Warning: Permanently added '[localhost]:28282' (ECDSA) to the list of known hosts. 2025/08/30 01:37:09 fuzzer started 2025/08/30 01:37:09 dialing manager at localhost:43077 syzkaller login: [ 58.690766] cgroup: Unknown subsys name 'net' [ 58.770416] cgroup: Unknown subsys name 'cpuset' [ 58.784590] cgroup: Unknown subsys name 'rlimit' 2025/08/30 01:37:20 syscalls: 2214 2025/08/30 01:37:20 code coverage: enabled 2025/08/30 01:37:20 comparison tracing: enabled 2025/08/30 01:37:20 extra coverage: enabled 2025/08/30 01:37:20 setuid sandbox: enabled 2025/08/30 01:37:20 namespace sandbox: enabled 2025/08/30 01:37:20 Android sandbox: enabled 2025/08/30 01:37:20 fault injection: enabled 2025/08/30 01:37:20 leak checking: enabled 2025/08/30 01:37:20 net packet injection: enabled 2025/08/30 01:37:20 net device setup: enabled 2025/08/30 01:37:20 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/08/30 01:37:20 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/08/30 01:37:20 USB emulation: enabled 2025/08/30 01:37:20 hci packet injection: enabled 2025/08/30 01:37:20 wifi device emulation: enabled 2025/08/30 01:37:20 802.15.4 emulation: enabled 2025/08/30 01:37:20 fetching corpus: 50, signal 25517/27284 (executing program) 2025/08/30 01:37:20 fetching corpus: 100, signal 33623/36962 (executing program) 2025/08/30 01:37:20 fetching corpus: 150, signal 40379/45233 (executing program) 2025/08/30 01:37:20 fetching corpus: 200, signal 51346/57399 (executing program) 2025/08/30 01:37:20 fetching corpus: 250, signal 56318/63677 (executing program) 2025/08/30 01:37:21 fetching corpus: 300, signal 60483/69051 (executing program) 2025/08/30 01:37:21 fetching corpus: 350, signal 64270/74004 (executing program) 2025/08/30 01:37:21 fetching corpus: 400, signal 68366/79181 (executing program) 2025/08/30 01:37:21 fetching corpus: 450, signal 70384/82391 (executing program) 2025/08/30 01:37:21 fetching corpus: 500, signal 72626/85780 (executing program) 2025/08/30 01:37:21 fetching corpus: 550, signal 75083/89313 (executing program) 2025/08/30 01:37:21 fetching corpus: 600, signal 76427/91801 (executing program) 2025/08/30 01:37:21 fetching corpus: 650, signal 78771/95145 (executing program) 2025/08/30 01:37:21 fetching corpus: 700, signal 80457/97883 (executing program) 2025/08/30 01:37:21 fetching corpus: 750, signal 82268/100679 (executing program) 2025/08/30 01:37:21 fetching corpus: 800, signal 85117/104338 (executing program) 2025/08/30 01:37:22 fetching corpus: 850, signal 86574/106749 (executing program) 2025/08/30 01:37:22 fetching corpus: 900, signal 87989/109105 (executing program) 2025/08/30 01:37:22 fetching corpus: 950, signal 89894/111858 (executing program) 2025/08/30 01:37:22 fetching corpus: 1000, signal 93636/116057 (executing program) 2025/08/30 01:37:22 fetching corpus: 1050, signal 95244/118473 (executing program) 2025/08/30 01:37:22 fetching corpus: 1100, signal 97128/121141 (executing program) 2025/08/30 01:37:22 fetching corpus: 1150, signal 98687/123427 (executing program) 2025/08/30 01:37:22 fetching corpus: 1200, signal 100418/125821 (executing program) 2025/08/30 01:37:22 fetching corpus: 1250, signal 102349/128330 (executing program) 2025/08/30 01:37:22 fetching corpus: 1300, signal 103541/130266 (executing program) 2025/08/30 01:37:22 fetching corpus: 1350, signal 104871/132291 (executing program) 2025/08/30 01:37:22 fetching corpus: 1400, signal 105961/134093 (executing program) 2025/08/30 01:37:22 fetching corpus: 1450, signal 108136/136657 (executing program) 2025/08/30 01:37:23 fetching corpus: 1500, signal 109786/138812 (executing program) 2025/08/30 01:37:23 fetching corpus: 1550, signal 111043/140674 (executing program) 2025/08/30 01:37:23 fetching corpus: 1600, signal 113335/143193 (executing program) 2025/08/30 01:37:23 fetching corpus: 1650, signal 114596/145019 (executing program) 2025/08/30 01:37:23 fetching corpus: 1700, signal 115474/146482 (executing program) 2025/08/30 01:37:23 fetching corpus: 1750, signal 117305/148639 (executing program) 2025/08/30 01:37:23 fetching corpus: 1800, signal 118001/150021 (executing program) 2025/08/30 01:37:23 fetching corpus: 1850, signal 119338/151780 (executing program) 2025/08/30 01:37:23 fetching corpus: 1900, signal 119881/152997 (executing program) 2025/08/30 01:37:23 fetching corpus: 1950, signal 120775/154460 (executing program) 2025/08/30 01:37:24 fetching corpus: 2000, signal 121732/155950 (executing program) 2025/08/30 01:37:24 fetching corpus: 2050, signal 122478/157334 (executing program) 2025/08/30 01:37:24 fetching corpus: 2100, signal 123151/158568 (executing program) 2025/08/30 01:37:24 fetching corpus: 2150, signal 123689/159770 (executing program) 2025/08/30 01:37:24 fetching corpus: 2200, signal 124540/161062 (executing program) 2025/08/30 01:37:24 fetching corpus: 2250, signal 125615/162544 (executing program) 2025/08/30 01:37:24 fetching corpus: 2300, signal 126663/164000 (executing program) 2025/08/30 01:37:24 fetching corpus: 2350, signal 127343/165198 (executing program) 2025/08/30 01:37:24 fetching corpus: 2400, signal 128117/166438 (executing program) 2025/08/30 01:37:24 fetching corpus: 2450, signal 129016/167692 (executing program) 2025/08/30 01:37:24 fetching corpus: 2500, signal 130487/169298 (executing program) 2025/08/30 01:37:25 fetching corpus: 2550, signal 131893/170807 (executing program) 2025/08/30 01:37:25 fetching corpus: 2600, signal 133074/172138 (executing program) 2025/08/30 01:37:25 fetching corpus: 2650, signal 133778/173267 (executing program) 2025/08/30 01:37:25 fetching corpus: 2700, signal 134678/174485 (executing program) 2025/08/30 01:37:25 fetching corpus: 2750, signal 135823/175825 (executing program) 2025/08/30 01:37:25 fetching corpus: 2800, signal 136527/176960 (executing program) 2025/08/30 01:37:25 fetching corpus: 2850, signal 137208/178033 (executing program) 2025/08/30 01:37:25 fetching corpus: 2900, signal 137915/179162 (executing program) 2025/08/30 01:37:25 fetching corpus: 2950, signal 138463/180118 (executing program) 2025/08/30 01:37:25 fetching corpus: 3000, signal 139023/181058 (executing program) 2025/08/30 01:37:25 fetching corpus: 3050, signal 139962/182135 (executing program) 2025/08/30 01:37:25 fetching corpus: 3100, signal 140640/183116 (executing program) 2025/08/30 01:37:26 fetching corpus: 3150, signal 141416/184111 (executing program) 2025/08/30 01:37:26 fetching corpus: 3200, signal 142276/185110 (executing program) 2025/08/30 01:37:26 fetching corpus: 3250, signal 142691/185898 (executing program) 2025/08/30 01:37:26 fetching corpus: 3300, signal 143294/186835 (executing program) 2025/08/30 01:37:26 fetching corpus: 3350, signal 144102/187864 (executing program) 2025/08/30 01:37:26 fetching corpus: 3400, signal 144426/188612 (executing program) 2025/08/30 01:37:26 fetching corpus: 3450, signal 145220/189443 (executing program) 2025/08/30 01:37:26 fetching corpus: 3500, signal 145726/190292 (executing program) 2025/08/30 01:37:26 fetching corpus: 3550, signal 146416/191175 (executing program) 2025/08/30 01:37:26 fetching corpus: 3600, signal 146982/192016 (executing program) 2025/08/30 01:37:27 fetching corpus: 3650, signal 147597/192837 (executing program) 2025/08/30 01:37:27 fetching corpus: 3700, signal 148229/193691 (executing program) 2025/08/30 01:37:27 fetching corpus: 3750, signal 148812/194474 (executing program) 2025/08/30 01:37:27 fetching corpus: 3800, signal 149424/195235 (executing program) 2025/08/30 01:37:27 fetching corpus: 3850, signal 149926/196020 (executing program) 2025/08/30 01:37:27 fetching corpus: 3900, signal 150365/196723 (executing program) 2025/08/30 01:37:27 fetching corpus: 3950, signal 151007/197453 (executing program) 2025/08/30 01:37:27 fetching corpus: 4000, signal 151417/198166 (executing program) 2025/08/30 01:37:27 fetching corpus: 4050, signal 151944/198922 (executing program) 2025/08/30 01:37:27 fetching corpus: 4100, signal 152523/199662 (executing program) 2025/08/30 01:37:27 fetching corpus: 4150, signal 152939/200346 (executing program) 2025/08/30 01:37:28 fetching corpus: 4200, signal 153433/201036 (executing program) 2025/08/30 01:37:28 fetching corpus: 4250, signal 153954/201693 (executing program) 2025/08/30 01:37:28 fetching corpus: 4300, signal 154659/202415 (executing program) 2025/08/30 01:37:28 fetching corpus: 4350, signal 155176/203042 (executing program) 2025/08/30 01:37:28 fetching corpus: 4400, signal 155558/203646 (executing program) 2025/08/30 01:37:28 fetching corpus: 4450, signal 155925/204265 (executing program) 2025/08/30 01:37:28 fetching corpus: 4500, signal 156252/204804 (executing program) 2025/08/30 01:37:28 fetching corpus: 4550, signal 156661/205393 (executing program) 2025/08/30 01:37:28 fetching corpus: 4600, signal 157106/205976 (executing program) 2025/08/30 01:37:28 fetching corpus: 4650, signal 157433/206594 (executing program) 2025/08/30 01:37:28 fetching corpus: 4700, signal 157804/207203 (executing program) 2025/08/30 01:37:29 fetching corpus: 4750, signal 158420/207790 (executing program) 2025/08/30 01:37:29 fetching corpus: 4800, signal 158943/208338 (executing program) 2025/08/30 01:37:29 fetching corpus: 4850, signal 159465/208871 (executing program) 2025/08/30 01:37:29 fetching corpus: 4900, signal 160276/209493 (executing program) 2025/08/30 01:37:29 fetching corpus: 4950, signal 160602/210042 (executing program) 2025/08/30 01:37:29 fetching corpus: 5000, signal 160979/210572 (executing program) 2025/08/30 01:37:29 fetching corpus: 5050, signal 161549/211065 (executing program) 2025/08/30 01:37:29 fetching corpus: 5100, signal 162052/211649 (executing program) 2025/08/30 01:37:29 fetching corpus: 5150, signal 162497/212192 (executing program) 2025/08/30 01:37:30 fetching corpus: 5200, signal 162962/212704 (executing program) 2025/08/30 01:37:30 fetching corpus: 5250, signal 163399/213017 (executing program) 2025/08/30 01:37:30 fetching corpus: 5300, signal 164017/213033 (executing program) 2025/08/30 01:37:30 fetching corpus: 5350, signal 164745/213036 (executing program) 2025/08/30 01:37:30 fetching corpus: 5400, signal 165124/213046 (executing program) 2025/08/30 01:37:30 fetching corpus: 5450, signal 165616/213054 (executing program) 2025/08/30 01:37:30 fetching corpus: 5500, signal 166144/213063 (executing program) 2025/08/30 01:37:30 fetching corpus: 5550, signal 166627/213074 (executing program) 2025/08/30 01:37:30 fetching corpus: 5600, signal 167037/213074 (executing program) 2025/08/30 01:37:30 fetching corpus: 5650, signal 167481/213075 (executing program) 2025/08/30 01:37:30 fetching corpus: 5700, signal 167944/213076 (executing program) 2025/08/30 01:37:30 fetching corpus: 5750, signal 168383/213077 (executing program) 2025/08/30 01:37:31 fetching corpus: 5800, signal 168716/213077 (executing program) 2025/08/30 01:37:31 fetching corpus: 5850, signal 169027/213092 (executing program) 2025/08/30 01:37:31 fetching corpus: 5900, signal 169519/213095 (executing program) 2025/08/30 01:37:31 fetching corpus: 5950, signal 170146/213103 (executing program) 2025/08/30 01:37:31 fetching corpus: 6000, signal 170561/213114 (executing program) 2025/08/30 01:37:31 fetching corpus: 6050, signal 170878/213124 (executing program) 2025/08/30 01:37:31 fetching corpus: 6100, signal 171184/213133 (executing program) 2025/08/30 01:37:31 fetching corpus: 6150, signal 172318/213145 (executing program) 2025/08/30 01:37:31 fetching corpus: 6200, signal 172616/213160 (executing program) 2025/08/30 01:37:31 fetching corpus: 6250, signal 172858/213173 (executing program) 2025/08/30 01:37:31 fetching corpus: 6300, signal 173215/213192 (executing program) 2025/08/30 01:37:32 fetching corpus: 6350, signal 173613/213215 (executing program) 2025/08/30 01:37:32 fetching corpus: 6400, signal 173961/213215 (executing program) 2025/08/30 01:37:32 fetching corpus: 6450, signal 174254/213249 (executing program) 2025/08/30 01:37:32 fetching corpus: 6500, signal 174658/213249 (executing program) 2025/08/30 01:37:32 fetching corpus: 6550, signal 174927/213250 (executing program) 2025/08/30 01:37:32 fetching corpus: 6600, signal 175335/213251 (executing program) 2025/08/30 01:37:32 fetching corpus: 6650, signal 175589/213255 (executing program) 2025/08/30 01:37:32 fetching corpus: 6700, signal 175912/213257 (executing program) 2025/08/30 01:37:32 fetching corpus: 6750, signal 176247/213268 (executing program) 2025/08/30 01:37:32 fetching corpus: 6800, signal 176559/213270 (executing program) 2025/08/30 01:37:32 fetching corpus: 6850, signal 176951/213287 (executing program) 2025/08/30 01:37:32 fetching corpus: 6900, signal 177194/213300 (executing program) 2025/08/30 01:37:32 fetching corpus: 6950, signal 177684/213313 (executing program) 2025/08/30 01:37:32 fetching corpus: 7000, signal 178007/213318 (executing program) 2025/08/30 01:37:33 fetching corpus: 7050, signal 178516/213326 (executing program) 2025/08/30 01:37:33 fetching corpus: 7100, signal 178763/213332 (executing program) 2025/08/30 01:37:33 fetching corpus: 7150, signal 179257/213332 (executing program) 2025/08/30 01:37:33 fetching corpus: 7200, signal 179507/213340 (executing program) 2025/08/30 01:37:33 fetching corpus: 7250, signal 179722/213341 (executing program) 2025/08/30 01:37:33 fetching corpus: 7300, signal 179947/213344 (executing program) 2025/08/30 01:37:33 fetching corpus: 7350, signal 180209/213369 (executing program) 2025/08/30 01:37:33 fetching corpus: 7400, signal 180574/213388 (executing program) 2025/08/30 01:37:33 fetching corpus: 7450, signal 180812/213391 (executing program) 2025/08/30 01:37:33 fetching corpus: 7500, signal 181072/213393 (executing program) 2025/08/30 01:37:33 fetching corpus: 7550, signal 181341/213396 (executing program) 2025/08/30 01:37:33 fetching corpus: 7600, signal 181713/213413 (executing program) 2025/08/30 01:37:33 fetching corpus: 7650, signal 182060/213466 (executing program) 2025/08/30 01:37:34 fetching corpus: 7700, signal 182446/213468 (executing program) 2025/08/30 01:37:34 fetching corpus: 7750, signal 182829/213470 (executing program) 2025/08/30 01:37:34 fetching corpus: 7800, signal 183214/213498 (executing program) 2025/08/30 01:37:34 fetching corpus: 7850, signal 183501/213512 (executing program) 2025/08/30 01:37:34 fetching corpus: 7900, signal 183877/213513 (executing program) 2025/08/30 01:37:34 fetching corpus: 7950, signal 184135/213555 (executing program) 2025/08/30 01:37:34 fetching corpus: 8000, signal 184653/213559 (executing program) 2025/08/30 01:37:34 fetching corpus: 8050, signal 185069/213572 (executing program) 2025/08/30 01:37:34 fetching corpus: 8100, signal 185294/213574 (executing program) 2025/08/30 01:37:34 fetching corpus: 8150, signal 185525/213575 (executing program) 2025/08/30 01:37:34 fetching corpus: 8200, signal 185815/213600 (executing program) 2025/08/30 01:37:35 fetching corpus: 8250, signal 186179/213606 (executing program) 2025/08/30 01:37:35 fetching corpus: 8300, signal 186387/213631 (executing program) 2025/08/30 01:37:35 fetching corpus: 8350, signal 186702/213632 (executing program) 2025/08/30 01:37:35 fetching corpus: 8400, signal 186943/213672 (executing program) 2025/08/30 01:37:35 fetching corpus: 8450, signal 187211/213675 (executing program) 2025/08/30 01:37:35 fetching corpus: 8500, signal 187443/213687 (executing program) 2025/08/30 01:37:35 fetching corpus: 8550, signal 187831/213696 (executing program) 2025/08/30 01:37:35 fetching corpus: 8600, signal 188161/213697 (executing program) 2025/08/30 01:37:35 fetching corpus: 8650, signal 188405/213702 (executing program) 2025/08/30 01:37:35 fetching corpus: 8700, signal 188694/213720 (executing program) 2025/08/30 01:37:35 fetching corpus: 8750, signal 188973/213720 (executing program) 2025/08/30 01:37:36 fetching corpus: 8800, signal 189292/213720 (executing program) 2025/08/30 01:37:36 fetching corpus: 8850, signal 189486/213721 (executing program) 2025/08/30 01:37:36 fetching corpus: 8900, signal 189714/213727 (executing program) 2025/08/30 01:37:36 fetching corpus: 8950, signal 190121/213731 (executing program) 2025/08/30 01:37:36 fetching corpus: 9000, signal 190253/213733 (executing program) 2025/08/30 01:37:36 fetching corpus: 9050, signal 190445/213737 (executing program) 2025/08/30 01:37:36 fetching corpus: 9100, signal 190676/213740 (executing program) 2025/08/30 01:37:36 fetching corpus: 9150, signal 190994/213741 (executing program) 2025/08/30 01:37:36 fetching corpus: 9200, signal 191315/213741 (executing program) 2025/08/30 01:37:36 fetching corpus: 9250, signal 191547/213744 (executing program) 2025/08/30 01:37:36 fetching corpus: 9300, signal 191983/213744 (executing program) 2025/08/30 01:37:36 fetching corpus: 9350, signal 192359/213746 (executing program) 2025/08/30 01:37:36 fetching corpus: 9400, signal 192576/213758 (executing program) 2025/08/30 01:37:37 fetching corpus: 9450, signal 192821/213767 (executing program) 2025/08/30 01:37:37 fetching corpus: 9500, signal 193095/213773 (executing program) 2025/08/30 01:37:37 fetching corpus: 9550, signal 193331/213787 (executing program) 2025/08/30 01:37:37 fetching corpus: 9600, signal 193466/213790 (executing program) 2025/08/30 01:37:37 fetching corpus: 9650, signal 193676/213798 (executing program) 2025/08/30 01:37:37 fetching corpus: 9700, signal 193904/213805 (executing program) 2025/08/30 01:37:37 fetching corpus: 9750, signal 194108/213814 (executing program) 2025/08/30 01:37:37 fetching corpus: 9800, signal 194298/213814 (executing program) 2025/08/30 01:37:38 fetching corpus: 9850, signal 194528/213816 (executing program) 2025/08/30 01:37:38 fetching corpus: 9900, signal 194794/213828 (executing program) 2025/08/30 01:37:38 fetching corpus: 9950, signal 195022/213830 (executing program) 2025/08/30 01:37:38 fetching corpus: 10000, signal 195191/213830 (executing program) 2025/08/30 01:37:38 fetching corpus: 10050, signal 195349/213833 (executing program) 2025/08/30 01:37:38 fetching corpus: 10100, signal 195479/213837 (executing program) 2025/08/30 01:37:38 fetching corpus: 10150, signal 195740/213839 (executing program) 2025/08/30 01:37:38 fetching corpus: 10200, signal 195934/213842 (executing program) 2025/08/30 01:37:38 fetching corpus: 10250, signal 196195/213854 (executing program) 2025/08/30 01:37:38 fetching corpus: 10300, signal 196359/213857 (executing program) 2025/08/30 01:37:39 fetching corpus: 10350, signal 196634/213890 (executing program) 2025/08/30 01:37:39 fetching corpus: 10400, signal 196801/213898 (executing program) 2025/08/30 01:37:39 fetching corpus: 10450, signal 196965/213913 (executing program) 2025/08/30 01:37:39 fetching corpus: 10500, signal 197185/213917 (executing program) 2025/08/30 01:37:39 fetching corpus: 10550, signal 197385/213923 (executing program) 2025/08/30 01:37:39 fetching corpus: 10600, signal 197542/213928 (executing program) 2025/08/30 01:37:39 fetching corpus: 10650, signal 198252/213938 (executing program) 2025/08/30 01:37:39 fetching corpus: 10700, signal 198500/213938 (executing program) 2025/08/30 01:37:40 fetching corpus: 10750, signal 198758/213939 (executing program) 2025/08/30 01:37:40 fetching corpus: 10800, signal 198929/213954 (executing program) 2025/08/30 01:37:40 fetching corpus: 10850, signal 199100/213956 (executing program) 2025/08/30 01:37:40 fetching corpus: 10900, signal 199288/213959 (executing program) 2025/08/30 01:37:40 fetching corpus: 10950, signal 199452/213960 (executing program) 2025/08/30 01:37:40 fetching corpus: 11000, signal 199634/213978 (executing program) 2025/08/30 01:37:40 fetching corpus: 11050, signal 199801/213988 (executing program) 2025/08/30 01:37:40 fetching corpus: 11100, signal 200069/213988 (executing program) 2025/08/30 01:37:40 fetching corpus: 11150, signal 200222/213989 (executing program) 2025/08/30 01:37:40 fetching corpus: 11200, signal 200438/213994 (executing program) 2025/08/30 01:37:40 fetching corpus: 11250, signal 200566/213996 (executing program) 2025/08/30 01:37:40 fetching corpus: 11300, signal 200731/214000 (executing program) 2025/08/30 01:37:41 fetching corpus: 11350, signal 200996/214001 (executing program) 2025/08/30 01:37:41 fetching corpus: 11400, signal 201177/214002 (executing program) 2025/08/30 01:37:41 fetching corpus: 11450, signal 201344/214023 (executing program) 2025/08/30 01:37:41 fetching corpus: 11500, signal 201476/214024 (executing program) 2025/08/30 01:37:41 fetching corpus: 11550, signal 201800/214076 (executing program) 2025/08/30 01:37:41 fetching corpus: 11600, signal 202000/214082 (executing program) 2025/08/30 01:37:41 fetching corpus: 11650, signal 202181/214095 (executing program) 2025/08/30 01:37:41 fetching corpus: 11700, signal 202337/214096 (executing program) 2025/08/30 01:37:41 fetching corpus: 11750, signal 202571/214098 (executing program) 2025/08/30 01:37:41 fetching corpus: 11800, signal 202737/214098 (executing program) 2025/08/30 01:37:41 fetching corpus: 11849, signal 202883/214101 (executing program) 2025/08/30 01:37:41 fetching corpus: 11849, signal 202883/214101 (executing program) 2025/08/30 01:37:43 starting 8 fuzzer processes 01:37:43 executing program 0: ioctl$TCGETA(0xffffffffffffffff, 0x5405, &(0x7f0000000000)) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000040)={0x164, 0x1, 0x20, 0x5, 0xd, "a9f334b99270109b"}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x4, 0x3, 0x6, 0x0, 0x3}}) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x620000, 0x0) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000100)={0x200, 0xfff, 0x800, 0x3ff}) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x200000, 0x0) r2 = socket$netlink(0x10, 0x3, 0x12) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000180)=0x1f, 0x4) r3 = pidfd_getfd(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) sendmsg$NL80211_CMD_SET_KEY(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0xa4, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x1f}}}}, [@NL80211_ATTR_KEY={0x34, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "063e967da2d65321b6fbcb2c53"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "6e5e07558c"}]}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "1f2fa9d0aa9c0714102e7f5f56"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "d6cf59913a"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0xa4}, 0x1, 0x0, 0x0, 0x80}, 0x4800) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$TIOCGICOUNT(r4, 0x545d, 0x0) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000380)={0x6, 0xb19, 0x80, 0xffffffff, 0x17, "c7f50fe5050866e53609b014ca7f042497e7e6"}) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x141240, 0x0) ioctl$KDDISABIO(r5, 0x4b37) r6 = openat$incfs(r4, &(0x7f0000000400)='.pending_reads\x00', 0x571a80, 0x43) ioctl$TIOCPKT(r6, 0x5420, &(0x7f0000000440)=0x2) sendmsg$BATADV_CMD_SET_VLAN(r3, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x3c, 0x0, 0x300, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x3c}}, 0x8082) io_submit(0x0, 0x4, &(0x7f0000000a00)=[&(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff, &(0x7f00000005c0)="4dc4406359e9d5add9d0da5de7df", 0xe, 0x0, 0x0, 0x1, r3}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x6, 0x4bf0, r1, &(0x7f0000000640)="d71a2f33534648faa02bf8043c7c2df593c8aed0827c52ec6e8bb4c9451130f95ddd364a9ca53d85047e090c69c1fde77ad7ca91b85beea340f9fdddbd661a65ba9e4e359b786442dc0494b38594159120af460b4d8ef19e9d2e4d113a9ea1070cf22808af0fd16e5d80855df9d1cb1e448cfb0ca52087fa1ae5da2751583f15c255a15c90a7b4cde7582a4c32ac90a39f7087aa98165f244b408b059fcc6387cbe6baddfd921dc343bf5fd8ecb31c1c38b2a182023c863c", 0xb8, 0xc0c}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x2, 0x3, r0, &(0x7f0000000740)="d095e4d6d4e666713033f5d51447b2a0b3096c6bd5722d97704577509c9f0e685c06df679e89b3c4e50c25ce9876027fbb42798d08e79103a816fceb6d804651183a8e1c9a7260a857bcfa69c1c0d3a8de12de805d23ccbb59500341e466e2513f3099f665cbb465492eeb2b24ec07914207fdf58e51df650a39fb6a3b9416f3315b5fc17ee71b6b5a13f498a8c06c110814e6dd9b25c3ecb41ae520734de3a429bc3fc9d664d35638488a3a658cd861cbe669", 0xb3, 0x4, 0x0, 0x3, r3}, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x5, 0x4397, 0xffffffffffffffff, &(0x7f0000000880)="cae5efb662f75acee35d8791536f0fdb09809031e06a46f0f6a5f5cfb56a2d71f314ccd87c64fcffe8dc60f6dd1535f43850850fb096b239fee6abbf04b166260cdbfd47bc8c7b386ba83cb7aa27adfd6038cce0b8b4ba8a8d0120b136d6ec6785521504f0d65d5eaa80ad6c97205453976ead79b86fc65ff141671fe794fa8cb07c9031f1082e9a44abb8243290587c8fddca06ac78fda0b7d2fcb7d0f2d3846bc869397a5600ec76eb58e7870988605790ee8e5a00546950ef08fde51442fdaa977f4967424348e0713c18362f05122f1d91bcba89aa75b73fe20485", 0xdd, 0x7, 0x0, 0x3}]) 01:37:43 executing program 2: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) read(r0, &(0x7f0000000040)=""/4096, 0x1000) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f0000001040)) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000001080)=0x80) r1 = getgid() fchown(r0, 0xffffffffffffffff, r1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect(r2, &(0x7f00000010c0)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'morus640\x00'}, 0x80) ioctl$RTC_WIE_ON(r0, 0x700f) pread64(r2, &(0x7f0000001140)=""/4096, 0x1000, 0x8) getsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000002140)=""/128, &(0x7f00000021c0)=0x80) ioctl$AUTOFS_IOC_SETTIMEOUT(r0, 0x80049367, &(0x7f0000002200)=0x3ff) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000002600)={0x0, 0x0}, &(0x7f0000002640)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000002680)={{{@in6=@mcast2, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in6=@empty}}, &(0x7f0000002780)=0xe8) syz_mount_image$tmpfs(&(0x7f0000002240), &(0x7f0000002280)='./file0\x00', 0x6, 0x4, &(0x7f0000002580)=[{&(0x7f00000022c0)="7295fb60b86625347363e3243e6573d3abb41c9cff30db636f02b127a4b6c80129b711acd33ab3f73b5e0091ece68c324e516003fcd2d7dc820b7b66bd0f0474b559d2702ee22e38ade56ae198645bd8d4e5d424a694bebf6ca1a53646dfdcec645201b99b90466d525503e407d5a2b79d063d5e6a7e795790218235e7dda43d646baef7edf0f20039a455e6597d5545fc5c34b804049c48f19979eb42efcf6ba62c04b3037e0b956d911b99e57295ed12758464260c6746b90fb7fe6a87f332ce199d95d55f408c598cbe3ab18b95ddb589dfdaf19b1f69", 0xd8, 0x28000}, {&(0x7f00000023c0)="3cf09da73b9fe4eae4260412fa5a506374831d07390389fbaacdee8023d2907d0ea41b202d5842631a3e456ddfc27c5f0bff35eff9eaf0836197b19bac62f6b88a30987c0503d01e58b2ad454b28b45b4cc05b41e03ad5b70bf14eaea3209aec800ff68e325e5cfb9db05b77b6303a98b998ab06619c046cd4e1703f3aabf09d5c4d3a09a74eac1efee6bdbd059638fda9c6c2544e8560e88c9ae4536f2df6074f41d3ac219dda5e69f907f8", 0xac, 0xfffffffffffffffe}, {&(0x7f0000002480)="f4583438d62df07c4fd2198f79361e15d787c4eef6c0f8c85d51dd4483d1cfac232f1342c6a0936fd917", 0x2a, 0x2}, {&(0x7f00000024c0)="20665b4a0ed4382aee9e9785c8dbe6a9e3c0c95f8ce59047784fca1fba60cb72ea54a485cc43de7ad475a6de0ccc7a7e6e958a9ec7c46ba8545b879913f20af3523a0208642207defd5712652c715b097194a5108fa8fbe35e7f4d720c0d1bc5fe0c32c82ccc5df274db8cb02f3250eee8184265fbb7d2557ea84e319c53933c88f94e755eb8e26d402d70", 0x8b, 0x200}], 0x68c6, &(0x7f00000027c0)={[{@uid={'uid', 0x3d, 0xee00}}], [{@appraise_type}, {@euid_eq={'euid', 0x3d, r3}}, {@euid_eq={'euid', 0x3d, r4}}, {@obj_role={'obj_role', 0x3d, 'aead\x00'}}, {@obj_user={'obj_user', 0x3d, '\x05#}'}}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}]}) fallocate(r0, 0x0, 0x1, 0x9) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1) r5 = syz_open_dev$vcsn(&(0x7f0000002900), 0x7, 0x4000) mount$9p_fd(0x0, &(0x7f0000002880)='./file0\x00', &(0x7f00000028c0), 0x400, &(0x7f0000002940)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_loose}], [{@appraise_type}, {@obj_user={'obj_user', 0x3d, 'obj_role'}}, {@smackfshat}]}}) mknodat$loop(0xffffffffffffffff, &(0x7f0000002a00)='./file0\x00', 0x1, 0x1) 01:37:43 executing program 1: clone3(&(0x7f00000002c0)={0x400, &(0x7f0000000000)=0xffffffffffffffff, &(0x7f0000000040)=0x0, &(0x7f0000000080), {0x28}, &(0x7f00000000c0)=""/185, 0xb9, &(0x7f0000000180)=""/203, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x9}, 0x58) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000480)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file0\x00'}) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x301a81, 0x0) io_submit(0x0, 0x4, &(0x7f0000000800)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x8, 0x21de, r0, &(0x7f0000000340)="c286c7be0154722250d58ea6a95916dea6c77c7cb75594410bb5fbed51f74a88925188f9fd2cf0e8e284f475b9b10bc18b710016ac8b88f4913c76de28057e4ec1f35065abb787daf2ff07d6e59c93de27d421d718531a41ac98247128c5fa84ffafed3aa90315fd8c645cd7b20d16b0dcf0d422967c8702449da1bc2dfcfeb7e4a318cb726177ffce518390f323461d68e78fae1eeb70ed765a683bac4a753523a8c3fd8c186f85025e96e79f1ec91aee2800758c9287e0796f089ce94f0c9305aea02912d1701c", 0xc8, 0x7c, 0x0, 0x1}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x7, 0x5, r2, &(0x7f00000004c0)="86b88de9a209f4f2a4a277b6380ab616da30ddd29b28c7d65be3a992d5d57f1347e5899527ea45469cb30cb72bbb36d4e89e02e480d81ae934abd4f978ebfae6f069d048dc455fd05636103dd13b94a268459011396f84612642ac4960a676f93ba6c60f3edb8e35e3031dc25bfa3a7438b655d9906ca52e53480164bcc2121d5ab7640f5192b317834ada56ce790c3d600151bb1fd8f2c76610bcd8d3c21059e48f196cb8de57144d8b0fdf776982c805427d89a2fee824392e269d5bec96d3f511832c1d0ef2fc22", 0xc9, 0x2, 0x0, 0x3}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0xfff, r3, &(0x7f0000000640)="5d34c022b5b04f67fcf9d8c741142032dd62978a98d5be06f43ec3782c0754991cf9127e5fb5ddcd12d05ebec2537b7c0171e3e61c1858b060d715703a6071d8f484587e9a6b7179b42d6735a3110907922b974256b35b82cae5242c66276ba83429933e9711222c3db73cfb39318fb01cdb8d5d33a102c2b7f0f00ce91b9b22a01ba4404bed4e149b1657e354f83417a78c3cfce6185aea0c540c8cdab0b01568a58e163a2695b661bf8f46a147aadd5eea3328a2bd9f3ea49f1e9698ca4e960d9661f321215a9b840e9e14992aa9724fd4d49450522bbeeb9d559b6bd004ebb5cbdb1141", 0xe5, 0x0, 0x0, 0x2}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x8, 0x400, 0xffffffffffffffff, &(0x7f0000000780)="83a45ae15222598c45087c44d4dfebd09e786772856b4f228d903b794be6962cda6da71d5094e9492b019d241d", 0x2d, 0xdf7c}]) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xa) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) r4 = creat(&(0x7f0000000840)='./file0\x00', 0x2) r5 = accept$packet(r2, &(0x7f0000000880)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000008c0)=0x14) ioctl$BTRFS_IOC_DEFRAG(r5, 0x50009402, 0x0) r6 = syz_open_dev$mouse(&(0x7f0000000900), 0x0, 0x40) write$binfmt_elf64(r6, &(0x7f0000000940)={{0x7f, 0x45, 0x4c, 0x46, 0xff, 0x8b, 0x6, 0x87, 0x9, 0x2, 0x3, 0x4, 0x302, 0x40, 0x268, 0x3f, 0xfff8, 0x38, 0x1, 0x5, 0x3, 0x4}, [{0x3, 0xc18, 0xab, 0x20, 0x3, 0x7, 0xf87a, 0x7b4}], "7e412a027e772dbae71a368657532a9d369c3e4fbc9f31e21689b0f44a72a0468f105227a4c3ff167f53c4927b14f0aea743bcd53c1b422301981b55256c106a2676bef9a8b9bc0c361733d934fc65f8dfe35e43bf3b2339675eaf2073effe1d280c3a169532db"}, 0xdf) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a40)={0xffffffffffffffff}) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000a80), 0x4000, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000000ac0)={{0x1, 0x1, 0x18, r7, {r8}}, './file0/../file0\x00'}) r9 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000b00), 0x200, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r9, 0x5000943a, &(0x7f0000000bc0)={{r3}, 0x0, 0x10, @inherit={0x80, &(0x7f0000000b40)={0x1, 0x7, 0x80, 0x8f60, {0x0, 0x9, 0x8001, 0x5, 0x3}, [0xfffffffffffffff9, 0x4, 0xc646, 0x6, 0x3, 0x80000001, 0x3]}}, @subvolid=0x10000}) ioctl$LOOP_CTL_ADD(r9, 0x4c80, 0x0) r10 = syz_open_dev$vcsa(&(0x7f0000001bc0), 0x1, 0x6100) recvmmsg$unix(r10, &(0x7f0000002300)=[{{&(0x7f0000001c00), 0x6e, &(0x7f0000002240)=[{&(0x7f0000001c80)=""/213, 0xd5}, {&(0x7f0000001d80)=""/197, 0xc5}, {&(0x7f0000001e80)=""/122, 0x7a}, {&(0x7f0000001f00)=""/127, 0x7f}, {&(0x7f0000001f80)=""/115, 0x73}, {&(0x7f0000002000)=""/147, 0x93}, {&(0x7f00000020c0)=""/138, 0x8a}, {&(0x7f0000002180)=""/158, 0x9e}], 0x8, &(0x7f00000022c0)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28}}], 0x1, 0x0, &(0x7f0000002340)={0x77359400}) kcmp(0x0, r1, 0x3, r0, 0xffffffffffffffff) 01:37:43 executing program 3: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000040)=0x6) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000080)={"cc65f40a2bf0f84718091da5251a68df", 0x0, 0x0, {0x9, 0x1}, {0x7fffffff}, 0x158, [0x7, 0x7fffffff, 0x2, 0x73, 0x6, 0x1, 0xfff, 0x8, 0x92, 0x25, 0x3, 0x100000000, 0x670, 0x5, 0x80000001, 0xfffffffffffffffe]}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, &(0x7f0000000180)={{}, r2, 0x0, @unused=[0x4, 0x1, 0x1, 0x1], @subvolid=0x6}) ioctl$BTRFS_IOC_INO_PATHS(r1, 0xc0389423, &(0x7f00000011c0)={0x0, 0x0, [0x5, 0x6, 0x9, 0x6], &(0x7f0000001180)}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000001280)={0x7, 0x1, {0x3, @usage=0xdc, 0x0, 0x3, 0x1, 0x3, 0x8, 0x6, 0x40, @usage=0x2, 0x4, 0xffffffff, [0x400, 0xffffffff, 0xa25, 0x9, 0x7f, 0x9]}, {0x9, @struct={0x8, 0x8}, 0x0, 0x20e576af, 0x3, 0x4, 0x5, 0x6, 0x5, @struct={0x8, 0x5}, 0x7, 0xfb6f, [0x0, 0x5, 0x8000, 0xfffffffffffffffb, 0xffffffffffffffff, 0x8001]}, {0xffff, @struct={0x5, 0x4}, 0x0, 0x7, 0x4, 0x1000, 0xe3, 0xffffffffffffffff, 0x62, @struct={0x9}, 0x8, 0xae9, [0x54a1e022, 0x100, 0x8, 0x1ff, 0x3f, 0x3]}, {0x87b, 0x2, 0xffffffffffff3202}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000001680)={{r0}, r2, 0x2, @inherit={0x50, &(0x7f0000001200)={0x1, 0x1, 0x401, 0x1, {0x10, 0x2, 0x1000, 0x81, 0x8001}, [0x80000000]}}, @devid=r5}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000002680)={r3, 0x7fff, 0x40}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000002a80)={0x8, 0x0, {0x100, @usage=0x5, r3, 0x9, 0x2, 0x7, 0x0, 0x7f, 0x108, @struct={0x6, 0x5a58}, 0xad, 0x10001, [0xad6c, 0x9, 0x2, 0x7c, 0x7, 0x7]}, {0xcac, @struct={0xfa78, 0x1}, r6, 0x4, 0x6764, 0x80, 0x1, 0x6, 0x4, @usage=0x10001, 0xfff, 0x1, [0x65, 0x100, 0x5, 0x401, 0x8001, 0x2]}, {0xfffffffffffffffe, @struct={0x6fca7e1b, 0x3}, r4, 0x4, 0x1, 0x81, 0x9, 0xfffffffffffffff7, 0x64, @usage=0x7, 0x5, 0x8, [0x2, 0x4, 0xffffffff00000000, 0x0, 0x7ff, 0x3b]}, {0x1, 0x6a8, 0x8}}) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f0000002ec0)={{r0}, 0x2, &(0x7f0000002e80)=[0x8, 0x9], 0x8, 0x2, [0x7, 0xfffffffffffffff7, 0x5, 0x6]}) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x7fff) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000002fc0)={0x0, 0x0, 0x0}, &(0x7f0000003000)=0xc) fstat(r1, &(0x7f0000003040)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000002f40)='./file0\x00', &(0x7f0000002f80), 0x2, &(0x7f00000030c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r8}}, {@debug={'debug', 0x3d, 0x7}}, {@nodevmap}], [{@measure}, {@fowner_eq={'fowner', 0x3d, r9}}]}}) fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000003180), &(0x7f00000031c0)='./file0\x00', 0x8, 0x3) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r10, 0x8982, &(0x7f0000003200)={0x3, 'ip6gre0\x00', {0xffff}, 0x7f}) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r10, 0x4008941a, &(0x7f0000003240)) ioctl$TIOCSISO7816(r0, 0xc0285443, &(0x7f0000003280)={0x9, 0xaa, 0x3fb, 0x3aac228e, 0x3}) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f00000032c0)={{0x2, 0x4e24, @empty}, {0x6, @remote}, 0xc, {0x2, 0x4e20, @empty}, 'wlan0\x00'}) 01:37:43 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_LEVEL={0x24, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x3}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x2}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x20010884}, 0x40050) sendmsg$NL802154_CMD_GET_SEC_DEV(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000844}, 0x48885) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000280)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x74, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0x100}}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x74}, 0x1, 0x0, 0x0, 0xc010}, 0x4040000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_REMOVE(r2, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xc8, 0x0, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x1c, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x124e2a2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3539736a}]}, {0x4}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x8c, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6457b2d4}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x20dc}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcc5e}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3fbf936}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5464}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcfb7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5d8a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xe0d62ab}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6d724bc5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc29e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2dfb3cd7}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3831bc87}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x47ac511e}]}]}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x40008050}, 0x54) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000580), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r4, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x3c, r3, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_MGMT_A_DOMAIN={0x6, 0x1, '!\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_DOMAIN={0x7, 0x1, '&C\x00'}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x8000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLIST(r5, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x44, r6, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x2d, 0x7, 'system_u:object_r:dhcpd_initrc_exec_t:s0\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x50, 0x0, 0x300, 0x70bd25, 0x25dfdbff, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x25}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @remote}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x4000010) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r7, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x24, 0x0, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x15) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000ac0), r5) sendmsg$NL802154_CMD_SET_CHANNEL(r2, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x34, r8, 0x0, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0xb}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x6}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x800) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r9, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x80, r6, 0x800, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x29}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:mqueue_spool_t:s0\x00'}]}, 0x80}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040083) [ 91.967791] audit: type=1400 audit(1756517863.297:7): avc: denied { execmem } for pid=285 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 01:37:43 executing program 4: getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000000), &(0x7f0000000080)=0x68) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x4, 0x1, 0x201, 0x0, 0x0, {0x3d9dc207042d52f1, 0x0, 0xa}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x1) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x88, 0x13, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x2}]}, 0x88}, 0x1, 0x0, 0x0, 0x8005}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) shutdown(r0, 0x1) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, 0x0, 0x8, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x81c0}, 0x800) r1 = socket$inet_icmp(0x2, 0x2, 0x1) bind$inet(r1, &(0x7f0000000440)={0x2, 0x4e23, @private=0xa010100}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14, 0x10, 0xa, 0x3, 0x0, 0x0, {0x1}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x8840) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MPATH(r3, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0x94, 0x0, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xfffffff8, 0x76}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x94}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000000) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000740)={{0x1, 0x1, 0x18, r1, {r1}}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000780)={'wlan1\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r5, 0xc0189375, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000800)={0x8001, 0xfbd, 0x1, 'queue0\x00', 0xfffffffa}) r6 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='./file0\x00', 0x4400, 0x54) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000940)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x28, 0x0, 0x800, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x14) recvfrom(r4, &(0x7f0000000a40)=""/115, 0x73, 0x40002002, &(0x7f0000000ac0)=@qipcrtr={0x2a, 0xfffffffb, 0xfffffffe}, 0x80) 01:37:43 executing program 5: ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000040)) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000080)=@gcm_256={{0x304}, "7002f85e1380350e", "27561fb44889a2f8ab23179c1d6bb346cd1b40d8ca616f119ce62b5dada4f0b8", "89807066", "1b27b2c3f1a87cce"}, 0x38) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='aufs\x00', 0x228026, &(0x7f0000000180)='{\x00') setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f00000001c0)=0x6, 0x4) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200), 0x300, 0x0) fchdir(r1) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000240)) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000280)) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x64, &(0x7f00000002c0), &(0x7f0000000300)=0x4) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r2, 0xf504, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000000400)={'ip6_vti0\x00', &(0x7f0000000380)={'syztnl1\x00', 0x0, 0x2f, 0x89, 0x5, 0x0, 0x0, @private1, @dev={0xfe, 0x80, '\x00', 0x24}, 0x10, 0x40, 0xda65, 0x4}}) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000440)={{{@in6=@rand_addr=' \x01\x00', @in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x4e20, 0x20, 0x4e24, 0x400, 0x2, 0x1a0, 0x80, 0x2e, r3}, {0xfffffffffffffff9, 0xc198, 0x6, 0x63d8, 0x2, 0x1, 0xb9, 0x2}, {0x2, 0x5be, 0x0, 0x5}, 0x800, 0x0, 0x1, 0x0, 0x2, 0x2}, {{@in=@private=0xa010100, 0x4d6, 0x3c}, 0xa, @in=@empty, 0x0, 0x2, 0x2, 0x9, 0x200, 0x71a, 0x2}}, 0xe8) r4 = socket$inet(0x2, 0xa, 0x7ff) setsockopt$inet_tcp_TLS_RX(r4, 0x6, 0x2, &(0x7f0000000540)=@gcm_128={{0x303}, "c48b424a28fa4807", "7b266078e7fa38bb347aee591b513068", "66219614", "bb4e51f9db9d61b9"}, 0x28) getsockname(r0, &(0x7f0000000580)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000600)=0x80) write$rfkill(r1, &(0x7f0000000640)={0x4, 0x5, 0x0, 0x1}, 0x8) ioctl$BTRFS_IOC_RM_DEV_V2(r4, 0x5000943a, &(0x7f0000000680)={{r0}, 0x0, 0x1a, @unused=[0xfffffffffffffffc, 0x7, 0x44b, 0x7ff], @subvolid=0x7ff}) write(r4, &(0x7f0000001680)="9d434159de920d7d5861104ec5f8b94b1c085c0726fee5ff1458a42d8c01137aa65fc78cf2730ef30513e5da7777640ee151713ef359ce856cd532b167a6388d36433d7f229f599c2b923dc2070f55b096f3888acf9b80bfa6e7470c9a0610f303f92dea4acf933575bc860074dc07f2023c4ba79c2c092f1d0614519e12a8ac1b65f08af30f0e57a5804662aea3ec2c185ace80179f38fe52eb0a1f4f1a9bbb6ccdc7e7f2e7e02183020b143f9c6dde8539f94306a0aa8048af9ab701c4c955819f701b95f0c3caf0", 0xc9) 01:37:43 executing program 6: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2441}}, './file0\x00'}) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x80102, 0x0) recvmsg$unix(r0, &(0x7f00000016c0)={&(0x7f0000000080), 0x6e, &(0x7f00000014c0)=[{&(0x7f0000000100)=""/14, 0xe}, {&(0x7f0000000140)=""/142, 0x8e}, {&(0x7f0000000200)=""/2, 0x2}, {&(0x7f0000000240)=""/166, 0xa6}, {&(0x7f0000000300)=""/153, 0x99}, {&(0x7f00000003c0)=""/203, 0xcb}, {&(0x7f00000004c0)=""/4096, 0x1000}], 0x7, &(0x7f0000001540)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}], 0x148}, 0x20) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000001700)={{0x1, 0x1, 0x18, r1, {0x0, r7}}, './file0\x00'}) r9 = memfd_create(&(0x7f0000001740)='\x00', 0x4) fcntl$notify(r9, 0x402, 0x80000000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, &(0x7f0000001780)={{0x1, 0x1, 0x18, r8}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r6, 0xc0189374, &(0x7f00000017c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000001800)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) r10 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000001840), 0x10402, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000001880)={{0x1, 0x1, 0x18, r10}, './file0\x00'}) utimes(&(0x7f00000018c0)='./file0\x00', &(0x7f0000001900)={{0x77359400}, {0x0, 0x2710}}) r12 = openat$hpet(0xffffffffffffff9c, &(0x7f0000001940), 0x4c3500, 0x0) sendmsg$NFT_MSG_GETTABLE(r12, &(0x7f0000001a40)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001a00)={&(0x7f00000019c0)={0x34, 0x1, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x881}, 0x20000104) accept4$unix(r11, &(0x7f0000001a80), &(0x7f0000001b00)=0x6e, 0x800) fcntl$getown(r5, 0x9) r13 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001b40), 0x42000, 0x0) write$vga_arbiter(r13, &(0x7f0000001b80)=@unlock_all, 0xb) symlinkat(&(0x7f0000001bc0)='./file0\x00', r4, &(0x7f0000001c00)='./file0\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r13, &(0x7f0000001d80)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001d40)={&(0x7f0000001c80)={0x8c, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x388}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3b}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7f}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1c, 0x4}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x24004801}, 0x15) [ 93.109835] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 93.111284] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 93.112392] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 93.114705] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 93.116334] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 93.160175] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 93.165052] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 93.170056] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 93.171413] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 93.172727] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 93.174158] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 93.178319] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 93.179464] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 93.180126] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 93.187042] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 93.232482] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 93.233305] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 93.249876] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 93.250772] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 93.261851] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 93.262442] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 93.270411] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 93.279137] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 93.281958] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 93.289275] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 93.292244] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 93.293824] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 93.296056] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 93.298499] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 93.301797] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 93.302936] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 93.304488] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 93.305539] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 93.309622] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 93.310555] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 93.919824] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 93.933825] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 93.934960] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 93.937559] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 93.940342] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 95.134129] Bluetooth: hci0: command tx timeout [ 95.197698] Bluetooth: hci2: command tx timeout [ 95.262139] Bluetooth: hci1: command tx timeout [ 95.326132] Bluetooth: hci3: command tx timeout [ 95.326959] Bluetooth: hci6: command tx timeout [ 95.389668] Bluetooth: hci4: command tx timeout [ 95.390263] Bluetooth: hci5: command tx timeout [ 95.965674] Bluetooth: hci7: command tx timeout [ 97.182126] Bluetooth: hci0: command tx timeout [ 97.246072] Bluetooth: hci2: command tx timeout [ 97.309660] Bluetooth: hci1: command tx timeout [ 97.373885] Bluetooth: hci3: command tx timeout [ 97.374460] Bluetooth: hci6: command tx timeout [ 97.438722] Bluetooth: hci4: command tx timeout [ 97.439164] Bluetooth: hci5: command tx timeout [ 98.013682] Bluetooth: hci7: command tx timeout [ 99.229826] Bluetooth: hci0: command tx timeout [ 99.293913] Bluetooth: hci2: command tx timeout [ 99.358485] Bluetooth: hci1: command tx timeout [ 99.422737] Bluetooth: hci3: command tx timeout [ 99.423282] Bluetooth: hci6: command tx timeout [ 99.487681] Bluetooth: hci5: command tx timeout [ 99.488162] Bluetooth: hci4: command tx timeout [ 100.061676] Bluetooth: hci7: command tx timeout [ 101.277990] Bluetooth: hci0: command tx timeout [ 101.342648] Bluetooth: hci2: command tx timeout [ 101.405730] Bluetooth: hci1: command tx timeout [ 101.469750] Bluetooth: hci6: command tx timeout [ 101.470693] Bluetooth: hci3: command tx timeout [ 101.534672] Bluetooth: hci4: command tx timeout [ 101.535523] Bluetooth: hci5: command tx timeout [ 102.109677] Bluetooth: hci7: command tx timeout [ 129.468717] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.469358] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.718723] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.719358] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.811112] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.812110] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.008449] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.009460] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.138553] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.139360] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.157735] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.158313] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 01:38:21 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000200)={0x1f, 0x1, 0x1}, 0x6) ioctl$sock_bt_hci(r0, 0x800448f0, &(0x7f0000000000)="3ce70afe62fe950b0a8783ec27387ad6c9830a35f0802369e435eddd9afd3f7b97e117f6abac80f5e6d25f7745d3e4a653a2bdcee5a3f06b4d8bc5f7e78820e516e5aa00655385330db7b96d9b3de54407") bind$bt_hci(r0, &(0x7f0000000080), 0x6) write$bt_hci(r0, &(0x7f00000000c0)={0x1, @set_cpb_data={{0xc76, 0xff}, {0x0, 0x0, 0x0, "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"}}}, 0x178) 01:38:21 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='stack\x00') read$char_usb(r3, &(0x7f0000000040)=""/1, 0x1) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000340)=ANY=[@ANYBLOB="e0000000f890c667f7b4c1a840e79e2525c9531bf85ee7b6cd05c9b5cb5aee2775b7ca8842e001c0a3cac6860969c6d8adc800e9bf1b176f298ac2a62acd2243a0f39e4c2029321c4abe4f60bbcf2a0d456566cbb5460435a255a454bbb6fd406975626378fa8dab2abfc5582331b65d5f73a9b78030a9af32da225976083b2edf7953e0cd2c29b1817402f40791667f7e8e5cf182c205f4010e506c60c4552254aad92b0196eb6bf21b89bca97984cef65c52a92e16d04b2c3100"/200, @ANYRESOCT=r3, @ANYBLOB="0100000000000000a7080e00f7ff0c00018008000100", @ANYRES32=r2, @ANYBLOB], 0x20}}, 0x48004) [ 130.324427] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.325044] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.347516] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.348231] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.367916] audit: type=1400 audit(1756517901.697:8): avc: denied { open } for pid=3881 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 130.371715] audit: type=1400 audit(1756517901.697:9): avc: denied { kernel } for pid=3881 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 130.402910] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.403505] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.505708] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.506991] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.565041] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.565695] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 01:38:21 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f00000001c0), 0xffffffffffffffff) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='stack\x00') read$char_usb(r2, &(0x7f0000000040)=""/1, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2004}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x10, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x48811}, 0x4004) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r1, 0x60b}, 0x14}}, 0x0) [ 130.657986] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.658742] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.746680] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.747360] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.826931] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.827628] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.937885] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.938553] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.986815] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.987437] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.063458] loop2: detected capacity change from 0 to 16383 [ 131.080329] syz-executor.5 uses obsolete (PF_INET,SOCK_PACKET) [ 131.096396] ======================================================= [ 131.096396] WARNING: The mand mount option has been deprecated and [ 131.096396] and is ignored by this kernel. Remove the mand [ 131.096396] option from the mount to silence this warning. [ 131.096396] ======================================================= [ 131.116984] 9pnet_fd: Insufficient options for proto=fd [ 131.158910] loop2: detected capacity change from 0 to 16383 [ 131.161460] 9pnet_fd: Insufficient options for proto=fd [ 132.317639] Bluetooth: hci0: command tx timeout [ 134.365770] Bluetooth: hci0: command tx timeout 01:38:30 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f00000001c0), 0xffffffffffffffff) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='stack\x00') read$char_usb(r2, &(0x7f0000000040)=""/1, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2004}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x10, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x48811}, 0x4004) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r1, 0x60b}, 0x14}}, 0x0) 01:38:30 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='stack\x00') read$char_usb(r3, &(0x7f0000000040)=""/1, 0x1) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000340)=ANY=[@ANYBLOB="e0000000f890c667f7b4c1a840e79e2525c9531bf85ee7b6cd05c9b5cb5aee2775b7ca8842e001c0a3cac6860969c6d8adc800e9bf1b176f298ac2a62acd2243a0f39e4c2029321c4abe4f60bbcf2a0d456566cbb5460435a255a454bbb6fd406975626378fa8dab2abfc5582331b65d5f73a9b78030a9af32da225976083b2edf7953e0cd2c29b1817402f40791667f7e8e5cf182c205f4010e506c60c4552254aad92b0196eb6bf21b89bca97984cef65c52a92e16d04b2c3100"/200, @ANYRESOCT=r3, @ANYBLOB="0100000000000000a7080e00f7ff0c00018008000100", @ANYRES32=r2, @ANYBLOB], 0x20}}, 0x48004) 01:38:30 executing program 0: ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)) futex(&(0x7f0000000780)=0x1, 0xd, 0x0, &(0x7f00000007c0), 0x0, 0x0) 01:38:30 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080), 0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='stack\x00') read$char_usb(r1, &(0x7f0000000040)=""/1, 0x1) setsockopt$inet6_tcp_int(r1, 0x6, 0x9, &(0x7f0000000200)=0xffffffff, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) 01:38:30 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lremovexattr(&(0x7f00000001c0)='./file0\x00', 0x0) getgroups(0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) syz_mount_image$tmpfs(&(0x7f00000005c0), &(0x7f0000000600)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)={[{@mpol={'mpol', 0x3d, {'interleave', '=static', @void}}}, {@gid={'gid', 0x3d, r1}}]}) getgroups(0x2, &(0x7f0000000840)=[0x0, r1]) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000080)=@abs, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/86, 0x56}, {&(0x7f0000000200)=""/159, 0x9f}, {&(0x7f00000002c0)=""/193, 0xc1}, {&(0x7f00000003c0)=""/216, 0xd8}, {&(0x7f00000004c0)=""/208, 0xd0}, {&(0x7f00000005c0)=""/204, 0xcc}], 0x6, &(0x7f0000000780)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x78}, 0x121) dup(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001240)={0x1c, r3, 0x5, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 01:38:30 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='stack\x00') read$char_usb(r1, &(0x7f0000000040)=""/1, 0x1) ioctl$sock_bt_hci(r1, 0x400448e7, &(0x7f0000000000)="3dfa6a2f792fc06ef774ee073e949550cbb5bcbbb1671aa08658dcac1a2c76a908745bc1e259fe6ef7395b13e396180f411821f017393e4848befeabf8720dd4d0e47d3d5b62ad2bb8cf1547f3eedf12d9b6575f00244200db8af0c01c685647bf4f4d3a0ffbb5cfa47d85e24930fc1b827009668e4f2e2581f0a4c96968ddd944a8c7cfa059ccea4a9d827ba27ac131159f1c949fa18c53787f3664fdde223433a4c7cc97ebb78c47e5b45e3f656b3a63e74d842b2f92ba511d57c30804712ae6afca9014b0202e183eb30a86481506ced62b4d99025a3478b23667d371045a48") 01:38:30 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001840)='attr/prev\x00') r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = openat(r0, &(0x7f00000038c0)='./file0\x00', 0x400, 0x0) preadv2(r3, &(0x7f0000003b00)=[{&(0x7f0000003900)=""/215, 0xd7}, {&(0x7f0000003a00)=""/232, 0xe8}], 0x2, 0x93, 0x10000000, 0x2) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='stack\x00') read$char_usb(r5, &(0x7f0000000040)=""/1, 0x1) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000002580), &(0x7f00000025c0)=0xc) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000003b40)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="720000de9a591d495c5d200724ffed0000002e2d66696c653000"]) pread64(r1, &(0x7f0000002700), 0x0, 0x3) ioctl$MON_IOCH_MFLUSH(r6, 0x9208, 0x9) setuid(r4) recvmmsg(r2, &(0x7f0000003340)=[{{&(0x7f0000000080)=@qipcrtr, 0x80, &(0x7f0000000440)=[{&(0x7f0000000100)=""/38, 0x26}, {&(0x7f0000000140)=""/187, 0xbb}, {&(0x7f0000000200)=""/51, 0x33}, {&(0x7f0000000240)=""/238, 0xee}, {&(0x7f0000000340)=""/201, 0xc9}], 0x5, &(0x7f00000004c0)=""/28, 0x1c}, 0x4}, {{&(0x7f0000000500)=@caif, 0x80, &(0x7f0000001a80)=[{&(0x7f0000000580)=""/117, 0x75}, {&(0x7f0000000600)=""/181, 0xb5}, {&(0x7f00000006c0)=""/97, 0x61}, {&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f0000001740)=""/99, 0x63}, {&(0x7f00000017c0)=""/105, 0x69}, {&(0x7f0000001840)}, {&(0x7f0000001880)=""/205, 0xcd}, {&(0x7f0000001980)=""/204, 0xcc}], 0x9, &(0x7f0000001b40)=""/142, 0x8e}, 0x5d9}, {{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000001c00)=""/109, 0x6d}], 0x1}, 0x8}, {{0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f0000001cc0)=""/153, 0x99}, {&(0x7f0000001d80)=""/18, 0x12}, {&(0x7f0000001dc0)}], 0x3, &(0x7f0000001e40)=""/75, 0x4b}}, {{0x0, 0x0, &(0x7f00000037c0)=[{&(0x7f0000001ec0)=""/234, 0xea}, {&(0x7f0000001fc0)=""/221, 0xdd}, {&(0x7f00000020c0)=""/245, 0xf5}, {&(0x7f00000021c0)=""/187, 0xbb}, {&(0x7f0000002280)=""/121, 0x79}, {&(0x7f0000002300)=""/42, 0x2a}, {&(0x7f0000002340)=""/150, 0x96}, {&(0x7f0000002400)=""/4, 0x4}, {&(0x7f0000002440)=""/236, 0xec}, {&(0x7f0000001c80)=""/11, 0xb}, {&(0x7f0000003540)=""/104, 0x68}, {&(0x7f00000035c0)=""/251, 0xfb}, {&(0x7f00000036c0)=""/204, 0xcc}], 0xd, &(0x7f0000002600)=""/64, 0x40}, 0x2}, {{&(0x7f0000002640)=@alg, 0x80, &(0x7f0000002900)=[{&(0x7f00000026c0)=""/35, 0x23}, {&(0x7f0000003c80)=""/248, 0xf8}, {&(0x7f0000002800)=""/194, 0xc2}], 0x3}, 0xff800000}, {{&(0x7f0000002940)=@nfc_llcp, 0x80, &(0x7f0000002a80)=[{&(0x7f00000029c0)=""/42, 0x2a}, {&(0x7f0000002a00)=""/122, 0x7a}], 0x2, &(0x7f0000002ac0)=""/153, 0x99}, 0x7fff}, {{&(0x7f0000002b80)=@can, 0x80, &(0x7f0000003200)=[{&(0x7f0000002c00)=""/197, 0xc5}, {&(0x7f0000002d00)=""/149, 0x95}, {&(0x7f0000002dc0)=""/142, 0x8e}, {&(0x7f0000002e80)=""/152, 0x98}, {&(0x7f0000002f40)=""/81, 0x51}, {&(0x7f0000002fc0)=""/225, 0xe1}, {&(0x7f00000030c0)=""/91, 0x5b}, {&(0x7f0000003140)=""/172, 0xac}], 0x8, &(0x7f0000003280)=""/173, 0xad}, 0x1000}], 0x8, 0x120, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002540)='/proc/cgroups\x00', 0x0, 0x0) write$binfmt_script(r7, &(0x7f0000003d80)={'#! ', './file1', [{0x20, '\x7f~\x9605\xb1\xeb9\xdd\x90\xf8s}'}, {}, {0x20, '\x00\xee]\xe3vi\x1dSy\xae\xf7I\xeb\xa7R{\x85\x8ab\x92\x8bR,\x86pA\b\xf2\x01OF\xf8x\x92\x8f\\\xac\xc4\x8d\xa5n*P\x8d\xf3ER\xd98@\f/\b\xf4\x05\x8f\xab\xbfM\x01Bz\xab\xcf\xfaN\xbd\x99\x86\xb0\x04\xa2#\xfaH\xe3\x13\xb6i\xbe\xf3\x0f4\xb0\x13\xa6.\xa8\xd5\x82\x04\xb5]\xd8\xcaa\xdaU\xaf\xad\xb7\x18\x94(\xf1w\x1a\xd6\x13$&&\xd9\xd0j}K\xe0\xab\x06\xdd\x17\xdb\x85R\xc6\xae\xe7A\xd4\xb8\x10\b\x97\xaf\x93Pp\x13S\x8e\xd6\xca\x83\x0f\"}\x7f\xdb\xabd.V\x8d:o\xb6x\xf5\x8b\x91\x8f.\xce\xd2~\xc6\xfaeo4\xd3f\xd2\x9bn\xb4\xbe\xc0\xe8a\x90\x13!\xcd?\xde\x13A\xda\xc1\xd1\x1e\x13\x97\xe9_\xccb\xf7\xba\x1fEq\xcf]\x89\xe8\xee=\xc2\x1b\xd8}\xcc\xfdA\x0f\x96\x96\x02sk7\xe9\xceL\xb1\x0eL\f\xe3\x93\xf8\x97\x03\xc6\x9e\xc8\x06\x934o\xab\xd3Z;{v\xa9m\x1d\x1c\xf160x0}) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2004}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x10, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x48811}, 0x4004) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r1, 0x60b}, 0x14}}, 0x0) 01:38:31 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='stack\x00') read$char_usb(r0, &(0x7f0000000040)=""/1, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='stack\x00') read$char_usb(r1, &(0x7f0000000040)=""/1, 0x1) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES32, @ANYBLOB="aa6f42b4214fbc498b7ccf648a2e43126866e7e52a1a44a3c81d431f82f0a0cd453ab73edf2f82cdd11701a66fd3785cf3b092cf0ca06c39c13dfb684f85388dc75725de56e91adca2210eb6ad8d48cc3feb07d4654d26f81acf8536a91a8e2b143e2e3b99d85bc781ee4ef5cc5b1f1954ae41d6f57524e8a2e20ddfc30ed89bbc1832017ca70a8a65717766fd31"]) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) io_setup(0x8, &(0x7f0000000080)=0x0) io_submit(r4, 0x1, &(0x7f0000000380)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000480)="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", 0x200}]) [ 139.772254] tmpfs: Invalid gid '0x00000000ffffffff' [ 139.827188] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2 01:38:31 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_KEY(r0, 0x0, 0x0) sched_rr_get_interval(0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000180)=@random='q', 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0x300, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000080) 01:38:31 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f00000001c0), 0xffffffffffffffff) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='stack\x00') read$char_usb(r2, &(0x7f0000000040)=""/1, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2004}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x10, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x48811}, 0x4004) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r1, 0x60b}, 0x14}}, 0x0) 01:38:31 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='stack\x00') read$char_usb(r3, &(0x7f0000000040)=""/1, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv_slave_0\x00', 0x0}) bind$packet(r3, &(0x7f00000003c0)={0x11, 0x2, r4, 0x1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r6, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x2, &(0x7f0000000180)={r1, 0x1, 0x6, @multicast}, 0x10) [ 139.861141] tmpfs: Invalid gid '0x00000000ffffffff' [ 139.869447] kmemleak: Found object by alias at 0x607f1a6394f4 [ 139.869471] CPU: 0 UID: 0 PID: 3950 Comm: syz-executor.5 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 139.869503] Tainted: [W]=WARN [ 139.869510] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 139.869522] Call Trace: [ 139.869529] [ 139.869537] dump_stack_lvl+0xca/0x120 [ 139.869577] __lookup_object+0x94/0xb0 [ 139.869614] delete_object_full+0x27/0x70 [ 139.869643] free_percpu+0x30/0x1160 [ 139.869671] ? arch_uprobe_clear_state+0x16/0x140 [ 139.869706] futex_hash_free+0x38/0xc0 [ 139.869731] mmput+0x2d3/0x390 [ 139.869764] do_exit+0x79d/0x2970 [ 139.869788] ? signal_wake_up_state+0x85/0x120 [ 139.869815] ? zap_other_threads+0x2b9/0x3a0 [ 139.869844] ? __pfx_do_exit+0x10/0x10 [ 139.869867] ? do_group_exit+0x1c3/0x2a0 [ 139.869891] ? lock_release+0xc8/0x290 [ 139.869921] do_group_exit+0xd3/0x2a0 [ 139.869947] __x64_sys_exit_group+0x3e/0x50 01:38:31 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f00000001c0), 0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='stack\x00') read$char_usb(r1, &(0x7f0000000040)=""/1, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2004}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x10, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x48811}, 0x4004) [ 139.869972] x64_sys_call+0x18c5/0x18d0 [ 139.870010] do_syscall_64+0xbf/0x360 [ 139.870031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.870052] RIP: 0033:0x7fc51429eb19 [ 139.870067] Code: Unable to access opcode bytes at 0x7fc51429eaef. [ 139.870076] RSP: 002b:00007ffd570133a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 139.870096] RAX: ffffffffffffffda RBX: 000000000000001e RCX: 00007fc51429eb19 [ 139.870110] RDX: 00007fc51425172b RSI: ffffffffffffffbc RDI: 0000000000000000 [ 139.870123] RBP: 0000000000000000 R08: 00007fc5143b61c8 R09: 0000000000000001 [ 139.870135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 139.870147] R13: 0000000000000001 R14: 0000000000000001 R15: 00007ffd57013490 [ 139.870175] [ 139.870182] kmemleak: Object (percpu) 0x607f1a6394f0 (size 8): [ 139.870194] kmemleak: comm "syz-executor.4", pid 3964, jiffies 4294806697 [ 139.870207] kmemleak: min_count = 1 [ 139.870213] kmemleak: count = 0 [ 139.870220] kmemleak: flags = 0x21 [ 139.870227] kmemleak: checksum = 0 [ 139.870233] kmemleak: backtrace: [ 139.870239] pcpu_alloc_noprof+0x87a/0x1170 [ 139.870266] percpu_ref_init+0x37/0x400 [ 139.870297] ioctx_alloc+0x27f/0x1e10 [ 139.870318] __x64_sys_io_setup+0xc8/0x1f0 [ 139.870340] do_syscall_64+0xbf/0x360 [ 139.870355] entry_SYSCALL_64_after_hwframe+0x77/0x7f 01:38:31 executing program 6: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='ramfs\x00', 0x90, 0x0) getresgid(&(0x7f0000002500), &(0x7f0000002540)=0x0, &(0x7f0000002580)) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/file0\x00', 0x1000000000000, 0x6, &(0x7f0000002440)=[{&(0x7f00000001c0)="682797e754e6ddd837e9beb4a0418656b7678d0c30f04a723afd836d34fc865c534b4b8c8724e78a4ca1181b4d8808141a6adfa5ea9dcbd7f396a835541173a21e414e4df6e7192a4b0a86933dd69e6ce2a86c051490272678a97ead9a0176ec395c054ec1701285f7a55f7c266c34b38ff61b137a0a5614729df436282b4f08cee60e75cbb68f0e4bdc134ec2d887112c", 0x91, 0xcb4}, {&(0x7f0000000280)="ebc0cbfdf25b455aeef4a46c505ea1b9e6ca3decce6e61f9ed450d3d3d003fcfe5bf807c6d745369212d5fc7ff47c3266d2902af147d50b88a7d31d87b34f97edcd35dd95e25ae4c01fb24ce66e56bd832579e3250f078f973dc17a6fcdc9482e34d83e6399cb1bc9a5f930eeba5f05b5ddf0a0ac762b39ad64bfb05969b3e58535b0bf865899b9242bda9f566166ac6938104f5e1d46913b31b0cd83a2447c737d99bd8b17755ed8155eaafb6013a189f63220cb40713fd2a11a0d5985f298cfb21edc77da84ab245b25f45ad6977fb486f31322b9760b0a53b46dc5d7d8f66dfcfdfd59aa5ff12b05f910f", 0xec, 0x8}, {&(0x7f0000000140)="dd16619df8ac299a5aff20f491cdf4c26aa387f3ba6235c15e42fc265a0e883fc840a7f2380068a2099e7e0429d529", 0x2f, 0xfffffffffffffffb}, {&(0x7f0000000380)="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", 0x1000, 0x7fffffff}, {&(0x7f0000001380)="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", 0x1000, 0x81}, {&(0x7f0000002380)="205d237e1f59e70239bd48cac4e3a2339f1d917a650866f48a5688d0cf66506539a41192bee3733122fab40056005b52200813d20584b13d83baadb26731ae5c8c7ad31a55f708358bd425a26b00d23ed0e6c6a4a548c1a772c5fa23416b9357d4e7e2b7b99ba5d2a3e8cf7630df4008a519e7307afd42037de314011026136babee8df787f714cc813eb438ee783b099a5525872f28944aa475931f5f89", 0x9e, 0x2}], 0x1000001, &(0x7f00000025c0)={[{@huge_advise}, {@nr_inodes={'nr_inodes', 0x3d, [0x3f, 0x67, 0x25]}}, {@gid={'gid', 0x3d, r0}}, {@huge_within_size}], [{@dont_measure}]}) creat(&(0x7f0000000040)='./file0/file0\x00', 0x0) [ 139.912348] loop6: detected capacity change from 0 to 264192 [ 139.925850] tmpfs: Unsupported parameter 'huge' [ 139.932169] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2 [ 139.938169] loop6: detected capacity change from 0 to 264192 [ 139.947246] tmpfs: Unsupported parameter 'huge' 01:38:31 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f00000001c0), 0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='stack\x00') read$char_usb(r1, &(0x7f0000000040)=""/1, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) [ 139.954752] syz-executor.7 (3957) used greatest stack depth: 23360 bytes left 01:38:31 executing program 1: r0 = syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000180)="eb3c906d6b66732e66617400020801000240008000f8015f32b40200a2df440b768b2f84d389f36e2277d6ccb156f4532b069981df5689f2e87bb7a2395a6e85416c18cfd9ab6852d385af41f9292efdb38c7ebc903b70e4b60f84641d", 0x5d}, {0x0, 0x0, 0x1e0}], 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="40fec363bc419f22285710f92ee9c6103f1bfca8e3971925e994df1507f236b146c5ba585aaa07cdadeb882b06d80d00d5470ba41a6a3ff10da76a777c3d10e50b6be258f84b9ee626ac31924f6d7042231f276a4e220ed9711e178cd2bd8a2979e73f8c69d9adb7d54455"]) getresuid(&(0x7f0000000840)=0x0, &(0x7f0000000880), &(0x7f00000008c0)) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x2, 0x7, &(0x7f0000000780)=[{&(0x7f0000000280)="497a435e77bd9c92b3af8ad0ad3ea4687e9946eb842ae6a1edbb953dae32fc6cbcf2df5f3ca4677f98a33595fd83bb1506b3168daacace0bbec2a3ac90fa5755b7b26322ba163899f9bd08b8b5d222aa458e207c89d8a6bf9309e20156c93f824d0b560df91f44eb9c60f21b983daec03ca697a6e27e931b4e59d8a7e0e6a71b7b5a9b56d0a4c7d9ce70cf5f1d548142ebe2cfecd09aa37ff9f2a02a201dea59f6bba6ee6f77b4f8b77006b44ca36684aabab4ff3eff70105b851924c1ce03", 0xbf, 0x5}, {&(0x7f0000000340)="9339d864caf2397ba6a3da076295e5998f75a7234e32bffcc9f212cb2e951d7da2f400b71d353300b54cce6a94c7dc06885dcc7c4517158b37a873881c044d256f4b1f4af62aea6017c86db8013ec7c802429e1493bbce5ef12e1c2a7c28c08953b8c8d4734a5f8aaa962a8beb", 0x6d, 0x3}, {&(0x7f00000003c0)="0834d13797984c5e7f5ea25f5ecf05a2c996c636598b5e1f051660f221dbedd9d20adcdc14d43e7821b7cecdb6d9bb3ce11d73aae7d8b2382ca814379bcee960c4af5c375fd7184c9fc590a98fd3364b02bb3ffa0b90b05a6fa24806560e9f88c9290924212f2d740ed5c4dd9b78c70496bb94600ff7016033232b7f5dbf6399c8fe00ea898d31dc4d036daf42943083f06747cfa774e01538132be3970c2118f134cbe7327be73057cb0fd4b28b28c84686b49a507a3fd5b9fd8c1f0302821b90d014954003e02e9d49cadca867a2d8f2d147995fc09be1ab93da19d6c5407376fcc3", 0xe3, 0x1}, {&(0x7f00000004c0)="f669015cb12456ffd49e379d976efe02d702827ce6c58700c81b1ae5060e42fbb492a44d80fa00d2899ec8124e42c02e50d5baa19f4ed687f810f6a305a27e7dd3fc84d58b77a97f488045926e8564a6e2b46fa394517a8f507016a4cb9298694d7bb734711ef5c133174c668b2fda498f5eb44d95daf792b5964fc342", 0x7d, 0x4}, {&(0x7f0000000540)="cba7417efc2bcf67bd4df098ae6b9d2f82a906ec84d4e35c03586e2d43706afa1f55b4613baeabc534c8832f8201cb91ed082bd04eeeeb23cf7b6b09b8f2bc667df0770f884d291e5eb71d2765b253", 0x4f, 0x7}, {&(0x7f00000005c0)="f44636e6c428744017ba7388cfdc747b1aebbe942ddc493aed04edbcfdb4a04a5b5c6cdc4f04016d53af2a0a65af786a0f1b76b4f5851785dfa97fff5615fc9d904a69c5041c7f79f7833404fabb007d68e8509ad61e013cef70c9c612155ec0463c9a6a470d53bf20d9eb9579c0e810d8645b07e14545d53f23e91e3378dd3aaf61bdebad242f356c3778089bd919fb06412fb6c2c5efc76618177953c7f9", 0x9f, 0x1000}, {&(0x7f0000000680)="2db9f05f70bdc90f22aee2482ade1cdb5c8e289eb21d5b10000ddfdf05bf656444586c63c77a976cad959530008264df3e535ae30410989b86c312d38e13d811d501dcefc46aca5a7e9c7e3f1eb3100f005cee471a8034aa7c56926c8de205012b1ab0138487c7b396f5a66a0af0a7d2ff7b533c86d0c7fd084bc80b989b8b8bcf1d87dd24448348be3c71a5f07ae7997a74c71c3e3096aae6f74bce7f045ac9110871c5850baf4c18d02023c3903b827c799ec4d40e5041804916eee4a0fba9a49249bc9759afbd81e11d45fe21262985604c61923d2c287e2ac4fc85d7af4632f1473f1e071614d747d0bbed84", 0xee, 0x43e}], 0x45000, &(0x7f0000000a00)=ANY=[@ANYBLOB='unhide,check=relaxed,utf8,gid=', @ANYRESHEX=0xee01, @ANYBLOB=',map=normal,overriderockperm,nocompress,gid=', @ANYRESHEX, @ANYBLOB=',obj_role=vfat\x00,subj_role=,uid>', @ANYRESDEC, @ANYBLOB="2c706330303030303030303030303030303030303034372c7375626a5f747970653d76666174002c636f6e546578743d73795774656d5f752c657569f93e000000", @ANYRESDEC=r1, @ANYBLOB=',\x00']) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) syz_mount_image$tmpfs(&(0x7f00000005c0), &(0x7f0000000600)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)={[{@mpol={'mpol', 0x3d, {'interleave', '=static', @void}}}, {@gid={'gid', 0x3d, r3}}]}) syz_mount_image$tmpfs(&(0x7f0000000900), &(0x7f0000000940)='./file0\x00', 0xc83, 0x0, &(0x7f0000000980), 0x50000, &(0x7f0000000b00)={[{@gid={'gid', 0x3d, r3}}, {@size={'size', 0x3d, [0x33, 0x36, 0x70, 0x5b]}}, {@huge_within_size}], [{@defcontext={'defcontext', 0x3d, 'user_u'}}, {@appraise}]}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) 01:38:31 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x428441) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) r1 = dup(r0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x80605414, &(0x7f00000001c0)) [ 139.990511] loop1: detected capacity change from 0 to 1 [ 139.994567] ------------[ cut here ]------------ [ 139.995078] WARNING: fs/namespace.c:1434 at mntput_no_expire+0x78e/0xbe0, CPU#1: syz-executor.6/298 [ 139.995846] Modules linked in: [ 139.996172] CPU: 1 UID: 0 PID: 298 Comm: syz-executor.6 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 139.997113] Tainted: [W]=WARN [ 139.997907] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 139.999602] RIP: 0010:mntput_no_expire+0x78e/0xbe0 [ 140.000515] Code: 05 16 42 81 04 01 e8 31 f8 91 ff e9 41 fc ff ff e8 b7 50 b4 ff 31 ff 44 89 ee e8 dd 4b b4 ff 45 85 ed 79 09 e8 a3 50 b4 ff 90 <0f> 0b 90 e8 9a 50 b4 ff e8 75 f6 fb 02 31 ff 89 c5 89 c6 e8 ba 4b [ 140.004215] RSP: 0018:ffff88801721fce0 EFLAGS: 00010293 [ 140.005229] RAX: 0000000000000000 RBX: 1ffff11002e43fa1 RCX: ffffffff81bf96d3 [ 140.006803] RDX: ffff88801c503700 RSI: ffffffff81bf96dd RDI: 0000000000000005 [ 140.007364] RBP: ffff88800c199500 R08: 0000000000000001 R09: 0000000000000000 [ 140.007935] R10: 00000000ffffffff R11: 0000000000000001 R12: ffff88801721fd48 [ 140.008487] R13: 00000000ffffffff R14: ffff88800c199500 R15: ffff88800c1995e8 [ 140.009058] FS: 000055557522d400(0000) GS:ffff8880e56dd000(0000) knlGS:0000000000000000 [ 140.009699] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 140.010162] CR2: 00007faa28544050 CR3: 0000000040688000 CR4: 0000000000350ef0 [ 140.010739] Call Trace: [ 140.010955] [ 140.011142] ? __pfx_mntput_no_expire+0x10/0x10 [ 140.011517] ? dput.part.0+0xce/0x930 [ 140.011847] ? lock_release+0xc8/0x290 [ 140.012168] path_umount+0x6e0/0x1100 [ 140.012472] ? kmem_cache_free+0x2a1/0x540 [ 140.012826] ? __pfx_path_umount+0x10/0x10 [ 140.013161] ? putname.part.0+0x11b/0x160 [ 140.013496] __x64_sys_umount+0x15c/0x190 [ 140.013842] ? __pfx___x64_sys_umount+0x10/0x10 [ 140.014226] do_syscall_64+0xbf/0x360 [ 140.014531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.014954] RIP: 0033:0x7f9dd20caf87 [ 140.015249] Code: ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 140.017883] RSP: 002b:00007ffcc9ce3798 EFLAGS: 00000202 ORIG_RAX: 00000000000000a6 [ 140.018484] RAX: ffffffffffffffda RBX: 000000000000000c RCX: 00007f9dd20caf87 [ 140.019780] RDX: 00007ffcc9ce3869 RSI: 000000000000000a RDI: 00007ffcc9ce3860 [ 140.020351] RBP: 00007ffcc9ce3860 R08: 00000000ffffffff R09: 00007ffcc9ce3630 [ 140.020929] R10: 000055557522ec7b R11: 0000000000000202 R12: 00007f9dd2123105 [ 140.021484] R13: 00007ffcc9ce4920 R14: 000055557522ec20 R15: 00007ffcc9ce4960 [ 140.022078] [ 140.022268] irq event stamp: 158477 [ 140.022548] hardirqs last enabled at (158485): [] __up_console_sem+0x78/0x80 [ 140.023244] hardirqs last disabled at (158494): [] __up_console_sem+0x5d/0x80 [ 140.023937] softirqs last enabled at (158430): [] handle_softirqs+0x50c/0x770 [ 140.024644] softirqs last disabled at (158155): [] __irq_exit_rcu+0xc4/0x100 [ 140.025322] ---[ end trace 0000000000000000 ]--- [ 140.027342] vfat: Unknown parameter '@þÃc¼AŸ"(Wù.éÆ?ü¨ã—%é”ßò6±FźXZªÍ­ëˆ+Ø' [ 140.029564] loop1: detected capacity change from 0 to 16 [ 140.042906] tmpfs: Invalid gid '0x00000000ffffffff' [ 140.046128] loop1: detected capacity change from 0 to 6 [ 140.048225] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 140.049219] mac80211_hwsim hwsim7 wlan1: left promiscuous mode [ 140.053549] loop1: detected capacity change from 0 to 1 [ 140.056806] vfat: Unknown parameter '@þÃc¼AŸ"(Wù.éÆ?ü¨ã—%é”ßò6±FźXZªÍ­ëˆ+Ø' [ 140.061496] loop1: detected capacity change from 0 to 16 [ 140.065517] tmpfs: Invalid gid '0x00000000ffffffff' [ 140.066139] loop1: detected capacity change from 0 to 6 [ 140.142403] BUG: unable to handle page fault for address: ffffed10212c9426 [ 140.143427] #PF: supervisor read access in kernel mode [ 140.144147] #PF: error_code(0x0000) - not-present page [ 140.144864] PGD 7ffd4067 P4D 7ffd4067 PUD 7ffd3067 PMD 0 [ 140.145646] Oops: Oops: 0000 [#1] SMP KASAN NOPTI [ 140.146371] CPU: 0 UID: 0 PID: 3992 Comm: syz-executor.5 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 140.147990] Tainted: [W]=WARN [ 140.148422] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 140.149550] RIP: 0010:perf_tp_event+0x175/0xe70 [ 140.150249] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 140.152736] RSP: 0018:ffff888046c17780 EFLAGS: 00010012 [ 140.153473] RAX: 1ffff110212c9426 RBX: ffff888109649f40 RCX: ffffc90007242000 [ 140.154457] RDX: 0000000000040000 RSI: ffffffff818995b7 RDI: ffff88810964a130 [ 140.155434] RBP: ffff888046c179f0 R08: ffff88806ce31340 R09: ffffe8ffffc164f0 [ 140.156412] R10: 0000000000000000 R11: ffff88806ce37018 R12: dffffc0000000000 [ 140.157392] R13: 0000000000000014 R14: ffff88806ce31340 R15: dffffc0000000000 [ 140.158378] FS: 00007fc511814700(0000) GS:ffff8880e55dd000(0000) knlGS:0000000000000000 [ 140.159484] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 140.160284] CR2: ffffed10212c9426 CR3: 000000000f09e000 CR4: 0000000000350ef0 [ 140.161259] Call Trace: [ 140.161620] [ 140.161946] ? __pfx_perf_tp_event+0x10/0x10 [ 140.162581] ? __asan_memcpy+0x3d/0x60 [ 140.163135] ? visit_groups_merge.constprop.0.isra.0+0x6e7/0x1150 [ 140.163997] ? __pfx_visit_groups_merge.constprop.0.isra.0+0x10/0x10 [ 140.164883] ? lock_is_held_type+0x9e/0x120 [ 140.165512] ? ctx_sched_in+0x134/0x9b0 [ 140.166086] ? kvm_sched_clock_read+0x16/0x30 [ 140.166726] ? sched_clock+0x37/0x60 [ 140.167261] ? sched_clock_cpu+0x6c/0x4e0 [ 140.167843] ? lock_is_held_type+0x9e/0x120 [ 140.168455] ? perf_trace_run_bpf_submit+0xef/0x180 [ 140.169155] ? lock_is_held_type+0x9e/0x120 [ 140.169766] perf_trace_run_bpf_submit+0xef/0x180 [ 140.170453] perf_trace_preemptirq_template+0x259/0x430 [ 140.171208] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 140.172035] ? lock_is_held_type+0x9e/0x120 [ 140.172637] ? find_held_lock+0x2b/0x80 [ 140.173199] ? try_to_wake_up+0x8ae/0x11d0 [ 140.173797] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 140.174515] trace_irq_enable.constprop.0+0xa6/0x100 [ 140.175219] trace_hardirqs_on+0x26/0x40 [ 140.175784] _raw_spin_unlock_irqrestore+0x2c/0x50 [ 140.176473] try_to_wake_up+0x8ae/0x11d0 [ 140.177051] ? __pfx_try_to_wake_up+0x10/0x10 [ 140.177688] ? plist_del+0x122/0x270 [ 140.178234] ? find_held_lock+0x2b/0x80 [ 140.178798] ? futex_wake+0x474/0x540 [ 140.179372] wake_up_q+0xa1/0x130 [ 140.179877] futex_wake+0x47e/0x540 [ 140.180402] ? __pfx_futex_wake+0x10/0x10 [ 140.180987] ? __do_sys_perf_event_open+0x44d/0x2c20 [ 140.181693] ? lock_release+0xc8/0x290 [ 140.182256] do_futex+0x26d/0x370 [ 140.182752] ? __pfx_do_futex+0x10/0x10 [ 140.183310] __x64_sys_futex+0x1c9/0x4d0 [ 140.183880] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 140.184802] ? __pfx___x64_sys_futex+0x10/0x10 [ 140.185650] do_syscall_64+0xbf/0x360 [ 140.186379] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.187328] RIP: 0033:0x7fc51429eb19 [ 140.188012] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 140.191212] RSP: 002b:00007fc511814218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 140.192580] RAX: ffffffffffffffda RBX: 00007fc5143b1f68 RCX: 00007fc51429eb19 [ 140.193702] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fc5143b1f6c [ 140.194722] RBP: 00007fc5143b1f60 R08: 000000000000000e R09: 0000000000000000 [ 140.195739] R10: 0000000000000003 R11: 0000000000000246 R12: 00007fc5143b1f6c [ 140.196965] R13: 00007ffd5701317f R14: 00007fc511814300 R15: 0000000000022000 [ 140.198035] [ 140.198366] Modules linked in: [ 140.198817] CR2: ffffed10212c9426 [ 140.199293] ---[ end trace 0000000000000000 ]--- [ 140.199937] RIP: 0010:perf_tp_event+0x175/0xe70 [ 140.200590] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 140.203070] RSP: 0018:ffff888046c17780 EFLAGS: 00010012 [ 140.203795] RAX: 1ffff110212c9426 RBX: ffff888109649f40 RCX: ffffc90007242000 [ 140.204773] RDX: 0000000000040000 RSI: ffffffff818995b7 RDI: ffff88810964a130 [ 140.205745] RBP: ffff888046c179f0 R08: ffff88806ce31340 R09: ffffe8ffffc164f0 [ 140.206747] R10: 0000000000000000 R11: ffff88806ce37018 R12: dffffc0000000000 [ 140.207721] R13: 0000000000000014 R14: ffff88806ce31340 R15: dffffc0000000000 [ 140.208723] FS: 00007fc511814700(0000) GS:ffff8880e55dd000(0000) knlGS:0000000000000000 [ 140.209829] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 140.210647] CR2: ffffed10212c9426 CR3: 000000000f09e000 CR4: 0000000000350ef0 [ 140.211646] note: syz-executor.5[3992] exited with irqs disabled [ 140.212559] BUG: unable to handle page fault for address: ffffed10212c9426 [ 140.213742] #PF: supervisor read access in kernel mode [ 140.214474] #PF: error_code(0x0000) - not-present page [ 140.215195] PGD 7ffd4067 P4D 7ffd4067 PUD 7ffd3067 PMD 0 [ 140.215978] Oops: Oops: 0000 [#2] SMP KASAN NOPTI [ 140.216660] CPU: 0 UID: 0 PID: 3992 Comm: syz-executor.5 Tainted: G D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 140.218310] Tainted: [D]=DIE, [W]=WARN [ 140.218848] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 140.219972] RIP: 0010:perf_tp_event+0x175/0xe70 [ 140.220644] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 140.223120] RSP: 0018:ffff88806ce08b80 EFLAGS: 00010012 [ 140.223867] RAX: 1ffff110212c9426 RBX: ffff888109649f40 RCX: 0000000000000002 [ 140.224851] RDX: ffff888047559b80 RSI: ffffffff818995b7 RDI: ffff88810964a130 [ 140.225833] RBP: ffff88806ce08df0 R08: ffff88806ce313e8 R09: ffffe8ffffc164f0 [ 140.226848] R10: 0000000000000000 R11: ffff88801c820498 R12: dffffc0000000000 [ 140.227830] R13: 0000000000000014 R14: ffff88806ce313e8 R15: dffffc0000000000 [ 140.228816] FS: 00007fc511814700(0000) GS:ffff8880e55dd000(0000) knlGS:0000000000000000 [ 140.229916] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 140.230734] CR2: ffffed10212c9426 CR3: 000000000f09e000 CR4: 0000000000350ef0 [ 140.231735] Call Trace: [ 140.232109] [ 140.232433] ? __pfx_perf_tp_event+0x10/0x10 [ 140.233069] ? enqueue_task_fair+0x43a/0x1e00 [ 140.233722] ? do_raw_spin_lock+0x123/0x260 [ 140.234354] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 140.235022] ? lock_acquire+0x18c/0x2f0 [ 140.235595] ? lock_release+0x1c7/0x290 [ 140.236167] ? do_raw_spin_unlock+0x53/0x220 [ 140.236807] ? _raw_spin_unlock_irqrestore+0x22/0x50 [ 140.237532] ? try_to_wake_up+0x128/0x11d0 [ 140.238160] ? do_raw_spin_lock+0x123/0x260 [ 140.238776] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 140.239447] ? perf_trace_run_bpf_submit+0xef/0x180 [ 140.240152] perf_trace_run_bpf_submit+0xef/0x180 [ 140.240842] perf_trace_preemptirq_template+0x259/0x430 [ 140.241597] ? read_tsc+0x9/0x20 [ 140.242101] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 140.242935] ? clockevents_program_event+0x135/0x360 [ 140.243652] ? tick_program_event+0xac/0x140 [ 140.244280] ? handle_softirqs+0x16e/0x770 [ 140.244898] trace_irq_enable.constprop.0+0xa6/0x100 [ 140.245611] trace_hardirqs_on+0x26/0x40 [ 140.246204] handle_softirqs+0x16e/0x770 [ 140.246805] __irq_exit_rcu+0xc4/0x100 [ 140.247377] irq_exit_rcu+0x9/0x20 [ 140.247890] sysvec_apic_timer_interrupt+0x70/0x80 [ 140.248586] [ 140.248914] [ 140.249239] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 140.249985] RIP: 0010:make_task_dead+0xa2/0x3b0 [ 140.250683] Code: 38 00 85 db 0f 84 21 01 00 00 e8 d9 96 38 00 9c 5b 81 e3 00 02 00 00 31 ff 48 89 de e8 27 92 38 00 48 85 db 0f 84 17 01 00 00 b9 96 38 00 31 ff 65 8b 1d 60 df 48 06 81 e3 ff ff ff 7f 89 de [ 140.253274] RSP: 0018:ffff888046c17f28 EFLAGS: 00000246 [ 140.254070] RAX: 0000000000000001 RBX: ffff888047559b80 RCX: ffffffff817c2b86 [ 140.255087] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff813b5234 [ 140.256129] RBP: 0000000000000009 R08: 0000000000000000 R09: 0000000000000000 [ 140.257155] R10: ffffffff8643ac57 R11: 0000000000000001 R12: ffff888047559b80 [ 140.258189] R13: 0000000000000009 R14: ffff888046c17760 R15: 0000000000000000 [ 140.259213] ? trace_irq_enable.constprop.0+0x26/0x100 [ 140.260004] ? make_task_dead+0x214/0x3b0 [ 140.260615] ? make_task_dead+0x214/0x3b0 [ 140.261217] ? do_syscall_64+0xbf/0x360 [ 140.261787] rewind_stack_and_make_dead+0x16/0x20 [ 140.262509] RIP: 0033:0x7fc51429eb19 [ 140.263050] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 140.265635] RSP: 002b:00007fc511814218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 140.266730] RAX: ffffffffffffffda RBX: 00007fc5143b1f68 RCX: 00007fc51429eb19 [ 140.267734] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fc5143b1f6c [ 140.268759] RBP: 00007fc5143b1f60 R08: 000000000000000e R09: 0000000000000000 [ 140.269782] R10: 0000000000000003 R11: 0000000000000246 R12: 00007fc5143b1f6c [ 140.270797] R13: 00007ffd5701317f R14: 00007fc511814300 R15: 0000000000022000 [ 140.271807] [ 140.272173] Modules linked in: [ 140.272650] CR2: ffffed10212c9426 [ 140.273142] ---[ end trace 0000000000000000 ]--- [ 140.273806] RIP: 0010:perf_tp_event+0x175/0xe70 [ 140.274494] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 140.277053] RSP: 0018:ffff888046c17780 EFLAGS: 00010012 [ 140.277810] RAX: 1ffff110212c9426 RBX: ffff888109649f40 RCX: ffffc90007242000 [ 140.278997] RDX: 0000000000040000 RSI: ffffffff818995b7 RDI: ffff88810964a130 [ 140.280038] RBP: ffff888046c179f0 R08: ffff88806ce31340 R09: ffffe8ffffc164f0 [ 140.281058] R10: 0000000000000000 R11: ffff88806ce37018 R12: dffffc0000000000 [ 140.282084] R13: 0000000000000014 R14: ffff88806ce31340 R15: dffffc0000000000 [ 140.283111] FS: 00007fc511814700(0000) GS:ffff8880e55dd000(0000) knlGS:0000000000000000 [ 140.284284] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 140.285116] CR2: ffffed10212c9426 CR3: 000000000f09e000 CR4: 0000000000350ef0 [ 140.286145] Kernel panic - not syncing: Fatal exception in interrupt [ 140.287378] Kernel Offset: disabled [ 140.288038] ---[ end Kernel panic - not syncing: Fatal exception in interrupt ]--- VM DIAGNOSIS: 01:38:31 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=0000000000000100 RCX=ffffffff81b96dd8 RDX=ffff888015128000 RSI=ffffffff81b96da3 RDI=0000000000000001 RBP=ffff888048b1fb70 RSP=ffff888048b1fae0 R8 =0000000000000001 R9 =ffffffff81b964d3 R10=0000000000000001 R11=0000000000000001 R12=ffff888048b1fc3c R13=000000000000076d R14=ffff888048b1fc00 R15=0000000000000001 RIP=ffffffff81b96da5 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00005555810c9400 00000000 00000000 GS =0000 ffff8880e55dd000 00000000 00000000 LDT=0000 fffffe1600000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fc51431e545 CR3=000000000f09e000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=0000ffff00000000000000000000ffff XMM01=25252525252525252525252525252525 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000ff0000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff828e32c5 RDI=ffffffff88724180 RBP=ffffffff88724140 RSP=ffff88801721f630 R8 =0000000000000000 R9 =ffffed10016ec046 R10=0000000000000020 R11=0000000000000001 R12=0000000000000020 R13=0000000000000010 R14=ffffffff88724140 R15=ffffffff828e32b0 RIP=ffffffff828e331d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 000055557522d400 00000000 00000000 GS =0000 ffff8880e56dd000 00000000 00000000 LDT=0000 fffffe1900000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007faa28544050 CR3=0000000040688000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000004109d24000000000 XMM03=0000ff00000000000000000000000000 XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962 XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000