}, './file0\x00'})
r2 = syz_mount_image$msdos(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000200)="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", 0xfc, 0x7fffffff}], 0x2002400, &(0x7f0000000340)={[{@nodots}], [{@fowner_lt={'fowner<', 0xee01}}, {@dont_hash}]})
ioctl$BTRFS_IOC_DEFRAG_RANGE(r2, 0x40309410, &(0x7f0000000380)={0x100, 0xa8, 0x3, 0x1000, 0x3, [0x1, 0x2, 0x7ff, 0x3ff]})
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f00000003c0)={{0x1, 0x1, 0x18, <r4=>r3, {0x7ff}}, './file0\x00'})
pipe2(&(0x7f0000000400)={<r5=>0xffffffffffffffff}, 0x4800)
newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, <r6=>0x0, <r7=>0x0}, 0x2000)
fchownat(r5, &(0x7f0000000440)='./file0\x00', r6, 0xffffffffffffffff, 0x400)
clock_gettime(0x0, &(0x7f0000000700)={<r8=>0x0, <r9=>0x0})
futimesat(r4, &(0x7f00000006c0)='./file0\x00', &(0x7f0000000740)={{r8, r9/1000+60000}})
chown(&(0x7f0000000780)='./file0\x00', r6, r7)
r10 = syz_open_dev$hiddev(&(0x7f00000007c0), 0x2, 0x80)
ioctl$EXT4_IOC_GROUP_EXTEND(r10, 0x40086607, &(0x7f0000000800)=0x9)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000900)={'ip_vti0\x00', &(0x7f0000000840)={'erspan0\x00', <r11=>0x0, 0x7800, 0x700, 0x0, 0x9, {{0x22, 0x4, 0x3, 0x37, 0x88, 0x65, 0x0, 0x7, 0x2f, 0x0, @loopback, @loopback, {[@noop, @ssrr={0x89, 0x1b, 0xa4, [@multicast1, @broadcast, @local, @broadcast, @empty, @private=0xa010100]}, @timestamp_addr={0x44, 0x4, 0xe, 0x1, 0x2}, @lsrr={0x83, 0xb, 0x79, [@remote, @private=0xa010102]}, @ssrr={0x89, 0xb, 0x6b, [@multicast1, @dev={0xac, 0x14, 0x14, 0x38}]}, @cipso={0x86, 0x3d, 0x3, [{0x6, 0x2}, {0x1, 0xd, "9dae4dc979adae093b070e"}, {0x5, 0x5, "18b549"}, {0x5, 0x4, "47bb"}, {0x0, 0xb, "703f69e5533d87c0e7"}, {0x7, 0x4, "29fd"}, {0x2, 0x10, "c622374507aaf07c69fc2d131187"}]}]}}}}})
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000940)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x57, r11})
r12 = openat$cgroup_ro(r0, &(0x7f0000000980)='freezer.self_freezing\x00', 0x0, 0x0)
ioctl$HIDIOCGDEVINFO(r12, 0x801c4803, &(0x7f00000009c0)=""/164)

13:06:12 executing program 3:
r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x6, 0x12, r0, 0x0)
mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000)
r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x600000, 0x0)
r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, r2)
mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000)
munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, <r5=>0x0}, &(0x7f0000008600)=0xc)
setgroups(0x1, &(0x7f0000000340)=[r5])
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000000)={0x0, <r7=>0x0}, &(0x7f0000000040)=0x5)
setuid(r7)
write$P9_RSTATu(r1, &(0x7f0000000100)={0x5e, 0x7d, 0x1, {{0x0, 0x40, 0x0, 0xae1, {0x2, 0x1, 0x4}, 0x30810000, 0xf00, 0x7891024, 0x4, 0x3, ']}\'', 0x4, '-{&(', 0x4, '[7(&', 0x2, '\'x'}, 0x9, '/dev/sr0\x00', r3, r5, r7}}, 0x5e)

[  159.074380] loop5: detected capacity change from 0 to 140
13:06:12 executing program 6:
sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000280)={0x20, 0x0, 0x1, 0x0, 0x0, {0x1d}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', <r3=>0x0})
sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000280)={0x20, r1, 0x1, 0x0, 0x0, {0x1d}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'wlan1\x00', <r7=>0x0})
sendmsg$ETHTOOL_MSG_PAUSE_GET(r4, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000001d0000000c00018008000100", @ANYRES32=r7, @ANYBLOB="b0881fdb07ed5dc97e967910c5954f3400d8abc207e27c402946baad5037363e3f4f832a3eb4e2d93a687cbe661ba3dea94d93820018977b7673921ecb63"], 0x20}}, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff)
r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000200)={'wlan1\x00', <r11=>0x0})
sendmsg$ETHTOOL_MSG_PAUSE_GET(r8, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000280)={0x20, r9, 0x1, 0x0, 0x0, {0x1d}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}]}, 0x20}}, 0x0)
sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x160, 0x0, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x160}, 0x1, 0x0, 0x0, 0x4010}, 0x4000)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r12 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCFLSH(r12, 0x4b63, 0x0)

13:06:12 executing program 7:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
creat(&(0x7f0000000300)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10060, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00')
r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x101000, 0x0)
write$binfmt_script(r2, &(0x7f0000000240)={'#! ', './file0', [{0x20, '9p\x00'}, {0x20, '-,'}], 0xa, "56b6296e5241b3e5c268f884afac1a03fecce803ae339c40fc2629339c4161ed24fdda1441a9fbadcb7a1bb30201cedebb06a4f1382b03e2762e77bac0f3b87b1fd50c2ccf2379de60245703174fb40c3d9b607f3e8ff6059081ed55249ccae25e3f1c0c26635f2dba63e78699b8cb5b43399152a8365e37c293e318a796a9"}, 0x91)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup2(r3, r1)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd6rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="2c0014193139e260f4ec5969adc09f8630ed5369104a3375f6fb3de6514732730fa4a0cd0829529e98fec0d9bc2c9c8f90203ee754ad1ccc77ec0baf7232f2d33367b19292dcc2dcdeb3760feb1b735a8ff035d47b3d35701ece81cff540cf8d7a3c722e4fe6a1f9c5a2deb494fecece8d033c27c6000000"])

13:06:12 executing program 5:
fsmount(0xffffffffffffffff, 0x0, 0x0)
open_tree(0xffffffffffffffff, 0x0, 0x8000)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000000080)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000000340)="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", 0x13e, 0x8c60}], 0x0, &(0x7f00000000c0))

13:06:12 executing program 0:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x80000)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r2 = dup(r1)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0)
connect$bt_sco(r3, &(0x7f0000000080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8)
r4 = accept4$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14, 0x800)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000140)={'wlan0\x00'})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r3)
sendmsg$NL80211_CMD_GET_WOWLAN(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, r5, 0x100, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x53}, @void, @val={0xc, 0x99, {0x1f6, 0x69}}}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x48840)
preadv2(r0, &(0x7f0000000380)=[{&(0x7f00000002c0)=""/127, 0x7f}, {&(0x7f0000000340)=""/47, 0x2f}], 0x2, 0x4, 0x0, 0x2)
r6 = open_tree(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x8000)
sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r6, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x70, 0x0, 0x2, 0x70bd2b, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x70}, 0x1, 0x0, 0x0, 0x2000000}, 0x18814)
openat$incfs(r6, &(0x7f0000000540)='.log\x00', 0x40000, 0x184)
getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f0000000580)=""/81, &(0x7f0000000600)=0x51)
r7 = creat(&(0x7f0000000640)='./file0\x00', 0x7)
r8 = syz_open_dev$vcsu(&(0x7f0000000700), 0xffffffffffffffff, 0x545000)
fsconfig$FSCONFIG_SET_PATH_EMPTY(r7, 0x4, &(0x7f0000000680)='netdevsim\x00', &(0x7f00000006c0)='./file0\x00', r8)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000740)={{0x1, 0x1, 0x18, <r9=>r2}, './file0\x00'})
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r9, 0x40485404, &(0x7f0000000780)={{0x2, 0x2, 0xf54c, 0x0, 0x101}, 0x3, 0x8000})

13:06:12 executing program 4:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x80000)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r2 = dup(r1)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0)
connect$bt_sco(r3, &(0x7f0000000080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8)
r4 = accept4$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14, 0x800)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000140)={'wlan0\x00'})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r3)
sendmsg$NL80211_CMD_GET_WOWLAN(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, r5, 0x100, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x53}, @void, @val={0xc, 0x99, {0x1f6, 0x69}}}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x48840)
preadv2(r0, &(0x7f0000000380)=[{&(0x7f00000002c0)=""/127, 0x7f}, {&(0x7f0000000340)=""/47, 0x2f}], 0x2, 0x4, 0x0, 0x2)
r6 = open_tree(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x8000)
sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r6, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x70, 0x0, 0x2, 0x70bd2b, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x70}, 0x1, 0x0, 0x0, 0x2000000}, 0x18814)
openat$incfs(r6, &(0x7f0000000540)='.log\x00', 0x40000, 0x184)
getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f0000000580)=""/81, &(0x7f0000000600)=0x51)
r7 = creat(&(0x7f0000000640)='./file0\x00', 0x7)
r8 = syz_open_dev$vcsu(&(0x7f0000000700), 0xffffffffffffffff, 0x545000)
fsconfig$FSCONFIG_SET_PATH_EMPTY(r7, 0x4, &(0x7f0000000680)='netdevsim\x00', &(0x7f00000006c0)='./file0\x00', r8)

13:06:12 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
creat(&(0x7f0000000300)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10060, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00')
r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x101000, 0x0)
write$binfmt_script(r2, &(0x7f0000000240)={'#! ', './file0', [{0x20, '9p\x00'}, {0x20, '-,'}], 0xa, "56b6296e5241b3e5c268f884afac1a03fecce803ae339c40fc2629339c4161ed24fdda1441a9fbadcb7a1bb30201cedebb06a4f1382b03e2762e77bac0f3b87b1fd50c2ccf2379de60245703174fb40c3d9b607f3e8ff6059081ed55249ccae25e3f1c0c26635f2dba63e78699b8cb5b43399152a8365e37c293e318a796a9"}, 0x91)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup2(r3, r1)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd6rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="2c0014193139e260f4ec5969adc09f8630ed5369104a3375f6fb3de6514732730fa4a0cd0829529e98fec0d9bc2c9c8f90203ee754ad1ccc77ec0baf7232f2d33367b19292dcc2dcdeb3760feb1b735a8ff035d47b3d35701ece81cff540cf8d7a3c722e4fe6a1f9c5a2deb494fecece8d033c27c6000000"])

[  159.081724] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem
[  159.090193] EXT4-fs error (device loop5): __ext4_fill_super:5510: inode #2: comm syz-executor.5: iget: bad extended attribute block 3442517925
[  159.093392] EXT4-fs (loop5): get root inode failed
[  159.093832] EXT4-fs (loop5): mount failed
[  159.117392] kmemleak: Found object by alias at 0x607f1a63e768
[  159.117407] CPU: 1 UID: 0 PID: 4023 Comm: syz-executor.4 Tainted: G        W           6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) 
[  159.117425] Tainted: [W]=WARN
[  159.117429] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  159.117437] Call Trace:
[  159.117441]  <TASK>
[  159.117445]  dump_stack_lvl+0xca/0x120
[  159.117475]  __lookup_object+0x94/0xb0
[  159.117493]  delete_object_full+0x27/0x70
[  159.117514]  free_percpu+0x30/0x1160
[  159.117531]  ? arch_uprobe_clear_state+0x16/0x140
[  159.117551]  futex_hash_free+0x38/0xc0
[  159.117566]  mmput+0x2d3/0x390
[  159.117585]  do_exit+0x79d/0x2970
[  159.117599]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  159.117614]  ? zap_other_threads+0x2b9/0x3a0
[  159.117632]  ? __pfx_do_exit+0x10/0x10
[  159.117645]  ? do_group_exit+0x1c3/0x2a0
[  159.117660]  ? _raw_spin_unlock_irq+0x23/0x40
[  159.117679]  do_group_exit+0xd3/0x2a0
[  159.117694]  __x64_sys_exit_group+0x3e/0x50
[  159.117708]  x64_sys_call+0x18c5/0x18d0
[  159.117725]  do_syscall_64+0xbf/0x360
[  159.117738]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  159.117750] RIP: 0033:0x7f35a80acb19
[  159.117759] Code: Unable to access opcode bytes at 0x7f35a80acaef.
[  159.117764] RSP: 002b:00007fffab310248 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[  159.117776] RAX: ffffffffffffffda RBX: 000000000000001e RCX: 00007f35a80acb19
[  159.117784] RDX: 00007f35a805f72b RSI: ffffffffffffffbc RDI: 0000000000000000
[  159.117791] RBP: 0000000000000000 R08: 0000001b2d02452c R09: 0000000000000000
[  159.117799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  159.117806] R13: 0000000000000000 R14: 0000000000000001 R15: 00007fffab310330
[  159.117821]  </TASK>
[  159.117825] kmemleak: Object (percpu) 0x607f1a63e760 (size 16):
[  159.117832] kmemleak:   comm "syz-executor.0", pid 278, jiffies 4294825723
[  159.117840] kmemleak:   min_count = 1
[  159.117844] kmemleak:   count = 0
[  159.117847] kmemleak:   flags = 0x21
[  159.117851] kmemleak:   checksum = 0
[  159.117855] kmemleak:   backtrace:
[  159.117859]  pcpu_alloc_noprof+0x87a/0x1170
[  159.117875]  __percpu_counter_init_many+0x44/0x360
[  159.117889]  mm_init+0xcac/0x1170
[  159.117897]  copy_process+0x3ab7/0x73c0
[  159.117907]  kernel_clone+0xea/0x7f0
[  159.117917]  __do_sys_clone+0xce/0x120
[  159.117928]  do_syscall_64+0xbf/0x360
[  159.117937]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
13:06:13 executing program 4:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x80000)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r2 = dup(r1)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0)
connect$bt_sco(r3, &(0x7f0000000080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8)
r4 = accept4$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14, 0x800)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000140)={'wlan0\x00'})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r3)
sendmsg$NL80211_CMD_GET_WOWLAN(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, r5, 0x100, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x53}, @void, @val={0xc, 0x99, {0x1f6, 0x69}}}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x48840)
preadv2(r0, &(0x7f0000000380)=[{&(0x7f00000002c0)=""/127, 0x7f}, {&(0x7f0000000340)=""/47, 0x2f}], 0x2, 0x4, 0x0, 0x2)
r6 = open_tree(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x8000)
sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r6, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x70, 0x0, 0x2, 0x70bd2b, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x70}, 0x1, 0x0, 0x0, 0x2000000}, 0x18814)
openat$incfs(r6, &(0x7f0000000540)='.log\x00', 0x40000, 0x184)
getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f0000000580)=""/81, &(0x7f0000000600)=0x51)
creat(&(0x7f0000000640)='./file0\x00', 0x7)
syz_open_dev$vcsu(&(0x7f0000000700), 0xffffffffffffffff, 0x545000)

[  159.180835] loop2: detected capacity change from 0 to 264192
[  159.182654] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s
[  159.184380] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] 
[  159.185579] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present
[  159.186603] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 02 00 00 02 00
[  159.187757] blk_print_req_error: 29 callbacks suppressed
[  159.187772] I/O error, dev sr0, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  159.191732] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  159.192651] I/O error, dev sr0, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  159.194192] buffer_io_error: 38 callbacks suppressed
[  159.194206] Buffer I/O error on dev sr0, logical block 8, async page read
[  159.208316] kmemleak: Found object by alias at 0x607f1a63e768
[  159.208331] CPU: 1 UID: 0 PID: 4038 Comm: syz-executor.4 Tainted: G        W           6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) 
[  159.208349] Tainted: [W]=WARN
[  159.208353] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  159.208360] Call Trace:
[  159.208365]  <TASK>
[  159.208369]  dump_stack_lvl+0xca/0x120
[  159.208395]  __lookup_object+0x94/0xb0
[  159.208413]  delete_object_full+0x27/0x70
[  159.208430]  free_percpu+0x30/0x1160
[  159.208447]  ? arch_uprobe_clear_state+0x16/0x140
[  159.208469]  futex_hash_free+0x38/0xc0
[  159.208484]  mmput+0x2d3/0x390
[  159.208504]  do_exit+0x79d/0x2970
[  159.208518]  ? signal_wake_up_state+0x85/0x120
[  159.208534]  ? zap_other_threads+0x2b9/0x3a0
[  159.208551]  ? __pfx_do_exit+0x10/0x10
[  159.208564]  ? do_group_exit+0x1c3/0x2a0
[  159.208579]  ? lock_release+0xc8/0x290
[  159.208603]  do_group_exit+0xd3/0x2a0
[  159.208618]  __x64_sys_exit_group+0x3e/0x50
[  159.208633]  x64_sys_call+0x18c5/0x18d0
[  159.208649]  do_syscall_64+0xbf/0x360
[  159.208663]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  159.208675] RIP: 0033:0x7f35a80acb19
[  159.208684] Code: Unable to access opcode bytes at 0x7f35a80acaef.
[  159.208689] RSP: 002b:00007fffab310248 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[  159.208701] RAX: ffffffffffffffda RBX: 000000000000001e RCX: 00007f35a80acb19
[  159.208709] RDX: 00007f35a805f72b RSI: ffffffffffffffbc RDI: 0000000000000000
[  159.208717] RBP: 0000000000000000 R08: 0000001b2d0243b4 R09: 0000000000000000
[  159.208724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  159.208731] R13: 0000000000000000 R14: 0000000000000001 R15: 00007fffab310330
[  159.208748]  </TASK>
[  159.208752] kmemleak: Object (percpu) 0x607f1a63e760 (size 16):
[  159.208760] kmemleak:   comm "syz-executor.0", pid 278, jiffies 4294825723
[  159.208767] kmemleak:   min_count = 1
[  159.208771] kmemleak:   count = 0
[  159.208774] kmemleak:   flags = 0x21
[  159.208778] kmemleak:   checksum = 0
[  159.208782] kmemleak:   backtrace:
[  159.208785]  pcpu_alloc_noprof+0x87a/0x1170
[  159.208801]  __percpu_counter_init_many+0x44/0x360
[  159.208815]  mm_init+0xcac/0x1170
[  159.208823]  copy_process+0x3ab7/0x73c0
[  159.208833]  kernel_clone+0xea/0x7f0
[  159.208843]  __do_sys_clone+0xce/0x120
[  159.208854]  do_syscall_64+0xbf/0x360
[  159.208863]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  159.227540] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  159.229261] I/O error, dev sr0, sector 9 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  159.231056] Buffer I/O error on dev sr0, logical block 9, async page read
[  159.268491] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s
[  159.269998] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] 
[  159.270558] kmemleak: Found object by alias at 0x607f1a63e764
[  159.270573] CPU: 1 UID: 0 PID: 4037 Comm: syz-executor.2 Tainted: G        W           6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) 
[  159.270591] Tainted: [W]=WARN
[  159.270595] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  159.270602] Call Trace:
[  159.270606]  <TASK>
[  159.270611]  dump_stack_lvl+0xca/0x120
[  159.270635]  __lookup_object+0x94/0xb0
[  159.270653]  delete_object_full+0x27/0x70
[  159.270670]  free_percpu+0x30/0x1160
[  159.270687]  ? arch_uprobe_clear_state+0x16/0x140
[  159.270708]  futex_hash_free+0x38/0xc0
[  159.270723]  mmput+0x2d3/0x390
[  159.270743]  do_exit+0x79d/0x2970
[  159.270763]  ? __pfx_do_exit+0x10/0x10
[  159.270778]  ? find_held_lock+0x2b/0x80
[  159.270797]  ? get_signal+0x835/0x2340
[  159.270818]  do_group_exit+0xd3/0x2a0
[  159.270835]  get_signal+0x2315/0x2340
[  159.270854]  ? put_task_stack+0xd2/0x240
[  159.270871]  ? __pfx_get_signal+0x10/0x10
[  159.270888]  ? __schedule+0xe91/0x3590
[  159.270912]  arch_do_signal_or_restart+0x80/0x790
[  159.270931]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  159.270949]  ? __x64_sys_futex+0x1c9/0x4d0
[  159.270962]  ? __x64_sys_futex+0x1d2/0x4d0
[  159.270977]  ? __fget_files+0x20d/0x3b0
[  159.270990]  ? __pfx___x64_sys_futex+0x10/0x10
[  159.271016]  exit_to_user_mode_loop+0x8b/0x110
[  159.271030]  do_syscall_64+0x2f7/0x360
[  159.271044]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  159.271056] RIP: 0033:0x7fa92c654b19
[  159.271065] Code: Unable to access opcode bytes at 0x7fa92c654aef.
[  159.271071] RSP: 002b:00007fa929bca218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  159.271082] RAX: 0000000000000001 RBX: 00007fa92c767f68 RCX: 00007fa92c654b19
[  159.271090] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fa92c767f6c
[  159.271097] RBP: 00007fa92c767f60 R08: 0000000000000009 R09: 0000000000000000
[  159.271105] R10: ffffffffffffffff R11: 0000000000000246 R12: 00007fa92c767f6c
[  159.271112] R13: 00007fff6094a85f R14: 00007fa929bca300 R15: 0000000000022000
[  159.271132]  </TASK>
[  159.271136] kmemleak: Object (percpu) 0x607f1a63e760 (size 16):
[  159.271143] kmemleak:   comm "syz-executor.0", pid 278, jiffies 4294825723
[  159.271150] kmemleak:   min_count = 1
[  159.271154] kmemleak:   count = 0
[  159.271158] kmemleak:   flags = 0x21
[  159.271162] kmemleak:   checksum = 0
[  159.271165] kmemleak:   backtrace:
[  159.271169]  pcpu_alloc_noprof+0x87a/0x1170
[  159.271185]  __percpu_counter_init_many+0x44/0x360
[  159.271198]  mm_init+0xcac/0x1170
[  159.271206]  copy_process+0x3ab7/0x73c0
[  159.271217]  kernel_clone+0xea/0x7f0
[  159.271227]  __do_sys_clone+0xce/0x120
[  159.271238]  do_syscall_64+0xbf/0x360
[  159.271247]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  159.300446] 9pnet: Could not find request transport: fd6rfdno=0x0000000000000006
[  159.300782] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present
[  159.311221] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 02 00
[  159.312373] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  159.314222] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  159.314737] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  159.315429] Buffer I/O error on dev sr0, logical block 0, async page read
[  159.316197] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  159.316666] I/O error, dev sr0, sector 10 op 0x0:(READ) flags 0x0 phys_seg 6 prio class 2
[  159.317367] Buffer I/O error on dev sr0, logical block 10, async page read
[  159.318006] Buffer I/O error on dev sr0, logical block 11, async page read
[  159.318649] Buffer I/O error on dev sr0, logical block 12, async page read
[  159.319267] Buffer I/O error on dev sr0, logical block 13, async page read
[  159.319854] Buffer I/O error on dev sr0, logical block 14, async page read
[  159.320488] Buffer I/O error on dev sr0, logical block 15, async page read
13:06:13 executing program 4:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x80000)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r2 = dup(r1)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0)
connect$bt_sco(r3, &(0x7f0000000080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8)
r4 = accept4$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14, 0x800)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000140)={'wlan0\x00'})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r3)
sendmsg$NL80211_CMD_GET_WOWLAN(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, r5, 0x100, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x53}, @void, @val={0xc, 0x99, {0x1f6, 0x69}}}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x48840)
preadv2(r0, &(0x7f0000000380)=[{&(0x7f00000002c0)=""/127, 0x7f}, {&(0x7f0000000340)=""/47, 0x2f}], 0x2, 0x4, 0x0, 0x2)
r6 = open_tree(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x8000)
sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r6, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x70, 0x0, 0x2, 0x70bd2b, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x70}, 0x1, 0x0, 0x0, 0x2000000}, 0x18814)
openat$incfs(r6, &(0x7f0000000540)='.log\x00', 0x40000, 0x184)
getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f0000000580)=""/81, &(0x7f0000000600)=0x51)
creat(&(0x7f0000000640)='./file0\x00', 0x7)

13:06:13 executing program 5:
fsmount(0xffffffffffffffff, 0x0, 0x0)
open_tree(0xffffffffffffffff, 0x0, 0x8000)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000000080)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000000340)="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", 0x13e, 0x8c60}], 0x0, &(0x7f00000000c0))

13:06:13 executing program 2:
r0 = fspick(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x1)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>r0, @out_args}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x2105}}, './file0\x00'})
r2 = syz_mount_image$msdos(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000200)="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", 0xfc, 0x7fffffff}], 0x2002400, &(0x7f0000000340)={[{@nodots}], [{@fowner_lt={'fowner<', 0xee01}}, {@dont_hash}]})
ioctl$BTRFS_IOC_DEFRAG_RANGE(r2, 0x40309410, &(0x7f0000000380)={0x100, 0xa8, 0x3, 0x1000, 0x3, [0x1, 0x2, 0x7ff, 0x3ff]})
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f00000003c0)={{0x1, 0x1, 0x18, <r4=>r3, {0x7ff}}, './file0\x00'})
pipe2(&(0x7f0000000400)={<r5=>0xffffffffffffffff}, 0x4800)
newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, <r6=>0x0, <r7=>0x0}, 0x2000)
fchownat(r5, &(0x7f0000000440)='./file0\x00', r6, 0xffffffffffffffff, 0x400)
clock_gettime(0x0, &(0x7f0000000700)={<r8=>0x0, <r9=>0x0})
futimesat(r4, &(0x7f00000006c0)='./file0\x00', &(0x7f0000000740)={{r8, r9/1000+60000}})
chown(&(0x7f0000000780)='./file0\x00', r6, r7)
r10 = syz_open_dev$hiddev(&(0x7f00000007c0), 0x2, 0x80)
ioctl$EXT4_IOC_GROUP_EXTEND(r10, 0x40086607, &(0x7f0000000800)=0x9)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000900)={'ip_vti0\x00', &(0x7f0000000840)={'erspan0\x00', <r11=>0x0, 0x7800, 0x700, 0x0, 0x9, {{0x22, 0x4, 0x3, 0x37, 0x88, 0x65, 0x0, 0x7, 0x2f, 0x0, @loopback, @loopback, {[@noop, @ssrr={0x89, 0x1b, 0xa4, [@multicast1, @broadcast, @local, @broadcast, @empty, @private=0xa010100]}, @timestamp_addr={0x44, 0x4, 0xe, 0x1, 0x2}, @lsrr={0x83, 0xb, 0x79, [@remote, @private=0xa010102]}, @ssrr={0x89, 0xb, 0x6b, [@multicast1, @dev={0xac, 0x14, 0x14, 0x38}]}, @cipso={0x86, 0x3d, 0x3, [{0x6, 0x2}, {0x1, 0xd, "9dae4dc979adae093b070e"}, {0x5, 0x5, "18b549"}, {0x5, 0x4, "47bb"}, {0x0, 0xb, "703f69e5533d87c0e7"}, {0x7, 0x4, "29fd"}, {0x2, 0x10, "c622374507aaf07c69fc2d131187"}]}]}}}}})
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000940)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x57, r11})
openat$cgroup_ro(r0, &(0x7f0000000980)='freezer.self_freezing\x00', 0x0, 0x0)

[  159.362763] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  159.363312] I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  159.364031] Buffer I/O error on dev sr0, logical block 1, async page read
13:06:13 executing program 0:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x80000)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r2 = dup(r1)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0)
connect$bt_sco(r3, &(0x7f0000000080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8)
r4 = accept4$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14, 0x800)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000140)={'wlan0\x00'})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r3)
sendmsg$NL80211_CMD_GET_WOWLAN(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, r5, 0x100, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x53}, @void, @val={0xc, 0x99, {0x1f6, 0x69}}}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x48840)
preadv2(r0, &(0x7f0000000380)=[{&(0x7f00000002c0)=""/127, 0x7f}, {&(0x7f0000000340)=""/47, 0x2f}], 0x2, 0x4, 0x0, 0x2)
r6 = open_tree(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x8000)
sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r6, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x70, 0x0, 0x2, 0x70bd2b, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x70}, 0x1, 0x0, 0x0, 0x2000000}, 0x18814)
openat$incfs(r6, &(0x7f0000000540)='.log\x00', 0x40000, 0x184)
getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f0000000580)=""/81, &(0x7f0000000600)=0x51)
r7 = creat(&(0x7f0000000640)='./file0\x00', 0x7)
r8 = syz_open_dev$vcsu(&(0x7f0000000700), 0xffffffffffffffff, 0x545000)
fsconfig$FSCONFIG_SET_PATH_EMPTY(r7, 0x4, &(0x7f0000000680)='netdevsim\x00', &(0x7f00000006c0)='./file0\x00', r8)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000740)={{0x1, 0x1, 0x18, <r9=>r2}, './file0\x00'})
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r9, 0x40485404, &(0x7f0000000780)={{0x2, 0x2, 0xf54c, 0x0, 0x101}, 0x3, 0x8000})

13:06:13 executing program 6:
r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x6, 0x12, r0, 0x0)
mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000)
r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x600000, 0x0)
r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, r2)
mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000)
munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, <r5=>0x0}, &(0x7f0000008600)=0xc)
setgroups(0x1, &(0x7f0000000340)=[r5])
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000000)={0x0, <r7=>0x0}, &(0x7f0000000040)=0x5)
setuid(r7)
write$P9_RSTATu(r1, &(0x7f0000000100)={0x5e, 0x7d, 0x1, {{0x0, 0x40, 0x0, 0xae1, {0x2, 0x1, 0x4}, 0x30810000, 0xf00, 0x7891024, 0x4, 0x3, ']}\'', 0x4, '-{&(', 0x4, '[7(&', 0x2, '\'x'}, 0x9, '/dev/sr0\x00', r3, r5, r7}}, 0x5e)

[  159.380882] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  159.381404] I/O error, dev sr0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  159.381552] loop5: detected capacity change from 0 to 140
[  159.387155] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem
[  159.391868] EXT4-fs error (device loop5): __ext4_fill_super:5510: inode #2: comm syz-executor.5: iget: bad extended attribute block 3442517925
[  159.392314] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  159.394421] EXT4-fs (loop5): get root inode failed
[  159.394688] I/O error, dev sr0, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  159.395261] EXT4-fs (loop5): mount failed
13:06:13 executing program 1:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x80000)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r2 = dup(r1)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0)
connect$bt_sco(r3, &(0x7f0000000080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8)
r4 = accept4$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14, 0x800)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000140)={'wlan0\x00'})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r3)
sendmsg$NL80211_CMD_GET_WOWLAN(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, r5, 0x100, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x53}, @void, @val={0xc, 0x99, {0x1f6, 0x69}}}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x48840)
preadv2(r0, &(0x7f0000000380)=[{&(0x7f00000002c0)=""/127, 0x7f}, {&(0x7f0000000340)=""/47, 0x2f}], 0x2, 0x4, 0x0, 0x2)
r6 = open_tree(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x8000)
sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r6, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x70, 0x0, 0x2, 0x70bd2b, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x70}, 0x1, 0x0, 0x0, 0x2000000}, 0x18814)
openat$incfs(r6, &(0x7f0000000540)='.log\x00', 0x40000, 0x184)
getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f0000000580)=""/81, &(0x7f0000000600)=0x51)
r7 = creat(&(0x7f0000000640)='./file0\x00', 0x7)
r8 = syz_open_dev$vcsu(&(0x7f0000000700), 0xffffffffffffffff, 0x545000)
fsconfig$FSCONFIG_SET_PATH_EMPTY(r7, 0x4, &(0x7f0000000680)='netdevsim\x00', &(0x7f00000006c0)='./file0\x00', r8)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000740)={{0x1, 0x1, 0x18, r2}, './file0\x00'})

[  159.406637] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  159.407765] I/O error, dev sr0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  159.416712] kmemleak: Found object by alias at 0x607f1a63e768
[  159.416728] CPU: 1 UID: 0 PID: 4045 Comm: syz-executor.4 Tainted: G        W           6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) 
[  159.416747] Tainted: [W]=WARN
[  159.416750] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  159.416758] Call Trace:
[  159.416762]  <TASK>
[  159.416767]  dump_stack_lvl+0xca/0x120
[  159.416797]  __lookup_object+0x94/0xb0
[  159.416815]  delete_object_full+0x27/0x70
[  159.416832]  free_percpu+0x30/0x1160
[  159.416850]  ? arch_uprobe_clear_state+0x16/0x140
[  159.416871]  futex_hash_free+0x38/0xc0
[  159.416887]  mmput+0x2d3/0x390
[  159.416907]  do_exit+0x79d/0x2970
[  159.416921]  ? signal_wake_up_state+0x9f/0x120
[  159.416938]  ? zap_other_threads+0x2b9/0x3a0
[  159.416954]  ? __pfx_do_exit+0x10/0x10
[  159.416968]  ? do_group_exit+0x1c3/0x2a0
[  159.416982]  ? lock_release+0xc8/0x290
[  159.417000]  do_group_exit+0xd3/0x2a0
[  159.417016]  __x64_sys_exit_group+0x3e/0x50
[  159.417030]  x64_sys_call+0x18c5/0x18d0
[  159.417047]  do_syscall_64+0xbf/0x360
[  159.417060]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  159.417072] RIP: 0033:0x7f35a80acb19
[  159.417081] Code: Unable to access opcode bytes at 0x7f35a80acaef.
[  159.417087] RSP: 002b:00007fffab310248 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[  159.417102] RAX: ffffffffffffffda RBX: 000000000000001e RCX: 00007f35a80acb19
[  159.417110] RDX: 00007f35a805f72b RSI: ffffffffffffffbc RDI: 0000000000000000
[  159.417118] RBP: 0000000000000000 R08: 0000001b2d022ebc R09: 0000000000000000
[  159.417125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  159.417132] R13: 0000000000000000 R14: 0000000000000001 R15: 00007fffab310330
[  159.417150]  </TASK>
[  159.417154] kmemleak: Object (percpu) 0x607f1a63e760 (size 16):
[  159.417161] kmemleak:   comm "syz-executor.2", pid 285, jiffies 4294826056
[  159.417168] kmemleak:   min_count = 1
[  159.417172] kmemleak:   count = 0
[  159.417176] kmemleak:   flags = 0x21
[  159.417180] kmemleak:   checksum = 0
[  159.417184] kmemleak:   backtrace:
[  159.417188]  pcpu_alloc_noprof+0x87a/0x1170
[  159.417204]  __percpu_counter_init_many+0x44/0x360
[  159.417218]  mm_init+0xcac/0x1170
[  159.417227]  copy_process+0x3ab7/0x73c0
[  159.417237]  kernel_clone+0xea/0x7f0
[  159.417247]  __do_sys_clone+0xce/0x120
[  159.417258]  do_syscall_64+0xbf/0x360
[  159.417268]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  159.425423] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
13:06:13 executing program 4:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x80000)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r2 = dup(r1)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0)
connect$bt_sco(r3, &(0x7f0000000080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8)
r4 = accept4$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14, 0x800)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000140)={'wlan0\x00'})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r3)
sendmsg$NL80211_CMD_GET_WOWLAN(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, r5, 0x100, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x53}, @void, @val={0xc, 0x99, {0x1f6, 0x69}}}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x48840)
preadv2(r0, &(0x7f0000000380)=[{&(0x7f00000002c0)=""/127, 0x7f}, {&(0x7f0000000340)=""/47, 0x2f}], 0x2, 0x4, 0x0, 0x2)
r6 = open_tree(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x8000)
sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r6, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x70, 0x0, 0x2, 0x70bd2b, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x70}, 0x1, 0x0, 0x0, 0x2000000}, 0x18814)
openat$incfs(r6, &(0x7f0000000540)='.log\x00', 0x40000, 0x184)
getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f0000000580)=""/81, &(0x7f0000000600)=0x51)

[  159.491758] 9pnet: Could not find request transport: fd6rfdno=0x0000000000000006
[  159.493066] loop2: detected capacity change from 0 to 264192
[  159.497496] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  159.498204] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  159.521497] kmemleak: Found object by alias at 0x607f1a63e764
[  159.521524] CPU: 0 UID: 0 PID: 4051 Comm: syz-executor.2 Tainted: G        W           6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) 
[  159.521559] Tainted: [W]=WARN
[  159.521566] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  159.521579] Call Trace:
[  159.521586]  <TASK>
[  159.521594]  dump_stack_lvl+0xca/0x120
[  159.521642]  __lookup_object+0x94/0xb0
[  159.521673]  delete_object_full+0x27/0x70
[  159.521704]  free_percpu+0x30/0x1160
[  159.521734]  ? arch_uprobe_clear_state+0x16/0x140
[  159.521771]  futex_hash_free+0x38/0xc0
[  159.521797]  mmput+0x2d3/0x390
[  159.521832]  do_exit+0x79d/0x2970
[  159.521858]  ? lock_release+0xc8/0x290
[  159.521889]  ? __pfx_do_exit+0x10/0x10
[  159.521915]  ? find_held_lock+0x2b/0x80
[  159.521947]  ? get_signal+0x835/0x2340
[  159.521984]  do_group_exit+0xd3/0x2a0
[  159.522012]  get_signal+0x2315/0x2340
[  159.522046]  ? putname.part.0+0x11b/0x160
[  159.522083]  ? __pfx_get_signal+0x10/0x10
[  159.522121]  ? do_futex+0x135/0x370
[  159.522146]  ? __pfx_do_futex+0x10/0x10
[  159.522175]  arch_do_signal_or_restart+0x80/0x790
[  159.522208]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  159.522239]  ? __x64_sys_futex+0x1c9/0x4d0
[  159.522262]  ? __x64_sys_futex+0x1d2/0x4d0
[  159.522288]  ? __x64_sys_openat+0x142/0x200
[  159.522320]  ? __pfx___x64_sys_futex+0x10/0x10
[  159.522349]  ? fdget+0x197/0x220
[  159.522375]  exit_to_user_mode_loop+0x8b/0x110
[  159.522399]  do_syscall_64+0x2f7/0x360
[  159.522422]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  159.522444] RIP: 0033:0x7fa92c654b19
[  159.522461] Code: Unable to access opcode bytes at 0x7fa92c654aef.
[  159.522471] RSP: 002b:00007fa929bca218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  159.522494] RAX: fffffffffffffe00 RBX: 00007fa92c767f68 RCX: 00007fa92c654b19
[  159.522511] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fa92c767f68
[  159.522524] RBP: 00007fa92c767f60 R08: 0000000000000000 R09: 0000000000000000
[  159.522537] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fa92c767f6c
[  159.522550] R13: 00007fff6094a85f R14: 00007fa929bca300 R15: 0000000000022000
[  159.522579]  </TASK>
[  159.522586] kmemleak: Object (percpu) 0x607f1a63e760 (size 16):
[  159.522599] kmemleak:   comm "syz-executor.2", pid 285, jiffies 4294826056
[  159.522612] kmemleak:   min_count = 1
[  159.522619] kmemleak:   count = 0
[  159.522626] kmemleak:   flags = 0x21
[  159.522633] kmemleak:   checksum = 0
[  159.522640] kmemleak:   backtrace:
[  159.522646]  pcpu_alloc_noprof+0x87a/0x1170
[  159.522675]  __percpu_counter_init_many+0x44/0x360
[  159.522699]  mm_init+0xcac/0x1170
[  159.522715]  copy_process+0x3ab7/0x73c0
[  159.522734]  kernel_clone+0xea/0x7f0
[  159.522752]  __do_sys_clone+0xce/0x120
[  159.522771]  do_syscall_64+0xbf/0x360
[  159.522789]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
13:06:13 executing program 2:
r0 = fspick(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x1)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>r0, @out_args}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x2105}}, './file0\x00'})
r2 = syz_mount_image$msdos(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000200)="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", 0xfc, 0x7fffffff}], 0x2002400, &(0x7f0000000340)={[{@nodots}], [{@fowner_lt={'fowner<', 0xee01}}, {@dont_hash}]})
ioctl$BTRFS_IOC_DEFRAG_RANGE(r2, 0x40309410, &(0x7f0000000380)={0x100, 0xa8, 0x3, 0x1000, 0x3, [0x1, 0x2, 0x7ff, 0x3ff]})
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f00000003c0)={{0x1, 0x1, 0x18, <r4=>r3, {0x7ff}}, './file0\x00'})
pipe2(&(0x7f0000000400)={<r5=>0xffffffffffffffff}, 0x4800)
newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, <r6=>0x0, <r7=>0x0}, 0x2000)
fchownat(r5, &(0x7f0000000440)='./file0\x00', r6, 0xffffffffffffffff, 0x400)
clock_gettime(0x0, &(0x7f0000000700)={<r8=>0x0, <r9=>0x0})
futimesat(r4, &(0x7f00000006c0)='./file0\x00', &(0x7f0000000740)={{r8, r9/1000+60000}})
chown(&(0x7f0000000780)='./file0\x00', r6, r7)
r10 = syz_open_dev$hiddev(&(0x7f00000007c0), 0x2, 0x80)
ioctl$EXT4_IOC_GROUP_EXTEND(r10, 0x40086607, &(0x7f0000000800)=0x9)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000900)={'ip_vti0\x00', &(0x7f0000000840)={'erspan0\x00', <r11=>0x0, 0x7800, 0x700, 0x0, 0x9, {{0x22, 0x4, 0x3, 0x37, 0x88, 0x65, 0x0, 0x7, 0x2f, 0x0, @loopback, @loopback, {[@noop, @ssrr={0x89, 0x1b, 0xa4, [@multicast1, @broadcast, @local, @broadcast, @empty, @private=0xa010100]}, @timestamp_addr={0x44, 0x4, 0xe, 0x1, 0x2}, @lsrr={0x83, 0xb, 0x79, [@remote, @private=0xa010102]}, @ssrr={0x89, 0xb, 0x6b, [@multicast1, @dev={0xac, 0x14, 0x14, 0x38}]}, @cipso={0x86, 0x3d, 0x3, [{0x6, 0x2}, {0x1, 0xd, "9dae4dc979adae093b070e"}, {0x5, 0x5, "18b549"}, {0x5, 0x4, "47bb"}, {0x0, 0xb, "703f69e5533d87c0e7"}, {0x7, 0x4, "29fd"}, {0x2, 0x10, "c622374507aaf07c69fc2d131187"}]}]}}}}})
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000940)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x57, r11})

[  159.775567] loop2: detected capacity change from 0 to 264192

VM DIAGNOSIS:
13:06:08  Registers:
info registers vcpu 0
RAX=0000000000022000 RBX=ffff888009601b80 RCX=0000000000000001 RDX=0000000000000000
RSI=0000000000000000 RDI=ffffffff85c1c760 RBP=ffff8880096025d8 RSP=ffff888009617650
R8 =0000000000000000 R9 =0000000000000005 R10=0000000000000001 R11=0000000000000000
R12=ffff888009602600 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000
RIP=ffffffff8151bac5 RFL=00000056 [---ZAP-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e55d8000 00000000 00000000
LDT=0000 fffffe3d00000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000561c75500618 CR3=0000000009c10000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=2037303a36303a333120312020706553 XMM01=5d3230353330392e33353120205b203a
XMM02=303a6d6d206574617473207265746e75 XMM03=45474150454c49465f4d4d3a65707974
XMM04=646d65747379733a6d6d6f4320342d3a XMM05=3a657079742066323439373034663030
XMM06=7265746e756f632d7373722064614220 XMM07=20205b203a6c656e72656b2072656c6c
XMM08=2e726f7475636578652d7a7973223d6d XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=000000000003bea2 RBX=0000000000000001 RCX=ffffffff84bb76de RDX=dffffc0000000000
RSI=000000000003bb76 RDI=ffff88806cf31850 RBP=ffff88801726f1e0 RSP=ffff88801726f118
R8 =0000000000000001 R9 =0000000000000000 R10=000000000003bea3 R11=0000000000000001
R12=ffff88801726f1e8 R13=ffff88801726f1d0 R14=ffff88801726f1c9 R15=ffff88801726f188
RIP=ffffffff81358522 RFL=00000287 [--S--PC] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007f96c36118c0 00000000 00000000
GS =0000 ffff8880e56d8000 00000000 00000000
LDT=0000 fffffe4c00000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000561c75500618 CR3=0000000013808000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000
XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000
XMM04=00000000000000000000000000000002 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=2064616572206f742064656c69614600 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000