Warning: Permanently added '[localhost]:53509' (ECDSA) to the list of known hosts. 2026/01/14 08:54:45 fuzzer started 2026/01/14 08:54:45 dialing manager at localhost:46753 syzkaller login: [ 43.744484] cgroup: Unknown subsys name 'net' [ 43.806027] cgroup: Unknown subsys name 'cpuset' [ 43.822682] cgroup: Unknown subsys name 'rlimit' 2026/01/14 08:54:55 syscalls: 2214 2026/01/14 08:54:55 code coverage: enabled 2026/01/14 08:54:55 comparison tracing: enabled 2026/01/14 08:54:55 extra coverage: enabled 2026/01/14 08:54:55 setuid sandbox: enabled 2026/01/14 08:54:55 namespace sandbox: enabled 2026/01/14 08:54:55 Android sandbox: enabled 2026/01/14 08:54:55 fault injection: enabled 2026/01/14 08:54:55 leak checking: enabled 2026/01/14 08:54:55 net packet injection: enabled 2026/01/14 08:54:55 net device setup: enabled 2026/01/14 08:54:55 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2026/01/14 08:54:55 devlink PCI setup: PCI device 0000:00:10.0 is not available 2026/01/14 08:54:55 USB emulation: enabled 2026/01/14 08:54:55 hci packet injection: enabled 2026/01/14 08:54:55 wifi device emulation: enabled 2026/01/14 08:54:55 802.15.4 emulation: enabled 2026/01/14 08:54:55 fetching corpus: 0, signal 0/2000 (executing program) 2026/01/14 08:54:55 fetching corpus: 50, signal 27514/30989 (executing program) 2026/01/14 08:54:55 fetching corpus: 100, signal 36993/41956 (executing program) 2026/01/14 08:54:55 fetching corpus: 150, signal 47179/53412 (executing program) 2026/01/14 08:54:55 fetching corpus: 200, signal 54949/62342 (executing program) 2026/01/14 08:54:55 fetching corpus: 250, signal 61211/69732 (executing program) 2026/01/14 08:54:55 fetching corpus: 300, signal 66024/75620 (executing program) 2026/01/14 08:54:55 fetching corpus: 350, signal 69298/80014 (executing program) 2026/01/14 08:54:55 fetching corpus: 400, signal 73522/85251 (executing program) 2026/01/14 08:54:56 fetching corpus: 450, signal 77764/90355 (executing program) 2026/01/14 08:54:56 fetching corpus: 500, signal 80890/94401 (executing program) 2026/01/14 08:54:56 fetching corpus: 550, signal 83442/97873 (executing program) 2026/01/14 08:54:56 fetching corpus: 600, signal 86113/101411 (executing program) 2026/01/14 08:54:56 fetching corpus: 650, signal 90913/106710 (executing program) 2026/01/14 08:54:56 fetching corpus: 700, signal 92656/109345 (executing program) 2026/01/14 08:54:56 fetching corpus: 750, signal 94416/111989 (executing program) 2026/01/14 08:54:56 fetching corpus: 800, signal 96734/115021 (executing program) 2026/01/14 08:54:56 fetching corpus: 850, signal 98344/117444 (executing program) 2026/01/14 08:54:56 fetching corpus: 900, signal 102045/121526 (executing program) 2026/01/14 08:54:56 fetching corpus: 950, signal 104423/124497 (executing program) 2026/01/14 08:54:57 fetching corpus: 1000, signal 106549/127153 (executing program) 2026/01/14 08:54:57 fetching corpus: 1050, signal 108043/129342 (executing program) 2026/01/14 08:54:57 fetching corpus: 1100, signal 109268/131259 (executing program) 2026/01/14 08:54:57 fetching corpus: 1150, signal 110852/133418 (executing program) 2026/01/14 08:54:57 fetching corpus: 1200, signal 111841/135161 (executing program) 2026/01/14 08:54:57 fetching corpus: 1250, signal 113736/137538 (executing program) 2026/01/14 08:54:57 fetching corpus: 1300, signal 115766/139998 (executing program) 2026/01/14 08:54:57 fetching corpus: 1350, signal 117032/141788 (executing program) 2026/01/14 08:54:57 fetching corpus: 1400, signal 118603/143823 (executing program) 2026/01/14 08:54:57 fetching corpus: 1450, signal 120006/145707 (executing program) 2026/01/14 08:54:58 fetching corpus: 1500, signal 121259/147488 (executing program) 2026/01/14 08:54:58 fetching corpus: 1550, signal 122244/148997 (executing program) 2026/01/14 08:54:58 fetching corpus: 1600, signal 123440/150642 (executing program) 2026/01/14 08:54:58 fetching corpus: 1650, signal 124607/152249 (executing program) 2026/01/14 08:54:58 fetching corpus: 1700, signal 126023/153982 (executing program) 2026/01/14 08:54:58 fetching corpus: 1750, signal 127326/155632 (executing program) 2026/01/14 08:54:58 fetching corpus: 1800, signal 128649/157235 (executing program) 2026/01/14 08:54:58 fetching corpus: 1850, signal 129624/158624 (executing program) 2026/01/14 08:54:59 fetching corpus: 1900, signal 130809/160125 (executing program) 2026/01/14 08:54:59 fetching corpus: 1950, signal 132031/161652 (executing program) 2026/01/14 08:54:59 fetching corpus: 2000, signal 133098/163061 (executing program) 2026/01/14 08:54:59 fetching corpus: 2050, signal 134020/164363 (executing program) 2026/01/14 08:54:59 fetching corpus: 2100, signal 136103/166333 (executing program) 2026/01/14 08:54:59 fetching corpus: 2150, signal 136997/167520 (executing program) 2026/01/14 08:54:59 fetching corpus: 2200, signal 137973/168763 (executing program) 2026/01/14 08:54:59 fetching corpus: 2250, signal 139865/170518 (executing program) 2026/01/14 08:54:59 fetching corpus: 2300, signal 140847/171765 (executing program) 2026/01/14 08:55:00 fetching corpus: 2350, signal 141567/172810 (executing program) 2026/01/14 08:55:00 fetching corpus: 2400, signal 142662/174017 (executing program) 2026/01/14 08:55:00 fetching corpus: 2450, signal 143341/175019 (executing program) 2026/01/14 08:55:00 fetching corpus: 2500, signal 143956/175979 (executing program) 2026/01/14 08:55:00 fetching corpus: 2550, signal 144454/176817 (executing program) 2026/01/14 08:55:00 fetching corpus: 2600, signal 145274/177847 (executing program) 2026/01/14 08:55:00 fetching corpus: 2650, signal 146169/178933 (executing program) 2026/01/14 08:55:00 fetching corpus: 2700, signal 147270/180064 (executing program) 2026/01/14 08:55:00 fetching corpus: 2750, signal 147893/180945 (executing program) 2026/01/14 08:55:01 fetching corpus: 2800, signal 148832/181965 (executing program) 2026/01/14 08:55:01 fetching corpus: 2850, signal 149484/182849 (executing program) 2026/01/14 08:55:01 fetching corpus: 2900, signal 150049/183640 (executing program) 2026/01/14 08:55:01 fetching corpus: 2950, signal 150807/184550 (executing program) 2026/01/14 08:55:01 fetching corpus: 3000, signal 151892/185582 (executing program) 2026/01/14 08:55:01 fetching corpus: 3050, signal 152402/186349 (executing program) 2026/01/14 08:55:01 fetching corpus: 3100, signal 153053/187163 (executing program) 2026/01/14 08:55:01 fetching corpus: 3150, signal 153986/188087 (executing program) 2026/01/14 08:55:01 fetching corpus: 3200, signal 154690/188939 (executing program) 2026/01/14 08:55:02 fetching corpus: 3250, signal 155492/189745 (executing program) 2026/01/14 08:55:02 fetching corpus: 3300, signal 156100/190488 (executing program) 2026/01/14 08:55:02 fetching corpus: 3350, signal 156813/191279 (executing program) 2026/01/14 08:55:02 fetching corpus: 3400, signal 157475/192030 (executing program) 2026/01/14 08:55:02 fetching corpus: 3450, signal 158000/192641 (executing program) 2026/01/14 08:55:02 fetching corpus: 3500, signal 158867/193402 (executing program) 2026/01/14 08:55:02 fetching corpus: 3550, signal 159695/194146 (executing program) 2026/01/14 08:55:02 fetching corpus: 3600, signal 160678/194959 (executing program) 2026/01/14 08:55:02 fetching corpus: 3650, signal 161490/195626 (executing program) 2026/01/14 08:55:02 fetching corpus: 3700, signal 162027/196245 (executing program) 2026/01/14 08:55:03 fetching corpus: 3750, signal 162669/196901 (executing program) 2026/01/14 08:55:03 fetching corpus: 3800, signal 163495/197579 (executing program) 2026/01/14 08:55:03 fetching corpus: 3850, signal 164088/198189 (executing program) 2026/01/14 08:55:03 fetching corpus: 3900, signal 164686/198760 (executing program) 2026/01/14 08:55:03 fetching corpus: 3950, signal 165269/199297 (executing program) 2026/01/14 08:55:03 fetching corpus: 4000, signal 165788/199835 (executing program) 2026/01/14 08:55:03 fetching corpus: 4050, signal 166281/200363 (executing program) 2026/01/14 08:55:03 fetching corpus: 4100, signal 166970/200961 (executing program) 2026/01/14 08:55:03 fetching corpus: 4150, signal 167380/201455 (executing program) 2026/01/14 08:55:03 fetching corpus: 4200, signal 168653/202106 (executing program) 2026/01/14 08:55:04 fetching corpus: 4250, signal 169305/202642 (executing program) 2026/01/14 08:55:04 fetching corpus: 4300, signal 170321/203188 (executing program) 2026/01/14 08:55:04 fetching corpus: 4350, signal 170862/203676 (executing program) 2026/01/14 08:55:04 fetching corpus: 4400, signal 171302/204088 (executing program) 2026/01/14 08:55:04 fetching corpus: 4450, signal 171973/204555 (executing program) 2026/01/14 08:55:04 fetching corpus: 4500, signal 172713/205006 (executing program) 2026/01/14 08:55:04 fetching corpus: 4550, signal 173107/205405 (executing program) 2026/01/14 08:55:04 fetching corpus: 4600, signal 173638/205802 (executing program) 2026/01/14 08:55:04 fetching corpus: 4650, signal 173952/206203 (executing program) 2026/01/14 08:55:04 fetching corpus: 4700, signal 174497/206605 (executing program) 2026/01/14 08:55:05 fetching corpus: 4750, signal 174849/206975 (executing program) 2026/01/14 08:55:05 fetching corpus: 4800, signal 175218/207349 (executing program) 2026/01/14 08:55:05 fetching corpus: 4850, signal 175781/207720 (executing program) 2026/01/14 08:55:05 fetching corpus: 4900, signal 176210/208064 (executing program) 2026/01/14 08:55:05 fetching corpus: 4950, signal 176678/208401 (executing program) 2026/01/14 08:55:05 fetching corpus: 5000, signal 177425/208744 (executing program) 2026/01/14 08:55:05 fetching corpus: 5050, signal 177921/209051 (executing program) 2026/01/14 08:55:05 fetching corpus: 5100, signal 178376/209368 (executing program) 2026/01/14 08:55:05 fetching corpus: 5150, signal 178942/209660 (executing program) 2026/01/14 08:55:06 fetching corpus: 5200, signal 179361/209872 (executing program) 2026/01/14 08:55:06 fetching corpus: 5250, signal 179731/209872 (executing program) 2026/01/14 08:55:06 fetching corpus: 5300, signal 180215/209872 (executing program) 2026/01/14 08:55:06 fetching corpus: 5350, signal 180598/209883 (executing program) 2026/01/14 08:55:06 fetching corpus: 5400, signal 180949/209883 (executing program) 2026/01/14 08:55:06 fetching corpus: 5450, signal 181298/209883 (executing program) 2026/01/14 08:55:06 fetching corpus: 5500, signal 181783/209883 (executing program) 2026/01/14 08:55:06 fetching corpus: 5550, signal 182104/209884 (executing program) 2026/01/14 08:55:07 fetching corpus: 5600, signal 182731/209884 (executing program) 2026/01/14 08:55:07 fetching corpus: 5650, signal 183423/209884 (executing program) 2026/01/14 08:55:07 fetching corpus: 5700, signal 183897/209884 (executing program) 2026/01/14 08:55:07 fetching corpus: 5750, signal 184431/209884 (executing program) 2026/01/14 08:55:07 fetching corpus: 5800, signal 184785/209884 (executing program) 2026/01/14 08:55:07 fetching corpus: 5850, signal 185321/209884 (executing program) 2026/01/14 08:55:07 fetching corpus: 5900, signal 185685/209885 (executing program) 2026/01/14 08:55:07 fetching corpus: 5950, signal 186003/209885 (executing program) 2026/01/14 08:55:08 fetching corpus: 6000, signal 186490/209885 (executing program) 2026/01/14 08:55:08 fetching corpus: 6050, signal 186955/209885 (executing program) 2026/01/14 08:55:08 fetching corpus: 6100, signal 187300/209885 (executing program) 2026/01/14 08:55:08 fetching corpus: 6150, signal 187632/209885 (executing program) 2026/01/14 08:55:08 fetching corpus: 6200, signal 188018/209886 (executing program) 2026/01/14 08:55:08 fetching corpus: 6250, signal 188368/209886 (executing program) 2026/01/14 08:55:08 fetching corpus: 6300, signal 188766/209888 (executing program) 2026/01/14 08:55:08 fetching corpus: 6350, signal 189470/209888 (executing program) 2026/01/14 08:55:08 fetching corpus: 6400, signal 190029/209888 (executing program) 2026/01/14 08:55:08 fetching corpus: 6450, signal 190524/209888 (executing program) 2026/01/14 08:55:08 fetching corpus: 6500, signal 190876/209888 (executing program) 2026/01/14 08:55:08 fetching corpus: 6550, signal 191264/209890 (executing program) 2026/01/14 08:55:08 fetching corpus: 6600, signal 191583/209890 (executing program) 2026/01/14 08:55:09 fetching corpus: 6650, signal 191956/209890 (executing program) 2026/01/14 08:55:09 fetching corpus: 6700, signal 192464/209890 (executing program) 2026/01/14 08:55:09 fetching corpus: 6750, signal 192882/209890 (executing program) 2026/01/14 08:55:09 fetching corpus: 6800, signal 193230/209890 (executing program) 2026/01/14 08:55:09 fetching corpus: 6850, signal 193562/209892 (executing program) 2026/01/14 08:55:09 fetching corpus: 6900, signal 194106/209892 (executing program) 2026/01/14 08:55:09 fetching corpus: 6950, signal 194353/209892 (executing program) 2026/01/14 08:55:09 fetching corpus: 7000, signal 194578/209895 (executing program) 2026/01/14 08:55:09 fetching corpus: 7050, signal 194968/209895 (executing program) 2026/01/14 08:55:09 fetching corpus: 7100, signal 195370/209895 (executing program) 2026/01/14 08:55:09 fetching corpus: 7150, signal 195701/209895 (executing program) 2026/01/14 08:55:09 fetching corpus: 7200, signal 196036/209895 (executing program) 2026/01/14 08:55:10 fetching corpus: 7250, signal 196341/209895 (executing program) 2026/01/14 08:55:10 fetching corpus: 7300, signal 196614/209895 (executing program) 2026/01/14 08:55:10 fetching corpus: 7350, signal 196916/209895 (executing program) 2026/01/14 08:55:10 fetching corpus: 7400, signal 197224/209896 (executing program) 2026/01/14 08:55:10 fetching corpus: 7450, signal 197567/209896 (executing program) 2026/01/14 08:55:10 fetching corpus: 7500, signal 197743/209897 (executing program) 2026/01/14 08:55:10 fetching corpus: 7550, signal 198114/209897 (executing program) 2026/01/14 08:55:10 fetching corpus: 7600, signal 198904/209897 (executing program) 2026/01/14 08:55:10 fetching corpus: 7650, signal 199226/209897 (executing program) 2026/01/14 08:55:10 fetching corpus: 7700, signal 199641/209897 (executing program) 2026/01/14 08:55:11 fetching corpus: 7750, signal 200004/209897 (executing program) 2026/01/14 08:55:11 fetching corpus: 7800, signal 200320/209897 (executing program) 2026/01/14 08:55:11 fetching corpus: 7850, signal 200577/209898 (executing program) 2026/01/14 08:55:11 fetching corpus: 7900, signal 200858/209898 (executing program) 2026/01/14 08:55:11 fetching corpus: 7950, signal 201117/209898 (executing program) 2026/01/14 08:55:11 fetching corpus: 8000, signal 201559/209898 (executing program) 2026/01/14 08:55:11 fetching corpus: 8050, signal 201921/209898 (executing program) 2026/01/14 08:55:11 fetching corpus: 8100, signal 202263/209898 (executing program) 2026/01/14 08:55:11 fetching corpus: 8150, signal 202729/209898 (executing program) 2026/01/14 08:55:12 fetching corpus: 8200, signal 203102/209901 (executing program) 2026/01/14 08:55:12 fetching corpus: 8250, signal 203390/209903 (executing program) 2026/01/14 08:55:12 fetching corpus: 8300, signal 203604/209903 (executing program) 2026/01/14 08:55:12 fetching corpus: 8350, signal 203940/209903 (executing program) 2026/01/14 08:55:12 fetching corpus: 8400, signal 204347/209903 (executing program) 2026/01/14 08:55:12 fetching corpus: 8450, signal 204790/209903 (executing program) 2026/01/14 08:55:12 fetching corpus: 8500, signal 205139/209903 (executing program) 2026/01/14 08:55:12 fetching corpus: 8550, signal 205398/209903 (executing program) 2026/01/14 08:55:12 fetching corpus: 8600, signal 205609/209903 (executing program) 2026/01/14 08:55:12 fetching corpus: 8650, signal 205889/209903 (executing program) 2026/01/14 08:55:13 fetching corpus: 8700, signal 206171/209903 (executing program) 2026/01/14 08:55:13 fetching corpus: 8750, signal 206404/209903 (executing program) 2026/01/14 08:55:13 fetching corpus: 8800, signal 206611/209903 (executing program) 2026/01/14 08:55:13 fetching corpus: 8850, signal 206887/209903 (executing program) 2026/01/14 08:55:13 fetching corpus: 8900, signal 207134/209903 (executing program) 2026/01/14 08:55:13 fetching corpus: 8950, signal 207324/209907 (executing program) 2026/01/14 08:55:13 fetching corpus: 9000, signal 207595/209907 (executing program) 2026/01/14 08:55:13 fetching corpus: 9050, signal 207882/209907 (executing program) 2026/01/14 08:55:13 fetching corpus: 9100, signal 208267/209908 (executing program) 2026/01/14 08:55:13 fetching corpus: 9127, signal 208409/209908 (executing program) 2026/01/14 08:55:13 fetching corpus: 9127, signal 208409/209908 (executing program) 2026/01/14 08:55:16 starting 8 fuzzer processes 08:55:16 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) dup2(r1, r0) r2 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000140)) close_range(r0, 0xffffffffffffffff, 0x0) 08:55:16 executing program 1: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x91, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, 0x0, 0x0) r1 = fcntl$getown(r0, 0x9) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/udp\x00') pread64(r2, &(0x7f0000000100)=""/4096, 0x1000, 0x0) r3 = syz_open_pts(r2, 0x101800) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001100)=ANY=[@ANYBLOB="c00000001900030000000000000000007f00000e000000000000000000000000ff0200000000000000000000000000010000000000000000020000000000000031e94626d1a6fca911e98c597d70545a51e5b4cee3dc7ecbf0f1978d672f23b948ceb105477039647c9106a83737840b33ab16249a53bc74a34ed9d8e1176a345b253bc7feeab3a042489c655376fc4992c59a445cab7e45cf2ee94a520307533f7ec6d7", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000009b9c876db5ac919b00"/120], 0xc0}}, 0x0) dup3(r3, r4, 0x0) r5 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0xc2, 0xfc, 0x2, 0x9, 0x0, 0xff, 0x200, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x83, 0x4, @perf_config_ext={0x4, 0x8df}, 0x20, 0x1f, 0x0, 0x6, 0x80000000, 0xfff, 0x5, 0x0, 0x2, 0x0, 0x3f}, r1, 0xffffffffffffffff, r2, 0x0) dup2(r0, r5) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001600)=@polexpire={0xc0, 0x19, 0x3, 0x0, 0x0, {{{@in=@loopback=0x7f00000e, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}}, 0xc0}}, 0x0) 08:55:16 executing program 2: perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 08:55:16 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x1c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 08:55:16 executing program 3: getpgid(0x0) [ 74.120146] audit: type=1400 audit(1768380916.159:7): avc: denied { execmem } for pid=273 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 08:55:16 executing program 6: setitimer(0x0, &(0x7f0000000000)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) getitimer(0x0, &(0x7f0000000140)) 08:55:16 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x6628, 0x0) 08:55:16 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000440), 0x0, 0x4) [ 75.215848] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 75.219469] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 75.224601] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 75.231658] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 75.235666] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 75.271669] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 75.275213] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 75.277107] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 75.282811] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 75.285542] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 75.359820] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 75.366495] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 75.369883] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 75.373106] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 75.375764] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 75.406646] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 75.408872] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 75.412838] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 75.429675] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 75.435676] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 75.438803] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 75.440240] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 75.441811] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 75.448903] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 75.452640] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 75.459677] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 75.466563] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 75.468496] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 75.470293] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 75.474924] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 75.504939] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 75.506421] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 75.513117] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 75.519114] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 75.526864] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 75.544160] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 75.552650] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 75.586417] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 75.590520] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 75.604446] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 77.250456] Bluetooth: hci0: command tx timeout [ 77.313457] Bluetooth: hci1: command tx timeout [ 77.440413] Bluetooth: hci2: command tx timeout [ 77.504354] Bluetooth: hci3: command tx timeout [ 77.567434] Bluetooth: hci4: command tx timeout [ 77.632205] Bluetooth: hci5: command tx timeout [ 77.697062] Bluetooth: hci6: command tx timeout [ 78.079490] Bluetooth: hci7: command tx timeout [ 79.297389] Bluetooth: hci0: command tx timeout [ 79.360375] Bluetooth: hci1: command tx timeout [ 79.488349] Bluetooth: hci2: command tx timeout [ 79.554232] Bluetooth: hci3: command tx timeout [ 79.616359] Bluetooth: hci4: command tx timeout [ 79.682349] Bluetooth: hci5: command tx timeout [ 79.744345] Bluetooth: hci6: command tx timeout [ 80.127745] Bluetooth: hci7: command tx timeout [ 81.345444] Bluetooth: hci0: command tx timeout [ 81.408497] Bluetooth: hci1: command tx timeout [ 81.536916] Bluetooth: hci2: command tx timeout [ 81.600514] Bluetooth: hci3: command tx timeout [ 81.664867] Bluetooth: hci4: command tx timeout [ 81.729446] Bluetooth: hci5: command tx timeout [ 81.792667] Bluetooth: hci6: command tx timeout [ 82.175392] Bluetooth: hci7: command tx timeout [ 83.391594] Bluetooth: hci0: command tx timeout [ 83.456417] Bluetooth: hci1: command tx timeout [ 83.583349] Bluetooth: hci2: command tx timeout [ 83.647384] Bluetooth: hci3: command tx timeout [ 83.711355] Bluetooth: hci4: command tx timeout [ 83.777372] Bluetooth: hci5: command tx timeout [ 83.840410] Bluetooth: hci6: command tx timeout [ 84.224327] Bluetooth: hci7: command tx timeout [ 115.082783] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.083555] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.253436] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.254054] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.321647] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.322245] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.472666] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.474538] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.520141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.522142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.560285] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.561099] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.683602] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.684185] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.744369] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.744987] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.762405] audit: type=1400 audit(1768380957.799:8): avc: denied { open } for pid=3838 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 115.764273] audit: type=1400 audit(1768380957.799:9): avc: denied { kernel } for pid=3838 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 08:55:57 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000000) 08:55:57 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg(r0, &(0x7f0000000280)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000180)="866369ed", 0x4}], 0x1}, 0x0) syz_open_dev$hiddev(0x0, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) [ 115.857684] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.858415] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.973722] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.974351] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 08:55:58 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000000) 08:55:58 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000000) 08:55:58 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x3) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r0, 0x0, 0x1, &(0x7f0000000000)=0x100, 0x4) [ 116.152522] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.153143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 08:55:58 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x3) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r0, 0x0, 0x1, &(0x7f0000000000)=0x100, 0x4) 08:55:58 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000000) [ 116.255720] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.256333] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 08:55:58 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x3) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r0, 0x0, 0x1, &(0x7f0000000000)=0x100, 0x4) [ 116.487431] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.488012] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.517971] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 116.525124] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 116.532576] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.533118] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.539727] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 116.541400] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 116.578909] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.580509] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.596776] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.597409] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 08:55:58 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x3) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r0, 0x0, 0x1, &(0x7f0000000000)=0x100, 0x4) 08:55:58 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x3) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r0, 0x0, 0x1, &(0x7f0000000000)=0x100, 0x4) 08:55:58 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) dup2(r1, r0) r2 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000140)) close_range(r0, 0xffffffffffffffff, 0x0) 08:55:58 executing program 1: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x91, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, 0x0, 0x0) r1 = fcntl$getown(r0, 0x9) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/udp\x00') pread64(r2, &(0x7f0000000100)=""/4096, 0x1000, 0x0) r3 = syz_open_pts(r2, 0x101800) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001100)=ANY=[@ANYBLOB="c00000001900030000000000000000007f00000e000000000000000000000000ff0200000000000000000000000000010000000000000000020000000000000031e94626d1a6fca911e98c597d70545a51e5b4cee3dc7ecbf0f1978d672f23b948ceb105477039647c9106a83737840b33ab16249a53bc74a34ed9d8e1176a345b253bc7feeab3a042489c655376fc4992c59a445cab7e45cf2ee94a520307533f7ec6d7", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000009b9c876db5ac919b00"/120], 0xc0}}, 0x0) dup3(r3, r4, 0x0) r5 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0xc2, 0xfc, 0x2, 0x9, 0x0, 0xff, 0x200, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x83, 0x4, @perf_config_ext={0x4, 0x8df}, 0x20, 0x1f, 0x0, 0x6, 0x80000000, 0xfff, 0x5, 0x0, 0x2, 0x0, 0x3f}, r1, 0xffffffffffffffff, r2, 0x0) dup2(r0, r5) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001600)=@polexpire={0xc0, 0x19, 0x3, 0x0, 0x0, {{{@in=@loopback=0x7f00000e, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}}, 0xc0}}, 0x0) 08:55:58 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x6628, 0x0) 08:55:58 executing program 6: setitimer(0x0, &(0x7f0000000000)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) getitimer(0x0, &(0x7f0000000140)) 08:55:58 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg(r0, &(0x7f0000000280)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000180)="866369ed", 0x4}], 0x1}, 0x0) syz_open_dev$hiddev(0x0, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 08:55:58 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000440), 0x0, 0x4) [ 116.774951] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 116.785742] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 08:55:59 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x3) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r0, 0x0, 0x1, &(0x7f0000000000)=0x100, 0x4) 08:55:59 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg(r0, &(0x7f0000000280)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000180)="866369ed", 0x4}], 0x1}, 0x0) syz_open_dev$hiddev(0x0, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 08:55:59 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x6628, 0x0) 08:55:59 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000440), 0x0, 0x4) 08:55:59 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000440), 0x0, 0x4) 08:55:59 executing program 1: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x91, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, 0x0, 0x0) r1 = fcntl$getown(r0, 0x9) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/udp\x00') pread64(r2, &(0x7f0000000100)=""/4096, 0x1000, 0x0) r3 = syz_open_pts(r2, 0x101800) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001100)=ANY=[@ANYBLOB="c00000001900030000000000000000007f00000e000000000000000000000000ff0200000000000000000000000000010000000000000000020000000000000031e94626d1a6fca911e98c597d70545a51e5b4cee3dc7ecbf0f1978d672f23b948ceb105477039647c9106a83737840b33ab16249a53bc74a34ed9d8e1176a345b253bc7feeab3a042489c655376fc4992c59a445cab7e45cf2ee94a520307533f7ec6d7", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000009b9c876db5ac919b00"/120], 0xc0}}, 0x0) dup3(r3, r4, 0x0) r5 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0xc2, 0xfc, 0x2, 0x9, 0x0, 0xff, 0x200, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x83, 0x4, @perf_config_ext={0x4, 0x8df}, 0x20, 0x1f, 0x0, 0x6, 0x80000000, 0xfff, 0x5, 0x0, 0x2, 0x0, 0x3f}, r1, 0xffffffffffffffff, r2, 0x0) dup2(r0, r5) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001600)=@polexpire={0xc0, 0x19, 0x3, 0x0, 0x0, {{{@in=@loopback=0x7f00000e, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}}, 0xc0}}, 0x0) 08:55:59 executing program 6: setitimer(0x0, &(0x7f0000000000)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) getitimer(0x0, &(0x7f0000000140)) 08:55:59 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) dup2(r1, r0) r2 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000140)) close_range(r0, 0xffffffffffffffff, 0x0) 08:55:59 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x3) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r0, 0x0, 0x1, &(0x7f0000000000)=0x100, 0x4) 08:55:59 executing program 6: setitimer(0x0, &(0x7f0000000000)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) getitimer(0x0, &(0x7f0000000140)) 08:55:59 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000440), 0x0, 0x4) [ 117.701650] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 117.718572] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 08:55:59 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000440), 0x0, 0x4) 08:55:59 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x6628, 0x0) 08:55:59 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000440), 0x0, 0x4) 08:55:59 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) dup2(r1, r0) r2 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000140)) close_range(r0, 0xffffffffffffffff, 0x0) 08:56:00 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg(r0, &(0x7f0000000280)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000180)="866369ed", 0x4}], 0x1}, 0x0) syz_open_dev$hiddev(0x0, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 08:56:00 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000440), 0x0, 0x4) 08:56:00 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg(r0, &(0x7f0000000280)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000180)="866369ed", 0x4}], 0x1}, 0x0) syz_open_dev$hiddev(0x0, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 08:56:00 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000440), 0x0, 0x4) 08:56:00 executing program 0: setitimer(0x0, &(0x7f0000000000)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) getitimer(0x0, &(0x7f0000000140)) 08:56:00 executing program 1: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x91, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, 0x0, 0x0) r1 = fcntl$getown(r0, 0x9) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/udp\x00') pread64(r2, &(0x7f0000000100)=""/4096, 0x1000, 0x0) r3 = syz_open_pts(r2, 0x101800) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001100)=ANY=[@ANYBLOB="c00000001900030000000000000000007f00000e000000000000000000000000ff0200000000000000000000000000010000000000000000020000000000000031e94626d1a6fca911e98c597d70545a51e5b4cee3dc7ecbf0f1978d672f23b948ceb105477039647c9106a83737840b33ab16249a53bc74a34ed9d8e1176a345b253bc7feeab3a042489c655376fc4992c59a445cab7e45cf2ee94a520307533f7ec6d7", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000009b9c876db5ac919b00"/120], 0xc0}}, 0x0) dup3(r3, r4, 0x0) r5 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0xc2, 0xfc, 0x2, 0x9, 0x0, 0xff, 0x200, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x83, 0x4, @perf_config_ext={0x4, 0x8df}, 0x20, 0x1f, 0x0, 0x6, 0x80000000, 0xfff, 0x5, 0x0, 0x2, 0x0, 0x3f}, r1, 0xffffffffffffffff, r2, 0x0) dup2(r0, r5) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001600)=@polexpire={0xc0, 0x19, 0x3, 0x0, 0x0, {{{@in=@loopback=0x7f00000e, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}}, 0xc0}}, 0x0) 08:56:00 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) dup2(r1, r0) r2 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000140)) close_range(r0, 0xffffffffffffffff, 0x0) 08:56:00 executing program 3: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x91, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, 0x0, 0x0) r1 = fcntl$getown(r0, 0x9) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/udp\x00') pread64(r2, &(0x7f0000000100)=""/4096, 0x1000, 0x0) r3 = syz_open_pts(r2, 0x101800) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001100)=ANY=[@ANYBLOB="c00000001900030000000000000000007f00000e000000000000000000000000ff0200000000000000000000000000010000000000000000020000000000000031e94626d1a6fca911e98c597d70545a51e5b4cee3dc7ecbf0f1978d672f23b948ceb105477039647c9106a83737840b33ab16249a53bc74a34ed9d8e1176a345b253bc7feeab3a042489c655376fc4992c59a445cab7e45cf2ee94a520307533f7ec6d7", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000009b9c876db5ac919b00"/120], 0xc0}}, 0x0) dup3(r3, r4, 0x0) r5 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0xc2, 0xfc, 0x2, 0x9, 0x0, 0xff, 0x200, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x83, 0x4, @perf_config_ext={0x4, 0x8df}, 0x20, 0x1f, 0x0, 0x6, 0x80000000, 0xfff, 0x5, 0x0, 0x2, 0x0, 0x3f}, r1, 0xffffffffffffffff, r2, 0x0) dup2(r0, r5) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001600)=@polexpire={0xc0, 0x19, 0x3, 0x0, 0x0, {{{@in=@loopback=0x7f00000e, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}}, 0xc0}}, 0x0) [ 118.580295] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 118.583112] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 08:56:00 executing program 0: setitimer(0x0, &(0x7f0000000000)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) getitimer(0x0, &(0x7f0000000140)) 08:56:00 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x99ad) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000440), 0x0, 0x4) 08:56:00 executing program 3: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x91, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, 0x0, 0x0) r1 = fcntl$getown(r0, 0x9) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/udp\x00') pread64(r2, &(0x7f0000000100)=""/4096, 0x1000, 0x0) r3 = syz_open_pts(r2, 0x101800) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001100)=ANY=[@ANYBLOB="c00000001900030000000000000000007f00000e000000000000000000000000ff0200000000000000000000000000010000000000000000020000000000000031e94626d1a6fca911e98c597d70545a51e5b4cee3dc7ecbf0f1978d672f23b948ceb105477039647c9106a83737840b33ab16249a53bc74a34ed9d8e1176a345b253bc7feeab3a042489c655376fc4992c59a445cab7e45cf2ee94a520307533f7ec6d7", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000009b9c876db5ac919b00"/120], 0xc0}}, 0x0) dup3(r3, r4, 0x0) r5 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0xc2, 0xfc, 0x2, 0x9, 0x0, 0xff, 0x200, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x83, 0x4, @perf_config_ext={0x4, 0x8df}, 0x20, 0x1f, 0x0, 0x6, 0x80000000, 0xfff, 0x5, 0x0, 0x2, 0x0, 0x3f}, r1, 0xffffffffffffffff, r2, 0x0) dup2(r0, r5) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001600)=@polexpire={0xc0, 0x19, 0x3, 0x0, 0x0, {{{@in=@loopback=0x7f00000e, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}}, 0xc0}}, 0x0) 08:56:00 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) dup2(r1, r0) r2 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000140)) close_range(r0, 0xffffffffffffffff, 0x0) 08:56:00 executing program 0: setitimer(0x0, &(0x7f0000000000)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) getitimer(0x0, &(0x7f0000000140)) 08:56:00 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@fat=@usefree}]}) [ 118.701293] No source specified [ 118.703747] No source specified 08:56:00 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@fat=@usefree}]}) [ 118.735484] No source specified 08:56:00 executing program 0: r0 = getpgrp(0x0) wait4(r0, 0x0, 0x0, 0x0) 08:56:01 executing program 0: r0 = getpgrp(0x0) wait4(r0, 0x0, 0x0, 0x0) 08:56:01 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) dup2(r1, r0) r2 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000140)) close_range(r0, 0xffffffffffffffff, 0x0) 08:56:01 executing program 5: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000a, 0x11, r0, 0x0) ftruncate(r0, 0x4) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000100), 0x0, 0x4) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fec000/0x14000)=nil, 0x14000, 0x2, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) 08:56:01 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@fat=@usefree}]}) 08:56:01 executing program 3: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x91, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, 0x0, 0x0) r1 = fcntl$getown(r0, 0x9) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/udp\x00') pread64(r2, &(0x7f0000000100)=""/4096, 0x1000, 0x0) r3 = syz_open_pts(r2, 0x101800) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001100)=ANY=[@ANYBLOB="c00000001900030000000000000000007f00000e000000000000000000000000ff0200000000000000000000000000010000000000000000020000000000000031e94626d1a6fca911e98c597d70545a51e5b4cee3dc7ecbf0f1978d672f23b948ceb105477039647c9106a83737840b33ab16249a53bc74a34ed9d8e1176a345b253bc7feeab3a042489c655376fc4992c59a445cab7e45cf2ee94a520307533f7ec6d7", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000009b9c876db5ac919b00"/120], 0xc0}}, 0x0) dup3(r3, r4, 0x0) r5 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0xc2, 0xfc, 0x2, 0x9, 0x0, 0xff, 0x200, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x83, 0x4, @perf_config_ext={0x4, 0x8df}, 0x20, 0x1f, 0x0, 0x6, 0x80000000, 0xfff, 0x5, 0x0, 0x2, 0x0, 0x3f}, r1, 0xffffffffffffffff, r2, 0x0) dup2(r0, r5) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001600)=@polexpire={0xc0, 0x19, 0x3, 0x0, 0x0, {{{@in=@loopback=0x7f00000e, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}}, 0xc0}}, 0x0) 08:56:01 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg(r0, &(0x7f0000000280)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000180)="866369ed", 0x4}], 0x1}, 0x0) syz_open_dev$hiddev(0x0, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) [ 119.493915] No source specified 08:56:01 executing program 2: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r0, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r0, 0x0) 08:56:01 executing program 0: r0 = getpgrp(0x0) wait4(r0, 0x0, 0x0, 0x0) 08:56:01 executing program 6: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f00000000c0)=0x8673c, 0x4) sendmsg(r0, &(0x7f0000000540)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000080)="f9de", 0x4}], 0x1}, 0x0) 08:56:01 executing program 5: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000a, 0x11, r0, 0x0) ftruncate(r0, 0x4) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000100), 0x0, 0x4) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fec000/0x14000)=nil, 0x14000, 0x2, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) 08:56:01 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@fat=@usefree}]}) 08:56:01 executing program 3: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000a, 0x11, r0, 0x0) ftruncate(r0, 0x4) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000100), 0x0, 0x4) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fec000/0x14000)=nil, 0x14000, 0x2, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) [ 119.643040] No source specified 08:56:01 executing program 3: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000a, 0x11, r0, 0x0) ftruncate(r0, 0x4) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000100), 0x0, 0x4) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fec000/0x14000)=nil, 0x14000, 0x2, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) 08:56:01 executing program 6: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f00000000c0)=0x8673c, 0x4) sendmsg(r0, &(0x7f0000000540)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000080)="f9de", 0x4}], 0x1}, 0x0) 08:56:01 executing program 2: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r0, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r0, 0x0) 08:56:01 executing program 0: r0 = getpgrp(0x0) wait4(r0, 0x0, 0x0, 0x0) [ 119.748766] [ 119.748935] ===================================== [ 119.749327] WARNING: bad unlock balance detected! [ 119.749718] 6.19.0-rc5-next-20260114 #1 Not tainted [ 119.750124] ------------------------------------- [ 119.750508] syz-executor.3/286 is trying to release lock (rcu_read_lock) at: [ 119.751084] [] __wait_on_freeing_inode+0x105/0x350 [ 119.752000] but there are no more locks to release! [ 119.753108] [ 119.753108] other info that might help us debug this: [ 119.754575] 4 locks held by syz-executor.3/286: [ 119.755665] #0: ffff88800f76e3f8 (sb_writers#3){.+.+}-{0:0}, at: filename_create+0xf7/0x400 [ 119.757989] #1: ffff88801b113d10 (&type->i_mutex_dir_key#3/1){+.+.}-{4:4}, at: filename_create+0x1b1/0x400 [ 119.760379] #2: ffff88800f75a950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xe32/0x12d0 [ 119.761113] #3: ffffffff85c16898 (inode_hash_lock){+.+.}-{3:3}, at: insert_inode_locked+0xf9/0x890 [ 119.761866] [ 119.761866] stack backtrace: [ 119.762236] CPU: 0 UID: 0 PID: 286 Comm: syz-executor.3 Not tainted 6.19.0-rc5-next-20260114 #1 PREEMPT(lazy) [ 119.762250] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 119.762257] Call Trace: [ 119.762261] [ 119.762266] dump_stack_lvl+0xca/0x120 [ 119.762280] ? __wait_on_freeing_inode+0x105/0x350 [ 119.762294] print_unlock_imbalance_bug+0x118/0x130 [ 119.762310] ? __wait_on_freeing_inode+0x105/0x350 [ 119.762324] lock_release+0x1ee/0x270 [ 119.762340] __wait_on_freeing_inode+0x10a/0x350 [ 119.762355] ? __pfx___wait_on_freeing_inode+0x10/0x10 [ 119.762370] ? __pfx_var_wake_function+0x10/0x10 [ 119.762388] ? lock_is_held_type+0x9e/0x120 [ 119.762407] insert_inode_locked+0x25f/0x890 [ 119.762424] __ext4_new_inode+0x223d/0x4cd0 [ 119.762441] ? __pfx___ext4_new_inode+0x10/0x10 [ 119.762455] ? __pfx_avc_has_perm+0x10/0x10 [ 119.762470] ? __pfx___dquot_initialize+0x10/0x10 [ 119.762490] ext4_mkdir+0x331/0xb30 [ 119.762509] ? __pfx_ext4_mkdir+0x10/0x10 [ 119.762524] ? security_inode_permission+0x72/0xe0 [ 119.762538] vfs_mkdir+0x6d8/0xc00 [ 119.762554] do_mkdirat+0x11a/0x440 [ 119.762567] ? __pfx_do_mkdirat+0x10/0x10 [ 119.762579] ? strncpy_from_user+0x21b/0x2f0 [ 119.762597] __x64_sys_mkdir+0x65/0x80 [ 119.762609] do_syscall_64+0xbf/0x420 [ 119.762621] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.762634] RIP: 0033:0x7f2b15c25c27 [ 119.762643] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 119.762654] RSP: 002b:00007fffbe024af8 EFLAGS: 00000202 ORIG_RAX: 0000000000000053 [ 119.762665] RAX: ffffffffffffffda RBX: 00007fffbe024b80 RCX: 00007f2b15c25c27 [ 119.762673] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 00007fffbe024b80 [ 119.762680] RBP: 00007fffbe024b5c R08: 0000000000000000 R09: 0000000000000004 [ 119.762687] R10: 00007fffbe024896 R11: 0000000000000202 R12: 0000000000000032 [ 119.762695] R13: 000000000001d330 R14: 0000000000000006 R15: 00007fffbe024bc0 [ 119.762705] [ 119.778442] ------------[ cut here ]------------ [ 119.778820] WARNING: kernel/rcu/tree_plugin.h:443 at __rcu_read_unlock+0x25f/0x5c0, CPU#0: syz-executor.3/286 [ 119.792051] Modules linked in: [ 119.792487] CPU: 0 UID: 0 PID: 286 Comm: syz-executor.3 Not tainted 6.19.0-rc5-next-20260114 #1 PREEMPT(lazy) [ 119.793272] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 119.793966] RIP: 0010:__rcu_read_unlock+0x25f/0x5c0 [ 119.794474] Code: f2 02 00 00 c7 43 58 01 00 00 00 bf 09 00 00 00 e8 16 c0 de ff 4d 85 f6 0f 84 73 fe ff ff e8 38 8a 20 00 fb e9 68 fe ff ff 90 <0f> 0b 90 5b 5d 41 5c 41 5d 41 5e e9 81 24 74 03 e8 bc 5c 56 00 e9 [ 119.795965] RSP: 0018:ffff88801a03f9e0 EFLAGS: 00010286 [ 119.796432] RAX: 00000000ffffffff RBX: ffff888016a83700 RCX: ffffffff81565a27 [ 119.796994] RDX: 0000000000000000 RSI: ffffffff81565a30 RDI: ffff888016a83afc [ 119.797600] RBP: ffff888016a83700 R08: 0000000000000000 R09: fffffbfff0ba6ffc [ 119.798166] R10: 0000000000000000 R11: 0000000000000001 R12: ffff888016a83700 [ 119.798771] R13: 0000000000000001 R14: ffffffff85c10e40 R15: ffff88801b3bebf0 [ 119.799396] FS: 0000555566f34400(0000) GS:ffff8880e5343000(0000) knlGS:0000000000000000 [ 119.800029] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 119.800535] CR2: 000055557c78dc58 CR3: 000000001cbae000 CR4: 0000000000350ef0 [ 119.801097] Call Trace: [ 119.801380] [ 119.802019] __wait_on_freeing_inode+0x10f/0x350 [ 119.802718] ? __pfx___wait_on_freeing_inode+0x10/0x10 [ 119.803805] ? __pfx_var_wake_function+0x10/0x10 [ 119.805026] ? lock_is_held_type+0x9e/0x120 [ 119.806120] insert_inode_locked+0x25f/0x890 [ 119.807767] __ext4_new_inode+0x223d/0x4cd0 [ 119.810249] ? __pfx___ext4_new_inode+0x10/0x10 [ 119.811181] ? __pfx_avc_has_perm+0x10/0x10 [ 119.811822] ? __pfx___dquot_initialize+0x10/0x10 [ 119.813990] ext4_mkdir+0x331/0xb30 [ 119.815941] ? __pfx_ext4_mkdir+0x10/0x10 [ 119.816569] ? security_inode_permission+0x72/0xe0 [ 119.818166] vfs_mkdir+0x6d8/0xc00 [ 119.819565] do_mkdirat+0x11a/0x440 [ 119.820548] ? __pfx_do_mkdirat+0x10/0x10 [ 119.821214] ? strncpy_from_user+0x21b/0x2f0 [ 119.823080] __x64_sys_mkdir+0x65/0x80 [ 119.823734] do_syscall_64+0xbf/0x420 [ 119.824542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.825050] RIP: 0033:0x7f2b15c25c27 [ 119.825454] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 119.826921] RSP: 002b:00007fffbe024af8 EFLAGS: 00000202 ORIG_RAX: 0000000000000053 [ 119.827586] RAX: ffffffffffffffda RBX: 00007fffbe024b80 RCX: 00007f2b15c25c27 [ 119.828146] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 00007fffbe024b80 [ 119.828754] RBP: 00007fffbe024b5c R08: 0000000000000000 R09: 0000000000000004 [ 119.829361] R10: 00007fffbe024896 R11: 0000000000000202 R12: 0000000000000032 [ 119.829925] R13: 000000000001d330 R14: 0000000000000006 R15: 00007fffbe024bc0 [ 119.832542] [ 119.832737] irq event stamp: 185569 [ 119.833026] hardirqs last enabled at (185569): [] _raw_spin_unlock_irqrestore+0x2c/0x50 [ 119.833899] hardirqs last disabled at (185568): [] _raw_spin_lock_irqsave+0x53/0x60 [ 119.834727] softirqs last enabled at (185564): [] kernel_fpu_end+0x59/0x70 [ 119.835527] softirqs last disabled at (185562): [] kernel_fpu_begin_mask+0x1bb/0x300 [ 119.836364] ---[ end trace 0000000000000000 ]--- 08:56:02 executing program 5: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000a, 0x11, r0, 0x0) ftruncate(r0, 0x4) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000100), 0x0, 0x4) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fec000/0x14000)=nil, 0x14000, 0x2, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) 08:56:02 executing program 3: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000a, 0x11, r0, 0x0) ftruncate(r0, 0x4) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000100), 0x0, 0x4) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fec000/0x14000)=nil, 0x14000, 0x2, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) 08:56:02 executing program 6: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f00000000c0)=0x8673c, 0x4) sendmsg(r0, &(0x7f0000000540)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000080)="f9de", 0x4}], 0x1}, 0x0) 08:56:02 executing program 4: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000a, 0x11, r0, 0x0) ftruncate(r0, 0x4) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000100), 0x0, 0x4) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fec000/0x14000)=nil, 0x14000, 0x2, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) 08:56:02 executing program 1: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000a, 0x11, r0, 0x0) ftruncate(r0, 0x4) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000100), 0x0, 0x4) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fec000/0x14000)=nil, 0x14000, 0x2, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) 08:56:02 executing program 2: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r0, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r0, 0x0) 08:56:02 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg(r0, &(0x7f0000000280)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000180)="866369ed", 0x4}], 0x1}, 0x0) syz_open_dev$hiddev(0x0, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 08:56:02 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f0000000140)=' ', 0x1, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000001400)=[{&(0x7f0000000180)="a6", 0x1}], 0x1, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000000c0)={0x0, r2, 0x0, 0x8000000000000}) 08:56:02 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f0000000140)=' ', 0x1, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000001400)=[{&(0x7f0000000180)="a6", 0x1}], 0x1, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000000c0)={0x0, r2, 0x0, 0x8000000000000}) 08:56:02 executing program 1: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000a, 0x11, r0, 0x0) ftruncate(r0, 0x4) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000100), 0x0, 0x4) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fec000/0x14000)=nil, 0x14000, 0x2, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) 08:56:02 executing program 3: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) 08:56:02 executing program 4: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000a, 0x11, r0, 0x0) ftruncate(r0, 0x4) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000100), 0x0, 0x4) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fec000/0x14000)=nil, 0x14000, 0x2, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) 08:56:02 executing program 6: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f00000000c0)=0x8673c, 0x4) sendmsg(r0, &(0x7f0000000540)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000080)="f9de", 0x4}], 0x1}, 0x0) 08:56:02 executing program 5: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000a, 0x11, r0, 0x0) ftruncate(r0, 0x4) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000100), 0x0, 0x4) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fec000/0x14000)=nil, 0x14000, 0x2, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) 08:56:02 executing program 2: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r0, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r0, 0x0) 08:56:03 executing program 1: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000a, 0x11, r0, 0x0) ftruncate(r0, 0x4) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000100), 0x0, 0x4) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fec000/0x14000)=nil, 0x14000, 0x2, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) 08:56:03 executing program 3: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) 08:56:03 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/rt_cache\x00') pread64(r0, &(0x7f0000000040)=""/156, 0x9c, 0x0) 08:56:03 executing program 4: r0 = memfd_secret(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000a, 0x11, r0, 0x0) ftruncate(r0, 0x4) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000100), 0x0, 0x4) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fec000/0x14000)=nil, 0x14000, 0x2, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) 08:56:03 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f0000000140)=' ', 0x1, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000001400)=[{&(0x7f0000000180)="a6", 0x1}], 0x1, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000000c0)={0x0, r2, 0x0, 0x8000000000000}) 08:56:03 executing program 6: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000200)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f00000002c0)=[{0x6}]}) 08:56:03 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000180)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000180)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000180)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) 08:56:03 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect(r0, &(0x7f0000000000)=@tipc, 0x80) [ 121.329617] audit: type=1326 audit(1768380963.368:10): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4064 comm="syz-executor.6" exe="/syz-executor.6" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbf54425b19 code=0x0 08:56:03 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000180)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000180)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000180)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) 08:56:03 executing program 3: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) 08:56:03 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect(r0, &(0x7f0000000000)=@tipc, 0x80) 08:56:03 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/rt_cache\x00') pread64(r0, &(0x7f0000000040)=""/156, 0x9c, 0x0) 08:56:03 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f0000000140)=' ', 0x1, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000001400)=[{&(0x7f0000000180)="a6", 0x1}], 0x1, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000000c0)={0x0, r2, 0x0, 0x8000000000000}) 08:56:03 executing program 1: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x4840, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000004, 0xa012, r0, 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x4840, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) 08:56:03 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000001740)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, &(0x7f0000000500)) 08:56:03 executing program 6: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000200)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f00000002c0)=[{0x6}]}) 08:56:03 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000180)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000180)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000180)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) [ 121.633104] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 121.634474] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 121.635522] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 121.636476] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 06 00 [ 121.638383] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x880700 phys_seg 3 prio class 2 [ 121.644514] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 121.645282] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 121.648702] Buffer I/O error on dev sr0, logical block 0, async page read [ 121.649835] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 121.658470] audit: type=1326 audit(1768380963.693:11): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4096 comm="syz-executor.6" exe="/syz-executor.6" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbf54425b19 code=0x0 [ 121.676914] I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 121.679294] Buffer I/O error on dev sr0, logical block 1, async page read [ 121.717680] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 121.718461] I/O error, dev sr0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 6 prio class 2 [ 121.719683] Buffer I/O error on dev sr0, logical block 2, async page read [ 121.720619] Buffer I/O error on dev sr0, logical block 3, async page read [ 121.721875] Buffer I/O error on dev sr0, logical block 4, async page read [ 121.722829] Buffer I/O error on dev sr0, logical block 5, async page read [ 121.725521] Buffer I/O error on dev sr0, logical block 6, async page read [ 121.726490] Buffer I/O error on dev sr0, logical block 7, async page read [ 121.762542] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 121.763262] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 121.764750] Buffer I/O error on dev sr0, logical block 0, async page read [ 121.775814] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 121.776556] I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x800000 phys_seg 7 prio class 2 [ 121.777684] Buffer I/O error on dev sr0, logical block 1, async page read [ 121.778928] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 121.779872] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 121.791777] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 121.794121] I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x800000 phys_seg 7 prio class 2 08:56:03 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect(r0, &(0x7f0000000000)=@tipc, 0x80) 08:56:03 executing program 3: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) 08:56:03 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/rt_cache\x00') pread64(r0, &(0x7f0000000040)=""/156, 0x9c, 0x0) 08:56:03 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000001740)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, &(0x7f0000000500)) 08:56:03 executing program 0: arch_prctl$ARCH_SET_CPUID(0x1012, 0x0) 08:56:03 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000180)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000180)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000180)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) 08:56:03 executing program 6: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000200)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f00000002c0)=[{0x6}]}) 08:56:03 executing program 1: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x4840, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000004, 0xa012, r0, 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x4840, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) [ 121.922169] audit: type=1326 audit(1768380963.961:12): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4103 comm="syz-executor.6" exe="/syz-executor.6" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbf54425b19 code=0x0 08:56:03 executing program 3: syz_emit_ethernet(0x4e, &(0x7f0000000100)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, ')hx', 0x18, 0x2b, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @mld={0x0, 0x0, 0x0, 0x0, 0x0, @loopback}}}}}}, 0x0) 08:56:04 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/rt_cache\x00') pread64(r0, &(0x7f0000000040)=""/156, 0x9c, 0x0) 08:56:04 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect(r0, &(0x7f0000000000)=@tipc, 0x80) 08:56:04 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000001740)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, &(0x7f0000000500)) 08:56:04 executing program 0: arch_prctl$ARCH_SET_CPUID(0x1012, 0x0) 08:56:04 executing program 3: syz_emit_ethernet(0x4e, &(0x7f0000000100)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, ')hx', 0x18, 0x2b, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @mld={0x0, 0x0, 0x0, 0x0, 0x0, @loopback}}}}}}, 0x0) 08:56:04 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0002}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) getpid() 08:56:04 executing program 3: syz_emit_ethernet(0x4e, &(0x7f0000000100)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, ')hx', 0x18, 0x2b, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @mld={0x0, 0x0, 0x0, 0x0, 0x0, @loopback}}}}}}, 0x0) 08:56:04 executing program 6: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000200)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f00000002c0)=[{0x6}]}) [ 122.133360] audit: type=1326 audit(1768380964.169:13): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4132 comm="syz-executor.6" exe="/syz-executor.6" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbf54425b19 code=0x0 08:56:04 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000001740)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, &(0x7f0000000500)) 08:56:04 executing program 0: arch_prctl$ARCH_SET_CPUID(0x1012, 0x0) 08:56:04 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000002880)='projid_map\x00') preadv(r0, &(0x7f0000002a40)=[{&(0x7f00000028c0)=""/136, 0x88}], 0x1, 0x4, 0x0) 08:56:04 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0002}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) getpid() 08:56:04 executing program 3: syz_emit_ethernet(0x4e, &(0x7f0000000100)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, ')hx', 0x18, 0x2b, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @mld={0x0, 0x0, 0x0, 0x0, 0x0, @loopback}}}}}}, 0x0) 08:56:04 executing program 1: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x4840, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000004, 0xa012, r0, 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x4840, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) 08:56:04 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0002}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) getpid() 08:56:04 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0002}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) getpid() 08:56:04 executing program 6: pipe2$9p(&(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) open_by_handle_at(r0, &(0x7f00000009c0)=@ocfs2_parent={0x18}, 0x0) 08:56:04 executing program 0: arch_prctl$ARCH_SET_CPUID(0x1012, 0x0) 08:56:04 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0002}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) getpid() 08:56:04 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000002880)='projid_map\x00') preadv(r0, &(0x7f0000002a40)=[{&(0x7f00000028c0)=""/136, 0x88}], 0x1, 0x4, 0x0) 08:56:04 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f0000000040)="0c6896f7441c1a790e167b1f1c8b287263d9e350aa16ee23e7ac778803496162176bd61cca4b7cb2f1a513c981749b44", 0x30) 08:56:04 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, 0x0, 0x0) 08:56:04 executing program 6: pipe2$9p(&(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) open_by_handle_at(r0, &(0x7f00000009c0)=@ocfs2_parent={0x18}, 0x0) 08:56:04 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000002880)='projid_map\x00') preadv(r0, &(0x7f0000002a40)=[{&(0x7f00000028c0)=""/136, 0x88}], 0x1, 0x4, 0x0) 08:56:04 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0002}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) getpid() 08:56:04 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x10000002}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000017c0), 0x4}, 0x0, 0x0, 0x0, 0x9, 0x200005, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x208, &(0x7f0000000080)) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x10000002}) 08:56:04 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0002}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) getpid() 08:56:04 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f0000000040)="0c6896f7441c1a790e167b1f1c8b287263d9e350aa16ee23e7ac778803496162176bd61cca4b7cb2f1a513c981749b44", 0x30) 08:56:04 executing program 1: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x4840, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000004, 0xa012, r0, 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x4840, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) 08:56:04 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, 0x0, 0x0) 08:56:04 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f0000000040)="0c6896f7441c1a790e167b1f1c8b287263d9e350aa16ee23e7ac778803496162176bd61cca4b7cb2f1a513c981749b44", 0x30) 08:56:04 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000002880)='projid_map\x00') preadv(r0, &(0x7f0000002a40)=[{&(0x7f00000028c0)=""/136, 0x88}], 0x1, 0x4, 0x0) 08:56:04 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000680)={@mcast2}, 0x14) 08:56:04 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f0000000040)="0c6896f7441c1a790e167b1f1c8b287263d9e350aa16ee23e7ac778803496162176bd61cca4b7cb2f1a513c981749b44", 0x30) 08:56:04 executing program 6: pipe2$9p(&(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) open_by_handle_at(r0, &(0x7f00000009c0)=@ocfs2_parent={0x18}, 0x0) 08:56:04 executing program 2: r0 = memfd_create(&(0x7f0000000000)='\x02\xce\x16Td\xa8\x98\x86\xb1:\x8f\xc5\x88{\xbd\xb4\xc2\xb1\x9b\x84\x97R\xcc\xdb<\x01\xfa\x91\x85\xa0\x81\xa9F0!/\x89\xacX\xbd\xcd\x10R|lTn\xac-\xfd\x8b\n\x1a\xbc\xf0^B6\xb6`[/\x95\x17\xdaYz\xd6\xc7\xbc!\xe5\x89\xc8^\x06np\xc6\xe7\x1d\xe4\x00\xcaa}\x1c\x12\xf9M\x11\xffA\xcb\x85\xdb?^\x8f\f\nD\xf2\x1f\x11\xaa\x90>N\xb7\x86\x15\x03=\xcc\xbe\x0f\x0f\x14\x84\xde:;\x0f\xb5\xf1\x86\xf2{yt\xa2\xe9\x01\x00\x00\x00\x8e:^v\xc9\x8d\xd7E\xb4\vw\xbe\\\x11J\xf4\xae\xc6\x88F\x9c\xaflM\x1dS\x04\x00H\xd6\x8d\xa6\xbd\x96\xe4SR\xe6\x118L*\x9b\xb2\tbg\xad\x0fGO\xa5M\x80-Y\xc6\x1f%\xb8i|\x86\xa9Zm+\x9fe~\x8a\xe7\xca\f\xad?\xa0t\x13_Rq\x1f\xc6\xd9\x1d#\x8a8q\x1e#c\x8c\x193\xab\xdbE\xe1\xc8d=\xe5\r\xe5#\xa2v\x1ey\xf0\xe3\x1c*h\xdbq\x92\xed\xd35\x1d~\xd1\xe9_\x01\x93\xa5\x9d8A\xf8a6\x99\x02\xc9}\x14\xfb\x03\xce\xb34\x95/\x18\xacJs0\x9f\x9b>\xae\a2\x01\xa7\x95\xbd\xf2\x99w\x11G\x1c\xd2\xbc\xf0E\x86\xca\x87\xefv\x8e\xad\xb8\xc7u\xc2z\x85\xc1\xd5R\x82\v\x1b\xea\x8f\x8d\xc1\x02\x8a$\xd1T\xce\xa6^F\vJLx\xdc\xc8\b\xb7\xa1j2l\x8fQ\xc1\x89\xb8\xbef\xc6\x90\r\xae\xd4u\x8f\x7f\xe2[\x1cs\xab&\xa3\x81B<\xc5]n\xfc\x1a\x19\xdf\xc5\xe0O\x8b3\x84?x\xacP\xfb\xb5z\x87\xc0\xa4\x99\xf5\x8fyP\xd5\x8b\x80D\xe1\x979\x06^\xa1\xe0\x11\xb8\xc7:R4\x9c\xad\xac\xed\xa9\x00\x00\x00\x00\x00', 0x0) r1 = memfd_create(&(0x7f0000000000)='\x02\xce\x16Td\xa8\x98\x86\xb1:\x8f\xc5\x88{\xbd\xb4\xc2\xb1\x9b\x84\x97R\xcc\xdb<\x01\xfa\x91\x85\xa0\x81\xa9F0!/\x89\xacX\xbd\xcd\x10R|lTn\xac-\xfd\x8b\n\x1a\xbc\xf0^B6\xb6`[/\x95\x17\xdaYz\xd6\xc7\xbc!\xe5\x89\xc8^\x06np\xc6\xe7\x1d\xe4\x00\xcaa}\x1c\x12\xf9M\x11\xffA\xcb\x85\xdb?^\x8f\f\nD\xf2\x1f\x11\xaa\x90>N\xb7\x86\x15\x03=\xcc\xbe\x0f\x0f\x14\x84\xde:;\x0f\xb5\xf1\x86\xf2{yt\xa2\xe9\x01\x00\x00\x00\x8e:^v\xc9\x8d\xd7E\xb4\vw\xbe\\\x11J\xf4\xae\xc6\x88F\x9c\xaflM\x1dS\x04\x00H\xd6\x8d\xa6\xbd\x96\xe4SR\xe6\x118L*\x9b\xb2\tbg\xad\x0fGO\xa5M\x80-Y\xc6\x1f%\xb8i|\x86\xa9Zm+\x9fe~\x8a\xe7\xca\f\xad?\xa0t\x13_Rq\x1f\xc6\xd9\x1d#\x8a8q\x1e#c\x8c\x193\xab\xdbE\xe1\xc8d=\xe5\r\xe5#\xa2v\x1ey\xf0\xe3\x1c*h\xdbq\x92\xed\xd35\x1d~\xd1\xe9_\x01\x93\xa5\x9d8A\xf8a6\x99\x02\xc9}\x14\xfb\x03\xce\xb34\x95/\x18\xacJs0\x9f\x9b>\xae\a2\x01\xa7\x95\xbd\xf2\x99w\x11G\x1c\xd2\xbc\xf0E\x86\xca\x87\xefv\x8e\xad\xb8\xc7u\xc2z\x85\xc1\xd5R\x82\v\x1b\xea\x8f\x8d\xc1\x02\x8a$\xd1T\xce\xa6^F\vJLx\xdc\xc8\b\xb7\xa1j2l\x8fQ\xc1\x89\xb8\xbef\xc6\x90\r\xae\xd4u\x8f\x7f\xe2[\x1cs\xab&\xa3\x81B<\xc5]n\xfc\x1a\x19\xdf\xc5\xe0O\x8b3\x84?x\xacP\xfb\xb5z\x87\xc0\xa4\x99\xf5\x8fyP\xd5\x8b\x80D\xe1\x979\x06^\xa1\xe0\x11\xb8\xc7:R4\x9c\xad\xac\xed\xa9\x00\x00\x00\x00\x00', 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x0, 0x0) 08:56:04 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, 0x0, 0x0) 08:56:04 executing program 6: pipe2$9p(&(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) open_by_handle_at(r0, &(0x7f00000009c0)=@ocfs2_parent={0x18}, 0x0) 08:56:04 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002100000020000020000000d1f4655fd1f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000012900)) [ 122.977027] loop7: detected capacity change from 0 to 4 [ 122.987653] EXT4-fs (loop7): #blocks per group too big: 8448 [ 122.996019] loop7: detected capacity change from 0 to 4 [ 123.004947] EXT4-fs (loop7): #blocks per group too big: 8448 08:56:05 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, 0x0, 0x0) 08:56:05 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) lseek(r0, 0x0, 0x4) read(r0, 0x0, 0x0) 08:56:05 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002100000020000020000000d1f4655fd1f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000012900)) 08:56:05 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000680)={@mcast2}, 0x14) 08:56:05 executing program 2: r0 = memfd_create(&(0x7f0000000000)='\x02\xce\x16Td\xa8\x98\x86\xb1:\x8f\xc5\x88{\xbd\xb4\xc2\xb1\x9b\x84\x97R\xcc\xdb<\x01\xfa\x91\x85\xa0\x81\xa9F0!/\x89\xacX\xbd\xcd\x10R|lTn\xac-\xfd\x8b\n\x1a\xbc\xf0^B6\xb6`[/\x95\x17\xdaYz\xd6\xc7\xbc!\xe5\x89\xc8^\x06np\xc6\xe7\x1d\xe4\x00\xcaa}\x1c\x12\xf9M\x11\xffA\xcb\x85\xdb?^\x8f\f\nD\xf2\x1f\x11\xaa\x90>N\xb7\x86\x15\x03=\xcc\xbe\x0f\x0f\x14\x84\xde:;\x0f\xb5\xf1\x86\xf2{yt\xa2\xe9\x01\x00\x00\x00\x8e:^v\xc9\x8d\xd7E\xb4\vw\xbe\\\x11J\xf4\xae\xc6\x88F\x9c\xaflM\x1dS\x04\x00H\xd6\x8d\xa6\xbd\x96\xe4SR\xe6\x118L*\x9b\xb2\tbg\xad\x0fGO\xa5M\x80-Y\xc6\x1f%\xb8i|\x86\xa9Zm+\x9fe~\x8a\xe7\xca\f\xad?\xa0t\x13_Rq\x1f\xc6\xd9\x1d#\x8a8q\x1e#c\x8c\x193\xab\xdbE\xe1\xc8d=\xe5\r\xe5#\xa2v\x1ey\xf0\xe3\x1c*h\xdbq\x92\xed\xd35\x1d~\xd1\xe9_\x01\x93\xa5\x9d8A\xf8a6\x99\x02\xc9}\x14\xfb\x03\xce\xb34\x95/\x18\xacJs0\x9f\x9b>\xae\a2\x01\xa7\x95\xbd\xf2\x99w\x11G\x1c\xd2\xbc\xf0E\x86\xca\x87\xefv\x8e\xad\xb8\xc7u\xc2z\x85\xc1\xd5R\x82\v\x1b\xea\x8f\x8d\xc1\x02\x8a$\xd1T\xce\xa6^F\vJLx\xdc\xc8\b\xb7\xa1j2l\x8fQ\xc1\x89\xb8\xbef\xc6\x90\r\xae\xd4u\x8f\x7f\xe2[\x1cs\xab&\xa3\x81B<\xc5]n\xfc\x1a\x19\xdf\xc5\xe0O\x8b3\x84?x\xacP\xfb\xb5z\x87\xc0\xa4\x99\xf5\x8fyP\xd5\x8b\x80D\xe1\x979\x06^\xa1\xe0\x11\xb8\xc7:R4\x9c\xad\xac\xed\xa9\x00\x00\x00\x00\x00', 0x0) r1 = memfd_create(&(0x7f0000000000)='\x02\xce\x16Td\xa8\x98\x86\xb1:\x8f\xc5\x88{\xbd\xb4\xc2\xb1\x9b\x84\x97R\xcc\xdb<\x01\xfa\x91\x85\xa0\x81\xa9F0!/\x89\xacX\xbd\xcd\x10R|lTn\xac-\xfd\x8b\n\x1a\xbc\xf0^B6\xb6`[/\x95\x17\xdaYz\xd6\xc7\xbc!\xe5\x89\xc8^\x06np\xc6\xe7\x1d\xe4\x00\xcaa}\x1c\x12\xf9M\x11\xffA\xcb\x85\xdb?^\x8f\f\nD\xf2\x1f\x11\xaa\x90>N\xb7\x86\x15\x03=\xcc\xbe\x0f\x0f\x14\x84\xde:;\x0f\xb5\xf1\x86\xf2{yt\xa2\xe9\x01\x00\x00\x00\x8e:^v\xc9\x8d\xd7E\xb4\vw\xbe\\\x11J\xf4\xae\xc6\x88F\x9c\xaflM\x1dS\x04\x00H\xd6\x8d\xa6\xbd\x96\xe4SR\xe6\x118L*\x9b\xb2\tbg\xad\x0fGO\xa5M\x80-Y\xc6\x1f%\xb8i|\x86\xa9Zm+\x9fe~\x8a\xe7\xca\f\xad?\xa0t\x13_Rq\x1f\xc6\xd9\x1d#\x8a8q\x1e#c\x8c\x193\xab\xdbE\xe1\xc8d=\xe5\r\xe5#\xa2v\x1ey\xf0\xe3\x1c*h\xdbq\x92\xed\xd35\x1d~\xd1\xe9_\x01\x93\xa5\x9d8A\xf8a6\x99\x02\xc9}\x14\xfb\x03\xce\xb34\x95/\x18\xacJs0\x9f\x9b>\xae\a2\x01\xa7\x95\xbd\xf2\x99w\x11G\x1c\xd2\xbc\xf0E\x86\xca\x87\xefv\x8e\xad\xb8\xc7u\xc2z\x85\xc1\xd5R\x82\v\x1b\xea\x8f\x8d\xc1\x02\x8a$\xd1T\xce\xa6^F\vJLx\xdc\xc8\b\xb7\xa1j2l\x8fQ\xc1\x89\xb8\xbef\xc6\x90\r\xae\xd4u\x8f\x7f\xe2[\x1cs\xab&\xa3\x81B<\xc5]n\xfc\x1a\x19\xdf\xc5\xe0O\x8b3\x84?x\xacP\xfb\xb5z\x87\xc0\xa4\x99\xf5\x8fyP\xd5\x8b\x80D\xe1\x979\x06^\xa1\xe0\x11\xb8\xc7:R4\x9c\xad\xac\xed\xa9\x00\x00\x00\x00\x00', 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x0, 0x0) 08:56:05 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x18, 0x3, 0x1, 0x801, 0x0, 0x0, {}, [@CTA_TUPLE_REPLY={0x4}]}, 0x18}}, 0x0) 08:56:05 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x5, 0x1, 0x5}, 0x14}}, 0x0) 08:56:05 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x10000002}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000017c0), 0x4}, 0x0, 0x0, 0x0, 0x9, 0x200005, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x208, &(0x7f0000000080)) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x10000002}) [ 123.104087] loop7: detected capacity change from 0 to 4 [ 123.118407] EXT4-fs (loop7): #blocks per group too big: 8448 08:56:05 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) lseek(r0, 0x0, 0x4) read(r0, 0x0, 0x0) 08:56:05 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000680)={@mcast2}, 0x14) 08:56:05 executing program 2: r0 = memfd_create(&(0x7f0000000000)='\x02\xce\x16Td\xa8\x98\x86\xb1:\x8f\xc5\x88{\xbd\xb4\xc2\xb1\x9b\x84\x97R\xcc\xdb<\x01\xfa\x91\x85\xa0\x81\xa9F0!/\x89\xacX\xbd\xcd\x10R|lTn\xac-\xfd\x8b\n\x1a\xbc\xf0^B6\xb6`[/\x95\x17\xdaYz\xd6\xc7\xbc!\xe5\x89\xc8^\x06np\xc6\xe7\x1d\xe4\x00\xcaa}\x1c\x12\xf9M\x11\xffA\xcb\x85\xdb?^\x8f\f\nD\xf2\x1f\x11\xaa\x90>N\xb7\x86\x15\x03=\xcc\xbe\x0f\x0f\x14\x84\xde:;\x0f\xb5\xf1\x86\xf2{yt\xa2\xe9\x01\x00\x00\x00\x8e:^v\xc9\x8d\xd7E\xb4\vw\xbe\\\x11J\xf4\xae\xc6\x88F\x9c\xaflM\x1dS\x04\x00H\xd6\x8d\xa6\xbd\x96\xe4SR\xe6\x118L*\x9b\xb2\tbg\xad\x0fGO\xa5M\x80-Y\xc6\x1f%\xb8i|\x86\xa9Zm+\x9fe~\x8a\xe7\xca\f\xad?\xa0t\x13_Rq\x1f\xc6\xd9\x1d#\x8a8q\x1e#c\x8c\x193\xab\xdbE\xe1\xc8d=\xe5\r\xe5#\xa2v\x1ey\xf0\xe3\x1c*h\xdbq\x92\xed\xd35\x1d~\xd1\xe9_\x01\x93\xa5\x9d8A\xf8a6\x99\x02\xc9}\x14\xfb\x03\xce\xb34\x95/\x18\xacJs0\x9f\x9b>\xae\a2\x01\xa7\x95\xbd\xf2\x99w\x11G\x1c\xd2\xbc\xf0E\x86\xca\x87\xefv\x8e\xad\xb8\xc7u\xc2z\x85\xc1\xd5R\x82\v\x1b\xea\x8f\x8d\xc1\x02\x8a$\xd1T\xce\xa6^F\vJLx\xdc\xc8\b\xb7\xa1j2l\x8fQ\xc1\x89\xb8\xbef\xc6\x90\r\xae\xd4u\x8f\x7f\xe2[\x1cs\xab&\xa3\x81B<\xc5]n\xfc\x1a\x19\xdf\xc5\xe0O\x8b3\x84?x\xacP\xfb\xb5z\x87\xc0\xa4\x99\xf5\x8fyP\xd5\x8b\x80D\xe1\x979\x06^\xa1\xe0\x11\xb8\xc7:R4\x9c\xad\xac\xed\xa9\x00\x00\x00\x00\x00', 0x0) r1 = memfd_create(&(0x7f0000000000)='\x02\xce\x16Td\xa8\x98\x86\xb1:\x8f\xc5\x88{\xbd\xb4\xc2\xb1\x9b\x84\x97R\xcc\xdb<\x01\xfa\x91\x85\xa0\x81\xa9F0!/\x89\xacX\xbd\xcd\x10R|lTn\xac-\xfd\x8b\n\x1a\xbc\xf0^B6\xb6`[/\x95\x17\xdaYz\xd6\xc7\xbc!\xe5\x89\xc8^\x06np\xc6\xe7\x1d\xe4\x00\xcaa}\x1c\x12\xf9M\x11\xffA\xcb\x85\xdb?^\x8f\f\nD\xf2\x1f\x11\xaa\x90>N\xb7\x86\x15\x03=\xcc\xbe\x0f\x0f\x14\x84\xde:;\x0f\xb5\xf1\x86\xf2{yt\xa2\xe9\x01\x00\x00\x00\x8e:^v\xc9\x8d\xd7E\xb4\vw\xbe\\\x11J\xf4\xae\xc6\x88F\x9c\xaflM\x1dS\x04\x00H\xd6\x8d\xa6\xbd\x96\xe4SR\xe6\x118L*\x9b\xb2\tbg\xad\x0fGO\xa5M\x80-Y\xc6\x1f%\xb8i|\x86\xa9Zm+\x9fe~\x8a\xe7\xca\f\xad?\xa0t\x13_Rq\x1f\xc6\xd9\x1d#\x8a8q\x1e#c\x8c\x193\xab\xdbE\xe1\xc8d=\xe5\r\xe5#\xa2v\x1ey\xf0\xe3\x1c*h\xdbq\x92\xed\xd35\x1d~\xd1\xe9_\x01\x93\xa5\x9d8A\xf8a6\x99\x02\xc9}\x14\xfb\x03\xce\xb34\x95/\x18\xacJs0\x9f\x9b>\xae\a2\x01\xa7\x95\xbd\xf2\x99w\x11G\x1c\xd2\xbc\xf0E\x86\xca\x87\xefv\x8e\xad\xb8\xc7u\xc2z\x85\xc1\xd5R\x82\v\x1b\xea\x8f\x8d\xc1\x02\x8a$\xd1T\xce\xa6^F\vJLx\xdc\xc8\b\xb7\xa1j2l\x8fQ\xc1\x89\xb8\xbef\xc6\x90\r\xae\xd4u\x8f\x7f\xe2[\x1cs\xab&\xa3\x81B<\xc5]n\xfc\x1a\x19\xdf\xc5\xe0O\x8b3\x84?x\xacP\xfb\xb5z\x87\xc0\xa4\x99\xf5\x8fyP\xd5\x8b\x80D\xe1\x979\x06^\xa1\xe0\x11\xb8\xc7:R4\x9c\xad\xac\xed\xa9\x00\x00\x00\x00\x00', 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x0, 0x0) 08:56:05 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x18, 0x3, 0x1, 0x801, 0x0, 0x0, {}, [@CTA_TUPLE_REPLY={0x4}]}, 0x18}}, 0x0) 08:56:05 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002100000020000020000000d1f4655fd1f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000012900)) 08:56:05 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x5, 0x1, 0x5}, 0x14}}, 0x0) 08:56:05 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'wlan0\x00', &(0x7f0000000100)=@ethtool_sfeatures={0x3b, 0x2, [{}, {}]}}) 08:56:05 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) lseek(r0, 0x0, 0x4) read(r0, 0x0, 0x0) [ 123.266898] loop7: detected capacity change from 0 to 4 [ 123.282024] EXT4-fs (loop7): #blocks per group too big: 8448 08:56:05 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000680)={@mcast2}, 0x14) 08:56:05 executing program 2: r0 = memfd_create(&(0x7f0000000000)='\x02\xce\x16Td\xa8\x98\x86\xb1:\x8f\xc5\x88{\xbd\xb4\xc2\xb1\x9b\x84\x97R\xcc\xdb<\x01\xfa\x91\x85\xa0\x81\xa9F0!/\x89\xacX\xbd\xcd\x10R|lTn\xac-\xfd\x8b\n\x1a\xbc\xf0^B6\xb6`[/\x95\x17\xdaYz\xd6\xc7\xbc!\xe5\x89\xc8^\x06np\xc6\xe7\x1d\xe4\x00\xcaa}\x1c\x12\xf9M\x11\xffA\xcb\x85\xdb?^\x8f\f\nD\xf2\x1f\x11\xaa\x90>N\xb7\x86\x15\x03=\xcc\xbe\x0f\x0f\x14\x84\xde:;\x0f\xb5\xf1\x86\xf2{yt\xa2\xe9\x01\x00\x00\x00\x8e:^v\xc9\x8d\xd7E\xb4\vw\xbe\\\x11J\xf4\xae\xc6\x88F\x9c\xaflM\x1dS\x04\x00H\xd6\x8d\xa6\xbd\x96\xe4SR\xe6\x118L*\x9b\xb2\tbg\xad\x0fGO\xa5M\x80-Y\xc6\x1f%\xb8i|\x86\xa9Zm+\x9fe~\x8a\xe7\xca\f\xad?\xa0t\x13_Rq\x1f\xc6\xd9\x1d#\x8a8q\x1e#c\x8c\x193\xab\xdbE\xe1\xc8d=\xe5\r\xe5#\xa2v\x1ey\xf0\xe3\x1c*h\xdbq\x92\xed\xd35\x1d~\xd1\xe9_\x01\x93\xa5\x9d8A\xf8a6\x99\x02\xc9}\x14\xfb\x03\xce\xb34\x95/\x18\xacJs0\x9f\x9b>\xae\a2\x01\xa7\x95\xbd\xf2\x99w\x11G\x1c\xd2\xbc\xf0E\x86\xca\x87\xefv\x8e\xad\xb8\xc7u\xc2z\x85\xc1\xd5R\x82\v\x1b\xea\x8f\x8d\xc1\x02\x8a$\xd1T\xce\xa6^F\vJLx\xdc\xc8\b\xb7\xa1j2l\x8fQ\xc1\x89\xb8\xbef\xc6\x90\r\xae\xd4u\x8f\x7f\xe2[\x1cs\xab&\xa3\x81B<\xc5]n\xfc\x1a\x19\xdf\xc5\xe0O\x8b3\x84?x\xacP\xfb\xb5z\x87\xc0\xa4\x99\xf5\x8fyP\xd5\x8b\x80D\xe1\x979\x06^\xa1\xe0\x11\xb8\xc7:R4\x9c\xad\xac\xed\xa9\x00\x00\x00\x00\x00', 0x0) r1 = memfd_create(&(0x7f0000000000)='\x02\xce\x16Td\xa8\x98\x86\xb1:\x8f\xc5\x88{\xbd\xb4\xc2\xb1\x9b\x84\x97R\xcc\xdb<\x01\xfa\x91\x85\xa0\x81\xa9F0!/\x89\xacX\xbd\xcd\x10R|lTn\xac-\xfd\x8b\n\x1a\xbc\xf0^B6\xb6`[/\x95\x17\xdaYz\xd6\xc7\xbc!\xe5\x89\xc8^\x06np\xc6\xe7\x1d\xe4\x00\xcaa}\x1c\x12\xf9M\x11\xffA\xcb\x85\xdb?^\x8f\f\nD\xf2\x1f\x11\xaa\x90>N\xb7\x86\x15\x03=\xcc\xbe\x0f\x0f\x14\x84\xde:;\x0f\xb5\xf1\x86\xf2{yt\xa2\xe9\x01\x00\x00\x00\x8e:^v\xc9\x8d\xd7E\xb4\vw\xbe\\\x11J\xf4\xae\xc6\x88F\x9c\xaflM\x1dS\x04\x00H\xd6\x8d\xa6\xbd\x96\xe4SR\xe6\x118L*\x9b\xb2\tbg\xad\x0fGO\xa5M\x80-Y\xc6\x1f%\xb8i|\x86\xa9Zm+\x9fe~\x8a\xe7\xca\f\xad?\xa0t\x13_Rq\x1f\xc6\xd9\x1d#\x8a8q\x1e#c\x8c\x193\xab\xdbE\xe1\xc8d=\xe5\r\xe5#\xa2v\x1ey\xf0\xe3\x1c*h\xdbq\x92\xed\xd35\x1d~\xd1\xe9_\x01\x93\xa5\x9d8A\xf8a6\x99\x02\xc9}\x14\xfb\x03\xce\xb34\x95/\x18\xacJs0\x9f\x9b>\xae\a2\x01\xa7\x95\xbd\xf2\x99w\x11G\x1c\xd2\xbc\xf0E\x86\xca\x87\xefv\x8e\xad\xb8\xc7u\xc2z\x85\xc1\xd5R\x82\v\x1b\xea\x8f\x8d\xc1\x02\x8a$\xd1T\xce\xa6^F\vJLx\xdc\xc8\b\xb7\xa1j2l\x8fQ\xc1\x89\xb8\xbef\xc6\x90\r\xae\xd4u\x8f\x7f\xe2[\x1cs\xab&\xa3\x81B<\xc5]n\xfc\x1a\x19\xdf\xc5\xe0O\x8b3\x84?x\xacP\xfb\xb5z\x87\xc0\xa4\x99\xf5\x8fyP\xd5\x8b\x80D\xe1\x979\x06^\xa1\xe0\x11\xb8\xc7:R4\x9c\xad\xac\xed\xa9\x00\x00\x00\x00\x00', 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x0, 0x0) 08:56:05 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x18, 0x3, 0x1, 0x801, 0x0, 0x0, {}, [@CTA_TUPLE_REPLY={0x4}]}, 0x18}}, 0x0) 08:56:05 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) lseek(r0, 0x0, 0x4) read(r0, 0x0, 0x0) 08:56:05 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x5, 0x1, 0x5}, 0x14}}, 0x0) 08:56:05 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002100000020000020000000d1f4655fd1f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000012900)) 08:56:05 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x10000002}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000017c0), 0x4}, 0x0, 0x0, 0x0, 0x9, 0x200005, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x208, &(0x7f0000000080)) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x10000002}) 08:56:05 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'wlan0\x00', &(0x7f0000000100)=@ethtool_sfeatures={0x3b, 0x2, [{}, {}]}}) [ 123.426872] loop7: detected capacity change from 0 to 4 [ 123.444239] EXT4-fs (loop7): #blocks per group too big: 8448 08:56:05 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x18, 0x3, 0x1, 0x801, 0x0, 0x0, {}, [@CTA_TUPLE_REPLY={0x4}]}, 0x18}}, 0x0) 08:56:05 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'wlan0\x00', &(0x7f0000000100)=@ethtool_sfeatures={0x3b, 0x2, [{}, {}]}}) 08:56:05 executing program 1: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/pid\x00') syz_genetlink_get_family_id$tipc2(&(0x7f0000000940), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000001e80)={&(0x7f0000001d00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001e40)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 08:56:05 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x5, 0x1, 0x5}, 0x14}}, 0x0) [ 123.595060] Zero length message leads to an empty skb 08:56:05 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'wlan0\x00', &(0x7f0000000100)=@ethtool_sfeatures={0x3b, 0x2, [{}, {}]}}) 08:56:05 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x10000002}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000017c0), 0x4}, 0x0, 0x0, 0x0, 0x9, 0x200005, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x208, &(0x7f0000000080)) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x10000002}) 08:56:05 executing program 1: r0 = timerfd_create(0x0, 0x0) timerfd_gettime(r0, &(0x7f0000000000)) 08:56:05 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000000240)='./file0\x00', 0x0) fork() waitid(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) clone3(0x0, 0x0) waitid(0x0, 0x0, &(0x7f0000000580), 0x2, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000380)={0x20200}, 0x18) perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0xa) r0 = fork() ptrace(0xffffffffffffffff, r0) waitid(0x0, r0, &(0x7f0000000080), 0x8, 0x0) 08:56:05 executing program 7: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0xaa, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'TPROXY\x00'}, &(0x7f0000000380)=0x1e) fcntl$setstatus(r1, 0x4, 0x44000) io_setup(0xfff, &(0x7f0000000040)) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000100)={0x0, r2, 0x0, 0x80, 0x0, 0x5}) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x8b) lstat(&(0x7f0000001400)='./file0\x00', &(0x7f0000001440)) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r3) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x0, 0x8, 0x0, 0x0, 0x0, 0xa3, 0x27888, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x101, 0x0, @perf_config_ext={0x10000, 0x7}, 0xa401, 0x4, 0x5, 0x6, 0x101, 0x9, 0x8, 0x0, 0x9}, 0x0, 0xd, r0, 0x3) io_submit(0x0, 0x2, &(0x7f0000000300)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x2, 0x40, 0xffffffffffffffff, &(0x7f0000000240)="d775223c2cfd1659131c1635be0ca4a6022d81481647384956b74728cdf44222af85", 0x22, 0x200, 0x0, 0x3}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, &(0x7f0000000400)="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", 0x1000, 0xffffffffffffffff, 0x0, 0x2}]) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000001500)=ANY=[@ANYBLOB="0100000001000000180000004ae25d64f35be56587157f06834bf1e273e946cc0ed3fcef404929ae2800e9cdd2968df9f69e0d620708b434b174eb3f81dca2b1451758d64ff9b4a59adc78df85429018b9bf8c36f160c4c0f2", @ANYRES32, @ANYBLOB="0d0000000000cc1ba2f230000000009ab43ee99efb56f11f00e643cf0082046b34a254b153eba553f12fc091c4b7955e5d746be02d561e6e28ae2a0dd6772126556463670ee47a43602ec2455f3454280200f0576800000000"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x80000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000014c0)}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffc00}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 08:56:05 executing program 5: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000004, 0x32, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6133, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) 08:56:05 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) sendmmsg(r0, &(0x7f0000003500)=[{{&(0x7f0000000180)=@phonet={0x23, 0x0, 0x4, 0x1}, 0x80, 0x0}}], 0x1, 0x0) 08:56:05 executing program 6: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900)="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", 0x200) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x7e) fcntl$setstatus(r0, 0x4, 0x44000) dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x9, &(0x7f00000001c0)=0x5, 0x4) sendfile(r0, r1, 0x0, 0xfdef) [ 123.810479] audit: type=1400 audit(1768380965.849:14): avc: denied { write } for pid=4276 comm="syz-executor.7" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 08:56:05 executing program 5: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000004, 0x32, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6133, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) 08:56:05 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='comm\x00') mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x44032, 0xffffffffffffffff, 0x0) write$binfmt_script(r0, &(0x7f00000015c0)={'#! ', './file0'}, 0xb) 08:56:05 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x201) write$binfmt_aout(r0, &(0x7f00000000c0)={{}, "98803636e79249d7687688c8ce1a"}, 0x2e) 08:56:05 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) sendmmsg(r0, &(0x7f0000003500)=[{{&(0x7f0000000180)=@phonet={0x23, 0x0, 0x4, 0x1}, 0x80, 0x0}}], 0x1, 0x0) 08:56:05 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='comm\x00') mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x44032, 0xffffffffffffffff, 0x0) write$binfmt_script(r0, &(0x7f00000015c0)={'#! ', './file0'}, 0xb) 08:56:06 executing program 5: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000004, 0x32, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6133, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) 08:56:06 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x201) write$binfmt_aout(r0, &(0x7f00000000c0)={{}, "98803636e79249d7687688c8ce1a"}, 0x2e) 08:56:06 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='comm\x00') mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x44032, 0xffffffffffffffff, 0x0) write$binfmt_script(r0, &(0x7f00000015c0)={'#! ', './file0'}, 0xb) 08:56:06 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) sendmmsg(r0, &(0x7f0000003500)=[{{&(0x7f0000000180)=@phonet={0x23, 0x0, 0x4, 0x1}, 0x80, 0x0}}], 0x1, 0x0) 08:56:06 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x201) write$binfmt_aout(r0, &(0x7f00000000c0)={{}, "98803636e79249d7687688c8ce1a"}, 0x2e) 08:56:06 executing program 7: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0xaa, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'TPROXY\x00'}, &(0x7f0000000380)=0x1e) fcntl$setstatus(r1, 0x4, 0x44000) io_setup(0xfff, &(0x7f0000000040)) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000100)={0x0, r2, 0x0, 0x80, 0x0, 0x5}) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x8b) lstat(&(0x7f0000001400)='./file0\x00', &(0x7f0000001440)) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r3) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x0, 0x8, 0x0, 0x0, 0x0, 0xa3, 0x27888, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x101, 0x0, @perf_config_ext={0x10000, 0x7}, 0xa401, 0x4, 0x5, 0x6, 0x101, 0x9, 0x8, 0x0, 0x9}, 0x0, 0xd, r0, 0x3) io_submit(0x0, 0x2, &(0x7f0000000300)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x2, 0x40, 0xffffffffffffffff, &(0x7f0000000240)="d775223c2cfd1659131c1635be0ca4a6022d81481647384956b74728cdf44222af85", 0x22, 0x200, 0x0, 0x3}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, &(0x7f0000000400)="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", 0x1000, 0xffffffffffffffff, 0x0, 0x2}]) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000001500)=ANY=[@ANYBLOB="0100000001000000180000004ae25d64f35be56587157f06834bf1e273e946cc0ed3fcef404929ae2800e9cdd2968df9f69e0d620708b434b174eb3f81dca2b1451758d64ff9b4a59adc78df85429018b9bf8c36f160c4c0f2", @ANYRES32, @ANYBLOB="0d0000000000cc1ba2f230000000009ab43ee99efb56f11f00e643cf0082046b34a254b153eba553f12fc091c4b7955e5d746be02d561e6e28ae2a0dd6772126556463670ee47a43602ec2455f3454280200f0576800000000"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x80000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000014c0)}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffc00}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 08:56:06 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='comm\x00') mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x44032, 0xffffffffffffffff, 0x0) write$binfmt_script(r0, &(0x7f00000015c0)={'#! ', './file0'}, 0xb) 08:56:06 executing program 5: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000004, 0x32, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6133, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) 08:56:06 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) sendmmsg(r0, &(0x7f0000003500)=[{{&(0x7f0000000180)=@phonet={0x23, 0x0, 0x4, 0x1}, 0x80, 0x0}}], 0x1, 0x0) 08:56:06 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000040)={0x2c, 0x19, 0x1, 0x0, 0x0, "", [@typed={0xa, 0x0, 0x0, 0x0, @str='wla\x021\x00'}, @nested={0x10, 0x9, 0x0, 0x1, [@typed={0x28, 0x0, 0x0, 0x0, @u64}]}]}, 0x2c}], 0x1}, 0x0) 08:56:06 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000000240)='./file0\x00', 0x0) fork() waitid(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) clone3(0x0, 0x0) waitid(0x0, 0x0, &(0x7f0000000580), 0x2, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000380)={0x20200}, 0x18) perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0xa) r0 = fork() ptrace(0xffffffffffffffff, r0) waitid(0x0, r0, &(0x7f0000000080), 0x8, 0x0) 08:56:06 executing program 6: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900)="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", 0x200) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x7e) fcntl$setstatus(r0, 0x4, 0x44000) dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x9, &(0x7f00000001c0)=0x5, 0x4) sendfile(r0, r1, 0x0, 0xfdef) 08:56:06 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000040)={0x2c, 0x19, 0x1, 0x0, 0x0, "", [@typed={0xa, 0x0, 0x0, 0x0, @str='wla\x021\x00'}, @nested={0x10, 0x9, 0x0, 0x1, [@typed={0x28, 0x0, 0x0, 0x0, @u64}]}]}, 0x2c}], 0x1}, 0x0) 08:56:06 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x201) write$binfmt_aout(r0, &(0x7f00000000c0)={{}, "98803636e79249d7687688c8ce1a"}, 0x2e) 08:56:06 executing program 3: syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 08:56:06 executing program 2: write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6e834b50f474f6edaeb1ff964b113cf65f0be4ab1ffff7a9636645f0ae3094e59e50bfee32de576970308a41f0dd6c2cf47288f8895dca6e8681f1f7d4666d7035828c4690bca329e"], 0x52) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'sit0\x00'}) 08:56:06 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r2) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000000c0)={0x2, 0x0, 0x20885}) 08:56:06 executing program 3: syslog(0x3, &(0x7f0000000800)=""/39, 0x27) [ 124.877799] program syz-executor.5 is using a deprecated SCSI ioctl, please convert it to SG_IO 08:56:06 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000040)={0x2c, 0x19, 0x1, 0x0, 0x0, "", [@typed={0xa, 0x0, 0x0, 0x0, @str='wla\x021\x00'}, @nested={0x10, 0x9, 0x0, 0x1, [@typed={0x28, 0x0, 0x0, 0x0, @u64}]}]}, 0x2c}], 0x1}, 0x0) 08:56:07 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r2) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000000c0)={0x2, 0x0, 0x20885}) 08:56:07 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x20040, 0x0) mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x31006, 0x0) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x2000, 0x0) 08:56:07 executing program 2: write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6e834b50f474f6edaeb1ff964b113cf65f0be4ab1ffff7a9636645f0ae3094e59e50bfee32de576970308a41f0dd6c2cf47288f8895dca6e8681f1f7d4666d7035828c4690bca329e"], 0x52) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'sit0\x00'}) 08:56:07 executing program 3: syslog(0x3, &(0x7f0000000800)=""/39, 0x27) 08:56:07 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000040)={0x2c, 0x19, 0x1, 0x0, 0x0, "", [@typed={0xa, 0x0, 0x0, 0x0, @str='wla\x021\x00'}, @nested={0x10, 0x9, 0x0, 0x1, [@typed={0x28, 0x0, 0x0, 0x0, @u64}]}]}, 0x2c}], 0x1}, 0x0) 08:56:07 executing program 7: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0xaa, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'TPROXY\x00'}, &(0x7f0000000380)=0x1e) fcntl$setstatus(r1, 0x4, 0x44000) io_setup(0xfff, &(0x7f0000000040)) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000100)={0x0, r2, 0x0, 0x80, 0x0, 0x5}) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x8b) lstat(&(0x7f0000001400)='./file0\x00', &(0x7f0000001440)) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r3) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x0, 0x8, 0x0, 0x0, 0x0, 0xa3, 0x27888, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x101, 0x0, @perf_config_ext={0x10000, 0x7}, 0xa401, 0x4, 0x5, 0x6, 0x101, 0x9, 0x8, 0x0, 0x9}, 0x0, 0xd, r0, 0x3) io_submit(0x0, 0x2, &(0x7f0000000300)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x2, 0x40, 0xffffffffffffffff, &(0x7f0000000240)="d775223c2cfd1659131c1635be0ca4a6022d81481647384956b74728cdf44222af85", 0x22, 0x200, 0x0, 0x3}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, &(0x7f0000000400)="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", 0x1000, 0xffffffffffffffff, 0x0, 0x2}]) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000001500)=ANY=[@ANYBLOB="0100000001000000180000004ae25d64f35be56587157f06834bf1e273e946cc0ed3fcef404929ae2800e9cdd2968df9f69e0d620708b434b174eb3f81dca2b1451758d64ff9b4a59adc78df85429018b9bf8c36f160c4c0f2", @ANYRES32, @ANYBLOB="0d0000000000cc1ba2f230000000009ab43ee99efb56f11f00e643cf0082046b34a254b153eba553f12fc091c4b7955e5d746be02d561e6e28ae2a0dd6772126556463670ee47a43602ec2455f3454280200f0576800000000"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x80000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000014c0)}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffc00}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 08:56:07 executing program 6: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900)="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", 0x200) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x7e) fcntl$setstatus(r0, 0x4, 0x44000) dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x9, &(0x7f00000001c0)=0x5, 0x4) sendfile(r0, r1, 0x0, 0xfdef) 08:56:07 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000000240)='./file0\x00', 0x0) fork() waitid(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) clone3(0x0, 0x0) waitid(0x0, 0x0, &(0x7f0000000580), 0x2, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000380)={0x20200}, 0x18) perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0xa) r0 = fork() ptrace(0xffffffffffffffff, r0) waitid(0x0, r0, &(0x7f0000000080), 0x8, 0x0) [ 125.632228] program syz-executor.5 is using a deprecated SCSI ioctl, please convert it to SG_IO 08:56:07 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r2) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000000c0)={0x2, 0x0, 0x20885}) 08:56:07 executing program 2: write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6e834b50f474f6edaeb1ff964b113cf65f0be4ab1ffff7a9636645f0ae3094e59e50bfee32de576970308a41f0dd6c2cf47288f8895dca6e8681f1f7d4666d7035828c4690bca329e"], 0x52) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'sit0\x00'}) [ 125.719292] program syz-executor.5 is using a deprecated SCSI ioctl, please convert it to SG_IO 08:56:07 executing program 0: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) recvfrom(r0, 0x0, 0x0, 0x400000c1, 0x0, 0x0) 08:56:07 executing program 3: syslog(0x3, &(0x7f0000000800)=""/39, 0x27) 08:56:07 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r2) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000000c0)={0x2, 0x0, 0x20885}) 08:56:07 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x20040, 0x0) mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x31006, 0x0) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x2000, 0x0) 08:56:07 executing program 2: write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6e834b50f474f6edaeb1ff964b113cf65f0be4ab1ffff7a9636645f0ae3094e59e50bfee32de576970308a41f0dd6c2cf47288f8895dca6e8681f1f7d4666d7035828c4690bca329e"], 0x52) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'sit0\x00'}) [ 125.815150] program syz-executor.5 is using a deprecated SCSI ioctl, please convert it to SG_IO 08:56:07 executing program 0: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) recvfrom(r0, 0x0, 0x0, 0x400000c1, 0x0, 0x0) 08:56:07 executing program 3: syslog(0x3, &(0x7f0000000800)=""/39, 0x27) 08:56:08 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x20040, 0x0) mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x31006, 0x0) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x2000, 0x0) 08:56:08 executing program 0: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) recvfrom(r0, 0x0, 0x0, 0x400000c1, 0x0, 0x0) 08:56:08 executing program 2: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x32, 0xffffffffffffffff, 0x0) 08:56:08 executing program 5: syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x6}, @HCI_OP_LE_CLEAR_RESOLV_LIST}}, 0x16) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="02b9ca0168c5209845fa35b89e000000000000000500000100", @ANYRES16], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="0552748f00ffd1b794010c3a0180cd75a8aa823214dfcc5877c119f436d7a6cfcd07e540ca9ba7e15079a084b55af839f7776d984cb7cc0aaabd54cf2a7d684a623092521febea67509fbd0093beabfee30b036c4c128cdf492f7e4f0a56723fff9fc6c7b7bdbee5503ef72ab64ba35efc026a60d21a3b374df22b60b32d1e967f0014f97b21680b552e4b9f062935144953295e6c7fe661c8c79942eb49c1d62f7a88ce2fe65b937fadba02394acd13e92d02bdb15695f0bdbab4b5e5061a7ab4731d48e897fcc6bfc190ca235e03479fe7572637f9868cadc2dcbdae4008facc7493b6b2dd3f51bcb6db5ea3062e30428ac85dec2c839169f20612f76a4a4bf1869f84f7270be6d52809a75c824f2b64a8b6a058be380e307e3a4aa63b434b0f8b9d42bd8ff5c971636d20547a40485c674673d60d9f431d010fc3e7b1e8d11c4a0c4fc47f5f54ed7a5e0e38da48492953a6798ee31fcfa7b783f820bb03a4f2c72d8d1e1568b9db48e001f14fc8f71799f1ae415fc62c51dff1a5f8224e75835b05c2f5b62be6beb71e02ca856ad6d8e75dbe20e1949e7b6671403a0042582a5c7ce12ca555d3ec69f3a9895a0d71f4c7958bfd62a8b52779bb59680a017e5a00"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x6a}, {0x7, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x5, 0x6d, "9a0edb", 0x100, 0x8}, {@any, 0x8, 0x2f, 0x5, "d960ea", 0x90ff, 0x7}, {@none, 0x5, 0xb1, 0x6c, "c5f224", 0x8001, 0x6b}, {@any, 0x47, 0x8, 0x4, "0587e0", 0x8000, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5, 0x80, 0x7, "db71b7", 0x1, 0x7f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x1f, 0x1, "70dfc4", 0x3, 0x8}, {@none, 0xf9, 0x8, 0x0, '(](', 0x0, 0x9}]}}}, 0x6d) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="cf5fb29327c3f6cc7b825a804ff58b2ce07b37a0721e012f4624c285f812bbed0d70f8649edc990e4187e6776aa2127add02485983d8c997fa67a867bb2e06bee305b1010500ab1eb6bd5c247f5b8736d9099055e77abdb8ac49402eaae702b379b1de6bd86e236327358db0b768740b9fdecb2ee4f79151abba", @ANYRES64=r1, @ANYRESHEX]) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000d00)=ANY=[@ANYBLOB="03cd00ffff"], 0x5) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYRESHEX=r1, @ANYRESDEC=r0], 0x90) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 08:56:08 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) read$rfkill(r0, 0x0, 0x0) 08:56:08 executing program 7: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0xaa, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'TPROXY\x00'}, &(0x7f0000000380)=0x1e) fcntl$setstatus(r1, 0x4, 0x44000) io_setup(0xfff, &(0x7f0000000040)) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000100)={0x0, r2, 0x0, 0x80, 0x0, 0x5}) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x8b) lstat(&(0x7f0000001400)='./file0\x00', &(0x7f0000001440)) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r3) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x0, 0x8, 0x0, 0x0, 0x0, 0xa3, 0x27888, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x101, 0x0, @perf_config_ext={0x10000, 0x7}, 0xa401, 0x4, 0x5, 0x6, 0x101, 0x9, 0x8, 0x0, 0x9}, 0x0, 0xd, r0, 0x3) io_submit(0x0, 0x2, &(0x7f0000000300)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x2, 0x40, 0xffffffffffffffff, &(0x7f0000000240)="d775223c2cfd1659131c1635be0ca4a6022d81481647384956b74728cdf44222af85", 0x22, 0x200, 0x0, 0x3}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, &(0x7f0000000400)="548485366e322b963796f9cbe57017d9c1a33ca5ca2e9079be1e429b2cb94a3483ee6290895e7db5cfc46b43d5c7393e393ceda466270ba4c4af17b0dfe094139dc8aa082a58f85c1c6f1b9b4762d9492425de25c515e8e240b69ac1899a5a6b2beac9a7c24e5a51991b4cb0453fec96a4b61c99dfca6a9e3a7195a5fe4d14f6dd6ddc17893991fb47f7f5a7ce3eafc33a881b4d2dd3b3f0beb1f51be90fe183f89b327764e48130a009ad3844104869b7cd4a78d9419f76f2f0cc77b0d0b9399578793ccfea13994d25edee486ba7bac040b4e8a1d6240a5444184593cdec266514a0322e0818983376e1d7503949302a67a4a65026a8c27fcc2b3982f7a2c41a70fadb6a52163077154f081b68ac24966ad936434038772fe4d5bdf3fc55657dad519916496fb466747f70cf257eecf38fb292b7603a63083c1a795fee15de09a28eb93a1d84683f0b42e6e8dadbc8201a3b1cd1c948a6d1106e02099d8bb3dbea221d294692ef4d9a428a78de154d11606ce10c6095fd5ccecccd590f49c0d578ce241854a782c34e059871b94f195a4ec281c425a9a278d3ae5bbecf8dd988c7c3f868b5575bd05b484d8b13643e292b46674926810b3ffd78f88df6d85aeffadaf573abc5c6964d1f57f378a8b8ae7b9c63d4b70501e429b0f5a07ed97121f615e4e7821b5c250c97dca1e2b7f65c156b15467982af49d8a4437ff667b15d02ddc7e37c24be1c93e8416e4103476b1d9e7c24819a4e7acecc9731e95dee4745ef0d8450687fde647f588e42bd5ed8d8533e7c7d86d554584bfb6a2fe79f0edee6b9e85edb29e191dd14d7b205758ff8e05dab91a14624143c0252b444304ca551a94efd607f3ccbdb547320774d56178fec4bb9bf500e8f366f44c213983b74f0f6408a1665c1c712a295924d83fcc21c354b23f96c32dbfee57805cdede20557edd9bd81c611936ff6be9819b1ff66ec890d509798116a1dd2e8e67e9029f3d209b5a4771a278baebe37798c7d110b94babfdd4a00382cf21ea4076e85258a92259c66b24df8dad17f33504113f93c4342b89a72da0e1b2880eb8266af928f8cd0fac7aa23b9f711e953c75f1e7fa87ab60882f316afe80a9912287a99bfe4596d67371be87468bc1502d8a41d2efb2e90e4a95abdc3f6a913267a692373780a81469416ba4b352f9b35b35f1206b38436e090205bf50cca600c7a771fe68ad44bafc1c1195c741d586bffd9da9a26dc95ea87748f641288cf51c886f4faa8b0a536bb6e26c58d000595c3af0627ee06a7577bed1ea1db407191aa7157268a7c5753cf8c387774c2e6bf54cded081e2128b6226353d780957893494bf49c218315cfa040e53254f595b0fe3490f196d5df694ba1d4e9f45808cd813961f5df2fac0e67600e4e3dc563d8f421c9d3e80b574b46092b21a636904ec029cadabd34abf80ff543355668b49450c18fdad9f6d6f77bd3e92032ef9edf2c224e19599ded62ce488963cf40fe11bae029145c472e246c38ff11255d5d93db49c51344e01513ff0580c95ad24af5dd71c638df8d50fbc9445f93f079af919c64bd14e47b67b2044f3defde4d39a110c1e23d8406f8cc49103ce7280c4e41c8ed2020893461e5520652f3e36b17110e275ecd4de62d23bc91c27e10896a347d62bee40ea7ef0633a4ceaf7ef018249620004f06e827e8f416b04db476159a04841a9359c7702517a1a01eb2d409990b96a20b2c0dcfcf8ff14f7568c43958c3967004e18c15697fb0629bfb96ed9a1a04362412157ad007d393ea4c223d69a5e103ce2ad5e514cd0d1bbe909cf42867722930c74642fc90a807ae5228509a12e1ea83ade2ac7a6f96fa74cff026176ca9335aad145dcbacce81b655ede405803f06b3a782e494d7ba31dae3a490add5ee4302578799b086d9139bf2dbbecd5c8d0355c4af8818a5ecfe57a5d9cc77f1bbe3658e9a83eaa51aff26f97860611ca981c796f16e30e73185a4a43e0e27e5e51c1c4f1a180a400fc9499df691917b319ad6d7cf2dc23a77dcf8aeabbe1d948f69716944877f268e9adb7adffd929cb6078b245197e9aa0e72256a0ce11474df1e4070eeb2f799a606b3a78225d22000904abcd1438a3eb5b6dc756d59fc07c9be5e0b89e490579d523edc6d28980b712bc1a169684a5c404b07ac32e2923793e921f0538c077820e49b5409303e745c0e4ab3dd15e23d75da5ca3e7d94ecfa2d280588d4cf71b4380eecdd7bda751ce9e13895a22c42cbb1cbe7bb9c6d8274a12efbffece2b9e02dbd71073f351d79fc90037027fa9a6ca0e6a04a76f0f8eeb68dd4b9ba703eb8e0d304644b9f89a40d43d037cfd52332f7dce66f7891a4245bede0fc416db69e743aa0101d1ea70aaf961fc652e170fc0d9241be7ec6e034269796428caf606990bcd715e3d5a8251a44decd1f78ccf647e7928b3800d537ff38c921d1ee1fae6f59b31b94da9029500a874d1d405fdec9ae91ebe9434f97ecede30eaf5001b0034c665dfa2d75ec5aecd06fa8f1735254dd12ff492beb90cc132a9c9525d600d8eff7ec1cde716512643e96078a3a9183f97705da23cd416673a5883aca4d38cea4221dc409ce53fa7b40d6df7cba87ede7b85bb72d7ac87f2b128042a2a98bfa569e1b9226bba2a183dc4a4139b38b9c06b74049b5bc300d0904679ff1051ae786193554282f0796e16bff815169ae603dd206d5c25a1ce9a81516148a920b4e5d3bc4bfd0a5949f86560f359ee959ac1264f91aea7d9b4ad50e89616b4f0235cccffd9b548fb06972e29ec4170e305f1b0a73dd62f1666b733e770bb9ca6ce8a77f188159cb7d546897e004d05127f8b9ad940e0338f1eb14fc28ddb1414c73537e0af4f0f669455a5ad5dac2f78f8f9e37224fd3666c73717118e7ab6a6d000c7b02d872e74c098e58340b2fd6bd333f90b60d642c6359297329c58124aafcce619962fc33d6560240c9b0dea5989695fb07ad94766a49db23df1fe4e69fabdbbe9ad547e49d848931b914e876be3c7519cc44b59fea44c089051ac8bbc1d551574a5420fb7d24a846e5c5c3c852b0a1c496ca41125c3fac7a30bf031591ad5d1b4dd15adf440e123dc742674653d72608d822324546c38b8632f1ff7f07072d29942e38647a2b5e453683fbc7fff8d60736fe8433464e4e3c9d0f02cfff03537f46136706feaa3baafe4c2eecc249df06f7ba357e275b3554e94dbb7ec552a8c9bab2b51dd8980aeb4f0a4ebd5eeeb511fcc1e5351d00dbace7854b3c983c66a41af7f7f870b1424e9081a4a1a244a297a313bdaad684c2a03a122ade4616e65b2590ad8d7c6dd076806a155ffe499eaa4adca28410b44900e029c29eb8e50cf3f5352370d1571a4adcd093374b6cbedaf7b6b0d8b0b0af15d6deeaf94f9e2461369ab62ab25e7366909f456a3fbb4c57217e117251f0da3071a0130c96f6e2bf989098950cd7808349bd798af37965a8d27b5c234e6f20a27079fbe340aa7541ab0eede4f6ca9fd5d77ca58b0b1dbe6d6359ea7861733fc5e5378916af76021b6b5f2d9bda37aa3dbdfe78a1303cd55a55087d83e096cf51cf88ee3a2b2f85a3b6d85fca0dadb1449a8827152ae7c791e4a5204068bda6845caa5950f32baeb2ad4151a59e9fe37a70fe837b8ba336da817df95e63e3efc94a4a5c019a59b3bb28fcef2b0f4f2ca2a50a7342c6ffb48a6938c9af78916a094441bb61d341c7a9af4bd30bc97b1f2eeba321421e471c2f33c89b9ff442d83322884af04747e7c1a36aae0ce23f18e320f6b5982c8f2eea6eaab72973ebc1ad2c11b3f0670e2ce5ba2da1e7d86431a3e15055bb932cf1fa6d2d16f2eee7fb6fa32e941936cf27f08e1a5ff9a7d7a0d9c768e0aa1fb5c4318650aed839c753a4e0902877505c6508b1944567ad19ba158ba90febc7513aa8d5ac6189db76a1dafcc1040a5e8d48233bafe7b19202d486a426cf321151385dd5f91d969d9933f43699f73e1c48015bc01d09aa7bb6f2dd1848724949d932d5b1318497e3ecdc808973ce828edf228cedf884e7f89f9ede1579371e5b6960bb755e7b0686349405f0608948a57fc96f3d1e56a237737cb913930f1a408853b47b8470f01ca517f6a436efc97e74fb27272bc11c41468168c4d729fd34e9ef9ad551157481b4df42f54bc4fbaf12da548b1c283397545252073171a249f5a867b26cb1c29c117511dda3ef0e90a020f72f80ade85a0922d8303665df85f59a2fb74ee310aa46fd77b8a25230384426fadc4c7b5136bd3df43435fa6822acb39686d316a758874a2bc59ea596d2ba00d3397e316e515bf9fb88765c0783b4361aae87c33620b2b554f0901a1fec8692d36cb3ee14612d7f0b60dc15024bdab574a5ba957b1dab7ce804a15f11cf5be49e34dedd5edf8e1a9a8ef224febf642977956b7c758eb7f16e5703a3524dd11d2783c52888b437793e8e1775a4206d11ae146d5ebf5fde07d9636ce3f245ef3b0105cd3a1f80002f88e537a26b6cb55f7ca5107a2500211fcba310e8b446f8950897b47c14b3ae57845d789e9bfb639d338d44bba0c4f15da6a3c29344f4019f47b395788b3dab3050c4fef60d55accf54bfcb10922b224c55507b26ad276dc74d9a554bd54fc33a2e7e6e3a7ebf673e85959365ff4d085a5a15f83661664f827db438baef1b9a2b3b7c2b4a48c3d4b47df0406120565cbb9d2a2c8f82c6bbb4b4350e817b0dd18c7ccde13a39d5a0b829240b9c17ebc4d26f9b8943656eb0e37718fb123284d7c10881048d267309f4ca3a9658b8d57169175b830c838c079765277d1d0e78634e95952645b4b3763ee320a16bb621e82bafc8855591ec31c8e1cb1e07da7652bb1011d5b63ddb78c4ec428a651dfc5c80b90cb3ca313a9f324d752a0872c4af0f3544da3f342da7a41a6702caf25957b457e4d6b1341bb4d2da41e3f6f31441aa6139b2dce3dd57c60adc2485853055a1e487a4c8648240d3e68080d761e8ac9b012c7a786b9707089c9eafd9dd8a1f062f6a4359e99199bbb9a1cdc70d539f5a519b87aa70570eb744ea660b570080ac08ef6b29eae8e4cbd40e9e28cb398924fbd38ffc158860db6bf3281f2bc20b59352f1021727dfcab8475af6cc2c519b9169595e1760212477a4a2fa27ab9df0396a736ab6fe083dd3e387c04aa04cf6ce19da79a8037b22235ecfaa33dc13dc84f35af36224b5649aba70eb5dce390e39c8bed87916ca1b67e9c60892585e34acfb170f77599b016f9cb2fd934ac16e71fbb31a279956416c7a8e19f972ac60d5638e83c7d153acf27df8f9b7f39d296327f6a7ae1a12d62e747a09346c11c1b0dde2db512d31858cbd8164405855fde972c3a002519d1cd79070ab5d78308783e22053ebf542c1f90511ac49d8be193539808ef454d3ecd48fe5d6e9bfea1460e243edc9e71f6566ada52e1390240e17107d5688f87b8498b9f2f3053ed75de8576fa3d23734fbe75c14efd5eeefc29c7a3699ed0d9bc824117ebaea9cb1f63df0ecbf757c5949ffba3051ebe04e50a8fb1f18f6f3494f1cd7ea9ac5b06c06c871e2d3a513bec6657446e65a11f4dba86206fd90bd3037f7da7332691a1b5f08f15df42f6425018cf69be931dfd46fbcbc44ea76a7f9e8a519023d8aeb6053e42a2b7b52e712cc93e44c5f017fa796b928c7eacefe3542defd94b35bd6765726ec7c4fc67236a0f3e055f7b09a98c3c3ce3846b809b9804ab463d2430621618eb4ae66b4ac45c2f32a30f7d7a76823", 0x1000, 0xffffffffffffffff, 0x0, 0x2}]) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000001500)=ANY=[@ANYBLOB="0100000001000000180000004ae25d64f35be56587157f06834bf1e273e946cc0ed3fcef404929ae2800e9cdd2968df9f69e0d620708b434b174eb3f81dca2b1451758d64ff9b4a59adc78df85429018b9bf8c36f160c4c0f2", @ANYRES32, @ANYBLOB="0d0000000000cc1ba2f230000000009ab43ee99efb56f11f00e643cf0082046b34a254b153eba553f12fc091c4b7955e5d746be02d561e6e28ae2a0dd6772126556463670ee47a43602ec2455f3454280200f0576800000000"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x80000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000014c0)}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffc00}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 08:56:08 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000000240)='./file0\x00', 0x0) fork() waitid(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) clone3(0x0, 0x0) waitid(0x0, 0x0, &(0x7f0000000580), 0x2, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000380)={0x20200}, 0x18) perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0xa) r0 = fork() ptrace(0xffffffffffffffff, r0) waitid(0x0, r0, &(0x7f0000000080), 0x8, 0x0) 08:56:08 executing program 6: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900)="5ed0b2ff68d76fb346352b602a2a1295cbe01cb3f64fbed9e7f9bc9be0f300cb97f6a204cc586e45dfb949002f61f8fb969dd435dd0c37c5077e5b10cfeafd75205e215b167323a3b971b0ec98e6c3d4d825cae01271cb35cdd091e4872367f354e0dc81a7e4ac79775bc1dcaafe2f5079da79d1989f1ddce6722fc438a7217526cfe75d53471624d6f091e19a7fb699ea27efa9e0fd1914e7c35f297afd9b9b85ff0ce7a982f4fa0c172ea5f06479eec302f30e5df66273717e028f4ca7d4c5b6bc8a3c3c67f688195f22488a15d9e1f7e5fed3a6c2aba7bc308b0e2c5657f4538f4a3bf9b975bb887a901ab3c85261be3e331b741313e78b5ad63b7b1b378e9c79dc4a95b2b4d15cd1d1b808844378f882a72af1e5b0eefd356e0247246e60643204c3b46183dbe4e066c55cb1dcdaa7b70ef43ab2fa4d2b8c4c1a89cb0e325fd9716874d3856cf368efd1f92d21214e55e4de647c37c71887d11f74f9afe1616e3054ceae601e4b3555e243c1882ad42c7730caeb309e7714ad87c55e9fba308cfc4161e562abde3ac4f3d7e0a3584d4928100197f102307c05c0b4b4898b0591bc1433af443478979f28e6136ffb21aaeac2be5490475a08e96bb94fd9d9d3aa2f8a1e147a80ba9bfd04dac3f476ff128476c693ea71f7be47a508c98eddc479eb703d6f17cc5be2182f7c39b0a47eb23e0808b5d87dd2a9ce88eb48a601", 0x200) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x7e) fcntl$setstatus(r0, 0x4, 0x44000) dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x9, &(0x7f00000001c0)=0x5, 0x4) sendfile(r0, r1, 0x0, 0xfdef) [ 126.526431] Bluetooth: hci4: unexpected cc 0x2029 length: 16 > 1 [ 126.527657] Bluetooth: hci4: ACL packet for unknown connection handle 2745 [ 126.529078] Bluetooth: hci4: ISO packet for unknown connection handle 1106 [ 126.530369] Bluetooth: hci4: ISO packet for unknown connection handle 1106 08:56:08 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = pidfd_open(r0, 0x0) pidfd_send_signal(r1, 0x0, 0x0, 0x4) 08:56:08 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x20040, 0x0) mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x31006, 0x0) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x2000, 0x0) 08:56:08 executing program 0: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) recvfrom(r0, 0x0, 0x0, 0x400000c1, 0x0, 0x0) [ 126.531805] Bluetooth: hci4: SCO packet for unknown connection handle 205 [ 126.662275] Bluetooth: hci4: unexpected cc 0x2029 length: 16 > 1 [ 126.664582] Bluetooth: hci4: ACL packet for unknown connection handle 2745 [ 126.666417] Bluetooth: hci4: ISO packet for unknown connection handle 1106 [ 126.669375] Bluetooth: hci4: ISO packet for unknown connection handle 1106 08:56:08 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x40001) 08:56:08 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[]) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f00000001c0)={0x0, 0x70}, 0x20) 08:56:08 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) read$rfkill(r0, 0x0, 0x0) 08:56:08 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff) write(r0, &(0x7f0000000080)="01010101", 0x4) read(r0, &(0x7f00000000c0)=""/4, 0x4) close(r0) 08:56:09 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[]) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f00000001c0)={0x0, 0x70}, 0x20) 08:56:09 executing program 5: syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x6}, @HCI_OP_LE_CLEAR_RESOLV_LIST}}, 0x16) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="02b9ca0168c5209845fa35b89e000000000000000500000100", @ANYRES16], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="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"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x6a}, {0x7, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x5, 0x6d, "9a0edb", 0x100, 0x8}, {@any, 0x8, 0x2f, 0x5, "d960ea", 0x90ff, 0x7}, {@none, 0x5, 0xb1, 0x6c, "c5f224", 0x8001, 0x6b}, {@any, 0x47, 0x8, 0x4, "0587e0", 0x8000, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5, 0x80, 0x7, "db71b7", 0x1, 0x7f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x1f, 0x1, "70dfc4", 0x3, 0x8}, {@none, 0xf9, 0x8, 0x0, '(](', 0x0, 0x9}]}}}, 0x6d) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="cf5fb29327c3f6cc7b825a804ff58b2ce07b37a0721e012f4624c285f812bbed0d70f8649edc990e4187e6776aa2127add02485983d8c997fa67a867bb2e06bee305b1010500ab1eb6bd5c247f5b8736d9099055e77abdb8ac49402eaae702b379b1de6bd86e236327358db0b768740b9fdecb2ee4f79151abba", @ANYRES64=r1, @ANYRESHEX]) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000d00)=ANY=[@ANYBLOB="03cd00ffff"], 0x5) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYRESHEX=r1, @ANYRESDEC=r0], 0x90) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 08:56:09 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x0) keyctl$get_security(0x6, r0, 0x0, 0x0) 08:56:09 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) read$rfkill(r0, 0x0, 0x0) 08:56:09 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = pidfd_open(r0, 0x0) pidfd_send_signal(r1, 0x0, 0x0, 0x4) 08:56:09 executing program 7: syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x6}, @HCI_OP_LE_CLEAR_RESOLV_LIST}}, 0x16) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="02b9ca0168c5209845fa35b89e000000000000000500000100", @ANYRES16], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="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"/464], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x6a}, {0x7, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x5, 0x6d, "9a0edb", 0x100, 0x8}, {@any, 0x8, 0x2f, 0x5, "d960ea", 0x90ff, 0x7}, {@none, 0x5, 0xb1, 0x6c, "c5f224", 0x8001, 0x6b}, {@any, 0x47, 0x8, 0x4, "0587e0", 0x8000, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5, 0x80, 0x7, "db71b7", 0x1, 0x7f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x1f, 0x1, "70dfc4", 0x3, 0x8}, {@none, 0xf9, 0x8, 0x0, '(](', 0x0, 0x9}]}}}, 0x6d) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="cf5fb29327c3f6cc7b825a804ff58b2ce07b37a0721e012f4624c285f812bbed0d70f8649edc990e4187e6776aa2127ad VM DIAGNOSIS: 08:56:01 Registers: info registers vcpu 0 RAX=0000000000000023 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff82973905 RDI=ffffffff889c0960 RBP=ffffffff889c0920 RSP=ffff88801a03f4c8 R8 =0000000000000000 R9 =ffffed10013c3046 R10=0000000000000023 R11=666666203a302320 R12=0000000000000023 R13=0000000000000010 R14=ffffffff889c0920 R15=ffffffff829738f0 RIP=ffffffff8297395d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000555566f34400 00000000 00000000 GS =0000 ffff8880e5343000 00000000 00000000 LDT=0000 fffffe6b00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055557c78dc58 CR3=000000001cbae000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000a60ce07b00000000cec3662e XMM01=000000000000000003515b82db34ca11 XMM02=0000000000000000333bebdfd0a6a21d XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000001 RBX=0000000000000001 RCX=ffffffff84d172ee RDX=fffffbfff0b82d11 RSI=0000000000000004 RDI=ffffffff85c16880 RBP=ffffffff85c16880 RSP=ffff888017067b50 R8 =0000000000000000 R9 =fffffbfff0b82d10 R10=ffffffff85c16883 R11=0000000000000000 R12=1ffff11002e0cf6b R13=0000000000000003 R14=fffffbfff0b82d10 R15=ffff888017067b88 RIP=ffffffff84d17480 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000555566af3400 00000000 00000000 GS =0000 ffff8880e5443000 00000000 00000000 LDT=0000 fffffe6d00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffc8773fc08 CR3=000000001ef22000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000a60ce07b00000000cec3662e XMM01=000000000000000003515b82db34ca11 XMM02=0000000000000000333bebdfd0a6a21d XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000