Warning: Permanently added '[localhost]:45651' (ECDSA) to the list of known hosts. 2025/08/29 10:47:17 fuzzer started 2025/08/29 10:47:17 dialing manager at localhost:43077 syzkaller login: [ 59.580440] cgroup: Unknown subsys name 'net' [ 59.649166] cgroup: Unknown subsys name 'cpuset' [ 59.667410] cgroup: Unknown subsys name 'rlimit' 2025/08/29 10:47:26 syscalls: 2214 2025/08/29 10:47:26 code coverage: enabled 2025/08/29 10:47:26 comparison tracing: enabled 2025/08/29 10:47:26 extra coverage: enabled 2025/08/29 10:47:26 setuid sandbox: enabled 2025/08/29 10:47:26 namespace sandbox: enabled 2025/08/29 10:47:26 Android sandbox: enabled 2025/08/29 10:47:26 fault injection: enabled 2025/08/29 10:47:26 leak checking: enabled 2025/08/29 10:47:26 net packet injection: enabled 2025/08/29 10:47:26 net device setup: enabled 2025/08/29 10:47:26 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/08/29 10:47:26 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/08/29 10:47:26 USB emulation: enabled 2025/08/29 10:47:26 hci packet injection: enabled 2025/08/29 10:47:26 wifi device emulation: enabled 2025/08/29 10:47:26 802.15.4 emulation: enabled 2025/08/29 10:47:26 fetching corpus: 0, signal 0/2000 (executing program) 2025/08/29 10:47:26 fetching corpus: 50, signal 15141/18776 (executing program) 2025/08/29 10:47:26 fetching corpus: 100, signal 26283/31351 (executing program) 2025/08/29 10:47:26 fetching corpus: 150, signal 41639/47705 (executing program) 2025/08/29 10:47:26 fetching corpus: 200, signal 46952/54254 (executing program) 2025/08/29 10:47:27 fetching corpus: 250, signal 52127/60551 (executing program) 2025/08/29 10:47:27 fetching corpus: 300, signal 56210/65716 (executing program) 2025/08/29 10:47:27 fetching corpus: 350, signal 58786/69431 (executing program) 2025/08/29 10:47:27 fetching corpus: 400, signal 63651/75101 (executing program) 2025/08/29 10:47:27 fetching corpus: 450, signal 66992/79378 (executing program) 2025/08/29 10:47:27 fetching corpus: 500, signal 69447/82792 (executing program) 2025/08/29 10:47:27 fetching corpus: 550, signal 71862/86111 (executing program) 2025/08/29 10:47:27 fetching corpus: 600, signal 75703/90583 (executing program) 2025/08/29 10:47:27 fetching corpus: 650, signal 77253/93016 (executing program) 2025/08/29 10:47:27 fetching corpus: 700, signal 79859/96318 (executing program) 2025/08/29 10:47:27 fetching corpus: 750, signal 81809/99041 (executing program) 2025/08/29 10:47:27 fetching corpus: 800, signal 85590/103226 (executing program) 2025/08/29 10:47:28 fetching corpus: 850, signal 87175/105468 (executing program) 2025/08/29 10:47:28 fetching corpus: 900, signal 89134/108033 (executing program) 2025/08/29 10:47:28 fetching corpus: 950, signal 89975/109660 (executing program) 2025/08/29 10:47:28 fetching corpus: 1000, signal 91390/111740 (executing program) 2025/08/29 10:47:28 fetching corpus: 1050, signal 94316/114990 (executing program) 2025/08/29 10:47:28 fetching corpus: 1100, signal 95716/116987 (executing program) 2025/08/29 10:47:28 fetching corpus: 1150, signal 97455/119215 (executing program) 2025/08/29 10:47:28 fetching corpus: 1200, signal 99151/121377 (executing program) 2025/08/29 10:47:28 fetching corpus: 1250, signal 101339/123861 (executing program) 2025/08/29 10:47:28 fetching corpus: 1300, signal 102644/125628 (executing program) 2025/08/29 10:47:28 fetching corpus: 1350, signal 103678/127211 (executing program) 2025/08/29 10:47:28 fetching corpus: 1400, signal 104995/128959 (executing program) 2025/08/29 10:47:29 fetching corpus: 1450, signal 107227/131244 (executing program) 2025/08/29 10:47:29 fetching corpus: 1500, signal 108847/133166 (executing program) 2025/08/29 10:47:29 fetching corpus: 1550, signal 110447/134959 (executing program) 2025/08/29 10:47:29 fetching corpus: 1600, signal 112589/137068 (executing program) 2025/08/29 10:47:29 fetching corpus: 1650, signal 114086/138702 (executing program) 2025/08/29 10:47:29 fetching corpus: 1700, signal 115301/140181 (executing program) 2025/08/29 10:47:29 fetching corpus: 1750, signal 116633/141733 (executing program) 2025/08/29 10:47:29 fetching corpus: 1800, signal 117279/142814 (executing program) 2025/08/29 10:47:29 fetching corpus: 1850, signal 118691/144248 (executing program) 2025/08/29 10:47:29 fetching corpus: 1900, signal 119900/145614 (executing program) 2025/08/29 10:47:29 fetching corpus: 1950, signal 120719/146737 (executing program) 2025/08/29 10:47:30 fetching corpus: 2000, signal 121717/147936 (executing program) 2025/08/29 10:47:30 fetching corpus: 2050, signal 122312/148958 (executing program) 2025/08/29 10:47:30 fetching corpus: 2100, signal 123148/149999 (executing program) 2025/08/29 10:47:30 fetching corpus: 2150, signal 124000/151098 (executing program) 2025/08/29 10:47:30 fetching corpus: 2200, signal 125238/152277 (executing program) 2025/08/29 10:47:30 fetching corpus: 2250, signal 126211/153360 (executing program) 2025/08/29 10:47:30 fetching corpus: 2300, signal 126706/154198 (executing program) 2025/08/29 10:47:30 fetching corpus: 2350, signal 127807/155261 (executing program) 2025/08/29 10:47:30 fetching corpus: 2400, signal 128732/156298 (executing program) 2025/08/29 10:47:30 fetching corpus: 2450, signal 130137/157533 (executing program) 2025/08/29 10:47:31 fetching corpus: 2500, signal 130771/158483 (executing program) 2025/08/29 10:47:31 fetching corpus: 2550, signal 131777/159474 (executing program) 2025/08/29 10:47:31 fetching corpus: 2600, signal 132377/160270 (executing program) 2025/08/29 10:47:31 fetching corpus: 2650, signal 132847/161002 (executing program) 2025/08/29 10:47:31 fetching corpus: 2700, signal 133774/161880 (executing program) 2025/08/29 10:47:31 fetching corpus: 2750, signal 134547/162629 (executing program) 2025/08/29 10:47:31 fetching corpus: 2800, signal 135037/163322 (executing program) 2025/08/29 10:47:31 fetching corpus: 2850, signal 135742/164124 (executing program) 2025/08/29 10:47:31 fetching corpus: 2900, signal 136601/164862 (executing program) 2025/08/29 10:47:31 fetching corpus: 2950, signal 137240/165547 (executing program) 2025/08/29 10:47:31 fetching corpus: 3000, signal 137783/166178 (executing program) 2025/08/29 10:47:32 fetching corpus: 3050, signal 138595/166898 (executing program) 2025/08/29 10:47:32 fetching corpus: 3100, signal 139625/167703 (executing program) 2025/08/29 10:47:32 fetching corpus: 3150, signal 140432/168436 (executing program) 2025/08/29 10:47:32 fetching corpus: 3200, signal 140823/168981 (executing program) 2025/08/29 10:47:32 fetching corpus: 3250, signal 141479/169565 (executing program) 2025/08/29 10:47:32 fetching corpus: 3300, signal 141986/170159 (executing program) 2025/08/29 10:47:32 fetching corpus: 3350, signal 142677/170779 (executing program) 2025/08/29 10:47:32 fetching corpus: 3400, signal 143163/171289 (executing program) 2025/08/29 10:47:32 fetching corpus: 3450, signal 143844/171873 (executing program) 2025/08/29 10:47:32 fetching corpus: 3500, signal 144410/172439 (executing program) 2025/08/29 10:47:33 fetching corpus: 3550, signal 144889/172881 (executing program) 2025/08/29 10:47:33 fetching corpus: 3600, signal 145396/173353 (executing program) 2025/08/29 10:47:33 fetching corpus: 3650, signal 146063/173841 (executing program) 2025/08/29 10:47:33 fetching corpus: 3700, signal 147132/174371 (executing program) 2025/08/29 10:47:33 fetching corpus: 3750, signal 147649/174830 (executing program) 2025/08/29 10:47:33 fetching corpus: 3800, signal 148117/175249 (executing program) 2025/08/29 10:47:33 fetching corpus: 3850, signal 148674/175663 (executing program) 2025/08/29 10:47:33 fetching corpus: 3900, signal 149248/176062 (executing program) 2025/08/29 10:47:33 fetching corpus: 3950, signal 149698/176438 (executing program) 2025/08/29 10:47:33 fetching corpus: 4000, signal 150467/176826 (executing program) 2025/08/29 10:47:34 fetching corpus: 4050, signal 151079/177149 (executing program) 2025/08/29 10:47:34 fetching corpus: 4100, signal 151381/177495 (executing program) 2025/08/29 10:47:34 fetching corpus: 4150, signal 152098/177814 (executing program) 2025/08/29 10:47:34 fetching corpus: 4200, signal 152426/178162 (executing program) 2025/08/29 10:47:34 fetching corpus: 4250, signal 152908/178493 (executing program) 2025/08/29 10:47:34 fetching corpus: 4300, signal 153247/178681 (executing program) 2025/08/29 10:47:34 fetching corpus: 4350, signal 153942/178734 (executing program) 2025/08/29 10:47:34 fetching corpus: 4400, signal 154295/178741 (executing program) 2025/08/29 10:47:34 fetching corpus: 4450, signal 154734/178742 (executing program) 2025/08/29 10:47:34 fetching corpus: 4500, signal 155254/178746 (executing program) 2025/08/29 10:47:34 fetching corpus: 4550, signal 155690/178767 (executing program) 2025/08/29 10:47:35 fetching corpus: 4600, signal 156624/178778 (executing program) 2025/08/29 10:47:35 fetching corpus: 4650, signal 157056/178796 (executing program) 2025/08/29 10:47:35 fetching corpus: 4700, signal 157799/178813 (executing program) 2025/08/29 10:47:35 fetching corpus: 4750, signal 158243/178853 (executing program) 2025/08/29 10:47:35 fetching corpus: 4800, signal 158950/178867 (executing program) 2025/08/29 10:47:35 fetching corpus: 4850, signal 159423/178869 (executing program) 2025/08/29 10:47:35 fetching corpus: 4900, signal 159875/178878 (executing program) 2025/08/29 10:47:35 fetching corpus: 4950, signal 160262/178879 (executing program) 2025/08/29 10:47:35 fetching corpus: 5000, signal 161055/178892 (executing program) 2025/08/29 10:47:35 fetching corpus: 5050, signal 161881/178898 (executing program) 2025/08/29 10:47:36 fetching corpus: 5100, signal 162349/178900 (executing program) 2025/08/29 10:47:36 fetching corpus: 5150, signal 162719/178904 (executing program) 2025/08/29 10:47:36 fetching corpus: 5200, signal 163366/178925 (executing program) 2025/08/29 10:47:36 fetching corpus: 5250, signal 163732/178934 (executing program) 2025/08/29 10:47:36 fetching corpus: 5300, signal 164214/178944 (executing program) 2025/08/29 10:47:36 fetching corpus: 5350, signal 164522/178958 (executing program) 2025/08/29 10:47:36 fetching corpus: 5400, signal 164867/178969 (executing program) 2025/08/29 10:47:36 fetching corpus: 5450, signal 165259/178976 (executing program) 2025/08/29 10:47:36 fetching corpus: 5500, signal 166851/178982 (executing program) 2025/08/29 10:47:36 fetching corpus: 5550, signal 167099/178984 (executing program) 2025/08/29 10:47:36 fetching corpus: 5600, signal 167624/178990 (executing program) 2025/08/29 10:47:36 fetching corpus: 5650, signal 168148/179009 (executing program) 2025/08/29 10:47:37 fetching corpus: 5700, signal 168459/179017 (executing program) 2025/08/29 10:47:37 fetching corpus: 5750, signal 168855/179029 (executing program) 2025/08/29 10:47:37 fetching corpus: 5800, signal 169195/179043 (executing program) 2025/08/29 10:47:37 fetching corpus: 5850, signal 169715/179059 (executing program) 2025/08/29 10:47:37 fetching corpus: 5900, signal 170070/179100 (executing program) 2025/08/29 10:47:37 fetching corpus: 5950, signal 170463/179104 (executing program) 2025/08/29 10:47:37 fetching corpus: 6000, signal 170799/179116 (executing program) 2025/08/29 10:47:37 fetching corpus: 6050, signal 171127/179118 (executing program) 2025/08/29 10:47:37 fetching corpus: 6100, signal 171594/179128 (executing program) 2025/08/29 10:47:37 fetching corpus: 6150, signal 171997/179129 (executing program) 2025/08/29 10:47:37 fetching corpus: 6200, signal 172439/179151 (executing program) 2025/08/29 10:47:38 fetching corpus: 6250, signal 172802/179158 (executing program) 2025/08/29 10:47:38 fetching corpus: 6300, signal 173098/179162 (executing program) 2025/08/29 10:47:38 fetching corpus: 6350, signal 173368/179173 (executing program) 2025/08/29 10:47:38 fetching corpus: 6400, signal 173644/179176 (executing program) 2025/08/29 10:47:38 fetching corpus: 6450, signal 174028/179177 (executing program) 2025/08/29 10:47:38 fetching corpus: 6500, signal 174337/179181 (executing program) 2025/08/29 10:47:38 fetching corpus: 6550, signal 174683/179182 (executing program) 2025/08/29 10:47:38 fetching corpus: 6600, signal 175246/179202 (executing program) 2025/08/29 10:47:38 fetching corpus: 6650, signal 175464/179216 (executing program) 2025/08/29 10:47:38 fetching corpus: 6700, signal 175831/179222 (executing program) 2025/08/29 10:47:38 fetching corpus: 6750, signal 176308/179234 (executing program) 2025/08/29 10:47:39 fetching corpus: 6794, signal 176509/179242 (executing program) 2025/08/29 10:47:39 fetching corpus: 6794, signal 176509/179242 (executing program) 2025/08/29 10:47:41 starting 8 fuzzer processes 10:47:41 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = dup(r0) sendmmsg$inet6(r1, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="0d80", 0x2}], 0x1, &(0x7f0000000380)=[@dstopts={{0x18}}], 0x18}}], 0x1, 0x48014) 10:47:41 executing program 1: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/cgroup\x00') ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) 10:47:41 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x3, 0xa0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) write(0xffffffffffffffff, 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) accept$inet(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) 10:47:41 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000440)={0x1f, 0x0, @fixed}, &(0x7f0000000480)=0xe, 0x80000) r0 = io_uring_setup(0x1ff, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES(r0, 0x19, &(0x7f0000000140), 0x0) r1 = fork() ptrace(0x10, r1) ptrace(0xd, r1) getresuid(&(0x7f0000000a00), &(0x7f0000000a40), &(0x7f0000000a80)) getgid() memfd_secret(0x80000) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x19, &(0x7f0000000140), 0x0) pidfd_open(0xffffffffffffffff, 0x0) [ 83.154130] audit: type=1400 audit(1756464461.390:7): avc: denied { execmem } for pid=282 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 10:47:41 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/partitions\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pread64(r0, &(0x7f0000000000)=""/137, 0x89, 0x3f) 10:47:41 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448ca, 0x0) 10:47:41 executing program 6: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000040)={0x14, 0x16, 0xffffffffffffffff, 0x0, 0x0, "", [@generic='\n']}, 0x14}], 0x1}, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) 10:47:41 executing program 4: r0 = getpgrp(0xffffffffffffffff) r1 = gettid() futex(&(0x7f0000001640), 0x0, 0x0, 0x0, 0x0, 0x0) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000400), 0x8, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000000)) tgkill(r0, r1, 0xb) [ 84.362661] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.368245] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 84.370000] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.373093] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 84.374938] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 84.375224] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.378980] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 84.383906] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 84.385493] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.389031] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 84.421355] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 84.425631] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 84.427635] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 84.430874] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 84.432667] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 84.434310] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 84.438116] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 84.439507] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 84.441421] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 84.443586] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 84.596239] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 84.599692] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 84.601257] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 84.603576] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 84.607042] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 84.608370] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 84.612277] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 84.619210] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 84.621889] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 84.626843] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 84.628626] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 84.629646] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 84.633373] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 84.655951] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 84.681715] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 84.702637] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 84.706791] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 84.708464] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 84.715375] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 84.718709] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 86.452968] Bluetooth: hci1: command tx timeout [ 86.453393] Bluetooth: hci0: command tx timeout [ 86.516701] Bluetooth: hci2: command tx timeout [ 86.516779] Bluetooth: hci3: command tx timeout [ 86.708395] Bluetooth: hci5: command tx timeout [ 86.708424] Bluetooth: hci6: command tx timeout [ 86.772547] Bluetooth: hci7: command tx timeout [ 86.773042] Bluetooth: hci4: command tx timeout [ 88.500580] Bluetooth: hci1: command tx timeout [ 88.501431] Bluetooth: hci0: command tx timeout [ 88.564427] Bluetooth: hci3: command tx timeout [ 88.564573] Bluetooth: hci2: command tx timeout [ 88.756371] Bluetooth: hci5: command tx timeout [ 88.757416] Bluetooth: hci6: command tx timeout [ 88.820446] Bluetooth: hci4: command tx timeout [ 88.820850] Bluetooth: hci7: command tx timeout [ 90.548384] Bluetooth: hci0: command tx timeout [ 90.548840] Bluetooth: hci1: command tx timeout [ 90.612520] Bluetooth: hci3: command tx timeout [ 90.612587] Bluetooth: hci2: command tx timeout [ 90.804521] Bluetooth: hci6: command tx timeout [ 90.804550] Bluetooth: hci5: command tx timeout [ 90.868506] Bluetooth: hci7: command tx timeout [ 90.868538] Bluetooth: hci4: command tx timeout [ 92.596383] Bluetooth: hci1: command tx timeout [ 92.596428] Bluetooth: hci0: command tx timeout [ 92.660465] Bluetooth: hci2: command tx timeout [ 92.660484] Bluetooth: hci3: command tx timeout [ 92.852367] Bluetooth: hci6: command tx timeout [ 92.853441] Bluetooth: hci5: command tx timeout [ 92.916394] Bluetooth: hci7: command tx timeout [ 92.916418] Bluetooth: hci4: command tx timeout [ 120.675640] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.676288] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.809974] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.810625] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.993095] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.994369] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.134451] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.135068] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.167534] audit: type=1400 audit(1756464499.402:8): avc: denied { open } for pid=3824 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 121.173505] audit: type=1400 audit(1756464499.402:9): avc: denied { kernel } for pid=3824 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 10:48:19 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/partitions\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pread64(r0, &(0x7f0000000000)=""/137, 0x89, 0x3f) [ 121.294419] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.295029] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 10:48:19 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/partitions\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pread64(r0, &(0x7f0000000000)=""/137, 0x89, 0x3f) [ 121.410745] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.412072] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 10:48:19 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/partitions\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pread64(r0, &(0x7f0000000000)=""/137, 0x89, 0x3f) 10:48:19 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000002900), 0x0) open_by_handle_at(r0, &(0x7f0000000080)=@reiserfs_2={0x8}, 0x0) [ 121.540553] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.541126] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.642233] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.642940] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 10:48:19 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000002900), 0x0) open_by_handle_at(r0, &(0x7f0000000080)=@reiserfs_2={0x8}, 0x0) 10:48:19 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448ca, 0x0) 10:48:19 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000002900), 0x0) open_by_handle_at(r0, &(0x7f0000000080)=@reiserfs_2={0x8}, 0x0) 10:48:19 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448ca, 0x0) [ 121.776576] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.777189] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.872571] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.873210] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.953383] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.954008] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.009218] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.009883] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.075725] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.076362] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.111718] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.112295] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.316907] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.317553] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.341396] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.341977] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 10:48:20 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = dup(r0) sendmmsg$inet6(r1, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="0d80", 0x2}], 0x1, &(0x7f0000000380)=[@dstopts={{0x18}}], 0x18}}], 0x1, 0x48014) 10:48:20 executing program 4: r0 = getpgrp(0xffffffffffffffff) r1 = gettid() futex(&(0x7f0000001640), 0x0, 0x0, 0x0, 0x0, 0x0) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000400), 0x8, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000000)) tgkill(r0, r1, 0xb) 10:48:20 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448ca, 0x0) 10:48:20 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000002900), 0x0) open_by_handle_at(r0, &(0x7f0000000080)=@reiserfs_2={0x8}, 0x0) 10:48:20 executing program 2: execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x0], 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', &(0x7f0000000180)=[0x0], &(0x7f00000001c0)=[0x0], 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01010101", 0x4) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', &(0x7f00000002c0)=[0x0], &(0x7f0000000300)=[0x0], 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) close(r2) execveat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)=[0x0], &(0x7f0000000400)=[0x0], 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', &(0x7f00000004c0)=[0x0], &(0x7f0000000500)=[0x0], 0x0) 10:48:20 executing program 1: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/cgroup\x00') ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) 10:48:20 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') splice(r0, 0x0, r1, 0x0, 0x7ff, 0x0) 10:48:20 executing program 6: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000040)={0x14, 0x16, 0xffffffffffffffff, 0x0, 0x0, "", [@generic='\n']}, 0x14}], 0x1}, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) [ 122.558089] process 'syz-executor.2' launched './file1' with NULL argv: empty string added 10:48:20 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = dup(r0) sendmmsg$inet6(r1, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="0d80", 0x2}], 0x1, &(0x7f0000000380)=[@dstopts={{0x18}}], 0x18}}], 0x1, 0x48014) 10:48:20 executing program 1: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/cgroup\x00') ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) 10:48:20 executing program 6: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000040)={0x14, 0x16, 0xffffffffffffffff, 0x0, 0x0, "", [@generic='\n']}, 0x14}], 0x1}, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) 10:48:20 executing program 3: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x120) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x2, 0x4e20, @dev}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=[@ip_retopts={{0x20, 0x0, 0x7, {[@timestamp={0x44, 0x10, 0xb, 0x0, 0x0, [0x0, 0x0, 0x0]}]}}}], 0x20}, 0x0) fork() 10:48:20 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') splice(r0, 0x0, r1, 0x0, 0x7ff, 0x0) 10:48:20 executing program 2: execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x0], 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', &(0x7f0000000180)=[0x0], &(0x7f00000001c0)=[0x0], 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01010101", 0x4) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', &(0x7f00000002c0)=[0x0], &(0x7f0000000300)=[0x0], 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) close(r2) execveat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)=[0x0], &(0x7f0000000400)=[0x0], 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', &(0x7f00000004c0)=[0x0], &(0x7f0000000500)=[0x0], 0x0) 10:48:20 executing program 5: r0 = getpgrp(0xffffffffffffffff) r1 = gettid() futex(&(0x7f0000001640), 0x0, 0x0, 0x0, 0x0, 0x0) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000400), 0x8, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000000)) tgkill(r0, r1, 0xb) 10:48:20 executing program 4: r0 = getpgrp(0xffffffffffffffff) r1 = gettid() futex(&(0x7f0000001640), 0x0, 0x0, 0x0, 0x0, 0x0) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000400), 0x8, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000000)) tgkill(r0, r1, 0xb) 10:48:20 executing program 6: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000040)={0x14, 0x16, 0xffffffffffffffff, 0x0, 0x0, "", [@generic='\n']}, 0x14}], 0x1}, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) 10:48:20 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = dup(r0) sendmmsg$inet6(r1, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="0d80", 0x2}], 0x1, &(0x7f0000000380)=[@dstopts={{0x18}}], 0x18}}], 0x1, 0x48014) 10:48:20 executing program 1: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/cgroup\x00') ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) 10:48:20 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') splice(r0, 0x0, r1, 0x0, 0x7ff, 0x0) 10:48:21 executing program 4: r0 = getpgrp(0xffffffffffffffff) r1 = gettid() futex(&(0x7f0000001640), 0x0, 0x0, 0x0, 0x0, 0x0) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000400), 0x8, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000000)) tgkill(r0, r1, 0xb) 10:48:21 executing program 5: r0 = getpgrp(0xffffffffffffffff) r1 = gettid() futex(&(0x7f0000001640), 0x0, 0x0, 0x0, 0x0, 0x0) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000400), 0x8, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000000)) tgkill(r0, r1, 0xb) 10:48:21 executing program 3: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x120) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x2, 0x4e20, @dev}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=[@ip_retopts={{0x20, 0x0, 0x7, {[@timestamp={0x44, 0x10, 0xb, 0x0, 0x0, [0x0, 0x0, 0x0]}]}}}], 0x20}, 0x0) fork() 10:48:21 executing program 2: execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x0], 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', &(0x7f0000000180)=[0x0], &(0x7f00000001c0)=[0x0], 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01010101", 0x4) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', &(0x7f00000002c0)=[0x0], &(0x7f0000000300)=[0x0], 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) close(r2) execveat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)=[0x0], &(0x7f0000000400)=[0x0], 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', &(0x7f00000004c0)=[0x0], &(0x7f0000000500)=[0x0], 0x0) 10:48:21 executing program 0: fork() 10:48:21 executing program 1: r0 = inotify_init1(0x0) inotify_add_watch(r0, 0x0, 0x70000200) 10:48:21 executing program 3: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x120) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x2, 0x4e20, @dev}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=[@ip_retopts={{0x20, 0x0, 0x7, {[@timestamp={0x44, 0x10, 0xb, 0x0, 0x0, [0x0, 0x0, 0x0]}]}}}], 0x20}, 0x0) fork() 10:48:21 executing program 1: r0 = inotify_init1(0x0) inotify_add_watch(r0, 0x0, 0x70000200) 10:48:21 executing program 0: rseq(&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5}, 0x59, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) ioctl$TUNSETOWNER(r0, 0x401054d5, 0x0) 10:48:21 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f00000001c0)={{}, 'port0\x00'}) 10:48:21 executing program 2: execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x0], 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', &(0x7f0000000180)=[0x0], &(0x7f00000001c0)=[0x0], 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01010101", 0x4) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', &(0x7f00000002c0)=[0x0], &(0x7f0000000300)=[0x0], 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) close(r2) execveat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)=[0x0], &(0x7f0000000400)=[0x0], 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', &(0x7f00000004c0)=[0x0], &(0x7f0000000500)=[0x0], 0x0) 10:48:21 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') splice(r0, 0x0, r1, 0x0, 0x7ff, 0x0) 10:48:21 executing program 5: r0 = getpgrp(0xffffffffffffffff) r1 = gettid() futex(&(0x7f0000001640), 0x0, 0x0, 0x0, 0x0, 0x0) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000400), 0x8, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000000)) tgkill(r0, r1, 0xb) 10:48:21 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_setup(0x68e4, 0x0) syz_open_procfs(0x0, &(0x7f0000000340)='net/vlan/vlan0\x00') 10:48:21 executing program 1: r0 = inotify_init1(0x0) inotify_add_watch(r0, 0x0, 0x70000200) 10:48:21 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f00000001c0)={{}, 'port0\x00'}) 10:48:21 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0xfff, &(0x7f0000000040)) io_setup(0x0, &(0x7f0000000040)) 10:48:21 executing program 7: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCGSND(r0, 0x400445a0, &(0x7f0000000180)=""/44) 10:48:21 executing program 6: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x141802, 0x0) ioctl$VT_ACTIVATE(r0, 0x2272, 0x4000000000000) 10:48:21 executing program 3: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x120) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x2, 0x4e20, @dev}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=[@ip_retopts={{0x20, 0x0, 0x7, {[@timestamp={0x44, 0x10, 0xb, 0x0, 0x0, [0x0, 0x0, 0x0]}]}}}], 0x20}, 0x0) fork() 10:48:21 executing program 0: rseq(&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5}, 0x59, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) ioctl$TUNSETOWNER(r0, 0x401054d5, 0x0) 10:48:21 executing program 6: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x141802, 0x0) ioctl$VT_ACTIVATE(r0, 0x2272, 0x4000000000000) 10:48:21 executing program 0: rseq(&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5}, 0x59, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) ioctl$TUNSETOWNER(r0, 0x401054d5, 0x0) 10:48:21 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f00000001c0)={{}, 'port0\x00'}) 10:48:21 executing program 7: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCGSND(r0, 0x400445a0, &(0x7f0000000180)=""/44) 10:48:21 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0xfff, &(0x7f0000000040)) io_setup(0x0, &(0x7f0000000040)) 10:48:21 executing program 1: r0 = inotify_init1(0x0) inotify_add_watch(r0, 0x0, 0x70000200) 10:48:21 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0xfff, &(0x7f0000000040)) io_setup(0x0, &(0x7f0000000040)) 10:48:21 executing program 5: rseq(&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5}, 0x59, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) ioctl$TUNSETOWNER(r0, 0x401054d5, 0x0) 10:48:21 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f00000001c0)={{}, 'port0\x00'}) 10:48:21 executing program 7: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCGSND(r0, 0x400445a0, &(0x7f0000000180)=""/44) 10:48:21 executing program 1: set_mempolicy(0x6, &(0x7f0000000040)=0x7, 0x5db) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000080)={0x0, 0xfff, 0x1}) 10:48:21 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0xfff, &(0x7f0000000040)) io_setup(0x0, &(0x7f0000000040)) 10:48:21 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0xfff, &(0x7f0000000040)) io_setup(0x0, &(0x7f0000000040)) 10:48:21 executing program 6: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x141802, 0x0) ioctl$VT_ACTIVATE(r0, 0x2272, 0x4000000000000) 10:48:21 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSETLED(r0, 0x560d, 0xf0ff1f00000000) 10:48:21 executing program 7: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCGSND(r0, 0x400445a0, &(0x7f0000000180)=""/44) 10:48:21 executing program 0: rseq(&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5}, 0x59, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) ioctl$TUNSETOWNER(r0, 0x401054d5, 0x0) 10:48:21 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0xfff, &(0x7f0000000040)) io_setup(0x0, &(0x7f0000000040)) 10:48:21 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0xfff, &(0x7f0000000040)) io_setup(0x0, &(0x7f0000000040)) 10:48:21 executing program 6: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x141802, 0x0) ioctl$VT_ACTIVATE(r0, 0x2272, 0x4000000000000) 10:48:21 executing program 1: syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="05"], 0xe) 10:48:21 executing program 5: rseq(&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5}, 0x59, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) ioctl$TUNSETOWNER(r0, 0x401054d5, 0x0) [ 123.583396] Bluetooth: hci2: ISO packet for unknown connection handle 0 [ 123.584808] Bluetooth: hci2: ISO packet for unknown connection handle 0 10:48:21 executing program 6: r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000080), 0x0, 0x12023, &(0x7f00000000c0)={0x77359400}) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaab0aa850300000000485a60d3d2fa9a443c16090585fd60000000001190780000000000000000070b9d0a010101ac1e01010000004e2000089078824d242634d08def15b48ab1e1fb16deb6fc01cf08085bcdc51c53a49eff7ed67b4d64c2094224d13c0df77e0e1066d39258c738f2043dd11f000000b49a8f6b7d12c7f681cf3537162310c425d1f6d5e4f07844292f69449cfd403ea2a6"], 0x0) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x10) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgrp(0xffffffffffffffff) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000280)={0x3098, "7802b0"}, 0x6) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)={0x0, "a9932d802e8bc4c1cf325373e55e5aee331672119bb07e4dda5dc2ee82072d2f14648a0d8bb496066c082a3a134bb3ee82d68a9bcd1fed73dc4e2e3b2a8f072a"}, 0x48, 0xfffffffffffffffb) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) syz_extract_tcp_res(&(0x7f0000000240), 0x1a2a, 0x100) lseek(r1, 0x0, 0x4) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/zoneinfo\x00', 0x0, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10) 10:48:21 executing program 1: creat(&(0x7f00000003c0)='./file0\x00', 0x0) lgetxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=@known='security.apparmor\x00', 0x0, 0x0) 10:48:21 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x2, 0xee00, 0xee00, 0xffffffffffffffff, 0xffffffffffffffff}}) 10:48:21 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSETLED(r0, 0x560d, 0xf0ff1f00000000) 10:48:21 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$SG_GET_PACK_ID(r0, 0x2284, 0xfffffffffffffffc) 10:48:21 executing program 2: syz_emit_ethernet(0x7e, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @parameter_prob={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @multicast1, @empty, {[@generic={0x0, 0x2}, @timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@dev}]}, @timestamp={0x44, 0x18, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x94, 0x4}, @rr={0x7, 0x13, 0x0, [@dev, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @multicast2]}]}}}}}}}, 0x0) 10:48:21 executing program 5: rseq(&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5}, 0x59, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) ioctl$TUNSETOWNER(r0, 0x401054d5, 0x0) 10:48:22 executing program 1: creat(&(0x7f00000003c0)='./file0\x00', 0x0) lgetxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=@known='security.apparmor\x00', 0x0, 0x0) 10:48:22 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$SG_GET_PACK_ID(r0, 0x2284, 0xfffffffffffffffc) 10:48:22 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSETLED(r0, 0x560d, 0xf0ff1f00000000) 10:48:22 executing program 2: syz_emit_ethernet(0x7e, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @parameter_prob={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @multicast1, @empty, {[@generic={0x0, 0x2}, @timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@dev}]}, @timestamp={0x44, 0x18, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x94, 0x4}, @rr={0x7, 0x13, 0x0, [@dev, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @multicast2]}]}}}}}}}, 0x0) 10:48:22 executing program 6: r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000080), 0x0, 0x12023, &(0x7f00000000c0)={0x77359400}) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaab0aa850300000000485a60d3d2fa9a443c16090585fd60000000001190780000000000000000070b9d0a010101ac1e01010000004e2000089078824d242634d08def15b48ab1e1fb16deb6fc01cf08085bcdc51c53a49eff7ed67b4d64c2094224d13c0df77e0e1066d39258c738f2043dd11f000000b49a8f6b7d12c7f681cf3537162310c425d1f6d5e4f07844292f69449cfd403ea2a6"], 0x0) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x10) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgrp(0xffffffffffffffff) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000280)={0x3098, "7802b0"}, 0x6) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)={0x0, "a9932d802e8bc4c1cf325373e55e5aee331672119bb07e4dda5dc2ee82072d2f14648a0d8bb496066c082a3a134bb3ee82d68a9bcd1fed73dc4e2e3b2a8f072a"}, 0x48, 0xfffffffffffffffb) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) syz_extract_tcp_res(&(0x7f0000000240), 0x1a2a, 0x100) lseek(r1, 0x0, 0x4) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/zoneinfo\x00', 0x0, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10) 10:48:22 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x2, 0xee00, 0xee00, 0xffffffffffffffff, 0xffffffffffffffff}}) 10:48:22 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000080), 0x0, 0x12023, &(0x7f00000000c0)={0x77359400}) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaab0aa850300000000485a60d3d2fa9a443c16090585fd60000000001190780000000000000000070b9d0a010101ac1e01010000004e2000089078824d242634d08def15b48ab1e1fb16deb6fc01cf08085bcdc51c53a49eff7ed67b4d64c2094224d13c0df77e0e1066d39258c738f2043dd11f000000b49a8f6b7d12c7f681cf3537162310c425d1f6d5e4f07844292f69449cfd403ea2a6"], 0x0) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x10) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgrp(0xffffffffffffffff) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000280)={0x3098, "7802b0"}, 0x6) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)={0x0, "a9932d802e8bc4c1cf325373e55e5aee331672119bb07e4dda5dc2ee82072d2f14648a0d8bb496066c082a3a134bb3ee82d68a9bcd1fed73dc4e2e3b2a8f072a"}, 0x48, 0xfffffffffffffffb) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) syz_extract_tcp_res(&(0x7f0000000240), 0x1a2a, 0x100) lseek(r1, 0x0, 0x4) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/zoneinfo\x00', 0x0, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10) 10:48:22 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000080), 0x0, 0x12023, &(0x7f00000000c0)={0x77359400}) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaab0aa850300000000485a60d3d2fa9a443c16090585fd60000000001190780000000000000000070b9d0a010101ac1e01010000004e2000089078824d242634d08def15b48ab1e1fb16deb6fc01cf08085bcdc51c53a49eff7ed67b4d64c2094224d13c0df77e0e1066d39258c738f2043dd11f000000b49a8f6b7d12c7f681cf3537162310c425d1f6d5e4f07844292f69449cfd403ea2a6"], 0x0) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x10) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgrp(0xffffffffffffffff) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000280)={0x3098, "7802b0"}, 0x6) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)={0x0, "a9932d802e8bc4c1cf325373e55e5aee331672119bb07e4dda5dc2ee82072d2f14648a0d8bb496066c082a3a134bb3ee82d68a9bcd1fed73dc4e2e3b2a8f072a"}, 0x48, 0xfffffffffffffffb) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) syz_extract_tcp_res(&(0x7f0000000240), 0x1a2a, 0x100) lseek(r1, 0x0, 0x4) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/zoneinfo\x00', 0x0, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10) 10:48:22 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$SG_GET_PACK_ID(r0, 0x2284, 0xfffffffffffffffc) 10:48:22 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSETLED(r0, 0x560d, 0xf0ff1f00000000) 10:48:22 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x2, 0xee00, 0xee00, 0xffffffffffffffff, 0xffffffffffffffff}}) 10:48:22 executing program 1: creat(&(0x7f00000003c0)='./file0\x00', 0x0) lgetxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=@known='security.apparmor\x00', 0x0, 0x0) 10:48:22 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000080), 0x0, 0x12023, &(0x7f00000000c0)={0x77359400}) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaab0aa850300000000485a60d3d2fa9a443c16090585fd60000000001190780000000000000000070b9d0a010101ac1e01010000004e2000089078824d242634d08def15b48ab1e1fb16deb6fc01cf08085bcdc51c53a49eff7ed67b4d64c2094224d13c0df77e0e1066d39258c738f2043dd11f000000b49a8f6b7d12c7f681cf3537162310c425d1f6d5e4f07844292f69449cfd403ea2a6"], 0x0) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x10) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgrp(0xffffffffffffffff) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000280)={0x3098, "7802b0"}, 0x6) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)={0x0, "a9932d802e8bc4c1cf325373e55e5aee331672119bb07e4dda5dc2ee82072d2f14648a0d8bb496066c082a3a134bb3ee82d68a9bcd1fed73dc4e2e3b2a8f072a"}, 0x48, 0xfffffffffffffffb) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) syz_extract_tcp_res(&(0x7f0000000240), 0x1a2a, 0x100) lseek(r1, 0x0, 0x4) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/zoneinfo\x00', 0x0, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10) 10:48:22 executing program 6: r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000080), 0x0, 0x12023, &(0x7f00000000c0)={0x77359400}) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaab0aa850300000000485a60d3d2fa9a443c16090585fd60000000001190780000000000000000070b9d0a010101ac1e01010000004e2000089078824d242634d08def15b48ab1e1fb16deb6fc01cf08085bcdc51c53a49eff7ed67b4d64c2094224d13c0df77e0e1066d39258c738f2043dd11f000000b49a8f6b7d12c7f681cf3537162310c425d1f6d5e4f07844292f69449cfd403ea2a6"], 0x0) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x10) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgrp(0xffffffffffffffff) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000280)={0x3098, "7802b0"}, 0x6) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)={0x0, "a9932d802e8bc4c1cf325373e55e5aee331672119bb07e4dda5dc2ee82072d2f14648a0d8bb496066c082a3a134bb3ee82d68a9bcd1fed73dc4e2e3b2a8f072a"}, 0x48, 0xfffffffffffffffb) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) syz_extract_tcp_res(&(0x7f0000000240), 0x1a2a, 0x100) lseek(r1, 0x0, 0x4) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/zoneinfo\x00', 0x0, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10) 10:48:22 executing program 2: syz_emit_ethernet(0x7e, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @parameter_prob={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @multicast1, @empty, {[@generic={0x0, 0x2}, @timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@dev}]}, @timestamp={0x44, 0x18, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x94, 0x4}, @rr={0x7, 0x13, 0x0, [@dev, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @multicast2]}]}}}}}}}, 0x0) 10:48:22 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000080), 0x0, 0x12023, &(0x7f00000000c0)={0x77359400}) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaab0aa850300000000485a60d3d2fa9a443c16090585fd60000000001190780000000000000000070b9d0a010101ac1e01010000004e2000089078824d242634d08def15b48ab1e1fb16deb6fc01cf08085bcdc51c53a49eff7ed67b4d64c2094224d13c0df77e0e1066d39258c738f2043dd11f000000b49a8f6b7d12c7f681cf3537162310c425d1f6d5e4f07844292f69449cfd403ea2a6"], 0x0) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x10) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgrp(0xffffffffffffffff) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000280)={0x3098, "7802b0"}, 0x6) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)={0x0, "a9932d802e8bc4c1cf325373e55e5aee331672119bb07e4dda5dc2ee82072d2f14648a0d8bb496066c082a3a134bb3ee82d68a9bcd1fed73dc4e2e3b2a8f072a"}, 0x48, 0xfffffffffffffffb) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) syz_extract_tcp_res(&(0x7f0000000240), 0x1a2a, 0x100) lseek(r1, 0x0, 0x4) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/zoneinfo\x00', 0x0, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10) 10:48:22 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$SG_GET_PACK_ID(r0, 0x2284, 0xfffffffffffffffc) 10:48:22 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000080), 0x0, 0x12023, &(0x7f00000000c0)={0x77359400}) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaab0aa850300000000485a60d3d2fa9a443c16090585fd60000000001190780000000000000000070b9d0a010101ac1e01010000004e2000089078824d242634d08def15b48ab1e1fb16deb6fc01cf08085bcdc51c53a49eff7ed67b4d64c2094224d13c0df77e0e1066d39258c738f2043dd11f000000b49a8f6b7d12c7f681cf3537162310c425d1f6d5e4f07844292f69449cfd403ea2a6"], 0x0) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x10) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgrp(0xffffffffffffffff) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000280)={0x3098, "7802b0"}, 0x6) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)={0x0, "a9932d802e8bc4c1cf325373e55e5aee331672119bb07e4dda5dc2ee82072d2f14648a0d8bb496066c082a3a134bb3ee82d68a9bcd1fed73dc4e2e3b2a8f072a"}, 0x48, 0xfffffffffffffffb) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) syz_extract_tcp_res(&(0x7f0000000240), 0x1a2a, 0x100) lseek(r1, 0x0, 0x4) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/zoneinfo\x00', 0x0, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10) 10:48:22 executing program 1: creat(&(0x7f00000003c0)='./file0\x00', 0x0) lgetxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=@known='security.apparmor\x00', 0x0, 0x0) 10:48:22 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000080), 0x0, 0x12023, &(0x7f00000000c0)={0x77359400}) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaab0aa850300000000485a60d3d2fa9a443c16090585fd60000000001190780000000000000000070b9d0a010101ac1e01010000004e2000089078824d242634d08def15b48ab1e1fb16deb6fc01cf08085bcdc51c53a49eff7ed67b4d64c2094224d13c0df77e0e1066d39258c738f2043dd11f000000b49a8f6b7d12c7f681cf3537162310c425d1f6d5e4f07844292f69449cfd403ea2a6"], 0x0) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x10) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgrp(0xffffffffffffffff) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000280)={0x3098, "7802b0"}, 0x6) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)={0x0, "a9932d802e8bc4c1cf325373e55e5aee331672119bb07e4dda5dc2ee82072d2f14648a0d8bb496066c082a3a134bb3ee82d68a9bcd1fed73dc4e2e3b2a8f072a"}, 0x48, 0xfffffffffffffffb) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) syz_extract_tcp_res(&(0x7f0000000240), 0x1a2a, 0x100) lseek(r1, 0x0, 0x4) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/zoneinfo\x00', 0x0, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10) 10:48:22 executing program 2: syz_emit_ethernet(0x7e, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @parameter_prob={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @multicast1, @empty, {[@generic={0x0, 0x2}, @timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@dev}]}, @timestamp={0x44, 0x18, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x94, 0x4}, @rr={0x7, 0x13, 0x0, [@dev, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @multicast2]}]}}}}}}}, 0x0) 10:48:22 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x2, 0xee00, 0xee00, 0xffffffffffffffff, 0xffffffffffffffff}}) 10:48:22 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r0, &(0x7f0000000300)=""/173, 0xad, 0x2) 10:48:22 executing program 6: r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000080), 0x0, 0x12023, &(0x7f00000000c0)={0x77359400}) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaab0aa850300000000485a60d3d2fa9a443c16090585fd60000000001190780000000000000000070b9d0a010101ac1e01010000004e2000089078824d242634d08def15b48ab1e1fb16deb6fc01cf08085bcdc51c53a49eff7ed67b4d64c2094224d13c0df77e0e1066d39258c738f2043dd11f000000b49a8f6b7d12c7f681cf3537162310c425d1f6d5e4f07844292f69449cfd403ea2a6"], 0x0) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x10) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgrp(0xffffffffffffffff) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000280)={0x3098, "7802b0"}, 0x6) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)={0x0, "a9932d802e8bc4c1cf325373e55e5aee331672119bb07e4dda5dc2ee82072d2f14648a0d8bb496066c082a3a134bb3ee82d68a9bcd1fed73dc4e2e3b2a8f072a"}, 0x48, 0xfffffffffffffffb) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) syz_extract_tcp_res(&(0x7f0000000240), 0x1a2a, 0x100) lseek(r1, 0x0, 0x4) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/zoneinfo\x00', 0x0, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10) 10:48:22 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(&(0x7f0000000cc0), &(0x7f0000000d00)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)=ANY=[]) lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='system.posix_acl_access\x00') 10:48:22 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000080), 0x0, 0x12023, &(0x7f00000000c0)={0x77359400}) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaab0aa850300000000485a60d3d2fa9a443c16090585fd60000000001190780000000000000000070b9d0a010101ac1e01010000004e2000089078824d242634d08def15b48ab1e1fb16deb6fc01cf08085bcdc51c53a49eff7ed67b4d64c2094224d13c0df77e0e1066d39258c738f2043dd11f000000b49a8f6b7d12c7f681cf3537162310c425d1f6d5e4f07844292f69449cfd403ea2a6"], 0x0) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x10) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgrp(0xffffffffffffffff) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000280)={0x3098, "7802b0"}, 0x6) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)={0x0, "a9932d802e8bc4c1cf325373e55e5aee331672119bb07e4dda5dc2ee82072d2f14648a0d8bb496066c082a3a134bb3ee82d68a9bcd1fed73dc4e2e3b2a8f072a"}, 0x48, 0xfffffffffffffffb) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) syz_extract_tcp_res(&(0x7f0000000240), 0x1a2a, 0x100) lseek(r1, 0x0, 0x4) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/zoneinfo\x00', 0x0, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10) 10:48:22 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000080), 0x0, 0x12023, &(0x7f00000000c0)={0x77359400}) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaab0aa850300000000485a60d3d2fa9a443c16090585fd60000000001190780000000000000000070b9d0a010101ac1e01010000004e2000089078824d242634d08def15b48ab1e1fb16deb6fc01cf08085bcdc51c53a49eff7ed67b4d64c2094224d13c0df77e0e1066d39258c738f2043dd11f000000b49a8f6b7d12c7f681cf3537162310c425d1f6d5e4f07844292f69449cfd403ea2a6"], 0x0) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x10) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgrp(0xffffffffffffffff) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000280)={0x3098, "7802b0"}, 0x6) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)={0x0, "a9932d802e8bc4c1cf325373e55e5aee331672119bb07e4dda5dc2ee82072d2f14648a0d8bb496066c082a3a134bb3ee82d68a9bcd1fed73dc4e2e3b2a8f072a"}, 0x48, 0xfffffffffffffffb) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) syz_extract_tcp_res(&(0x7f0000000240), 0x1a2a, 0x100) lseek(r1, 0x0, 0x4) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/zoneinfo\x00', 0x0, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10) 10:48:22 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$sock_int(r0, 0x1, 0x46, &(0x7f0000000000), 0x4) 10:48:22 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000300)={0x0, 0x3}) 10:48:22 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r0, &(0x7f0000000300)=""/173, 0xad, 0x2) [ 124.338265] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list 10:48:22 executing program 7: syz_mount_image$tmpfs(&(0x7f0000000500), &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)) getxattr(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=@random={'user.', '\x00'}, 0x0, 0x0) 10:48:22 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r0, &(0x7f0000000300)=""/173, 0xad, 0x2) 10:48:22 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000080), 0x0, 0x12023, &(0x7f00000000c0)={0x77359400}) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaab0aa850300000000485a60d3d2fa9a443c16090585fd60000000001190780000000000000000070b9d0a010101ac1e01010000004e2000089078824d242634d08def15b48ab1e1fb16deb6fc01cf08085bcdc51c53a49eff7ed67b4d64c2094224d13c0df77e0e1066d39258c738f2043dd11f000000b49a8f6b7d12c7f681cf3537162310c425d1f6d5e4f07844292f69449cfd403ea2a6"], 0x0) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x10) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgrp(0xffffffffffffffff) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000280)={0x3098, "7802b0"}, 0x6) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)={0x0, "a9932d802e8bc4c1cf325373e55e5aee331672119bb07e4dda5dc2ee82072d2f14648a0d8bb496066c082a3a134bb3ee82d68a9bcd1fed73dc4e2e3b2a8f072a"}, 0x48, 0xfffffffffffffffb) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) syz_extract_tcp_res(&(0x7f0000000240), 0x1a2a, 0x100) lseek(r1, 0x0, 0x4) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/zoneinfo\x00', 0x0, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10) 10:48:22 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000300)={0x0, 0x3}) 10:48:22 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$sock_int(r0, 0x1, 0x46, &(0x7f0000000000), 0x4) 10:48:22 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000300)={0x0, 0x3}) 10:48:22 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(&(0x7f0000000cc0), &(0x7f0000000d00)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)=ANY=[]) lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='system.posix_acl_access\x00') 10:48:22 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r0, &(0x7f0000000300)=""/173, 0xad, 0x2) 10:48:22 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000300)={0x0, 0x3}) 10:48:22 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$sock_int(r0, 0x1, 0x46, &(0x7f0000000000), 0x4) 10:48:22 executing program 7: syz_mount_image$tmpfs(&(0x7f0000000500), &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)) getxattr(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=@random={'user.', '\x00'}, 0x0, 0x0) 10:48:22 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 10:48:22 executing program 5: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r1, 0x0) 10:48:22 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$sock_int(r0, 0x1, 0x46, &(0x7f0000000000), 0x4) 10:48:22 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_buf(r0, 0x29, 0x3c, 0x0, 0x0) 10:48:22 executing program 7: syz_mount_image$tmpfs(&(0x7f0000000500), &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)) getxattr(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=@random={'user.', '\x00'}, 0x0, 0x0) 10:48:22 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000300)={0x0, 0x3}) 10:48:22 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_buf(r0, 0x29, 0x3c, 0x0, 0x0) 10:48:22 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000019bc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f000001a080)=ANY=[@ANYBLOB='4'], 0x38}}], 0x1, 0x0, 0x0) sendmmsg$unix(r0, &(0x7f0000019180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f000001a080), 0x18}}], 0x4d, 0x0) [ 124.770152] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 10:48:23 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000019bc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f000001a080)=ANY=[@ANYBLOB='4'], 0x38}}], 0x1, 0x0, 0x0) sendmmsg$unix(r0, &(0x7f0000019180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f000001a080), 0x18}}], 0x4d, 0x0) [ 124.823726] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 124.877573] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 125.189976] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 125.239827] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 10:48:23 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(&(0x7f0000000cc0), &(0x7f0000000d00)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)=ANY=[]) lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='system.posix_acl_access\x00') 10:48:23 executing program 1: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) alarm(0x200) 10:48:23 executing program 5: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r1, 0x0) 10:48:23 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000019bc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f000001a080)=ANY=[@ANYBLOB='4'], 0x38}}], 0x1, 0x0, 0x0) sendmmsg$unix(r0, &(0x7f0000019180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f000001a080), 0x18}}], 0x4d, 0x0) 10:48:23 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000300)={0x0, 0x3}) 10:48:23 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_buf(r0, 0x29, 0x3c, 0x0, 0x0) 10:48:23 executing program 7: syz_mount_image$tmpfs(&(0x7f0000000500), &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)) getxattr(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=@random={'user.', '\x00'}, 0x0, 0x0) 10:48:23 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 10:48:23 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000019bc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f000001a080)=ANY=[@ANYBLOB='4'], 0x38}}], 0x1, 0x0, 0x0) sendmmsg$unix(r0, &(0x7f0000019180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f000001a080), 0x18}}], 0x4d, 0x0) 10:48:23 executing program 5: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r1, 0x0) [ 125.436479] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 10:48:23 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(&(0x7f0000000cc0), &(0x7f0000000d00)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)=ANY=[]) lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='system.posix_acl_access\x00') 10:48:23 executing program 1: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) alarm(0x200) 10:48:23 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000300)={0x0, 0x3}) 10:48:23 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_buf(r0, 0x29, 0x3c, 0x0, 0x0) 10:48:23 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) [ 125.504926] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 125.618048] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 125.645811] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 125.686570] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 125.742230] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 128.062044] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 128.063934] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 128.068818] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 128.071697] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 128.073564] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 130.100479] Bluetooth: hci6: command tx timeout [ 132.151566] Bluetooth: hci6: command tx timeout [ 134.196531] Bluetooth: hci6: command tx timeout [ 135.892406] unregister_netdevice: waiting for wlan0 to become free. Usage count = 2 [ 136.244418] Bluetooth: hci6: command tx timeout [ 144.638667] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.639782] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 144.679934] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.681021] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 144.836948] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 144.868128] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 144.869494] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 144.892383] wlan1: authenticated [ 144.892584] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 144.894724] wlan1: associate with 08:02:11:00:00:00 (try 1/3) [ 144.949370] wlan1: RX AssocResp from 08:02:11:00:00:00 (capab=0x1 status=0 aid=1) [ 144.950347] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 144.950781] wlan1: associated 10:48:43 executing program 1: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) alarm(0x200) 10:48:43 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 10:48:43 executing program 5: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r1, 0x0) 10:48:43 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 10:48:43 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 10:48:43 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 10:48:43 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 10:48:43 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000001180)=[{&(0x7f0000000000)="a20e73f1b1812c8df6967520cdbfb383417a9437ee7abadfd3289b313745", 0x1e}], 0x1) [ 145.376784] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 145.382139] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 10:48:43 executing program 1: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) alarm(0x200) [ 145.421879] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 145.431723] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 145.432960] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 145.445515] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 145.449172] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 10:48:43 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8955, &(0x7f0000000100)={{0x2, 0x0, @remote}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @private}}) 10:48:43 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000001180)=[{&(0x7f0000000000)="a20e73f1b1812c8df6967520cdbfb383417a9437ee7abadfd3289b313745", 0x1e}], 0x1) 10:48:43 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003580)=[{{&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000000880)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x8040) [ 145.496529] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 145.506515] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 145.514977] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 145.523746] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 145.528495] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 145.558590] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 145.570464] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 145.596078] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium VM DIAGNOSIS: 10:48:34 Registers: info registers vcpu 0 RAX=0000000000000001 RBX=ffff88801c907be0 RCX=0000000000000001 RDX=0000000000000000 RSI=ffffffff81358702 RDI=ffffffff85c1c760 RBP=ffff88801c900000 RSP=ffff88801c907650 R8 =0000000000000001 R9 =ffff88801c907720 R10=000000000003be53 R11=00000000000c497b R12=ffff88801c907701 R13=ffff88801c907728 R14=ffff88801c907bb0 R15=ffff88801c9076e0 RIP=ffffffff8151d8ca RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e55dd000 00000000 00000000 LDT=0000 fffffe2300000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f63f0acb620 CR3=000000000a144000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=2034333a38343a303120393220677541 XMM01=5d3630343239382e35333120205b203a XMM02=202e6565726620656d6f636562206f74 XMM03=6177203a65636976656474656e5f7265 XMM04=00007f652643610000007f6526436140 XMM05=0000000000000000f189ab042332b600 XMM06=00007f65264361400000000000000000 XMM07=00000000000000000000000000000000 XMM08=2e726f7475636578652d7a7973223d6d XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000075ac5 RBX=0000000000000001 RCX=ffffffff84bb95f7 RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff814c8304 RBP=dffffc0000000000 RSP=ffff888009717e58 R8 =0000000000000001 R9 =ffffed100d9e630a R10=ffff88806cf31853 R11=0000000000000001 R12=ffffffff8643ac50 R13=1ffff110012e2fd2 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff84bb831e RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e56dd000 00000000 00000000 LDT=0000 fffffe7400000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ff2c0c262d0 CR3=000000000bf9d000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ff000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=ffbd4ebe4c2ff636000000000014d9c8 XMM05=d3fdd5f48436fbd700000000000aead0 XMM06=275b31a7f41d232700000000000ae988 XMM07=a1fcdcf819d7e1e500000000000ae728 XMM08=44495f474f4c5359530069253d595449 XMM09=00000000000000000000000000000000 XMM10=00000000000020000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000