Warning: Permanently added '[localhost]:24765' (ECDSA) to the list of known hosts. 2025/09/01 11:17:56 fuzzer started 2025/09/01 11:17:57 dialing manager at localhost:35473 syzkaller login: [ 51.039253] cgroup: Unknown subsys name 'net' [ 51.113309] cgroup: Unknown subsys name 'cpuset' [ 51.133807] cgroup: Unknown subsys name 'rlimit' 2025/09/01 11:18:07 syscalls: 2214 2025/09/01 11:18:07 code coverage: enabled 2025/09/01 11:18:07 comparison tracing: enabled 2025/09/01 11:18:07 extra coverage: enabled 2025/09/01 11:18:07 setuid sandbox: enabled 2025/09/01 11:18:07 namespace sandbox: enabled 2025/09/01 11:18:07 Android sandbox: enabled 2025/09/01 11:18:07 fault injection: enabled 2025/09/01 11:18:07 leak checking: enabled 2025/09/01 11:18:07 net packet injection: enabled 2025/09/01 11:18:07 net device setup: enabled 2025/09/01 11:18:07 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/09/01 11:18:07 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/09/01 11:18:07 USB emulation: enabled 2025/09/01 11:18:07 hci packet injection: enabled 2025/09/01 11:18:07 wifi device emulation: enabled 2025/09/01 11:18:07 802.15.4 emulation: enabled 2025/09/01 11:18:07 fetching corpus: 0, signal 0/2000 (executing program) 2025/09/01 11:18:07 fetching corpus: 50, signal 21983/25565 (executing program) 2025/09/01 11:18:07 fetching corpus: 100, signal 37762/42594 (executing program) 2025/09/01 11:18:08 fetching corpus: 150, signal 43368/49520 (executing program) 2025/09/01 11:18:08 fetching corpus: 200, signal 50530/57821 (executing program) 2025/09/01 11:18:08 fetching corpus: 250, signal 57251/65526 (executing program) 2025/09/01 11:18:08 fetching corpus: 300, signal 60995/70390 (executing program) 2025/09/01 11:18:08 fetching corpus: 350, signal 64573/74993 (executing program) 2025/09/01 11:18:08 fetching corpus: 400, signal 67504/78916 (executing program) 2025/09/01 11:18:08 fetching corpus: 450, signal 70900/83260 (executing program) 2025/09/01 11:18:08 fetching corpus: 500, signal 72856/86258 (executing program) 2025/09/01 11:18:08 fetching corpus: 550, signal 74667/89062 (executing program) 2025/09/01 11:18:08 fetching corpus: 600, signal 76516/91849 (executing program) 2025/09/01 11:18:08 fetching corpus: 650, signal 79019/95124 (executing program) 2025/09/01 11:18:09 fetching corpus: 700, signal 82299/99079 (executing program) 2025/09/01 11:18:09 fetching corpus: 750, signal 85723/103050 (executing program) 2025/09/01 11:18:09 fetching corpus: 800, signal 87548/105641 (executing program) 2025/09/01 11:18:09 fetching corpus: 850, signal 90322/108982 (executing program) 2025/09/01 11:18:09 fetching corpus: 900, signal 91570/110989 (executing program) 2025/09/01 11:18:09 fetching corpus: 950, signal 92484/112730 (executing program) 2025/09/01 11:18:09 fetching corpus: 1000, signal 93833/114764 (executing program) 2025/09/01 11:18:09 fetching corpus: 1050, signal 95007/116633 (executing program) 2025/09/01 11:18:09 fetching corpus: 1100, signal 96954/119095 (executing program) 2025/09/01 11:18:09 fetching corpus: 1150, signal 98580/121313 (executing program) 2025/09/01 11:18:10 fetching corpus: 1200, signal 100488/123635 (executing program) 2025/09/01 11:18:10 fetching corpus: 1250, signal 101730/125463 (executing program) 2025/09/01 11:18:10 fetching corpus: 1300, signal 103451/127644 (executing program) 2025/09/01 11:18:10 fetching corpus: 1350, signal 104762/129439 (executing program) 2025/09/01 11:18:10 fetching corpus: 1400, signal 105937/131175 (executing program) 2025/09/01 11:18:10 fetching corpus: 1450, signal 107231/132924 (executing program) 2025/09/01 11:18:10 fetching corpus: 1500, signal 108452/134561 (executing program) 2025/09/01 11:18:10 fetching corpus: 1550, signal 109632/136235 (executing program) 2025/09/01 11:18:10 fetching corpus: 1600, signal 110637/137710 (executing program) 2025/09/01 11:18:10 fetching corpus: 1650, signal 111906/139354 (executing program) 2025/09/01 11:18:10 fetching corpus: 1700, signal 113225/140998 (executing program) 2025/09/01 11:18:11 fetching corpus: 1750, signal 114549/142609 (executing program) 2025/09/01 11:18:11 fetching corpus: 1800, signal 116149/144344 (executing program) 2025/09/01 11:18:11 fetching corpus: 1850, signal 117236/145724 (executing program) 2025/09/01 11:18:11 fetching corpus: 1900, signal 118223/147094 (executing program) 2025/09/01 11:18:11 fetching corpus: 1950, signal 119051/148375 (executing program) 2025/09/01 11:18:11 fetching corpus: 2000, signal 120902/150158 (executing program) 2025/09/01 11:18:11 fetching corpus: 2050, signal 121978/151511 (executing program) 2025/09/01 11:18:11 fetching corpus: 2100, signal 122920/152732 (executing program) 2025/09/01 11:18:11 fetching corpus: 2150, signal 123609/153834 (executing program) 2025/09/01 11:18:12 fetching corpus: 2200, signal 125060/155308 (executing program) 2025/09/01 11:18:12 fetching corpus: 2250, signal 125946/156466 (executing program) 2025/09/01 11:18:12 fetching corpus: 2300, signal 126877/157577 (executing program) 2025/09/01 11:18:12 fetching corpus: 2350, signal 128049/158825 (executing program) 2025/09/01 11:18:12 fetching corpus: 2400, signal 128955/159934 (executing program) 2025/09/01 11:18:12 fetching corpus: 2450, signal 129620/160910 (executing program) 2025/09/01 11:18:12 fetching corpus: 2500, signal 130536/161936 (executing program) 2025/09/01 11:18:12 fetching corpus: 2550, signal 131186/162847 (executing program) 2025/09/01 11:18:12 fetching corpus: 2600, signal 132086/163926 (executing program) 2025/09/01 11:18:12 fetching corpus: 2650, signal 132574/164770 (executing program) 2025/09/01 11:18:12 fetching corpus: 2700, signal 133441/165759 (executing program) 2025/09/01 11:18:13 fetching corpus: 2750, signal 134471/166783 (executing program) 2025/09/01 11:18:13 fetching corpus: 2800, signal 135133/167622 (executing program) 2025/09/01 11:18:13 fetching corpus: 2850, signal 135872/168498 (executing program) 2025/09/01 11:18:13 fetching corpus: 2900, signal 136643/169440 (executing program) 2025/09/01 11:18:13 fetching corpus: 2950, signal 137294/170276 (executing program) 2025/09/01 11:18:13 fetching corpus: 3000, signal 138228/171107 (executing program) 2025/09/01 11:18:13 fetching corpus: 3050, signal 139045/171956 (executing program) 2025/09/01 11:18:13 fetching corpus: 3100, signal 139539/172668 (executing program) 2025/09/01 11:18:13 fetching corpus: 3150, signal 143110/174329 (executing program) 2025/09/01 11:18:13 fetching corpus: 3200, signal 143560/174923 (executing program) 2025/09/01 11:18:14 fetching corpus: 3250, signal 144549/175704 (executing program) 2025/09/01 11:18:14 fetching corpus: 3300, signal 145233/176446 (executing program) 2025/09/01 11:18:14 fetching corpus: 3350, signal 146180/177194 (executing program) 2025/09/01 11:18:14 fetching corpus: 3400, signal 147111/177885 (executing program) 2025/09/01 11:18:14 fetching corpus: 3450, signal 147647/178463 (executing program) 2025/09/01 11:18:14 fetching corpus: 3500, signal 148569/179129 (executing program) 2025/09/01 11:18:14 fetching corpus: 3550, signal 149059/179685 (executing program) 2025/09/01 11:18:14 fetching corpus: 3600, signal 149427/180196 (executing program) 2025/09/01 11:18:14 fetching corpus: 3650, signal 149914/180736 (executing program) 2025/09/01 11:18:14 fetching corpus: 3700, signal 150481/181304 (executing program) 2025/09/01 11:18:14 fetching corpus: 3750, signal 151025/181966 (executing program) 2025/09/01 11:18:15 fetching corpus: 3800, signal 151519/182449 (executing program) 2025/09/01 11:18:15 fetching corpus: 3850, signal 152297/182970 (executing program) 2025/09/01 11:18:15 fetching corpus: 3900, signal 152827/183517 (executing program) 2025/09/01 11:18:15 fetching corpus: 3950, signal 153467/184057 (executing program) 2025/09/01 11:18:15 fetching corpus: 4000, signal 154163/184540 (executing program) 2025/09/01 11:18:15 fetching corpus: 4050, signal 154689/184990 (executing program) 2025/09/01 11:18:15 fetching corpus: 4100, signal 155153/185452 (executing program) 2025/09/01 11:18:15 fetching corpus: 4150, signal 155621/185860 (executing program) 2025/09/01 11:18:15 fetching corpus: 4200, signal 156026/186236 (executing program) 2025/09/01 11:18:15 fetching corpus: 4250, signal 156578/186638 (executing program) 2025/09/01 11:18:16 fetching corpus: 4300, signal 156957/187006 (executing program) 2025/09/01 11:18:16 fetching corpus: 4350, signal 157449/187477 (executing program) 2025/09/01 11:18:16 fetching corpus: 4400, signal 157895/187818 (executing program) 2025/09/01 11:18:16 fetching corpus: 4450, signal 158380/188226 (executing program) 2025/09/01 11:18:16 fetching corpus: 4500, signal 158991/188556 (executing program) 2025/09/01 11:18:16 fetching corpus: 4550, signal 159989/188877 (executing program) 2025/09/01 11:18:16 fetching corpus: 4600, signal 160497/189202 (executing program) 2025/09/01 11:18:16 fetching corpus: 4650, signal 160900/189311 (executing program) 2025/09/01 11:18:16 fetching corpus: 4700, signal 161448/189330 (executing program) 2025/09/01 11:18:16 fetching corpus: 4750, signal 161993/189359 (executing program) 2025/09/01 11:18:16 fetching corpus: 4800, signal 162359/189364 (executing program) 2025/09/01 11:18:17 fetching corpus: 4850, signal 162626/189373 (executing program) 2025/09/01 11:18:17 fetching corpus: 4900, signal 162902/189376 (executing program) 2025/09/01 11:18:17 fetching corpus: 4950, signal 163395/189377 (executing program) 2025/09/01 11:18:17 fetching corpus: 5000, signal 163761/189382 (executing program) 2025/09/01 11:18:17 fetching corpus: 5050, signal 164109/189387 (executing program) 2025/09/01 11:18:17 fetching corpus: 5100, signal 164461/189438 (executing program) 2025/09/01 11:18:17 fetching corpus: 5150, signal 164844/189461 (executing program) 2025/09/01 11:18:17 fetching corpus: 5200, signal 165108/189480 (executing program) 2025/09/01 11:18:17 fetching corpus: 5250, signal 165644/189505 (executing program) 2025/09/01 11:18:17 fetching corpus: 5300, signal 165950/189507 (executing program) 2025/09/01 11:18:17 fetching corpus: 5350, signal 166256/189518 (executing program) 2025/09/01 11:18:18 fetching corpus: 5400, signal 166936/189582 (executing program) 2025/09/01 11:18:18 fetching corpus: 5450, signal 167231/189599 (executing program) 2025/09/01 11:18:18 fetching corpus: 5500, signal 167711/189599 (executing program) 2025/09/01 11:18:18 fetching corpus: 5550, signal 168195/189615 (executing program) 2025/09/01 11:18:18 fetching corpus: 5600, signal 168412/189619 (executing program) 2025/09/01 11:18:18 fetching corpus: 5650, signal 168764/189639 (executing program) 2025/09/01 11:18:18 fetching corpus: 5700, signal 169142/189642 (executing program) 2025/09/01 11:18:18 fetching corpus: 5750, signal 169460/189653 (executing program) 2025/09/01 11:18:18 fetching corpus: 5800, signal 170038/189687 (executing program) 2025/09/01 11:18:18 fetching corpus: 5850, signal 170354/189710 (executing program) 2025/09/01 11:18:18 fetching corpus: 5899, signal 170597/189717 (executing program) 2025/09/01 11:18:19 fetching corpus: 5949, signal 171053/189717 (executing program) 2025/09/01 11:18:19 fetching corpus: 5999, signal 171484/189717 (executing program) 2025/09/01 11:18:19 fetching corpus: 6049, signal 171859/189717 (executing program) 2025/09/01 11:18:19 fetching corpus: 6099, signal 172461/189718 (executing program) 2025/09/01 11:18:19 fetching corpus: 6149, signal 172707/189732 (executing program) 2025/09/01 11:18:19 fetching corpus: 6199, signal 173164/189754 (executing program) 2025/09/01 11:18:19 fetching corpus: 6249, signal 173484/189757 (executing program) 2025/09/01 11:18:19 fetching corpus: 6299, signal 173779/189772 (executing program) 2025/09/01 11:18:19 fetching corpus: 6349, signal 174134/189774 (executing program) 2025/09/01 11:18:19 fetching corpus: 6399, signal 174610/189788 (executing program) 2025/09/01 11:18:19 fetching corpus: 6449, signal 174843/189793 (executing program) 2025/09/01 11:18:19 fetching corpus: 6499, signal 175208/189794 (executing program) 2025/09/01 11:18:20 fetching corpus: 6549, signal 175550/189804 (executing program) 2025/09/01 11:18:20 fetching corpus: 6599, signal 175952/189807 (executing program) 2025/09/01 11:18:20 fetching corpus: 6649, signal 176456/189844 (executing program) 2025/09/01 11:18:20 fetching corpus: 6699, signal 176628/189851 (executing program) 2025/09/01 11:18:20 fetching corpus: 6749, signal 176978/189874 (executing program) 2025/09/01 11:18:20 fetching corpus: 6799, signal 177435/189886 (executing program) 2025/09/01 11:18:20 fetching corpus: 6849, signal 177695/189915 (executing program) 2025/09/01 11:18:20 fetching corpus: 6899, signal 178107/189944 (executing program) 2025/09/01 11:18:20 fetching corpus: 6949, signal 178438/189952 (executing program) 2025/09/01 11:18:21 fetching corpus: 6999, signal 178744/189960 (executing program) 2025/09/01 11:18:21 fetching corpus: 7049, signal 178988/189966 (executing program) 2025/09/01 11:18:21 fetching corpus: 7099, signal 179282/189971 (executing program) 2025/09/01 11:18:21 fetching corpus: 7149, signal 179750/189998 (executing program) 2025/09/01 11:18:21 fetching corpus: 7199, signal 179956/190001 (executing program) 2025/09/01 11:18:21 fetching corpus: 7249, signal 180612/190014 (executing program) 2025/09/01 11:18:21 fetching corpus: 7299, signal 180898/190023 (executing program) 2025/09/01 11:18:21 fetching corpus: 7349, signal 181267/190045 (executing program) 2025/09/01 11:18:21 fetching corpus: 7399, signal 181536/190048 (executing program) 2025/09/01 11:18:21 fetching corpus: 7449, signal 181869/190113 (executing program) 2025/09/01 11:18:21 fetching corpus: 7499, signal 182045/190118 (executing program) 2025/09/01 11:18:21 fetching corpus: 7549, signal 182330/190158 (executing program) 2025/09/01 11:18:22 fetching corpus: 7599, signal 182598/190191 (executing program) 2025/09/01 11:18:22 fetching corpus: 7649, signal 182970/190201 (executing program) 2025/09/01 11:18:22 fetching corpus: 7699, signal 183210/190204 (executing program) 2025/09/01 11:18:22 fetching corpus: 7749, signal 183431/190206 (executing program) 2025/09/01 11:18:22 fetching corpus: 7799, signal 183804/190213 (executing program) 2025/09/01 11:18:22 fetching corpus: 7849, signal 184233/190214 (executing program) 2025/09/01 11:18:22 fetching corpus: 7899, signal 184635/190218 (executing program) 2025/09/01 11:18:22 fetching corpus: 7949, signal 184935/190224 (executing program) 2025/09/01 11:18:22 fetching corpus: 7999, signal 185277/190226 (executing program) 2025/09/01 11:18:22 fetching corpus: 8049, signal 185472/190230 (executing program) 2025/09/01 11:18:22 fetching corpus: 8099, signal 185751/190239 (executing program) 2025/09/01 11:18:23 fetching corpus: 8149, signal 186030/190239 (executing program) 2025/09/01 11:18:23 fetching corpus: 8199, signal 186231/190247 (executing program) 2025/09/01 11:18:23 fetching corpus: 8249, signal 186488/190266 (executing program) 2025/09/01 11:18:23 fetching corpus: 8299, signal 186725/190267 (executing program) 2025/09/01 11:18:23 fetching corpus: 8349, signal 187232/190270 (executing program) 2025/09/01 11:18:23 fetching corpus: 8399, signal 187404/190273 (executing program) 2025/09/01 11:18:23 fetching corpus: 8435, signal 187575/190273 (executing program) 2025/09/01 11:18:23 fetching corpus: 8435, signal 187575/190273 (executing program) 2025/09/01 11:18:26 starting 8 fuzzer processes 11:18:26 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) keyctl$join(0x1, 0x0) 11:18:26 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000003c0)='./file1\x00', 0x0) pidfd_open(0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002b80)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000d80)=ANY=[@ANYBLOB="100000d3c0a65883cff745f7657628503f146aad65e6bcacd0ea56b174664529c12a6c3b83183cb820121db5a000fe06bd29e05bfef47b07ed1df09e8ac1b4b6cb869348468e66d0eda36bdad1ec611e84386a70578cdf7cf3a10c4ae3f5d9a7551a01565380db58375afa80c1c46e5c3511319f7a5b85c04d4630126f859f0c3aa7063a4f2142f26e8a6efcf151547a20df49850f597dc4aa04dce7cb97906229700313e643147d1527924f61b5d714d3c6c9ff76d801f4708f3da67aaf5d5d5429fbaeb08e5d6b1c01034217cd7345b4af61edb563b96d37e26356fccef47357576f"], 0x10}], 0x1}, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000d00)=ANY=[@ANYBLOB="10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000015d806dd452c7b88a9c1c575400"/97]}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000000)=@ethtool_coalesce={0x10}}) syz_io_uring_complete(0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000e80)=ANY=[@ANYBLOB="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"]}) r5 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x9, 0x81, 0x0, 0x62, 0x0, 0x5, 0x4440, 0x8, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8000}, 0x60, 0x0, 0x9, 0x2, 0x100, 0x0, 0xff, 0x0, 0x3, 0x0, 0x1}, 0x0, 0x4, r0, 0xe) pwritev2(r1, &(0x7f0000000380)=[{&(0x7f0000000180)="bd", 0xfffffdef}], 0x1, 0x0, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0xf3, 0x1, &(0x7f00000002c0)=[{&(0x7f00000001c0)="4c00da682c9cd8e67881fc520907062401152033c9b538a5b5f207ecfbf666ec6c426bf80c0af3903645ba05cc27c9baf9fb8747ea0fd0cf0210d8961dfac9e1892fc6602f466a80d2fe194f5ee84c43317ae9a96c1f564cbb927b4cc3991eb8afc79ad2b0b500bd9be3a0313122e8086682e2799ddc39a6a774fbd3bc4e5ac90cecd9871d2cad0b452757c2395edf4524eaf3ba8f19cdfb1c14e5d1e5dca3daf7112bfb211e7620ca9d2150df91e3c9239464e612320566cea7759aa6f22be41a97eaf2d7ece986c5435ec0f8554392536134bbddb1d08e8f0c6ec0d8dd79c9ea6d99308ec26bd71c320ea2", 0xec}], 0x200000, &(0x7f0000000300)={[{}, {@dots}], [{@audit}]}) write$binfmt_elf64(r5, &(0x7f0000000400)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x40, 0x20, 0x3, 0x9, 0x3, 0x3, 0x1, 0x26d, 0x40, 0x241, 0x8ebb, 0x0, 0x38, 0x1, 0xeb, 0x2, 0x3f}, [{0x1, 0x4e12889d, 0x1f, 0xffffffffffffff36, 0x0, 0x101, 0x23fb, 0x1f0}], "0cee748db37a7811d2d59472625e334d254811e306c185398ffef3418d6082ed0e89282230042b826104bc4ead3f11c43489ae0b74b4070c67c2cfd881c01ce38d28b2c944694589107102d76538e953677cf5995a1d4ecb53f6239a005fd9246eb081cc3f3f63b8816b0b1f3a298805f8c9f83d84003394267223138faeb45cb2c2c6b15497df1bb5747ce41205ab8a6eddcdc6fe050c65a68abd56f81b04dfe4330d7e3a29e30dc16c2a6ef8174ad430198b0fcb2d69b6554876dc1a9147cd7a8cf2c658aaf896b2f31ab2bf", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x845) 11:18:26 executing program 3: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) eventfd2(0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000180), &(0x7f00000001c0)={0x8}, 0x0, 0x0, 0x0) 11:18:26 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)={0x28, 0x12, 0xffffffffffffffff, 0x0, 0x0, "", [@nested={0x4}, @nested={0x4}, @nested={0x10, 0x0, 0x0, 0x1, [@typed={0x4}, @typed={0x8, 0x2, 0x0, 0x0, @pid}]}]}, 0x28}], 0x1}, 0x0) 11:18:26 executing program 4: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0x1) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0xd000003b) r1 = syz_open_procfs(0x0, &(0x7f0000000980)='fdinfo/3\x00') pread64(r1, &(0x7f0000000100)=""/147, 0x93, 0x0) 11:18:26 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x34, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_QOS_MAP={0x18, 0xc7, {[{}, {}, {}, {}, {}, {}], "1bae63230cbb2c11"}}]}, 0x34}}, 0x0) 11:18:26 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0x0, 0x0, 0x0) setfsuid(0x0) [ 79.838437] audit: type=1400 audit(1756725506.146:7): avc: denied { execmem } for pid=274 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 11:18:26 executing program 6: timerfd_create(0x0, 0x180800) [ 81.043123] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 81.046826] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 81.049491] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 81.055719] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 81.059555] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 81.105122] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 81.111602] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 81.113366] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 81.120992] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 81.123488] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 81.244648] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 81.249430] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 81.256876] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 81.267604] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 81.271443] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 81.274244] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 81.276312] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 81.279432] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 81.281767] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 81.298561] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 81.302894] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 81.315301] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 81.317226] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 81.324680] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 81.326525] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 81.338479] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 81.376901] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 81.385798] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 81.392565] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 81.397452] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 81.414557] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 81.419951] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 81.421859] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 81.423471] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 81.424559] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 81.431407] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 81.435749] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 81.440666] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 81.443565] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 81.447794] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 83.139653] Bluetooth: hci1: command tx timeout [ 83.140784] Bluetooth: hci0: command tx timeout [ 83.331287] Bluetooth: hci3: command tx timeout [ 83.395261] Bluetooth: hci5: command tx timeout [ 83.395833] Bluetooth: hci2: command tx timeout [ 83.524803] Bluetooth: hci6: command tx timeout [ 83.525389] Bluetooth: hci4: command tx timeout [ 83.588244] Bluetooth: hci7: command tx timeout [ 85.187389] Bluetooth: hci0: command tx timeout [ 85.187854] Bluetooth: hci1: command tx timeout [ 85.379359] Bluetooth: hci3: command tx timeout [ 85.443962] Bluetooth: hci2: command tx timeout [ 85.445488] Bluetooth: hci5: command tx timeout [ 85.572846] Bluetooth: hci6: command tx timeout [ 85.574068] Bluetooth: hci4: command tx timeout [ 85.636345] Bluetooth: hci7: command tx timeout [ 87.236271] Bluetooth: hci0: command tx timeout [ 87.236728] Bluetooth: hci1: command tx timeout [ 87.428302] Bluetooth: hci3: command tx timeout [ 87.492309] Bluetooth: hci5: command tx timeout [ 87.492768] Bluetooth: hci2: command tx timeout [ 87.620340] Bluetooth: hci4: command tx timeout [ 87.620812] Bluetooth: hci6: command tx timeout [ 87.684225] Bluetooth: hci7: command tx timeout [ 89.284239] Bluetooth: hci1: command tx timeout [ 89.284697] Bluetooth: hci0: command tx timeout [ 89.475222] Bluetooth: hci3: command tx timeout [ 89.539374] Bluetooth: hci2: command tx timeout [ 89.539851] Bluetooth: hci5: command tx timeout [ 89.668225] Bluetooth: hci6: command tx timeout [ 89.668698] Bluetooth: hci4: command tx timeout [ 89.732431] Bluetooth: hci7: command tx timeout [ 118.125320] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.125991] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.376479] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.377133] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.743483] audit: type=1400 audit(1756725545.051:8): avc: denied { open } for pid=3745 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 118.754283] audit: type=1400 audit(1756725545.052:9): avc: denied { kernel } for pid=3745 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 118.871327] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.871943] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.893942] msdos: Unknown parameter 'audit' [ 118.986760] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.987415] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.255842] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.256507] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.532249] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.532877] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.593545] msdos: Unknown parameter 'audit' [ 119.646004] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.646657] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.747393] audit: type=1400 audit(1756725546.053:10): avc: denied { watch_reads } for pid=3809 comm="syz-executor.4" path="/syzkaller-testdir096019934/syzkaller.oAUNoc/0/file0" dev="sda" ino=15976 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 11:19:06 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000003c0)='./file1\x00', 0x0) pidfd_open(0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002b80)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000d80)=ANY=[@ANYBLOB="100000d3c0a65883cff745f7657628503f146aad65e6bcacd0ea56b174664529c12a6c3b83183cb820121db5a000fe06bd29e05bfef47b07ed1df09e8ac1b4b6cb869348468e66d0eda36bdad1ec611e84386a70578cdf7cf3a10c4ae3f5d9a7551a01565380db58375afa80c1c46e5c3511319f7a5b85c04d4630126f859f0c3aa7063a4f2142f26e8a6efcf151547a20df49850f597dc4aa04dce7cb97906229700313e643147d1527924f61b5d714d3c6c9ff76d801f4708f3da67aaf5d5d5429fbaeb08e5d6b1c01034217cd7345b4af61edb563b96d37e26356fccef47357576f"], 0x10}], 0x1}, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000d00)=ANY=[@ANYBLOB="10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000015d806dd452c7b88a9c1c575400"/97]}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000000)=@ethtool_coalesce={0x10}}) syz_io_uring_complete(0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000e80)=ANY=[@ANYBLOB="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"]}) r5 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x9, 0x81, 0x0, 0x62, 0x0, 0x5, 0x4440, 0x8, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8000}, 0x60, 0x0, 0x9, 0x2, 0x100, 0x0, 0xff, 0x0, 0x3, 0x0, 0x1}, 0x0, 0x4, r0, 0xe) pwritev2(r1, &(0x7f0000000380)=[{&(0x7f0000000180)="bd", 0xfffffdef}], 0x1, 0x0, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0xf3, 0x1, &(0x7f00000002c0)=[{&(0x7f00000001c0)="4c00da682c9cd8e67881fc520907062401152033c9b538a5b5f207ecfbf666ec6c426bf80c0af3903645ba05cc27c9baf9fb8747ea0fd0cf0210d8961dfac9e1892fc6602f466a80d2fe194f5ee84c43317ae9a96c1f564cbb927b4cc3991eb8afc79ad2b0b500bd9be3a0313122e8086682e2799ddc39a6a774fbd3bc4e5ac90cecd9871d2cad0b452757c2395edf4524eaf3ba8f19cdfb1c14e5d1e5dca3daf7112bfb211e7620ca9d2150df91e3c9239464e612320566cea7759aa6f22be41a97eaf2d7ece986c5435ec0f8554392536134bbddb1d08e8f0c6ec0d8dd79c9ea6d99308ec26bd71c320ea2", 0xec}], 0x200000, &(0x7f0000000300)={[{}, {@dots}], [{@audit}]}) write$binfmt_elf64(r5, &(0x7f0000000400)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x40, 0x20, 0x3, 0x9, 0x3, 0x3, 0x1, 0x26d, 0x40, 0x241, 0x8ebb, 0x0, 0x38, 0x1, 0xeb, 0x2, 0x3f}, [{0x1, 0x4e12889d, 0x1f, 0xffffffffffffff36, 0x0, 0x101, 0x23fb, 0x1f0}], "0cee748db37a7811d2d59472625e334d254811e306c185398ffef3418d6082ed0e89282230042b826104bc4ead3f11c43489ae0b74b4070c67c2cfd881c01ce38d28b2c944694589107102d76538e953677cf5995a1d4ecb53f6239a005fd9246eb081cc3f3f63b8816b0b1f3a298805f8c9f83d84003394267223138faeb45cb2c2c6b15497df1bb5747ce41205ab8a6eddcdc6fe050c65a68abd56f81b04dfe4330d7e3a29e30dc16c2a6ef8174ad430198b0fcb2d69b6554876dc1a9147cd7a8cf2c658aaf896b2f31ab2bf", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x845) 11:19:06 executing program 4: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0x1) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0xd000003b) r1 = syz_open_procfs(0x0, &(0x7f0000000980)='fdinfo/3\x00') pread64(r1, &(0x7f0000000100)=""/147, 0x93, 0x0) [ 119.829321] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.829910] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.899402] msdos: Unknown parameter 'audit' 11:19:06 executing program 4: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0x1) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0xd000003b) r1 = syz_open_procfs(0x0, &(0x7f0000000980)='fdinfo/3\x00') pread64(r1, &(0x7f0000000100)=""/147, 0x93, 0x0) 11:19:06 executing program 4: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0x1) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0xd000003b) r1 = syz_open_procfs(0x0, &(0x7f0000000980)='fdinfo/3\x00') pread64(r1, &(0x7f0000000100)=""/147, 0x93, 0x0) 11:19:06 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000003c0)='./file1\x00', 0x0) pidfd_open(0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002b80)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000d80)=ANY=[@ANYBLOB="100000d3c0a65883cff745f7657628503f146aad65e6bcacd0ea56b174664529c12a6c3b83183cb820121db5a000fe06bd29e05bfef47b07ed1df09e8ac1b4b6cb869348468e66d0eda36bdad1ec611e84386a70578cdf7cf3a10c4ae3f5d9a7551a01565380db58375afa80c1c46e5c3511319f7a5b85c04d4630126f859f0c3aa7063a4f2142f26e8a6efcf151547a20df49850f597dc4aa04dce7cb97906229700313e643147d1527924f61b5d714d3c6c9ff76d801f4708f3da67aaf5d5d5429fbaeb08e5d6b1c01034217cd7345b4af61edb563b96d37e26356fccef47357576f"], 0x10}], 0x1}, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000d00)=ANY=[@ANYBLOB="10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000015d806dd452c7b88a9c1c575400"/97]}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000000)=@ethtool_coalesce={0x10}}) syz_io_uring_complete(0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000e80)=ANY=[@ANYBLOB="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"]}) r5 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x9, 0x81, 0x0, 0x62, 0x0, 0x5, 0x4440, 0x8, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8000}, 0x60, 0x0, 0x9, 0x2, 0x100, 0x0, 0xff, 0x0, 0x3, 0x0, 0x1}, 0x0, 0x4, r0, 0xe) pwritev2(r1, &(0x7f0000000380)=[{&(0x7f0000000180)="bd", 0xfffffdef}], 0x1, 0x0, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0xf3, 0x1, &(0x7f00000002c0)=[{&(0x7f00000001c0)="4c00da682c9cd8e67881fc520907062401152033c9b538a5b5f207ecfbf666ec6c426bf80c0af3903645ba05cc27c9baf9fb8747ea0fd0cf0210d8961dfac9e1892fc6602f466a80d2fe194f5ee84c43317ae9a96c1f564cbb927b4cc3991eb8afc79ad2b0b500bd9be3a0313122e8086682e2799ddc39a6a774fbd3bc4e5ac90cecd9871d2cad0b452757c2395edf4524eaf3ba8f19cdfb1c14e5d1e5dca3daf7112bfb211e7620ca9d2150df91e3c9239464e612320566cea7759aa6f22be41a97eaf2d7ece986c5435ec0f8554392536134bbddb1d08e8f0c6ec0d8dd79c9ea6d99308ec26bd71c320ea2", 0xec}], 0x200000, &(0x7f0000000300)={[{}, {@dots}], [{@audit}]}) write$binfmt_elf64(r5, &(0x7f0000000400)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x40, 0x20, 0x3, 0x9, 0x3, 0x3, 0x1, 0x26d, 0x40, 0x241, 0x8ebb, 0x0, 0x38, 0x1, 0xeb, 0x2, 0x3f}, [{0x1, 0x4e12889d, 0x1f, 0xffffffffffffff36, 0x0, 0x101, 0x23fb, 0x1f0}], "0cee748db37a7811d2d59472625e334d254811e306c185398ffef3418d6082ed0e89282230042b826104bc4ead3f11c43489ae0b74b4070c67c2cfd881c01ce38d28b2c944694589107102d76538e953677cf5995a1d4ecb53f6239a005fd9246eb081cc3f3f63b8816b0b1f3a298805f8c9f83d84003394267223138faeb45cb2c2c6b15497df1bb5747ce41205ab8a6eddcdc6fe050c65a68abd56f81b04dfe4330d7e3a29e30dc16c2a6ef8174ad430198b0fcb2d69b6554876dc1a9147cd7a8cf2c658aaf896b2f31ab2bf", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x845) 11:19:06 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000003c0)='./file1\x00', 0x0) pidfd_open(0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002b80)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000d80)=ANY=[@ANYBLOB="100000d3c0a65883cff745f7657628503f146aad65e6bcacd0ea56b174664529c12a6c3b83183cb820121db5a000fe06bd29e05bfef47b07ed1df09e8ac1b4b6cb869348468e66d0eda36bdad1ec611e84386a70578cdf7cf3a10c4ae3f5d9a7551a01565380db58375afa80c1c46e5c3511319f7a5b85c04d4630126f859f0c3aa7063a4f2142f26e8a6efcf151547a20df49850f597dc4aa04dce7cb97906229700313e643147d1527924f61b5d714d3c6c9ff76d801f4708f3da67aaf5d5d5429fbaeb08e5d6b1c01034217cd7345b4af61edb563b96d37e26356fccef47357576f"], 0x10}], 0x1}, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000d00)=ANY=[@ANYBLOB="10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000015d806dd452c7b88a9c1c575400"/97]}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000000)=@ethtool_coalesce={0x10}}) syz_io_uring_complete(0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000e80)=ANY=[@ANYBLOB="1000000000000000000000000020000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000009c4a9d0400000000000003d6f0cde0a9c4befb85877a4a736e02070000000000000030bcb78b19b2105e6692e9e6cbe79c6c9a6eeb4bd828b31d3db159fa22c888a90acd4a3bb1149da2feca48eedf3c48d8c54d5c3c495a10fc0bc19d4ab049f38288f580ec437a8eef51cdeed4de842456b3bcc7826911e81827d08a7e820da3e730682a76758768af0f01aff9abb6031f4b68084c239142883ba29a31db950ae4b1e336547ab6d88fc6aac5508bad79d801a32c881cacbe8f776334ff3f70e95c7eb69dc44105e9a84e55463c39f635abcc5dd7a8a740eaf0d69c52421e0d76ed9a1814f8783f084e2f1c8e9bfd8121f247a4bc2a5d43eb2b35e2939c416670e858056a5a2b1a1cfe5fbd150b7291d9d9"]}) r5 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x9, 0x81, 0x0, 0x62, 0x0, 0x5, 0x4440, 0x8, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8000}, 0x60, 0x0, 0x9, 0x2, 0x100, 0x0, 0xff, 0x0, 0x3, 0x0, 0x1}, 0x0, 0x4, r0, 0xe) pwritev2(r1, &(0x7f0000000380)=[{&(0x7f0000000180)="bd", 0xfffffdef}], 0x1, 0x0, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0xf3, 0x1, &(0x7f00000002c0)=[{&(0x7f00000001c0)="4c00da682c9cd8e67881fc520907062401152033c9b538a5b5f207ecfbf666ec6c426bf80c0af3903645ba05cc27c9baf9fb8747ea0fd0cf0210d8961dfac9e1892fc6602f466a80d2fe194f5ee84c43317ae9a96c1f564cbb927b4cc3991eb8afc79ad2b0b500bd9be3a0313122e8086682e2799ddc39a6a774fbd3bc4e5ac90cecd9871d2cad0b452757c2395edf4524eaf3ba8f19cdfb1c14e5d1e5dca3daf7112bfb211e7620ca9d2150df91e3c9239464e612320566cea7759aa6f22be41a97eaf2d7ece986c5435ec0f8554392536134bbddb1d08e8f0c6ec0d8dd79c9ea6d99308ec26bd71c320ea2", 0xec}], 0x200000, &(0x7f0000000300)={[{}, {@dots}], [{@audit}]}) write$binfmt_elf64(r5, &(0x7f0000000400)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x40, 0x20, 0x3, 0x9, 0x3, 0x3, 0x1, 0x26d, 0x40, 0x241, 0x8ebb, 0x0, 0x38, 0x1, 0xeb, 0x2, 0x3f}, [{0x1, 0x4e12889d, 0x1f, 0xffffffffffffff36, 0x0, 0x101, 0x23fb, 0x1f0}], "0cee748db37a7811d2d59472625e334d254811e306c185398ffef3418d6082ed0e89282230042b826104bc4ead3f11c43489ae0b74b4070c67c2cfd881c01ce38d28b2c944694589107102d76538e953677cf5995a1d4ecb53f6239a005fd9246eb081cc3f3f63b8816b0b1f3a298805f8c9f83d84003394267223138faeb45cb2c2c6b15497df1bb5747ce41205ab8a6eddcdc6fe050c65a68abd56f81b04dfe4330d7e3a29e30dc16c2a6ef8174ad430198b0fcb2d69b6554876dc1a9147cd7a8cf2c658aaf896b2f31ab2bf", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x845) 11:19:06 executing program 5: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) link(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00') [ 120.307929] msdos: Unknown parameter 'audit' 11:19:06 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 120.394396] msdos: Unknown parameter 'audit' [ 120.491575] kmemleak: Found object by alias at 0x607f1a63de84 [ 120.491595] CPU: 0 UID: 0 PID: 3862 Comm: syz-executor.5 Tainted: G W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) [ 120.491613] Tainted: [W]=WARN [ 120.491617] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 120.491625] Call Trace: [ 120.491629] [ 120.491634] dump_stack_lvl+0xca/0x120 [ 120.491667] __lookup_object+0x94/0xb0 [ 120.491685] delete_object_full+0x27/0x70 [ 120.491702] free_percpu+0x30/0x1160 [ 120.491718] ? arch_uprobe_clear_state+0x16/0x140 [ 120.491739] futex_hash_free+0x38/0xc0 [ 120.491755] mmput+0x2d3/0x390 [ 120.491774] do_exit+0x79d/0x2970 [ 120.491788] ? lock_release+0xc8/0x290 [ 120.491806] ? __pfx_do_exit+0x10/0x10 [ 120.491820] ? find_held_lock+0x2b/0x80 [ 120.491838] ? get_signal+0x835/0x2340 [ 120.491858] do_group_exit+0xd3/0x2a0 [ 120.491873] get_signal+0x2315/0x2340 [ 120.491892] ? __virt_addr_valid+0x1c6/0x5d0 [ 120.491911] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 120.491927] ? __pfx_get_signal+0x10/0x10 [ 120.491944] ? do_futex+0x135/0x370 [ 120.491958] ? __pfx_do_futex+0x10/0x10 [ 120.491973] arch_do_signal_or_restart+0x80/0x790 [ 120.491991] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 120.492008] ? __x64_sys_futex+0x1c9/0x4d0 [ 120.492021] ? __x64_sys_futex+0x1d2/0x4d0 [ 120.492035] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 120.492047] ? __pfx___x64_sys_futex+0x10/0x10 [ 120.492061] ? __pfx___x64_sys_mount+0x10/0x10 [ 120.492080] exit_to_user_mode_loop+0x8b/0x110 [ 120.492093] do_syscall_64+0x2f7/0x360 [ 120.492107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.492119] RIP: 0033:0x7f6216a89b19 [ 120.492128] Code: Unable to access opcode bytes at 0x7f6216a89aef. [ 120.492134] RSP: 002b:00007f6213fff218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 120.492146] RAX: fffffffffffffe00 RBX: 00007f6216b9cf68 RCX: 00007f6216a89b19 [ 120.492154] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f6216b9cf68 [ 120.492165] RBP: 00007f6216b9cf60 R08: 0000000000000000 R09: 0000000000000000 [ 120.492172] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6216b9cf6c [ 120.492180] R13: 00007ffcc9f6ad1f R14: 00007f6213fff300 R15: 0000000000022000 [ 120.492196] [ 120.492199] kmemleak: Object (percpu) 0x607f1a63de80 (size 8): [ 120.492206] kmemleak: comm "syz-executor.4", pid 3857, jiffies 4294787195 [ 120.492214] kmemleak: min_count = 1 [ 120.492218] kmemleak: count = 0 [ 120.492222] kmemleak: flags = 0x21 [ 120.492226] kmemleak: checksum = 0 [ 120.492229] kmemleak: backtrace: [ 120.492233] pcpu_alloc_noprof+0x87a/0x1170 [ 120.492249] __alloc_workqueue+0x74b/0x1820 [ 120.492267] alloc_workqueue_noprof+0xc7/0x200 [ 120.492277] loop_configure+0xf73/0x1590 [ 120.492292] lo_ioctl+0x66d/0x1c70 [ 120.492305] blkdev_ioctl+0x27c/0x6c0 [ 120.492316] __x64_sys_ioctl+0x18f/0x210 [ 120.492332] do_syscall_64+0xbf/0x360 [ 120.492342] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.764307] kmemleak: Cannot insert 0x607f1a63de84 into the object search tree (overlaps existing) [ 120.764324] CPU: 0 UID: 0 PID: 285 Comm: syz-executor.7 Tainted: G W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) [ 120.764343] Tainted: [W]=WARN [ 120.764347] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 120.764355] Call Trace: [ 120.764359] [ 120.764364] dump_stack_lvl+0xca/0x120 [ 120.764390] __link_object+0x190/0x210 [ 120.764413] __create_object+0x48/0x80 [ 120.764432] pcpu_alloc_noprof+0x87a/0x1170 [ 120.764457] alloc_netdev_mqs+0x131/0x1360 [ 120.764475] ? __pfx_ieee80211_if_setup+0x10/0x10 [ 120.764497] ieee80211_if_add+0x1d9/0x1510 [ 120.764517] ? ieee80211_init_rate_ctrl_alg+0x83/0x650 [ 120.764533] ieee80211_register_hw+0x3538/0x3e00 [ 120.764555] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 120.764570] ? net_generic+0x25/0x2a0 [ 120.764590] ? find_held_lock+0x2b/0x80 [ 120.764613] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 120.764629] ? __hrtimer_setup+0x1a4/0x2c0 [ 120.764651] mac80211_hwsim_new_radio+0x2758/0x4ef0 [ 120.764674] ? __nla_validate_parse+0x2e6/0x2880 [ 120.764693] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 120.764712] hwsim_new_radio_nl+0xb0d/0x1250 [ 120.764725] ? kasan_save_track+0x14/0x30 [ 120.764742] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 120.764762] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bc/0x290 [ 120.764777] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 120.764794] genl_family_rcv_msg_doit+0x1fe/0x2f0 [ 120.764808] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 120.764827] ? security_capable+0x2f/0x90 [ 120.764843] ? ns_capable+0xe2/0x120 [ 120.764863] genl_rcv_msg+0x532/0x7e0 [ 120.764878] ? __pfx_genl_rcv_msg+0x10/0x10 [ 120.764890] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 120.764907] ? __lock_acquire+0x694/0x1b70 [ 120.764923] netlink_rcv_skb+0x147/0x430 [ 120.764943] ? __pfx_genl_rcv_msg+0x10/0x10 [ 120.764956] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 120.764982] ? netlink_deliver_tap+0x1ae/0xce0 [ 120.764998] ? selinux_netlink_send+0x507/0x880 [ 120.765012] ? is_vmalloc_addr+0x86/0xa0 [ 120.765033] genl_rcv+0x28/0x40 [ 120.765044] netlink_unicast+0x5a7/0x870 [ 120.765064] ? __pfx_netlink_unicast+0x10/0x10 [ 120.765090] netlink_sendmsg+0x8ac/0xd80 [ 120.765111] ? __pfx_netlink_sendmsg+0x10/0x10 [ 120.765136] __sys_sendto+0x506/0x570 [ 120.765154] ? __pfx___sys_sendto+0x10/0x10 [ 120.765177] ? lock_release+0xc8/0x290 [ 120.765193] ? fd_install+0x1f0/0x660 [ 120.765207] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 120.765221] ? __pfx___sys_socket+0x10/0x10 [ 120.765235] ? __pfx_fput_close_sync+0x10/0x10 [ 120.765252] ? xfd_validate_state+0x55/0x180 [ 120.765273] __x64_sys_sendto+0xe1/0x1c0 [ 120.765289] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 120.765302] do_syscall_64+0xbf/0x360 [ 120.765318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.765331] RIP: 0033:0x7fce832988ac [ 120.765341] Code: fa fa ff ff 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 20 fb ff ff 48 8b [ 120.765352] RSP: 002b:00007ffcd34330b0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 120.765364] RAX: ffffffffffffffda RBX: 00007fce84331320 RCX: 00007fce832988ac [ 120.765372] RDX: 0000000000000024 RSI: 00007fce84331370 RDI: 0000000000000003 [ 120.765379] RBP: 0000000000000000 R08: 00007ffcd3433104 R09: 000000000000000c [ 120.765386] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 120.765393] R13: 00007fce84331370 R14: 0000000000000003 R15: 0000000000000000 [ 120.765409] [ 120.766232] kmemleak: Kernel memory leak detector disabled [ 120.766236] kmemleak: Object (percpu) 0x607f1a63de80 (size 8): [ 120.766243] kmemleak: comm "syz-executor.4", pid 3857, jiffies 4294787195 [ 120.766251] kmemleak: min_count = 1 [ 120.766255] kmemleak: count = 0 [ 120.766258] kmemleak: flags = 0x21 [ 120.766262] kmemleak: checksum = 0 [ 120.766266] kmemleak: backtrace: [ 120.766270] pcpu_alloc_noprof+0x87a/0x1170 [ 120.766286] __alloc_workqueue+0x74b/0x1820 [ 120.766304] alloc_workqueue_noprof+0xc7/0x200 [ 120.766316] loop_configure+0xf73/0x1590 [ 120.766333] lo_ioctl+0x66d/0x1c70 [ 120.766347] blkdev_ioctl+0x27c/0x6c0 [ 120.766357] __x64_sys_ioctl+0x18f/0x210 [ 120.766373] do_syscall_64+0xbf/0x360 [ 120.766383] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.811393] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.811960] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.872624] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.873235] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.914775] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.915399] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.061115] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.061903] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.094606] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.095251] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.134429] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.135039] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.192966] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.194204] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.236220] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.236851] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 11:19:07 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000003c0)='./file1\x00', 0x0) pidfd_open(0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002b80)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000d80)=ANY=[@ANYBLOB="100000d3c0a65883cff745f7657628503f146aad65e6bcacd0ea56b174664529c12a6c3b83183cb820121db5a000fe06bd29e05bfef47b07ed1df09e8ac1b4b6cb869348468e66d0eda36bdad1ec611e84386a70578cdf7cf3a10c4ae3f5d9a7551a01565380db58375afa80c1c46e5c3511319f7a5b85c04d4630126f859f0c3aa7063a4f2142f26e8a6efcf151547a20df49850f597dc4aa04dce7cb97906229700313e643147d1527924f61b5d714d3c6c9ff76d801f4708f3da67aaf5d5d5429fbaeb08e5d6b1c01034217cd7345b4af61edb563b96d37e26356fccef47357576f"], 0x10}], 0x1}, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000d00)=ANY=[@ANYBLOB="10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000015d806dd452c7b88a9c1c575400"/97]}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000000)=@ethtool_coalesce={0x10}}) syz_io_uring_complete(0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000e80)=ANY=[@ANYBLOB="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"]}) r5 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x9, 0x81, 0x0, 0x62, 0x0, 0x5, 0x4440, 0x8, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8000}, 0x60, 0x0, 0x9, 0x2, 0x100, 0x0, 0xff, 0x0, 0x3, 0x0, 0x1}, 0x0, 0x4, r0, 0xe) pwritev2(r1, &(0x7f0000000380)=[{&(0x7f0000000180)="bd", 0xfffffdef}], 0x1, 0x0, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0xf3, 0x1, &(0x7f00000002c0)=[{&(0x7f00000001c0)="4c00da682c9cd8e67881fc520907062401152033c9b538a5b5f207ecfbf666ec6c426bf80c0af3903645ba05cc27c9baf9fb8747ea0fd0cf0210d8961dfac9e1892fc6602f466a80d2fe194f5ee84c43317ae9a96c1f564cbb927b4cc3991eb8afc79ad2b0b500bd9be3a0313122e8086682e2799ddc39a6a774fbd3bc4e5ac90cecd9871d2cad0b452757c2395edf4524eaf3ba8f19cdfb1c14e5d1e5dca3daf7112bfb211e7620ca9d2150df91e3c9239464e612320566cea7759aa6f22be41a97eaf2d7ece986c5435ec0f8554392536134bbddb1d08e8f0c6ec0d8dd79c9ea6d99308ec26bd71c320ea2", 0xec}], 0x200000, &(0x7f0000000300)={[{}, {@dots}], [{@audit}]}) write$binfmt_elf64(r5, &(0x7f0000000400)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x40, 0x20, 0x3, 0x9, 0x3, 0x3, 0x1, 0x26d, 0x40, 0x241, 0x8ebb, 0x0, 0x38, 0x1, 0xeb, 0x2, 0x3f}, [{0x1, 0x4e12889d, 0x1f, 0xffffffffffffff36, 0x0, 0x101, 0x23fb, 0x1f0}], "0cee748db37a7811d2d59472625e334d254811e306c185398ffef3418d6082ed0e89282230042b826104bc4ead3f11c43489ae0b74b4070c67c2cfd881c01ce38d28b2c944694589107102d76538e953677cf5995a1d4ecb53f6239a005fd9246eb081cc3f3f63b8816b0b1f3a298805f8c9f83d84003394267223138faeb45cb2c2c6b15497df1bb5747ce41205ab8a6eddcdc6fe050c65a68abd56f81b04dfe4330d7e3a29e30dc16c2a6ef8174ad430198b0fcb2d69b6554876dc1a9147cd7a8cf2c658aaf896b2f31ab2bf", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x845) 11:19:07 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lremovexattr(&(0x7f00000001c0)='./file0\x00', 0x0) getgroups(0x0, 0x0) dup(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001240)={0x1c, r1, 0x5, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 11:19:07 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000003c0)='./file1\x00', 0x0) pidfd_open(0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002b80)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000d80)=ANY=[@ANYBLOB="100000d3c0a65883cff745f7657628503f146aad65e6bcacd0ea56b174664529c12a6c3b83183cb820121db5a000fe06bd29e05bfef47b07ed1df09e8ac1b4b6cb869348468e66d0eda36bdad1ec611e84386a70578cdf7cf3a10c4ae3f5d9a7551a01565380db58375afa80c1c46e5c3511319f7a5b85c04d4630126f859f0c3aa7063a4f2142f26e8a6efcf151547a20df49850f597dc4aa04dce7cb97906229700313e643147d1527924f61b5d714d3c6c9ff76d801f4708f3da67aaf5d5d5429fbaeb08e5d6b1c01034217cd7345b4af61edb563b96d37e26356fccef47357576f"], 0x10}], 0x1}, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000d00)=ANY=[@ANYBLOB="10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000015d806dd452c7b88a9c1c575400"/97]}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000000)=@ethtool_coalesce={0x10}}) syz_io_uring_complete(0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000e80)=ANY=[@ANYBLOB="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"]}) r5 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x9, 0x81, 0x0, 0x62, 0x0, 0x5, 0x4440, 0x8, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8000}, 0x60, 0x0, 0x9, 0x2, 0x100, 0x0, 0xff, 0x0, 0x3, 0x0, 0x1}, 0x0, 0x4, r0, 0xe) pwritev2(r1, &(0x7f0000000380)=[{&(0x7f0000000180)="bd", 0xfffffdef}], 0x1, 0x0, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0xf3, 0x1, &(0x7f00000002c0)=[{&(0x7f00000001c0)="4c00da682c9cd8e67881fc520907062401152033c9b538a5b5f207ecfbf666ec6c426bf80c0af3903645ba05cc27c9baf9fb8747ea0fd0cf0210d8961dfac9e1892fc6602f466a80d2fe194f5ee84c43317ae9a96c1f564cbb927b4cc3991eb8afc79ad2b0b500bd9be3a0313122e8086682e2799ddc39a6a774fbd3bc4e5ac90cecd9871d2cad0b452757c2395edf4524eaf3ba8f19cdfb1c14e5d1e5dca3daf7112bfb211e7620ca9d2150df91e3c9239464e612320566cea7759aa6f22be41a97eaf2d7ece986c5435ec0f8554392536134bbddb1d08e8f0c6ec0d8dd79c9ea6d99308ec26bd71c320ea2", 0xec}], 0x200000, &(0x7f0000000300)={[{}, {@dots}], [{@audit}]}) write$binfmt_elf64(r5, &(0x7f0000000400)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x40, 0x20, 0x3, 0x9, 0x3, 0x3, 0x1, 0x26d, 0x40, 0x241, 0x8ebb, 0x0, 0x38, 0x1, 0xeb, 0x2, 0x3f}, [{0x1, 0x4e12889d, 0x1f, 0xffffffffffffff36, 0x0, 0x101, 0x23fb, 0x1f0}], "0cee748db37a7811d2d59472625e334d254811e306c185398ffef3418d6082ed0e89282230042b826104bc4ead3f11c43489ae0b74b4070c67c2cfd881c01ce38d28b2c944694589107102d76538e953677cf5995a1d4ecb53f6239a005fd9246eb081cc3f3f63b8816b0b1f3a298805f8c9f83d84003394267223138faeb45cb2c2c6b15497df1bb5747ce41205ab8a6eddcdc6fe050c65a68abd56f81b04dfe4330d7e3a29e30dc16c2a6ef8174ad430198b0fcb2d69b6554876dc1a9147cd7a8cf2c658aaf896b2f31ab2bf", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x845) 11:19:07 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000180)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "8d00a05de92cd2e174cbfb618b6904b473c3fe05ed91a72b627000", "a17dfcb460646196dff50ec71ded0b59", {"a979159a1b08243b764e33f13a6a2006", "a8e72dde502d5382c448b363b844c5e6"}}}}}}}, 0x0) recvmmsg(r0, &(0x7f0000005bc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) recvmmsg(r0, &(0x7f00000053c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 11:19:07 executing program 5: io_uring_setup(0xeba, &(0x7f0000001140)) 11:19:07 executing program 6: request_key(&(0x7f0000000040)='id_legacy\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0xfffffffffffffffd) 11:19:07 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x34, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_QOS_MAP={0x18, 0xc7, {[{}, {}, {}, {}, {}, {}], "1bae63230cbb2c11"}}]}, 0x34}}, 0x0) 11:19:07 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)={0x28, 0x12, 0xffffffffffffffff, 0x0, 0x0, "", [@nested={0x4}, @nested={0x4}, @nested={0x10, 0x0, 0x0, 0x1, [@typed={0x4}, @typed={0x8, 0x2, 0x0, 0x0, @pid}]}]}, 0x28}], 0x1}, 0x0) [ 121.369729] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2 11:19:07 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) [ 121.398612] syz-executor.0 (3935) used greatest stack depth: 23568 bytes left 11:19:07 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x1d, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000000000004000000000002000020000020000000e0f4655fe0f4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000018000000c28500002b0200000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e32303330363131363700"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000ab7a0e3e026c4410ac9856e86774ba11010040000c00000000000000ddf4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000100000000000500400000000000000000000000000000003100000000000000", 0x40, 0x540}, {&(0x7f0000010300)="03000000040000000500000019000f0003000400"/32, 0x20, 0x800}, {&(0x7f0000010400)="7f000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0100ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000ddf4655fddf4655fddf4655f00"/2080, 0x820, 0xc00}, {&(0x7f0000010d00)="ed41000000040000ddf4655fe0f4655fe0f4655f00000000000004002000000000000800050000000af301000400000000000000000000000100000010000000", 0x40, 0x1500}, {&(0x7f0000010e00)="20000000c8946f1dc8946f1d00000000ddf4655f00"/32, 0x20, 0x1580}, {&(0x7f0000010f00)="8081000000300404ddf4655fddf4655fddf4655f00000000000001002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000ddf4655f00"/160, 0xa0, 0x1a00}, {&(0x7f0000011000)="c0410000002c0000ddf4655fddf4655fddf4655f00000000000002002000000000000800000000000af301000400000000000000000000000b00000020000000", 0x40, 0x1e00}, {&(0x7f0000011100)="20000000000000000000000000000000ddf4655f000000000000000000000000000002ea00"/64, 0x40, 0x1e80}, {&(0x7f0000011200)="ed4100003c000000e0f4655fe0f4655fe0f4655f0000000000000200000000000000001003000000020000000d0000001000050166696c65300000000e0000002800050766696c65310000000000000000000000000000000000000000000000000000004d5f6b7100000000000000000000000000000000000000000000000020000000c8946f1dc8946f1dc8946f1de0f4655fc8946f1d0000000000000000000002ea04070000000000000000000000000000646174610000000000000000", 0xc0, 0x1f00}, {&(0x7f0000011300)="ed8100001a040000e0f4655fe0f4655fe0f4655f00000000000001002000000000000800010000000af30100040000000000000000000000020000005000000000000000000000000000000000000000000000000000000000000000000000000000000048dad3ce00000000000000000000000000000000000000000000000020000000c8946f1dc8946f1dc8946f1de0f4655fc8946f1d0000000000000000", 0xa0, 0x2000}, {&(0x7f0000011400)="ffa1000026000000e0f4655fe0f4655fe0f4655f00000000000001000000000000000000010000002f746d702f73797a2d696d61676567656e3230333036313136372f66696c65302f66696c653000000000000000000000000000000000000000000000c7982f7500000000000000000000000000000000000000000000000020000000c8946f1dc8946f1dc8946f1de0f4655fc8946f1d0000000000000000", 0xa0, 0x2100}, {&(0x7f0000011500)="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", 0x1a0, 0x2200}, {&(0x7f0000011700)="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", 0x100, 0x2400}, {&(0x7f0000011800)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531000000100000001000050166696c6532000000100000001000050166696c6533000000110000009403090166696c652e636f6c64000000", 0x80, 0x4000}, {&(0x7f0000011900)="0b0000000c0001022e000000020000000c0002022e2e000000000000e8030000", 0x20, 0x8000}, {&(0x7f0000011a00)="00000000000400"/32, 0x20, 0x8400}, {&(0x7f0000011b00)="00000000000400"/32, 0x20, 0x8800}, {&(0x7f0000011c00)="00000000000400"/32, 0x20, 0x8c00}, {&(0x7f0000011d00)="00000000000400"/32, 0x20, 0x9000}, {&(0x7f0000011e00)="00000000000400"/32, 0x20, 0x9400}, {&(0x7f0000011f00)="00000000000400"/32, 0x20, 0x9800}, {&(0x7f0000012000)="00000000000400"/32, 0x20, 0x9c00}, {&(0x7f0000012100)="00000000000400"/32, 0x20, 0xa000}, {&(0x7f0000012200)="00000000000400"/32, 0x20, 0xa400}, {&(0x7f0000012300)="00000000000400"/32, 0x20, 0xa800}, {&(0x7f0000012400)="504d4d00504d4dffe0f4655f00000000647679756b6f762d676c6170746f70320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006c6f6f7033310075782f746573742f73797a5f6d6f756e745f696d6167655f650500"/128, 0x80, 0x10000}, {&(0x7f0000012500)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x14000}], 0x0, &(0x7f0000012a00)) 11:19:07 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)={0x28, 0x12, 0xffffffffffffffff, 0x0, 0x0, "", [@nested={0x4}, @nested={0x4}, @nested={0x10, 0x0, 0x0, 0x1, [@typed={0x4}, @typed={0x8, 0x2, 0x0, 0x0, @pid}]}]}, 0x28}], 0x1}, 0x0) [ 121.424358] msdos: Unknown parameter 'audit' 11:19:07 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000180)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "8d00a05de92cd2e174cbfb618b6904b473c3fe05ed91a72b627000", "a17dfcb460646196dff50ec71ded0b59", {"a979159a1b08243b764e33f13a6a2006", "a8e72dde502d5382c448b363b844c5e6"}}}}}}}, 0x0) recvmmsg(r0, &(0x7f0000005bc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) recvmmsg(r0, &(0x7f00000053c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 11:19:07 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x34, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_QOS_MAP={0x18, 0xc7, {[{}, {}, {}, {}, {}, {}], "1bae63230cbb2c11"}}]}, 0x34}}, 0x0) [ 121.427852] msdos: Unknown parameter 'audit' 11:19:07 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000180)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "8d00a05de92cd2e174cbfb618b6904b473c3fe05ed91a72b627000", "a17dfcb460646196dff50ec71ded0b59", {"a979159a1b08243b764e33f13a6a2006", "a8e72dde502d5382c448b363b844c5e6"}}}}}}}, 0x0) recvmmsg(r0, &(0x7f0000005bc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) recvmmsg(r0, &(0x7f00000053c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) [ 121.443858] loop6: detected capacity change from 0 to 1024 11:19:07 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lremovexattr(&(0x7f00000001c0)='./file0\x00', 0x0) getgroups(0x0, 0x0) dup(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001240)={0x1c, r1, 0x5, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) [ 121.470349] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2 11:19:07 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)={0x28, 0x12, 0xffffffffffffffff, 0x0, 0x0, "", [@nested={0x4}, @nested={0x4}, @nested={0x10, 0x0, 0x0, 0x1, [@typed={0x4}, @typed={0x8, 0x2, 0x0, 0x0, @pid}]}]}, 0x28}], 0x1}, 0x0) [ 121.477949] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN NOPTI [ 121.478854] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 121.479456] CPU: 0 UID: 0 PID: 396 Comm: kworker/u9:6 Tainted: G W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) [ 121.480373] Tainted: [W]=WARN [ 121.482899] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 121.484885] Workqueue: ext4-rsv-conversion loop_rootcg_workfn [ 121.485360] RIP: 0010:kasan_byte_accessible+0x15/0x30 [ 121.485771] Code: 00 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 48 b8 00 00 00 00 00 fc ff df 48 c1 ef 03 48 01 c7 <0f> b6 07 3c 07 0f 96 c0 e9 ce 4c 0e 03 66 66 2e 0f 1f 84 00 00 00 [ 121.487199] RSP: 0018:ffff88804685fbe0 EFLAGS: 00010286 [ 121.487619] RAX: dffffc0000000000 RBX: 0000000000000001 RCX: 0000000000000000 [ 121.488182] RDX: 0000000000000000 RSI: ffffffff8141b255 RDI: dffffc0000000000 [ 121.488748] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 121.489309] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 [ 121.489866] R13: ffffffff8141b255 R14: 0000000000000000 R15: 0000000000000000 [ 121.490434] FS: 0000000000000000(0000) GS:ffff8880e55d8000(0000) knlGS:0000000000000000 [ 121.491066] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 121.491519] CR2: 0000000020367000 CR3: 000000000d644000 CR4: 0000000000350ef0 [ 121.492076] Call Trace: [ 121.492280] [ 121.492465] __kasan_check_byte+0x14/0x50 [ 121.492803] lock_acquire+0xec/0x2f0 [ 121.493104] ? lock_release+0xc8/0x290 [ 121.493415] ? process_one_work+0x1240/0x19c0 [ 121.493783] process_one_work+0x1295/0x19c0 [ 121.494133] ? process_one_work+0x1240/0x19c0 [ 121.494496] ? __pfx_process_one_work+0x10/0x10 [ 121.494868] ? move_linked_works+0x172/0x270 [ 121.495229] ? assign_work+0x196/0x240 [ 121.495540] worker_thread+0x67e/0xe90 [ 121.495856] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 121.496273] ? __pfx_worker_thread+0x10/0x10 [ 121.496627] kthread+0x3c8/0x740 [ 121.496912] ? __pfx_kthread+0x10/0x10 [ 121.497224] ? ret_from_fork+0x23/0x430 [ 121.497549] ? lock_release+0xc8/0x290 [ 121.497859] ? __pfx_kthread+0x10/0x10 [ 121.498185] ret_from_fork+0x34b/0x430 [ 121.498504] ? __pfx_kthread+0x10/0x10 [ 121.498816] ret_from_fork_asm+0x1a/0x30 [ 121.499153] [ 121.499345] Modules linked in: [ 121.499645] ---[ end trace 0000000000000000 ]--- [ 121.500025] RIP: 0010:kasan_byte_accessible+0x15/0x30 [ 121.500503] Code: 00 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 48 b8 00 00 00 00 00 fc ff df 48 c1 ef 03 48 01 c7 <0f> b6 07 3c 07 0f 96 c0 e9 ce 4c 0e 03 66 66 2e 0f 1f 84 00 00 00 [ 121.501951] RSP: 0018:ffff88804685fbe0 EFLAGS: 00010286 [ 121.502395] RAX: dffffc0000000000 RBX: 0000000000000001 RCX: 0000000000000000 [ 121.502959] RDX: 0000000000000000 RSI: ffffffff8141b255 RDI: dffffc0000000000 [ 121.503547] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 121.504115] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 [ 121.504694] R13: ffffffff8141b255 R14: 0000000000000000 R15: 0000000000000000 [ 121.505274] FS: 0000000000000000(0000) GS:ffff8880e55d8000(0000) knlGS:0000000000000000 [ 121.505906] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 121.506392] CR2: 0000000020367000 CR3: 000000000d644000 CR4: 0000000000350ef0 [ 121.595044] kmemleak: Automatic memory scanning thread ended [ 121.662602] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#2] SMP KASAN NOPTI [ 121.663515] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 121.664115] CPU: 0 UID: 0 PID: 3763 Comm: systemd-udevd Tainted: G D W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) [ 121.665041] Tainted: [D]=DIE, [W]=WARN [ 121.665348] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 121.665991] RIP: 0010:__queue_work+0x202/0x1240 [ 121.666393] Code: 48 8b 6d 00 e8 4f ee 79 03 31 ff 41 89 c5 89 c6 e8 c3 02 32 00 45 85 ed 0f 85 e1 05 00 00 e8 85 07 32 00 48 89 e8 48 c1 e8 03 <42> 80 3c 20 00 0f 85 a0 0e 00 00 4c 8b 75 00 48 89 df 4c 89 34 24 [ 121.667812] RSP: 0018:ffff88800a68f238 EFLAGS: 00010056 [ 121.668231] RAX: 0000000000000000 RBX: ffff88800c655918 RCX: ffffffff8141ef1d [ 121.668786] RDX: ffff88801709d280 RSI: ffffffff8141ef2b RDI: 0000000000000005 [ 121.669342] RBP: 0000000000000001 R08: 0000000000000000 R09: fffffbfff0f128f4 [ 121.669905] R10: 0000000000000000 R11: ffff888016434000 R12: dffffc0000000000 [ 121.670472] R13: 0000000000000000 R14: 0000000000000000 R15: ffff888048f87000 [ 121.671031] FS: 00007fc83edda8c0(0000) GS:ffff8880e55d8000(0000) knlGS:0000000000000000 [ 121.671661] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 121.672121] CR2: 000055fee5d749e8 CR3: 0000000013b91000 CR4: 0000000000350ef0 [ 121.672684] Call Trace: [ 121.672893] [ 121.673077] ? lock_acquire+0x18c/0x2f0 [ 121.673403] queue_work_on+0xd0/0xe0 [ 121.673709] loop_queue_rq+0x5c8/0x1180 [ 121.674031] __blk_mq_issue_directly+0xd5/0x260 [ 121.674418] ? __pfx___blk_mq_issue_directly+0x10/0x10 [ 121.674839] ? blk_mq_put_tag+0x101/0x160 [ 121.675172] ? bdev_count_inflight_rw.part.0+0x5f/0x380 [ 121.675595] blk_mq_request_issue_directly+0x11c/0x1e0 [ 121.676008] blk_mq_issue_direct+0x192/0x640 [ 121.676359] ? __blk_mq_alloc_requests+0xa16/0x15a0 [ 121.676762] blk_mq_dispatch_queue_requests+0x4b0/0x7c0 [ 121.677186] blk_mq_flush_plug_list+0x1ec/0x5b0 [ 121.677558] ? read_tsc+0x9/0x20 [ 121.677836] ? ktime_get+0x16d/0x270 [ 121.678146] ? trace_block_plug+0x149/0x1b0 [ 121.678491] ? blk_add_rq_to_plug+0x234/0x550 [ 121.678853] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 121.679263] ? blk_mq_submit_bio+0x4fd/0x2220 [ 121.679629] __blk_flush_plug+0x25c/0x460 [ 121.679958] ? __pfx___blk_flush_plug+0x10/0x10 [ 121.680333] ? __pfx_css_rstat_updated+0x10/0x10 [ 121.680716] ? lock_release+0x1c7/0x290 [ 121.681036] ? blkg_create+0x214/0x1420 [ 121.681358] ? lock_release+0x1c7/0x290 [ 121.681678] __submit_bio+0x480/0x5b0 [ 121.681982] ? __pfx___submit_bio+0x10/0x10 [ 121.682334] ? lock_acquire+0x18c/0x2f0 [ 121.682653] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 121.683071] ? read_tsc+0x9/0x20 [ 121.683350] ? ktime_get+0x16d/0x270 [ 121.683651] submit_bio_noacct_nocheck+0x68e/0xcb0 [ 121.684044] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 121.684473] ? __pfx_bio_alloc_bioset+0x10/0x10 [ 121.684851] ? ww_mutex_trylock+0x441/0xb60 [ 121.685198] submit_bio_noacct+0x359/0x1350 [ 121.685543] block_read_full_folio+0x405/0x760 [ 121.685911] ? __pfx_blkdev_get_block+0x10/0x10 [ 121.686290] ? __pfx_blkdev_read_folio+0x10/0x10 [ 121.686673] filemap_read_folio+0x4a/0x1e0 [ 121.687018] filemap_get_pages+0x1133/0x18e0 [ 121.687372] ? __kernel_text_address+0xd/0x40 [ 121.687735] ? __pfx_filemap_get_pages+0x10/0x10 [ 121.688111] ? arch_stack_walk+0x9c/0xf0 [ 121.688437] ? __pfx_native_flush_tlb_one_user+0x10/0x10 [ 121.688868] ? css_rstat_updated+0x1b8/0x4d0 [ 121.689224] filemap_read+0x388/0xcf0 [ 121.689531] ? lock_release+0x1c7/0x290 [ 121.689850] ? lock_release+0x1c7/0x290 [ 121.690174] ? __pfx_filemap_read+0x10/0x10 [ 121.690521] ? __folio_batch_add_and_move+0x365/0x910 [ 121.690937] ? lock_release+0x1c7/0x290 [ 121.691255] ? lock_release+0x1c7/0x290 [ 121.691571] ? free_swap_cache+0x9a/0x2a0 [ 121.691908] ? do_wp_page+0x12b4/0x3430 [ 121.692232] ? lock_acquire+0x18c/0x2f0 [ 121.692554] ? down_read+0x1b1/0x470 [ 121.692853] ? __pfx_down_read+0x10/0x10 [ 121.693178] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 121.693555] ? avc_policy_seqno+0x9/0x20 [ 121.693877] ? selinux_file_permission+0x99/0x600 [ 121.694268] blkdev_read_iter+0x1a3/0x510 [ 121.694604] vfs_read+0x868/0xc70 [ 121.694887] ? __pfx_vfs_read+0x10/0x10 [ 121.695207] ? __seccomp_filter+0x535/0xfa0 [ 121.695556] ksys_read+0x121/0x240 [ 121.695843] ? __pfx_ksys_read+0x10/0x10 [ 121.696172] ? __secure_computing+0x18d/0x290 [ 121.696534] do_syscall_64+0xbf/0x360 [ 121.696839] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.697249] RIP: 0033:0x7fc83f37304e [ 121.697545] Code: 0f 1f 40 00 48 8b 15 79 9f 00 00 f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 0f 05 <48> 3d 00 f0 ff ff 77 5a c3 66 0f 1f 84 00 00 00 00 00 48 83 ec 28 [ 121.698969] RSP: 002b:00007fffdaccd3d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 121.699569] RAX: ffffffffffffffda RBX: 000055fee5d749e8 RCX: 00007fc83f37304e [ 121.700128] RDX: 0000000000000400 RSI: 000055fee5d749f8 RDI: 0000000000000010 [ 121.700685] RBP: 000055fee5d67510 R08: 000055fee5d749d0 R09: 00007fc83f359be0 [ 121.701248] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000000 [ 121.701807] R13: 0000000000000400 R14: 000055fee5d749d0 R15: 000055fee5d67560 [ 121.702379] [ 121.702568] Modules linked in: [ 121.702826] ---[ end trace 0000000000000000 ]--- [ 121.703196] RIP: 0010:kasan_byte_accessible+0x15/0x30 [ 121.703604] Code: 00 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 48 b8 00 00 00 00 00 fc ff df 48 c1 ef 03 48 01 c7 <0f> b6 07 3c 07 0f 96 c0 e9 ce 4c 0e 03 66 66 2e 0f 1f 84 00 00 00 [ 121.705020] RSP: 0018:ffff88804685fbe0 EFLAGS: 00010286 [ 121.705436] RAX: dffffc0000000000 RBX: 0000000000000001 RCX: 0000000000000000 [ 121.705992] RDX: 0000000000000000 RSI: ffffffff8141b255 RDI: dffffc0000000000 [ 121.706555] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 121.707119] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 [ 121.707679] R13: ffffffff8141b255 R14: 0000000000000000 R15: 0000000000000000 [ 121.708239] FS: 00007fc83edda8c0(0000) GS:ffff8880e55d8000(0000) knlGS:0000000000000000 [ 121.708871] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 121.709333] CR2: 000055fee5d749e8 CR3: 0000000013b91000 CR4: 0000000000350ef0 [ 121.709899] note: systemd-udevd[3763] exited with irqs disabled [ 121.710516] note: systemd-udevd[3763] exited with preempt_count 1 [ 121.711052] ------------[ cut here ]------------ [ 121.711533] WARNING: kernel/exit.c:898 at do_exit+0x1c36/0x2970, CPU#0: systemd-udevd/3763 [ 121.712305] Modules linked in: [ 121.712570] CPU: 0 UID: 0 PID: 3763 Comm: systemd-udevd Tainted: G D W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) [ 121.713608] Tainted: [D]=DIE, [W]=WARN [ 121.713917] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 121.714680] RIP: 0010:do_exit+0x1c36/0x2970 [ 121.715027] Code: 96 0a 00 00 c7 43 18 00 00 00 00 e9 21 e6 ff ff e8 ef b3 38 00 bf 02 24 00 00 e8 f5 ab 0b 00 e9 41 ff ff ff e8 db b3 38 00 90 <0f> 0b 90 e9 87 e4 ff ff e8 cd b3 38 00 4c 89 e6 bf 05 06 00 00 e8 [ 121.716579] RSP: 0018:ffff88800a68fe40 EFLAGS: 00010293 [ 121.717000] RAX: 0000000000000000 RBX: 0000000000000200 RCX: ffffffff813b2727 [ 121.717676] RDX: ffff88801709d280 RSI: ffffffff813b42d5 RDI: ffff88801709e468 [ 121.718357] RBP: ffff88801709d280 R08: 0000000000000001 R09: fffffbfff0f126d8 [ 121.718917] R10: 0000000000000200 R11: 0000000000000001 R12: 000000000000000b [ 121.719586] R13: 0000000000002710 R14: dffffc0000000000 R15: 0000000000000000 [ 121.720150] FS: 00007fc83edda8c0(0000) GS:ffff8880e55d8000(0000) knlGS:0000000000000000 [ 121.720893] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 121.721468] CR2: 000055fee5d749e8 CR3: 0000000013b91000 CR4: 0000000000350ef0 [ 121.722513] Call Trace: [ 121.722729] [ 121.722913] ? _printk+0xbe/0xf0 [ 121.723607] ? __pfx__printk+0x10/0x10 [ 121.723929] ? __pfx_do_exit+0x10/0x10 [ 121.724350] make_task_dead+0x174/0x3b0 [ 121.724671] ? do_syscall_64+0xbf/0x360 [ 121.724992] rewind_stack_and_make_dead+0x16/0x20 [ 121.725481] RIP: 0033:0x7fc83f37304e [ 121.725782] Code: 0f 1f 40 00 48 8b 15 79 9f 00 00 f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 0f 05 <48> 3d 00 f0 ff ff 77 5a c3 66 0f 1f 84 00 00 00 00 00 48 83 ec 28 [ 121.727325] RSP: 002b:00007fffdaccd3d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 121.727928] RAX: ffffffffffffffda RBX: 000055fee5d749e8 RCX: 00007fc83f37304e [ 121.728594] RDX: 0000000000000400 RSI: 000055fee5d749f8 RDI: 0000000000000010 [ 121.729273] RBP: 000055fee5d67510 R08: 000055fee5d749d0 R09: 00007fc83f359be0 [ 121.729836] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000000 [ 121.730604] R13: 0000000000000400 R14: 000055fee5d749d0 R15: 000055fee5d67560 [ 121.731288] [ 121.731479] irq event stamp: 51378 [ 121.731758] hardirqs last enabled at (51377): [] _raw_write_unlock_irq+0x23/0x40 [ 121.732573] hardirqs last disabled at (51378): [] __schedule+0x16dd/0x3590 [ 121.733355] softirqs last enabled at (50470): [] handle_softirqs+0x50c/0x770 [ 121.734046] softirqs last disabled at (50387): [] __irq_exit_rcu+0xc4/0x100 [ 121.734828] ---[ end trace 0000000000000000 ]--- [ 121.735290] BUG: sleeping function called from invalid context at ./include/linux/percpu-rwsem.h:51 [ 121.735994] in_atomic(): 0, irqs_disabled(): 0, non_block: 0, pid: 3763, name: systemd-udevd [ 121.736748] preempt_count: 0, expected: 0 [ 121.737077] RCU nest depth: 2, expected: 0 [ 121.737498] INFO: lockdep is turned off. [ 121.737821] CPU: 0 UID: 0 PID: 3763 Comm: systemd-udevd Tainted: G D W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) [ 121.737840] Tainted: [D]=DIE, [W]=WARN [ 121.737844] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 121.737851] Call Trace: [ 121.737854] [ 121.737859] dump_stack_lvl+0xfa/0x120 [ 121.737883] __might_resched+0x2f3/0x510 [ 121.737897] exit_signals+0x25/0x940 [ 121.737916] do_exit+0x2db/0x2970 [ 121.737929] ? _printk+0xbe/0xf0 [ 121.737942] ? __pfx__printk+0x10/0x10 [ 121.737955] ? __pfx_do_exit+0x10/0x10 [ 121.737970] make_task_dead+0x174/0x3b0 [ 121.737983] ? do_syscall_64+0xbf/0x360 [ 121.737995] rewind_stack_and_make_dead+0x16/0x20 [ 121.738011] RIP: 0033:0x7fc83f37304e [ 121.738019] Code: 0f 1f 40 00 48 8b 15 79 9f 00 00 f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb ba 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 0f 05 <48> 3d 00 f0 ff ff 77 5a c3 66 0f 1f 84 00 00 00 00 00 48 83 ec 28 [ 121.738030] RSP: 002b:00007fffdaccd3d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 121.738041] RAX: ffffffffffffffda RBX: 000055fee5d749e8 RCX: 00007fc83f37304e [ 121.738049] RDX: 0000000000000400 RSI: 000055fee5d749f8 RDI: 0000000000000010 [ 121.738057] RBP: 000055fee5d67510 R08: 000055fee5d749d0 R09: 00007fc83f359be0 [ 121.738064] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000000 [ 121.738072] R13: 0000000000000400 R14: 000055fee5d749d0 R15: 000055fee5d67560 [ 121.738083] VM DIAGNOSIS: 11:19:07 Registers: info registers vcpu 0 RAX=000000000000003d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff828e5105 RDI=ffffffff88729280 RBP=ffffffff88729240 RSP=ffff88804685f578 R8 =0000000000000000 R9 =ffffed10015f8046 R10=000000000000003d R11=3a6465746e696154 R12=000000000000003d R13=0000000000000010 R14=ffffffff88729240 R15=ffffffff828e50f0 RIP=ffffffff828e515d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e55d8000 00000000 00000000 LDT=0000 fffffe6300000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000020367000 CR3=000000000d644000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=000000000000000040e8f00000000000 XMM03=0000ff00000000000000000000000000 XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962 XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=ffff88801724ff58 RCX=0000000000000001 RDX=ffff888017250001 RSI=ffffffff81358702 RDI=ffffffff85c1c760 RBP=ffff888017248000 RSP=ffff88801724f920 R8 =0000000000000001 R9 =ffff88801724f9d8 R10=000000000003bea3 R11=00000000000c5f1c R12=ffff88801724f901 R13=ffff88801724f9e0 R14=ffff88801724ff48 R15=ffff88801724f998 RIP=ffffffff8151d8c0 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fc83edda8c0 00000000 00000000 GS =0000 ffff8880e56d8000 00000000 00000000 LDT=0000 fffffe6a00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fce843323a4 CR3=00000000072b7000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=7269762f736563697665642f7379732f XMM01=6c622f6c6175747269762f7365636976 XMM02=ffffff0f0e0d0c0b0a09080706050403 XMM03=696e656420737365636341002f737973 XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=000055fee5d8afc0000055fee5d8afa0 XMM06=000055fee5d5f0100000000000000002 XMM07=00000000000000000000000000000000 XMM08=2f63697361622f6372732f2e2e000d0a XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000