Warning: Permanently added '[localhost]:15828' (ECDSA) to the list of known hosts.
2025/12/25 05:09:04 fuzzer started
2025/12/25 05:09:04 dialing manager at localhost:39837
syzkaller login: [   28.337994] cgroup: Unknown subsys name 'net'
[   28.339987] cgroup: Unknown subsys name 'net_prio'
[   28.341803] cgroup: Unknown subsys name 'devices'
[   28.343950] cgroup: Unknown subsys name 'blkio'
[   28.392518] cgroup: Unknown subsys name 'hugetlb'
[   28.394699] cgroup: Unknown subsys name 'rlimit'
2025/12/25 05:09:16 syscalls: 2215
2025/12/25 05:09:16 code coverage: enabled
2025/12/25 05:09:16 comparison tracing: enabled
2025/12/25 05:09:16 extra coverage: enabled
2025/12/25 05:09:16 setuid sandbox: enabled
2025/12/25 05:09:16 namespace sandbox: enabled
2025/12/25 05:09:16 Android sandbox: enabled
2025/12/25 05:09:16 fault injection: enabled
2025/12/25 05:09:16 leak checking: enabled
2025/12/25 05:09:16 net packet injection: enabled
2025/12/25 05:09:16 net device setup: enabled
2025/12/25 05:09:16 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/12/25 05:09:16 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/12/25 05:09:16 USB emulation: enabled
2025/12/25 05:09:16 hci packet injection: enabled
2025/12/25 05:09:16 wifi device emulation: enabled
2025/12/25 05:09:16 802.15.4 emulation: enabled
2025/12/25 05:09:17 fetching corpus: 50, signal 25784/27637 (executing program)
2025/12/25 05:09:17 fetching corpus: 100, signal 41113/44652 (executing program)
2025/12/25 05:09:17 fetching corpus: 150, signal 51644/56803 (executing program)
2025/12/25 05:09:17 fetching corpus: 200, signal 64429/71017 (executing program)
2025/12/25 05:09:17 fetching corpus: 250, signal 68750/76884 (executing program)
2025/12/25 05:09:17 fetching corpus: 300, signal 76055/85590 (executing program)
2025/12/25 05:09:17 fetching corpus: 350, signal 82009/92936 (executing program)
2025/12/25 05:09:17 fetching corpus: 400, signal 86297/98618 (executing program)
2025/12/25 05:09:17 fetching corpus: 450, signal 91197/104798 (executing program)
2025/12/25 05:09:18 fetching corpus: 500, signal 94285/109230 (executing program)
2025/12/25 05:09:18 fetching corpus: 550, signal 98210/114438 (executing program)
2025/12/25 05:09:18 fetching corpus: 600, signal 101238/118732 (executing program)
2025/12/25 05:09:18 fetching corpus: 650, signal 104104/122871 (executing program)
2025/12/25 05:09:18 fetching corpus: 700, signal 106299/126356 (executing program)
2025/12/25 05:09:18 fetching corpus: 750, signal 111036/132156 (executing program)
2025/12/25 05:09:18 fetching corpus: 800, signal 114673/136898 (executing program)
2025/12/25 05:09:18 fetching corpus: 850, signal 117393/140775 (executing program)
2025/12/25 05:09:19 fetching corpus: 900, signal 119636/144157 (executing program)
2025/12/25 05:09:19 fetching corpus: 950, signal 121877/147530 (executing program)
2025/12/25 05:09:19 fetching corpus: 1000, signal 123124/150000 (executing program)
2025/12/25 05:09:19 fetching corpus: 1050, signal 124837/152838 (executing program)
2025/12/25 05:09:19 fetching corpus: 1100, signal 127008/156077 (executing program)
2025/12/25 05:09:19 fetching corpus: 1150, signal 128883/159035 (executing program)
2025/12/25 05:09:19 fetching corpus: 1200, signal 130617/161856 (executing program)
2025/12/25 05:09:19 fetching corpus: 1250, signal 132107/164473 (executing program)
2025/12/25 05:09:20 fetching corpus: 1300, signal 134050/167440 (executing program)
2025/12/25 05:09:20 fetching corpus: 1350, signal 135262/169745 (executing program)
2025/12/25 05:09:20 fetching corpus: 1400, signal 136935/172454 (executing program)
2025/12/25 05:09:20 fetching corpus: 1450, signal 138156/174764 (executing program)
2025/12/25 05:09:20 fetching corpus: 1500, signal 139647/177278 (executing program)
2025/12/25 05:09:20 fetching corpus: 1550, signal 140896/179573 (executing program)
2025/12/25 05:09:20 fetching corpus: 1600, signal 142187/181860 (executing program)
2025/12/25 05:09:20 fetching corpus: 1650, signal 145369/185716 (executing program)
2025/12/25 05:09:20 fetching corpus: 1700, signal 148090/189110 (executing program)
2025/12/25 05:09:20 fetching corpus: 1750, signal 150091/191960 (executing program)
2025/12/25 05:09:21 fetching corpus: 1800, signal 151403/194186 (executing program)
2025/12/25 05:09:21 fetching corpus: 1850, signal 152741/196436 (executing program)
2025/12/25 05:09:21 fetching corpus: 1900, signal 154009/198646 (executing program)
2025/12/25 05:09:21 fetching corpus: 1950, signal 154950/200555 (executing program)
2025/12/25 05:09:21 fetching corpus: 2000, signal 156340/202793 (executing program)
2025/12/25 05:09:21 fetching corpus: 2050, signal 157923/205215 (executing program)
2025/12/25 05:09:21 fetching corpus: 2100, signal 159202/207392 (executing program)
2025/12/25 05:09:21 fetching corpus: 2150, signal 160142/209287 (executing program)
2025/12/25 05:09:22 fetching corpus: 2200, signal 161493/211433 (executing program)
2025/12/25 05:09:22 fetching corpus: 2250, signal 164168/214623 (executing program)
2025/12/25 05:09:22 fetching corpus: 2300, signal 165002/216352 (executing program)
2025/12/25 05:09:22 fetching corpus: 2350, signal 165795/218033 (executing program)
2025/12/25 05:09:22 fetching corpus: 2400, signal 166729/219866 (executing program)
2025/12/25 05:09:22 fetching corpus: 2450, signal 168295/222106 (executing program)
2025/12/25 05:09:22 fetching corpus: 2500, signal 169634/224179 (executing program)
2025/12/25 05:09:22 fetching corpus: 2550, signal 170417/225854 (executing program)
2025/12/25 05:09:22 fetching corpus: 2600, signal 171292/227581 (executing program)
2025/12/25 05:09:22 fetching corpus: 2650, signal 172371/229468 (executing program)
2025/12/25 05:09:23 fetching corpus: 2700, signal 173294/231224 (executing program)
2025/12/25 05:09:23 fetching corpus: 2750, signal 174081/232913 (executing program)
2025/12/25 05:09:23 fetching corpus: 2800, signal 174884/234538 (executing program)
2025/12/25 05:09:23 fetching corpus: 2850, signal 176695/236864 (executing program)
2025/12/25 05:09:23 fetching corpus: 2900, signal 177537/238483 (executing program)
2025/12/25 05:09:23 fetching corpus: 2950, signal 178340/240106 (executing program)
2025/12/25 05:09:23 fetching corpus: 3000, signal 179444/241876 (executing program)
2025/12/25 05:09:23 fetching corpus: 3050, signal 180222/243423 (executing program)
2025/12/25 05:09:23 fetching corpus: 3100, signal 181160/245132 (executing program)
2025/12/25 05:09:23 fetching corpus: 3150, signal 181966/246703 (executing program)
2025/12/25 05:09:24 fetching corpus: 3200, signal 183422/248660 (executing program)
2025/12/25 05:09:24 fetching corpus: 3250, signal 184259/250265 (executing program)
2025/12/25 05:09:24 fetching corpus: 3300, signal 185005/251776 (executing program)
2025/12/25 05:09:24 fetching corpus: 3350, signal 185691/253262 (executing program)
2025/12/25 05:09:24 fetching corpus: 3400, signal 186568/254859 (executing program)
2025/12/25 05:09:24 fetching corpus: 3450, signal 187411/256373 (executing program)
2025/12/25 05:09:24 fetching corpus: 3500, signal 188152/257853 (executing program)
2025/12/25 05:09:24 fetching corpus: 3550, signal 188818/259263 (executing program)
2025/12/25 05:09:24 fetching corpus: 3600, signal 189448/260611 (executing program)
2025/12/25 05:09:24 fetching corpus: 3650, signal 190020/261979 (executing program)
2025/12/25 05:09:25 fetching corpus: 3700, signal 190893/263450 (executing program)
2025/12/25 05:09:25 fetching corpus: 3750, signal 191509/264885 (executing program)
2025/12/25 05:09:25 fetching corpus: 3800, signal 192576/266447 (executing program)
2025/12/25 05:09:25 fetching corpus: 3850, signal 193377/267899 (executing program)
2025/12/25 05:09:25 fetching corpus: 3900, signal 194027/269240 (executing program)
2025/12/25 05:09:25 fetching corpus: 3950, signal 194990/270774 (executing program)
2025/12/25 05:09:25 fetching corpus: 4000, signal 195700/272168 (executing program)
2025/12/25 05:09:25 fetching corpus: 4050, signal 196439/273572 (executing program)
2025/12/25 05:09:25 fetching corpus: 4100, signal 196930/274785 (executing program)
2025/12/25 05:09:25 fetching corpus: 4150, signal 197735/276189 (executing program)
2025/12/25 05:09:26 fetching corpus: 4200, signal 198408/277514 (executing program)
2025/12/25 05:09:26 fetching corpus: 4250, signal 199084/278854 (executing program)
2025/12/25 05:09:26 fetching corpus: 4300, signal 199688/280085 (executing program)
2025/12/25 05:09:26 fetching corpus: 4350, signal 200311/281346 (executing program)
2025/12/25 05:09:26 fetching corpus: 4400, signal 200892/282591 (executing program)
2025/12/25 05:09:26 fetching corpus: 4450, signal 201347/283780 (executing program)
2025/12/25 05:09:26 fetching corpus: 4500, signal 202023/285109 (executing program)
2025/12/25 05:09:26 fetching corpus: 4550, signal 202700/286363 (executing program)
2025/12/25 05:09:26 fetching corpus: 4600, signal 203770/287886 (executing program)
2025/12/25 05:09:26 fetching corpus: 4650, signal 204392/289164 (executing program)
2025/12/25 05:09:27 fetching corpus: 4700, signal 205067/290456 (executing program)
2025/12/25 05:09:27 fetching corpus: 4750, signal 205630/291651 (executing program)
2025/12/25 05:09:27 fetching corpus: 4800, signal 206439/292933 (executing program)
2025/12/25 05:09:27 fetching corpus: 4850, signal 207133/294148 (executing program)
2025/12/25 05:09:27 fetching corpus: 4900, signal 207853/295359 (executing program)
2025/12/25 05:09:27 fetching corpus: 4950, signal 208475/296531 (executing program)
2025/12/25 05:09:27 fetching corpus: 5000, signal 208890/297583 (executing program)
2025/12/25 05:09:27 fetching corpus: 5050, signal 209372/298686 (executing program)
2025/12/25 05:09:27 fetching corpus: 5100, signal 209825/299735 (executing program)
2025/12/25 05:09:27 fetching corpus: 5150, signal 210136/300780 (executing program)
2025/12/25 05:09:28 fetching corpus: 5200, signal 210644/301889 (executing program)
2025/12/25 05:09:28 fetching corpus: 5250, signal 211241/303021 (executing program)
2025/12/25 05:09:28 fetching corpus: 5300, signal 212029/304284 (executing program)
2025/12/25 05:09:28 fetching corpus: 5350, signal 212844/305529 (executing program)
2025/12/25 05:09:28 fetching corpus: 5400, signal 213302/306566 (executing program)
2025/12/25 05:09:28 fetching corpus: 5450, signal 214040/307726 (executing program)
2025/12/25 05:09:28 fetching corpus: 5500, signal 214615/308806 (executing program)
2025/12/25 05:09:28 fetching corpus: 5550, signal 215044/309801 (executing program)
2025/12/25 05:09:28 fetching corpus: 5600, signal 215536/310828 (executing program)
2025/12/25 05:09:29 fetching corpus: 5650, signal 216091/311896 (executing program)
2025/12/25 05:09:29 fetching corpus: 5700, signal 216747/312986 (executing program)
2025/12/25 05:09:29 fetching corpus: 5750, signal 217434/314110 (executing program)
2025/12/25 05:09:29 fetching corpus: 5800, signal 218111/315204 (executing program)
2025/12/25 05:09:29 fetching corpus: 5850, signal 218672/316217 (executing program)
2025/12/25 05:09:29 fetching corpus: 5900, signal 219102/317184 (executing program)
2025/12/25 05:09:29 fetching corpus: 5950, signal 219777/318252 (executing program)
2025/12/25 05:09:29 fetching corpus: 6000, signal 220339/319273 (executing program)
2025/12/25 05:09:29 fetching corpus: 6050, signal 220946/320281 (executing program)
2025/12/25 05:09:29 fetching corpus: 6100, signal 221462/321285 (executing program)
2025/12/25 05:09:30 fetching corpus: 6150, signal 222195/322353 (executing program)
2025/12/25 05:09:30 fetching corpus: 6200, signal 222731/323333 (executing program)
2025/12/25 05:09:30 fetching corpus: 6250, signal 223257/324305 (executing program)
2025/12/25 05:09:30 fetching corpus: 6300, signal 223511/325185 (executing program)
2025/12/25 05:09:30 fetching corpus: 6350, signal 224196/326218 (executing program)
2025/12/25 05:09:30 fetching corpus: 6400, signal 224762/327157 (executing program)
2025/12/25 05:09:30 fetching corpus: 6450, signal 225065/328073 (executing program)
2025/12/25 05:09:30 fetching corpus: 6500, signal 225596/329038 (executing program)
2025/12/25 05:09:30 fetching corpus: 6550, signal 225937/329919 (executing program)
2025/12/25 05:09:31 fetching corpus: 6600, signal 226322/330809 (executing program)
2025/12/25 05:09:31 fetching corpus: 6650, signal 226870/331738 (executing program)
2025/12/25 05:09:31 fetching corpus: 6700, signal 227478/332684 (executing program)
2025/12/25 05:09:31 fetching corpus: 6750, signal 227912/333617 (executing program)
2025/12/25 05:09:31 fetching corpus: 6800, signal 228412/334561 (executing program)
2025/12/25 05:09:31 fetching corpus: 6850, signal 228780/335480 (executing program)
2025/12/25 05:09:31 fetching corpus: 6900, signal 229202/336359 (executing program)
2025/12/25 05:09:31 fetching corpus: 6950, signal 229498/337243 (executing program)
2025/12/25 05:09:31 fetching corpus: 7000, signal 229866/338043 (executing program)
2025/12/25 05:09:32 fetching corpus: 7050, signal 230439/338950 (executing program)
2025/12/25 05:09:32 fetching corpus: 7100, signal 230808/339803 (executing program)
2025/12/25 05:09:32 fetching corpus: 7150, signal 231203/340616 (executing program)
2025/12/25 05:09:32 fetching corpus: 7200, signal 231651/341453 (executing program)
2025/12/25 05:09:32 fetching corpus: 7250, signal 232130/342323 (executing program)
2025/12/25 05:09:32 fetching corpus: 7300, signal 232553/343215 (executing program)
2025/12/25 05:09:32 fetching corpus: 7350, signal 232883/344041 (executing program)
2025/12/25 05:09:32 fetching corpus: 7400, signal 233292/344905 (executing program)
2025/12/25 05:09:33 fetching corpus: 7450, signal 233593/345717 (executing program)
2025/12/25 05:09:33 fetching corpus: 7500, signal 233998/346549 (executing program)
2025/12/25 05:09:33 fetching corpus: 7550, signal 234329/347350 (executing program)
2025/12/25 05:09:33 fetching corpus: 7600, signal 234669/348153 (executing program)
2025/12/25 05:09:33 fetching corpus: 7650, signal 234898/348938 (executing program)
2025/12/25 05:09:33 fetching corpus: 7700, signal 235313/349732 (executing program)
2025/12/25 05:09:33 fetching corpus: 7750, signal 235692/350497 (executing program)
2025/12/25 05:09:33 fetching corpus: 7800, signal 235970/351300 (executing program)
2025/12/25 05:09:33 fetching corpus: 7850, signal 236354/352106 (executing program)
2025/12/25 05:09:34 fetching corpus: 7900, signal 237047/352954 (executing program)
2025/12/25 05:09:34 fetching corpus: 7950, signal 237454/353766 (executing program)
2025/12/25 05:09:34 fetching corpus: 8000, signal 237871/354527 (executing program)
2025/12/25 05:09:34 fetching corpus: 8050, signal 238253/355335 (executing program)
2025/12/25 05:09:34 fetching corpus: 8100, signal 238714/356160 (executing program)
2025/12/25 05:09:34 fetching corpus: 8150, signal 239086/356901 (executing program)
2025/12/25 05:09:34 fetching corpus: 8200, signal 239350/357670 (executing program)
2025/12/25 05:09:34 fetching corpus: 8250, signal 239672/358456 (executing program)
2025/12/25 05:09:34 fetching corpus: 8300, signal 240019/359229 (executing program)
2025/12/25 05:09:34 fetching corpus: 8350, signal 240254/359970 (executing program)
2025/12/25 05:09:35 fetching corpus: 8400, signal 240665/360710 (executing program)
2025/12/25 05:09:35 fetching corpus: 8450, signal 241075/361455 (executing program)
2025/12/25 05:09:35 fetching corpus: 8500, signal 241441/362218 (executing program)
2025/12/25 05:09:35 fetching corpus: 8550, signal 241766/362989 (executing program)
2025/12/25 05:09:35 fetching corpus: 8600, signal 242156/363724 (executing program)
2025/12/25 05:09:35 fetching corpus: 8650, signal 242712/364482 (executing program)
2025/12/25 05:09:35 fetching corpus: 8700, signal 243131/365210 (executing program)
2025/12/25 05:09:35 fetching corpus: 8750, signal 243459/365926 (executing program)
2025/12/25 05:09:36 fetching corpus: 8800, signal 244061/366694 (executing program)
2025/12/25 05:09:36 fetching corpus: 8850, signal 244396/367391 (executing program)
2025/12/25 05:09:36 fetching corpus: 8900, signal 244829/368108 (executing program)
2025/12/25 05:09:36 fetching corpus: 8950, signal 245146/368823 (executing program)
2025/12/25 05:09:36 fetching corpus: 9000, signal 245445/369531 (executing program)
2025/12/25 05:09:36 fetching corpus: 9050, signal 245810/370246 (executing program)
2025/12/25 05:09:36 fetching corpus: 9100, signal 246291/370916 (executing program)
2025/12/25 05:09:36 fetching corpus: 9150, signal 246519/371569 (executing program)
2025/12/25 05:09:36 fetching corpus: 9200, signal 246927/372249 (executing program)
2025/12/25 05:09:37 fetching corpus: 9250, signal 247194/372948 (executing program)
2025/12/25 05:09:37 fetching corpus: 9300, signal 247396/373630 (executing program)
2025/12/25 05:09:37 fetching corpus: 9350, signal 247726/374334 (executing program)
2025/12/25 05:09:37 fetching corpus: 9400, signal 248018/374522 (executing program)
2025/12/25 05:09:37 fetching corpus: 9450, signal 248295/374522 (executing program)
2025/12/25 05:09:37 fetching corpus: 9500, signal 248656/374522 (executing program)
2025/12/25 05:09:37 fetching corpus: 9550, signal 249092/374522 (executing program)
2025/12/25 05:09:37 fetching corpus: 9600, signal 249481/374522 (executing program)
2025/12/25 05:09:37 fetching corpus: 9650, signal 249827/374522 (executing program)
2025/12/25 05:09:37 fetching corpus: 9700, signal 250107/374522 (executing program)
2025/12/25 05:09:38 fetching corpus: 9750, signal 250578/374522 (executing program)
2025/12/25 05:09:38 fetching corpus: 9800, signal 250979/374522 (executing program)
2025/12/25 05:09:38 fetching corpus: 9850, signal 251350/374522 (executing program)
2025/12/25 05:09:38 fetching corpus: 9900, signal 251597/374522 (executing program)
2025/12/25 05:09:38 fetching corpus: 9950, signal 251914/374522 (executing program)
2025/12/25 05:09:38 fetching corpus: 10000, signal 252215/374522 (executing program)
2025/12/25 05:09:38 fetching corpus: 10050, signal 252489/374522 (executing program)
2025/12/25 05:09:38 fetching corpus: 10100, signal 252864/374522 (executing program)
2025/12/25 05:09:38 fetching corpus: 10150, signal 253206/374522 (executing program)
2025/12/25 05:09:38 fetching corpus: 10200, signal 253429/374522 (executing program)
2025/12/25 05:09:39 fetching corpus: 10250, signal 253878/374522 (executing program)
2025/12/25 05:09:39 fetching corpus: 10300, signal 254222/374522 (executing program)
2025/12/25 05:09:39 fetching corpus: 10350, signal 254562/374522 (executing program)
2025/12/25 05:09:39 fetching corpus: 10400, signal 254731/374522 (executing program)
2025/12/25 05:09:39 fetching corpus: 10450, signal 255065/374522 (executing program)
2025/12/25 05:09:39 fetching corpus: 10500, signal 255458/374522 (executing program)
2025/12/25 05:09:39 fetching corpus: 10550, signal 255742/374522 (executing program)
2025/12/25 05:09:39 fetching corpus: 10600, signal 255987/374522 (executing program)
2025/12/25 05:09:39 fetching corpus: 10650, signal 256186/374522 (executing program)
2025/12/25 05:09:40 fetching corpus: 10700, signal 256532/374522 (executing program)
2025/12/25 05:09:40 fetching corpus: 10750, signal 256841/374522 (executing program)
2025/12/25 05:09:40 fetching corpus: 10800, signal 257119/374522 (executing program)
2025/12/25 05:09:40 fetching corpus: 10850, signal 257346/374522 (executing program)
2025/12/25 05:09:40 fetching corpus: 10900, signal 257648/374522 (executing program)
2025/12/25 05:09:40 fetching corpus: 10950, signal 258373/374522 (executing program)
2025/12/25 05:09:40 fetching corpus: 11000, signal 258649/374522 (executing program)
2025/12/25 05:09:40 fetching corpus: 11050, signal 258907/374522 (executing program)
2025/12/25 05:09:40 fetching corpus: 11100, signal 259377/374522 (executing program)
2025/12/25 05:09:41 fetching corpus: 11150, signal 259613/374522 (executing program)
2025/12/25 05:09:41 fetching corpus: 11200, signal 259895/374522 (executing program)
2025/12/25 05:09:41 fetching corpus: 11250, signal 260172/374522 (executing program)
2025/12/25 05:09:41 fetching corpus: 11300, signal 260394/374522 (executing program)
2025/12/25 05:09:41 fetching corpus: 11350, signal 260603/374522 (executing program)
2025/12/25 05:09:41 fetching corpus: 11400, signal 260878/374522 (executing program)
2025/12/25 05:09:41 fetching corpus: 11450, signal 261166/374522 (executing program)
2025/12/25 05:09:41 fetching corpus: 11500, signal 261434/374522 (executing program)
2025/12/25 05:09:41 fetching corpus: 11550, signal 261740/374522 (executing program)
2025/12/25 05:09:42 fetching corpus: 11600, signal 262043/374522 (executing program)
2025/12/25 05:09:42 fetching corpus: 11650, signal 262398/374522 (executing program)
2025/12/25 05:09:42 fetching corpus: 11700, signal 262750/374522 (executing program)
2025/12/25 05:09:42 fetching corpus: 11750, signal 262951/374522 (executing program)
2025/12/25 05:09:42 fetching corpus: 11800, signal 263213/374522 (executing program)
2025/12/25 05:09:42 fetching corpus: 11850, signal 263385/374522 (executing program)
2025/12/25 05:09:42 fetching corpus: 11900, signal 263580/374522 (executing program)
2025/12/25 05:09:42 fetching corpus: 11950, signal 263856/374522 (executing program)
2025/12/25 05:09:42 fetching corpus: 12000, signal 264136/374522 (executing program)
2025/12/25 05:09:43 fetching corpus: 12050, signal 264476/374522 (executing program)
2025/12/25 05:09:43 fetching corpus: 12100, signal 264846/374522 (executing program)
2025/12/25 05:09:43 fetching corpus: 12150, signal 265145/374522 (executing program)
2025/12/25 05:09:43 fetching corpus: 12200, signal 265372/374522 (executing program)
2025/12/25 05:09:43 fetching corpus: 12250, signal 265660/374522 (executing program)
2025/12/25 05:09:43 fetching corpus: 12300, signal 265847/374522 (executing program)
2025/12/25 05:09:43 fetching corpus: 12350, signal 266119/374522 (executing program)
2025/12/25 05:09:43 fetching corpus: 12400, signal 266372/374522 (executing program)
2025/12/25 05:09:43 fetching corpus: 12450, signal 266576/374522 (executing program)
2025/12/25 05:09:43 fetching corpus: 12500, signal 266820/374522 (executing program)
2025/12/25 05:09:43 fetching corpus: 12550, signal 266982/374522 (executing program)
2025/12/25 05:09:44 fetching corpus: 12600, signal 267354/374522 (executing program)
2025/12/25 05:09:44 fetching corpus: 12650, signal 267641/374522 (executing program)
2025/12/25 05:09:44 fetching corpus: 12700, signal 267891/374522 (executing program)
2025/12/25 05:09:44 fetching corpus: 12750, signal 268113/374522 (executing program)
2025/12/25 05:09:44 fetching corpus: 12800, signal 268390/374522 (executing program)
2025/12/25 05:09:44 fetching corpus: 12850, signal 268617/374522 (executing program)
2025/12/25 05:09:44 fetching corpus: 12900, signal 268909/374522 (executing program)
2025/12/25 05:09:44 fetching corpus: 12950, signal 269217/374522 (executing program)
2025/12/25 05:09:44 fetching corpus: 13000, signal 269478/374522 (executing program)
2025/12/25 05:09:45 fetching corpus: 13050, signal 269664/374522 (executing program)
2025/12/25 05:09:45 fetching corpus: 13100, signal 269867/374522 (executing program)
2025/12/25 05:09:45 fetching corpus: 13150, signal 270153/374522 (executing program)
2025/12/25 05:09:45 fetching corpus: 13200, signal 270441/374522 (executing program)
2025/12/25 05:09:45 fetching corpus: 13250, signal 270642/374522 (executing program)
2025/12/25 05:09:45 fetching corpus: 13300, signal 271125/374522 (executing program)
2025/12/25 05:09:45 fetching corpus: 13350, signal 271275/374522 (executing program)
2025/12/25 05:09:45 fetching corpus: 13400, signal 271498/374522 (executing program)
2025/12/25 05:09:46 fetching corpus: 13450, signal 271780/374522 (executing program)
2025/12/25 05:09:46 fetching corpus: 13500, signal 271966/374522 (executing program)
2025/12/25 05:09:46 fetching corpus: 13550, signal 272215/374522 (executing program)
2025/12/25 05:09:46 fetching corpus: 13600, signal 272526/374522 (executing program)
2025/12/25 05:09:46 fetching corpus: 13650, signal 272895/374522 (executing program)
2025/12/25 05:09:46 fetching corpus: 13691, signal 273115/374522 (executing program)
2025/12/25 05:09:46 fetching corpus: 13691, signal 273115/374522 (executing program)
2025/12/25 05:09:48 starting 8 fuzzer processes
05:09:48 executing program 0:
r0 = msgget(0x2, 0x19)
msgrcv(r0, &(0x7f0000000000)={0x0, ""/18}, 0x1a, 0x1, 0x0)
msgctl$IPC_RMID(r0, 0x0)
msgsnd(0xffffffffffffffff, &(0x7f0000000040)={0x3, "1a96ac18e77c5b8da016a578b880f3320243d834d67c05296c9be09eb89e447a1cdd93e5b974c4aaa7bac28630729467aff6175010a43d976ae3437724b68531f635105445a730546eb14a87a917eec09b052a41a80d3a3dc45c33f498e292fe927df5defa00d6227eba18c9e1d2b5c7f29c2bd921a48624e5966829c131141be810c6b541090f8147ec82f7922c83175aed589cf682bcb3952d6fcd455cf7d4443316074ec993fcb4c1eb86e13eadc816d786b5e39de9eadcab92cad1094ec5242cddcdaf84ee8a090f55690372971fa3e16264"}, 0xdc, 0x0)
msgctl$IPC_RMID(r0, 0x0)
msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000140)=""/160)
r1 = msgget(0x0, 0x80)
msgctl$IPC_RMID(r1, 0x0)
msgget(0x2, 0xc)
msgrcv(0x0, &(0x7f0000000200)={0x0, ""/31}, 0x27, 0x0, 0x2000)
msgrcv(r1, &(0x7f0000000240)={0x0, ""/18}, 0x1a, 0x2, 0x0)
r2 = msgget$private(0x0, 0x4c3)
msgsnd(r2, &(0x7f0000000280)={0x1, "28fe26b10f75c23c15e2ff517bdff036b31e15c4c5ded8fc0631cb663ad8d54e75387df53ea1e2f019b326fb58ffac82538e7dbc4d805daf5b78e92e0d78e42c1690eb7d4dbf410da2329b002a752c9dd08d1e61ebbfac4d309a7e312b93b104d4161dcf8f9ab5cd002f4c1084eb76eadc104c054007ed5385208d7e00f8990e6637af9dec237711829a8eb72344270aa51e6aefaaddeb2c138affc0db6e03dcb5d4a02165eb7aae0fddf4563063e8f7dc822178921575"}, 0xbf, 0x0)
msgrcv(r2, &(0x7f0000000340)={0x0, ""/112}, 0x78, 0x3, 0x3800)
msgrcv(r2, &(0x7f00000003c0)={0x0, ""/15}, 0x17, 0x2, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000400)={{{@in=@initdev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@initdev}, 0x0, @in6=@empty}}, &(0x7f0000000500)=0xe8)
msgctl$IPC_SET(r2, 0x1, &(0x7f0000000540)={{0x1, 0xee00, 0xee00, r3, 0xffffffffffffffff, 0x14, 0x81}, 0x0, 0x0, 0x5, 0x2, 0x78, 0x1, 0xffffffff, 0xaac2, 0x4, 0x4, 0xffffffffffffffff, 0xffffffffffffffff})
msgsnd(r0, &(0x7f00000005c0)={0x3, "612dc013face52abe0ae8f5d2b2c69d4838e2ee7b162507dc09d5b253229719ad0727976c6721c093b95e743c009081b5552baa63018a78f6b70f22bada600db9fd38e383407d4bf7147a0070fa502009176c02702a49842c5e664aa39cd4dd3d38715ec4a9b633bde"}, 0x71, 0x800)
msgctl$IPC_RMID(r1, 0x0)
msgctl$IPC_RMID(r1, 0x0)

05:09:48 executing program 1:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x401}}, './file0\x00'})
write$P9_RWSTAT(r0, &(0x7f0000000040)={0x7, 0x7f, 0x1}, 0x7)
write$P9_RLERRORu(r0, &(0x7f0000000080)={0xd, 0x7, 0x2, {{}, 0x80000000}}, 0xd)
ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x72d7a900)
fsetxattr$security_selinux(r0, &(0x7f0000000100), &(0x7f0000000140)='system_u:object_r:console_device_t:s0\x00', 0x26, 0x8bf0ff52b1f90a2e)
r1 = socket$inet6_icmp(0xa, 0x2, 0x3a)
ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0)
r2 = fcntl$dupfd(r1, 0x406, r1)
ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000180)={{r2}, 0x1, 0x2, 0x8})
fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f00000001c0))
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x30, 0x9, 0x6, 0x101, 0x0, 0x0, {0xe, 0x0, 0x4}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x40010}, 0x200080e0)
r3 = syz_open_dev$mouse(&(0x7f0000000300), 0x7f, 0x20081)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x8010, r3, 0xde64d000)
ioctl$FAT_IOCTL_GET_VOLUME_ID(r1, 0x80047213, &(0x7f0000000340))
r4 = pidfd_getfd(r3, r2, 0x0)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000380)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}, {0x0, @usage, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000780)={r5, 0x0, 0x0, [0x7, 0x7, 0x10001, 0x96, 0x20000000000000], [0x2, 0x1f, 0x6, 0x8, 0x6, 0x1f, 0xffffffffffffffff, 0x4, 0x81, 0xd117, 0x2, 0x2b6, 0xab2, 0x6, 0xfffffffffffff53f, 0x3, 0x20, 0x8, 0x5, 0x3, 0xca8, 0x2, 0x1, 0x9, 0x8, 0x4, 0xe00, 0x5, 0x8, 0xffff, 0x7, 0x8, 0x3, 0x6, 0x8, 0x4, 0x10c19c2f, 0xbb, 0x1, 0x1, 0x6, 0xe7, 0x1f, 0x100000000, 0xb201639800000000, 0x6, 0x7, 0x7f, 0x2ec, 0x4, 0x10000, 0x5, 0xff, 0x9f22, 0x5, 0x3ff, 0x3, 0x5, 0x8, 0x7, 0x2, 0x8a, 0xe807, 0x0, 0x6, 0x7fffffff, 0x3, 0x1, 0x7, 0x0, 0x7f, 0xdf26, 0xfffffffffffffffd, 0x975, 0xffffffff, 0x23f, 0xa5, 0x6, 0x6, 0x8, 0x1ff, 0x6, 0xffffffff, 0x7, 0x2, 0x4, 0x3, 0x1f, 0x6, 0x1, 0x5, 0x5, 0xf60d, 0x0, 0x4, 0x100000000, 0x2, 0xa9, 0x1, 0x2b, 0x8000, 0x3, 0xa90, 0x0, 0x8, 0x1, 0x7fffffff, 0x3d, 0x7f, 0x10001, 0x6, 0x81, 0x4, 0x1000, 0x10000, 0x3, 0x2, 0x6, 0xe9, 0x2, 0x9]})
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000c00), 0xffffffffffffffff)
sendmsg$NL802154_CMD_GET_SEC_KEY(r6, &(0x7f0000000d00)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x78, r7, 0x0, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000090}, 0x40880)

05:09:48 executing program 2:
r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@pppoe={0x18, 0x0, {0x0, @local}}, &(0x7f0000000080)=0x80)
pwritev(r0, &(0x7f0000000400)=[{&(0x7f00000000c0)="d0a2a3841f5452d3321522919cc9794eb5ec36126290f574201e03a1198e70260b55d9ae3d15549e780dda7c6f5da38bac5fe441efb91e9299874b1913597577e9907ad83b81df63e1450519e077cbe09c55d187528f0fab503febac30539fdc028a4a5ad2c421face4a145fe9d28f45755f064e54c01cdce020951eca5b4b3ccc5dc32793c95b8cec3fa97b27e10190a91abcd9f216e74ceaa237ecf04acb6c0f2c5d8f82b87e1afd35609919c16d8466", 0xb1}, {&(0x7f0000000180)="62bbf7178220a920035418694d064e126b62266093eb57cfc79d1c7a022cc11c1221ffcb4bb209e013acdddc7c96e0324e03f3", 0x33}, {&(0x7f00000001c0)="52208cd1fe8fb327079cbeb1e0db830f933772114446d8cd02102cc86fcd5d6d923c34052306fc72459bbbebea33a230d88fe1e43bab3e3c420709acc48985c8e78d21e539d3282a558be3a7900f2a5e08dac056099219b6af633bc170d3c4bd9b55318f13a90d77af676e5c4f75", 0x6e}, {&(0x7f0000000240)="0a37d54dd67c2a975c454d1d6645d66094fe2eea2c0eafb2e9ea9aa80933b1d8e163806338fe7aea233ea03d2d0aa1b16277e072238f2b6f963e382778c760ab068acb0ac247ed73536ba646b29089770f6e31a684201536ebc79ed6e0ae8afae0ae523bc454f1f889f82230a5e5f6b88d49abf1fe013ac9379ec2cb406409727b8ae9afd6ffc7b703d1e2dbed8b634fcf0c3bb2f514f90a8e1f69cae73e761db178ce9d47b0ee73d369d6e502fb0c", 0xaf}, {&(0x7f0000000300)="48d8a4a4cfac4f678ba86f9e7aecaa01c242f448c8ff8ffa05ef05a5d13d306e5b5b4c83d0e6af3f22a863b0fca127d4d8f663aa35e9cbb575456ad1332ffec10799e6e9e7", 0x45}, {&(0x7f0000000380)="25cb32428d3631c13841e44cb0fccfbcc02f818ae0104bd3b12303c2b33dfaed3ac23d8449787a236f54f682e75eefff3e3821160e2e473e060b1098e3bcd9dc5d33d6b456bac5bcec575bb30904aa181e9b09bdcd7a8b7e", 0x58}], 0x6, 0x3f, 0x9)
r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000480), 0x60402, 0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f00000004c0)={"01f94fb8800e849a5d8b7a58f0bca1aa", 0x0, <r2=>0x0, {0x9c, 0x4}, {0x6, 0x2}, 0xe7, [0x0, 0xa72, 0x4, 0x3ff, 0x961, 0x6b2, 0x7f, 0x0, 0x100, 0x0, 0x10000, 0x80000001, 0xdc5d, 0x6, 0x3, 0x81]})
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000640)={{r0}, r2, 0x10, @inherit={0x58, &(0x7f00000005c0)={0x1, 0x2, 0x95b, 0x130, {0x8, 0x0, 0x800, 0x8a}, [0x1000, 0x10000]}}, @name="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"})
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001640)='/proc/meminfo\x00', 0x0, 0x0)
ioctl$HIDIOCGRDESC(r3, 0x90044802, &(0x7f0000001680)={0x799, "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"})
r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001e40), 0x8040, 0x0)
dup2(r0, r4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000001e80)='./file0\x00', 0x450200, 0x104)
r6 = fcntl$dupfd(r5, 0x0, r1)
r7 = openat(r6, &(0x7f0000001ec0)='./file0\x00', 0x880, 0x28)
ioctl$BTRFS_IOC_BALANCE(r7, 0x5000940c, 0x0)
r8 = accept4$inet6(r5, &(0x7f0000001f00)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000001f40)=0x1c, 0x0)
fcntl$dupfd(r4, 0x0, r8)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000001f80)={{0x1, 0x1, 0x18, <r9=>r4, @in_args={0x1}}, './file0\x00'})
ioctl$BTRFS_IOC_QUOTA_RESCAN(r9, 0x4040942c, &(0x7f0000001fc0)={0x0, 0x4e9, [0x10000, 0x7ff, 0x80000, 0x1, 0x2c95, 0x1000]})
fcntl$lock(r3, 0x7, &(0x7f0000002000)={0x1, 0x3, 0x40, 0x99b9})
setns(r6, 0x2000000)
fstat(r9, &(0x7f0000002040))

[   72.616397] audit: type=1400 audit(1766639388.739:7): avc:  denied  { execmem } for  pid=274 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
05:09:48 executing program 3:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000040)="2c939bb70e7acf2f4b8518d10f482b2d810b8f6ab20c80b5c1e41b1c6a1a4c7a1847718e44227936d3965cab9a8af823ef0e269d4fd9cdfd9edb49bca1fd0ffee483877b1e8bbd6dd36fc265de0bdf9039fdf72ddb297f78e1b4e9613f53414968f1bc4d75915077", 0x68, 0x80, &(0x7f00000000c0)={0x2, 0x4e23, @private=0xa010100}, 0x10)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, &(0x7f0000000100)={'filter\x00', 0x80, "beef6375ddfcc740477d73d08bc3e31118417d29983a691afea79786dfa87b25e9dc4207faef456f0760fc224f81bc79d3c33d6dd39caac5249184fb47fe48e05c7d99ddcf4838de056130235031abd71e01cd7b8f85a2220ecb69530c0f8f2c75f69726cc2332502da6bf8af467ba879e93b98309973cb2848fac96b04f8224"}, &(0x7f00000001c0)=0xa4)
getsockopt$inet_udp_int(r1, 0x11, 0x66, &(0x7f0000000200), &(0x7f0000000240)=0x4)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000280)=0x80, 0x4)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24, 0x21, @private1, 0x70}, 0x1c)
preadv(r1, &(0x7f0000003740)=[{&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/125, 0x7d}, {&(0x7f0000001380)=""/174, 0xae}, {&(0x7f0000001440)=""/4096, 0x1000}, {&(0x7f0000002440)=""/211, 0xd3}, {&(0x7f0000002540)=""/182, 0xb6}, {&(0x7f0000002600)=""/226, 0xe2}, {&(0x7f0000002700)=""/4096, 0x1000}, {&(0x7f0000003700)=""/51, 0x33}], 0x9, 0x4, 0x9)
connect$inet6(r0, &(0x7f0000003800)={0xa, 0x4e21, 0x40, @loopback, 0x20}, 0x1c)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
getsockname$inet(r3, &(0x7f0000003840)={0x2, 0x0, @multicast1}, &(0x7f0000003880)=0x10)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000003900)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000038c0)="399b2a996f1ab89173cbc4555d571130691923ec", 0x14}, 0x68)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000039c0), r0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000004180)={{{@in=@remote, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0, <r6=>0x0}}, {{@in=@remote}, 0x0, @in6=@loopback}}, &(0x7f0000004280)=0xe8)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f00000043c0)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000004380)={&(0x7f00000042c0)={0x88, r4, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x8}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x20}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x7f}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x6}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x7f}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x80}]}, 0x88}, 0x1, 0x0, 0x0, 0x40}, 0x81)
getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000004400)={'filter\x00', 0x44, "5688396e6f52ae92b25e56c042450d0661075f6505262a9fff240671a1653363d3919ce711fa2bc568c445f2df723a307682e497be1fb7adb3ba86f6cf7fe8f4accddca3"}, &(0x7f0000004480)=0x68)
r7 = openat(0xffffffffffffff9c, &(0x7f00000044c0)='./file0\x00', 0x204880, 0x4d)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000059c0)={{0x1, 0x1, 0x18, r2, {<r8=>r6, 0xee01}}, '.\x00'})
sendmsg$nl_xfrm(r7, &(0x7f0000005b40)={&(0x7f0000004500)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000005b00)={&(0x7f0000005a00)=@newsa={0xf0, 0x10, 0x100, 0x70bd2d, 0x25dfdbfd, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@broadcast, 0x4e24, 0x0, 0x4e24, 0x0, 0x2, 0x0, 0x20, 0x67, 0x0, r8}, {@in=@loopback, 0x4d4, 0xa75b57e058d6962b}, @in=@rand_addr=0x64010102, {0xbba, 0x8, 0x3, 0x8001, 0xfffffffffffffffc, 0x2, 0x7, 0x28b1}, {0x6, 0x3, 0x1, 0x80000000}, {0x6, 0x7, 0x5}, 0x70bd26, 0x34ff, 0xd, 0x0, 0x4, 0x8}}, 0xf0}, 0x1, 0x0, 0x0, 0x44845}, 0x20040044)

05:09:48 executing program 5:
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r0=>0x0})
sendmsg$NL80211_CMD_LEAVE_OCB(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000051}, 0x4000)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {<r2=>0xffffffffffffffff}}, './file0\x00'})
ioctl$sock_inet_SIOCGIFDSTADDR(r2, 0x8917, &(0x7f0000000180)={'macvlan1\x00', {0x2, 0x0, @remote}})
recvmmsg(r2, &(0x7f0000004ac0)=[{{&(0x7f00000001c0)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000240)=""/14, 0xe}, {&(0x7f0000000280)=""/200, 0xc8}, {&(0x7f0000000380)=""/199, 0xc7}, {&(0x7f0000000480)=""/174, 0xae}, {&(0x7f0000000540)=""/229, 0xe5}], 0x5, &(0x7f00000006c0)=""/137, 0x89}, 0x9}, {{&(0x7f0000000780)=@hci, 0x80, &(0x7f0000001d00)=[{&(0x7f0000000800)=""/83, 0x53}, {&(0x7f0000000880)}, {&(0x7f00000008c0)}, {&(0x7f0000000900)=""/139, 0x8b}, {&(0x7f00000009c0)=""/106, 0x6a}, {&(0x7f0000000a40)=""/230, 0xe6}, {&(0x7f0000000b40)=""/163, 0xa3}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/206, 0xce}], 0x9, &(0x7f0000001dc0)=""/104, 0x68}}, {{&(0x7f0000001e40)=@nfc, 0x80, &(0x7f0000004340)=[{&(0x7f0000001ec0)=""/4096, 0x1000}, {&(0x7f0000002ec0)=""/203, 0xcb}, {&(0x7f0000002fc0)=""/107, 0x6b}, {&(0x7f0000003040)=""/110, 0x6e}, {&(0x7f00000030c0)=""/4096, 0x1000}, {&(0x7f00000040c0)=""/233, 0xe9}, {&(0x7f00000041c0)=""/66, 0x42}, {&(0x7f0000004240)=""/52, 0x34}, {&(0x7f0000004280)=""/141, 0x8d}], 0x9}, 0x1}, {{&(0x7f0000004400)=@hci, 0x80, &(0x7f00000045c0)=[{&(0x7f0000004480)=""/193, 0xc1}, {&(0x7f0000004580)=""/7, 0x7}], 0x2, &(0x7f0000004600)=""/111, 0x6f}, 0x8}, {{&(0x7f0000004680)=@caif=@dgm, 0x80, &(0x7f00000047c0)=[{&(0x7f0000004700)=""/132, 0x84}], 0x1, &(0x7f0000004800)=""/143, 0x8f}, 0xc583}, {{&(0x7f00000048c0)=@ethernet={0x0, @local}, 0x80, &(0x7f0000004a80)=[{&(0x7f0000004940)=""/153, 0x99}, {&(0x7f0000004a00)=""/67, 0x43}], 0x2}, 0x5563}], 0x6, 0x41, &(0x7f0000004c40)={0x0, 0x989680})
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000004e00)={{0x1, 0x1, 0x18, <r3=>0xffffffffffffffff, {<r4=>0xee00, <r5=>0xee01}}, './file0\x00'})
getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000004e40)={{{@in6=@remote, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}, {{@in=@multicast2}, 0x0, @in6}}, &(0x7f0000004f40)=0xe8)
syz_mount_image$iso9660(&(0x7f0000004c80), &(0x7f0000004cc0)='./file0\x00', 0xfffffffffffffff8, 0x1, &(0x7f0000004dc0)=[{&(0x7f0000004d00)="0077f936ae999804cb607ca027dfbd32ccc3757a03a9dc208fb0fbeb8c6d7ffab34ae5b6b74fa468543b306d07646f0063c0906280a88b60591580e9950f0dea7c938a2aea2cbdeaffb7d85ca3a90471b8465dc265fc368605eb97cda96baa5811083e2ceb3071aabe54f505c0f2c612f802d64398458dc7837a5e8230d1e15c9c31320eb4b944", 0x87, 0x3}], 0x10028, &(0x7f0000004f80)={[{@map_acorn}], [{@smackfshat={'smackfshat', 0x3d, 'wlan1\x00'}}, {@uid_gt={'uid>', 0xffffffffffffffff}}, {@uid_gt={'uid>', r4}}, {@fowner_lt={'fowner<', r6}}, {@appraise}, {@defcontext={'defcontext', 0x3d, 'system_u'}}]})
copy_file_range(r1, &(0x7f0000005040), r3, &(0x7f0000005080)=0xfff, 0x1, 0x0)
syz_mount_image$nfs(&(0x7f00000050c0), &(0x7f0000005100)='./file0\x00', 0x7fffffff, 0x3, &(0x7f0000006280)=[{&(0x7f0000005140)="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", 0x1000, 0xfffffffffffffc00}, {&(0x7f0000006140)="bb9fcf4d66641683713205fcc5a93966032f5995da384bfaa5d8122057e2541e3d057d18908efc6cc7d5c8dcb27aac48a02336e7da11825dc762bf91e08b0109251cdb50bfeb8a6bb81e0211bf421b63416aae121fa6330666ac96d95077153c008d1993359ccc71415579580d7bfd37d9abd796a2b8ee9c593f6b84a68f5d2e6f082c87685d79cde08a58dd837257b68fa3bb49ff2ca9c51a5344b0321675bafd2bb7f8cadb173da83d5eb3068048b36d99d48bc52127655ac21abf40c4859327249f7b20d402f2a9f50692907a215fd813d1ce434cfb2081aebb80810c368631c0080e", 0xe4, 0x40}, {&(0x7f0000006240), 0x0, 0x510fb7760000}], 0x80f1, &(0x7f0000006300)={[{'$'}, {'map=acorn'}], [{@obj_role={'obj_role', 0x3d, 'map=acorn'}}]})
unlink(&(0x7f0000006340)='./file0\x00')
getgroups(0x3, &(0x7f00000063c0)=[r5, <r7=>r5, r5])
chown(&(0x7f0000006380)='./file0\x00', r6, r7)
r8 = accept(0xffffffffffffffff, &(0x7f0000006400)=@x25, &(0x7f0000006480)=0x80)
r9 = dup2(r8, r2)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000006500)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_SET_NOACK_MAP(r9, &(0x7f0000006600)={&(0x7f00000064c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000065c0)={&(0x7f0000006540)={0x64, 0x0, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x3}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xee}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1ff}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xcc}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x6}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x40}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x4}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x8000}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1d}]}, 0x64}, 0x1, 0x0, 0x0, 0x20024084}, 0x4100)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmmsg(r11, &(0x7f0000006a00)=[{{0x0, 0x0, &(0x7f0000006980)=[{&(0x7f0000006640)="67c133f414bddf6bd76e29719fe0c7604e19dbbf3e31283b8b4ce00b28dcdce246b792c9319d9f8052a09fc6e1d7b731f2b789d9db02567103656a99a86b3ba96276ee09485e83a0227a5deff8fcdf09fa5f2231004366e93133e8cd7afe0a59bf8468beb23426eb67df82bcfa9ee34149b5b28497730630725428f6a91fbb", 0x7f}, {&(0x7f00000066c0)="27452d2318dfce1f9a1c74f44b9ea44adbe5a6bbb60b34992d509bafa347beb5a8783c71ac393d4ff237451e80adbe1104479c7a20d7082bf73b13d891cef7d00244eb2a01f7dfb9ce869533a3efb978d283db306c3a8da07fab4dcbae8a4a61123daba86756038edb7e5b6b9d472fe14783d2c8f7364df7d2e67b5f210a76b96eabda7774a215d073527c7cbba2ffe8ce6a7b45", 0x94}, {&(0x7f0000006780)="bc78b1a6dfb552c2517a33d70d60270a7d51b2260f4a3f04242b944ab1393f1ec388cc1fcc38e2fdb569c8df6851fd34ffcecd043500b8a3e67201ba40b135aac548110ef1137c05d71c5b503ed09f28825fa8247f00b9ff50d1a3f081e6e5708cf7530e135ed24fc4acf93b39290636f47823ff4d856c6f03", 0x79}, {&(0x7f0000006800)="73b0b705721df1236bcf53df802ce14513d45a6505a765862c927635d1203b7bf1f2b0aa76ecc9b8c7d556d4419f5231f19cb51474695dd93bf967b3219ae4f21ce601eac8275d259efe9d5389e28dadced2d0cb11caedf91b3256b7c567aa3e0e4e13904d37a0bf9da508bc194f519b7d48b9d0103dcaedf1796e9b63ed0909160d2e45f2a08ca22785015e0d0901abfddb548c0dcc9b22", 0x98}, {&(0x7f00000068c0)="e4b849b500598529e16173628d547fec", 0x10}, {&(0x7f0000006900)="cd67e183103e024c3df823b060d688300929b0afdd248b5bc9d9ebb5687ad7db87be99ab89a4d336e7f2d5516195e0965a8c79795ceb098d878500614671911902408f0138860f53d92ac5455189d89e88fc91aa2c6ba18e208e3bf7e8e25d0cbee11b", 0x63}], 0x6}}], 0x1, 0x8000)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, 0xfffffffffffffffe, 0x0)

05:09:48 executing program 4:
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0, <r0=>0x0}, &(0x7f0000000080)=0xc)
lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0})
recvmsg$unix(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000200)=""/10, 0xa}], 0x1, &(0x7f0000000280)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, <r2=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r3=>0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r4=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, <r5=>0x0}}}], 0x110}, 0x60)
fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000400)={{}, {0x1, 0x4}, [{0x2, 0x1, r0}, {0x2, 0x7, 0xee01}], {0x4, 0x1}, [{0x8, 0x1, r1}, {0x8, 0x5, r5}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x3}, {}], {0x10, 0x1}, {0x20, 0x2}}, 0x5c, 0x2)
r6 = open_tree(0xffffffffffffffff, &(0x7f0000000480)='./file1\x00', 0x8001)
getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@private2, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in6}, 0x0, @in=@remote}}, &(0x7f00000005c0)=0xe8)
setsockopt$packet_drop_memb(r6, 0x107, 0x2, &(0x7f0000000600)={r7, 0x1, 0x6, @random="da492678cdbc"}, 0x10)
clock_gettime(0x0, &(0x7f0000000640)={<r8=>0x0, <r9=>0x0})
r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000006c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, &(0x7f0000000680)={r8, r9+10000000}, 0x1, 0x0, 0x1, {0x0, r10}}, 0x7)
r11 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000780)=@IORING_OP_CONNECT={0x10, 0x1, 0x0, r11, 0x80, &(0x7f0000000700)=@vsock={0x28, 0x0, 0x2711}, 0x0, 0x0, 0x1, {0x0, r10}}, 0x81)
openat(0xffffffffffffff9c, &(0x7f00000007c0)='./file0\x00', 0x404800, 0x93)
sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r2, &(0x7f0000000980)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000940)={&(0x7f0000000840)={0xc8, 0x0, 0x800, 0x70bd25, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xfffffffd}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7fff}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xed}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3ff}}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4008040}, 0x881)
r12 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r13 = eventfd2(0xcc2, 0x80800)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000009c0)=@IORING_OP_SPLICE={0x1e, 0x5, 0x0, @fd=r12, 0x401, {0x0, r13}, 0x829, 0x8, 0x1, {0x0, 0x0, r11}}, 0x6)
openat(0xffffffffffffff9c, &(0x7f0000000a00)='./file0/file0\x00', 0x40000, 0x100)
r14 = syz_open_dev$vcsu(&(0x7f0000000a40), 0x0, 0x204400)
write$P9_RREADDIR(r14, &(0x7f0000000a80)={0x30, 0x29, 0x1, {0x6, [{{0x2, 0x3, 0x3}, 0x1, 0x1, 0xd, './file0/file0'}]}}, 0x30)

05:09:48 executing program 6:
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xe0, 0x0, 0x1, 0x301, 0x0, 0x0, {0x5}, [@CTA_HELP={0xc, 0x5, 0x0, 0x1, {0x8, 0x1, 'RAS\x00'}}, @CTA_NAT_DST={0xc0, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @remote}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @private=0xa010102}, @CTA_NAT_V4_MINIP={0x8, 0x1, @rand_addr=0x64010102}, @CTA_NAT_V4_MINIP={0x8, 0x1, @rand_addr=0x64010102}, @CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}]}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @rand_addr=0x64010102}, @CTA_NAT_V6_MINIP={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @CTA_NAT_PROTO={0x44, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}]}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x8014}, 0x40c4)
r0 = openat$hpet(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000c0, 0x0)
sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x68, 0x0, 0x8, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x69}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x5}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x22}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x8001)
ioctl$TIOCEXCL(r0, 0x540c)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), r0)
sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, r1, 0x10, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20040004}, 0x0)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), r0)
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000a40)={&(0x7f0000000480), 0xc, &(0x7f0000000a00)={&(0x7f0000000500)={0x4d0, r2, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x1d4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xea, 0x3, "8e4d0e195ec375e93431399b88f2c6ced3f82d73505e9eb38842ca95efc4c44b2ce368c1b1bd321cf0519af24b578b06dfe1f68b5b0d8e90f350226afe2221462ae28339b96f3e904a0f21ae9290c7977bcf14a3a3586cc780eefe001912a73a9bf2f0ab1cbf91463ff185cc903f5eaf23d8aab5082e48586881170141021e47c91b50d027c5149eaba05023a9b8edbfbd0417a7cdb9c6afc7e8970c9bab948969a8643a08cb10b847a0036ef157caa195c6c01dfc46191b58945eec4ecb2bfd333783f4ef4dc0cf2e0035b21460b80c4aaf93eedc96cd51653473a13d2c18a93928c28adb02"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "15cd130a5ef81956368db87d12e49fbe79efd3e1"}}, @TIPC_NLA_NODE_ID={0xa1, 0x3, "750551ce931e185798a54b78270e8a9e6070dfbfdaee852c18e872853968efaf8a1fe2116cf46394798ff152b5c2e6af32347ff81d9fdbd64accdbc214b88571b1cb3b42bb5d6088ed3da5ada363a464b4e92ae3b0785f8d082777404d1e49e7cdf6761f1860c8b1c41c86355ff9c27d99cb5ab87cb08c2a6db3049981e20316888a95baf53366ff68d94efc502d184905cca67694e7e343dd4abad27a"}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}, @TIPC_NLA_LINK={0x3c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}]}, @TIPC_NLA_NODE={0xd4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "64ef16c73c03100d999bdeb0b21611f6c325a310cbb28a1ae4840643"}}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "9e25b8ef86bf3f0fb003563a31a8e7875375ee54c86e1baa69a1dab6d75f18a1f3"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x101}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ID={0x23, 0x3, "774036962a7338ac169e330e1613164af20c3012e29513b15e38d0d693e4a1"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NODE={0xc8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x6e, 0x3, "0ece736472f74978fafc8ee1f4afc4d5e1491aec54abc4cb49bbeb8c115edbea1aa6231f5dd12dbe6d3b2e3be296e22ae61cffe0834d0f2b0e6ecd62a8332fd687d48c2fcf59518ab2cda7c012990dbc1241e819c252807434bb8f76e43816382aaf40ff3bba983f0012"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "51db3997ce1534a7065fb69253a4467dc6ebd2f1ceb6d771050304c0cb87463f63e408"}}]}, @TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x7fffffff, @private2, 0x9b5}}, {0x14, 0x2, @in={0x2, 0x4e23, @empty}}}}]}, @TIPC_NLA_BEARER={0xb8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @local}}, {0x14, 0x2, @in={0x2, 0x4e24, @broadcast}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x2, @mcast2, 0xb4d3c846}}}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ipvlan0\x00'}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}]}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x80}]}]}, 0x4d0}, 0x1, 0x0, 0x0, 0x881}, 0x2000c000)
r3 = openat$cgroup(r0, &(0x7f0000000a80)='syz0\x00', 0x200002, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, r3, 0x89bfd000)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x3c, 0x0, 0x9921df80a2f2b21d, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xad}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000)
sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x10080}, 0xc, &(0x7f0000000d80)={&(0x7f0000000c00)={0x170, r2, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0xd8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "2422f5ed0ba928aed7835c34551bb99bcc9404e179ea78b12d"}}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "fe4d937d77226be6f7323a371191c67eb662aad99d1bc70f440b"}}, @TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "14fc6e46f0842205e75b7171cb54a606cd311a562ba5ca490fb5394846feaab95030"}}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}]}, @TIPC_NLA_BEARER={0x68, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0xfffff001, @mcast1, 0x81}}}}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'netpci0\x00'}}]}]}, 0x170}, 0x1, 0x0, 0x0, 0x4020080}, 0x1)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e40), r0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r0, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x20, r4, 0x100, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7, 0x25}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40000a1}, 0x800)
r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000f40), 0x100, 0x0)
recvmsg$unix(r0, &(0x7f0000002700)={&(0x7f0000001240)=@abs, 0x6e, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/126, 0x7e}, {&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f0000002340)=""/11, 0xb}, {&(0x7f0000002380)=""/217, 0xd9}, {&(0x7f0000002480)=""/70, 0x46}, {&(0x7f0000002500)=""/126, 0x7e}], 0x6, &(0x7f0000002600)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r6=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {<r7=>0x0}}}], 0xd0}, 0x2)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000002740)={<r8=>0x0}, &(0x7f0000002780)=0xc)
clone3(&(0x7f0000002800)={0x8000, &(0x7f0000000f80), &(0x7f0000000fc0), &(0x7f0000001000), {0x2f}, &(0x7f0000001040)=""/211, 0xd3, &(0x7f0000001140)=""/208, &(0x7f00000027c0)=[r7, 0x0, 0x0, r8, 0x0, 0x0, 0x0], 0x7, {r0}}, 0x58)
getsockopt$SO_COOKIE(r6, 0x1, 0x39, &(0x7f0000002880), &(0x7f00000028c0)=0x8)
ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, &(0x7f0000002900)={0x8, 0x1, 0x9, 0x101, 0x2})

05:09:48 executing program 7:
r0 = syz_io_uring_complete(0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x8, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_HANDLE_DFS={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}]]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x10)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r1=>r0, {0x2}}, './file0\x00'})
sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0xc08, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @rand_addr=0x64010100}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e23}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r2=>r1, {<r3=>r1}}, './file0/file0\x00'})
r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000ac0), 0x402280, 0x0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b40), r0)
sendmsg$NL80211_CMD_DEL_STATION(r4, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x40, r5, 0x100, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0xd}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x695}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x20000004)
ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000c40)={0x0, 0x3, 0x8a3a, 0x6a2})
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, &(0x7f0000000c80)={{0x1, 0x1, 0x18, <r6=>0xffffffffffffffff, {0x10000}}, './file0/file0\x00'})
sendmsg$nl_generic(r6, &(0x7f0000000e80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000e40)={&(0x7f0000000d00)={0x128, 0x32, 0x800, 0x70bd26, 0x25dfdbff, {0x14}, [@typed={0x4, 0x59}, @generic="1036894fc4efda8449456358e8a7ac2eac1bf4a9981a88d32a97fbe3fc0f982c982b7ee5a85b35627929e69ca030f41ca3f2114991dd7faceb7386ad958a58c720598584935f3f673f3503966654b7638e3ae3e0067a3a7f8828f966d12ef78ef86e3058836dd3b5ff590e2956485cd81cf25388a54591f5dccf9ec601e5a8", @typed={0xc, 0xd, 0x0, 0x0, @u64=0x2}, @generic="9ee546003d2b25df2f5795f179b88010db97ac7ab131894cdfb4d07f6b34f0a083d50345c89e593ece1375135a6ab5a51318d595083e206b5c0a6155c8793c0ce2ba66a8bbb1acf9fe2b720eb6cc261a804652d2d8b50ddbb931e32b", @generic, @typed={0x8, 0x18, 0x0, 0x0, @uid=0xffffffffffffffff}, @nested={0x20, 0x54, 0x0, 0x1, [@typed={0x14, 0x31, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast2}}, @typed={0x8, 0x51, 0x0, 0x0, @fd}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x8045}, 0x80)
r7 = accept4(r1, &(0x7f0000000ec0)=@l2, &(0x7f0000000f40)=0x80, 0x0)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000fc0), r2)
sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r7, &(0x7f0000001080)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001040)={&(0x7f0000001000)={0x20, r8, 0x10, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xb958, 0x60}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x2004c000)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000001100)={'vcan0\x00', <r9=>0x0})
sendmsg$ETHTOOL_MSG_PAUSE_GET(r1, &(0x7f0000001240)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001200)={&(0x7f0000001140)={0xa0, 0x0, 0x8, 0x70bd27, 0x25dfdbfe, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}]}]}, 0xa0}}, 0x40000)
mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2, 0x1010, 0xffffffffffffffff, 0xec3c5000)
sendmsg$NL80211_CMD_SET_WIPHY(r6, &(0x7f0000001380)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001340)={&(0x7f00000012c0)={0x58, r5, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x80000000}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x20}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x1}, @NL80211_ATTR_WIPHY_RETRY_LONG={0x5}, @NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0x7}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_NAME={0x14, 0x2, 'wlan1\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x60851)
r10 = openat$nvram(0xffffffffffffff9c, &(0x7f00000013c0), 0x2000, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r10, 0x8010661b, &(0x7f0000001400))

[   75.839596] Bluetooth: hci1: command 0x0409 tx timeout
[   75.840759] Bluetooth: hci0: command 0x0409 tx timeout
[   75.967153] Bluetooth: hci2: command 0x0409 tx timeout
[   75.968479] Bluetooth: hci3: command 0x0409 tx timeout
[   76.031124] Bluetooth: hci5: command 0x0409 tx timeout
[   76.031141] Bluetooth: hci4: command 0x0409 tx timeout
[   76.031824] Bluetooth: hci6: command 0x0409 tx timeout
[   76.224098] Bluetooth: hci7: command 0x0409 tx timeout
[   77.887158] Bluetooth: hci0: command 0x041b tx timeout
[   77.887815] Bluetooth: hci1: command 0x041b tx timeout
[   78.016157] Bluetooth: hci3: command 0x041b tx timeout
[   78.016826] Bluetooth: hci2: command 0x041b tx timeout
[   78.079817] Bluetooth: hci6: command 0x041b tx timeout
[   78.080504] Bluetooth: hci4: command 0x041b tx timeout
[   78.081131] Bluetooth: hci5: command 0x041b tx timeout
[   78.271166] Bluetooth: hci7: command 0x041b tx timeout
[   79.935107] Bluetooth: hci1: command 0x040f tx timeout
[   79.935808] Bluetooth: hci0: command 0x040f tx timeout
[   80.063088] Bluetooth: hci2: command 0x040f tx timeout
[   80.063815] Bluetooth: hci3: command 0x040f tx timeout
[   80.127123] Bluetooth: hci5: command 0x040f tx timeout
[   80.127780] Bluetooth: hci4: command 0x040f tx timeout
[   80.128565] Bluetooth: hci6: command 0x040f tx timeout
[   80.319127] Bluetooth: hci7: command 0x040f tx timeout
[   81.983144] Bluetooth: hci0: command 0x0419 tx timeout
[   81.983820] Bluetooth: hci1: command 0x0419 tx timeout
[   82.111094] Bluetooth: hci3: command 0x0419 tx timeout
[   82.111748] Bluetooth: hci2: command 0x0419 tx timeout
[   82.175281] Bluetooth: hci6: command 0x0419 tx timeout
[   82.176467] Bluetooth: hci4: command 0x0419 tx timeout
[   82.177094] Bluetooth: hci5: command 0x0419 tx timeout
[   82.367093] Bluetooth: hci7: command 0x0419 tx timeout
[   89.949614] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.950685] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.952410] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   90.059986] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.060894] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.062045] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   90.198049] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.199017] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.200175] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   90.276273] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.277296] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.278423] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   90.393425] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.394378] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.395813] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
05:10:06 executing program 4:
ptrace(0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000005c0)='ns\x00')
r1 = dup(r0)
fchmodat(r1, 0x0, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={<r2=>0x0}, &(0x7f00000000c0)=0xc)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x14}}, r2, 0xffffffbfffffffff, 0xffffffffffffffff, 0x8)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), 0x4000, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {}, 0x2c, {[{@version_9p2000}], [{@pcr={'pcr', 0x3d, 0x3c}}]}})
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r0}}, './file1\x00'})
copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
sendfile(r3, r5, 0x0, 0x20d315)

[   90.488808] audit: type=1400 audit(1766639406.611:8): avc:  denied  { open } for  pid=3819 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[   90.491246] audit: type=1400 audit(1766639406.611:9): avc:  denied  { kernel } for  pid=3819 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[   90.520953] 9pnet: Insufficient options for proto=fd
[   90.522682] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.523581] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.524722] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   90.585337] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.586661] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.587988] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
05:10:06 executing program 6:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000040)={0x50, 0x2, 0x1, 0x101, 0x0, 0x0, {}, [@CTA_SEQ_ADJ_ORIG={0x3c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7ff}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x1ff}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x8de}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x401}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x81}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x800}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x101}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004090}, 0x40)
r1 = getpgrp(0x0)
r2 = pidfd_open(r1, 0x0)
r3 = dup(r2)
setns(r3, 0x2020000)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_RELOAD_REGDB(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r5, 0x1, 0x0, 0x0, {{0x2}}}, 0x14}}, 0x0)
r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000340), 0xc6541, 0x0)
sendmsg$TIPC_CMD_DISABLE_BEARER(r6, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, 0x0, 0x400, 0x70bd29, 0x25dfdbfc, {{}, {}, {0x10, 0x13, @l2={'eth', 0x3a, 'vlan0\x00'}}}, [""]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x8050)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x6c, r5, 0x101, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1, 0x65}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="41ee81940ac6"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x7e}, @NL80211_ATTR_IE={0x2b, 0x2a, [@mesh_chsw={0x76, 0x6, {0x81, 0xcf, 0x3a, 0xf4}}, @mic={0x8c, 0x18, {0x25e, "1606ec216fad", @long="ba1ccde8f12a9eca8fa96c04be2ca3f5"}}, @channel_switch={0x25, 0x3, {0x5, 0xb0, 0x57}}]}]}, 0x6c}}, 0x20044000)

[   90.675516] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.676476] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.677988] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   90.696343] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.697250] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.698665] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   90.794607] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.795620] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.796814] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   90.848328] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.849537] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.851408] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   90.947443] 9pnet: Insufficient options for proto=fd
05:10:07 executing program 6:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000d00)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "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", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xe52)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@loopback, 0x1, 0x2, 0xff, 0x4, 0x101, 0x9}, 0x20)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'veth1_vlan\x00'})
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)

05:10:07 executing program 7:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000080)=0x90, 0x4)
bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
r2 = getpgrp(0x0)
r3 = pidfd_open(r2, 0x0)
r4 = dup(r3)
setns(r4, 0x2020000)
fcntl$getownex(r4, 0x10, &(0x7f0000000240)={0x0, <r5=>0x0})
prctl$PR_SET_PTRACER(0x59616d61, r5)
recvfrom$inet6(r4, &(0x7f00000000c0)=""/46, 0x2e, 0x2021, &(0x7f0000000200)={0xa, 0x4e24, 0x3ff, @dev={0xfe, 0x80, '\x00', 0xf}, 0x3}, 0x1c)
ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000040)=0xfffffffd)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
sendmsg$unix(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="eb", 0x1}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="1400d749bcc3000bba37835ea418f45c6eba913613670000000000b59449952ab1f0bebdc1fe529101000000000000003fcc570f32c949e208000000d64e05255f4fe019935654c7f76d5b36617a76d825f8", @ANYRESHEX], 0x18, 0x24}, 0x0)
sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, 0x0, 0x24000000)
sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x31, &(0x7f0000000540)=[{&(0x7f0000000100)=':\x00', 0xfffffdef}], 0x1}, 0x10044008)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_CLOSE, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x1, 0x0, 0x3, 0x7, &(0x7f0000000180)="afd9a65abbbe1a2ce212a1cab48d74696b3cd4a738987a92341e47fd79264345ba7c410b7bbd12af0da5e987d6c7fa3091f5c1259c77bca608b33c0085d132736782ed5f0310", 0x0, 0x0, 0x0, {0x3}}, 0x401)

[   90.991258] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.991287] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.991919] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   91.026928] audit: type=1400 audit(1766639407.149:10): avc:  denied  { write } for  pid=3880 comm="syz-executor.7" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
05:10:07 executing program 4:
sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x0, 0x300, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x20040000)
syz_mount_image$nfs(0x0, 0x0, 0x0, 0x1, &(0x7f0000001d00)=[{&(0x7f0000000bc0)='T', 0x1}], 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0cc05ce7304e61eeddb21ca883304f3867955573c4d08130c3eddd67266d971389b4f39ce354776e8fb4fcd2da32a43767b3a174deb9c63d4b78877c380d719984dd8894661facedff9f32ca03550a4aaf5e54c973ca8e7a8b44235e60d1742892900e53212a225205911f2e1629d5ed604a36cf0605da47d42a3e2208cecb088ec5ce509c77a7e26304adcf4c503ec0010e18d166b6546475991c8dcd619050f4136080201d1cce808ac91cb3aa0fbc0b508116aba7b"])
setxattr$trusted_overlay_opaque(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), &(0x7f0000000200), 0x2, 0x0)
lsetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='trusted.overlay.nlink\x00', &(0x7f0000000080)='\x00', 0x1, 0x0)

05:10:07 executing program 6:
keyctl$set_reqkey_keyring(0xe, 0x1)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000e80)=[{{&(0x7f0000000200)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000300)=""/105, 0x69}, {&(0x7f0000000280)=""/40, 0x28}], 0x2, &(0x7f00000003c0)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000000400)=@abs, 0x6e, &(0x7f0000000580)=[{&(0x7f0000000480)=""/250, 0xfa}], 0x1, &(0x7f00000005c0)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf8}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f00000006c0)=""/102, 0x66}, {&(0x7f0000000740)=""/138, 0x8a}, {&(0x7f0000000800)=""/88, 0x58}, {&(0x7f0000000880)=""/78, 0x4e}, {&(0x7f0000000900)=""/149, 0x95}, {&(0x7f00000009c0)=""/193, 0xc1}, {&(0x7f0000000ac0)=""/7, 0x7}, {&(0x7f0000000b00)=""/241, 0xf1}, {&(0x7f0000000c00)=""/204, 0xcc}, {&(0x7f0000000d00)=""/10, 0xa}], 0xa, &(0x7f0000000e00)=ANY=[@ANYBLOB="1c000000000000000100000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32=<r0=>0xffffffffffffffff, @ANYRES32, @ANYRES32, @ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYRES32], 0x58}}], 0x3, 0x0, 0x0)
openat(r0, &(0x7f0000000f40)='./file0\x00', 0x400081, 0x180)
r1 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[])
accept(0xffffffffffffffff, 0x0, 0x0)
openat(r1, &(0x7f00000001c0)='./file0\x00', 0x406001, 0x0)
chdir(&(0x7f0000000040)='./file0\x00')
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x181800, 0x20c)
write$binfmt_elf64(r2, &(0x7f0000000440)=ANY=[], 0x278)
sendfile(r2, r3, 0x0, 0x100000001)
ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000100)={0x1, 0xba, 0xfece})

[   91.088208] loop6: detected capacity change from 0 to 41948160
05:10:07 executing program 4:
r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000200), 0x303000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x0)
r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x4)
r2 = creat(&(0x7f0000000000)='./file2\x00', 0x0)
fcntl$setlease(r2, 0x400, 0x1)
fcntl$setown(r2, 0x8, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x8, 0x3, 0x4, 0x0, 0x0, 0x80000001, 0x20000, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0xff, 0x0, @perf_config_ext={0x8, 0x100000001}, 0x8804, 0x9, 0x54f4, 0x4, 0x0, 0x40, 0x9, 0x0, 0xff, 0x0, 0xf21}, 0x0, 0x4, r2, 0x1)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x100)
r4 = syz_open_dev$rtc(&(0x7f0000000180), 0x3, 0x100)
fcntl$dupfd(r3, 0x406, r4)
write$binfmt_script(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="2321204dd6f70104a55fec04ff7f696c653020f7000a000000"], 0x11)
perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x8, 0x0, 0x0, 0x0, 0x2, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xb, 0xffffffffffffffff, 0x0)
openat(r1, &(0x7f00000000c0)='./file2\x00', 0x200202, 0x49)

[   91.301079] loop4: detected capacity change from 0 to 32768
05:10:07 executing program 4:
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r0=>0x0})
sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1080008}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x94, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x94}, 0x1, 0x0, 0x0, 0x80}, 0x400c441)
r1 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x0, 0x2, &(0x7f0000000440)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f00000004c0)=ANY=[])
r2 = openat(r1, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
creat(&(0x7f0000000040)='./file1/file0\x00', 0xb8)
r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000300)={0x3, 0x80, 0x70, 0x0, 0x2, 0xa1, 0x0, 0x3f, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x8001, 0x800}, 0x8000, 0xac, 0xa7, 0x0, 0x5, 0x4, 0x3, 0x0, 0x8, 0x0, 0x7}, 0x0, 0x3, r3, 0x7)
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r4 = creat(&(0x7f0000000000)='./file2\x00', 0x0)
fcntl$setlease(r4, 0x400, 0x1)
fcntl$setown(r4, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_DISABLE(r4, 0x2401, 0x5)
r5 = getpgrp(0x0)
r6 = pidfd_open(r5, 0x0)
r7 = dup(r6)
setns(r7, 0x2020000)
perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0x80, 0x6, 0x9, 0x0, 0x0, 0x5, 0x8022, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0xcc7, 0x0, @perf_bp={&(0x7f0000000280), 0xc}, 0x442, 0x0, 0x1ff, 0x0, 0x7, 0x8, 0xfff, 0x0, 0x9, 0x0, 0x5}, 0xffffffffffffffff, 0x9, r7, 0x8)
r8 = socket$inet(0x2, 0x3, 0xff)
sendmmsg$inet(r8, &(0x7f0000002cc0)=[{{&(0x7f0000000100)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000040)="e9d83f00000001000000f3d74c638dc6d5371bf2325a6dff5560932ef08c33d7454e3f59", 0x24}], 0x1, &(0x7f0000000380)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @loopback}}}], 0x20}}], 0x1, 0x0)
sendfile(r2, r8, 0x0, 0x101)

[   91.332197] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1)
[   91.372170] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.373376] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.375012] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   91.389826] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.391707] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.395019] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   91.509435] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1)
[   91.544968] loop5: detected capacity change from 0 to 135266304
[   91.560335] loop5: detected capacity change from 0 to 135266304
[   91.561314] ======================================================
[   91.561314] WARNING: the mand mount option is being deprecated and
[   91.561314]          will be removed in v5.15!
[   91.561314] ======================================================
[   91.691572] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.692518] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.694044] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   91.710382] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.711297] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.712405] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
05:10:22 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
write$P9_RAUTH(0xffffffffffffffff, 0x0, 0x0)
r1 = syz_io_uring_complete(0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e21, 0xffff, @mcast1, 0x7ff}, 0x1c)
ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0)
fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x0)
syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000100))
mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000b40)=ANY=[@ANYRES64=r1, @ANYBLOB, @ANYRESHEX=r0, @ANYBLOB="2c00d043e50cf4ecad035e53f701e48c4ee7044889884e7f6261af45e5c82dfe1e49f488263e53a610261f8426198d21ec4f944357af4b683ae2f144b89bf245bcba8c743efdcbc2a485236a3735ea3043e9044f0b0936f59588c37fea08304b0789a61b9efc6c26581feeffc0a6af23d1867b9e7b3745ec3ff17b7d0d3c9bf8c2e47856a7e9bebb10d265a2cf95d937144a0256ab0bc8d124c9d795ecf4894fdfa7024931bf4ae36073d4b11d2fb04fdb314b1b4dfd8a74516ba5057334c860d75750"])
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0)
ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000180)={0x7c63, 0x0, 0x70c, 0x2})
sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x104, 0x74bfda24}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvfrom$inet6(r0, &(0x7f0000001700)=""/4099, 0xffffff3e, 0xcd04, 0x0, 0xfffffffffffffed7)
write$P9_RREADDIR(r1, &(0x7f0000000300)={0x49, 0x29, 0x2, {0xfffffff7, [{{0x40, 0x1, 0x6}, 0x105a, 0x4, 0x7, './file0'}, {{0x20, 0x4}, 0xffffffffffff0000, 0x20, 0x7, './file1'}]}}, 0x49)

05:10:22 executing program 7:
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000d40), 0x0, 0x0)
r0 = creat(&(0x7f0000000040)='./file2\x00', 0x70)
fcntl$setlease(r0, 0x400, 0x1)
fcntl$setown(r0, 0x8, 0x0)
ioctl$PTP_PEROUT_REQUEST2(r0, 0x40383d0c, &(0x7f0000000000)={{0x100000001, 0x6}, {0x1000, 0x5}, 0x2})

05:10:22 executing program 6:
r0 = semget$private(0x0, 0x4, 0x100)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
semop(0x0, &(0x7f0000000040)=[{0x0, 0x4, 0x82b4d8da1ae7c66c}], 0x1)
getresgid(&(0x7f00000010c0), &(0x7f0000001100), &(0x7f0000001140)=<r1=>0x0)
stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="7472616edf000000000000006e6f3d91e31b121a4ded3205dc49bb21857810b4ba747892f71f3ac842db783e431d605372ea606c253e7c4ff3d013e13614b38210b49077cca3b953d867fd849b8fe2ff2f49a2849f897aa0aa580d91f1b381e218f7c241c047d0a0ef6ba946c262de8447d2ec926ffc3aaadd9660fff9cea9b11f2ff3704df391d2bdb33465bfa785d15ef401e901c59cb0dfc75ae84a5ce85db5f2f363979cb753db", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="2c63616368653d6d6d61702c636163687874656e642c6e6f64b2236d41702c646f6e745f61707072616973652c646f6e4c2cab0a41ec9815652c7375626a5f747970653d2c6461737572652c6673636f6e746578743d73797374656d5f752c66736d616769633d3078303030303030303030303030343038632c7569643d000000000000e7913abef33db2ae29aa88caa44bcc0cbd0473eda11ff286187683c5f3cc1fc1e5b67dde28f14f1ce45a32f95410666010c6c641868f79eab35c27eca7423d16539d1df4f52fdd3e32f8f44f72ab0f1f1831728e04d1fc1bcea002565b28a1fc522200"/241, @ANYRESDEC=r2, @ANYBLOB="2c61cb7aaf0f944da35506e9543ee3ff756469742c726f6f74636f4e746578752c0000000000000000"])
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000002c0)={{0x1, 0x0, 0x0, r2, 0x0, 0x39, 0x8}, 0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7})
r3 = semget(0x0, 0x0, 0x180)
semctl$SEM_INFO(r3, 0x2, 0x13, &(0x7f0000000480)=""/245)
semctl$IPC_RMID(0x0, 0x0, 0x0)
r4 = semget(0x2, 0x0, 0x186)
r5 = getuid()
stat(&(0x7f0000000240)='./file1\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r6=>0x0})
semctl$IPC_SET(r4, 0x0, 0x1, &(0x7f00000002c0)={{0x1, r5, r1, r6, 0x0, 0x39, 0x8}, 0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7})
stat(&(0x7f0000000340)='./file0/file0\x00', &(0x7f0000000380))
clock_gettime(0x0, &(0x7f00000000c0)={<r7=>0x0, <r8=>0x0})
semtimedop(r4, &(0x7f0000000080)=[{0x0, 0x4, 0x1000}], 0x1, &(0x7f0000000100)={r7, r8+10000000})
semctl$SEM_INFO(0x0, 0x935a4533181df21f, 0x13, &(0x7f0000001e00)=""/4096)
semctl$SEM_INFO(r0, 0x3, 0x13, &(0x7f0000000000)=""/35)
unshare(0x48020200)

05:10:22 executing program 3:
openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x107000, 0x28)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617402028001000440000004f8", 0x16}, {0x0, 0x0, 0x1e0}], 0x8040, &(0x7f0000010f00))

05:10:22 executing program 4:
socketpair(0x3f, 0x4, 0xfff, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
sendmsg$NL80211_CMD_DEL_PMKSA(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x48, 0x0, 0x4, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @random="9fb4a221860d"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x9819}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x3b}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004080}, 0x36a6409bc5a9c281)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]})
syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x1)
fcntl$setown(0xffffffffffffffff, 0x8, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@local, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in6=@private2}, 0x0, @in6=@initdev}}, &(0x7f0000000440)=0xe8)
ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000500)={'ip6tnl0\x00', &(0x7f0000000480)={'ip6tnl0\x00', r1, 0x2f, 0x1, 0x20, 0x10001, 0x6, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}, @mcast1, 0x700, 0x80, 0x8, 0x6}})
open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)

05:10:22 executing program 5:
r0 = socket$inet(0x2, 0x3, 0xff)
sendmmsg$inet(r0, &(0x7f0000002cc0)=[{{&(0x7f0000000100)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000040)="e9d83f00000001000000f3d74c638dc6d5371bf2325a6dff5560932ef08c33d7454e3f59", 0x24}], 0x1, &(0x7f0000000380)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @loopback}}}], 0x20}}], 0x1, 0x0)
readahead(r0, 0x7, 0x9)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
getsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0xf, 0x0, &(0x7f0000000040))
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x1}, 0x9)

05:10:22 executing program 2:
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x9, 0x801e1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0xff}, 0x200, 0x0, 0xffff, 0x8, 0x100000001, 0x3, 0x3, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0x0)
r2 = add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0)
r3 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, r2)
add_key(&(0x7f0000000200)='keyring\x00', &(0x7f00000004c0)={'syz', 0x1}, &(0x7f0000000540)="18726d0eed55eaa57fc580dc3a0b12e0a5ee08da294ac8119c4c73f93694f2a935d17a81959d084839f846dca8739131e4a9c45c6509af44529537eae3b5a4793a9a0aacfd7a75f2b566b874939829b82a35d20d1985a92c5d7ba971251e89286f64438db33a7f05fb0d1707fd3fa27a56032a79c1d09558fbbfcb2e5f36d3e7e1c749ad35c2064fa087cf6359507a36eb69853e0cdd920cbb7586aedf5a2e5a9a1a6b8d11c08a14918b01d07c92179dfae1ef58835b5fa4be28fbd3b3eac1c9f3cf74fbe25748c55d23902439133eecfafb2e0f", 0xd4, 0xfffffffffffffffa)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4)
r4 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, r3)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00')
ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x100000001)
keyctl$chown(0x4, 0x0, 0x0, 0x0)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000140)=@chain)
add_key$fscrypt_v1(&(0x7f0000000600), &(0x7f0000000640)={'fscrypt:', @desc1}, &(0x7f0000000680)={0x0, "224096a0bb6e854e1699ea708595cf70de41947c7c3537ccf80218d9a8deacd4a2faa43047508bad116cbfcf8c1adb31d074260d46ecb7e7d40837747d512f02", 0x13}, 0x48, 0x0)
add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @auto=[0x64, 0x38, 0x32, 0x39, 0x37, 0x30, 0x39, 0x36, 0x31, 0x66, 0x39, 0x36, 0x32, 0x34, 0x33, 0x6d]}, &(0x7f00000006c0)={0x0, "604d85f989c5c46db5e383d19bbd3b856a8a070f8fcebb028abe00d0f59123eeba2234ac04eb4e64d81914c1b4c66221f85d78a730ccbf86ba2b26a5d0908b79", 0x25}, 0x48, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
add_key(&(0x7f0000000280)='id_resolver\x00', 0x0, &(0x7f0000000080)="fa", 0x1, 0xfffffffffffffffe)
add_key$keyring(&(0x7f00000002c0), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0x0)
keyctl$search(0xa, r1, &(0x7f0000000380)='cifs.spnego\x00', &(0x7f00000003c0)={'syz', 0x2}, r4)
unshare(0x48020200)

05:10:22 executing program 0:
syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff)
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
r1 = fsopen(&(0x7f0000001840)='debugfs\x00', 0x0)
dup(r1)
write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000100)={0xfffffffffffffff7, 0x28, '\x00', 0x1, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0]})
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r3, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB="68d073c4108371ba93bb2f3b1eecbd8eb2f4c976d8aaf8cf985d75d8c4001b47835b79e4516cfcdffd29512b9feb468151564e28f80691ef3a5f680c05394aa13c4e4dc413f13f3827cd9d59ec17e4af4a6ed8f0977e85c1fca2a3de2a6c2d48ebe25afeefb8ed83d6743457f9ef9c2f44f76fd34050bfbb335d04abed274f", @ANYRES16=r4, @ANYBLOB="000826bd7000fedbdf2520000000"], 0x14}, 0x1, 0x0, 0x0, 0x801}, 0x10)
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), r3)
sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r2, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB="68d073c4108371ba93bb2f3b1eecbd8eb2f4c976d8aaf8cf985d75d8c4001b47835b79e4516cfcdffd29512b9feb468151564e28f80691ef3a5f680c05394aa13c4e4dc413f13f3827cd9d59ec17e4af4a6ed8f0977e85c1fca2a3de2a6c2d48ebe25afeefb8ed83d6743457f9ef9c2f44f76fd34050bfbb335d04abed274f", @ANYRES16=r5, @ANYBLOB="000826bd7000fedbdf2520000000"], 0x14}, 0x1, 0x0, 0x0, 0x801}, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000140)={'wpan0\x00'})

[  106.013861] loop3: detected capacity change from 0 to 512
[  106.048102] hrtimer: interrupt took 31269 ns
[  106.053654] audit: type=1326 audit(1766639422.176:11): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=3994 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7023b5b19 code=0x7ffc0000
[  106.059892] audit: type=1326 audit(1766639422.176:12): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=3994 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fb7023b4c27 code=0x7ffc0000
[  106.068406] 
[  106.068775] ======================================================
[  106.070097] WARNING: possible circular locking dependency detected
[  106.071438] 5.10.247 #1 Not tainted
[  106.072190] ------------------------------------------------------
[  106.075943] syz-executor.0/4004 is trying to acquire lock:
[  106.079985] ffff888018290ae8 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}, at: __flush_work+0xdd/0xa90
[  106.082021] 
[  106.082021] but task is already holding lock:
05:10:22 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{0x0}], 0x2000000, &(0x7f0000000240)=ANY=[])
r0 = creat(&(0x7f0000000040)='./file0\x00', 0x40)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000200)={0x3ff, 0x0, {0x0, 0x2, 0x0, 0x0, 0x7ff}, 0x10000})
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a85352, &(0x7f0000000100)={{}, 'port1\x00'})
r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000000))
pwritev2(r1, &(0x7f0000000280)=[{&(0x7f00000001c0)='w', 0x1}], 0x1, 0x0, 0x0, 0x0)

[  106.083268] ffff888018290f40 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0xef/0x1240
[  106.085227] 
[  106.085227] which lock already depends on the new lock.
[  106.085227] 
[  106.086941] 
[  106.086941] the existing dependency chain (in reverse order) is:
[  106.088505] 
[  106.088505] -> #3 (&hdev->req_lock){+.+.}-{3:3}:
[  106.089829]        __mutex_lock+0x13d/0x10b0
[  106.090761]        hci_dev_do_close+0xef/0x1240
[  106.091744]        hci_rfkill_set_block+0x166/0x1a0
[  106.092795]        rfkill_set_block+0x1fd/0x540
[  106.093769]        rfkill_fop_write+0x253/0x4b0
[  106.094748]        vfs_write+0x29a/0xb10
[  106.095596]        ksys_write+0x1f6/0x260
[  106.096458]        do_syscall_64+0x33/0x40
[  106.097351]        entry_SYSCALL_64_after_hwframe+0x67/0xd1
[  106.098525] 
[  106.098525] -> #2 (rfkill_global_mutex){+.+.}-{3:3}:
[  106.099921]        __mutex_lock+0x13d/0x10b0
[  106.100834]        rfkill_register+0x36/0xa10
[  106.101772]        hci_register_dev+0x42e/0xc00
[  106.102751]        __vhci_create_device+0x2c8/0x5c0
[  106.103784]        vhci_open_timeout+0x38/0x50
[  106.104742]        process_one_work+0x9a9/0x14b0
[  106.105721]        worker_thread+0x61d/0x1310
[  106.106660]        kthread+0x38f/0x470
[  106.107468]        ret_from_fork+0x22/0x30
[  106.108348] 
[  106.108348] -> #1 (&data->open_mutex){+.+.}-{3:3}:
[  106.109694]        __mutex_lock+0x13d/0x10b0
[  106.110602]        vhci_send_frame+0x63/0xa0
[  106.111524]        hci_send_frame+0x1b9/0x320
[  106.112465]        hci_tx_work+0xfb4/0x15d0
[  106.113363]        process_one_work+0x9a9/0x14b0
[  106.114366]        worker_thread+0x61d/0x1310
[  106.115320]        kthread+0x38f/0x470
[  106.116131]        ret_from_fork+0x22/0x30
[  106.117026] 
[  106.117026] -> #0 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}:
[  106.118680]        __lock_acquire+0x29e7/0x5b00
[  106.119650]        lock_acquire+0x197/0x470
[  106.120564]        __flush_work+0x105/0xa90
[  106.121464]        hci_dev_do_close+0x131/0x1240
[  106.122441]        hci_rfkill_set_block+0x166/0x1a0
[  106.123498]        rfkill_set_block+0x1fd/0x540
[  106.124478]        rfkill_fop_write+0x253/0x4b0
[  106.125469]        vfs_write+0x29a/0xb10
[  106.125485] audit: type=1400 audit(1766639422.247:13): avc:  denied  { block_suspend } for  pid=4008 comm="syz-executor.5" capability=36  scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1
[  106.130940]        ksys_write+0x1f6/0x260
[  106.131831]        do_syscall_64+0x33/0x40
[  106.132728]        entry_SYSCALL_64_after_hwframe+0x67/0xd1
[  106.133912] 
[  106.133912] other info that might help us debug this:
[  106.133912] 
[  106.134006] FAT-fs (loop7): bogus number of reserved sectors
[  106.135619] Chain exists of:
[  106.135619]   (work_completion)(&hdev->tx_work) --> rfkill_global_mutex --> &hdev->req_lock
[  106.135619] 
[  106.135649]  Possible unsafe locking scenario:
[  106.135649] 
[  106.135653]        CPU0                    CPU1
[  106.135657]        ----                    ----
[  106.135659]   lock(&hdev->req_lock);
[  106.135670]                                lock(rfkill_global_mutex);
[  106.135682]                                lock(&hdev->req_lock);
[  106.135692]   lock((work_completion)(&hdev->tx_work));
[  106.135703] 
[  106.135703]  *** DEADLOCK ***
[  106.135703] 
[  106.135713] 2 locks held by syz-executor.0/4004:
[  106.135717]  #0: ffffffff85621608 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0xff/0x4b0
[  106.135757]  #1: ffff888018290f40 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0xef/0x1240
[  106.135794] 
[  106.135794] stack backtrace:
[  106.135808] CPU: 0 PID: 4004 Comm: syz-executor.0 Not tainted 5.10.247 #1
[  106.135816] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  106.135820] Call Trace:
[  106.135838]  dump_stack+0x107/0x167
[  106.135856]  check_noncircular+0x263/0x2e0
[  106.135872]  ? register_lock_class+0xbb/0x17b0
[  106.135888]  ? print_circular_bug+0x470/0x470
[  106.135907]  ? stack_trace_consume_entry+0x160/0x160
[  106.135926]  ? alloc_chain_hlocks+0x342/0x5a0
[  106.135944]  __lock_acquire+0x29e7/0x5b00
[  106.135966]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[  106.135979]  ? rwlock_bug.part.0+0x90/0x90
[  106.135999]  lock_acquire+0x197/0x470
[  106.136012]  ? __flush_work+0xdd/0xa90
[  106.136029]  ? lock_release+0x680/0x680
[  106.136045]  ? lock_release+0x680/0x680
[  106.136070]  ? lock_chain_count+0x20/0x20
[  106.137834] FAT-fs (loop7): Can't find a valid FAT filesystem
[  106.139946]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[  106.139962]  ? lock_chain_count+0x20/0x20
[  106.139977]  ? lock_acquire+0x197/0x470
[  106.139992]  __flush_work+0x105/0xa90
[  106.140012]  ? __flush_work+0xdd/0xa90
[  106.176445]  ? queue_delayed_work_on+0xe0/0xe0
[  106.177401]  ? hci_dev_do_close+0xef/0x1240
[  106.178316]  ? __cancel_work_timer+0x2a9/0x4c0
[  106.179293]  ? mutex_lock_io_nested+0xf30/0xf30
[  106.180273]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[  106.181372]  ? __cancel_work+0x250/0x2b0
[  106.182214]  ? trace_hardirqs_on+0x5b/0x180
[  106.183124]  ? __cancel_work+0x1bb/0x2b0
[  106.183976]  ? try_to_grab_pending+0xe0/0xe0
[  106.184895]  hci_dev_do_close+0x131/0x1240
[  106.185780]  ? rfkill_set_block+0x18f/0x540
[  106.186693]  ? hci_dev_open+0x350/0x350
[  106.187523]  ? mark_held_locks+0x9e/0xe0
[  106.188375]  hci_rfkill_set_block+0x166/0x1a0
[  106.189315]  ? hci_power_off+0x20/0x20
[  106.190130]  rfkill_set_block+0x1fd/0x540
[  106.191016]  rfkill_fop_write+0x253/0x4b0
[  106.191898]  ? rfkill_sync_work+0xa0/0xa0
[  106.192780]  ? security_file_permission+0xb1/0xe0
[  106.193796]  ? rfkill_sync_work+0xa0/0xa0
[  106.194675]  vfs_write+0x29a/0xb10
[  106.195412]  ksys_write+0x1f6/0x260
[  106.196177]  ? __ia32_sys_read+0xb0/0xb0
[  106.197027]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[  106.198138]  ? syscall_enter_from_user_mode+0x1d/0x50
[  106.199234]  do_syscall_64+0x33/0x40
[  106.200012]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[  106.201092] RIP: 0033:0x7ff73888ab19
[  106.201872] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  106.205796] RSP: 002b:00007ff735e00188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  106.207431] RAX: ffffffffffffffda RBX: 00007ff73899df60 RCX: 00007ff73888ab19
[  106.208964] RDX: 0000000000000008 RSI: 0000000020000080 RDI: 0000000000000003
[  106.210465] RBP: 00007ff7388e4f6d R08: 0000000000000000 R09: 0000000000000000
[  106.211984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  106.213498] R13: 00007ffe0ec7308f R14: 00007ff735e00300 R15: 0000000000022000
05:10:22 executing program 5:
r0 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000080)={0x10})
r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040))
r2 = socket$inet(0x2, 0x3, 0xff)
sendmmsg$inet(r2, &(0x7f0000002cc0)=[{{&(0x7f0000000100)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000040)="e9d83f00000001000000f3d74c638dc6d5371bf2325a6dff5560932ef08c33d7454e3f59", 0x24}], 0x1, &(0x7f0000000380)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @loopback}}}], 0x20}}], 0x1, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000140)={0xe0000008})
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r0, {0x391, 0x7}}, './file0\x00'})
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000100)={0x10000010})

[  106.221250] audit: type=1326 audit(1766639422.342:14): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=3994 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7023b5b19 code=0x7ffc0000
[  106.228593] audit: type=1326 audit(1766639422.342:15): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=3994 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7023b5b19 code=0x7ffc0000
[  106.243194] audit: type=1326 audit(1766639422.350:16): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=3994 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fb7023b5b19 code=0x7ffc0000
[  106.253238] audit: type=1326 audit(1766639422.350:17): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=3994 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7023b5b19 code=0x7ffc0000
[  106.261170] audit: type=1326 audit(1766639422.350:18): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=3994 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fb7023b5b19 code=0x7ffc0000
[  106.270839] audit: type=1326 audit(1766639422.358:19): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=3994 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7023b5b19 code=0x7ffc0000
[  106.280684] audit: type=1326 audit(1766639422.359:20): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=3994 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb7023b5b19 code=0x7ffc0000
05:10:22 executing program 5:
r0 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000080)={0x10})
r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040))
r2 = socket$inet(0x2, 0x3, 0xff)
sendmmsg$inet(r2, &(0x7f0000002cc0)=[{{&(0x7f0000000100)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000040)="e9d83f00000001000000f3d74c638dc6d5371bf2325a6dff5560932ef08c33d7454e3f59", 0x24}], 0x1, &(0x7f0000000380)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @loopback}}}], 0x20}}], 0x1, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000140)={0xe0000008})
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r0, {0x391, 0x7}}, './file0\x00'})
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000100)={0x10000010})

[  106.323587] FAT-fs (loop7): bogus number of reserved sectors
[  106.324949] FAT-fs (loop7): Can't find a valid FAT filesystem
05:10:22 executing program 4:
socketpair(0x3f, 0x4, 0xfff, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
sendmsg$NL80211_CMD_DEL_PMKSA(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x48, 0x0, 0x4, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @random="9fb4a221860d"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x9819}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x3b}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004080}, 0x36a6409bc5a9c281)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]})
syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x1)
fcntl$setown(0xffffffffffffffff, 0x8, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@local, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in6=@private2}, 0x0, @in6=@initdev}}, &(0x7f0000000440)=0xe8)
ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000500)={'ip6tnl0\x00', &(0x7f0000000480)={'ip6tnl0\x00', r1, 0x2f, 0x1, 0x20, 0x10001, 0x6, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}, @mcast1, 0x700, 0x80, 0x8, 0x6}})
open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)

05:10:22 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{0x0}], 0x2000000, &(0x7f0000000240)=ANY=[])
r0 = creat(&(0x7f0000000040)='./file0\x00', 0x40)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000200)={0x3ff, 0x0, {0x0, 0x2, 0x0, 0x0, 0x7ff}, 0x10000})
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a85352, &(0x7f0000000100)={{}, 'port1\x00'})
r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000000))
pwritev2(r1, &(0x7f0000000280)=[{&(0x7f00000001c0)='w', 0x1}], 0x1, 0x0, 0x0, 0x0)

05:10:22 executing program 5:
r0 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000080)={0x10})
r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040))
r2 = socket$inet(0x2, 0x3, 0xff)
sendmmsg$inet(r2, &(0x7f0000002cc0)=[{{&(0x7f0000000100)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000040)="e9d83f00000001000000f3d74c638dc6d5371bf2325a6dff5560932ef08c33d7454e3f59", 0x24}], 0x1, &(0x7f0000000380)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @loopback}}}], 0x20}}], 0x1, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000140)={0xe0000008})
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r0, {0x391, 0x7}}, './file0\x00'})
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000100)={0x10000010})

05:10:22 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{0x0}], 0x2000000, &(0x7f0000000240)=ANY=[])
r0 = creat(&(0x7f0000000040)='./file0\x00', 0x40)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000200)={0x3ff, 0x0, {0x0, 0x2, 0x0, 0x0, 0x7ff}, 0x10000})
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a85352, &(0x7f0000000100)={{}, 'port1\x00'})
r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000000))
pwritev2(r1, &(0x7f0000000280)=[{&(0x7f00000001c0)='w', 0x1}], 0x1, 0x0, 0x0, 0x0)

[  106.505247] FAT-fs (loop7): bogus number of reserved sectors
[  106.506520] FAT-fs (loop7): Can't find a valid FAT filesystem
05:10:22 executing program 4:
socketpair(0x3f, 0x4, 0xfff, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
sendmsg$NL80211_CMD_DEL_PMKSA(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x48, 0x0, 0x4, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @random="9fb4a221860d"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x9819}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x3b}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004080}, 0x36a6409bc5a9c281)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]})
syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x1)
fcntl$setown(0xffffffffffffffff, 0x8, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@local, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in6=@private2}, 0x0, @in6=@initdev}}, &(0x7f0000000440)=0xe8)
ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000500)={'ip6tnl0\x00', &(0x7f0000000480)={'ip6tnl0\x00', r1, 0x2f, 0x1, 0x20, 0x10001, 0x6, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}, @mcast1, 0x700, 0x80, 0x8, 0x6}})
open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)

[  106.549688] FAT-fs (loop2): bogus number of reserved sectors
[  106.551248] FAT-fs (loop2): Can't find a valid FAT filesystem

VM DIAGNOSIS:
05:10:22  Registers:
info registers vcpu 0
RAX=0000000000000036 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff822e5dd1 RDI=ffffffff879f8240 RBP=ffffffff879f8200 RSP=ffff888043e5f2e8
R8 =0000000000000001 R9 =0000000000000003 R10=0000000000000000 R11=0000000000000001
R12=0000000000000036 R13=0000000000000036 R14=ffffffff879f8200 R15=dffffc0000000000
RIP=ffffffff822e5e28 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007ff735e00700 00000000 00000000
GS =0000 ffff88806ce00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f3788033178 CR3=0000000043b1c000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=ffffffffffffffffffffffffffffffff
XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000
XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000
XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000
XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=000000000006398f RBX=e4c414d61b7b4927 RCX=0000000000000d6b RDX=000000000000067c
RSI=0000000000000184 RDI=000000c003b26ed0 RBP=000000c0007ad8b0 RSP=000000c0007ad898
R8 =00000000008e84e0 R9 =0000000000000001 R10=000000c010f3c000 R11=00000000000007ab
R12=000000000000000d R13=0000000000000012 R14=000080c010f3c000 R15=000080c010f57fff
RIP=00000000004f4d1b RFL=00000213 [----A-C] CPL=3 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0033 0000000000000000 ffffffff 00a0fb00 DPL=3 CS64 [-RA]
SS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 000000c000092b10 00000000 00000000
GS =0000 0000000000000000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000c010f42000 CR3=000000000d2f2000 CR4=00350ee0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000
XMM02=000000000000000041875a8ac0000000 XMM03=734218902b656f7766e9b1634b466400
XMM04=2f0128fc5c74453623818277ace4caf8 XMM05=407a79f910edf121160d1fa2bee26272
XMM06=2e772b5f6edfab5c024ccc76e1942c80 XMM07=bce91f8690a873f5a37424a4e3467d63
XMM08=00000000019758000000000001975680 XMM09=000000000197598000000000019758c0
XMM10=0000000001975b000000000001975a40 XMM11=0000000001975c800000000001975bc0
XMM12=00000000019d874000000000019908c0 XMM13=00000000019d8b0000000000019d8a40
XMM14=00000000019da48000000000019d9940 XMM15=00000000019db20000000000019db080