Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:62809' (ECDSA) to the list of known hosts. 2026/01/14 09:18:31 fuzzer started 2026/01/14 09:18:32 dialing manager at localhost:46753 syzkaller login: [ 46.348552] cgroup: Unknown subsys name 'net' [ 46.432107] cgroup: Unknown subsys name 'cpuset' [ 46.452837] cgroup: Unknown subsys name 'rlimit' 2026/01/14 09:18:44 syscalls: 2214 2026/01/14 09:18:44 code coverage: enabled 2026/01/14 09:18:44 comparison tracing: enabled 2026/01/14 09:18:44 extra coverage: enabled 2026/01/14 09:18:44 setuid sandbox: enabled 2026/01/14 09:18:44 namespace sandbox: enabled 2026/01/14 09:18:44 Android sandbox: enabled 2026/01/14 09:18:44 fault injection: enabled 2026/01/14 09:18:44 leak checking: enabled 2026/01/14 09:18:44 net packet injection: enabled 2026/01/14 09:18:44 net device setup: enabled 2026/01/14 09:18:44 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2026/01/14 09:18:44 devlink PCI setup: PCI device 0000:00:10.0 is not available 2026/01/14 09:18:44 USB emulation: enabled 2026/01/14 09:18:44 hci packet injection: enabled 2026/01/14 09:18:44 wifi device emulation: enabled 2026/01/14 09:18:44 802.15.4 emulation: enabled 2026/01/14 09:18:44 fetching corpus: 0, signal 0/2000 (executing program) 2026/01/14 09:18:44 fetching corpus: 40, signal 16557/20265 (executing program) 2026/01/14 09:18:44 fetching corpus: 85, signal 35130/40185 (executing program) 2026/01/14 09:18:45 fetching corpus: 135, signal 43244/49699 (executing program) 2026/01/14 09:18:45 fetching corpus: 185, signal 51103/58836 (executing program) 2026/01/14 09:18:45 fetching corpus: 235, signal 57319/66261 (executing program) 2026/01/14 09:18:45 fetching corpus: 285, signal 62419/72537 (executing program) 2026/01/14 09:18:45 fetching corpus: 335, signal 68267/79426 (executing program) 2026/01/14 09:18:45 fetching corpus: 385, signal 72863/85056 (executing program) 2026/01/14 09:18:45 fetching corpus: 435, signal 75796/89110 (executing program) 2026/01/14 09:18:45 fetching corpus: 485, signal 80508/94752 (executing program) 2026/01/14 09:18:45 fetching corpus: 535, signal 83281/98521 (executing program) 2026/01/14 09:18:46 fetching corpus: 585, signal 85544/101758 (executing program) 2026/01/14 09:18:46 fetching corpus: 635, signal 87680/104855 (executing program) 2026/01/14 09:18:46 fetching corpus: 685, signal 90377/108412 (executing program) 2026/01/14 09:18:46 fetching corpus: 734, signal 92794/111691 (executing program) 2026/01/14 09:18:46 fetching corpus: 784, signal 94404/114278 (executing program) 2026/01/14 09:18:46 fetching corpus: 834, signal 96566/117245 (executing program) 2026/01/14 09:18:46 fetching corpus: 884, signal 98811/120275 (executing program) 2026/01/14 09:18:46 fetching corpus: 934, signal 101127/123353 (executing program) 2026/01/14 09:18:46 fetching corpus: 984, signal 103218/126203 (executing program) 2026/01/14 09:18:47 fetching corpus: 1033, signal 104096/127980 (executing program) 2026/01/14 09:18:47 fetching corpus: 1083, signal 105943/130525 (executing program) 2026/01/14 09:18:47 fetching corpus: 1133, signal 108451/133562 (executing program) 2026/01/14 09:18:47 fetching corpus: 1183, signal 109932/135739 (executing program) 2026/01/14 09:18:47 fetching corpus: 1233, signal 111008/137608 (executing program) 2026/01/14 09:18:47 fetching corpus: 1283, signal 112336/139693 (executing program) 2026/01/14 09:18:47 fetching corpus: 1333, signal 114359/142275 (executing program) 2026/01/14 09:18:47 fetching corpus: 1383, signal 115894/144410 (executing program) 2026/01/14 09:18:47 fetching corpus: 1433, signal 117408/146494 (executing program) 2026/01/14 09:18:47 fetching corpus: 1483, signal 118448/148263 (executing program) 2026/01/14 09:18:48 fetching corpus: 1533, signal 119526/150043 (executing program) 2026/01/14 09:18:48 fetching corpus: 1583, signal 120901/152019 (executing program) 2026/01/14 09:18:48 fetching corpus: 1633, signal 122706/154264 (executing program) 2026/01/14 09:18:49 fetching corpus: 1682, signal 124088/156157 (executing program) 2026/01/14 09:18:49 fetching corpus: 1731, signal 125852/158283 (executing program) 2026/01/14 09:18:49 fetching corpus: 1781, signal 127322/160157 (executing program) 2026/01/14 09:18:49 fetching corpus: 1831, signal 129368/162427 (executing program) 2026/01/14 09:18:49 fetching corpus: 1881, signal 130271/163848 (executing program) 2026/01/14 09:18:49 fetching corpus: 1931, signal 131161/165283 (executing program) 2026/01/14 09:18:49 fetching corpus: 1981, signal 132419/166944 (executing program) 2026/01/14 09:18:49 fetching corpus: 2031, signal 133179/168263 (executing program) 2026/01/14 09:18:50 fetching corpus: 2081, signal 134492/169885 (executing program) 2026/01/14 09:18:50 fetching corpus: 2131, signal 135482/171310 (executing program) 2026/01/14 09:18:50 fetching corpus: 2181, signal 136713/172853 (executing program) 2026/01/14 09:18:50 fetching corpus: 2231, signal 137914/174363 (executing program) 2026/01/14 09:18:50 fetching corpus: 2281, signal 139709/176172 (executing program) 2026/01/14 09:18:50 fetching corpus: 2331, signal 140565/177473 (executing program) 2026/01/14 09:18:50 fetching corpus: 2381, signal 141721/178931 (executing program) 2026/01/14 09:18:50 fetching corpus: 2431, signal 142308/179976 (executing program) 2026/01/14 09:18:51 fetching corpus: 2481, signal 143268/181269 (executing program) 2026/01/14 09:18:51 fetching corpus: 2531, signal 144156/182495 (executing program) 2026/01/14 09:18:51 fetching corpus: 2581, signal 144767/183565 (executing program) 2026/01/14 09:18:51 fetching corpus: 2631, signal 146162/185051 (executing program) 2026/01/14 09:18:51 fetching corpus: 2681, signal 146704/186040 (executing program) 2026/01/14 09:18:51 fetching corpus: 2731, signal 147515/187205 (executing program) 2026/01/14 09:18:51 fetching corpus: 2781, signal 148123/188260 (executing program) 2026/01/14 09:18:51 fetching corpus: 2830, signal 148855/189299 (executing program) 2026/01/14 09:18:51 fetching corpus: 2880, signal 149837/190483 (executing program) 2026/01/14 09:18:52 fetching corpus: 2930, signal 150655/191543 (executing program) 2026/01/14 09:18:52 fetching corpus: 2980, signal 151447/192584 (executing program) 2026/01/14 09:18:52 fetching corpus: 3030, signal 152454/193707 (executing program) 2026/01/14 09:18:52 fetching corpus: 3080, signal 153135/194651 (executing program) 2026/01/14 09:18:52 fetching corpus: 3130, signal 154046/195700 (executing program) 2026/01/14 09:18:52 fetching corpus: 3180, signal 154664/196633 (executing program) 2026/01/14 09:18:52 fetching corpus: 3230, signal 155578/197662 (executing program) 2026/01/14 09:18:53 fetching corpus: 3280, signal 156592/198718 (executing program) 2026/01/14 09:18:53 fetching corpus: 3330, signal 157438/199694 (executing program) 2026/01/14 09:18:53 fetching corpus: 3380, signal 158391/200720 (executing program) 2026/01/14 09:18:53 fetching corpus: 3430, signal 159155/201629 (executing program) 2026/01/14 09:18:53 fetching corpus: 3480, signal 159791/202481 (executing program) 2026/01/14 09:18:53 fetching corpus: 3530, signal 160476/203324 (executing program) 2026/01/14 09:18:53 fetching corpus: 3580, signal 161232/204193 (executing program) 2026/01/14 09:18:53 fetching corpus: 3630, signal 161747/204937 (executing program) 2026/01/14 09:18:53 fetching corpus: 3680, signal 162295/205725 (executing program) 2026/01/14 09:18:53 fetching corpus: 3730, signal 163038/206522 (executing program) 2026/01/14 09:18:54 fetching corpus: 3780, signal 163644/207279 (executing program) 2026/01/14 09:18:54 fetching corpus: 3830, signal 164398/208107 (executing program) 2026/01/14 09:18:54 fetching corpus: 3879, signal 165074/208884 (executing program) 2026/01/14 09:18:54 fetching corpus: 3929, signal 165745/209689 (executing program) 2026/01/14 09:18:54 fetching corpus: 3979, signal 166285/210424 (executing program) 2026/01/14 09:18:54 fetching corpus: 4029, signal 166888/211142 (executing program) 2026/01/14 09:18:55 fetching corpus: 4079, signal 167553/211869 (executing program) 2026/01/14 09:18:55 fetching corpus: 4129, signal 168058/212518 (executing program) 2026/01/14 09:18:55 fetching corpus: 4179, signal 168888/213273 (executing program) 2026/01/14 09:18:55 fetching corpus: 4229, signal 169575/213979 (executing program) 2026/01/14 09:18:55 fetching corpus: 4279, signal 170028/214618 (executing program) 2026/01/14 09:18:55 fetching corpus: 4329, signal 170453/215182 (executing program) 2026/01/14 09:18:55 fetching corpus: 4379, signal 171072/215857 (executing program) 2026/01/14 09:18:55 fetching corpus: 4429, signal 171609/216492 (executing program) 2026/01/14 09:18:56 fetching corpus: 4479, signal 171975/217062 (executing program) 2026/01/14 09:18:56 fetching corpus: 4529, signal 172551/217660 (executing program) 2026/01/14 09:18:56 fetching corpus: 4579, signal 172969/218239 (executing program) 2026/01/14 09:18:56 fetching corpus: 4629, signal 173370/218797 (executing program) 2026/01/14 09:18:56 fetching corpus: 4679, signal 173849/219360 (executing program) 2026/01/14 09:18:56 fetching corpus: 4729, signal 174690/219959 (executing program) 2026/01/14 09:18:56 fetching corpus: 4779, signal 175110/220475 (executing program) 2026/01/14 09:18:56 fetching corpus: 4829, signal 175508/221007 (executing program) 2026/01/14 09:18:56 fetching corpus: 4879, signal 175995/221525 (executing program) 2026/01/14 09:18:57 fetching corpus: 4929, signal 176400/222034 (executing program) 2026/01/14 09:18:57 fetching corpus: 4979, signal 176801/222574 (executing program) 2026/01/14 09:18:57 fetching corpus: 5029, signal 177508/223157 (executing program) 2026/01/14 09:18:57 fetching corpus: 5079, signal 177940/223655 (executing program) 2026/01/14 09:18:57 fetching corpus: 5129, signal 178432/224123 (executing program) 2026/01/14 09:18:57 fetching corpus: 5179, signal 178899/224598 (executing program) 2026/01/14 09:18:57 fetching corpus: 5229, signal 179502/225081 (executing program) 2026/01/14 09:18:57 fetching corpus: 5279, signal 180262/225585 (executing program) 2026/01/14 09:18:57 fetching corpus: 5329, signal 180766/226056 (executing program) 2026/01/14 09:18:57 fetching corpus: 5379, signal 181194/226481 (executing program) 2026/01/14 09:18:58 fetching corpus: 5429, signal 181559/226927 (executing program) 2026/01/14 09:18:58 fetching corpus: 5479, signal 181855/227328 (executing program) 2026/01/14 09:18:58 fetching corpus: 5529, signal 182250/227762 (executing program) 2026/01/14 09:18:58 fetching corpus: 5579, signal 182639/228172 (executing program) 2026/01/14 09:18:58 fetching corpus: 5629, signal 182972/228558 (executing program) 2026/01/14 09:18:58 fetching corpus: 5679, signal 183311/228600 (executing program) 2026/01/14 09:18:58 fetching corpus: 5729, signal 183890/228600 (executing program) 2026/01/14 09:18:58 fetching corpus: 5779, signal 184296/228621 (executing program) 2026/01/14 09:18:58 fetching corpus: 5829, signal 184660/228625 (executing program) 2026/01/14 09:18:58 fetching corpus: 5879, signal 185290/228625 (executing program) 2026/01/14 09:18:59 fetching corpus: 5929, signal 185676/228625 (executing program) 2026/01/14 09:18:59 fetching corpus: 5978, signal 186065/228630 (executing program) 2026/01/14 09:18:59 fetching corpus: 6028, signal 186392/228630 (executing program) 2026/01/14 09:18:59 fetching corpus: 6078, signal 186735/228630 (executing program) 2026/01/14 09:18:59 fetching corpus: 6128, signal 187105/228630 (executing program) 2026/01/14 09:18:59 fetching corpus: 6178, signal 187379/228630 (executing program) 2026/01/14 09:18:59 fetching corpus: 6227, signal 187828/228631 (executing program) 2026/01/14 09:18:59 fetching corpus: 6277, signal 188239/228631 (executing program) 2026/01/14 09:18:59 fetching corpus: 6327, signal 188591/228632 (executing program) 2026/01/14 09:19:00 fetching corpus: 6377, signal 188879/228632 (executing program) 2026/01/14 09:19:00 fetching corpus: 6427, signal 189243/228634 (executing program) 2026/01/14 09:19:00 fetching corpus: 6477, signal 189799/228634 (executing program) 2026/01/14 09:19:00 fetching corpus: 6527, signal 190057/228636 (executing program) 2026/01/14 09:19:00 fetching corpus: 6577, signal 190483/228636 (executing program) 2026/01/14 09:19:00 fetching corpus: 6627, signal 190876/228639 (executing program) 2026/01/14 09:19:00 fetching corpus: 6677, signal 191522/228641 (executing program) 2026/01/14 09:19:00 fetching corpus: 6727, signal 191840/228641 (executing program) 2026/01/14 09:19:00 fetching corpus: 6777, signal 192187/228641 (executing program) 2026/01/14 09:19:00 fetching corpus: 6827, signal 192587/228642 (executing program) 2026/01/14 09:19:01 fetching corpus: 6877, signal 193078/228644 (executing program) 2026/01/14 09:19:01 fetching corpus: 6927, signal 193479/228644 (executing program) 2026/01/14 09:19:01 fetching corpus: 6977, signal 193821/228644 (executing program) 2026/01/14 09:19:01 fetching corpus: 7027, signal 194197/228644 (executing program) 2026/01/14 09:19:01 fetching corpus: 7077, signal 194443/228659 (executing program) 2026/01/14 09:19:01 fetching corpus: 7127, signal 194759/228660 (executing program) 2026/01/14 09:19:01 fetching corpus: 7177, signal 195060/228667 (executing program) 2026/01/14 09:19:01 fetching corpus: 7226, signal 195427/228667 (executing program) 2026/01/14 09:19:02 fetching corpus: 7276, signal 195811/228675 (executing program) 2026/01/14 09:19:02 fetching corpus: 7326, signal 196108/228675 (executing program) 2026/01/14 09:19:02 fetching corpus: 7376, signal 196390/228682 (executing program) 2026/01/14 09:19:02 fetching corpus: 7426, signal 196786/228682 (executing program) 2026/01/14 09:19:02 fetching corpus: 7476, signal 197076/228682 (executing program) 2026/01/14 09:19:02 fetching corpus: 7525, signal 197498/228682 (executing program) 2026/01/14 09:19:02 fetching corpus: 7575, signal 197803/228682 (executing program) 2026/01/14 09:19:02 fetching corpus: 7625, signal 198178/228682 (executing program) 2026/01/14 09:19:02 fetching corpus: 7675, signal 198444/228701 (executing program) 2026/01/14 09:19:02 fetching corpus: 7725, signal 198691/228701 (executing program) 2026/01/14 09:19:03 fetching corpus: 7775, signal 199118/228704 (executing program) 2026/01/14 09:19:03 fetching corpus: 7825, signal 199506/228704 (executing program) 2026/01/14 09:19:03 fetching corpus: 7875, signal 199679/228704 (executing program) 2026/01/14 09:19:03 fetching corpus: 7925, signal 199961/228704 (executing program) 2026/01/14 09:19:03 fetching corpus: 7975, signal 200244/228704 (executing program) 2026/01/14 09:19:03 fetching corpus: 8025, signal 200519/228704 (executing program) 2026/01/14 09:19:03 fetching corpus: 8075, signal 200835/228704 (executing program) 2026/01/14 09:19:03 fetching corpus: 8125, signal 201219/228704 (executing program) 2026/01/14 09:19:03 fetching corpus: 8175, signal 201500/228704 (executing program) 2026/01/14 09:19:03 fetching corpus: 8225, signal 201766/228704 (executing program) 2026/01/14 09:19:03 fetching corpus: 8275, signal 202169/228710 (executing program) 2026/01/14 09:19:04 fetching corpus: 8325, signal 202458/228711 (executing program) 2026/01/14 09:19:04 fetching corpus: 8375, signal 202875/228711 (executing program) 2026/01/14 09:19:04 fetching corpus: 8425, signal 203217/228712 (executing program) 2026/01/14 09:19:04 fetching corpus: 8474, signal 203469/228712 (executing program) 2026/01/14 09:19:04 fetching corpus: 8524, signal 203802/228712 (executing program) 2026/01/14 09:19:04 fetching corpus: 8574, signal 204317/228712 (executing program) 2026/01/14 09:19:04 fetching corpus: 8624, signal 204618/228712 (executing program) 2026/01/14 09:19:04 fetching corpus: 8674, signal 204943/228712 (executing program) 2026/01/14 09:19:05 fetching corpus: 8723, signal 205295/228719 (executing program) 2026/01/14 09:19:05 fetching corpus: 8772, signal 205585/228719 (executing program) 2026/01/14 09:19:05 fetching corpus: 8822, signal 205906/228719 (executing program) 2026/01/14 09:19:05 fetching corpus: 8871, signal 206115/228719 (executing program) 2026/01/14 09:19:05 fetching corpus: 8921, signal 206387/228719 (executing program) 2026/01/14 09:19:05 fetching corpus: 8971, signal 206623/228728 (executing program) 2026/01/14 09:19:05 fetching corpus: 9020, signal 206991/228729 (executing program) 2026/01/14 09:19:05 fetching corpus: 9068, signal 207316/228732 (executing program) 2026/01/14 09:19:05 fetching corpus: 9118, signal 207682/228734 (executing program) 2026/01/14 09:19:05 fetching corpus: 9168, signal 208013/228734 (executing program) 2026/01/14 09:19:06 fetching corpus: 9218, signal 208265/228751 (executing program) 2026/01/14 09:19:06 fetching corpus: 9268, signal 208977/228751 (executing program) 2026/01/14 09:19:06 fetching corpus: 9318, signal 209282/228751 (executing program) 2026/01/14 09:19:06 fetching corpus: 9367, signal 209507/228755 (executing program) 2026/01/14 09:19:06 fetching corpus: 9417, signal 209742/228755 (executing program) 2026/01/14 09:19:06 fetching corpus: 9466, signal 210037/228755 (executing program) 2026/01/14 09:19:06 fetching corpus: 9516, signal 210226/228755 (executing program) 2026/01/14 09:19:06 fetching corpus: 9565, signal 210671/228777 (executing program) 2026/01/14 09:19:06 fetching corpus: 9615, signal 210911/228779 (executing program) 2026/01/14 09:19:06 fetching corpus: 9665, signal 211139/228782 (executing program) 2026/01/14 09:19:06 fetching corpus: 9715, signal 211616/228784 (executing program) 2026/01/14 09:19:07 fetching corpus: 9764, signal 211886/228784 (executing program) 2026/01/14 09:19:07 fetching corpus: 9814, signal 212193/228791 (executing program) 2026/01/14 09:19:07 fetching corpus: 9864, signal 212412/228791 (executing program) 2026/01/14 09:19:07 fetching corpus: 9914, signal 212617/228791 (executing program) 2026/01/14 09:19:07 fetching corpus: 9964, signal 212838/228791 (executing program) 2026/01/14 09:19:07 fetching corpus: 10012, signal 213061/228791 (executing program) 2026/01/14 09:19:07 fetching corpus: 10062, signal 213251/228793 (executing program) 2026/01/14 09:19:07 fetching corpus: 10112, signal 213437/228793 (executing program) 2026/01/14 09:19:07 fetching corpus: 10160, signal 213685/228795 (executing program) 2026/01/14 09:19:07 fetching corpus: 10209, signal 213915/228805 (executing program) 2026/01/14 09:19:07 fetching corpus: 10258, signal 214143/228814 (executing program) 2026/01/14 09:19:08 fetching corpus: 10308, signal 214409/228814 (executing program) 2026/01/14 09:19:08 fetching corpus: 10358, signal 214609/228814 (executing program) 2026/01/14 09:19:08 fetching corpus: 10408, signal 214892/228830 (executing program) 2026/01/14 09:19:08 fetching corpus: 10458, signal 215073/228830 (executing program) 2026/01/14 09:19:08 fetching corpus: 10508, signal 215309/228834 (executing program) 2026/01/14 09:19:08 fetching corpus: 10558, signal 215502/228840 (executing program) 2026/01/14 09:19:08 fetching corpus: 10608, signal 215699/228842 (executing program) 2026/01/14 09:19:08 fetching corpus: 10658, signal 215914/228846 (executing program) 2026/01/14 09:19:08 fetching corpus: 10708, signal 216166/228846 (executing program) 2026/01/14 09:19:08 fetching corpus: 10758, signal 216380/228846 (executing program) 2026/01/14 09:19:08 fetching corpus: 10808, signal 216647/228852 (executing program) 2026/01/14 09:19:09 fetching corpus: 10858, signal 216863/228856 (executing program) 2026/01/14 09:19:09 fetching corpus: 10908, signal 217067/228856 (executing program) 2026/01/14 09:19:09 fetching corpus: 10957, signal 217272/228856 (executing program) 2026/01/14 09:19:09 fetching corpus: 11005, signal 217577/228856 (executing program) 2026/01/14 09:19:09 fetching corpus: 11054, signal 217835/228859 (executing program) 2026/01/14 09:19:09 fetching corpus: 11104, signal 218016/228876 (executing program) 2026/01/14 09:19:09 fetching corpus: 11154, signal 218234/228876 (executing program) 2026/01/14 09:19:09 fetching corpus: 11203, signal 218489/228915 (executing program) 2026/01/14 09:19:09 fetching corpus: 11253, signal 218836/228915 (executing program) 2026/01/14 09:19:09 fetching corpus: 11302, signal 219001/228917 (executing program) 2026/01/14 09:19:10 fetching corpus: 11352, signal 219336/228917 (executing program) 2026/01/14 09:19:10 fetching corpus: 11402, signal 219561/228917 (executing program) 2026/01/14 09:19:10 fetching corpus: 11452, signal 219770/228917 (executing program) 2026/01/14 09:19:10 fetching corpus: 11501, signal 220033/228917 (executing program) 2026/01/14 09:19:10 fetching corpus: 11551, signal 220645/228918 (executing program) 2026/01/14 09:19:10 fetching corpus: 11599, signal 220870/228920 (executing program) 2026/01/14 09:19:10 fetching corpus: 11648, signal 221121/228920 (executing program) 2026/01/14 09:19:10 fetching corpus: 11696, signal 221287/228921 (executing program) 2026/01/14 09:19:10 fetching corpus: 11746, signal 221454/228921 (executing program) 2026/01/14 09:19:10 fetching corpus: 11795, signal 221667/228949 (executing program) 2026/01/14 09:19:10 fetching corpus: 11845, signal 221882/228954 (executing program) 2026/01/14 09:19:11 fetching corpus: 11895, signal 222169/228954 (executing program) 2026/01/14 09:19:11 fetching corpus: 11944, signal 222357/228954 (executing program) 2026/01/14 09:19:11 fetching corpus: 11993, signal 222527/228954 (executing program) 2026/01/14 09:19:11 fetching corpus: 12042, signal 222737/228954 (executing program) 2026/01/14 09:19:11 fetching corpus: 12091, signal 222910/228954 (executing program) 2026/01/14 09:19:11 fetching corpus: 12141, signal 223179/228954 (executing program) 2026/01/14 09:19:11 fetching corpus: 12190, signal 223389/228954 (executing program) 2026/01/14 09:19:11 fetching corpus: 12240, signal 223565/228954 (executing program) 2026/01/14 09:19:11 fetching corpus: 12290, signal 223755/228955 (executing program) 2026/01/14 09:19:12 fetching corpus: 12338, signal 223966/228955 (executing program) 2026/01/14 09:19:12 fetching corpus: 12388, signal 224161/228955 (executing program) 2026/01/14 09:19:12 fetching corpus: 12438, signal 224330/228956 (executing program) 2026/01/14 09:19:12 fetching corpus: 12487, signal 224574/228967 (executing program) 2026/01/14 09:19:12 fetching corpus: 12537, signal 224809/228968 (executing program) 2026/01/14 09:19:12 fetching corpus: 12586, signal 225019/228970 (executing program) 2026/01/14 09:19:12 fetching corpus: 12636, signal 225261/228970 (executing program) 2026/01/14 09:19:12 fetching corpus: 12683, signal 225664/228970 (executing program) 2026/01/14 09:19:12 fetching corpus: 12732, signal 225827/228970 (executing program) 2026/01/14 09:19:12 fetching corpus: 12782, signal 225981/228970 (executing program) 2026/01/14 09:19:13 fetching corpus: 12832, signal 226191/228980 (executing program) 2026/01/14 09:19:13 fetching corpus: 12881, signal 226345/228980 (executing program) 2026/01/14 09:19:13 fetching corpus: 12930, signal 226524/228980 (executing program) 2026/01/14 09:19:13 fetching corpus: 12979, signal 226697/228980 (executing program) 2026/01/14 09:19:13 fetching corpus: 13028, signal 226974/228980 (executing program) 2026/01/14 09:19:13 fetching corpus: 13078, signal 227325/228980 (executing program) 2026/01/14 09:19:13 fetching corpus: 13128, signal 227487/228980 (executing program) 2026/01/14 09:19:13 fetching corpus: 13129, signal 227490/228980 (executing program) 2026/01/14 09:19:13 fetching corpus: 13129, signal 227490/228980 (executing program) 2026/01/14 09:19:15 starting 8 fuzzer processes 09:19:15 executing program 2: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x1, 0xfa, 0x41b}}}, 0x7) 09:19:15 executing program 3: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) 09:19:15 executing program 0: syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) 09:19:15 executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x97, 0xff, 0x82, 0x8, 0x2058, 0x1005, 0xc19b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0xbf, 0x57, 0x5a}}]}}]}}, 0x0) [ 87.091303] audit: type=1400 audit(1768382355.728:7): avc: denied { execmem } for pid=274 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 09:19:15 executing program 7: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224000100000000090400000903000000092100000001222200090581030800000000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') 09:19:15 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') 09:19:15 executing program 5: r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') 09:19:15 executing program 6: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x63}) [ 88.276700] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 88.284202] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 88.285873] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 88.297786] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.302638] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.345327] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 88.353756] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 88.355494] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 88.369838] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 88.372761] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.404307] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 88.412646] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 88.414017] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 88.419603] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 88.422010] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.448309] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 88.455947] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 88.457641] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 88.489341] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 88.498159] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.540929] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 88.553294] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 88.555320] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 88.566560] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 88.570703] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 88.595768] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 88.597504] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 88.600478] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 88.602876] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 88.609515] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 88.612063] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 88.613329] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 88.617762] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 88.623286] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 88.624941] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 88.629499] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 88.633159] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 88.642862] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 88.647879] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 88.649233] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 90.362578] Bluetooth: hci0: command tx timeout [ 90.425132] Bluetooth: hci1: command tx timeout [ 90.489114] Bluetooth: hci2: command tx timeout [ 90.554288] Bluetooth: hci3: command tx timeout [ 90.617968] Bluetooth: hci4: command tx timeout [ 90.681459] Bluetooth: hci7: command tx timeout [ 90.810085] Bluetooth: hci6: command tx timeout [ 90.874368] Bluetooth: hci5: command tx timeout [ 92.410128] Bluetooth: hci0: command tx timeout [ 92.475162] Bluetooth: hci1: command tx timeout [ 92.538047] Bluetooth: hci2: command tx timeout [ 92.602101] Bluetooth: hci3: command tx timeout [ 92.665800] Bluetooth: hci4: command tx timeout [ 92.731115] Bluetooth: hci7: command tx timeout [ 92.857109] Bluetooth: hci6: command tx timeout [ 92.923051] Bluetooth: hci5: command tx timeout [ 94.457093] Bluetooth: hci0: command tx timeout [ 94.522069] Bluetooth: hci1: command tx timeout [ 94.586131] Bluetooth: hci2: command tx timeout [ 94.650066] Bluetooth: hci3: command tx timeout [ 94.714058] Bluetooth: hci4: command tx timeout [ 94.779124] Bluetooth: hci7: command tx timeout [ 94.906082] Bluetooth: hci6: command tx timeout [ 94.970134] Bluetooth: hci5: command tx timeout [ 96.505329] Bluetooth: hci0: command tx timeout [ 96.569068] Bluetooth: hci1: command tx timeout [ 96.634071] Bluetooth: hci2: command tx timeout [ 96.699062] Bluetooth: hci3: command tx timeout [ 96.762170] Bluetooth: hci4: command tx timeout [ 96.827207] Bluetooth: hci7: command tx timeout [ 96.955115] Bluetooth: hci6: command tx timeout [ 97.017080] Bluetooth: hci5: command tx timeout [ 122.349611] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.350853] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.547751] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.558065] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.008893] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.015392] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.180065] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.180689] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.337592] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.338582] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.522499] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.523459] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.558889] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.559563] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 09:19:52 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f0000000040)="0c6896f7441c1a790e167b1f1c8b287263d9e350aa16ee23e7ac778803496162176bd61cca4b7cb2f1a513c981749b44", 0x30) 09:19:52 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000000780)=[{{&(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000000)={0x2, 0x4e24, @broadcast}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=[@ip_retopts={{0x10}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @local}}}], 0x30}}], 0x2, 0x0) [ 123.684166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.684768] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.690004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.702333] misc raw-gadget: fail, usb_gadget_register_driver returned -16 09:19:52 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xc, &(0x7f0000000000), 0x4) 09:19:52 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000180), 0x4) 09:19:52 executing program 3: r0 = fsopen(&(0x7f0000000100)='cgroup\x00', 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) [ 124.036440] EXT4-fs warning (device sda): verify_group_input:136: Cannot add at group 99 (only 16 groups) 09:19:52 executing program 6: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) r0 = memfd_create(&(0x7f0000000040)='/proc/thread-sehf/a\x9c\xef\xa5\xc4fscreate\x00\xfa}\xfe\x9a!\xb2\xb73h\xd2oR\arV(C\xe7\xbb\xd3\x83\xd4\x9b\xb7\xc8t_P\xf0\xcb\xba_\x82qgk\xcbW\xe7\xcd\x87\xf9\xb2\x89\xb94\x06s\xa1B\x96\xc4\x17\x11\xba\xae\xba/N~%\xaf\xcbw\xa4\xd99\xab9\xb4\x1b2\x1bJ\x86\xb1\xee\x8d;\x12\xd4\x7fT\x06\xaakm^\x85\xd1\xd1\xcd\x98L2\xe3\x14\xb7v\xbb\x94x\x82\xab\xc1dK(\x99\xaf9\xc6\xbe\xcd?\xd6-%\x8b\xbeiSA\xdc\xaa\xec\xban3\xbf\x8ew\xee\x91SB\xb0\xb5\xc4,f\xf0\xca\xb3\xb0\xa5\x02\x1f\xd4\xf8\xe7_A\xf0b\xa4\xec\xe8\xeed\xaf\xdf\xdf-w]_\xe4\xb8\x9850\xcd\x8f*\xb5\x98>Y\xef.5\xfd\xcbC\xf0(=\'\xaa^kD\xf5\x81f\xd8 i\x84\xb2\xc5\x0f\x96\xa5\v\xaf\x18w|J\xdbE\x80\x97\xe9U\xd8\x01[A\xaa\xc1%\xa95^X\xea\x17\x1f&]K\xc4\xe6\x17\x00\x04\xfe\x12o\xf0\xad\xfa\xa8\x81\xdd\xe8\t\xa12P\xfc@\x1a\xea\x92|\x04W\xd6-\xb22S`[oUAY\xa8\x93\xc5H\xbe\xc4\x95\x87\x9b\x05\x80\xfc\xec1\xcd\xe4\x8e\xbf1\xf5\xdb\xd2\x19\xf0 \xbdq{\f\xd3\xc3\x8e\xdb\xdf\x86$\x8a\xf1\t\x8a\xa8}\xf27\x9c6\xe5\x05\xe5\t\xb8xf\xc5\x188>\x0f\x06\x89\x9d\xdcl\xf0{\xa6]=\xe6gK\x01\xbd\xfc}\x83\xfc\xe5\x88\xff&\x158Zt1TdF\x0eQo\x82\x8b\x02\xadn\xad[\x8c\xf0\xb2_\x15\x14\x18\x13\xec\xbd:\x88\a\x8dM\xbf9\xc9\xfc\xcb[(\xb2\xd2\x9c\\<7\xde\x95G\x8f\x13\xd1\x8ev\xb2\x1fmS\xee\xd2\x95\x8a\x00\xee\x13\x85\xb9\xceC\xcd\xcc\x89\xd0\'\xb9YZ4\xeb\xb7\xbeQ\x13\r\x81g-O\xd5 \x83T\xa7F\'\xcd_(\xfd}\x85X\xb3A\xa9\xdcV\xd7\x1e\x98\x8d\x86e5~\x15\xa5\xbf\xdbLK5\xb5-@\x8d\xb7\xea\x18\xb3#\x8d\x96\xbd\x8e% [\x88\xc54\x03\xef\xa3\xb1\x80\xa1\xeb=Z\xf4\bf\x8b!\xf6\xcd\x9b\xf2\xac\x1c\xd8\x05\xa9\x8e\x17s\x13\xb6\x05?\x9f\x02\x8fKe\x9c\'W\xd8Dp\x0f\xbb\x13\x0e\xca\x15\xf9j>\x90%\xa4.\xcb/\xdc-\x18\xa9\x8b!\x92\x82tR6\x91\xda\xe4\xe6\x84\x8c>f\xd4\xcf,\x04H\xfd\xe1\xc4\x10Bn#\x15\x9clm\x86\x87\v\xd1\xd4\xb2c\xf0B\x8f\x0e\t\xe3\xca\x8f@\xbc\x13\x8d)\xd3%\xd1v\xc0\xa5\xf5\x1c\xd9\x10\x9b\x1b\xcc!\xc2\x8f\xb7\xb4\xf4-.\xdc\x99\xa1\x1c\x9c&\xff\x881\x8a\xa9|\x16QYc\xd3\xd4\x95\xd7\xe3\xd7\x9d^\xbc\x8b9S|\xf3\xd6\x93\x96O\xc8\x9b\xc3Lk\xfbg\xb6n\xb5zz\xe8l\xbcg\x850\xc0\x1a\x81@\xf2ED^<5s\x97\xc7}`?O\xe6\n\xe8o\xcb\xcb\aG\x8f\xb7\xc80x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x8b) io_submit(r2, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000000c0)="d3", 0x1}]) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r3) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x80002, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x3, 0x0) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0xa) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r5, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r7) [ 126.664586] loop0: detected capacity change from 0 to 10 09:19:55 executing program 4: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x2000000) link(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file1\x00') close(r0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) 09:19:55 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000400)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0x2, 0x0, 0x0, @loopback}, 0x1c) 09:19:55 executing program 0: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000440008000f801", 0x17}, {&(0x7f0000010500)="53595a4b414c4c45522020080000e780325132510000e780325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100070e770325132510000e770325103000000000041660069006c00650031000f00100000ffffffffffffffffffff0000ffffffff46", 0x81, 0xa00}], 0x0, &(0x7f0000010f00)) getdents(r0, &(0x7f0000000040)=""/95, 0x5f) 09:19:55 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)={0x38, r3, 0x1, 0x0, 0x0, {{0x39}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0xbb8]}}]}]}]}, 0x38}}, 0x0) 09:19:55 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="0d8fbb9dc2850f669541b114ee023e286e456b5d46b3928107ff5dabb2205855628ec5c71c8f82ed775629e1e7ad5c9eebfa38f51b25c6", 0x37}], 0x1) 09:19:55 executing program 5: io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x300, 0x0, 0x0) 09:19:55 executing program 4: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x2000000) link(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file1\x00') close(r0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) 09:19:55 executing program 3: shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) fork() 09:19:55 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SG_IO(r2, 0x2286, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:19:55 executing program 4: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x2000000) link(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file1\x00') close(r0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) 09:19:55 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x8, 0x0, &(0x7f0000000600)) 09:19:55 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="0d8fbb9dc2850f669541b114ee023e286e456b5d46b3928107ff5dabb2205855628ec5c71c8f82ed775629e1e7ad5c9eebfa38f51b25c6", 0x37}], 0x1) 09:19:55 executing program 4: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x2000000) link(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file1\x00') close(r0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) 09:19:55 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000400)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0x2, 0x0, 0x0, @loopback}, 0x1c) 09:19:55 executing program 3: shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) fork() 09:19:55 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SG_IO(r2, 0x2286, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:19:55 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x44000) io_setup(0xfff, &(0x7f0000000040)=0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x8b) io_submit(r2, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000000c0)="d3", 0x1}]) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r3) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x80002, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x3, 0x0) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0xa) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r5, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r7) 09:19:55 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x44000) io_setup(0xfff, &(0x7f0000000040)=0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x8b) io_submit(r2, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000000c0)="d3", 0x1}]) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r3) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x80002, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x3, 0x0) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0xa) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r5, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r7) 09:19:55 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="0d8fbb9dc2850f669541b114ee023e286e456b5d46b3928107ff5dabb2205855628ec5c71c8f82ed775629e1e7ad5c9eebfa38f51b25c6", 0x37}], 0x1) 09:19:55 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SG_IO(r2, 0x2286, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:19:55 executing program 4: ioprio_get$pid(0x1, 0xffffffffffffffff) 09:19:55 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_score_adj\x00') write$tcp_mem(r0, 0x0, 0x0) 09:19:55 executing program 4: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x2c, r0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8}]}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x2c}}, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 09:19:55 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SG_IO(r2, 0x2286, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:19:55 executing program 3: shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) fork() 09:19:55 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SG_IO(r2, 0x2286, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 127.328765] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.329700] misc raw-gadget: fail, usb_gadget_register_driver returned -16 09:19:56 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCXONC(r0, 0x540f, 0xf0ff1f00000000) 09:19:56 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x44000) io_setup(0xfff, &(0x7f0000000040)=0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x8b) io_submit(r2, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000000c0)="d3", 0x1}]) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r3) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x80002, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x3, 0x0) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0xa) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r5, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r7) [ 127.846186] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.847211] misc raw-gadget: fail, usb_gadget_register_driver returned -16 09:19:56 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="0d8fbb9dc2850f669541b114ee023e286e456b5d46b3928107ff5dabb2205855628ec5c71c8f82ed775629e1e7ad5c9eebfa38f51b25c6", 0x37}], 0x1) 09:19:56 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SG_IO(r2, 0x2286, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:19:56 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SG_IO(r2, 0x2286, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:19:56 executing program 3: shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) fork() 09:19:56 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000000)='\x02\xce\x16Td\xa8\x98\x86\xb1:\x8f\xc5\x88{\xbd\xb4\xc2\xb1\x9b\x84\x97R\xcc\xdb<\x01\xfa\x91\x85\xa0\x81\xa9F0!/\x89\xacX\xbd\xcd\x10R|lTn\xac-\xfd\x8b\n\x1a\xbc\xf0^B6\xb6`[/\x95\x17\xdaYz\xd6\xc7\xbc!\xe5\x89\xc8^\x06np\xc6\xe7\x1d\xe4\x00\xcaa}\x1c\x12\xf9M\x11\xffA\xcb\x85\xdb?^\x8f\f\nD\xf2\x1f\x11\xaa\x90>N\xb7\x86\x15\x03=\xcc\xbe\x0f\x0f\x14\x84\xde:;\x0f\xb5\xf1\x86\xf2{yt\xa2\xe9\x01\x00\x00\x00\x8e:^v\xc9\x8d\xd7E\xb4\vw\xbe\\\x11J\xf4\xae\xc6\x88F\x9c\xaflM\x1dS\x04\x00H\xd6\x8d\xa6\xbd\x96\xe4SR\xe6\x118L*\x9b\xb2\tbg\xad\x0fGO\xa5M\x80-Y\xc6\x1f%\xb8i|\x86\xa9Zm+\x9fe~\x8a\xe7\xca\f\xad?\xa0t\x13_Rq\x1f\xc6\xd9\x1d#\x8a8q\x1e#c\x8c\x193\xab\xdbE\xe1\xc8d=\xe5\r\xe5#\xa2v\x1ey\xf0\xe3\x1c*h\xdbq\x92\xed\xd35\x1d~\xd1\xe9_\x01\x93\xa5\x9d8A\xf8a6\x99\x02\xc9}\x14\xfb\x03\xce\xb34\x95/\x18\xacJs0\x9f\x9b>\xae\a2\x01\xa7\x95\xbd\xf2\x99w\x11G\x1c\xd2\xbc\xf0E\x86\xca\x87\xefv\x8e\xad\xb8\xc7u\xc2z\x85\xc1\xd5R\x82\v\x1b\xea\x8f\x8d\xc1\x02\x8a$\xd1T\xce\xa6^F\vJLx\xdc\xc8\b\xb7\xa1j2l\x8fQ\xc1\x89\xb8\xbef\xc6\x90\r\xae\xd4u\x8f\x7f\xe2[\x1cs\xab&\xa3\x81B<\xc5]n\xfc\x1a\x19\xdf\xc5\xe0O\x8b3\x84?x\xacP\xfb\xb5z\x87\xc0\xa4\x99\xf5\x8fyP\xd5\x8b\x80D\xe1\x979\x06^\xa1\xe0\x11\xb8\xc7:R4\x9c\xad\xac\xed\xa9\x00\x00\x00\x00\x00', 0x0) fsetxattr$security_capability(r0, &(0x7f0000000240), &(0x7f0000000200)=@v3={0x3000000, [], 0xee01}, 0x18, 0x0) 09:19:56 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x44000) io_setup(0xfff, &(0x7f0000000040)=0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x8b) io_submit(r2, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000000c0)="d3", 0x1}]) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r3) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x80002, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x3, 0x0) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0xa) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r5, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r7) 09:19:56 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x44000) io_setup(0xfff, &(0x7f0000000040)=0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x8b) io_submit(r2, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000000c0)="d3", 0x1}]) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r3) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x80002, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x3, 0x0) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0xa) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r5, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r7) 09:19:56 executing program 4: syz_mount_image$tmpfs(0x0, &(0x7f0000000d00)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_rdma(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='qrans=rdma,port=0x0000000000004e22,noextend,sq=0x0000000000000003,rq=0']) 09:19:56 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'wlan0\x00', &(0x7f0000000000)=@ethtool_rx_ntuple={0x6, {0x0, @tcp_ip4_spec={@rand_addr, @private}, @esp_ip4_spec={@multicast1, @local}}}}) 09:19:56 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r1) capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000100)) 09:19:56 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @empty}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108) 09:19:56 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f0000000140)=0xedee, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x2c, &(0x7f0000000040)={0x0, 0x0}, 0x10) 09:19:56 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = pidfd_open(r0, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x80087601, &(0x7f0000000080)) 09:19:56 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)={0x24, 0x18, 0x1, 0x0, 0x0, "", [@nested={0x2, 0x0, 0x0, 0x1, [@typed={0x0, 0x0, 0x0, 0x0, @fd}, @typed={0x8, 0x7, 0x0, 0x0, @fd}]}]}, 0x24}], 0x1}, 0x0) 09:19:56 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) inotify_init1(0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f00000000c0)) clone3(0x0, 0x0) [ 128.052153] capability: warning: `syz-executor.3' uses deprecated v2 capabilities in a way that may be insecure 09:19:56 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 09:19:56 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)={0x24, 0x18, 0x1, 0x0, 0x0, "", [@nested={0x2, 0x0, 0x0, 0x1, [@typed={0x0, 0x0, 0x0, 0x0, @fd}, @typed={0x8, 0x7, 0x0, 0x0, @fd}]}]}, 0x24}], 0x1}, 0x0) 09:19:56 executing program 2: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x40032, 0xffffffffffffffff, 0x0) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000040), 0x0) 09:19:56 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000080)={0x20, 0x5e, 0x1, 0x0, 0x0, "", [@nested={0xc, 0x0, 0x0, 0x1, [@typed={0x5, 0x0, 0x0, 0x0, @binary='\v'}]}, @nested={0x4, 0x1}]}, 0x20}], 0x1}, 0x0) 09:19:56 executing program 3: migrate_pages(0x0, 0x2, &(0x7f0000000000)=0x3, &(0x7f0000000080)=0x10000000010001) 09:19:56 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x2}, 0x401, 0x0, 0x0, 0x0, 0x10001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) poll(0x0, 0x0, 0x63) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x84000) ioctl$FS_IOC_FSGETXATTR(r4, 0x801c581f, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r5, 0x0, 0xa0103) syz_open_dev$vcsa(&(0x7f0000000140), 0xffffffff, 0x101000) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(r2, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="02002cbd7000fddbdf25690000000a000600ffffffffffff00000a000600ffffffffffff00000600d400080000000a000600080211000001000008021100000000000500d2000300000000000000526080b4562b9ba4426fac68af19d8e3171f9b20424ccded7ba9e87b0f7e1f570b336162312c21d9a3b10afbc76ac30c4480a716a9f9c81393b25f3b3cc005f5bd3d3294db031ad9d290206cd0dd5b0bc125319b01e66fb915b4718fc3ddc98e09be5f2dd541c1a78d2403a02bcc43424b83ea4cfac2ac99877eef903bdd3c6514415159ec284660d61514b8df95c398adcd0a1d3782e0bb03924b30346abce6d193b36817e560efde0d9f"], 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x20008840) sendfile(0xffffffffffffffff, r6, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) 09:19:56 executing program 3: migrate_pages(0x0, 0x2, &(0x7f0000000000)=0x3, &(0x7f0000000080)=0x10000000010001) 09:19:57 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x44000) io_setup(0xfff, &(0x7f0000000040)=0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x8b) io_submit(r2, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000000c0)="d3", 0x1}]) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r3) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x80002, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x3, 0x0) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0xa) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r5, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r7) 09:19:57 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) inotify_init1(0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f00000000c0)) clone3(0x0, 0x0) 09:19:57 executing program 7: nanosleep(&(0x7f0000000240), 0x0) 09:19:57 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)={0x24, 0x18, 0x1, 0x0, 0x0, "", [@nested={0x2, 0x0, 0x0, 0x1, [@typed={0x0, 0x0, 0x0, 0x0, @fd}, @typed={0x8, 0x7, 0x0, 0x0, @fd}]}]}, 0x24}], 0x1}, 0x0) 09:19:57 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ADD_TX_TS(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x1c, r0, 0x1, 0x0, 0x0, {{0x12}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 09:19:57 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x401) semtimedop(0xffffffffffffffff, &(0x7f0000000280)=[{0x4, 0x4}], 0x1, 0x0) write$evdev(r0, &(0x7f00000000c0)=[{{0x77359400}}], 0xff2f) 09:19:57 executing program 3: migrate_pages(0x0, 0x2, &(0x7f0000000000)=0x3, &(0x7f0000000080)=0x10000000010001) [ 128.570974] [ 128.571202] ===================================== [ 128.571652] WARNING: bad unlock balance detected! [ 128.572026] 6.19.0-rc5-next-20260114 #1 Not tainted [ 128.572478] ------------------------------------- [ 128.572827] syz-executor.3/4109 is trying to release lock (rcu_read_lock) at: [ 128.573363] [] __wait_on_freeing_inode+0x105/0x350 [ 128.574163] but there are no more locks to release! [ 128.575304] [ 128.575304] other info that might help us debug this: [ 128.576824] 4 locks held by syz-executor.3/4109: [ 128.577861] #0: ffff88800f5c23f8 (sb_writers#3){.+.+}-{0:0}, at: filename_create+0xf7/0x400 [ 128.580140] #1: ffff888049e616f0 (&type->i_mutex_dir_key#3/1){+.+.}-{4:4}, at: filename_create+0x1b1/0x400 [ 128.582259] #2: ffff88800f5c6950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xe32/0x12d0 [ 128.583437] #3: ffffffff85c16898 (inode_hash_lock){+.+.}-{3:3}, at: insert_inode_locked+0xf9/0x890 [ 128.584189] [ 128.584189] stack backtrace: [ 128.584551] CPU: 1 UID: 0 PID: 4109 Comm: syz-executor.3 Not tainted 6.19.0-rc5-next-20260114 #1 PREEMPT(lazy) [ 128.584566] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 128.584573] Call Trace: [ 128.584577] [ 128.584582] dump_stack_lvl+0xca/0x120 [ 128.584610] ? __wait_on_freeing_inode+0x105/0x350 [ 128.584624] print_unlock_imbalance_bug+0x118/0x130 [ 128.584639] ? __wait_on_freeing_inode+0x105/0x350 [ 128.584654] lock_release+0x1ee/0x270 [ 128.584669] __wait_on_freeing_inode+0x10a/0x350 [ 128.584684] ? __pfx___wait_on_freeing_inode+0x10/0x10 [ 128.584699] ? __pfx_var_wake_function+0x10/0x10 [ 128.584719] ? lock_is_held_type+0x9e/0x120 [ 128.584739] insert_inode_locked+0x25f/0x890 [ 128.584756] __ext4_new_inode+0x223d/0x4cd0 [ 128.584773] ? __pfx___ext4_new_inode+0x10/0x10 [ 128.584787] ? __pfx___dquot_initialize+0x10/0x10 [ 128.584806] ? __pfx_avc_has_perm+0x10/0x10 [ 128.584822] ext4_symlink+0x623/0xb40 [ 128.584841] ? __pfx_ext4_symlink+0x10/0x10 [ 128.584857] ? security_inode_permission+0x72/0xe0 [ 128.584870] vfs_symlink+0x44b/0x840 [ 128.584886] do_symlinkat+0x153/0x440 [ 128.584900] ? __pfx_do_symlinkat+0x10/0x10 [ 128.584913] ? strncpy_from_user+0x21b/0x2f0 [ 128.584930] __x64_sys_symlink+0x79/0xa0 [ 128.584943] do_syscall_64+0xbf/0x420 [ 128.584955] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.584968] RIP: 0033:0x7fc7c6d93427 [ 128.584978] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 58 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 128.584989] RSP: 002b:00007ffe860418d8 EFLAGS: 00000206 ORIG_RAX: 0000000000000058 [ 128.585000] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc7c6d93427 [ 128.585008] RDX: 00007ffe860419b7 RSI: 00007fc7c6dee019 RDI: 00007ffe860419a0 [ 128.585015] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007ffe86041770 [ 128.585031] R10: 00007ffe86041627 R11: 0000000000000206 R12: 0000000000000001 [ 128.585039] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffe860419a0 [ 128.585049] [ 128.601304] ------------[ cut here ]------------ [ 128.601691] WARNING: kernel/rcu/tree_plugin.h:443 at __rcu_read_unlock+0x25f/0x5c0, CPU#1: syz-executor.3/4109 [ 128.603377] Modules linked in: [ 128.603680] CPU: 1 UID: 0 PID: 4109 Comm: syz-executor.3 Not tainted 6.19.0-rc5-next-20260114 #1 PREEMPT(lazy) [ 128.604539] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 128.605241] RIP: 0010:__rcu_read_unlock+0x25f/0x5c0 [ 128.605678] Code: f2 02 00 00 c7 43 58 01 00 00 00 bf 09 00 00 00 e8 16 c0 de ff 4d 85 f6 0f 84 73 fe ff ff e8 38 8a 20 00 fb e9 68 fe ff ff 90 <0f> 0b 90 5b 5d 41 5c 41 5d 41 5e e9 81 24 74 03 e8 bc 5c 56 00 e9 [ 128.607075] RSP: 0018:ffff8880493cf9a0 EFLAGS: 00010286 [ 128.607470] RAX: 00000000ffffffff RBX: ffff888049693700 RCX: ffffffff81565a27 [ 128.607991] RDX: 0000000000000000 RSI: ffffffff81565a30 RDI: ffff888049693afc [ 128.608554] RBP: ffff888049693700 R08: 0000000000000000 R09: fffffbfff0ba6ffc [ 128.609125] R10: 0000000000000000 R11: 0000000000000001 R12: ffff888049693700 [ 128.609647] R13: 0000000000000001 R14: ffffffff85c0ecd0 R15: ffff888049e54f58 [ 128.610211] FS: 000055556b5cd400(0000) GS:ffff8880e5443000(0000) knlGS:0000000000000000 [ 128.610808] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 128.611315] CR2: 00007fc7c6e13543 CR3: 000000001d547000 CR4: 0000000000350ef0 [ 128.611882] Call Trace: [ 128.612165] [ 128.612801] __wait_on_freeing_inode+0x10f/0x350 [ 128.613508] ? __pfx___wait_on_freeing_inode+0x10/0x10 [ 128.614577] ? __pfx_var_wake_function+0x10/0x10 [ 128.615796] ? lock_is_held_type+0x9e/0x120 [ 128.616969] insert_inode_locked+0x25f/0x890 [ 128.618608] __ext4_new_inode+0x223d/0x4cd0 [ 128.621073] ? __pfx___ext4_new_inode+0x10/0x10 [ 128.622273] ? __pfx___dquot_initialize+0x10/0x10 [ 128.622995] ? __pfx_avc_has_perm+0x10/0x10 [ 128.624757] ext4_symlink+0x623/0xb40 [ 128.626968] ? __pfx_ext4_symlink+0x10/0x10 [ 128.627965] ? security_inode_permission+0x72/0xe0 [ 128.629588] vfs_symlink+0x44b/0x840 [ 128.630845] do_symlinkat+0x153/0x440 [ 128.631923] ? __pfx_do_symlinkat+0x10/0x10 [ 128.632643] ? strncpy_from_user+0x21b/0x2f0 [ 128.634504] __x64_sys_symlink+0x79/0xa0 [ 128.635239] do_syscall_64+0xbf/0x420 [ 128.635999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.636543] RIP: 0033:0x7fc7c6d93427 [ 128.636903] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 58 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 128.638378] RSP: 002b:00007ffe860418d8 EFLAGS: 00000206 ORIG_RAX: 0000000000000058 [ 128.638974] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc7c6d93427 [ 128.639576] RDX: 00007ffe860419b7 RSI: 00007fc7c6dee019 RDI: 00007ffe860419a0 [ 128.640177] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007ffe86041770 [ 128.640744] R10: 00007ffe86041627 R11: 0000000000000206 R12: 0000000000000001 [ 128.641402] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffe860419a0 [ 128.643943] [ 128.644178] irq event stamp: 179 [ 128.644447] hardirqs last enabled at (179): [] _raw_spin_unlock_irqrestore+0x2c/0x50 [ 128.645296] hardirqs last disabled at (178): [] _raw_spin_lock_irqsave+0x53/0x60 [ 128.646102] softirqs last enabled at (174): [] kernel_fpu_end+0x59/0x70 [ 128.646812] softirqs last disabled at (172): [] kernel_fpu_begin_mask+0x1bb/0x300 [ 128.647663] ---[ end trace 0000000000000000 ]--- 09:19:57 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x2}, 0x401, 0x0, 0x0, 0x0, 0x10001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) poll(0x0, 0x0, 0x63) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x84000) ioctl$FS_IOC_FSGETXATTR(r4, 0x801c581f, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r5, 0x0, 0xa0103) syz_open_dev$vcsa(&(0x7f0000000140), 0xffffffff, 0x101000) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(r2, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="02002cbd7000fddbdf25690000000a000600ffffffffffff00000a000600ffffffffffff00000600d400080000000a000600080211000001000008021100000000000500d2000300000000000000526080b4562b9ba4426fac68af19d8e3171f9b20424ccded7ba9e87b0f7e1f570b336162312c21d9a3b10afbc76ac30c4480a716a9f9c81393b25f3b3cc005f5bd3d3294db031ad9d290206cd0dd5b0bc125319b01e66fb915b4718fc3ddc98e09be5f2dd541c1a78d2403a02bcc43424b83ea4cfac2ac99877eef903bdd3c6514415159ec284660d61514b8df95c398adcd0a1d3782e0bb03924b30346abce6d193b36817e560efde0d9f"], 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x20008840) sendfile(0xffffffffffffffff, r6, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) 09:19:57 executing program 7: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x2}, 0x401, 0x0, 0x0, 0x0, 0x10001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) poll(0x0, 0x0, 0x63) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x84000) ioctl$FS_IOC_FSGETXATTR(r4, 0x801c581f, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r5, 0x0, 0xa0103) syz_open_dev$vcsa(&(0x7f0000000140), 0xffffffff, 0x101000) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(r2, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="02002cbd7000fddbdf25690000000a000600ffffffffffff00000a000600ffffffffffff00000600d400080000000a000600080211000001000008021100000000000500d2000300000000000000526080b4562b9ba4426fac68af19d8e3171f9b20424ccded7ba9e87b0f7e1f570b336162312c21d9a3b10afbc76ac30c4480a716a9f9c81393b25f3b3cc005f5bd3d3294db031ad9d290206cd0dd5b0bc125319b01e66fb915b4718fc3ddc98e09be5f2dd541c1a78d2403a02bcc43424b83ea4cfac2ac99877eef903bdd3c6514415159ec284660d61514b8df95c398adcd0a1d3782e0bb03924b30346abce6d193b36817e560efde0d9f"], 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x20008840) sendfile(0xffffffffffffffff, r6, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) 09:19:57 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)={0x24, 0x18, 0x1, 0x0, 0x0, "", [@nested={0x2, 0x0, 0x0, 0x1, [@typed={0x0, 0x0, 0x0, 0x0, @fd}, @typed={0x8, 0x7, 0x0, 0x0, @fd}]}]}, 0x24}], 0x1}, 0x0) 09:19:57 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) 09:19:57 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000200)='N', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000009, 0xc812, r2, 0x0) 09:19:57 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) inotify_init1(0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f00000000c0)) clone3(0x0, 0x0) 09:19:57 executing program 3: migrate_pages(0x0, 0x2, &(0x7f0000000000)=0x3, &(0x7f0000000080)=0x10000000010001) 09:19:57 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) inotify_init1(0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f00000000c0)) clone3(0x0, 0x0) 09:19:57 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) read$rfkill(r0, 0x0, 0x0) 09:19:57 executing program 7: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x2}, 0x401, 0x0, 0x0, 0x0, 0x10001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) poll(0x0, 0x0, 0x63) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x84000) ioctl$FS_IOC_FSGETXATTR(r4, 0x801c581f, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r5, 0x0, 0xa0103) syz_open_dev$vcsa(&(0x7f0000000140), 0xffffffff, 0x101000) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(r2, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="02002cbd7000fddbdf25690000000a000600ffffffffffff00000a000600ffffffffffff00000600d400080000000a000600080211000001000008021100000000000500d2000300000000000000526080b4562b9ba4426fac68af19d8e3171f9b20424ccded7ba9e87b0f7e1f570b336162312c21d9a3b10afbc76ac30c4480a716a9f9c81393b25f3b3cc005f5bd3d3294db031ad9d290206cd0dd5b0bc125319b01e66fb915b4718fc3ddc98e09be5f2dd541c1a78d2403a02bcc43424b83ea4cfac2ac99877eef903bdd3c6514415159ec284660d61514b8df95c398adcd0a1d3782e0bb03924b30346abce6d193b36817e560efde0d9f"], 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x20008840) sendfile(0xffffffffffffffff, r6, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) 09:19:57 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x2}, 0x401, 0x0, 0x0, 0x0, 0x10001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) poll(0x0, 0x0, 0x63) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x84000) ioctl$FS_IOC_FSGETXATTR(r4, 0x801c581f, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r5, 0x0, 0xa0103) syz_open_dev$vcsa(&(0x7f0000000140), 0xffffffff, 0x101000) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(r2, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="02002cbd7000fddbdf25690000000a000600ffffffffffff00000a000600ffffffffffff00000600d400080000000a000600080211000001000008021100000000000500d2000300000000000000526080b4562b9ba4426fac68af19d8e3171f9b20424ccded7ba9e87b0f7e1f570b336162312c21d9a3b10afbc76ac30c4480a716a9f9c81393b25f3b3cc005f5bd3d3294db031ad9d290206cd0dd5b0bc125319b01e66fb915b4718fc3ddc98e09be5f2dd541c1a78d2403a02bcc43424b83ea4cfac2ac99877eef903bdd3c6514415159ec284660d61514b8df95c398adcd0a1d3782e0bb03924b30346abce6d193b36817e560efde0d9f"], 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x20008840) sendfile(0xffffffffffffffff, r6, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) 09:19:57 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000200)='N', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000009, 0xc812, r2, 0x0) 09:19:57 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) 09:19:57 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) 09:19:57 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8937, &(0x7f0000006f00)={'wpan1\x00'}) 09:19:57 executing program 1: arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x1) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e1f0e09"], 0x22) 09:19:57 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg(r0, &(0x7f0000000540)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000080)="f9de6c8a", 0x4}], 0x1}, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f00000000c0)) [ 129.095121] Bluetooth: hci3: unexpected subevent 0x0e length: 30 > 15 [ 129.095677] Bluetooth: hci3: Unable to find connection for dst 00:00:00:00:00:00 sid 0x00 09:19:57 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) 09:19:57 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000200)='N', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000009, 0xc812, r2, 0x0) 09:19:57 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shutdown(r0, 0x0) 09:19:57 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg(r0, &(0x7f0000000540)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000080)="f9de6c8a", 0x4}], 0x1}, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f00000000c0)) 09:19:57 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_int(r0, 0x1, 0x3e, 0x0, &(0x7f0000000080)) 09:19:57 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg(r0, &(0x7f0000000540)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000080)="f9de6c8a", 0x4}], 0x1}, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f00000000c0)) 09:19:57 executing program 1: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x4840, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa012, r0, 0x0) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2) 09:19:57 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) [ 129.241171] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 129.243858] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 129.249105] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 129.249780] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00 [ 129.250706] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 2 [ 129.252342] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 129.252781] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 129.253924] Buffer I/O error on dev sr0, logical block 0, async page read [ 129.254825] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 129.255419] I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 129.256308] Buffer I/O error on dev sr0, logical block 1, async page read [ 129.261231] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 129.261689] I/O error, dev sr0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 129.264143] Buffer I/O error on dev sr0, logical block 2, async page read [ 129.264742] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 129.267133] I/O error, dev sr0, sector 3 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 129.267917] Buffer I/O error on dev sr0, logical block 3, async page read [ 129.273573] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 129.274557] I/O error, dev sr0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 129.276074] Buffer I/O error on dev sr0, logical block 4, async page read [ 129.276774] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 129.277904] I/O error, dev sr0, sector 5 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 129.278766] Buffer I/O error on dev sr0, logical block 5, async page read [ 129.279515] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 129.280011] I/O error, dev sr0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 129.282448] Buffer I/O error on dev sr0, logical block 6, async page read [ 129.286488] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 129.286937] I/O error, dev sr0, sector 7 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 129.288341] Buffer I/O error on dev sr0, logical block 7, async page read [ 129.332518] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 129.333493] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 129.334313] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 129.334830] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 02 00 [ 129.335656] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 8 prio class 2 [ 129.336499] Buffer I/O error on dev sr0, logical block 0, async page read [ 129.337221] Buffer I/O error on dev sr0, logical block 1, async page read 09:19:58 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg(r0, &(0x7f0000000540)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000080)="f9de6c8a", 0x4}], 0x1}, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f00000000c0)) 09:19:58 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) 09:19:58 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000200)='N', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000009, 0xc812, r2, 0x0) 09:19:58 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shutdown(r0, 0x0) 09:19:58 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) 09:19:58 executing program 1: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x4840, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa012, r0, 0x0) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2) 09:19:58 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x2}, 0x401, 0x0, 0x0, 0x0, 0x10001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) poll(0x0, 0x0, 0x63) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x84000) ioctl$FS_IOC_FSGETXATTR(r4, 0x801c581f, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r5, 0x0, 0xa0103) syz_open_dev$vcsa(&(0x7f0000000140), 0xffffffff, 0x101000) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(r2, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="02002cbd7000fddbdf25690000000a000600ffffffffffff00000a000600ffffffffffff00000600d400080000000a000600080211000001000008021100000000000500d2000300000000000000526080b4562b9ba4426fac68af19d8e3171f9b20424ccded7ba9e87b0f7e1f570b336162312c21d9a3b10afbc76ac30c4480a716a9f9c81393b25f3b3cc005f5bd3d3294db031ad9d290206cd0dd5b0bc125319b01e66fb915b4718fc3ddc98e09be5f2dd541c1a78d2403a02bcc43424b83ea4cfac2ac99877eef903bdd3c6514415159ec284660d61514b8df95c398adcd0a1d3782e0bb03924b30346abce6d193b36817e560efde0d9f"], 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x20008840) sendfile(0xffffffffffffffff, r6, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) 09:19:58 executing program 7: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x2}, 0x401, 0x0, 0x0, 0x0, 0x10001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) poll(0x0, 0x0, 0x63) sendfile(r1, r2, 0x0, 0xa0103) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x84000) ioctl$FS_IOC_FSGETXATTR(r4, 0x801c581f, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r5, 0x0, 0xa0103) syz_open_dev$vcsa(&(0x7f0000000140), 0xffffffff, 0x101000) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(r2, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="02002cbd7000fddbdf25690000000a000600ffffffffffff00000a000600ffffffffffff00000600d400080000000a000600080211000001000008021100000000000500d2000300000000000000526080b4562b9ba4426fac68af19d8e3171f9b20424ccded7ba9e87b0f7e1f570b336162312c21d9a3b10afbc76ac30c4480a716a9f9c81393b25f3b3cc005f5bd3d3294db031ad9d290206cd0dd5b0bc125319b01e66fb915b4718fc3ddc98e09be5f2dd541c1a78d2403a02bcc43424b83ea4cfac2ac99877eef903bdd3c6514415159ec284660d61514b8df95c398adcd0a1d3782e0bb03924b30346abce6d193b36817e560efde0d9f"], 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x20008840) sendfile(0xffffffffffffffff, r6, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) 09:19:58 executing program 2: syz_emit_ethernet(0x26, &(0x7f0000000100)={@empty, @local, @void, {@generic={0x4305, "750faa040ad0462d6f3fcfe2923b1e392c24d888ed60fbb1"}}}, 0x0) 09:19:58 executing program 7: creat(&(0x7f0000000080)='./file0\x00', 0x0) link(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file1\x00') 09:19:58 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000000500)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=[@dontfrag={{0x14, 0x29, 0x3e, 0x200}}], 0x18}}], 0x2, 0x0) 09:19:58 executing program 1: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x4840, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa012, r0, 0x0) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2) 09:19:58 executing program 3: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='ramfs\x00', 0x0, 0x0) r0 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0xa40024, &(0x7f0000000040)=ANY=[]) mknodat$loop(r0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) name_to_handle_at(r0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)=@reiserfs_2={0x8}, 0x0, 0x600) 09:19:58 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 09:19:58 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shutdown(r0, 0x0) 09:19:58 executing program 0: setresuid(0x0, 0xee01, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x500}, 0x20) [ 129.880227] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list 09:19:58 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000080)={0x100, 0x4}) 09:19:58 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000000)={0xffffffffffffffff, 0x0, "ce9f2e"}) 09:19:58 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000000500)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=[@dontfrag={{0x14, 0x29, 0x3e, 0x200}}], 0x18}}], 0x2, 0x0) 09:19:58 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DESTROY(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x14, 0x15, 0x1}, 0x14}}, 0x0) 09:19:58 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x9, 0x80}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:19:58 executing program 3: setresuid(0xffffffffffffffff, 0xffffffffffffffff, 0xee00) [ 129.960277] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 129.961348] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 129.961905] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 129.967944] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00 [ 129.969567] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 129.975226] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 129.975705] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 09:19:58 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000000500)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=[@dontfrag={{0x14, 0x29, 0x3e, 0x200}}], 0x18}}], 0x2, 0x0) 09:19:58 executing program 6: quotactl(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) [ 130.004142] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 130.004632] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 130.005145] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 130.005612] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 130.006988] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 09:19:58 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) read$usbmon(r0, &(0x7f0000000440)=""/150, 0x96) 09:19:58 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shutdown(r0, 0x0) 09:19:58 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000000)={0xffffffffffffffff, 0x0, "ce9f2e"}) 09:19:58 executing program 1: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x4840, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa012, r0, 0x0) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2) 09:19:58 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f00000009c0)={0x0, 0x0, 0xffff, 0x136, 0x0, "713b141fca1ada6183a4b89ce26d12fb9806fe"}) 09:19:58 executing program 6: perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x14f804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/1, 0x0}, 0x58) 09:19:58 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000280)=@req3={0x1000, 0x1, 0x400, 0x4}, 0x1c) sendmsg(r0, &(0x7f0000000240)={&(0x7f0000000180)=@hci={0x1f, 0x0, 0x2}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=[{0x10}], 0xf}, 0x0) [ 130.212502] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 130.213650] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 130.218332] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 130.218879] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00 [ 130.219793] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 130.221159] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 130.221632] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 130.222644] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 130.223177] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 130.223641] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 130.224301] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 130.224764] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 09:19:58 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000080)={0x100, 0x4}) 09:19:58 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000000500)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=[@dontfrag={{0x14, 0x29, 0x3e, 0x200}}], 0x18}}], 0x2, 0x0) 09:19:58 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000000)={0xffffffffffffffff, 0x0, "ce9f2e"}) 09:19:58 executing program 5: syz_usb_connect(0x0, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x110, 0xb9, 0x22, 0x61, 0x0, 0x2019, 0xab33, 0xca65, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0xff, 0xff, 0xff, 0x0, [], [{}, {{0x9, 0x5, 0x80, 0x0, 0x0, 0x0, 0x6}}]}}]}}]}}, &(0x7f0000001140)={0x0, 0x0, 0x5, &(0x7f0000000d00)={0x5, 0xf, 0x5}, 0x2, [{0x0, 0x0}, {0x4, &(0x7f0000000d80)=@lang_id={0x4, 0x3, 0x41f}}]}) 09:19:58 executing program 3: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448d4, &(0x7f0000000040)={0x0, 0x2, "fd00"}) 09:19:58 executing program 6: perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x14f804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/1, 0x0}, 0x58) 09:19:58 executing program 0: rt_sigaction(0x17, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000040)) [ 130.343154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.343955] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.860492] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.861343] misc raw-gadget: fail, usb_gadget_register_driver returned -16 09:19:59 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000000)={0xffffffffffffffff, 0x0, "ce9f2e"}) 09:19:59 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = timerfd_create(0x0, 0x0) timerfd_gettime(r0, &(0x7f00000000c0)) 09:19:59 executing program 1: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x42881, 0x0) fcntl$setstatus(r0, 0x4, 0x6c00) write(r0, &(0x7f0000000680)="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", 0x200) 09:19:59 executing program 3: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448d4, &(0x7f0000000040)={0x0, 0x2, "fd00"}) 09:19:59 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000080)={0x100, 0x4}) 09:19:59 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x80080, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x44000) io_setup(0xfff, &(0x7f0000000040)) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x8b) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg(r1, &(0x7f0000000540)={&(0x7f0000000000)=@in6={0xa, 0x3a, 0x0, @empty}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000080)="ee72af93", 0x4}], 0x1}, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x4040, 0x99) io_submit(0x0, 0x2000000000000193, &(0x7f0000000240)) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r2) 09:19:59 executing program 6: perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x14f804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/1, 0x0}, 0x58) [ 130.939803] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 09:19:59 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = timerfd_create(0x0, 0x0) timerfd_gettime(r0, &(0x7f00000000c0)) 09:19:59 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000080)) preadv2(r0, &(0x7f0000001800)=[{&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000001680)=""/5, 0x5}, {&(0x7f00000016c0)=""/178, 0xb2}, {&(0x7f0000001780)=""/118, 0x76}], 0x4, 0xffffffff, 0xfffffffb, 0x4) 09:19:59 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000080)={0x100, 0x4}) 09:19:59 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0xff}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x3f, 0x6, 0x1, 0x9, 0x0, 0x1f, 0x20ca, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000100), 0x5}, 0xc048, 0x100, 0xffff8001, 0x5, 0x1fffffffffffe, 0x9, 0x101, 0x0, 0x6, 0x0, 0xc000000000000}, 0x0, 0x4, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0xe7, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000002180)={@in6={{0xa, 0x0, 0x0, @loopback, 0x4}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) bind$inet6(r0, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003040)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="db4d31d6805ecdac87307b14c169d9d9", 0x7ffff000}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000a00)='m', 0x1}], 0x1}}], 0x3, 0x44894) shutdown(0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x8) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e24, 0x400, @private0={0xfc, 0x0, '\x00', 0x41}, 0x3b}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003040), 0x3, 0x4c890) connect$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e23, 0x5, @remote, 0x8}, 0x1c) shutdown(r0, 0x1) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e1f, 0x20, @rand_addr=' \x01\x00', 0x15aa}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 09:19:59 executing program 3: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448d4, &(0x7f0000000040)={0x0, 0x2, "fd00"}) [ 131.036568] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 09:19:59 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = timerfd_create(0x0, 0x0) timerfd_gettime(r0, &(0x7f00000000c0)) 09:19:59 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x2201, &(0x7f0000000140)=0xffffabcb) 09:19:59 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x80080, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x44000) io_setup(0xfff, &(0x7f0000000040)) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x8b) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg(r1, &(0x7f0000000540)={&(0x7f0000000000)=@in6={0xa, 0x3a, 0x0, @empty}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000080)="ee72af93", 0x4}], 0x1}, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x4040, 0x99) io_submit(0x0, 0x2000000000000193, &(0x7f0000000240)) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r2) 09:19:59 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f0000000000)='msdos\x00', 0x0) fadvise64(r0, 0x0, 0x0, 0x0) 09:19:59 executing program 6: perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x14f804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/1, 0x0}, 0x58) 09:19:59 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) futex(&(0x7f0000000000), 0x1, 0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(0xffffffffffffffff, 0x40309439, 0x0) 09:19:59 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x18, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[0xffffffffffffffff]}, 0x1) 09:19:59 executing program 3: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448d4, &(0x7f0000000040)={0x0, 0x2, "fd00"}) 09:19:59 executing program 7: io_setup(0xfff, &(0x7f0000000040)=0x0) r1 = socket$unix(0x1, 0x5, 0x0) io_submit(r0, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x8, 0x8, 0x0, r1, 0x0}]) 09:19:59 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x80080, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x44000) io_setup(0xfff, &(0x7f0000000040)) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x8b) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg(r1, &(0x7f0000000540)={&(0x7f0000000000)=@in6={0xa, 0x3a, 0x0, @empty}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000080)="ee72af93", 0x4}], 0x1}, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x4040, 0x99) io_submit(0x0, 0x2000000000000193, &(0x7f0000000240)) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r2) 09:19:59 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = timerfd_create(0x0, 0x0) timerfd_gettime(r0, &(0x7f00000000c0)) 09:19:59 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg(r0, &(0x7f0000001b40)=[{{&(0x7f0000001bc0)=@l2tp6={0xa, 0x0, 0x0, @empty, 0x8}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000180)="4e3574a5", 0x4}], 0x1}}], 0x1, 0x0) 09:19:59 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$addseals(r0, 0x409, 0x0) 09:19:59 executing program 7: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[], 0x78) splice(r2, 0x0, r0, 0x0, 0x0, 0x0) 09:20:00 executing program 7: syz_emit_ethernet(0x42, &(0x7f00000000c0)={@link_local, @remote, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @source_quench={0xb, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @loopback}}}}}}, 0x0) 09:20:00 executing program 6: move_pages(0x0, 0x0, 0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) mincore(&(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f0000000280)=""/4096) 09:20:00 executing program 3: timer_create(0x9, &(0x7f00000001c0)={0x0, 0x0, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000200)) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000300)={{}, {0x77359400}}, &(0x7f0000000340)) 09:20:00 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 09:20:00 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x80080, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x44000) io_setup(0xfff, &(0x7f0000000040)) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x8b) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg(r1, &(0x7f0000000540)={&(0x7f0000000000)=@in6={0xa, 0x3a, 0x0, @empty}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000080)="ee72af93", 0x4}], 0x1}, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x4040, 0x99) io_submit(0x0, 0x2000000000000193, &(0x7f0000000240)) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r2) 09:20:00 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000140)={{r0}}) 09:20:00 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x18, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[0xffffffffffffffff]}, 0x1) 09:20:00 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000000100)) close(0xffffffffffffffff) creat(0x0, 0x0) 09:20:00 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0xff}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x3f, 0x6, 0x1, 0x9, 0x0, 0x1f, 0x20ca, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000100), 0x5}, 0xc048, 0x100, 0xffff8001, 0x5, 0x1fffffffffffe, 0x9, 0x101, 0x0, 0x6, 0x0, 0xc000000000000}, 0x0, 0x4, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0xe7, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000002180)={@in6={{0xa, 0x0, 0x0, @loopback, 0x4}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) bind$inet6(r0, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003040)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="db4d31d6805ecdac87307b14c169d9d9", 0x7ffff000}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000a00)='m', 0x1}], 0x1}}], 0x3, 0x44894) shutdown(0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x8) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e24, 0x400, @private0={0xfc, 0x0, '\x00', 0x41}, 0x3b}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003040), 0x3, 0x4c890) connect$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e23, 0x5, @remote, 0x8}, 0x1c) shutdown(r0, 0x1) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e1f, 0x20, @rand_addr=' \x01\x00', 0x15aa}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 09:20:00 executing program 6: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0xff}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x3f, 0x6, 0x1, 0x9, 0x0, 0x1f, 0x20ca, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000100), 0x5}, 0xc048, 0x100, 0xffff8001, 0x5, 0x1fffffffffffe, 0x9, 0x101, 0x0, 0x6, 0x0, 0xc000000000000}, 0x0, 0x4, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0xe7, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000002180)={@in6={{0xa, 0x0, 0x0, @loopback, 0x4}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) bind$inet6(r0, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003040)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="db4d31d6805ecdac87307b14c169d9d9", 0x7ffff000}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000a00)='m', 0x1}], 0x1}}], 0x3, 0x44894) shutdown(0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x8) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e24, 0x400, @private0={0xfc, 0x0, '\x00', 0x41}, 0x3b}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003040), 0x3, 0x4c890) connect$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e23, 0x5, @remote, 0x8}, 0x1c) shutdown(r0, 0x1) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e1f, 0x20, @rand_addr=' \x01\x00', 0x15aa}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 09:20:00 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0xff}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x3f, 0x6, 0x1, 0x9, 0x0, 0x1f, 0x20ca, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000100), 0x5}, 0xc048, 0x100, 0xffff8001, 0x5, 0x1fffffffffffe, 0x9, 0x101, 0x0, 0x6, 0x0, 0xc000000000000}, 0x0, 0x4, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0xe7, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000002180)={@in6={{0xa, 0x0, 0x0, @loopback, 0x4}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) bind$inet6(r0, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003040)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="db4d31d6805ecdac87307b14c169d9d9", 0x7ffff000}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000a00)='m', 0x1}], 0x1}}], 0x3, 0x44894) shutdown(0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x8) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e24, 0x400, @private0={0xfc, 0x0, '\x00', 0x41}, 0x3b}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003040), 0x3, 0x4c890) connect$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e23, 0x5, @remote, 0x8}, 0x1c) shutdown(r0, 0x1) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e1f, 0x20, @rand_addr=' \x01\x00', 0x15aa}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 09:20:00 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x18, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[0xffffffffffffffff]}, 0x1) 09:20:00 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0xff}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x3f, 0x6, 0x1, 0x9, 0x0, 0x1f, 0x20ca, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000100), 0x5}, 0xc048, 0x100, 0xffff8001, 0x5, 0x1fffffffffffe, 0x9, 0x101, 0x0, 0x6, 0x0, 0xc000000000000}, 0x0, 0x4, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0xe7, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000002180)={@in6={{0xa, 0x0, 0x0, @loopback, 0x4}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) bind$inet6(r0, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003040)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="db4d31d6805ecdac87307b14c169d9d9", 0x7ffff000}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000a00)='m', 0x1}], 0x1}}], 0x3, 0x44894) shutdown(0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x8) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e24, 0x400, @private0={0xfc, 0x0, '\x00', 0x41}, 0x3b}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003040), 0x3, 0x4c890) connect$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e23, 0x5, @remote, 0x8}, 0x1c) shutdown(r0, 0x1) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e1f, 0x20, @rand_addr=' \x01\x00', 0x15aa}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 09:20:00 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0xff}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x3f, 0x6, 0x1, 0x9, 0x0, 0x1f, 0x20ca, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000100), 0x5}, 0xc048, 0x100, 0xffff8001, 0x5, 0x1fffffffffffe, 0x9, 0x101, 0x0, 0x6, 0x0, 0xc000000000000}, 0x0, 0x4, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0xe7, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000002180)={@in6={{0xa, 0x0, 0x0, @loopback, 0x4}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) bind$inet6(r0, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003040)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="db4d31d6805ecdac87307b14c169d9d9", 0x7ffff000}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000a00)='m', 0x1}], 0x1}}], 0x3, 0x44894) shutdown(0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x8) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e24, 0x400, @private0={0xfc, 0x0, '\x00', 0x41}, 0x3b}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003040), 0x3, 0x4c890) connect$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e23, 0x5, @remote, 0x8}, 0x1c) shutdown(r0, 0x1) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e1f, 0x20, @rand_addr=' \x01\x00', 0x15aa}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 09:20:00 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000000100)) close(0xffffffffffffffff) creat(0x0, 0x0) 09:20:00 executing program 6: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0xff}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x3f, 0x6, 0x1, 0x9, 0x0, 0x1f, 0x20ca, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000100), 0x5}, 0xc048, 0x100, 0xffff8001, 0x5, 0x1fffffffffffe, 0x9, 0x101, 0x0, 0x6, 0x0, 0xc000000000000}, 0x0, 0x4, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0xe7, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000002180)={@in6={{0xa, 0x0, 0x0, @loopback, 0x4}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) bind$inet6(r0, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003040)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="db4d31d6805ecdac87307b14c169d9d9", 0x7ffff000}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000a00)='m', 0x1}], 0x1}}], 0x3, 0x44894) shutdown(0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x8) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e24, 0x400, @private0={0xfc, 0x0, '\x00', 0x41}, 0x3b}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003040), 0x3, 0x4c890) connect$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e23, 0x5, @remote, 0x8}, 0x1c) shutdown(r0, 0x1) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e1f, 0x20, @rand_addr=' \x01\x00', 0x15aa}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 09:20:00 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000000100)) close(0xffffffffffffffff) creat(0x0, 0x0) 09:20:00 executing program 7: syz_emit_ethernet(0x42, &(0x7f00000000c0)={@link_local, @remote, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @source_quench={0xb, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @loopback}}}}}}, 0x0) 09:20:00 executing program 7: syz_emit_ethernet(0x42, &(0x7f00000000c0)={@link_local, @remote, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @source_quench={0xb, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @loopback}}}}}}, 0x0) 09:20:00 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000000100)) close(0xffffffffffffffff) creat(0x0, 0x0) 09:20:00 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x18, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[0xffffffffffffffff]}, 0x1) 09:20:00 executing program 7: syz_emit_ethernet(0x42, &(0x7f00000000c0)={@link_local, @remote, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @source_quench={0xb, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @loopback}}}}}}, 0x0) 09:20:00 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000000100)) close(0xffffffffffffffff) creat(0x0, 0x0) 09:20:00 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000000100)) close(0xffffffffffffffff) creat(0x0, 0x0) 09:20:00 executing program 6: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0xff}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x3f, 0x6, 0x1, 0x9, 0x0, 0x1f, 0x20ca, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000100), 0x5}, 0xc048, 0x100, 0xffff8001, 0x5, 0x1fffffffffffe, 0x9, 0x101, 0x0, 0x6, 0x0, 0xc000000000000}, 0x0, 0x4, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0xe7, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000002180)={@in6={{0xa, 0x0, 0x0, @loopback, 0x4}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) bind$inet6(r0, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003040)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="db4d31d6805ecdac87307b14c169d9d9", 0x7ffff000}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000a00)='m', 0x1}], 0x1}}], 0x3, 0x44894) shutdown(0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x8) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e24, 0x400, @private0={0xfc, 0x0, '\x00', 0x41}, 0x3b}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003040), 0x3, 0x4c890) connect$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e23, 0x5, @remote, 0x8}, 0x1c) shutdown(r0, 0x1) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e1f, 0x20, @rand_addr=' \x01\x00', 0x15aa}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 09:20:00 executing program 7: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000004840)) 09:20:00 executing program 2: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) lseek(r0, 0x20, 0x1) 09:20:00 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0xff}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x3f, 0x6, 0x1, 0x9, 0x0, 0x1f, 0x20ca, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000100), 0x5}, 0xc048, 0x100, 0xffff8001, 0x5, 0x1fffffffffffe, 0x9, 0x101, 0x0, 0x6, 0x0, 0xc000000000000}, 0x0, 0x4, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0xe7, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000002180)={@in6={{0xa, 0x0, 0x0, @loopback, 0x4}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) bind$inet6(r0, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003040)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="db4d31d6805ecdac87307b14c169d9d9", 0x7ffff000}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000a00)='m', 0x1}], 0x1}}], 0x3, 0x44894) shutdown(0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x8) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e24, 0x400, @private0={0xfc, 0x0, '\x00', 0x41}, 0x3b}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003040), 0x3, 0x4c890) connect$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e23, 0x5, @remote, 0x8}, 0x1c) shutdown(r0, 0x1) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e1f, 0x20, @rand_addr=' \x01\x00', 0x15aa}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 09:20:00 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0xff}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x3f, 0x6, 0x1, 0x9, 0x0, 0x1f, 0x20ca, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000100), 0x5}, 0xc048, 0x100, 0xffff8001, 0x5, 0x1fffffffffffe, 0x9, 0x101, 0x0, 0x6, 0x0, 0xc000000000000}, 0x0, 0x4, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0xe7, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000002180)={@in6={{0xa, 0x0, 0x0, @loopback, 0x4}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) bind$inet6(r0, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003040)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="db4d31d6805ecdac87307b14c169d9d9", 0x7ffff000}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000a00)='m', 0x1}], 0x1}}], 0x3, 0x44894) shutdown(0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x8) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e24, 0x400, @private0={0xfc, 0x0, '\x00', 0x41}, 0x3b}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003040), 0x3, 0x4c890) connect$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e23, 0x5, @remote, 0x8}, 0x1c) shutdown(r0, 0x1) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e1f, 0x20, @rand_addr=' \x01\x00', 0x15aa}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 09:20:00 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0xff}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x3f, 0x6, 0x1, 0x9, 0x0, 0x1f, 0x20ca, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000100), 0x5}, 0xc048, 0x100, 0xffff8001, 0x5, 0x1fffffffffffe, 0x9, 0x101, 0x0, 0x6, 0x0, 0xc000000000000}, 0x0, 0x4, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0xe7, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000002180)={@in6={{0xa, 0x0, 0x0, @loopback, 0x4}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) bind$inet6(r0, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003040)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="db4d31d6805ecdac87307b14c169d9d9", 0x7ffff000}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000a00)='m', 0x1}], 0x1}}], 0x3, 0x44894) shutdown(0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x8) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e24, 0x400, @private0={0xfc, 0x0, '\x00', 0x41}, 0x3b}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003040), 0x3, 0x4c890) connect$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e23, 0x5, @remote, 0x8}, 0x1c) shutdown(r0, 0x1) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e1f, 0x20, @rand_addr=' \x01\x00', 0x15aa}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 09:20:00 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000000100)) close(0xffffffffffffffff) creat(0x0, 0x0) 09:20:00 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)) 09:20:00 executing program 7: r0 = gettid() kcmp(r0, r0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, r0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000100), &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x17, &(0x7f0000001480), 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 09:20:00 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) iopl(0x0) 09:20:00 executing program 3: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r0, 0xc0403d15, 0x0) 09:20:00 executing program 2: r0 = syz_io_uring_setup(0x790a, &(0x7f0000000080), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000140)) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240), 0x48) 09:20:00 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0xff}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x3f, 0x6, 0x1, 0x9, 0x0, 0x1f, 0x20ca, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000100), 0x5}, 0xc048, 0x100, 0xffff8001, 0x5, 0x1fffffffffffe, 0x9, 0x101, 0x0, 0x6, 0x0, 0xc000000000000}, 0x0, 0x4, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0xe7, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000002180)={@in6={{0xa, 0x0, 0x0, @loopback, 0x4}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) bind$inet6(r0, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003040)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="db4d31d6805ecdac87307b14c169d9d9", 0x7ffff000}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000a00)='m', 0x1}], 0x1}}], 0x3, 0x44894) shutdown(0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x8) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e24, 0x400, @private0={0xfc, 0x0, '\x00', 0x41}, 0x3b}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003040), 0x3, 0x4c890) connect$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e23, 0x5, @remote, 0x8}, 0x1c) shutdown(r0, 0x1) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e1f, 0x20, @rand_addr=' \x01\x00', 0x15aa}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 09:20:00 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0xff}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x3f, 0x6, 0x1, 0x9, 0x0, 0x1f, 0x20ca, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000100), 0x5}, 0xc048, 0x100, 0xffff8001, 0x5, 0x1fffffffffffe, 0x9, 0x101, 0x0, 0x6, 0x0, 0xc000000000000}, 0x0, 0x4, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0xe7, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000002180)={@in6={{0xa, 0x0, 0x0, @loopback, 0x4}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) bind$inet6(r0, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003040)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="db4d31d6805ecdac87307b14c169d9d9", 0x7ffff000}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000a00)='m', 0x1}], 0x1}}], 0x3, 0x44894) shutdown(0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x8) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e24, 0x400, @private0={0xfc, 0x0, '\x00', 0x41}, 0x3b}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003040), 0x3, 0x4c890) connect$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e23, 0x5, @remote, 0x8}, 0x1c) shutdown(r0, 0x1) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e1f, 0x20, @rand_addr=' \x01\x00', 0x15aa}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 09:20:00 executing program 7: r0 = gettid() kcmp(r0, r0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, r0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000100), &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x17, &(0x7f0000001480), 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 09:20:00 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000240)=0x1) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000180)={0x0, 0x9, 0x0, 0x0, 0xf}) r1 = dup(r0) ioctl$int_in(r1, 0x5452, &(0x7f0000000200)=0xffffffff) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x5420, 0x0) 09:20:00 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0x80104592, &(0x7f0000000080)=""/176) 09:20:00 executing program 6: r0 = gettid() kcmp(r0, r0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, r0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000100), &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x17, &(0x7f0000001480), 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 09:20:00 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)={0x38, r3, 0x1, 0x0, 0x0, {{0x39}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x3, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x5}]}]}]}, 0x38}}, 0x0) 09:20:00 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @private0}, 0x1c) 09:20:00 executing program 6: r0 = gettid() kcmp(r0, r0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, r0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000100), &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x17, &(0x7f0000001480), 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 09:20:00 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000000020000190000fffe0100000f000000000000000100000005000000000004000040000020000000ddf4655fddf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000001000008000000d24201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e7e1fc40a6de4c28a2c3627f6ec42b47010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="02000000030000000400000016000f000300040000000000000000000f00c5d7", 0x20, 0x800}, {&(0x7f0000000080)="ed41000000080000da97ad84334ddc240d024771a6c44229f4655fddf4655fddf4655f", 0x23, 0x2100}], 0x0, &(0x7f0000014100)) 09:20:00 executing program 7: r0 = gettid() kcmp(r0, r0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, r0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000100), &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x17, &(0x7f0000001480), 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) [ 132.370795] loop2: detected capacity change from 0 to 2048 [ 132.391015] EXT4-fs error (device loop2): ext4_ext_check_inode:528: inode #2: comm syz-executor.2: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 132.398198] EXT4-fs (loop2): get root inode failed [ 132.398599] EXT4-fs (loop2): mount failed 09:20:01 executing program 3: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e07d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) 09:20:01 executing program 4: clock_adjtime(0x0, &(0x7f0000000080)={0x76e72753, 0x0, 0xe3a59bc420000000}) 09:20:01 executing program 7: r0 = gettid() kcmp(r0, r0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, r0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000100), &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x17, &(0x7f0000001480), 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 09:20:01 executing program 6: r0 = gettid() kcmp(r0, r0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, r0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000100), &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x17, &(0x7f0000001480), 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 09:20:01 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1}, 0x1c) 09:20:01 executing program 4: clock_adjtime(0x0, &(0x7f0000000080)={0x76e72753, 0x0, 0xe3a59bc420000000}) 09:20:01 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={0x20, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x0) 09:20:01 executing program 7: keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000000)=""/102377, 0xe0cc8cb65c6d411) 09:20:01 executing program 3: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) write$binfmt_script(r0, 0x0, 0xc) 09:20:01 executing program 5: syz_usb_connect(0x0, 0x24, &(0x7f0000000840)={{0x12, 0x1, 0x0, 0xb9, 0xc7, 0x9b, 0x0, 0x12d1, 0xf85c, 0x5b0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x5, 0xa}}]}}]}}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000001580)={{0x12, 0x1, 0x0, 0xdd, 0xf6, 0x10, 0x0, 0x1199, 0x25, 0x6843, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0xff, 0xff}}]}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000002280)={{0x12, 0x1, 0x0, 0xa2, 0x58, 0x51, 0x0, 0x1044, 0x800b, 0x124a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x35, 0x2d, 0xb5}}]}}]}}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000002800)={{0x12, 0x1, 0x0, 0xc4, 0x3e, 0x66, 0x0, 0x2013, 0x245, 0x2bcd, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x6a, 0xe, 0x70}}]}}]}}, 0x0) 09:20:01 executing program 6: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000280)={0x0, 0x2}, 0x4) syz_emit_ethernet(0x2e, &(0x7f0000000240)={@broadcast, @local, @val={@void}, {@mpls_uc={0x8847, {[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}, @info_request}}}}}, 0x0) 09:20:01 executing program 0: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 132.582274] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.588578] misc raw-gadget: fail, usb_gadget_register_driver returned -16 09:20:01 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r0, 0x107, 0x8, 0x0, &(0x7f0000000040)) 09:20:01 executing program 7: r0 = creat(&(0x7f00000000c0)='./file1\x00', 0x0) fcntl$setlease(r0, 0x400, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) removexattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@random={'security.', 'user.incfs.size\x00'}) 09:20:01 executing program 2: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001ac0)=ANY=[@ANYBLOB="00f78622783d23fc23dffc2047c1c4ef60e4073b654e3f052cdb0fbc7316bbe0abaceaeb810000007184f79cec11440b3e48a1e7da3b8f697b15225049e9072eff070000125010023c741f690748b91038a38eafdc71c8ccd8822d34c9e30dfbb3253d31295d831038a49866b66d8f91ddb06105f5236bc14989a93dd9f127e8ce8eb2c9f3d986d8dc99929e4a6e93c6d759212a77c0f76cd24c88334019936509fc4965ae002951026cbd1e67df4eeceb2f19a4f8cd84ab3828f47aa4fbe5ef8ac247"]) r0 = fork() process_vm_readv(r0, &(0x7f0000001900)=[{&(0x7f0000000400)=""/181, 0xb5}, {&(0x7f0000000640)=""/190, 0xbe}, {&(0x7f0000000700)=""/224, 0xe0}, {&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000001800)=""/235, 0xeb}, {&(0x7f00000004c0)=""/98, 0x62}], 0x6, &(0x7f0000001a80)=[{&(0x7f0000001980)=""/224, 0xe0}], 0x1, 0x0) [ 132.593382] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.612830] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.616599] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.617341] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.628512] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.629247] misc raw-gadget: fail, usb_gadget_register_driver returned -16 09:20:01 executing program 4: clock_adjtime(0x0, &(0x7f0000000080)={0x76e72753, 0x0, 0xe3a59bc420000000}) 09:20:01 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x4840, 0x0) ioctl$CDROM_SEND_PACKET(r0, 0x2201, &(0x7f0000000440)={"b55c3a41609039d40088a81b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:20:01 executing program 7: r0 = creat(&(0x7f00000000c0)='./file1\x00', 0x0) fcntl$setlease(r0, 0x400, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) removexattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@random={'security.', 'user.incfs.size\x00'}) 09:20:01 executing program 3: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) write$binfmt_script(r0, 0x0, 0xc) 09:20:01 executing program 0: syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, {[@mss={0x2, 0x4}, @sack={0x5, 0x12, [0x0, 0x0, 0x0, 0x0]}]}}}}}}}, 0x0) 09:20:01 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x0, 0x3e, 0x0, "2b8bdd7c4ddf64e573fb90df56398a1720f4258b059e1284a5e036e5b36663a4bb5f524aaa3cddc9979de0ac95be0cfe5d2da5789a5f0a9f69873c1d89b4a5c44047b1d152345682dc9509f6718ca65d"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000080)={@in6={{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x0, 0x0, 0x0, "9e2550c22db3e71843aef7ed344e875f82ad11808b6f453b40abf8c2a09fbef9396c024d7e16ef99b6002dc647a600e4c072cbb15053db46562576eaffe309a49cae78a40c3b228860c5c66f4283c102"}, 0xd8) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1c) 09:20:01 executing program 4: clock_adjtime(0x0, &(0x7f0000000080)={0x76e72753, 0x0, 0xe3a59bc420000000}) 09:20:01 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r0, 0x107, 0x8, 0x0, &(0x7f0000000040)) [ 133.132997] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.134594] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.137002] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.142794] misc raw-gadget: fail, usb_gadget_register_driver returned -16 09:20:01 executing program 7: r0 = creat(&(0x7f00000000c0)='./file1\x00', 0x0) fcntl$setlease(r0, 0x400, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) removexattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@random={'security.', 'user.incfs.size\x00'}) 09:20:01 executing program 3: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) write$binfmt_script(r0, 0x0, 0xc) 09:20:01 executing program 2: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x3c, r0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x3c}}, 0x0) 09:20:01 executing program 0: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ad", 0x1, r0) keyctl$revoke(0x3, r1) add_key$user(&(0x7f0000000140), &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000200)='i', 0x1, r0) 09:20:01 executing program 4: syz_mount_image$nfs4(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001480)={[{'noac,'}]}) 09:20:01 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r0, 0x107, 0x8, 0x0, &(0x7f0000000040)) 09:20:01 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x4840, 0x0) ioctl$CDROM_SEND_PACKET(r0, 0x2201, &(0x7f0000000440)={"b55c3a41609039d40088a81b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:20:01 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) dup3(r1, r0, 0x0) 09:20:01 executing program 3: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) write$binfmt_script(r0, 0x0, 0xc) 09:20:01 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r0, 0x107, 0x8, 0x0, &(0x7f0000000040)) 09:20:01 executing program 7: r0 = creat(&(0x7f00000000c0)='./file1\x00', 0x0) fcntl$setlease(r0, 0x400, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) removexattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@random={'security.', 'user.incfs.size\x00'}) 09:20:01 executing program 0: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ad", 0x1, r0) keyctl$revoke(0x3, r1) add_key$user(&(0x7f0000000140), &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000200)='i', 0x1, r0) 09:20:01 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) poll(&(0x7f0000000100)=[{0xffffffffffffffff, 0xb008}, {r0}], 0x2, 0x2c) 09:20:01 executing program 2: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x3c, r0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANT VM DIAGNOSIS: 09:19:57 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=ffff88806cf3d280 RCX=ffffffff8169d56a RDX=ffff88801a5f8000 RSI=ffffffff8169d544 RDI=0000000000000005 RBP=0000000000000003 RSP=ffff88801b8676e0 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=ffffed100d9e7a51 R13=ffff88806cf3d288 R14=0000000000000001 R15=dffffc0000000000 RIP=ffffffff8169d546 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 000055555a692400 00000000 00000000 GS =0000 ffff8880e5343000 00000000 00000000 LDT=0000 fffffe3a00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f01509643a4 CR3=000000000d54e000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=2ef9bc38d948d176914f57126feed3ad XMM01=0a3a46a34d72209912cdf25bb94d5115 XMM02=c63c1f95aa0fb52e32bb9f69577cb22a XMM03=2e6522ff0c9a0990e9ef9a2d7c259ee5 XMM04=00000000000000000000000000000054 XMM05=00000000000000000080010000000054 XMM06=00000000000000000000000000800100 XMM07=00800100000000540000005400a38289 XMM08=4400000044000000c400000092000000 XMM09=00000000000000000000000000000000 XMM10=2d07ce2ad406e92947ec055c96a05afa XMM11=6002284105b9cff73eb9833256a9b762 XMM12=0d0c0f0e09080b0a0504070601000302 XMM13=0c0f0e0d080b0a090407060500030201 XMM14=00000000000000000000000000012ac0 XMM15=00000000000000000000000000000040 info registers vcpu 1 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff82973905 RDI=ffffffff889c0960 RBP=ffffffff889c0920 RSP=ffff8880493cf488 R8 =0000000000000000 R9 =ffffed1001533046 R10=0000000000000020 R11=666666203a322320 R12=0000000000000020 R13=0000000000000010 R14=ffffffff889c0920 R15=ffffffff829738f0 RIP=ffffffff8297395d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 000055556b5cd400 00000000 00000000 GS =0000 ffff8880e5443000 00000000 00000000 LDT=0000 fffffe2500000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fc7c6e13543 CR3=000000001d547000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000a60ce07b00000000cec3662e XMM01=000000000000000003515b82db34ca11 XMM02=0000000000000000333bebdfd0a6a21d XMM03=00000000000000000000000000000000 XMM04=000000ff0000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000