Warning: Permanently added '[localhost]:60201' (ECDSA) to the list of known hosts. 2026/01/14 09:06:26 fuzzer started 2026/01/14 09:06:26 dialing manager at localhost:46753 syzkaller login: [ 58.538153] cgroup: Unknown subsys name 'net' [ 58.592552] cgroup: Unknown subsys name 'cpuset' [ 58.602397] cgroup: Unknown subsys name 'rlimit' 2026/01/14 09:06:37 syscalls: 2214 2026/01/14 09:06:37 code coverage: enabled 2026/01/14 09:06:37 comparison tracing: enabled 2026/01/14 09:06:37 extra coverage: enabled 2026/01/14 09:06:37 setuid sandbox: enabled 2026/01/14 09:06:37 namespace sandbox: enabled 2026/01/14 09:06:37 Android sandbox: enabled 2026/01/14 09:06:37 fault injection: enabled 2026/01/14 09:06:37 leak checking: enabled 2026/01/14 09:06:37 net packet injection: enabled 2026/01/14 09:06:37 net device setup: enabled 2026/01/14 09:06:37 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2026/01/14 09:06:37 devlink PCI setup: PCI device 0000:00:10.0 is not available 2026/01/14 09:06:37 USB emulation: enabled 2026/01/14 09:06:37 hci packet injection: enabled 2026/01/14 09:06:37 wifi device emulation: enabled 2026/01/14 09:06:37 802.15.4 emulation: enabled 2026/01/14 09:06:37 fetching corpus: 0, signal 0/2000 (executing program) 2026/01/14 09:06:37 fetching corpus: 50, signal 32101/35538 (executing program) 2026/01/14 09:06:37 fetching corpus: 100, signal 46700/51416 (executing program) 2026/01/14 09:06:37 fetching corpus: 150, signal 54283/60331 (executing program) 2026/01/14 09:06:37 fetching corpus: 200, signal 59667/66990 (executing program) 2026/01/14 09:06:37 fetching corpus: 250, signal 65454/73888 (executing program) 2026/01/14 09:06:38 fetching corpus: 300, signal 69701/79327 (executing program) 2026/01/14 09:06:38 fetching corpus: 350, signal 75559/86116 (executing program) 2026/01/14 09:06:38 fetching corpus: 400, signal 78197/89814 (executing program) 2026/01/14 09:06:38 fetching corpus: 450, signal 81335/93964 (executing program) 2026/01/14 09:06:38 fetching corpus: 500, signal 84089/97693 (executing program) 2026/01/14 09:06:38 fetching corpus: 550, signal 87245/101755 (executing program) 2026/01/14 09:06:38 fetching corpus: 600, signal 89404/104841 (executing program) 2026/01/14 09:06:38 fetching corpus: 650, signal 91302/107628 (executing program) 2026/01/14 09:06:39 fetching corpus: 700, signal 93194/110411 (executing program) 2026/01/14 09:06:39 fetching corpus: 750, signal 95099/113183 (executing program) 2026/01/14 09:06:39 fetching corpus: 800, signal 97036/115975 (executing program) 2026/01/14 09:06:39 fetching corpus: 850, signal 98918/118687 (executing program) 2026/01/14 09:06:39 fetching corpus: 900, signal 100299/120960 (executing program) 2026/01/14 09:06:39 fetching corpus: 950, signal 103586/124727 (executing program) 2026/01/14 09:06:39 fetching corpus: 1000, signal 105139/127071 (executing program) 2026/01/14 09:06:39 fetching corpus: 1050, signal 108268/130648 (executing program) 2026/01/14 09:06:39 fetching corpus: 1100, signal 110183/133187 (executing program) 2026/01/14 09:06:40 fetching corpus: 1150, signal 111516/135216 (executing program) 2026/01/14 09:06:40 fetching corpus: 1200, signal 113560/137749 (executing program) 2026/01/14 09:06:40 fetching corpus: 1250, signal 115958/140592 (executing program) 2026/01/14 09:06:40 fetching corpus: 1300, signal 117392/142641 (executing program) 2026/01/14 09:06:40 fetching corpus: 1350, signal 119479/145142 (executing program) 2026/01/14 09:06:40 fetching corpus: 1400, signal 121282/147358 (executing program) 2026/01/14 09:06:40 fetching corpus: 1450, signal 123151/149599 (executing program) 2026/01/14 09:06:40 fetching corpus: 1500, signal 124252/151292 (executing program) 2026/01/14 09:06:40 fetching corpus: 1550, signal 125918/153343 (executing program) 2026/01/14 09:06:41 fetching corpus: 1600, signal 127249/155136 (executing program) 2026/01/14 09:06:41 fetching corpus: 1650, signal 128503/156865 (executing program) 2026/01/14 09:06:41 fetching corpus: 1700, signal 130127/158809 (executing program) 2026/01/14 09:06:41 fetching corpus: 1750, signal 131174/160316 (executing program) 2026/01/14 09:06:41 fetching corpus: 1800, signal 133055/162380 (executing program) 2026/01/14 09:06:41 fetching corpus: 1850, signal 134146/163856 (executing program) 2026/01/14 09:06:41 fetching corpus: 1900, signal 135565/165556 (executing program) 2026/01/14 09:06:41 fetching corpus: 1950, signal 136209/166756 (executing program) 2026/01/14 09:06:41 fetching corpus: 2000, signal 137339/168264 (executing program) 2026/01/14 09:06:41 fetching corpus: 2050, signal 138639/169778 (executing program) 2026/01/14 09:06:42 fetching corpus: 2100, signal 139635/171138 (executing program) 2026/01/14 09:06:42 fetching corpus: 2150, signal 140531/172417 (executing program) 2026/01/14 09:06:42 fetching corpus: 2200, signal 141528/173683 (executing program) 2026/01/14 09:06:42 fetching corpus: 2250, signal 142781/175152 (executing program) 2026/01/14 09:06:42 fetching corpus: 2300, signal 143641/176385 (executing program) 2026/01/14 09:06:42 fetching corpus: 2350, signal 144485/177524 (executing program) 2026/01/14 09:06:42 fetching corpus: 2400, signal 145545/178773 (executing program) 2026/01/14 09:06:42 fetching corpus: 2450, signal 146383/179900 (executing program) 2026/01/14 09:06:42 fetching corpus: 2500, signal 146971/180882 (executing program) 2026/01/14 09:06:42 fetching corpus: 2550, signal 147572/181876 (executing program) 2026/01/14 09:06:43 fetching corpus: 2600, signal 148083/182805 (executing program) 2026/01/14 09:06:43 fetching corpus: 2650, signal 148930/183883 (executing program) 2026/01/14 09:06:43 fetching corpus: 2700, signal 150019/185138 (executing program) 2026/01/14 09:06:43 fetching corpus: 2750, signal 150682/186098 (executing program) 2026/01/14 09:06:43 fetching corpus: 2800, signal 151325/187041 (executing program) 2026/01/14 09:06:43 fetching corpus: 2850, signal 152080/188022 (executing program) 2026/01/14 09:06:43 fetching corpus: 2900, signal 152842/188993 (executing program) 2026/01/14 09:06:43 fetching corpus: 2950, signal 153514/189883 (executing program) 2026/01/14 09:06:43 fetching corpus: 3000, signal 154077/190745 (executing program) 2026/01/14 09:06:44 fetching corpus: 3050, signal 154594/191539 (executing program) 2026/01/14 09:06:44 fetching corpus: 3100, signal 155789/192619 (executing program) 2026/01/14 09:06:44 fetching corpus: 3150, signal 156380/193454 (executing program) 2026/01/14 09:06:44 fetching corpus: 3200, signal 157146/194296 (executing program) 2026/01/14 09:06:44 fetching corpus: 3250, signal 157570/195079 (executing program) 2026/01/14 09:06:44 fetching corpus: 3300, signal 158027/195797 (executing program) 2026/01/14 09:06:44 fetching corpus: 3350, signal 159084/196764 (executing program) 2026/01/14 09:06:44 fetching corpus: 3400, signal 159659/197524 (executing program) 2026/01/14 09:06:44 fetching corpus: 3450, signal 160146/198221 (executing program) 2026/01/14 09:06:45 fetching corpus: 3500, signal 160797/198984 (executing program) 2026/01/14 09:06:45 fetching corpus: 3550, signal 161366/199727 (executing program) 2026/01/14 09:06:45 fetching corpus: 3600, signal 162055/200502 (executing program) 2026/01/14 09:06:45 fetching corpus: 3650, signal 162852/201269 (executing program) 2026/01/14 09:06:45 fetching corpus: 3700, signal 163603/202045 (executing program) 2026/01/14 09:06:45 fetching corpus: 3750, signal 164403/202853 (executing program) 2026/01/14 09:06:45 fetching corpus: 3800, signal 164861/203455 (executing program) 2026/01/14 09:06:45 fetching corpus: 3850, signal 165377/204087 (executing program) 2026/01/14 09:06:45 fetching corpus: 3900, signal 165859/204723 (executing program) 2026/01/14 09:06:46 fetching corpus: 3950, signal 166414/205386 (executing program) 2026/01/14 09:06:46 fetching corpus: 4000, signal 166908/206011 (executing program) 2026/01/14 09:06:46 fetching corpus: 4050, signal 167605/206702 (executing program) 2026/01/14 09:06:46 fetching corpus: 4100, signal 168113/207332 (executing program) 2026/01/14 09:06:46 fetching corpus: 4150, signal 168638/207914 (executing program) 2026/01/14 09:06:46 fetching corpus: 4200, signal 169101/208487 (executing program) 2026/01/14 09:06:46 fetching corpus: 4250, signal 169547/209061 (executing program) 2026/01/14 09:06:46 fetching corpus: 4300, signal 170040/209642 (executing program) 2026/01/14 09:06:47 fetching corpus: 4350, signal 170482/210146 (executing program) 2026/01/14 09:06:47 fetching corpus: 4400, signal 171072/210669 (executing program) 2026/01/14 09:06:47 fetching corpus: 4450, signal 171982/211270 (executing program) 2026/01/14 09:06:47 fetching corpus: 4500, signal 172546/211794 (executing program) 2026/01/14 09:06:47 fetching corpus: 4550, signal 173311/212359 (executing program) 2026/01/14 09:06:47 fetching corpus: 4600, signal 174103/212881 (executing program) 2026/01/14 09:06:47 fetching corpus: 4650, signal 174678/213368 (executing program) 2026/01/14 09:06:47 fetching corpus: 4700, signal 175040/213863 (executing program) 2026/01/14 09:06:48 fetching corpus: 4750, signal 175705/214412 (executing program) 2026/01/14 09:06:48 fetching corpus: 4800, signal 176223/214876 (executing program) 2026/01/14 09:06:48 fetching corpus: 4850, signal 176584/215308 (executing program) 2026/01/14 09:06:48 fetching corpus: 4900, signal 176997/215759 (executing program) 2026/01/14 09:06:48 fetching corpus: 4950, signal 177625/216214 (executing program) 2026/01/14 09:06:48 fetching corpus: 5000, signal 177987/216620 (executing program) 2026/01/14 09:06:48 fetching corpus: 5050, signal 178323/217024 (executing program) 2026/01/14 09:06:48 fetching corpus: 5100, signal 178888/217443 (executing program) 2026/01/14 09:06:48 fetching corpus: 5150, signal 179486/217834 (executing program) 2026/01/14 09:06:49 fetching corpus: 5200, signal 179970/218213 (executing program) 2026/01/14 09:06:49 fetching corpus: 5250, signal 180543/218604 (executing program) 2026/01/14 09:06:49 fetching corpus: 5300, signal 180987/218935 (executing program) 2026/01/14 09:06:49 fetching corpus: 5350, signal 181352/219269 (executing program) 2026/01/14 09:06:49 fetching corpus: 5400, signal 181728/219614 (executing program) 2026/01/14 09:06:49 fetching corpus: 5450, signal 182121/219854 (executing program) 2026/01/14 09:06:49 fetching corpus: 5500, signal 182529/219854 (executing program) 2026/01/14 09:06:49 fetching corpus: 5550, signal 182990/219854 (executing program) 2026/01/14 09:06:49 fetching corpus: 5600, signal 183438/219854 (executing program) 2026/01/14 09:06:50 fetching corpus: 5650, signal 183842/219858 (executing program) 2026/01/14 09:06:50 fetching corpus: 5700, signal 184527/219888 (executing program) 2026/01/14 09:06:50 fetching corpus: 5750, signal 184909/219888 (executing program) 2026/01/14 09:06:50 fetching corpus: 5800, signal 185244/219888 (executing program) 2026/01/14 09:06:50 fetching corpus: 5850, signal 185535/219892 (executing program) 2026/01/14 09:06:50 fetching corpus: 5900, signal 185889/219892 (executing program) 2026/01/14 09:06:50 fetching corpus: 5950, signal 186116/219897 (executing program) 2026/01/14 09:06:50 fetching corpus: 6000, signal 186463/219897 (executing program) 2026/01/14 09:06:50 fetching corpus: 6050, signal 186762/219899 (executing program) 2026/01/14 09:06:51 fetching corpus: 6100, signal 187148/219899 (executing program) 2026/01/14 09:06:51 fetching corpus: 6150, signal 187424/219899 (executing program) 2026/01/14 09:06:51 fetching corpus: 6200, signal 187929/219899 (executing program) 2026/01/14 09:06:51 fetching corpus: 6250, signal 188932/219899 (executing program) 2026/01/14 09:06:51 fetching corpus: 6300, signal 189271/219899 (executing program) 2026/01/14 09:06:51 fetching corpus: 6350, signal 189653/219899 (executing program) 2026/01/14 09:06:51 fetching corpus: 6400, signal 190087/219905 (executing program) 2026/01/14 09:06:51 fetching corpus: 6450, signal 190579/219906 (executing program) 2026/01/14 09:06:51 fetching corpus: 6500, signal 190980/219906 (executing program) 2026/01/14 09:06:52 fetching corpus: 6550, signal 191326/219920 (executing program) 2026/01/14 09:06:52 fetching corpus: 6600, signal 191653/219920 (executing program) 2026/01/14 09:06:52 fetching corpus: 6650, signal 192048/219920 (executing program) 2026/01/14 09:06:52 fetching corpus: 6700, signal 192324/219920 (executing program) 2026/01/14 09:06:52 fetching corpus: 6750, signal 192689/219920 (executing program) 2026/01/14 09:06:52 fetching corpus: 6800, signal 193074/219920 (executing program) 2026/01/14 09:06:52 fetching corpus: 6850, signal 193377/219920 (executing program) 2026/01/14 09:06:52 fetching corpus: 6900, signal 193672/219924 (executing program) 2026/01/14 09:06:52 fetching corpus: 6950, signal 193983/219924 (executing program) 2026/01/14 09:06:52 fetching corpus: 7000, signal 194402/219924 (executing program) 2026/01/14 09:06:53 fetching corpus: 7050, signal 194655/219924 (executing program) 2026/01/14 09:06:53 fetching corpus: 7100, signal 194935/219924 (executing program) 2026/01/14 09:06:53 fetching corpus: 7150, signal 195273/219924 (executing program) 2026/01/14 09:06:53 fetching corpus: 7200, signal 195608/219924 (executing program) 2026/01/14 09:06:53 fetching corpus: 7250, signal 196061/219924 (executing program) 2026/01/14 09:06:53 fetching corpus: 7300, signal 196411/219931 (executing program) 2026/01/14 09:06:53 fetching corpus: 7350, signal 196911/219931 (executing program) 2026/01/14 09:06:53 fetching corpus: 7400, signal 197264/219931 (executing program) 2026/01/14 09:06:53 fetching corpus: 7450, signal 197536/219932 (executing program) 2026/01/14 09:06:54 fetching corpus: 7500, signal 197978/219932 (executing program) 2026/01/14 09:06:54 fetching corpus: 7550, signal 198454/219932 (executing program) 2026/01/14 09:06:54 fetching corpus: 7600, signal 198830/219932 (executing program) 2026/01/14 09:06:54 fetching corpus: 7650, signal 199193/219932 (executing program) 2026/01/14 09:06:54 fetching corpus: 7700, signal 199513/219933 (executing program) 2026/01/14 09:06:54 fetching corpus: 7750, signal 199779/219933 (executing program) 2026/01/14 09:06:54 fetching corpus: 7800, signal 200066/219933 (executing program) 2026/01/14 09:06:54 fetching corpus: 7850, signal 200465/219933 (executing program) 2026/01/14 09:06:54 fetching corpus: 7900, signal 200713/219933 (executing program) 2026/01/14 09:06:55 fetching corpus: 7950, signal 201221/219940 (executing program) 2026/01/14 09:06:55 fetching corpus: 8000, signal 201462/219940 (executing program) 2026/01/14 09:06:55 fetching corpus: 8050, signal 201787/219940 (executing program) 2026/01/14 09:06:55 fetching corpus: 8100, signal 202042/219941 (executing program) 2026/01/14 09:06:55 fetching corpus: 8150, signal 202251/219941 (executing program) 2026/01/14 09:06:55 fetching corpus: 8200, signal 202623/219941 (executing program) 2026/01/14 09:06:55 fetching corpus: 8250, signal 202941/219941 (executing program) 2026/01/14 09:06:55 fetching corpus: 8300, signal 203226/219941 (executing program) 2026/01/14 09:06:55 fetching corpus: 8350, signal 203504/219941 (executing program) 2026/01/14 09:06:55 fetching corpus: 8400, signal 203734/219941 (executing program) 2026/01/14 09:06:55 fetching corpus: 8450, signal 203987/219941 (executing program) 2026/01/14 09:06:56 fetching corpus: 8500, signal 204304/219941 (executing program) 2026/01/14 09:06:56 fetching corpus: 8550, signal 204587/219943 (executing program) 2026/01/14 09:06:56 fetching corpus: 8600, signal 204866/219962 (executing program) 2026/01/14 09:06:56 fetching corpus: 8650, signal 205075/219962 (executing program) 2026/01/14 09:06:56 fetching corpus: 8700, signal 205455/219962 (executing program) 2026/01/14 09:06:56 fetching corpus: 8750, signal 205709/219962 (executing program) 2026/01/14 09:06:56 fetching corpus: 8800, signal 206118/219962 (executing program) 2026/01/14 09:06:56 fetching corpus: 8850, signal 206372/219962 (executing program) 2026/01/14 09:06:56 fetching corpus: 8900, signal 206594/219962 (executing program) 2026/01/14 09:06:56 fetching corpus: 8950, signal 206840/219962 (executing program) 2026/01/14 09:06:57 fetching corpus: 9000, signal 207179/219962 (executing program) 2026/01/14 09:06:57 fetching corpus: 9050, signal 207475/219962 (executing program) 2026/01/14 09:06:57 fetching corpus: 9100, signal 207680/219962 (executing program) 2026/01/14 09:06:57 fetching corpus: 9150, signal 208003/219962 (executing program) 2026/01/14 09:06:57 fetching corpus: 9200, signal 208192/219964 (executing program) 2026/01/14 09:06:57 fetching corpus: 9250, signal 208668/219964 (executing program) 2026/01/14 09:06:57 fetching corpus: 9300, signal 209159/219964 (executing program) 2026/01/14 09:06:57 fetching corpus: 9350, signal 209356/219964 (executing program) 2026/01/14 09:06:57 fetching corpus: 9400, signal 209591/219964 (executing program) 2026/01/14 09:06:58 fetching corpus: 9450, signal 209778/219965 (executing program) 2026/01/14 09:06:58 fetching corpus: 9500, signal 210053/219965 (executing program) 2026/01/14 09:06:58 fetching corpus: 9550, signal 210308/219965 (executing program) 2026/01/14 09:06:58 fetching corpus: 9600, signal 210552/219965 (executing program) 2026/01/14 09:06:58 fetching corpus: 9650, signal 210893/219965 (executing program) 2026/01/14 09:06:58 fetching corpus: 9700, signal 211229/219965 (executing program) 2026/01/14 09:06:58 fetching corpus: 9750, signal 211382/219965 (executing program) 2026/01/14 09:06:58 fetching corpus: 9800, signal 211677/219965 (executing program) 2026/01/14 09:06:58 fetching corpus: 9850, signal 211903/219965 (executing program) 2026/01/14 09:06:58 fetching corpus: 9900, signal 212191/219965 (executing program) 2026/01/14 09:06:59 fetching corpus: 9950, signal 212466/219965 (executing program) 2026/01/14 09:06:59 fetching corpus: 10000, signal 212678/219965 (executing program) 2026/01/14 09:06:59 fetching corpus: 10050, signal 212924/219966 (executing program) 2026/01/14 09:06:59 fetching corpus: 10100, signal 213121/219966 (executing program) 2026/01/14 09:06:59 fetching corpus: 10150, signal 213389/219966 (executing program) 2026/01/14 09:06:59 fetching corpus: 10200, signal 213638/219966 (executing program) 2026/01/14 09:06:59 fetching corpus: 10250, signal 213935/219966 (executing program) 2026/01/14 09:06:59 fetching corpus: 10300, signal 214144/219966 (executing program) 2026/01/14 09:06:59 fetching corpus: 10350, signal 214495/219966 (executing program) 2026/01/14 09:06:59 fetching corpus: 10400, signal 214861/219966 (executing program) 2026/01/14 09:06:59 fetching corpus: 10450, signal 215108/219966 (executing program) 2026/01/14 09:07:00 fetching corpus: 10500, signal 215314/219966 (executing program) 2026/01/14 09:07:00 fetching corpus: 10550, signal 215568/219966 (executing program) 2026/01/14 09:07:00 fetching corpus: 10600, signal 215800/219966 (executing program) 2026/01/14 09:07:00 fetching corpus: 10650, signal 216045/219966 (executing program) 2026/01/14 09:07:00 fetching corpus: 10700, signal 216279/219966 (executing program) 2026/01/14 09:07:00 fetching corpus: 10750, signal 216482/219966 (executing program) 2026/01/14 09:07:00 fetching corpus: 10800, signal 216722/219966 (executing program) 2026/01/14 09:07:00 fetching corpus: 10850, signal 216878/219966 (executing program) 2026/01/14 09:07:00 fetching corpus: 10900, signal 217213/219966 (executing program) 2026/01/14 09:07:00 fetching corpus: 10950, signal 217443/219966 (executing program) 2026/01/14 09:07:00 fetching corpus: 11000, signal 217667/219972 (executing program) 2026/01/14 09:07:00 fetching corpus: 11050, signal 217960/219973 (executing program) 2026/01/14 09:07:01 fetching corpus: 11100, signal 218158/219973 (executing program) 2026/01/14 09:07:01 fetching corpus: 11150, signal 218390/219973 (executing program) 2026/01/14 09:07:01 fetching corpus: 11194, signal 218594/219974 (executing program) 2026/01/14 09:07:01 fetching corpus: 11194, signal 218594/219974 (executing program) 2026/01/14 09:07:03 starting 8 fuzzer processes 09:07:03 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) tee(r1, r0, 0x9, 0x0) 09:07:03 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) r1 = dup(r0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, 0x0) 09:07:03 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000040), &(0x7f00000000c0)=@v3, 0x14, 0x0) 09:07:03 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) lstat(&(0x7f0000000180)='./file1\x00', &(0x7f0000000400)) [ 95.868679] audit: type=1400 audit(1768381624.087:7): avc: denied { execmem } for pid=272 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 09:07:04 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TCXONC(r0, 0x540a, 0x1) 09:07:04 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000100)=0x20, 0x4) 09:07:04 executing program 6: r0 = creat(&(0x7f00000000c0)='./file1\x00', 0x0) open_by_handle_at(r0, &(0x7f0000000140)=@reiserfs_2={0x8, 0x2, {0xfff}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 09:07:04 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/cpuinfo\x00', 0x0, 0x0) dup2(r2, r1) sendfile(r0, r1, 0x0, 0xfdef) [ 96.979574] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 96.982268] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 96.985196] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 96.991382] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 96.995273] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 97.039678] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 97.042263] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 97.049598] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 97.053834] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 97.058943] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 97.114035] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 97.130476] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 97.135590] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 97.149497] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 97.157553] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 97.233518] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 97.236760] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 97.240255] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 97.246576] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 97.261575] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 97.263939] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 97.276555] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 97.307258] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 97.312156] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 97.313919] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 97.327401] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 97.329417] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 97.332767] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 97.339248] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 97.340429] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 97.345929] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 97.350997] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 97.352487] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 97.353882] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 97.384284] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 97.384390] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 97.387911] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 97.392506] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 97.412946] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 97.423468] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 99.075638] Bluetooth: hci1: command tx timeout [ 99.075677] Bluetooth: hci0: command tx timeout [ 99.203208] Bluetooth: hci2: command tx timeout [ 99.332280] Bluetooth: hci3: command tx timeout [ 99.395230] Bluetooth: hci4: command tx timeout [ 99.460257] Bluetooth: hci7: command tx timeout [ 99.460278] Bluetooth: hci6: command tx timeout [ 99.461006] Bluetooth: hci5: command tx timeout [ 101.123173] Bluetooth: hci1: command tx timeout [ 101.124177] Bluetooth: hci0: command tx timeout [ 101.252201] Bluetooth: hci2: command tx timeout [ 101.381129] Bluetooth: hci3: command tx timeout [ 101.445170] Bluetooth: hci4: command tx timeout [ 101.507241] Bluetooth: hci5: command tx timeout [ 101.507270] Bluetooth: hci6: command tx timeout [ 101.507705] Bluetooth: hci7: command tx timeout [ 103.173148] Bluetooth: hci0: command tx timeout [ 103.173610] Bluetooth: hci1: command tx timeout [ 103.301217] Bluetooth: hci2: command tx timeout [ 103.428218] Bluetooth: hci3: command tx timeout [ 103.492560] Bluetooth: hci4: command tx timeout [ 103.556195] Bluetooth: hci6: command tx timeout [ 103.556495] Bluetooth: hci5: command tx timeout [ 103.556954] Bluetooth: hci7: command tx timeout [ 105.220139] Bluetooth: hci1: command tx timeout [ 105.220580] Bluetooth: hci0: command tx timeout [ 105.348698] Bluetooth: hci2: command tx timeout [ 105.475940] Bluetooth: hci3: command tx timeout [ 105.539153] Bluetooth: hci4: command tx timeout [ 105.603289] Bluetooth: hci7: command tx timeout [ 105.604157] Bluetooth: hci5: command tx timeout [ 105.604548] Bluetooth: hci6: command tx timeout [ 130.435227] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.435957] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.462716] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.470154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.709436] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.710142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.846228] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.846864] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.912499] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.913092] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.028744] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.029670] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.133498] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.134075] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 09:07:39 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000040), &(0x7f00000000c0)=@v3, 0x14, 0x0) [ 131.219888] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.220513] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 09:07:39 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000100)=0x20, 0x4) 09:07:39 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000040), &(0x7f00000000c0)=@v3, 0x14, 0x0) 09:07:39 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000100)=0x20, 0x4) [ 131.308516] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.309651] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 09:07:39 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000040), &(0x7f00000000c0)=@v3, 0x14, 0x0) 09:07:39 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000100)=0x20, 0x4) 09:07:39 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8924, &(0x7f0000000040)={'wlan0\x00', 0x0}) [ 131.434142] audit: type=1400 audit(1768381659.653:8): avc: denied { open } for pid=3876 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 131.439409] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.440000] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.448750] audit: type=1400 audit(1768381659.653:9): avc: denied { kernel } for pid=3876 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 131.467074] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.467690] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 09:07:39 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_SETSEL(r0, 0x4b33, 0x0) [ 131.578630] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.579313] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.647220] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.647829] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.677522] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.678417] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.859057] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.859761] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.884840] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.885570] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 09:07:40 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TCXONC(r0, 0x540a, 0x1) 09:07:40 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/cpuinfo\x00', 0x0, 0x0) dup2(r2, r1) sendfile(r0, r1, 0x0, 0xfdef) 09:07:40 executing program 6: r0 = creat(&(0x7f00000000c0)='./file1\x00', 0x0) open_by_handle_at(r0, &(0x7f0000000140)=@reiserfs_2={0x8, 0x2, {0xfff}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 09:07:40 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) r1 = dup(r0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, 0x0) 09:07:40 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) lstat(&(0x7f0000000180)='./file1\x00', &(0x7f0000000400)) 09:07:40 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8924, &(0x7f0000000040)={'wlan0\x00', 0x0}) 09:07:40 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_SETSEL(r0, 0x4b33, 0x0) 09:07:40 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) tee(r1, r0, 0x9, 0x0) 09:07:40 executing program 6: r0 = creat(&(0x7f00000000c0)='./file1\x00', 0x0) open_by_handle_at(r0, &(0x7f0000000140)=@reiserfs_2={0x8, 0x2, {0xfff}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 09:07:40 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) r1 = dup(r0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, 0x0) 09:07:40 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) tee(r1, r0, 0x9, 0x0) 09:07:40 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) lstat(&(0x7f0000000180)='./file1\x00', &(0x7f0000000400)) 09:07:40 executing program 6: r0 = creat(&(0x7f00000000c0)='./file1\x00', 0x0) open_by_handle_at(r0, &(0x7f0000000140)=@reiserfs_2={0x8, 0x2, {0xfff}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 09:07:40 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_SETSEL(r0, 0x4b33, 0x0) 09:07:40 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8924, &(0x7f0000000040)={'wlan0\x00', 0x0}) 09:07:40 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/cpuinfo\x00', 0x0, 0x0) dup2(r2, r1) sendfile(r0, r1, 0x0, 0xfdef) 09:07:40 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) r1 = dup(r0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, 0x0) 09:07:40 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TCXONC(r0, 0x540a, 0x1) 09:07:40 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_SETSEL(r0, 0x4b33, 0x0) 09:07:40 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) lstat(&(0x7f0000000180)='./file1\x00', &(0x7f0000000400)) 09:07:40 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) tee(r1, r0, 0x9, 0x0) 09:07:40 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8924, &(0x7f0000000040)={'wlan0\x00', 0x0}) 09:07:40 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8924, &(0x7f0000000040)={'wlan0\x00', 0x0}) 09:07:40 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0xee01, 0xee00}}, './file0\x00'}) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x1000001, &(0x7f0000000140)={[{@uid={'uid', 0x3d, r1}}], [{@subj_user={'subj_user', 0x3d, '}\\!:$^!#*+'}}]}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) 09:07:40 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TCXONC(r0, 0x540a, 0x1) 09:07:40 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0xc, 0x0, 0x27) 09:07:40 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') openat$cgroup_ro(r0, &(0x7f0000001140)='memory.stat\x00', 0x0, 0x0) 09:07:40 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0xee01, 0xee00}}, './file0\x00'}) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x1000001, &(0x7f0000000140)={[{@uid={'uid', 0x3d, r1}}], [{@subj_user={'subj_user', 0x3d, '}\\!:$^!#*+'}}]}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) 09:07:40 executing program 7: newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) setresuid(0x0, r0, 0x0) clone3(&(0x7f00000009c0)={0x110000180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000980)=[0xffffffffffffffff], 0x1}, 0x58) 09:07:40 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8924, &(0x7f0000000040)={'wlan0\x00', 0x0}) 09:07:40 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/cpuinfo\x00', 0x0, 0x0) dup2(r2, r1) sendfile(r0, r1, 0x0, 0xfdef) 09:07:40 executing program 1: fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0xc9ffff, 0x0) 09:07:40 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') openat$cgroup_ro(r0, &(0x7f0000001140)='memory.stat\x00', 0x0, 0x0) 09:07:40 executing program 4: symlink(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file1\x00') syz_mount_image$tmpfs(&(0x7f00000005c0), &(0x7f0000000600)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002800)) mount$9p_unix(&(0x7f0000000040)='./file1\x00', &(0x7f0000000200)='./file1\x00', 0x0, 0x1241405, 0x0) 09:07:40 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0xc, 0x0, 0x27) 09:07:40 executing program 1: fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0xc9ffff, 0x0) 09:07:40 executing program 7: newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) setresuid(0x0, r0, 0x0) clone3(&(0x7f00000009c0)={0x110000180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000980)=[0xffffffffffffffff], 0x1}, 0x58) 09:07:40 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8924, &(0x7f0000000040)={'wlan0\x00', 0x0}) [ 132.538319] [ 132.538547] ===================================== [ 132.538922] WARNING: bad unlock balance detected! [ 132.539321] 6.19.0-rc5-next-20260114 #1 Not tainted [ 132.539708] ------------------------------------- [ 132.540078] syz-executor.5/286 is trying to release lock (rcu_read_lock) at: [ 132.541547] [] __wait_on_freeing_inode+0x105/0x350 [ 132.543045] but there are no more locks to release! [ 132.544145] [ 132.544145] other info that might help us debug this: [ 132.545997] 4 locks held by syz-executor.5/286: [ 132.547067] #0: ffff88800fdc43f8 (sb_writers#3){.+.+}-{0:0}, at: filename_create+0xf7/0x400 [ 132.549040] #1: ffff88801b1296f0 (&type->i_mutex_dir_key#3/1){+.+.}-{4:4}, at: filename_create+0x1b1/0x400 [ 132.549846] #2: ffff88800fda0950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xe32/0x12d0 [ 132.550572] #3: ffffffff85c16898 (inode_hash_lock){+.+.}-{3:3}, at: insert_inode_locked+0xf9/0x890 [ 132.551327] [ 132.551327] stack backtrace: [ 132.551693] CPU: 1 UID: 0 PID: 286 Comm: syz-executor.5 Not tainted 6.19.0-rc5-next-20260114 #1 PREEMPT(lazy) [ 132.551708] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 132.551715] Call Trace: [ 132.551719] [ 132.551723] dump_stack_lvl+0xca/0x120 [ 132.551754] ? __wait_on_freeing_inode+0x105/0x350 [ 132.551768] print_unlock_imbalance_bug+0x118/0x130 [ 132.551784] ? __wait_on_freeing_inode+0x105/0x350 [ 132.551798] lock_release+0x1ee/0x270 [ 132.551814] __wait_on_freeing_inode+0x10a/0x350 [ 132.551828] ? __pfx___wait_on_freeing_inode+0x10/0x10 [ 132.551844] ? __pfx_var_wake_function+0x10/0x10 [ 132.551862] ? lock_is_held_type+0x9e/0x120 [ 132.551882] insert_inode_locked+0x25f/0x890 [ 132.551899] __ext4_new_inode+0x223d/0x4cd0 [ 132.551916] ? __pfx___ext4_new_inode+0x10/0x10 [ 132.551930] ? __pfx_avc_has_perm+0x10/0x10 [ 132.551944] ? __pfx___dquot_initialize+0x10/0x10 [ 132.551965] ext4_mkdir+0x331/0xb30 [ 132.551984] ? __pfx_ext4_mkdir+0x10/0x10 [ 132.551999] ? security_inode_permission+0x72/0xe0 [ 132.552013] vfs_mkdir+0x6d8/0xc00 [ 132.552030] do_mkdirat+0x11a/0x440 [ 132.552043] ? __pfx_do_mkdirat+0x10/0x10 [ 132.552055] ? strncpy_from_user+0x21b/0x2f0 [ 132.552072] __x64_sys_mkdir+0x65/0x80 [ 132.552085] do_syscall_64+0xbf/0x420 [ 132.552097] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.552110] RIP: 0033:0x7f8ed4110c27 [ 132.552119] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 132.552130] RSP: 002b:00007ffce8121f88 EFLAGS: 00000206 ORIG_RAX: 0000000000000053 [ 132.552141] RAX: ffffffffffffffda RBX: 00007ffce8122010 RCX: 00007f8ed4110c27 [ 132.552149] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 00007ffce8122010 [ 132.552157] RBP: 00007ffce8121fec R08: 0000000000000000 R09: 0000000000000003 [ 132.552164] R10: 00007ffce8121d27 R11: 0000000000000206 R12: 0000000000000032 [ 132.552172] R13: 00000000000204e4 R14: 0000000000000006 R15: 00007ffce8122050 [ 132.552182] [ 132.567816] ------------[ cut here ]------------ [ 132.595269] WARNING: kernel/rcu/tree_plugin.h:443 at __rcu_read_unlock+0x25f/0x5c0, CPU#1: syz-executor.5/286 [ 132.623302] Modules linked in: [ 132.623598] CPU: 1 UID: 0 PID: 286 Comm: syz-executor.5 Not tainted 6.19.0-rc5-next-20260114 #1 PREEMPT(lazy) [ 132.627396] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 132.628044] RIP: 0010:__rcu_read_unlock+0x25f/0x5c0 [ 132.628549] Code: f2 02 00 00 c7 43 58 01 00 00 00 bf 09 00 00 00 e8 16 c0 de ff 4d 85 f6 0f 84 73 fe ff ff e8 38 8a 20 00 fb e9 68 fe ff ff 90 <0f> 0b 90 5b 5d 41 5c 41 5d 41 5e e9 81 24 74 03 e8 bc 5c 56 00 e9 [ 132.630004] RSP: 0018:ffff88801b5079e0 EFLAGS: 00010286 [ 132.630468] RAX: 00000000ffffffff RBX: ffff888015c15280 RCX: ffffffff81565a27 [ 132.631039] RDX: 0000000000000000 RSI: ffffffff81565a30 RDI: ffff888015c1567c [ 132.631637] RBP: ffff888015c15280 R08: 0000000000000000 R09: fffffbfff0ba6ffc [ 132.632239] R10: 0000000000000000 R11: 0000000000000001 R12: ffff888015c15280 [ 132.632797] R13: 0000000000000001 R14: ffffffff85c0f770 R15: ffff888049139628 [ 132.633399] FS: 0000555582837400(0000) GS:ffff8880e5443000(0000) knlGS:0000000000000000 [ 132.634032] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 132.634533] CR2: 00007ffcc899d40c CR3: 000000000bb6f000 CR4: 0000000000350ef0 [ 132.635151] Call Trace: [ 132.635396] [ 132.636028] __wait_on_freeing_inode+0x10f/0x350 [ 132.636730] ? __pfx___wait_on_freeing_inode+0x10/0x10 [ 132.637796] ? __pfx_var_wake_function+0x10/0x10 [ 132.639015] ? lock_is_held_type+0x9e/0x120 [ 132.640143] insert_inode_locked+0x25f/0x890 [ 132.641720] __ext4_new_inode+0x223d/0x4cd0 [ 132.644205] ? __pfx___ext4_new_inode+0x10/0x10 [ 132.645093] ? __pfx_avc_has_perm+0x10/0x10 [ 132.645726] ? __pfx___dquot_initialize+0x10/0x10 [ 132.647895] ext4_mkdir+0x331/0xb30 [ 132.649819] ? __pfx_ext4_mkdir+0x10/0x10 [ 132.650441] ? security_inode_permission+0x72/0xe0 [ 132.652026] vfs_mkdir+0x6d8/0xc00 [ 132.653399] do_mkdirat+0x11a/0x440 [ 132.654373] ? __pfx_do_mkdirat+0x10/0x10 [ 132.655048] ? strncpy_from_user+0x21b/0x2f0 [ 132.658671] __x64_sys_mkdir+0x65/0x80 [ 132.659359] do_syscall_64+0xbf/0x420 [ 132.660166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.660666] RIP: 0033:0x7f8ed4110c27 [ 132.661022] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 132.662488] RSP: 002b:00007ffce8121f88 EFLAGS: 00000206 ORIG_RAX: 0000000000000053 [ 132.663088] RAX: ffffffffffffffda RBX: 00007ffce8122010 RCX: 00007f8ed4110c27 [ 132.663690] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 00007ffce8122010 [ 132.664292] RBP: 00007ffce8121fec R08: 0000000000000000 R09: 0000000000000003 [ 132.664852] R10: 00007ffce8121d27 R11: 0000000000000206 R12: 0000000000000032 [ 132.665451] R13: 00000000000204e4 R14: 0000000000000006 R15: 00007ffce8122050 [ 132.668009] [ 132.668246] irq event stamp: 195259 [ 132.668530] hardirqs last enabled at (195259): [] _raw_spin_unlock_irqrestore+0x2c/0x50 [ 132.669386] hardirqs last disabled at (195258): [] _raw_spin_lock_irqsave+0x53/0x60 [ 132.670209] softirqs last enabled at (195252): [] do_softirq+0x48/0x80 [ 132.670911] softirqs last disabled at (195005): [] do_softirq+0x48/0x80 [ 132.671663] ---[ end trace 0000000000000000 ]--- 09:07:40 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0xc, 0x0, 0x27) 09:07:40 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0xee01, 0xee00}}, './file0\x00'}) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x1000001, &(0x7f0000000140)={[{@uid={'uid', 0x3d, r1}}], [{@subj_user={'subj_user', 0x3d, '}\\!:$^!#*+'}}]}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) 09:07:40 executing program 4: symlink(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file1\x00') syz_mount_image$tmpfs(&(0x7f00000005c0), &(0x7f0000000600)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002800)) mount$9p_unix(&(0x7f0000000040)='./file1\x00', &(0x7f0000000200)='./file1\x00', 0x0, 0x1241405, 0x0) 09:07:41 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="18000000680001"], 0x18}], 0x1}, 0x0) 09:07:41 executing program 1: fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0xc9ffff, 0x0) 09:07:41 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0xc, 0x0, 0x27) 09:07:41 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') openat$cgroup_ro(r0, &(0x7f0000001140)='memory.stat\x00', 0x0, 0x0) 09:07:41 executing program 6: syz_emit_ethernet(0x52, &(0x7f0000000180)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "708329", 0x1c, 0x3c, 0x0, @remote, @local, {[@routing], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 09:07:41 executing program 4: symlink(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file1\x00') syz_mount_image$tmpfs(&(0x7f00000005c0), &(0x7f0000000600)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002800)) mount$9p_unix(&(0x7f0000000040)='./file1\x00', &(0x7f0000000200)='./file1\x00', 0x0, 0x1241405, 0x0) 09:07:41 executing program 7: newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) setresuid(0x0, r0, 0x0) clone3(&(0x7f00000009c0)={0x110000180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000980)=[0xffffffffffffffff], 0x1}, 0x58) 09:07:41 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0xee01, 0xee00}}, './file0\x00'}) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x1000001, &(0x7f0000000140)={[{@uid={'uid', 0x3d, r1}}], [{@subj_user={'subj_user', 0x3d, '}\\!:$^!#*+'}}]}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) 09:07:41 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') openat$cgroup_ro(r0, &(0x7f0000001140)='memory.stat\x00', 0x0, 0x0) 09:07:41 executing program 1: fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0xc9ffff, 0x0) 09:07:41 executing program 7: newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) setresuid(0x0, r0, 0x0) clone3(&(0x7f00000009c0)={0x110000180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000980)=[0xffffffffffffffff], 0x1}, 0x58) 09:07:41 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="18000000680001"], 0x18}], 0x1}, 0x0) 09:07:41 executing program 6: syz_emit_ethernet(0x52, &(0x7f0000000180)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "708329", 0x1c, 0x3c, 0x0, @remote, @local, {[@routing], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 09:07:41 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="18000000680001"], 0x18}], 0x1}, 0x0) 09:07:41 executing program 4: symlink(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file1\x00') syz_mount_image$tmpfs(&(0x7f00000005c0), &(0x7f0000000600)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002800)) mount$9p_unix(&(0x7f0000000040)='./file1\x00', &(0x7f0000000200)='./file1\x00', 0x0, 0x1241405, 0x0) 09:07:41 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) listen(r0, 0x0) 09:07:41 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="18000000680001"], 0x18}], 0x1}, 0x0) 09:07:41 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) listen(r0, 0x0) 09:07:41 executing program 6: syz_emit_ethernet(0x52, &(0x7f0000000180)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "708329", 0x1c, 0x3c, 0x0, @remote, @local, {[@routing], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 09:07:41 executing program 7: r0 = memfd_create(&(0x7f0000000080)='/proc/thread-self/attr/fscreate\x00\x14~\xfe\x9a!\xb2\xb73h\xd2oR\arV(C\xe7\xbb\xd3\x83\xd4\x9b\xb7\xc8t_X\xf0\xcb\xba_\x82qgk\xcbW\xe7\xcd\x87\xf9\xb2\x89\xb94\x06s\xa1B\x96\xc4\x17\x11\xba\xae\xba/N~%\xaf\xcbw\xa4\xd99\xab)\x8f\x1b2\x1bJ\x86\xb1\xee\x8d;\x12\xd4\x7fT\x06\xaakm^\x85\xd1\xd1\xcd\x98L2\xe3\x14\xb7v\xbb\x94x\x82\xab\xc1dK(\x99/9\xc6\xbe\xcd?\xd6-%\x8b\xbeiSA\xdc\xaa\xec\xban3\xbf\x8ew\xee\x91SB\xb0\xb5\xc4,f\xf0\xca\xb3\xb0\xa5\x02\x1f\xd4\xf8\xe7_A\xf0b\xa4\xec\xe8\xeed\xaf\xdf\xdf-w]_\xe4\xb8\x9850\xcd\x8f*\xb5\x98>Y\xef.5\xfd\xcbC\xf0(=\'\xaa^kD\xf5\x81f\xd0 i\x84\xb2\xc5\x1d\x96\xa5\v\xaf\x18w|J\xdbE\x80\x97\xe9U\xd8\x01[A\xaa\xc1%\xa95^X\xea\x17\x1f&]K\xc4\xe6\x17\x00\x04\xfe\x12o\xf0\xad\xfa\xa8\x81\xdd\xe8\t\xa12P\xfc@\x1a\xea\x92|\x04W\xd6-\xb22S`[oUAY\xa8\x93\xc5H\xbe\xc4\x95\x87\x9b\x05\x80\xfc\xec1\xcd\xe4\x8e\xb8\xb0\xdf\xfd\xd2\x19\xf0\x0e\x98{\x9f\f\xd3\xc3\x8e\xdb\xdf\x86$\x8a\xf1\t\x8a\xa8}\xf27\x9c6\xe5\x05\xe5\t\xb8', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ftruncate(r0, 0x9) finit_module(r0, 0x0, 0x6) 09:07:41 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(r0, 0x80111500, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "9762eba55631247fa9cfd1afb7e63c89576918"}) 09:07:41 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f00000001c0), 0x24, 0x0) ptrace(0x10, 0x0) ptrace(0x10, 0x0) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, 0xee00, 0x8, 0x2}, 0x74, 0x0, 0xa40, 0x200, 0x0, 0x0, 0x3}) r0 = fork() ptrace(0x10, r0) ptrace(0x10, r0) 09:07:41 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x6, &(0x7f0000000040)) 09:07:41 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000000), 0x4) [ 132.989182] audit: type=1400 audit(1768381661.208:10): avc: denied { module_load } for pid=4037 comm="syz-executor.7" path=2F6D656D66643A2F70726F632F7468726561642D73656C662F617474722F6673637265617465202864656C6574656429 dev="tmpfs" ino=1024 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=system permissive=1 09:07:41 executing program 6: syz_emit_ethernet(0x52, &(0x7f0000000180)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "708329", 0x1c, 0x3c, 0x0, @remote, @local, {[@routing], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 09:07:41 executing program 7: r0 = memfd_create(&(0x7f0000000080)='/proc/thread-self/attr/fscreate\x00\x14~\xfe\x9a!\xb2\xb73h\xd2oR\arV(C\xe7\xbb\xd3\x83\xd4\x9b\xb7\xc8t_X\xf0\xcb\xba_\x82qgk\xcbW\xe7\xcd\x87\xf9\xb2\x89\xb94\x06s\xa1B\x96\xc4\x17\x11\xba\xae\xba/N~%\xaf\xcbw\xa4\xd99\xab)\x8f\x1b2\x1bJ\x86\xb1\xee\x8d;\x12\xd4\x7fT\x06\xaakm^\x85\xd1\xd1\xcd\x98L2\xe3\x14\xb7v\xbb\x94x\x82\xab\xc1dK(\x99/9\xc6\xbe\xcd?\xd6-%\x8b\xbeiSA\xdc\xaa\xec\xban3\xbf\x8ew\xee\x91SB\xb0\xb5\xc4,f\xf0\xca\xb3\xb0\xa5\x02\x1f\xd4\xf8\xe7_A\xf0b\xa4\xec\xe8\xeed\xaf\xdf\xdf-w]_\xe4\xb8\x9850\xcd\x8f*\xb5\x98>Y\xef.5\xfd\xcbC\xf0(=\'\xaa^kD\xf5\x81f\xd0 i\x84\xb2\xc5\x1d\x96\xa5\v\xaf\x18w|J\xdbE\x80\x97\xe9U\xd8\x01[A\xaa\xc1%\xa95^X\xea\x17\x1f&]K\xc4\xe6\x17\x00\x04\xfe\x12o\xf0\xad\xfa\xa8\x81\xdd\xe8\t\xa12P\xfc@\x1a\xea\x92|\x04W\xd6-\xb22S`[oUAY\xa8\x93\xc5H\xbe\xc4\x95\x87\x9b\x05\x80\xfc\xec1\xcd\xe4\x8e\xb8\xb0\xdf\xfd\xd2\x19\xf0\x0e\x98{\x9f\f\xd3\xc3\x8e\xdb\xdf\x86$\x8a\xf1\t\x8a\xa8}\xf27\x9c6\xe5\x05\xe5\t\xb8', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ftruncate(r0, 0x9) finit_module(r0, 0x0, 0x6) 09:07:41 executing program 3: r0 = memfd_create(&(0x7f0000000080)='/proc/thread-self/attr/fscreate\x00\x14~\xfe\x9a!\xb2\xb73h\xd2oR\arV(C\xe7\xbb\xd3\x83\xd4\x9b\xb7\xc8t_X\xf0\xcb\xba_\x82qgk\xcbW\xe7\xcd\x87\xf9\xb2\x89\xb94\x06s\xa1B\x96\xc4\x17\x11\xba\xae\xba/N~%\xaf\xcbw\xa4\xd99\xab)\x8f\x1b2\x1bJ\x86\xb1\xee\x8d;\x12\xd4\x7fT\x06\xaakm^\x85\xd1\xd1\xcd\x98L2\xe3\x14\xb7v\xbb\x94x\x82\xab\xc1dK(\x99/9\xc6\xbe\xcd?\xd6-%\x8b\xbeiSA\xdc\xaa\xec\xban3\xbf\x8ew\xee\x91SB\xb0\xb5\xc4,f\xf0\xca\xb3\xb0\xa5\x02\x1f\xd4\xf8\xe7_A\xf0b\xa4\xec\xe8\xeed\xaf\xdf\xdf-w]_\xe4\xb8\x9850\xcd\x8f*\xb5\x98>Y\xef.5\xfd\xcbC\xf0(=\'\xaa^kD\xf5\x81f\xd0 i\x84\xb2\xc5\x1d\x96\xa5\v\xaf\x18w|J\xdbE\x80\x97\xe9U\xd8\x01[A\xaa\xc1%\xa95^X\xea\x17\x1f&]K\xc4\xe6\x17\x00\x04\xfe\x12o\xf0\xad\xfa\xa8\x81\xdd\xe8\t\xa12P\xfc@\x1a\xea\x92|\x04W\xd6-\xb22S`[oUAY\xa8\x93\xc5H\xbe\xc4\x95\x87\x9b\x05\x80\xfc\xec1\xcd\xe4\x8e\xb8\xb0\xdf\xfd\xd2\x19\xf0\x0e\x98{\x9f\f\xd3\xc3\x8e\xdb\xdf\x86$\x8a\xf1\t\x8a\xa8}\xf27\x9c6\xe5\x05\xe5\t\xb8', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ftruncate(r0, 0x9) finit_module(r0, 0x0, 0x6) 09:07:41 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(r0, 0x80111500, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "9762eba55631247fa9cfd1afb7e63c89576918"}) 09:07:41 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x6, &(0x7f0000000040)) 09:07:41 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) listen(r0, 0x0) 09:07:41 executing program 3: r0 = memfd_create(&(0x7f0000000080)='/proc/thread-self/attr/fscreate\x00\x14~\xfe\x9a!\xb2\xb73h\xd2oR\arV(C\xe7\xbb\xd3\x83\xd4\x9b\xb7\xc8t_X\xf0\xcb\xba_\x82qgk\xcbW\xe7\xcd\x87\xf9\xb2\x89\xb94\x06s\xa1B\x96\xc4\x17\x11\xba\xae\xba/N~%\xaf\xcbw\xa4\xd99\xab)\x8f\x1b2\x1bJ\x86\xb1\xee\x8d;\x12\xd4\x7fT\x06\xaakm^\x85\xd1\xd1\xcd\x98L2\xe3\x14\xb7v\xbb\x94x\x82\xab\xc1dK(\x99/9\xc6\xbe\xcd?\xd6-%\x8b\xbeiSA\xdc\xaa\xec\xban3\xbf\x8ew\xee\x91SB\xb0\xb5\xc4,f\xf0\xca\xb3\xb0\xa5\x02\x1f\xd4\xf8\xe7_A\xf0b\xa4\xec\xe8\xeed\xaf\xdf\xdf-w]_\xe4\xb8\x9850\xcd\x8f*\xb5\x98>Y\xef.5\xfd\xcbC\xf0(=\'\xaa^kD\xf5\x81f\xd0 i\x84\xb2\xc5\x1d\x96\xa5\v\xaf\x18w|J\xdbE\x80\x97\xe9U\xd8\x01[A\xaa\xc1%\xa95^X\xea\x17\x1f&]K\xc4\xe6\x17\x00\x04\xfe\x12o\xf0\xad\xfa\xa8\x81\xdd\xe8\t\xa12P\xfc@\x1a\xea\x92|\x04W\xd6-\xb22S`[oUAY\xa8\x93\xc5H\xbe\xc4\x95\x87\x9b\x05\x80\xfc\xec1\xcd\xe4\x8e\xb8\xb0\xdf\xfd\xd2\x19\xf0\x0e\x98{\x9f\f\xd3\xc3\x8e\xdb\xdf\x86$\x8a\xf1\t\x8a\xa8}\xf27\x9c6\xe5\x05\xe5\t\xb8', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ftruncate(r0, 0x9) finit_module(r0, 0x0, 0x6) 09:07:41 executing program 7: r0 = memfd_create(&(0x7f0000000080)='/proc/thread-self/attr/fscreate\x00\x14~\xfe\x9a!\xb2\xb73h\xd2oR\arV(C\xe7\xbb\xd3\x83\xd4\x9b\xb7\xc8t_X\xf0\xcb\xba_\x82qgk\xcbW\xe7\xcd\x87\xf9\xb2\x89\xb94\x06s\xa1B\x96\xc4\x17\x11\xba\xae\xba/N~%\xaf\xcbw\xa4\xd99\xab)\x8f\x1b2\x1bJ\x86\xb1\xee\x8d;\x12\xd4\x7fT\x06\xaakm^\x85\xd1\xd1\xcd\x98L2\xe3\x14\xb7v\xbb\x94x\x82\xab\xc1dK(\x99/9\xc6\xbe\xcd?\xd6-%\x8b\xbeiSA\xdc\xaa\xec\xban3\xbf\x8ew\xee\x91SB\xb0\xb5\xc4,f\xf0\xca\xb3\xb0\xa5\x02\x1f\xd4\xf8\xe7_A\xf0b\xa4\xec\xe8\xeed\xaf\xdf\xdf-w]_\xe4\xb8\x9850\xcd\x8f*\xb5\x98>Y\xef.5\xfd\xcbC\xf0(=\'\xaa^kD\xf5\x81f\xd0 i\x84\xb2\xc5\x1d\x96\xa5\v\xaf\x18w|J\xdbE\x80\x97\xe9U\xd8\x01[A\xaa\xc1%\xa95^X\xea\x17\x1f&]K\xc4\xe6\x17\x00\x04\xfe\x12o\xf0\xad\xfa\xa8\x81\xdd\xe8\t\xa12P\xfc@\x1a\xea\x92|\x04W\xd6-\xb22S`[oUAY\xa8\x93\xc5H\xbe\xc4\x95\x87\x9b\x05\x80\xfc\xec1\xcd\xe4\x8e\xb8\xb0\xdf\xfd\xd2\x19\xf0\x0e\x98{\x9f\f\xd3\xc3\x8e\xdb\xdf\x86$\x8a\xf1\t\x8a\xa8}\xf27\x9c6\xe5\x05\xe5\t\xb8', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ftruncate(r0, 0x9) finit_module(r0, 0x0, 0x6) 09:07:41 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x141802, 0x0) ioctl$CDROM_SEND_PACKET(r0, 0x5311, &(0x7f0000000340)={"9aa04bb5181700d0f7d4c0ae", &(0x7f0000000240), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:07:41 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(r0, 0x80111500, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "9762eba55631247fa9cfd1afb7e63c89576918"}) 09:07:41 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00') pread64(r0, &(0x7f0000000040)=""/156, 0x9c, 0x2) 09:07:41 executing program 7: r0 = memfd_create(&(0x7f0000000080)='/proc/thread-self/attr/fscreate\x00\x14~\xfe\x9a!\xb2\xb73h\xd2oR\arV(C\xe7\xbb\xd3\x83\xd4\x9b\xb7\xc8t_X\xf0\xcb\xba_\x82qgk\xcbW\xe7\xcd\x87\xf9\xb2\x89\xb94\x06s\xa1B\x96\xc4\x17\x11\xba\xae\xba/N~%\xaf\xcbw\xa4\xd99\xab)\x8f\x1b2\x1bJ\x86\xb1\xee\x8d;\x12\xd4\x7fT\x06\xaakm^\x85\xd1\xd1\xcd\x98L2\xe3\x14\xb7v\xbb\x94x\x82\xab\xc1dK(\x99/9\xc6\xbe\xcd?\xd6-%\x8b\xbeiSA\xdc\xaa\xec\xban3\xbf\x8ew\xee\x91SB\xb0\xb5\xc4,f\xf0\xca\xb3\xb0\xa5\x02\x1f\xd4\xf8\xe7_A\xf0b\xa4\xec\xe8\xeed\xaf\xdf\xdf-w]_\xe4\xb8\x9850\xcd\x8f*\xb5\x98>Y\xef.5\xfd\xcbC\xf0(=\'\xaa^kD\xf5\x81f\xd0 i\x84\xb2\xc5\x1d\x96\xa5\v\xaf\x18w|J\xdbE\x80\x97\xe9U\xd8\x01[A\xaa\xc1%\xa95^X\xea\x17\x1f&]K\xc4\xe6\x17\x00\x04\xfe\x12o\xf0\xad\xfa\xa8\x81\xdd\xe8\t\xa12P\xfc@\x1a\xea\x92|\x04W\xd6-\xb22S`[oUAY\xa8\x93\xc5H\xbe\xc4\x95\x87\x9b\x05\x80\xfc\xec1\xcd\xe4\x8e\xb8\xb0\xdf\xfd\xd2\x19\xf0\x0e\x98{\x9f\f\xd3\xc3\x8e\xdb\xdf\x86$\x8a\xf1\t\x8a\xa8}\xf27\x9c6\xe5\x05\xe5\t\xb8', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ftruncate(r0, 0x9) finit_module(r0, 0x0, 0x6) [ 133.234812] loop7: detected capacity change from 0 to 512 09:07:41 executing program 3: r0 = memfd_create(&(0x7f0000000080)='/proc/thread-self/attr/fscreate\x00\x14~\xfe\x9a!\xb2\xb73h\xd2oR\arV(C\xe7\xbb\xd3\x83\xd4\x9b\xb7\xc8t_X\xf0\xcb\xba_\x82qgk\xcbW\xe7\xcd\x87\xf9\xb2\x89\xb94\x06s\xa1B\x96\xc4\x17\x11\xba\xae\xba/N~%\xaf\xcbw\xa4\xd99\xab)\x8f\x1b2\x1bJ\x86\xb1\xee\x8d;\x12\xd4\x7fT\x06\xaakm^\x85\xd1\xd1\xcd\x98L2\xe3\x14\xb7v\xbb\x94x\x82\xab\xc1dK(\x99/9\xc6\xbe\xcd?\xd6-%\x8b\xbeiSA\xdc\xaa\xec\xban3\xbf\x8ew\xee\x91SB\xb0\xb5\xc4,f\xf0\xca\xb3\xb0\xa5\x02\x1f\xd4\xf8\xe7_A\xf0b\xa4\xec\xe8\xeed\xaf\xdf\xdf-w]_\xe4\xb8\x9850\xcd\x8f*\xb5\x98>Y\xef.5\xfd\xcbC\xf0(=\'\xaa^kD\xf5\x81f\xd0 i\x84\xb2\xc5\x1d\x96\xa5\v\xaf\x18w|J\xdbE\x80\x97\xe9U\xd8\x01[A\xaa\xc1%\xa95^X\xea\x17\x1f&]K\xc4\xe6\x17\x00\x04\xfe\x12o\xf0\xad\xfa\xa8\x81\xdd\xe8\t\xa12P\xfc@\x1a\xea\x92|\x04W\xd6-\xb22S`[oUAY\xa8\x93\xc5H\xbe\xc4\x95\x87\x9b\x05\x80\xfc\xec1\xcd\xe4\x8e\xb8\xb0\xdf\xfd\xd2\x19\xf0\x0e\x98{\x9f\f\xd3\xc3\x8e\xdb\xdf\x86$\x8a\xf1\t\x8a\xa8}\xf27\x9c6\xe5\x05\xe5\t\xb8', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ftruncate(r0, 0x9) finit_module(r0, 0x0, 0x6) 09:07:41 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000000), 0x4) 09:07:41 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x141802, 0x0) ioctl$CDROM_SEND_PACKET(r0, 0x5311, &(0x7f0000000340)={"9aa04bb5181700d0f7d4c0ae", &(0x7f0000000240), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:07:41 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) listen(r0, 0x0) 09:07:41 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x6, &(0x7f0000000040)) 09:07:41 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {0x0}, {&(0x7f0000010300)="02000000030000000400000066000f000300040000000000000000000f007f5c", 0x20, 0x800}], 0x0, &(0x7f0000000040)=ANY=[]) 09:07:41 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00') pread64(r0, &(0x7f0000000040)=""/156, 0x9c, 0x2) 09:07:41 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(r0, 0x80111500, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "9762eba55631247fa9cfd1afb7e63c89576918"}) [ 133.248166] EXT4-fs error (device loop7): __ext4_fill_super:5560: inode #2: comm syz-executor.7: iget: special inode unallocated [ 133.249201] EXT4-fs (loop7): get root inode failed [ 133.249585] EXT4-fs (loop7): mount failed [ 133.262627] loop7: detected capacity change from 0 to 512 [ 133.273312] EXT4-fs error (device loop7): __ext4_fill_super:5560: inode #2: comm syz-executor.7: iget: special inode unallocated [ 133.274653] EXT4-fs (loop7): get root inode failed [ 133.275063] EXT4-fs (loop7): mount failed 09:07:41 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {0x0}, {&(0x7f0000010300)="02000000030000000400000066000f000300040000000000000000000f007f5c", 0x20, 0x800}], 0x0, &(0x7f0000000040)=ANY=[]) [ 133.297999] loop7: detected capacity change from 0 to 512 [ 133.301210] EXT4-fs error (device loop7): __ext4_fill_super:5560: inode #2: comm syz-executor.7: iget: special inode unallocated [ 133.303622] EXT4-fs (loop7): get root inode failed [ 133.304019] EXT4-fs (loop7): mount failed 09:07:41 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000000), 0x4) 09:07:41 executing program 5: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x541b, 0xfffffffffffffffc) 09:07:41 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {0x0}, {&(0x7f0000010300)="02000000030000000400000066000f000300040000000000000000000f007f5c", 0x20, 0x800}], 0x0, &(0x7f0000000040)=ANY=[]) 09:07:41 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x6, &(0x7f0000000040)) 09:07:41 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r2) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) [ 133.368780] loop7: detected capacity change from 0 to 512 09:07:41 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00') pread64(r0, &(0x7f0000000040)=""/156, 0x9c, 0x2) [ 133.398168] EXT4-fs error (device loop7): __ext4_fill_super:5560: inode #2: comm syz-executor.7: iget: special inode unallocated [ 133.399330] EXT4-fs (loop7): get root inode failed [ 133.399737] EXT4-fs (loop7): mount failed 09:07:41 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000000), 0x4) 09:07:41 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r2) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 09:07:41 executing program 5: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x541b, 0xfffffffffffffffc) 09:07:41 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00') pread64(r0, &(0x7f0000000040)=""/156, 0x9c, 0x2) 09:07:41 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {0x0}, {&(0x7f0000010300)="02000000030000000400000066000f000300040000000000000000000f007f5c", 0x20, 0x800}], 0x0, &(0x7f0000000040)=ANY=[]) 09:07:41 executing program 1: io_setup(0x4, &(0x7f0000000180)=0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x1, &(0x7f00000003c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}]) 09:07:41 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x141802, 0x0) ioctl$CDROM_SEND_PACKET(r0, 0x5311, &(0x7f0000000340)={"9aa04bb5181700d0f7d4c0ae", &(0x7f0000000240), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:07:41 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x104000, 0x0) mount$9p_unix(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1005841, 0x0) syz_mount_image$tmpfs(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x84000, &(0x7f00000014c0)) umount2(&(0x7f0000000200)='./file0\x00', 0x2) [ 133.496492] loop7: detected capacity change from 0 to 512 [ 133.499432] ======================================================= [ 133.499432] WARNING: The mand mount option has been deprecated and [ 133.499432] and is ignored by this kernel. Remove the mand [ 133.499432] option from the mount to silence this warning. [ 133.499432] ======================================================= [ 133.507253] EXT4-fs error (device loop7): __ext4_fill_super:5560: inode #2: comm syz-executor.7: iget: special inode unallocated [ 133.513175] EXT4-fs (loop7): get root inode failed [ 133.513776] EXT4-fs (loop7): mount failed 09:07:41 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x104000, 0x0) mount$9p_unix(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1005841, 0x0) syz_mount_image$tmpfs(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x84000, &(0x7f00000014c0)) umount2(&(0x7f0000000200)='./file0\x00', 0x2) 09:07:41 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r2) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0x0, 0x1}, 0x6) 09:07:41 executing program 0: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)={0x1c, 0x14, 0x1, 0x0, 0x0, "", [@typed={0xa, 0x0, 0x0, 0x0, @str='wlan1\x00'}]}, 0x1c}], 0x1}, 0x0) [ 133.647237] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 133.660973] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 09:07:41 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r2) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 09:07:41 executing program 5: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x541b, 0xfffffffffffffffc) 09:07:41 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r2) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0x0, 0x1}, 0x6) 09:07:41 executing program 1: io_setup(0x4, &(0x7f0000000180)=0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x1, &(0x7f00000003c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}]) 09:07:41 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x141802, 0x0) ioctl$CDROM_SEND_PACKET(r0, 0x5311, &(0x7f0000000340)={"9aa04bb5181700d0f7d4c0ae", &(0x7f0000000240), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:07:41 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x104000, 0x0) mount$9p_unix(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1005841, 0x0) syz_mount_image$tmpfs(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x84000, &(0x7f00000014c0)) umount2(&(0x7f0000000200)='./file0\x00', 0x2) 09:07:41 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r2) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0x0, 0x1}, 0x6) 09:07:41 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r2) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 09:07:41 executing program 5: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x541b, 0xfffffffffffffffc) 09:07:41 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x104000, 0x0) mount$9p_unix(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1005841, 0x0) syz_mount_image$tmpfs(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x84000, &(0x7f00000014c0)) umount2(&(0x7f0000000200)='./file0\x00', 0x2) 09:07:41 executing program 0: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)={0x1c, 0x14, 0x1, 0x0, 0x0, "", [@typed={0xa, 0x0, 0x0, 0x0, @str='wlan1\x00'}]}, 0x1c}], 0x1}, 0x0) 09:07:41 executing program 1: io_setup(0x4, &(0x7f0000000180)=0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x1, &(0x7f00000003c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}]) [ 133.767538] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 09:07:42 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000002fc0)={0x2c, 0x10, 0x1, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64=0x1}, @nested={0x10, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x2}]}]}, 0x2c}], 0x1}, 0x0) 09:07:42 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r2) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0x0, 0x1}, 0x6) 09:07:42 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x0) 09:07:42 executing program 1: io_setup(0x4, &(0x7f0000000180)=0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_submit(r0, 0x1, &(0x7f00000003c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}]) 09:07:42 executing program 0: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)={0x1c, 0x14, 0x1, 0x0, 0x0, "", [@typed={0xa, 0x0, 0x0, 0x0, @str='wlan1\x00'}]}, 0x1c}], 0x1}, 0x0) 09:07:42 executing program 5: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xb) [ 133.871018] audit: type=1400 audit(1768381662.090:12): avc: denied { write } for pid=4177 comm="syz-executor.7" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 133.881867] audit: type=1400 audit(1768381662.085:11): avc: denied { read } for pid=4179 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 133.889922] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 09:07:42 executing program 0: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)={0x1c, 0x14, 0x1, 0x0, 0x0, "", [@typed={0xa, 0x0, 0x0, 0x0, @str='wlan1\x00'}]}, 0x1c}], 0x1}, 0x0) 09:07:42 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) listen(r3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00') pread64(r4, &(0x7f0000000100)=""/168, 0xa8, 0x0) 09:07:42 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$int_in(r1, 0x5452, &(0x7f00000000c0)=0x7) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000000080), 0x4) 09:07:42 executing program 5: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xb) 09:07:42 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x0) 09:07:42 executing program 6: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) 09:07:42 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000002fc0)={0x2c, 0x10, 0x1, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64=0x1}, @nested={0x10, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x2}]}]}, 0x2c}], 0x1}, 0x0) 09:07:42 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000040)={0x40, 0x0, 0x0, 0x9, 0x0, "c4425bc3c4a9ca6cca9305039fc24f725c74b0"}) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0xa) [ 133.999275] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 09:07:42 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x0) 09:07:42 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000002fc0)={0x2c, 0x10, 0x1, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64=0x1}, @nested={0x10, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x2}]}]}, 0x2c}], 0x1}, 0x0) 09:07:42 executing program 0: mq_open(&(0x7f0000000340)='$D\xfe\xc6\v;\x91\xe5\x12x\x9cM>\x1b\x9c\xbez\xb2\xba\xd6\x89\x88q\xf9\x15{_f\xf0E\xa2\x87\xc6\x92\xd1\x1ec(@\xf6f\x8d\xdch\xd7?\x1a\x98\xa9h\vr\ri\x0e\xf2I\x18a\xa4\xda\x1d\x1dW`?bn`\xf9\x86\x88\'R\xb4|v9\x7f\xc2\x9fI\xe6\x97\xa5\xa9\xb5\xfe\xc3\x8b\xb7\xe4\x92\x16)\xf4v~\xba\x17\xd0^\xbc\v\xd7\xd3\x03\x96\xd32\x9aX\x85\xa1\x83\xb7\x88\xca\x9eZ\x84\xb3\xd1\xd9\xe6\x02\xd1\xadlY\xe4D\xd25Q\xa5\xabNB\x98\x16R\x8a\x04\xc2\xd95\xe0\xf5+\x94A\"\xf65\xda\xea\x84\xe0\x9a\xe7U2\xdb\xb0\x9f\x8a[w8\xd7\xa8\xbfx\xce\x16>D\xcf\xd4\xbe\xc5\xe6\xdd)\x10.\xcd\x06u\xc5\xf6\xf1\xf2&\xd0\xa4\x97\x97\x0f\x86x\x0e\xc7\x92X.\xf1\xee\x1c&\xd1\x11b\xed;r\xb1\xcb\xc1\x14\xad\xeb\x17\xc4V\xd6\r\xa2,O\xbex\xbcRGh\x9f1#\xd2\xb4\xd2\xf1\xcf~\xeb[t\x99\xf1.\x04\x05\bD\x00\xb9z\\\xe9=\xfb\xca\xb0\x81\xc1<\x1e\x18\x836N\f\x86\xa0o\x17^\x17\x9e\nB\nA\xcc\x14\x95N\xad\xbe\xdag`\xa1+\xf9\xfc:jv\x14\xd5\\\xd6?5\x92`K\xc7wy\xc5\x8a\xf1.\xdc\xe3\xe5\xcb!\xe7\x95\x04x\x19\xc1\x8e\xa2\xa6\x97\x04\xd4\x91\xc2\xca-\xa4\x8e{\xfec\xd9o\xd66\x91\xd4\x1f\x8f\x87\x1c7\x80w\xfam\x84\xbd\x11X\xc3\xb0*\x991{\xac\xf0H(6A\a\v\xfd\x82\xfc\x97\x0e\xa8\xfb0\x92R\xf2=hAz+[\xfe\xfd\xaf\x82\xd4X\xe0^\x81\xbd\xf1\xdc\x0e\x86\x02\x9ffa\xe4o\xc2\xa8Z&\x7fE\xc9C\x03\t^\xd8\x02\x8d|.\xfe\x82\x8a\xc8\x06P\xda\x02S\b\f\xa6\xf8H\x10bo\xba\b6,\xd0\b\xebW\xa8\xae\x85#\xc3\xb9\xab\t\x10\x8d\"\x96\xf2Z\xd3v\x02\xb4\xe0\x8aB\xfc\xb7\x95\xa3\xec\xe7\xae\xba\x12\xaa\xdfJ\x17\x1b\xa5\x00\x1d\x9bEH\xf4\xf6\xcd[\x85\x98\xdbk\xbem^9\x89\xc9\"E\"\xeb\x04\xd4K!\xc9\t\x02\x930\xf97*?\xfcn\xc0\"\x98r\x9b\x9e\xa7\xaa\a\x9b\xcf\xd5\xeb\x98#\xcf-bzYJ_}\xee\xef\xebz\xa0\xe1\x8dc{aX)rk\xb7p\x18\xb5O\xd2l\x1b\x98[~\xe1\xad\xd7w\xab&\xb0t\x17\xf0\xb6\xa3\xb8r\xf9\xc1\x13qB\x8a\x90\xa0X\tcl\xc4\x83\xaa\xe4\x153\xc2\xee\xaf9\xac\x01\xdc\xd7l\xe2[\fV\xdf\xe5#\x97ux\xc5J\a/%T\x89\xec\x95\xfe\x00\x00\x00\x00\x00\x00', 0x0, 0x0, 0x0) 09:07:42 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) listen(r3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00') pread64(r4, &(0x7f0000000100)=""/168, 0xa8, 0x0) 09:07:42 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000002fc0)={0x2c, 0x10, 0x1, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64=0x1}, @nested={0x10, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x2}]}]}, 0x2c}], 0x1}, 0x0) 09:07:42 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$int_in(r1, 0x5452, &(0x7f00000000c0)=0x7) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000000080), 0x4) 09:07:42 executing program 5: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xb) 09:07:42 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x0) 09:07:42 executing program 6: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) 09:07:42 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000040)={0x40, 0x0, 0x0, 0x9, 0x0, "c4425bc3c4a9ca6cca9305039fc24f725c74b0"}) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0xa) 09:07:42 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) listen(r3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00') pread64(r4, &(0x7f0000000100)=""/168, 0xa8, 0x0) 09:07:42 executing program 0: mq_open(&(0x7f0000000340)='$D\xfe\xc6\v;\x91\xe5\x12x\x9cM>\x1b\x9c\xbez\xb2\xba\xd6\x89\x88q\xf9\x15{_f\xf0E\xa2\x87\xc6\x92\xd1\x1ec(@\xf6f\x8d\xdch\xd7?\x1a\x98\xa9h\vr\ri\x0e\xf2I\x18a\xa4\xda\x1d\x1dW`?bn`\xf9\x86\x88\'R\xb4|v9\x7f\xc2\x9fI\xe6\x97\xa5\xa9\xb5\xfe\xc3\x8b\xb7\xe4\x92\x16)\xf4v~\xba\x17\xd0^\xbc\v\xd7\xd3\x03\x96\xd32\x9aX\x85\xa1\x83\xb7\x88\xca\x9eZ\x84\xb3\xd1\xd9\xe6\x02\xd1\xadlY\xe4D\xd25Q\xa5\xabNB\x98\x16R\x8a\x04\xc2\xd95\xe0\xf5+\x94A\"\xf65\xda\xea\x84\xe0\x9a\xe7U2\xdb\xb0\x9f\x8a[w8\xd7\xa8\xbfx\xce\x16>D\xcf\xd4\xbe\xc5\xe6\xdd)\x10.\xcd\x06u\xc5\xf6\xf1\xf2&\xd0\xa4\x97\x97\x0f\x86x\x0e\xc7\x92X.\xf1\xee\x1c&\xd1\x11b\xed;r\xb1\xcb\xc1\x14\xad\xeb\x17\xc4V\xd6\r\xa2,O\xbex\xbcRGh\x9f1#\xd2\xb4\xd2\xf1\xcf~\xeb[t\x99\xf1.\x04\x05\bD\x00\xb9z\\\xe9=\xfb\xca\xb0\x81\xc1<\x1e\x18\x836N\f\x86\xa0o\x17^\x17\x9e\nB\nA\xcc\x14\x95N\xad\xbe\xdag`\xa1+\xf9\xfc:jv\x14\xd5\\\xd6?5\x92`K\xc7wy\xc5\x8a\xf1.\xdc\xe3\xe5\xcb!\xe7\x95\x04x\x19\xc1\x8e\xa2\xa6\x97\x04\xd4\x91\xc2\xca-\xa4\x8e{\xfec\xd9o\xd66\x91\xd4\x1f\x8f\x87\x1c7\x80w\xfam\x84\xbd\x11X\xc3\xb0*\x991{\xac\xf0H(6A\a\v\xfd\x82\xfc\x97\x0e\xa8\xfb0\x92R\xf2=hAz+[\xfe\xfd\xaf\x82\xd4X\xe0^\x81\xbd\xf1\xdc\x0e\x86\x02\x9ffa\xe4o\xc2\xa8Z&\x7fE\xc9C\x03\t^\xd8\x02\x8d|.\xfe\x82\x8a\xc8\x06P\xda\x02S\b\f\xa6\xf8H\x10bo\xba\b6,\xd0\b\xebW\xa8\xae\x85#\xc3\xb9\xab\t\x10\x8d\"\x96\xf2Z\xd3v\x02\xb4\xe0\x8aB\xfc\xb7\x95\xa3\xec\xe7\xae\xba\x12\xaa\xdfJ\x17\x1b\xa5\x00\x1d\x9bEH\xf4\xf6\xcd[\x85\x98\xdbk\xbem^9\x89\xc9\"E\"\xeb\x04\xd4K!\xc9\t\x02\x930\xf97*?\xfcn\xc0\"\x98r\x9b\x9e\xa7\xaa\a\x9b\xcf\xd5\xeb\x98#\xcf-bzYJ_}\xee\xef\xebz\xa0\xe1\x8dc{aX)rk\xb7p\x18\xb5O\xd2l\x1b\x98[~\xe1\xad\xd7w\xab&\xb0t\x17\xf0\xb6\xa3\xb8r\xf9\xc1\x13qB\x8a\x90\xa0X\tcl\xc4\x83\xaa\xe4\x153\xc2\xee\xaf9\xac\x01\xdc\xd7l\xe2[\fV\xdf\xe5#\x97ux\xc5J\a/%T\x89\xec\x95\xfe\x00\x00\x00\x00\x00\x00', 0x0, 0x0, 0x0) 09:07:42 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000040)={0x40, 0x0, 0x0, 0x9, 0x0, "c4425bc3c4a9ca6cca9305039fc24f725c74b0"}) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0xa) 09:07:42 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$int_in(r1, 0x5452, &(0x7f00000000c0)=0x7) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000000080), 0x4) 09:07:42 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000040)={0x40, 0x0, 0x0, 0x9, 0x0, "c4425bc3c4a9ca6cca9305039fc24f725c74b0"}) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0xa) 09:07:42 executing program 0: mq_open(&(0x7f0000000340)='$D\xfe\xc6\v;\x91\xe5\x12x\x9cM>\x1b\x9c\xbez\xb2\xba\xd6\x89\x88q\xf9\x15{_f\xf0E\xa2\x87\xc6\x92\xd1\x1ec(@\xf6f\x8d\xdch\xd7?\x1a\x98\xa9h\vr\ri\x0e\xf2I\x18a\xa4\xda\x1d\x1dW`?bn`\xf9\x86\x88\'R\xb4|v9\x7f\xc2\x9fI\xe6\x97\xa5\xa9\xb5\xfe\xc3\x8b\xb7\xe4\x92\x16)\xf4v~\xba\x17\xd0^\xbc\v\xd7\xd3\x03\x96\xd32\x9aX\x85\xa1\x83\xb7\x88\xca\x9eZ\x84\xb3\xd1\xd9\xe6\x02\xd1\xadlY\xe4D\xd25Q\xa5\xabNB\x98\x16R\x8a\x04\xc2\xd95\xe0\xf5+\x94A\"\xf65\xda\xea\x84\xe0\x9a\xe7U2\xdb\xb0\x9f\x8a[w8\xd7\xa8\xbfx\xce\x16>D\xcf\xd4\xbe\xc5\xe6\xdd)\x10.\xcd\x06u\xc5\xf6\xf1\xf2&\xd0\xa4\x97\x97\x0f\x86x\x0e\xc7\x92X.\xf1\xee\x1c&\xd1\x11b\xed;r\xb1\xcb\xc1\x14\xad\xeb\x17\xc4V\xd6\r\xa2,O\xbex\xbcRGh\x9f1#\xd2\xb4\xd2\xf1\xcf~\xeb[t\x99\xf1.\x04\x05\bD\x00\xb9z\\\xe9=\xfb\xca\xb0\x81\xc1<\x1e\x18\x836N\f\x86\xa0o\x17^\x17\x9e\nB\nA\xcc\x14\x95N\xad\xbe\xdag`\xa1+\xf9\xfc:jv\x14\xd5\\\xd6?5\x92`K\xc7wy\xc5\x8a\xf1.\xdc\xe3\xe5\xcb!\xe7\x95\x04x\x19\xc1\x8e\xa2\xa6\x97\x04\xd4\x91\xc2\xca-\xa4\x8e{\xfec\xd9o\xd66\x91\xd4\x1f\x8f\x87\x1c7\x80w\xfam\x84\xbd\x11X\xc3\xb0*\x991{\xac\xf0H(6A\a\v\xfd\x82\xfc\x97\x0e\xa8\xfb0\x92R\xf2=hAz+[\xfe\xfd\xaf\x82\xd4X\xe0^\x81\xbd\xf1\xdc\x0e\x86\x02\x9ffa\xe4o\xc2\xa8Z&\x7fE\xc9C\x03\t^\xd8\x02\x8d|.\xfe\x82\x8a\xc8\x06P\xda\x02S\b\f\xa6\xf8H\x10bo\xba\b6,\xd0\b\xebW\xa8\xae\x85#\xc3\xb9\xab\t\x10\x8d\"\x96\xf2Z\xd3v\x02\xb4\xe0\x8aB\xfc\xb7\x95\xa3\xec\xe7\xae\xba\x12\xaa\xdfJ\x17\x1b\xa5\x00\x1d\x9bEH\xf4\xf6\xcd[\x85\x98\xdbk\xbem^9\x89\xc9\"E\"\xeb\x04\xd4K!\xc9\t\x02\x930\xf97*?\xfcn\xc0\"\x98r\x9b\x9e\xa7\xaa\a\x9b\xcf\xd5\xeb\x98#\xcf-bzYJ_}\xee\xef\xebz\xa0\xe1\x8dc{aX)rk\xb7p\x18\xb5O\xd2l\x1b\x98[~\xe1\xad\xd7w\xab&\xb0t\x17\xf0\xb6\xa3\xb8r\xf9\xc1\x13qB\x8a\x90\xa0X\tcl\xc4\x83\xaa\xe4\x153\xc2\xee\xaf9\xac\x01\xdc\xd7l\xe2[\fV\xdf\xe5#\x97ux\xc5J\a/%T\x89\xec\x95\xfe\x00\x00\x00\x00\x00\x00', 0x0, 0x0, 0x0) 09:07:42 executing program 5: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xb) 09:07:42 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x400005}) pwritev(r1, &(0x7f00000001c0)=[{&(0x7f0000000280)="b7", 0x1}], 0x1, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x400005}) 09:07:42 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) sendmmsg$inet6(r1, &(0x7f00000010c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @mcast1, 0x4}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000240)="c6", 0x1}], 0x1}}], 0x2, 0x4c085) 09:07:42 executing program 0: mq_open(&(0x7f0000000340)='$D\xfe\xc6\v;\x91\xe5\x12x\x9cM>\x1b\x9c\xbez\xb2\xba\xd6\x89\x88q\xf9\x15{_f\xf0E\xa2\x87\xc6\x92\xd1\x1ec(@\xf6f\x8d\xdch\xd7?\x1a\x98\xa9h\vr\ri\x0e\xf2I\x18a\xa4\xda\x1d\x1dW`?bn`\xf9\x86\x88\'R\xb4|v9\x7f\xc2\x9fI\xe6\x97\xa5\xa9\xb5\xfe\xc3\x8b\xb7\xe4\x92\x16)\xf4v~\xba\x17\xd0^\xbc\v\xd7\xd3\x03\x96\xd32\x9aX\x85\xa1\x83\xb7\x88\xca\x9eZ\x84\xb3\xd1\xd9\xe6\x02\xd1\xadlY\xe4D\xd25Q\xa5\xabNB\x98\x16R\x8a\x04\xc2\xd95\xe0\xf5+\x94A\"\xf65\xda\xea\x84\xe0\x9a\xe7U2\xdb\xb0\x9f\x8a[w8\xd7\xa8\xbfx\xce\x16>D\xcf\xd4\xbe\xc5\xe6\xdd)\x10.\xcd\x06u\xc5\xf6\xf1\xf2&\xd0\xa4\x97\x97\x0f\x86x\x0e\xc7\x92X.\xf1\xee\x1c&\xd1\x11b\xed;r\xb1\xcb\xc1\x14\xad\xeb\x17\xc4V\xd6\r\xa2,O\xbex\xbcRGh\x9f1#\xd2\xb4\xd2\xf1\xcf~\xeb[t\x99\xf1.\x04\x05\bD\x00\xb9z\\\xe9=\xfb\xca\xb0\x81\xc1<\x1e\x18\x836N\f\x86\xa0o\x17^\x17\x9e\nB\nA\xcc\x14\x95N\xad\xbe\xdag`\xa1+\xf9\xfc:jv\x14\xd5\\\xd6?5\x92`K\xc7wy\xc5\x8a\xf1.\xdc\xe3\xe5\xcb!\xe7\x95\x04x\x19\xc1\x8e\xa2\xa6\x97\x04\xd4\x91\xc2\xca-\xa4\x8e{\xfec\xd9o\xd66\x91\xd4\x1f\x8f\x87\x1c7\x80w\xfam\x84\xbd\x11X\xc3\xb0*\x991{\xac\xf0H(6A\a\v\xfd\x82\xfc\x97\x0e\xa8\xfb0\x92R\xf2=hAz+[\xfe\xfd\xaf\x82\xd4X\xe0^\x81\xbd\xf1\xdc\x0e\x86\x02\x9ffa\xe4o\xc2\xa8Z&\x7fE\xc9C\x03\t^\xd8\x02\x8d|.\xfe\x82\x8a\xc8\x06P\xda\x02S\b\f\xa6\xf8H\x10bo\xba\b6,\xd0\b\xebW\xa8\xae\x85#\xc3\xb9\xab\t\x10\x8d\"\x96\xf2Z\xd3v\x02\xb4\xe0\x8aB\xfc\xb7\x95\xa3\xec\xe7\xae\xba\x12\xaa\xdfJ\x17\x1b\xa5\x00\x1d\x9bEH\xf4\xf6\xcd[\x85\x98\xdbk\xbem^9\x89\xc9\"E\"\xeb\x04\xd4K!\xc9\t\x02\x930\xf97*?\xfcn\xc0\"\x98r\x9b\x9e\xa7\xaa\a\x9b\xcf\xd5\xeb\x98#\xcf-bzYJ_}\xee\xef\xebz\xa0\xe1\x8dc{aX)rk\xb7p\x18\xb5O\xd2l\x1b\x98[~\xe1\xad\xd7w\xab&\xb0t\x17\xf0\xb6\xa3\xb8r\xf9\xc1\x13qB\x8a\x90\xa0X\tcl\xc4\x83\xaa\xe4\x153\xc2\xee\xaf9\xac\x01\xdc\xd7l\xe2[\fV\xdf\xe5#\x97ux\xc5J\a/%T\x89\xec\x95\xfe\x00\x00\x00\x00\x00\x00', 0x0, 0x0, 0x0) 09:07:42 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) listen(r3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00') pread64(r4, &(0x7f0000000100)=""/168, 0xa8, 0x0) 09:07:42 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = memfd_secret(0x0) fchmod(r0, 0x0) 09:07:42 executing program 6: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) 09:07:42 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$int_in(r1, 0x5452, &(0x7f00000000c0)=0x7) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000000080), 0x4) 09:07:42 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) sendmmsg$inet6(r1, &(0x7f00000010c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @mcast1, 0x4}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000240)="c6", 0x1}], 0x1}}], 0x2, 0x4c085) 09:07:42 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x400005}) pwritev(r1, &(0x7f00000001c0)=[{&(0x7f0000000280)="b7", 0x1}], 0x1, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x400005}) 09:07:42 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdab39eac554c6bee, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') pread64(r0, &(0x7f00000000c0)=""/125, 0x7d, 0x3ff) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0xb6, 0x1b, 0x5, 0x0, 0xffff, 0x20, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0xffff, 0x8}, 0x0, 0x4, 0x2, 0x5, 0x7, 0x947, 0x5, 0x0, 0x3, 0x0, 0x36}, 0x0, 0x7, r0, 0x8) openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x0, 0x0) io_submit(0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000001b00)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) write(r1, &(0x7f00000004c0)='^', 0xfdef) 09:07:42 executing program 0: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x28, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x4}]}, 0x28}}, 0x0) 09:07:42 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) sendmmsg$inet6(r1, &(0x7f00000010c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @mcast1, 0x4}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000240)="c6", 0x1}], 0x1}}], 0x2, 0x4c085) 09:07:42 executing program 1: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)) 09:07:42 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = memfd_secret(0x0) fchmod(r0, 0x0) 09:07:42 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) sendmmsg$inet6(r1, &(0x7f00000010c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @mcast1, 0x4}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000240)="c6", 0x1}], 0x1}}], 0x2, 0x4c085) 09:07:42 executing program 0: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x28, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x4}]}, 0x28}}, 0x0) 09:07:42 executing program 4: syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={[{@max_dir_size_kb}]}) 09:07:42 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = memfd_secret(0x0) fchmod(r0, 0x0) 09:07:42 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x400005}) pwritev(r1, &(0x7f00000001c0)=[{&(0x7f0000000280)="b7", 0x1}], 0x1, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x400005}) [ 134.563407] No source specified [ 134.566230] No source specified 09:07:42 executing program 0: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x28, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x4}]}, 0x28}}, 0x0) 09:07:42 executing program 1: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)) 09:07:42 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdab39eac554c6bee, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') pread64(r0, &(0x7f00000000c0)=""/125, 0x7d, 0x3ff) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0xb6, 0x1b, 0x5, 0x0, 0xffff, 0x20, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0xffff, 0x8}, 0x0, 0x4, 0x2, 0x5, 0x7, 0x947, 0x5, 0x0, 0x3, 0x0, 0x36}, 0x0, 0x7, r0, 0x8) openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x0, 0x0) io_submit(0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000001b00)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) write(r1, &(0x7f00000004c0)='^', 0xfdef) 09:07:42 executing program 6: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) 09:07:42 executing program 4: syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={[{@max_dir_size_kb}]}) 09:07:42 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = memfd_secret(0x0) fchmod(r0, 0x0) 09:07:42 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x400005}) pwritev(r1, &(0x7f00000001c0)=[{&(0x7f0000000280)="b7", 0x1}], 0x1, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x400005}) 09:07:42 executing program 7: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000180)={0x0, 0x0, 0x11, &(0x7f0000000040)="1963de5abd49b70bf9c7f09b9b8e128ab5"}) [ 134.680729] No source specified 09:07:42 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000001a00)=0x4082, 0x4) sendto$inet6(r0, 0x0, 0x700, 0x0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 09:07:42 executing program 4: syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={[{@max_dir_size_kb}]}) 09:07:42 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000001a00)=0x4082, 0x4) sendto$inet6(r0, 0x0, 0x700, 0x0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 09:07:42 executing program 1: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)) 09:07:42 executing program 0: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x28, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x4}]}, 0x28}}, 0x0) 09:07:42 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x20, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_EXTENDED_ADDR={0xc}]}, 0x20}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan0\x00'}) syz_genetlink_get_family_id$nl802154(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000180)={'wpan0\x00'}) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000b40), 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)=ANY=[@ANYRES16=r3, @ANYBLOB, @ANYRES32, @ANYBLOB], 0x40}}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendfile(r5, r4, 0x0, 0x7effc89) [ 134.803377] No source specified 09:07:43 executing program 4: syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={[{@max_dir_size_kb}]}) [ 134.929202] No source specified 09:07:43 executing program 1: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)) 09:07:43 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x20, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_EXTENDED_ADDR={0xc}]}, 0x20}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan0\x00'}) syz_genetlink_get_family_id$nl802154(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000180)={'wpan0\x00'}) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000b40), 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)=ANY=[@ANYRES16=r3, @ANYBLOB, @ANYRES32, @ANYBLOB], 0x40}}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendfile(r5, r4, 0x0, 0x7effc89) 09:07:43 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000001a00)=0x4082, 0x4) sendto$inet6(r0, 0x0, 0x700, 0x0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 09:07:43 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x1d, 0x0, &(0x7f0000001180)) 09:07:43 executing program 6: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x3}) 09:07:43 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdab39eac554c6bee, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') pread64(r0, &(0x7f00000000c0)=""/125, 0x7d, 0x3ff) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0xb6, 0x1b, 0x5, 0x0, 0xffff, 0x20, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0xffff, 0x8}, 0x0, 0x4, 0x2, 0x5, 0x7, 0x947, 0x5, 0x0, 0x3, 0x0, 0x36}, 0x0, 0x7, r0, 0x8) openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x0, 0x0) io_submit(0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000001b00)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) write(r1, &(0x7f00000004c0)='^', 0xfdef) 09:07:43 executing program 4: prctl$PR_SET_MM(0x29, 0x7, &(0x7f0000ffa000/0x4000)=nil) 09:07:43 executing program 7: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000180)={0x0, 0x0, 0x11, &(0x7f0000000040)="1963de5abd49b70bf9c7f09b9b8e128ab5"}) 09:07:43 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000001a00)=0x4082, 0x4) sendto$inet6(r0, 0x0, 0x700, 0x0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) [ 135.529717] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list 09:07:43 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x1d, 0x0, &(0x7f0000001180)) 09:07:43 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x20, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_EXTENDED_ADDR={0xc}]}, 0x20}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan0\x00'}) syz_genetlink_get_family_id$nl802154(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000180)={'wpan0\x00'}) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000b40), 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)=ANY=[@ANYRES16=r3, @ANYBLOB, @ANYRES32, @ANYBLOB], 0x40}}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendfile(r5, r4, 0x0, 0x7effc89) 09:07:43 executing program 6: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x3}) 09:07:43 executing program 4: prctl$PR_SET_MM(0x29, 0x7, &(0x7f0000ffa000/0x4000)=nil) 09:07:43 executing program 7: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000180)={0x0, 0x0, 0x11, &(0x7f0000000040)="1963de5abd49b70bf9c7f09b9b8e128ab5"}) 09:07:43 executing program 6: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x3}) 09:07:43 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x1d, 0x0, &(0x7f0000001180)) 09:07:44 executing program 4: prctl$PR_SET_MM(0x29, 0x7, &(0x7f0000ffa000/0x4000)=nil) 09:07:44 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdab39eac554c6bee, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') pread64(r0, &(0x7f00000000c0)=""/125, 0x7d, 0x3ff) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0xb6, 0x1b, 0x5, 0x0, 0xffff, 0x20, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0xffff, 0x8}, 0x0, 0x4, 0x2, 0x5, 0x7, 0x947, 0x5, 0x0, 0x3, 0x0, 0x36}, 0x0, 0x7, r0, 0x8) openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x0, 0x0) io_submit(0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000001b00)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) write(r1, &(0x7f00000004c0)='^', 0xfdef) 09:07:44 executing program 7: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000180)={0x0, 0x0, 0x11, &(0x7f0000000040)="1963de5abd49b70bf9c7f09b9b8e128ab5"}) 09:07:44 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x20, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_EXTENDED_ADDR={0xc}]}, 0x20}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan0\x00'}) syz_genetlink_get_family_id$nl802154(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000180)={'wpan0\x00'}) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000b40), 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)=ANY=[@ANYRES16=r3, @ANYBLOB, @ANYRES32, @ANYBLOB], 0x40}}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendfile(r5, r4, 0x0, 0x7effc89) 09:07:44 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x20, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_EXTENDED_ADDR={0xc}]}, 0x20}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan0\x00'}) syz_genetlink_get_family_id$nl802154(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000180)={'wpan0\x00'}) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000b40), 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)=ANY=[@ANYRES16=r3, @ANYBLOB, @ANYRES32, @ANYBLOB], 0x40}}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendfile(r5, r4, 0x0, 0x7effc89) 09:07:44 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x1d, 0x0, &(0x7f0000001180)) 09:07:44 executing program 6: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x3}) 09:07:44 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:07:44 executing program 4: prctl$PR_SET_MM(0x29, 0x7, &(0x7f0000ffa000/0x4000)=nil) 09:07:44 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/softnet_stat\x00') preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000000)=""/36, 0x24}], 0x1, 0x5827, 0x0) 09:07:44 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f00000000c0)=0x673c, 0x4) sendmsg(r0, &(0x7f0000000540)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000080)="f9de", 0x4}], 0x1}, 0x0) recvmmsg(r0, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 09:07:44 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x136, &(0x7f00000001c0)={@link_local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x100, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x1d, "2a94b064bfcabdaabb8cd5309bf220d0a49af1af9a2608a5f54f1971cf3d3ba94abd965ad3c687deca3eba10b52318114216a0dad2e5a23b2dd4153b6e8e60cf660a0201d21fa36a6aff628305dcc7bf2218c99d8813dd069b6bd7b1bbeaf381c6965646e78418be54db5eedf4c7e781ba79b112c040913a2088aff1c33cc139fc8708c9b09949c719e69fe6ad9f6c8faadf1048875ebcfca8cb62aa9bd062e32e551a70bd9176b560d98ea580a6ea18892dc6b50d5a20fc413ea5948a909387f73e28288cd1e4e12cdc744b48d1e2cdab6c6974408e73e66a0f446cd1a093d67fb1dd35f4f27a010b1c"}, {0x0, 0x0, "eb50"}]}}}}}}, 0x0) 09:07:44 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_secret(0x0) openat$incfs(r0, 0x0, 0x12200, 0x0) openat2(r0, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0)={0x214000, 0x0, 0x2}, 0x18) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x54, 0x0, 0x0) kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x4003000}], 0x0) 09:07:44 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f00000000c0)=0x673c, 0x4) sendmsg(r0, &(0x7f0000000540)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000080)="f9de", 0x4}], 0x1}, 0x0) recvmmsg(r0, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 09:07:44 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f00000000c0)=0x673c, 0x4) sendmsg(r0, &(0x7f0000000540)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000080)="f9de", 0x4}], 0x1}, 0x0) recvmmsg(r0, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 09:07:44 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f00000000c0)=0x673c, 0x4) sendmsg(r0, &(0x7f0000000540)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000080)="f9de", 0x4}], 0x1}, 0x0) recvmmsg(r0, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 09:07:44 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f00000000c0)=0x673c, 0x4) sendmsg(r0, &(0x7f0000000540)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000080)="f9de", 0x4}], 0x1}, 0x0) recvmmsg(r0, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 09:07:44 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="fc000000190001000000000000000000ac1414aa000000000000000000000000ac1e000100000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000001300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000044000500fc01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006b"], 0xfc}}, 0x0) 09:07:44 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x136, &(0x7f00000001c0)={@link_local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x100, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x1d, "2a94b064bfcabdaabb8cd5309bf220d0a49af1af9a2608a5f54f1971cf3d3ba94abd965ad3c687deca3eba10b52318114216a0dad2e5a23b2dd4153b6e8e60cf660a0201d21fa36a6aff628305dcc7bf2218c99d8813dd069b6bd7b1bbeaf381c6965646e78418be54db5eedf4c7e781ba79b112c040913a2088aff1c33cc139fc8708c9b09949c719e69fe6ad9f6c8faadf1048875ebcfca8cb62aa9bd062e32e551a70bd9176b560d98ea580a6ea18892dc6b50d5a20fc413ea5948a909387f73e28288cd1e4e12cdc744b48d1e2cdab6c6974408e73e66a0f446cd1a093d67fb1dd35f4f27a010b1c"}, {0x0, 0x0, "eb50"}]}}}}}}, 0x0) 09:07:44 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/softnet_stat\x00') preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000000)=""/36, 0x24}], 0x1, 0x5827, 0x0) 09:07:44 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f00000000c0)=0x673c, 0x4) sendmsg(r0, &(0x7f0000000540)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000080)="f9de", 0x4}], 0x1}, 0x0) recvmmsg(r0, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 09:07:44 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_secret(0x0) openat$incfs(r0, 0x0, 0x12200, 0x0) openat2(r0, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0)={0x214000, 0x0, 0x2}, 0x18) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x54, 0x0, 0x0) kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x4003000}], 0x0) 09:07:44 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x20, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_EXTENDED_ADDR={0xc}]}, 0x20}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan0\x00'}) syz_genetlink_get_family_id$nl802154(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000180)={'wpan0\x00'}) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000b40), 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)=ANY=[@ANYRES16=r3, @ANYBLOB, @ANYRES32, @ANYBLOB], 0x40}}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendfile(r5, r4, 0x0, 0x7effc89) 09:07:44 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x20, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_EXTENDED_ADDR={0xc}]}, 0x20}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan0\x00'}) syz_genetlink_get_family_id$nl802154(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000180)={'wpan0\x00'}) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000b40), 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)=ANY=[@ANYRES16=r3, @ANYBLOB, @ANYRES32, @ANYBLOB], 0x40}}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendfile(r5, r4, 0x0, 0x7effc89) 09:07:44 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="fc000000190001000000000000000000ac1414aa000000000000000000000000ac1e000100000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000001300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000044000500fc01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006b"], 0xfc}}, 0x0) 09:07:44 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f00000000c0)=0x673c, 0x4) sendmsg(r0, &(0x7f0000000540)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000080)="f9de", 0x4}], 0x1}, 0x0) recvmmsg(r0, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 09:07:44 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x136, &(0x7f00000001c0)={@link_local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x100, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x1d, "2a94b064bfcabdaabb8cd5309bf220d0a49af1af9a2608a5f54f1971cf3d3ba94abd965ad3c687deca3eba10b52318114216a0dad2e5a23b2dd4153b6e8e60cf660a0201d21fa36a6aff628305dcc7bf2218c99d8813dd069b6bd7b1bbeaf381c6965646e78418be54db5eedf4c7e781ba79b112c040913a2088aff1c33cc139fc8708c9b09949c719e69fe6ad9f6c8faadf1048875ebcfca8cb62aa9bd062e32e551a70bd9176b560d98ea580a6ea18892dc6b50d5a20fc413ea5948a909387f73e28288cd1e4e12cdc744b48d1e2cdab6c6974408e73e66a0f446cd1a093d67fb1dd35f4f27a010b1c"}, {0x0, 0x0, "eb50"}]}}}}}}, 0x0) 09:07:44 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/softnet_stat\x00') preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000000)=""/36, 0x24}], 0x1, 0x5827, 0x0) 09:07:44 executing program 7: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) 09:07:45 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="fc000000190001000000000000000000ac1414aa000000000000000000000000ac1e000100000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000001300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000044000500fc01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006b"], 0xfc}}, 0x0) 09:07:45 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x136, &(0x7f00000001c0)={@link_local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x100, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x1d, "2a94b064bfcabdaabb8cd5309bf220d0a49af1af9a2608a5f54f1971cf3d3ba94abd965ad3c687deca3eba10b52318114216a0dad2e5a23b2dd4153b6e8e60cf660a0201d21fa36a6aff628305dcc7bf2218c99d8813dd069b6bd7b1bbeaf381c6965646e78418be54db5eedf4c7e781ba79b112c040913a2088aff1c33cc139fc8708c9b09949c719e69fe6ad9f6c8faadf1048875ebcfca8cb62aa9bd062e32e551a70bd9176b560d98ea580a6ea18892dc6b50d5a20fc413ea5948a909387f73e28288cd1e4e12cdc744b48d1e2cdab6c6974408e73e66a0f446cd1a093d67fb1dd35f4f27a010b1c"}, {0x0, 0x0, "eb50"}]}}}}}}, 0x0) 09:07:45 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'wlan0\x00', &(0x7f0000000000)=@ethtool_rx_ntuple={0x2b, {0x0, @tcp_ip4_spec={@rand_addr, @private}, @esp_ip4_spec={@multicast1, @local}}}}) 09:07:45 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/softnet_stat\x00') preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000000)=""/36, 0x24}], 0x1, 0x5827, 0x0) 09:07:45 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'wlan0\x00', &(0x7f0000000000)=@ethtool_rx_ntuple={0x2b, {0x0, @tcp_ip4_spec={@rand_addr, @private}, @esp_ip4_spec={@multicast1, @local}}}}) 09:07:45 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void, @val={0xc, 0x99, {0x1}}}}}, 0x28}}, 0x0) 09:07:45 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="fc000000190001000000000000000000ac1414aa000000000000000000000000ac1e000100000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000001300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000044000500fc01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006b"], 0xfc}}, 0x0) 09:07:45 executing program 7: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) 09:07:45 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'wlan0\x00', &(0x7f0000000000)=@ethtool_rx_ntuple={0x2b, {0x0, @tcp_ip4_spec={@rand_addr, @private}, @esp_ip4_spec={@multicast1, @local}}}}) 09:07:45 executing program 6: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xaf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getegid() r1 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r1, 0x1, &(0x7f0000001400)={{0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) msgsnd(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="02"], 0x1008, 0x0) msgsnd(r1, &(0x7f0000000080)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r1, 0x0) getresgid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) r2 = signalfd4(r0, &(0x7f0000000140)={[0x1ff]}, 0x8, 0x80000) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x44040}, 0x4001) r3 = fork() ptrace(0x10, r3) wait4(r3, 0x0, 0x80000000, &(0x7f0000000240)) 09:07:45 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void, @val={0xc, 0x99, {0x1}}}}}, 0x28}}, 0x0) 09:07:45 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900)="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", 0x200) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x44000) sendfile(r0, r1, 0x0, 0xfdef) 09:07:45 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_secret(0x0) openat$incfs(r0, 0x0, 0x12200, 0x0) openat2(r0, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0)={0x214000, 0x0, 0x2}, 0x18) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x54, 0x0, 0x0) kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x4003000}], 0x0) 09:07:45 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x31, 0x0, 0x0) 09:07:45 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000080)={0x0, 0x0, 0xffffffb8}) [ 137.354389] program syz-executor.3 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 137.361656] program syz-executor.3 is using a deprecated SCSI ioctl, please convert it to SG_IO 09:07:45 executing program 7: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) 09:07:45 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x31, 0x0, 0x0) 09:07:45 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000080)={0x0, 0x0, 0xffffffb8}) 09:07:45 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'wlan0\x00', &(0x7f0000000000)=@ethtool_rx_ntuple={0x2b, {0x0, @tcp_ip4_spec={@rand_addr, @private}, @esp_ip4_spec={@multicast1, @local}}}}) 09:07:45 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void, @val={0xc, 0x99, {0x1}}}}}, 0x28}}, 0x0) 09:07:45 executing program 6: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xaf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getegid() r1 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r1, 0x1, &(0x7f0000001400)={{0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) msgsnd(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="02"], 0x1008, 0x0) msgsnd(r1, &(0x7f0000000080)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r1, 0x0) getresgid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) r2 = signalfd4(r0, &(0x7f0000000140)={[0x1ff]}, 0x8, 0x80000) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x44040}, 0x4001) r3 = fork() ptrace(0x10, r3) wait4(r3, 0x0, 0x80000000, &(0x7f0000000240)) [ 137.426995] program syz-executor.3 is using a deprecated SCSI ioctl, please convert it to SG_IO 09:07:45 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x31, 0x0, 0x0) [ 137.602791] syz-executor.5 (4446) used greatest stack depth: 24192 bytes left 09:07:45 executing program 7: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) 09:07:45 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000080)={0x0, 0x0, 0xffffffb8}) 09:07:45 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x31, 0x0, 0x0) 09:07:45 executing program 0: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xaf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getegid() r1 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r1, 0x1, &(0x7f0000001400)={{0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) msgsnd(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="02"], 0x1008, 0x0) msgsnd(r1, &(0x7f0000000080)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r1, 0x0) getresgid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) r2 = signalfd4(r0, &(0x7f0000000140)={[0x1ff]}, 0x8, 0x80000) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x44040}, 0x4001) r3 = fork() ptrace(0x10, r3) wait4(r3, 0x0, 0x80000000, &(0x7f0000000240)) 09:07:45 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void, @val={0xc, 0x99, {0x1}}}}}, 0x28}}, 0x0) 09:07:45 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_secret(0x0) openat$incfs(r0, 0x0, 0x12200, 0x0) openat2(r0, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0)={0x214000, 0x0, 0x2}, 0x18) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x54, 0x0, 0x0) kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x4003000}], 0x0) 09:07:45 executing program 6: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xaf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getegid() r1 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r1, 0x1, &(0x7f0000001400)={{0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) msgsnd(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="02"], 0x1008, 0x0) msgsnd(r1, &(0x7f0000000080)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r1, 0x0) getresgid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) r2 = signalfd4(r0, &(0x7f0000000140)={[0x1ff]}, 0x8, 0x80000) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x44040}, 0x4001) r3 = fork() ptrace(0x10, r3) wait4(r3, 0x0, 0x80000000, &(0x7f0000000240)) 09:07:45 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900)="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", 0x200) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x44000) sendfile(r0, r1, 0x0, 0xfdef) [ 137.648594] program syz-executor.3 is using a deprecated SCSI ioctl, please convert it to SG_IO 09:07:45 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000080)={0x0, 0x0, 0xffffffb8}) 09:07:45 executing program 7: perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900)="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", 0x200) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x44000) sendfile(r0, r1, 0x0, 0xfdef) [ 137.729698] program syz-executor.3 is using a deprecated SCSI ioctl, please convert it to SG_IO 09:07:45 executing program 0: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xaf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getegid() r1 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r1, 0x1, &(0x7f0000001400)={{0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) msgsnd(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="02"], 0x1008, 0x0) msgsnd(r1, &(0x7f0000000080)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r1, 0x0) getresgid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) r2 = signalfd4(r0, &(0x7f0000000140)={[0x1ff]}, 0x8, 0x80000) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x44040}, 0x4001) r3 = fork() ptrace(0x10, r3) wait4(r3, 0x0, 0x80000000, &(0x7f0000000240)) 09:07:45 executing program 1: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xaf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getegid() r1 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r1, 0x1, &(0x7f0000001400)={{0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) msgsnd(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="02"], 0x1008, 0x0) msgsnd(r1, &(0x7f0000000080)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r1, 0x0) getresgid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) r2 = signalfd4(r0, &(0x7f0000000140)={[0x1ff]}, 0x8, 0x80000) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x44040}, 0x4001) r3 = fork() ptrace(0x10, r3) wait4(r3, 0x0, 0x80000000, &(0x7f0000000240)) 09:07:46 executing program 6: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xaf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getegid() r1 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r1, 0x1, &(0x7f0000001400)={{0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) msgsnd(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="02"], 0x1008, 0x0) msgsnd(r1, &(0x7f0000000080)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r1, 0x0) getresgid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) r2 = signalfd4(r0, &(0x7f0000000140)={[0x1ff]}, 0x8, 0x80000) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x44040}, 0x4001) r3 = fork() ptrace(0x10, r3) wait4(r3, 0x0, 0x80000000, &(0x7f0000000240)) 09:07:46 executing program 2: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xaf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getegid() r1 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r1, 0x1, &(0x7f0000001400)={{0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) msgsnd(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="02"], 0x1008, 0x0) msgsnd(r1, &(0x7f0000000080)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r1, 0x0) getresgid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) r2 = signalfd4(r0, &(0x7f0000000140)={[0x1ff]}, 0x8, 0x80000) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x44040}, 0x4001) r3 = fork() ptrace(0x10, r3) wait4(r3, 0x0, 0x80000000, &(0x7f0000000240)) 09:07:46 executing program 3: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xaf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getegid() r1 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r1, 0x1, &(0x7f0000001400)={{0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) msgsnd(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="02"], 0x1008, 0x0) msgsnd(r1, &(0x7f0000000080)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r1, 0x0) getresgid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) r2 = signalfd4(r0, &(0x7f0000000140)={[0x1ff]}, 0x8, 0x80000) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x44040}, 0x4001) r3 = fork() ptrace(0x10, r3) wait4(r3, 0x0, 0x80000000, &(0x7f0000000240)) 09:07:46 executing program 4: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xaf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getegid() r1 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r1, 0x1, &(0x7f0000001400)={{0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) msgsnd(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="02"], 0x1008, 0x0) msgsnd(r1, &(0x7f0000000080)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r1, 0x0) getresgid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) r2 = signalfd4(r0, &(0x7f0000000140)={[0x1ff]}, 0x8, 0x80000) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x44040}, 0x4001) r3 = fork() ptrace(0x10, r3) wait4(r3, 0x0, 0x80000000, &(0x7f0000000240)) 09:07:46 executing program 1: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xaf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getegid() r1 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r1, 0x1, &(0x7f0000001400)={{0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) msgsnd(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="02"], 0x1008, 0x0) msgsnd(r1, &(0x7f0000000080)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r1, 0x0) getresgid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) r2 = signalfd4(r0, &(0x7f0000000140)={[0x1ff]}, 0x8, 0x80000) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x44040}, 0x4001) r3 = fork() ptrace(0x10, r3) wait4(r3, 0x0, 0x80000000, &(0x7f0000000240)) 09:07:46 executing program 0: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xaf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getegid() r1 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r1, 0x1, &(0x7f0000001400)={{0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) msgsnd(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="02"], 0x1008, 0x0) msgsnd(r1, &(0x7f0000000080)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r1, 0x0) getresgid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) r2 = signalfd4(r0, &(0x7f0000000140)={[0x1ff]}, 0x8, 0x80000) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x44040}, 0x4001) r3 = fork() ptrace(0x10, r3) wait4(r3, 0x0, 0x80000000, &(0x7f0000000240)) 09:07:46 executing program 6: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xaf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getegid() r1 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r1, 0x1, &(0x7f0000001400)={{0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) msgsnd(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="02"], 0x1008, 0x0) msgsnd(r1, &(0x7f0000000080)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r1, 0x0) getresgid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) r2 = signalfd4(r0, &(0x7f0000000140)={[0x1ff]}, 0x8, 0x80000) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x44040}, 0x4001) r3 = fork() ptrace(0x10, r3) wait4(r3, 0x0, 0x80000000, &(0x7f0000000240)) 09:07:46 VM DIAGNOSIS: 09:07:40 Registers: info registers vcpu 0 RAX=0000000000000001 RBX=0000000000000001 RCX=ffffffff84d172ee RDX=fffffbfff0b82d11 RSI=0000000000000004 RDI=ffffffff85c16880 RBP=ffffffff85c16880 RSP=ffff8880497f7950 R8 =0000000000000000 R9 =fffffbfff0b82d10 R10=ffffffff85c16883 R11=0000000000000000 R12=1ffff110092fef2b R13=0000000000000003 R14=fffffbfff0b82d10 R15=ffff8880497f7988 RIP=ffffffff84d17480 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00005555894c0400 00000000 00000000 GS =0000 ffff8880e5343000 00000000 00000000 LDT=0000 fffffe2300000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fd26403c547 CR3=00000000482a7000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000a60ce07b00000000cec3662e XMM01=000000000000000003515b82db34ca11 XMM02=0000000000000000333bebdfd0a6a21d XMM03=00000000000000000000000000000000 XMM04=000000ff0000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000065 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff82973905 RDI=ffffffff889c0960 RBP=ffffffff889c0920 RSP=ffff88801b5074c8 R8 =0000000000000000 R9 =ffffed10016f2046 R10=0000000000000065 R11=666666203a302320 R12=0000000000000065 R13=0000000000000010 R14=ffffffff889c0920 R15=ffffffff829738f0 RIP=ffffffff8297395d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000555582837400 00000000 00000000 GS =0000 ffff8880e5443000 00000000 00000000 LDT=0000 fffffe1900000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffcc899d40c CR3=000000000bb6f000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000a60ce07b00000000cec3662e XMM01=000000000000000003515b82db34ca11 XMM02=0000000000000000333bebdfd0a6a21d XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000