Warning: Permanently added '[localhost]:21467' (ECDSA) to the list of known hosts. 2026/01/14 09:23:35 fuzzer started 2026/01/14 09:23:35 dialing manager at localhost:46753 syzkaller login: [ 50.240266] cgroup: Unknown subsys name 'net' [ 50.300765] cgroup: Unknown subsys name 'cpuset' [ 50.318796] cgroup: Unknown subsys name 'rlimit' 2026/01/14 09:23:45 syscalls: 2214 2026/01/14 09:23:45 code coverage: enabled 2026/01/14 09:23:45 comparison tracing: enabled 2026/01/14 09:23:45 extra coverage: enabled 2026/01/14 09:23:45 setuid sandbox: enabled 2026/01/14 09:23:45 namespace sandbox: enabled 2026/01/14 09:23:45 Android sandbox: enabled 2026/01/14 09:23:45 fault injection: enabled 2026/01/14 09:23:45 leak checking: enabled 2026/01/14 09:23:45 net packet injection: enabled 2026/01/14 09:23:45 net device setup: enabled 2026/01/14 09:23:45 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2026/01/14 09:23:45 devlink PCI setup: PCI device 0000:00:10.0 is not available 2026/01/14 09:23:45 USB emulation: enabled 2026/01/14 09:23:45 hci packet injection: enabled 2026/01/14 09:23:45 wifi device emulation: enabled 2026/01/14 09:23:45 802.15.4 emulation: enabled 2026/01/14 09:23:45 fetching corpus: 0, signal 0/2000 (executing program) 2026/01/14 09:23:46 fetching corpus: 50, signal 25255/28830 (executing program) 2026/01/14 09:23:46 fetching corpus: 100, signal 40724/45678 (executing program) 2026/01/14 09:23:46 fetching corpus: 150, signal 49926/56203 (executing program) 2026/01/14 09:23:46 fetching corpus: 200, signal 54084/61745 (executing program) 2026/01/14 09:23:46 fetching corpus: 250, signal 60768/69608 (executing program) 2026/01/14 09:23:46 fetching corpus: 300, signal 64444/74502 (executing program) 2026/01/14 09:23:46 fetching corpus: 350, signal 69945/81050 (executing program) 2026/01/14 09:23:46 fetching corpus: 400, signal 73708/85886 (executing program) 2026/01/14 09:23:46 fetching corpus: 450, signal 77705/90894 (executing program) 2026/01/14 09:23:47 fetching corpus: 500, signal 83116/97167 (executing program) 2026/01/14 09:23:47 fetching corpus: 550, signal 85675/100726 (executing program) 2026/01/14 09:23:47 fetching corpus: 600, signal 88394/104392 (executing program) 2026/01/14 09:23:47 fetching corpus: 650, signal 92420/109161 (executing program) 2026/01/14 09:23:47 fetching corpus: 700, signal 94782/112382 (executing program) 2026/01/14 09:23:47 fetching corpus: 750, signal 98121/116403 (executing program) 2026/01/14 09:23:47 fetching corpus: 800, signal 99906/119053 (executing program) 2026/01/14 09:23:47 fetching corpus: 850, signal 102391/122320 (executing program) 2026/01/14 09:23:47 fetching corpus: 900, signal 103711/124548 (executing program) 2026/01/14 09:23:48 fetching corpus: 950, signal 105240/126883 (executing program) 2026/01/14 09:23:48 fetching corpus: 1000, signal 107880/130116 (executing program) 2026/01/14 09:23:48 fetching corpus: 1050, signal 109225/132272 (executing program) 2026/01/14 09:23:48 fetching corpus: 1100, signal 110939/134688 (executing program) 2026/01/14 09:23:48 fetching corpus: 1150, signal 112937/137319 (executing program) 2026/01/14 09:23:48 fetching corpus: 1200, signal 114803/139756 (executing program) 2026/01/14 09:23:48 fetching corpus: 1250, signal 116555/142157 (executing program) 2026/01/14 09:23:48 fetching corpus: 1300, signal 118426/144625 (executing program) 2026/01/14 09:23:49 fetching corpus: 1350, signal 119856/146712 (executing program) 2026/01/14 09:23:49 fetching corpus: 1400, signal 120929/148424 (executing program) 2026/01/14 09:23:49 fetching corpus: 1450, signal 123161/151020 (executing program) 2026/01/14 09:23:49 fetching corpus: 1500, signal 124511/152892 (executing program) 2026/01/14 09:23:49 fetching corpus: 1550, signal 126244/155065 (executing program) 2026/01/14 09:23:49 fetching corpus: 1600, signal 127312/156697 (executing program) 2026/01/14 09:23:49 fetching corpus: 1650, signal 128581/158513 (executing program) 2026/01/14 09:23:49 fetching corpus: 1700, signal 129753/160237 (executing program) 2026/01/14 09:23:49 fetching corpus: 1750, signal 131449/162277 (executing program) 2026/01/14 09:23:50 fetching corpus: 1800, signal 132370/163721 (executing program) 2026/01/14 09:23:50 fetching corpus: 1850, signal 133380/165281 (executing program) 2026/01/14 09:23:50 fetching corpus: 1900, signal 134773/167028 (executing program) 2026/01/14 09:23:50 fetching corpus: 1950, signal 135635/168459 (executing program) 2026/01/14 09:23:50 fetching corpus: 2000, signal 136601/169917 (executing program) 2026/01/14 09:23:50 fetching corpus: 2050, signal 137746/171440 (executing program) 2026/01/14 09:23:50 fetching corpus: 2100, signal 139137/173069 (executing program) 2026/01/14 09:23:50 fetching corpus: 2150, signal 139927/174347 (executing program) 2026/01/14 09:23:50 fetching corpus: 2200, signal 140505/175502 (executing program) 2026/01/14 09:23:50 fetching corpus: 2250, signal 141399/176805 (executing program) 2026/01/14 09:23:51 fetching corpus: 2299, signal 142002/177935 (executing program) 2026/01/14 09:23:51 fetching corpus: 2348, signal 143566/179636 (executing program) 2026/01/14 09:23:51 fetching corpus: 2398, signal 144738/181050 (executing program) 2026/01/14 09:23:51 fetching corpus: 2448, signal 146255/182692 (executing program) 2026/01/14 09:23:51 fetching corpus: 2498, signal 146786/183748 (executing program) 2026/01/14 09:23:51 fetching corpus: 2547, signal 147423/184821 (executing program) 2026/01/14 09:23:51 fetching corpus: 2597, signal 148226/185971 (executing program) 2026/01/14 09:23:51 fetching corpus: 2647, signal 149023/187123 (executing program) 2026/01/14 09:23:51 fetching corpus: 2697, signal 149805/188229 (executing program) 2026/01/14 09:23:52 fetching corpus: 2747, signal 150640/189369 (executing program) 2026/01/14 09:23:52 fetching corpus: 2797, signal 151317/190446 (executing program) 2026/01/14 09:23:52 fetching corpus: 2846, signal 152204/191575 (executing program) 2026/01/14 09:23:52 fetching corpus: 2896, signal 152971/192637 (executing program) 2026/01/14 09:23:52 fetching corpus: 2946, signal 153926/193760 (executing program) 2026/01/14 09:23:52 fetching corpus: 2996, signal 155036/194963 (executing program) 2026/01/14 09:23:52 fetching corpus: 3046, signal 155791/195987 (executing program) 2026/01/14 09:23:52 fetching corpus: 3096, signal 156557/196984 (executing program) 2026/01/14 09:23:52 fetching corpus: 3146, signal 157049/197810 (executing program) 2026/01/14 09:23:53 fetching corpus: 3196, signal 157757/198723 (executing program) 2026/01/14 09:23:53 fetching corpus: 3246, signal 158302/199597 (executing program) 2026/01/14 09:23:53 fetching corpus: 3295, signal 158772/200465 (executing program) 2026/01/14 09:23:53 fetching corpus: 3343, signal 159710/201463 (executing program) 2026/01/14 09:23:53 fetching corpus: 3393, signal 160279/202293 (executing program) 2026/01/14 09:23:53 fetching corpus: 3443, signal 160952/203128 (executing program) 2026/01/14 09:23:53 fetching corpus: 3493, signal 161753/204046 (executing program) 2026/01/14 09:23:53 fetching corpus: 3543, signal 162272/204848 (executing program) 2026/01/14 09:23:54 fetching corpus: 3593, signal 162782/205623 (executing program) 2026/01/14 09:23:54 fetching corpus: 3643, signal 163500/206484 (executing program) 2026/01/14 09:23:54 fetching corpus: 3693, signal 164140/207321 (executing program) 2026/01/14 09:23:54 fetching corpus: 3743, signal 164914/208146 (executing program) 2026/01/14 09:23:54 fetching corpus: 3793, signal 165418/208903 (executing program) 2026/01/14 09:23:54 fetching corpus: 3841, signal 165951/209661 (executing program) 2026/01/14 09:23:54 fetching corpus: 3888, signal 166485/210431 (executing program) 2026/01/14 09:23:54 fetching corpus: 3938, signal 167088/211196 (executing program) 2026/01/14 09:23:55 fetching corpus: 3988, signal 167917/211993 (executing program) 2026/01/14 09:23:55 fetching corpus: 4038, signal 168466/212665 (executing program) 2026/01/14 09:23:55 fetching corpus: 4088, signal 168848/213260 (executing program) 2026/01/14 09:23:55 fetching corpus: 4138, signal 169305/213925 (executing program) 2026/01/14 09:23:55 fetching corpus: 4187, signal 169767/214642 (executing program) 2026/01/14 09:23:55 fetching corpus: 4237, signal 170351/215277 (executing program) 2026/01/14 09:23:55 fetching corpus: 4287, signal 170885/215971 (executing program) 2026/01/14 09:23:55 fetching corpus: 4337, signal 171539/216667 (executing program) 2026/01/14 09:23:55 fetching corpus: 4387, signal 171935/217295 (executing program) 2026/01/14 09:23:56 fetching corpus: 4437, signal 172392/217904 (executing program) 2026/01/14 09:23:56 fetching corpus: 4487, signal 172944/218489 (executing program) 2026/01/14 09:23:56 fetching corpus: 4537, signal 173358/219076 (executing program) 2026/01/14 09:23:56 fetching corpus: 4586, signal 173787/219630 (executing program) 2026/01/14 09:23:56 fetching corpus: 4636, signal 174328/220253 (executing program) 2026/01/14 09:23:56 fetching corpus: 4686, signal 174931/220889 (executing program) 2026/01/14 09:23:56 fetching corpus: 4736, signal 175597/221489 (executing program) 2026/01/14 09:23:56 fetching corpus: 4786, signal 176086/222082 (executing program) 2026/01/14 09:23:57 fetching corpus: 4836, signal 176561/222652 (executing program) 2026/01/14 09:23:57 fetching corpus: 4886, signal 177323/223210 (executing program) 2026/01/14 09:23:57 fetching corpus: 4936, signal 177655/223731 (executing program) 2026/01/14 09:23:57 fetching corpus: 4986, signal 178050/224213 (executing program) 2026/01/14 09:23:57 fetching corpus: 5036, signal 178530/224710 (executing program) 2026/01/14 09:23:57 fetching corpus: 5086, signal 178944/225197 (executing program) 2026/01/14 09:23:57 fetching corpus: 5135, signal 179438/225699 (executing program) 2026/01/14 09:23:57 fetching corpus: 5185, signal 179840/226183 (executing program) 2026/01/14 09:23:57 fetching corpus: 5235, signal 180166/226648 (executing program) 2026/01/14 09:23:57 fetching corpus: 5285, signal 180601/227108 (executing program) 2026/01/14 09:23:57 fetching corpus: 5334, signal 181009/227559 (executing program) 2026/01/14 09:23:58 fetching corpus: 5384, signal 181349/228000 (executing program) 2026/01/14 09:23:58 fetching corpus: 5434, signal 181811/228439 (executing program) 2026/01/14 09:23:58 fetching corpus: 5484, signal 182163/228919 (executing program) 2026/01/14 09:23:58 fetching corpus: 5534, signal 182602/229344 (executing program) 2026/01/14 09:23:58 fetching corpus: 5583, signal 182931/229752 (executing program) 2026/01/14 09:23:58 fetching corpus: 5632, signal 183353/230166 (executing program) 2026/01/14 09:23:58 fetching corpus: 5681, signal 183882/230585 (executing program) 2026/01/14 09:23:58 fetching corpus: 5731, signal 184408/230618 (executing program) 2026/01/14 09:23:59 fetching corpus: 5781, signal 184768/230618 (executing program) 2026/01/14 09:23:59 fetching corpus: 5831, signal 185171/230618 (executing program) 2026/01/14 09:23:59 fetching corpus: 5881, signal 185617/230625 (executing program) 2026/01/14 09:23:59 fetching corpus: 5931, signal 186067/230625 (executing program) 2026/01/14 09:23:59 fetching corpus: 5981, signal 186705/230627 (executing program) 2026/01/14 09:23:59 fetching corpus: 6030, signal 187132/230632 (executing program) 2026/01/14 09:23:59 fetching corpus: 6080, signal 187545/230636 (executing program) 2026/01/14 09:23:59 fetching corpus: 6130, signal 187888/230636 (executing program) 2026/01/14 09:23:59 fetching corpus: 6180, signal 188259/230646 (executing program) 2026/01/14 09:23:59 fetching corpus: 6230, signal 188751/230646 (executing program) 2026/01/14 09:24:00 fetching corpus: 6280, signal 189285/230646 (executing program) 2026/01/14 09:24:00 fetching corpus: 6330, signal 189590/230646 (executing program) 2026/01/14 09:24:00 fetching corpus: 6380, signal 189961/230646 (executing program) 2026/01/14 09:24:00 fetching corpus: 6429, signal 190188/230647 (executing program) 2026/01/14 09:24:00 fetching corpus: 6478, signal 190512/230648 (executing program) 2026/01/14 09:24:00 fetching corpus: 6528, signal 190889/230652 (executing program) 2026/01/14 09:24:00 fetching corpus: 6578, signal 191212/230652 (executing program) 2026/01/14 09:24:00 fetching corpus: 6628, signal 191625/230652 (executing program) 2026/01/14 09:24:00 fetching corpus: 6678, signal 191969/230657 (executing program) 2026/01/14 09:24:00 fetching corpus: 6728, signal 192295/230657 (executing program) 2026/01/14 09:24:00 fetching corpus: 6778, signal 192522/230657 (executing program) 2026/01/14 09:24:01 fetching corpus: 6828, signal 192940/230657 (executing program) 2026/01/14 09:24:01 fetching corpus: 6878, signal 193356/230658 (executing program) 2026/01/14 09:24:01 fetching corpus: 6928, signal 193819/230658 (executing program) 2026/01/14 09:24:01 fetching corpus: 6978, signal 194330/230658 (executing program) 2026/01/14 09:24:01 fetching corpus: 7028, signal 194754/230658 (executing program) 2026/01/14 09:24:01 fetching corpus: 7078, signal 195132/230658 (executing program) 2026/01/14 09:24:01 fetching corpus: 7128, signal 195492/230658 (executing program) 2026/01/14 09:24:01 fetching corpus: 7178, signal 196306/230658 (executing program) 2026/01/14 09:24:01 fetching corpus: 7228, signal 196616/230658 (executing program) 2026/01/14 09:24:02 fetching corpus: 7278, signal 196945/230659 (executing program) 2026/01/14 09:24:02 fetching corpus: 7328, signal 197405/230659 (executing program) 2026/01/14 09:24:02 fetching corpus: 7377, signal 197790/230659 (executing program) 2026/01/14 09:24:02 fetching corpus: 7427, signal 198151/230659 (executing program) 2026/01/14 09:24:02 fetching corpus: 7477, signal 198622/230659 (executing program) 2026/01/14 09:24:02 fetching corpus: 7527, signal 198990/230663 (executing program) 2026/01/14 09:24:02 fetching corpus: 7577, signal 199305/230663 (executing program) 2026/01/14 09:24:02 fetching corpus: 7627, signal 199584/230663 (executing program) 2026/01/14 09:24:02 fetching corpus: 7677, signal 199927/230663 (executing program) 2026/01/14 09:24:03 fetching corpus: 7726, signal 200340/230663 (executing program) 2026/01/14 09:24:03 fetching corpus: 7776, signal 200843/230663 (executing program) 2026/01/14 09:24:03 fetching corpus: 7825, signal 201092/230663 (executing program) 2026/01/14 09:24:03 fetching corpus: 7875, signal 201305/230663 (executing program) 2026/01/14 09:24:03 fetching corpus: 7925, signal 201613/230663 (executing program) 2026/01/14 09:24:03 fetching corpus: 7975, signal 201911/230663 (executing program) 2026/01/14 09:24:03 fetching corpus: 8024, signal 202194/230663 (executing program) 2026/01/14 09:24:03 fetching corpus: 8074, signal 202501/230663 (executing program) 2026/01/14 09:24:04 fetching corpus: 8124, signal 202804/230663 (executing program) 2026/01/14 09:24:04 fetching corpus: 8174, signal 203251/230663 (executing program) 2026/01/14 09:24:04 fetching corpus: 8224, signal 203664/230678 (executing program) 2026/01/14 09:24:04 fetching corpus: 8273, signal 203979/230679 (executing program) 2026/01/14 09:24:04 fetching corpus: 8323, signal 204206/230679 (executing program) 2026/01/14 09:24:04 fetching corpus: 8373, signal 204487/230679 (executing program) 2026/01/14 09:24:04 fetching corpus: 8423, signal 204784/230679 (executing program) 2026/01/14 09:24:04 fetching corpus: 8473, signal 204975/230680 (executing program) 2026/01/14 09:24:04 fetching corpus: 8523, signal 205235/230680 (executing program) 2026/01/14 09:24:05 fetching corpus: 8573, signal 205503/230684 (executing program) 2026/01/14 09:24:05 fetching corpus: 8623, signal 205810/230684 (executing program) 2026/01/14 09:24:05 fetching corpus: 8673, signal 206046/230690 (executing program) 2026/01/14 09:24:05 fetching corpus: 8722, signal 206357/230691 (executing program) 2026/01/14 09:24:05 fetching corpus: 8772, signal 206664/230691 (executing program) 2026/01/14 09:24:05 fetching corpus: 8822, signal 206971/230692 (executing program) 2026/01/14 09:24:05 fetching corpus: 8872, signal 207201/230695 (executing program) 2026/01/14 09:24:05 fetching corpus: 8922, signal 207461/230695 (executing program) 2026/01/14 09:24:05 fetching corpus: 8972, signal 207711/230695 (executing program) 2026/01/14 09:24:05 fetching corpus: 9022, signal 207997/230695 (executing program) 2026/01/14 09:24:06 fetching corpus: 9072, signal 208328/230695 (executing program) 2026/01/14 09:24:06 fetching corpus: 9122, signal 208638/230696 (executing program) 2026/01/14 09:24:06 fetching corpus: 9172, signal 208893/230696 (executing program) 2026/01/14 09:24:06 fetching corpus: 9222, signal 209221/230697 (executing program) 2026/01/14 09:24:06 fetching corpus: 9272, signal 209442/230697 (executing program) 2026/01/14 09:24:06 fetching corpus: 9322, signal 209756/230697 (executing program) 2026/01/14 09:24:06 fetching corpus: 9372, signal 209973/230697 (executing program) 2026/01/14 09:24:06 fetching corpus: 9422, signal 210230/230697 (executing program) 2026/01/14 09:24:06 fetching corpus: 9472, signal 210481/230699 (executing program) 2026/01/14 09:24:07 fetching corpus: 9522, signal 210775/230699 (executing program) 2026/01/14 09:24:07 fetching corpus: 9572, signal 211055/230699 (executing program) 2026/01/14 09:24:07 fetching corpus: 9622, signal 211340/230699 (executing program) 2026/01/14 09:24:07 fetching corpus: 9672, signal 211637/230699 (executing program) 2026/01/14 09:24:07 fetching corpus: 9722, signal 211905/230699 (executing program) 2026/01/14 09:24:07 fetching corpus: 9772, signal 212118/230699 (executing program) 2026/01/14 09:24:07 fetching corpus: 9822, signal 212390/230699 (executing program) 2026/01/14 09:24:07 fetching corpus: 9872, signal 212807/230699 (executing program) 2026/01/14 09:24:07 fetching corpus: 9922, signal 213151/230703 (executing program) 2026/01/14 09:24:08 fetching corpus: 9972, signal 213521/230705 (executing program) 2026/01/14 09:24:08 fetching corpus: 10022, signal 213763/230705 (executing program) 2026/01/14 09:24:08 fetching corpus: 10072, signal 214117/230705 (executing program) 2026/01/14 09:24:08 fetching corpus: 10122, signal 214326/230705 (executing program) 2026/01/14 09:24:08 fetching corpus: 10172, signal 214742/230708 (executing program) 2026/01/14 09:24:08 fetching corpus: 10222, signal 214975/230712 (executing program) 2026/01/14 09:24:08 fetching corpus: 10272, signal 215175/230712 (executing program) 2026/01/14 09:24:08 fetching corpus: 10321, signal 215387/230715 (executing program) 2026/01/14 09:24:08 fetching corpus: 10371, signal 215572/230715 (executing program) 2026/01/14 09:24:09 fetching corpus: 10421, signal 215801/230715 (executing program) 2026/01/14 09:24:09 fetching corpus: 10471, signal 216027/230715 (executing program) 2026/01/14 09:24:09 fetching corpus: 10521, signal 216289/230715 (executing program) 2026/01/14 09:24:09 fetching corpus: 10571, signal 216557/230715 (executing program) 2026/01/14 09:24:09 fetching corpus: 10621, signal 216858/230715 (executing program) 2026/01/14 09:24:09 fetching corpus: 10671, signal 217084/230715 (executing program) 2026/01/14 09:24:09 fetching corpus: 10721, signal 217273/230731 (executing program) 2026/01/14 09:24:09 fetching corpus: 10771, signal 217568/230731 (executing program) 2026/01/14 09:24:09 fetching corpus: 10821, signal 217739/230731 (executing program) 2026/01/14 09:24:09 fetching corpus: 10871, signal 218026/230752 (executing program) 2026/01/14 09:24:10 fetching corpus: 10921, signal 218266/230752 (executing program) 2026/01/14 09:24:10 fetching corpus: 10971, signal 218587/230757 (executing program) 2026/01/14 09:24:10 fetching corpus: 11021, signal 218794/230757 (executing program) 2026/01/14 09:24:10 fetching corpus: 11071, signal 219010/230757 (executing program) 2026/01/14 09:24:10 fetching corpus: 11121, signal 219323/230758 (executing program) 2026/01/14 09:24:10 fetching corpus: 11171, signal 219500/230758 (executing program) 2026/01/14 09:24:10 fetching corpus: 11221, signal 219713/230760 (executing program) 2026/01/14 09:24:10 fetching corpus: 11271, signal 219863/230762 (executing program) 2026/01/14 09:24:10 fetching corpus: 11321, signal 220101/230762 (executing program) 2026/01/14 09:24:11 fetching corpus: 11371, signal 220366/230762 (executing program) 2026/01/14 09:24:11 fetching corpus: 11421, signal 220567/230763 (executing program) 2026/01/14 09:24:11 fetching corpus: 11470, signal 220879/230763 (executing program) 2026/01/14 09:24:11 fetching corpus: 11520, signal 221067/230763 (executing program) 2026/01/14 09:24:11 fetching corpus: 11570, signal 221268/230763 (executing program) 2026/01/14 09:24:11 fetching corpus: 11620, signal 221463/230763 (executing program) 2026/01/14 09:24:11 fetching corpus: 11670, signal 221679/230763 (executing program) 2026/01/14 09:24:11 fetching corpus: 11720, signal 221903/230763 (executing program) 2026/01/14 09:24:11 fetching corpus: 11770, signal 222116/230763 (executing program) 2026/01/14 09:24:12 fetching corpus: 11820, signal 222361/230763 (executing program) 2026/01/14 09:24:12 fetching corpus: 11870, signal 222583/230763 (executing program) 2026/01/14 09:24:12 fetching corpus: 11920, signal 222766/230763 (executing program) 2026/01/14 09:24:12 fetching corpus: 11970, signal 222948/230766 (executing program) 2026/01/14 09:24:12 fetching corpus: 12020, signal 223102/230766 (executing program) 2026/01/14 09:24:12 fetching corpus: 12070, signal 223297/230766 (executing program) 2026/01/14 09:24:12 fetching corpus: 12120, signal 223551/230766 (executing program) 2026/01/14 09:24:12 fetching corpus: 12170, signal 223788/230766 (executing program) 2026/01/14 09:24:12 fetching corpus: 12220, signal 224037/230766 (executing program) 2026/01/14 09:24:12 fetching corpus: 12270, signal 224306/230766 (executing program) 2026/01/14 09:24:13 fetching corpus: 12319, signal 224537/230766 (executing program) 2026/01/14 09:24:13 fetching corpus: 12369, signal 224772/230766 (executing program) 2026/01/14 09:24:13 fetching corpus: 12419, signal 224960/230766 (executing program) 2026/01/14 09:24:13 fetching corpus: 12469, signal 225175/230766 (executing program) 2026/01/14 09:24:13 fetching corpus: 12519, signal 225422/230766 (executing program) 2026/01/14 09:24:13 fetching corpus: 12569, signal 225607/230766 (executing program) 2026/01/14 09:24:13 fetching corpus: 12619, signal 225787/230766 (executing program) 2026/01/14 09:24:13 fetching corpus: 12669, signal 226416/230766 (executing program) 2026/01/14 09:24:13 fetching corpus: 12719, signal 226630/230766 (executing program) 2026/01/14 09:24:13 fetching corpus: 12769, signal 226858/230766 (executing program) 2026/01/14 09:24:14 fetching corpus: 12819, signal 227043/230766 (executing program) 2026/01/14 09:24:14 fetching corpus: 12869, signal 227432/230768 (executing program) 2026/01/14 09:24:14 fetching corpus: 12919, signal 227639/230773 (executing program) 2026/01/14 09:24:14 fetching corpus: 12969, signal 227865/230779 (executing program) 2026/01/14 09:24:14 fetching corpus: 13019, signal 228039/230779 (executing program) 2026/01/14 09:24:14 fetching corpus: 13069, signal 228218/230779 (executing program) 2026/01/14 09:24:14 fetching corpus: 13119, signal 228402/230780 (executing program) 2026/01/14 09:24:14 fetching corpus: 13169, signal 228570/230790 (executing program) 2026/01/14 09:24:14 fetching corpus: 13219, signal 228763/230790 (executing program) 2026/01/14 09:24:14 fetching corpus: 13269, signal 228941/230790 (executing program) 2026/01/14 09:24:15 fetching corpus: 13319, signal 229097/230794 (executing program) 2026/01/14 09:24:15 fetching corpus: 13359, signal 229253/230797 (executing program) 2026/01/14 09:24:15 fetching corpus: 13359, signal 229253/230797 (executing program) 2026/01/14 09:24:16 starting 8 fuzzer processes 09:24:16 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000200)={{{@in=@local, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x6c}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0xe8) close_range(r0, 0xffffffffffffffff, 0x0) 09:24:16 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) membarrier(0x10, 0x0) membarrier(0x8, 0x0) 09:24:16 executing program 2: munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) mlock(&(0x7f0000fed000/0x13000)=nil, 0x13000) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r1) mremap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) 09:24:16 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)={0x1c, 0x19, 0x1, 0x0, 0x0, "", [@generic="02", @nested={0x8, 0x0, 0x0, 0x1, [@typed={0x4}]}]}, 0x1c}], 0x1}, 0x0) 09:24:16 executing program 4: r0 = syz_io_uring_setup(0x33ba, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000000000)) r1 = dup(r0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x13, &(0x7f00000001c0), 0x2) 09:24:16 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x4020940d) [ 91.564240] audit: type=1400 audit(1768382657.010:7): avc: denied { execmem } for pid=272 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 09:24:16 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect(r0, &(0x7f00000004c0)=@ieee802154, 0x80) 09:24:16 executing program 6: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000005, 0x32, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38}, 0x0) [ 92.701515] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 92.705194] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 92.706942] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 92.712945] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 92.716930] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 92.754012] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 92.756702] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 92.760716] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 92.769835] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 92.771825] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 92.777917] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 92.782215] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 92.785106] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 92.787768] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 92.800902] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 92.803956] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 92.805461] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 92.808525] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 92.808951] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 92.825729] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 92.835247] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 92.836963] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 92.839287] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 92.840224] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 92.840405] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 92.849336] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 92.867726] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 92.870703] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 92.875891] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 92.892305] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 92.893476] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 92.897297] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 92.898456] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 92.900034] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 92.921668] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 92.929446] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 92.939268] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 92.941211] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 92.970139] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 92.972057] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 94.794692] Bluetooth: hci0: command tx timeout [ 94.795411] Bluetooth: hci1: command tx timeout [ 94.862651] Bluetooth: hci2: command tx timeout [ 94.921983] Bluetooth: hci7: command tx timeout [ 94.922846] Bluetooth: hci6: command tx timeout [ 94.923305] Bluetooth: hci3: command tx timeout [ 94.986639] Bluetooth: hci4: command tx timeout [ 95.050805] Bluetooth: hci5: command tx timeout [ 96.843426] Bluetooth: hci1: command tx timeout [ 96.843467] Bluetooth: hci0: command tx timeout [ 96.907271] Bluetooth: hci2: command tx timeout [ 96.970687] Bluetooth: hci3: command tx timeout [ 96.970713] Bluetooth: hci6: command tx timeout [ 96.971133] Bluetooth: hci7: command tx timeout [ 97.033649] Bluetooth: hci4: command tx timeout [ 97.097659] Bluetooth: hci5: command tx timeout [ 98.889645] Bluetooth: hci1: command tx timeout [ 98.890881] Bluetooth: hci0: command tx timeout [ 98.955589] Bluetooth: hci2: command tx timeout [ 99.017644] Bluetooth: hci7: command tx timeout [ 99.017675] Bluetooth: hci6: command tx timeout [ 99.018079] Bluetooth: hci3: command tx timeout [ 99.081603] Bluetooth: hci4: command tx timeout [ 99.147694] Bluetooth: hci5: command tx timeout [ 100.939497] Bluetooth: hci0: command tx timeout [ 100.939519] Bluetooth: hci1: command tx timeout [ 101.003602] Bluetooth: hci2: command tx timeout [ 101.068601] Bluetooth: hci7: command tx timeout [ 101.069061] Bluetooth: hci6: command tx timeout [ 101.069439] Bluetooth: hci3: command tx timeout [ 101.131010] Bluetooth: hci4: command tx timeout [ 101.195725] Bluetooth: hci5: command tx timeout [ 127.600187] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.601379] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.853555] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.854627] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.061280] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.063664] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.281996] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.282646] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.423028] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.423910] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 09:24:53 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="2800000031003f640f04fcd35de0000018000080140001"], 0x28}], 0x1}, 0x0) [ 128.565088] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 128.578932] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.579495] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 09:24:54 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0x11, 0x0, &(0x7f0000000300)) 09:24:54 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0x11, 0x0, &(0x7f0000000300)) 09:24:54 executing program 7: r0 = getpgrp(0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) r2 = getpgrp(0xffffffffffffffff) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r2, 0x0, r1, 0x0) [ 128.671641] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.672250] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.688986] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.689689] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.711317] audit: type=1400 audit(1768382694.158:8): avc: denied { open } for pid=3868 comm="syz-executor.7" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 128.716924] audit: type=1400 audit(1768382694.158:9): avc: denied { kernel } for pid=3868 comm="syz-executor.7" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 09:24:54 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0x11, 0x0, &(0x7f0000000300)) [ 128.773223] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.773820] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 09:24:54 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') r1 = socket$packet(0x11, 0x2, 0x300) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r3, 0x2, 0x6, @link_local}, 0x10) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x8a001, 0x0) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f00000000c0)={r5, 0x1, 0x6, @random="426808c24976"}, 0x10) fcntl$lock(r1, 0x24, &(0x7f0000000080)={0x0, 0x1, 0x5, 0x40}) fcntl$notify(r0, 0x402, 0x80000012) r7 = fork() ptrace(0x10, r7) ptrace$getsig(0x4202, r7, 0xa23, &(0x7f0000004ac0)) process_vm_readv(r7, &(0x7f0000002fc0)=[{&(0x7f0000000240)=""/166, 0xa6}, {&(0x7f0000000000)=""/28, 0x1c}, {&(0x7f0000000640)=""/18, 0x12}], 0x3, &(0x7f00000029c0)=[{&(0x7f0000000300)=""/111, 0x6f}, {&(0x7f0000000440)=""/185, 0x5a}, {&(0x7f0000000040)=""/60, 0x38}, {&(0x7f0000000540)=""/230, 0xe6}], 0x4, 0x0) getpgid(r7) 09:24:54 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0x11, 0x0, &(0x7f0000000300)) [ 128.841596] syz_tun: entered allmulticast mode [ 128.845106] audit: type=1400 audit(1768382694.292:10): avc: denied { watch } for pid=3877 comm="syz-executor.7" path="/proc/3877/task" dev="proc" ino=4659 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=1 09:24:54 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)={0x20, r1, 0x1, 0x0, 0x0, {0x8}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}}, 0x0) [ 128.883959] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.884523] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.003637] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.004261] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.086995] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.087793] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.126876] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.127580] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.179976] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.180525] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.217019] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.217786] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.248838] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.249419] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 09:24:54 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000400)) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x33, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs(0x0, 0x0) 09:24:54 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) membarrier(0x10, 0x0) membarrier(0x8, 0x0) 09:24:54 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)={0x1c, 0x19, 0x1, 0x0, 0x0, "", [@generic="02", @nested={0x8, 0x0, 0x0, 0x1, [@typed={0x4}]}]}, 0x1c}], 0x1}, 0x0) 09:24:54 executing program 5: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000100), 0x8) io_setup(0x400, &(0x7f0000000000)=0x0) io_submit(r1, 0x2, &(0x7f0000000080)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffdb}]) 09:24:54 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') r1 = socket$packet(0x11, 0x2, 0x300) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r3, 0x2, 0x6, @link_local}, 0x10) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x8a001, 0x0) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f00000000c0)={r5, 0x1, 0x6, @random="426808c24976"}, 0x10) fcntl$lock(r1, 0x24, &(0x7f0000000080)={0x0, 0x1, 0x5, 0x40}) fcntl$notify(r0, 0x402, 0x80000012) r7 = fork() ptrace(0x10, r7) ptrace$getsig(0x4202, r7, 0xa23, &(0x7f0000004ac0)) process_vm_readv(r7, &(0x7f0000002fc0)=[{&(0x7f0000000240)=""/166, 0xa6}, {&(0x7f0000000000)=""/28, 0x1c}, {&(0x7f0000000640)=""/18, 0x12}], 0x3, &(0x7f00000029c0)=[{&(0x7f0000000300)=""/111, 0x6f}, {&(0x7f0000000440)=""/185, 0x5a}, {&(0x7f0000000040)=""/60, 0x38}, {&(0x7f0000000540)=""/230, 0xe6}], 0x4, 0x0) getpgid(r7) 09:24:54 executing program 4: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={[{@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0x3a]}}}}]}) 09:24:54 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_secret(0x0) ftruncate(r0, 0x4) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fec000/0x14000)=nil, 0x14000, 0x2, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) 09:24:54 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create(0xe9) r2 = epoll_create(0xe9) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0x20000000}) close_range(r0, 0xffffffffffffffff, 0x0) [ 129.386382] tmpfs: Bad value for 'mpol' [ 129.390502] tmpfs: Bad value for 'mpol' [ 129.415817] ALSA: seq fatal error: cannot create timer (-22) 09:24:54 executing program 4: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={[{@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0x3a]}}}}]}) [ 129.428905] ALSA: seq fatal error: cannot create timer (-22) 09:24:54 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)={0x1c, 0x19, 0x1, 0x0, 0x0, "", [@generic="02", @nested={0x8, 0x0, 0x0, 0x1, [@typed={0x4}]}]}, 0x1c}], 0x1}, 0x0) [ 129.470891] audit: type=1400 audit(1768382694.914:11): avc: denied { block_suspend } for pid=3928 comm="syz-executor.2" capability=36 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 [ 129.482365] tmpfs: Bad value for 'mpol' 09:24:54 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r1) setgid(0x0) 09:24:54 executing program 5: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000100), 0x8) io_setup(0x400, &(0x7f0000000000)=0x0) io_submit(r1, 0x2, &(0x7f0000000080)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffdb}]) 09:24:55 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) membarrier(0x10, 0x0) membarrier(0x8, 0x0) 09:24:55 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') r1 = socket$packet(0x11, 0x2, 0x300) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r3, 0x2, 0x6, @link_local}, 0x10) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x8a001, 0x0) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f00000000c0)={r5, 0x1, 0x6, @random="426808c24976"}, 0x10) fcntl$lock(r1, 0x24, &(0x7f0000000080)={0x0, 0x1, 0x5, 0x40}) fcntl$notify(r0, 0x402, 0x80000012) r7 = fork() ptrace(0x10, r7) ptrace$getsig(0x4202, r7, 0xa23, &(0x7f0000004ac0)) process_vm_readv(r7, &(0x7f0000002fc0)=[{&(0x7f0000000240)=""/166, 0xa6}, {&(0x7f0000000000)=""/28, 0x1c}, {&(0x7f0000000640)=""/18, 0x12}], 0x3, &(0x7f00000029c0)=[{&(0x7f0000000300)=""/111, 0x6f}, {&(0x7f0000000440)=""/185, 0x5a}, {&(0x7f0000000040)=""/60, 0x38}, {&(0x7f0000000540)=""/230, 0xe6}], 0x4, 0x0) getpgid(r7) 09:24:55 executing program 4: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={[{@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0x3a]}}}}]}) 09:24:55 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_secret(0x0) ftruncate(r0, 0x4) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fec000/0x14000)=nil, 0x14000, 0x2, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) 09:24:55 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)={0x1c, 0x19, 0x1, 0x0, 0x0, "", [@generic="02", @nested={0x8, 0x0, 0x0, 0x1, [@typed={0x4}]}]}, 0x1c}], 0x1}, 0x0) 09:24:55 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/ip6_flowlabel\x00') pread64(r0, &(0x7f0000000180)=""/198, 0xc6, 0x100000000000003) [ 129.581656] tmpfs: Bad value for 'mpol' 09:24:55 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) membarrier(0x10, 0x0) membarrier(0x8, 0x0) 09:24:55 executing program 4: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={[{@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0x3a]}}}}]}) 09:24:55 executing program 5: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000100), 0x8) io_setup(0x400, &(0x7f0000000000)=0x0) io_submit(r1, 0x2, &(0x7f0000000080)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffdb}]) 09:24:55 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/ip6_flowlabel\x00') pread64(r0, &(0x7f0000000180)=""/198, 0xc6, 0x100000000000003) 09:24:55 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_secret(0x0) ftruncate(r0, 0x4) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fec000/0x14000)=nil, 0x14000, 0x2, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) 09:24:55 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7ffcfffd}]}) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[]) pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00') [ 129.691441] tmpfs: Bad value for 'mpol' [ 129.738551] audit: type=1326 audit(1768382695.176:12): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=3971 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f117f3eeb19 code=0x7ffc0000 [ 129.750633] audit: type=1326 audit(1768382695.177:13): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=3971 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f117f3edc27 code=0x7ffc0000 [ 129.760265] audit: type=1326 audit(1768382695.178:14): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=3971 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f117f3f004a code=0x7ffc0000 [ 129.774392] audit: type=1326 audit(1768382695.179:15): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=3971 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f117f3a1a04 code=0x7ffc0000 [ 129.782031] audit: type=1326 audit(1768382695.179:16): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=3971 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f117f3eeb19 code=0x7ffc0000 [ 129.784410] audit: type=1326 audit(1768382695.179:17): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=3971 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=155 compat=0 ip=0x7f117f3eeb19 code=0x7ffc0000 09:24:55 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7ffcfffd}]}) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[]) pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00') 09:24:55 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_secret(0x0) ftruncate(r0, 0x4) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fec000/0x14000)=nil, 0x14000, 0x2, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) 09:24:55 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/ip6_flowlabel\x00') pread64(r0, &(0x7f0000000180)=""/198, 0xc6, 0x100000000000003) 09:24:55 executing program 5: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000100), 0x8) io_setup(0x400, &(0x7f0000000000)=0x0) io_submit(r1, 0x2, &(0x7f0000000080)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffdb}]) 09:24:55 executing program 4: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'dummy0\x00'}) ioctl$SIOCGIFHWADDR(r0, 0x401054d5, &(0x7f00000000c0)={'veth1_virt_wifi\x00'}) 09:24:55 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@getspdinfo={0x14, 0x22, 0x1}, 0x14}}, 0x0) 09:24:55 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') r1 = socket$packet(0x11, 0x2, 0x300) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r3, 0x2, 0x6, @link_local}, 0x10) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x8a001, 0x0) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f00000000c0)={r5, 0x1, 0x6, @random="426808c24976"}, 0x10) fcntl$lock(r1, 0x24, &(0x7f0000000080)={0x0, 0x1, 0x5, 0x40}) fcntl$notify(r0, 0x402, 0x80000012) r7 = fork() ptrace(0x10, r7) ptrace$getsig(0x4202, r7, 0xa23, &(0x7f0000004ac0)) process_vm_readv(r7, &(0x7f0000002fc0)=[{&(0x7f0000000240)=""/166, 0xa6}, {&(0x7f0000000000)=""/28, 0x1c}, {&(0x7f0000000640)=""/18, 0x12}], 0x3, &(0x7f00000029c0)=[{&(0x7f0000000300)=""/111, 0x6f}, {&(0x7f0000000440)=""/185, 0x5a}, {&(0x7f0000000040)=""/60, 0x38}, {&(0x7f0000000540)=""/230, 0xe6}], 0x4, 0x0) getpgid(r7) [ 129.823346] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 09:24:55 executing program 3: r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r3 = add_key$user(&(0x7f00000001c0), &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000280)="f9", 0x1, r2) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000300)=@keyring={'key_or_keyring:', r3}) keyctl$link(0x8, r1, r2) 09:24:55 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') mknodat$null(r0, &(0x7f0000000200)='./file0\x00', 0x0, 0x103) 09:24:55 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7ffcfffd}]}) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[]) pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00') 09:24:55 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/ip6_flowlabel\x00') pread64(r0, &(0x7f0000000180)=""/198, 0xc6, 0x100000000000003) 09:24:55 executing program 3: r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r3 = add_key$user(&(0x7f00000001c0), &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000280)="f9", 0x1, r2) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000300)=@keyring={'key_or_keyring:', r3}) keyctl$link(0x8, r1, r2) 09:24:55 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0xa00000) sendfile(r0, r0, 0x0, 0x7fffffff) 09:24:55 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7ffcfffd}]}) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[]) pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00') 09:24:55 executing program 3: r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r3 = add_key$user(&(0x7f00000001c0), &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000280)="f9", 0x1, r2) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000300)=@keyring={'key_or_keyring:', r3}) keyctl$link(0x8, r1, r2) 09:24:55 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6, 0x3, {0x0, 0xfd}}]}, 0x1c}}, 0x0) 09:24:55 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x112be00) 09:24:55 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x4804, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) truncate(0x0, 0x0) 09:24:55 executing program 2: ioprio_set$pid(0x2, 0x0, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) clone3(&(0x7f0000000740)={0x2890a5180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) 09:24:55 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448c9, 0x0) 09:24:55 executing program 7: syz_mount_image$tmpfs(&(0x7f0000000cc0), &(0x7f0000000d00)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)={[{@nr_inodes={'nr_inodes', 0x3d, [0x32]}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file1\x00', 0x0) 09:24:55 executing program 3: r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r3 = add_key$user(&(0x7f00000001c0), &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000280)="f9", 0x1, r2) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000300)=@keyring={'key_or_keyring:', r3}) keyctl$link(0x8, r1, r2) 09:24:55 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x4804, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) truncate(0x0, 0x0) 09:24:55 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448c9, 0x0) 09:24:55 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x112be00) 09:24:55 executing program 7: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000000)) 09:24:55 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x4804, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) truncate(0x0, 0x0) 09:24:55 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@getpolicy={0x390, 0x15, 0x1, 0x0, 0x0, {{@in6=@private1, @in6=@empty}}, [@etimer_thresh={0x8}, @replay_val={0x10}, @policy_type={0xa}, @lifetime_val={0x24}, @coaddr={0x14, 0xe, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @sec_ctx={0x66, 0x8, {0x104, 0x8, 0x0, 0x0, 0xfc, "185afd96901e50a336bded75b0525b05449a2752afd924dc3db14383a3917f31b2c2c131273188547edb9b5a523c3d851ef71a62663899b1b55b8a20f60ae9da78cdf3dbae9242cb14f3186de2b075fad25f757a44509fb553e40db15da51185be5773003edf6226d2f4da0420c633a19808aff08daf865736a4268facd56cdf945a2095e243c69acdf002ba58748b32b420c0c77cb5aed48c42f344f115f29542ebafd129c77304d3305fd10d198bf59f7f7af026aa14fb9a6aaa221a6d764717969d4dcd294373fe28f71da1f9452329d6c26ec8872249368a13cd22518cbfa80430323bb5bc4e1b7ec8b706696d7ef1b82853de8a163745296544"}}, @sa={0xe4, 0x6, {{@in=@loopback, @in=@multicast1}, {}, @in=@multicast1}}, @sa={0xe4, 0x6, {{@in, @in=@multicast2}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, @coaddr={0x14, 0xe, @in6=@ipv4={'\x00', '\xff\xff', @remote}}]}, 0x390}}, 0x0) [ 130.273915] netlink: 636 bytes leftover after parsing attributes in process `syz-executor.0'. [ 130.281955] netlink: 636 bytes leftover after parsing attributes in process `syz-executor.0'. 09:24:55 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x112be00) 09:24:55 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0xa00000) sendfile(r0, r0, 0x0, 0x7fffffff) 09:24:55 executing program 7: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000000)) 09:24:55 executing program 2: ioprio_set$pid(0x2, 0x0, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) clone3(&(0x7f0000000740)={0x2890a5180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) 09:24:55 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'wlan1\x00', &(0x7f0000000000)=@ethtool_stats={0x28}}) 09:24:55 executing program 0: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d20202020202020202020202020202020202020202020202020202000000000000000002900000000000029000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d0020002000200020002000200020002000200020002000000000000000002900000000000029252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000011100)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef005252050181505824016d4100000000416d03000000000000030000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a0843451c0120000000000000200000000000000000ed", 0x81, 0xe000}, {&(0x7f0000011700)="22001e0000000000001e00080000000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000012200)) 09:24:55 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x4804, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) truncate(0x0, 0x0) 09:24:55 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448c9, 0x0) 09:24:55 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448c9, 0x0) 09:24:55 executing program 0: set_mempolicy(0x6, &(0x7f0000000040)=0x7, 0x5db) set_mempolicy(0x0, &(0x7f0000000000)=0x2, 0x9) set_mempolicy(0x1, &(0x7f0000000340)=0x20, 0x6) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) 09:24:56 executing program 7: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000000)) 09:24:56 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'wlan1\x00', &(0x7f0000000000)=@ethtool_stats={0x28}}) 09:24:56 executing program 5: symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') lsetxattr$system_posix_acl(&(0x7f0000000bc0)='./file0\x00', &(0x7f0000000c00)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) 09:24:56 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast1, @local, @local}, 0xc) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2a, &(0x7f0000000100)={0x2, {{0x2, 0x0, @multicast1}}}, 0x88) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000009c0)={@multicast2, @dev}, 0x10) 09:24:56 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x112be00) [ 130.658610] [ 130.658828] ===================================== [ 130.659269] WARNING: bad unlock balance detected! [ 130.659703] 6.19.0-rc5-next-20260114 #1 Not tainted [ 130.660169] ------------------------------------- [ 130.660619] syz-executor.0/4062 is trying to release lock (rcu_read_lock) at: [ 130.661916] [] __wait_on_freeing_inode+0x105/0x350 [ 130.662961] but there are no more locks to release! 09:24:56 executing program 2: ioprio_set$pid(0x2, 0x0, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) clone3(&(0x7f0000000740)={0x2890a5180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) [ 130.663763] [ 130.663763] other info that might help us debug this: [ 130.664923] 4 locks held by syz-executor.0/4062: [ 130.665689] #0: ffff88800f80c3f8 (sb_writers#3){.+.+}-{0:0}, at: filename_create+0xf7/0x400 [ 130.667463] #1: ffff888049604698 (&type->i_mutex_dir_key#3/1){+.+.}-{4:4}, at: filename_create+0x1b1/0x400 [ 130.669139] #2: ffff88800fa48950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xe32/0x12d0 [ 130.670811] #3: ffffffff85c16898 (inode_hash_lock){+.+.}-{3:3}, at: insert_inode_locked+0xf9/0x890 [ 130.672240] [ 130.672240] stack backtrace: [ 130.672612] CPU: 1 UID: 0 PID: 4062 Comm: syz-executor.0 Not tainted 6.19.0-rc5-next-20260114 #1 PREEMPT(lazy) [ 130.672630] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 130.672637] Call Trace: [ 130.672641] [ 130.672646] dump_stack_lvl+0xca/0x120 [ 130.672676] ? __wait_on_freeing_inode+0x105/0x350 [ 130.672690] print_unlock_imbalance_bug+0x118/0x130 [ 130.672705] ? __wait_on_freeing_inode+0x105/0x350 [ 130.672720] lock_release+0x1ee/0x270 [ 130.672735] __wait_on_freeing_inode+0x10a/0x350 [ 130.672750] ? __pfx___wait_on_freeing_inode+0x10/0x10 [ 130.672766] ? __pfx_var_wake_function+0x10/0x10 [ 130.672783] ? lock_is_held_type+0x9e/0x120 [ 130.672803] insert_inode_locked+0x25f/0x890 [ 130.672821] __ext4_new_inode+0x223d/0x4cd0 [ 130.672840] ? __pfx___ext4_new_inode+0x10/0x10 [ 130.672855] ? __pfx___dquot_initialize+0x10/0x10 [ 130.672873] ? __pfx_avc_has_perm+0x10/0x10 [ 130.672890] ext4_symlink+0x623/0xb40 [ 130.672910] ? __pfx_ext4_symlink+0x10/0x10 [ 130.672926] ? security_inode_permission+0x72/0xe0 [ 130.672940] vfs_symlink+0x44b/0x840 [ 130.672957] do_symlinkat+0x153/0x440 [ 130.672971] ? __pfx_do_symlinkat+0x10/0x10 [ 130.672984] ? strncpy_from_user+0x21b/0x2f0 [ 130.673003] __x64_sys_symlink+0x79/0xa0 [ 130.673016] do_syscall_64+0xbf/0x420 [ 130.673029] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.673042] RIP: 0033:0x7f117f3ee427 [ 130.673051] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 58 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 130.673062] RSP: 002b:00007ffebecf4808 EFLAGS: 00000206 ORIG_RAX: 0000000000000058 [ 130.673073] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f117f3ee427 [ 130.673080] RDX: ffffffffffffffbc RSI: 00007f117f44900e RDI: 00007f117f4481dd [ 130.673087] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007ffebecf4280 [ 130.673094] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 130.673101] R13: 0000000000000001 R14: 0000000000000001 R15: 00007ffebecf48d0 [ 130.673113] [ 130.688499] ------------[ cut here ]------------ [ 130.688926] WARNING: kernel/rcu/tree_plugin.h:443 at __rcu_read_unlock+0x25f/0x5c0, CPU#1: syz-executor.0/4062 [ 130.689826] Modules linked in: [ 130.690124] CPU: 1 UID: 0 PID: 4062 Comm: syz-executor.0 Not tainted 6.19.0-rc5-next-20260114 #1 PREEMPT(lazy) [ 130.690970] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 130.691667] RIP: 0010:__rcu_read_unlock+0x25f/0x5c0 [ 130.692139] Code: f2 02 00 00 c7 43 58 01 00 00 00 bf 09 00 00 00 e8 16 c0 de ff 4d 85 f6 0f 84 73 fe ff ff e8 38 8a 20 00 fb e9 68 fe ff ff 90 <0f> 0b 90 5b 5d 41 5c 41 5d 41 5e e9 81 24 74 03 e8 bc 5c 56 00 e9 [ 130.695317] RSP: 0018:ffff8880168379a0 EFLAGS: 00010286 [ 130.697076] RAX: 00000000ffffffff RBX: ffff88801e8e1b80 RCX: ffffffff81565a27 [ 130.697695] RDX: 0000000000000000 RSI: ffffffff81565a30 RDI: ffff88801e8e1f7c [ 130.698262] RBP: ffff88801e8e1b80 R08: 0000000000000000 R09: fffffbfff0ba6ffc [ 130.698886] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88801e8e1b80 [ 130.699458] R13: 0000000000000001 R14: ffffffff85c0c980 R15: ffff88804962bc48 [ 130.700075] FS: 000055558cdd6400(0000) GS:ffff8880e5443000(0000) knlGS:0000000000000000 [ 130.700759] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 130.701225] CR2: 000055558cdd6708 CR3: 00000000489ce000 CR4: 0000000000350ef0 [ 130.701841] Call Trace: [ 130.702087] [ 130.702787] __wait_on_freeing_inode+0x10f/0x350 [ 130.703453] ? __pfx___wait_on_freeing_inode+0x10/0x10 [ 130.704527] ? __pfx_var_wake_function+0x10/0x10 [ 130.705845] ? lock_is_held_type+0x9e/0x120 [ 130.706955] insert_inode_locked+0x25f/0x890 [ 130.708599] __ext4_new_inode+0x223d/0x4cd0 [ 130.711037] ? __pfx___ext4_new_inode+0x10/0x10 [ 130.712254] ? __pfx___dquot_initialize+0x10/0x10 [ 130.713033] ? __pfx_avc_has_perm+0x10/0x10 [ 130.714806] ext4_symlink+0x623/0xb40 [ 130.717026] ? __pfx_ext4_symlink+0x10/0x10 [ 130.718033] ? security_inode_permission+0x72/0xe0 [ 130.719671] vfs_symlink+0x44b/0x840 [ 130.720935] do_symlinkat+0x153/0x440 [ 130.722027] ? __pfx_do_symlinkat+0x10/0x10 [ 130.722762] ? strncpy_from_user+0x21b/0x2f0 [ 130.724632] __x64_sys_symlink+0x79/0xa0 [ 130.725338] do_syscall_64+0xbf/0x420 [ 130.726148] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.726715] RIP: 0033:0x7f117f3ee427 [ 130.727078] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 58 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 130.728598] RSP: 002b:00007ffebecf4808 EFLAGS: 00000206 ORIG_RAX: 0000000000000058 [ 130.729200] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f117f3ee427 [ 130.729818] RDX: ffffffffffffffbc RSI: 00007f117f44900e RDI: 00007f117f4481dd [ 130.730388] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007ffebecf4280 [ 130.731016] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 130.731629] R13: 0000000000000001 R14: 0000000000000001 R15: 00007ffebecf48d0 [ 130.734184] [ 130.734380] irq event stamp: 639 [ 130.734709] hardirqs last enabled at (639): [] irqentry_exit+0x17b/0x650 [ 130.735436] hardirqs last disabled at (637): [] handle_softirqs+0x65e/0x7d0 [ 130.736224] softirqs last enabled at (638): [] __irq_exit_rcu+0xc4/0x100 [ 130.736992] softirqs last disabled at (633): [] __irq_exit_rcu+0xc4/0x100 [ 130.737757] ---[ end trace 0000000000000000 ]--- 09:24:56 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast1, @local, @local}, 0xc) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2a, &(0x7f0000000100)={0x2, {{0x2, 0x0, @multicast1}}}, 0x88) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000009c0)={@multicast2, @dev}, 0x10) 09:24:56 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'wlan1\x00', &(0x7f0000000000)=@ethtool_stats={0x28}}) 09:24:56 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='wchan\x00') pread64(r0, &(0x7f0000000080)=""/203, 0xcb, 0x0) 09:24:56 executing program 7: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000000)) 09:24:56 executing program 2: ioprio_set$pid(0x2, 0x0, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) clone3(&(0x7f0000000740)={0x2890a5180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) 09:24:56 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0xa00000) sendfile(r0, r0, 0x0, 0x7fffffff) 09:24:56 executing program 4: fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0xc9ffff, 0x0) 09:24:56 executing program 6: syz_emit_ethernet(0x46, &(0x7f0000000080)={@link_local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x10, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}}}}}}, 0x0) 09:24:56 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'wlan1\x00', &(0x7f0000000000)=@ethtool_stats={0x28}}) 09:24:56 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='wchan\x00') pread64(r0, &(0x7f0000000080)=""/203, 0xcb, 0x0) 09:24:56 executing program 6: syz_emit_ethernet(0x46, &(0x7f0000000080)={@link_local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x10, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}}}}}}, 0x0) 09:24:56 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='wchan\x00') pread64(r0, &(0x7f0000000080)=""/203, 0xcb, 0x0) 09:24:56 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast1, @local, @local}, 0xc) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2a, &(0x7f0000000100)={0x2, {{0x2, 0x0, @multicast1}}}, 0x88) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000009c0)={@multicast2, @dev}, 0x10) 09:24:56 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='wchan\x00') pread64(r0, &(0x7f0000000080)=""/203, 0xcb, 0x0) 09:24:56 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x9, 0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000000640)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000100)="6930a1e02954b40244bb", 0x480}], 0x1, &(0x7f0000000240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x20}}], 0x1, 0x0) 09:24:56 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='wchan\x00') pread64(r0, &(0x7f0000000080)=""/203, 0xcb, 0x0) 09:24:56 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='wchan\x00') pread64(r0, &(0x7f0000000080)=""/203, 0xcb, 0x0) 09:24:56 executing program 6: syz_emit_ethernet(0x46, &(0x7f0000000080)={@link_local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x10, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}}}}}}, 0x0) 09:24:56 executing program 6: syz_emit_ethernet(0x46, &(0x7f0000000080)={@link_local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x10, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}}}}}}, 0x0) 09:24:56 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast1, @local, @local}, 0xc) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2a, &(0x7f0000000100)={0x2, {{0x2, 0x0, @multicast1}}}, 0x88) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000009c0)={@multicast2, @dev}, 0x10) 09:24:56 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0xa00000) sendfile(r0, r0, 0x0, 0x7fffffff) 09:24:56 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)={0x1c, 0x6c, 0x1, 0x0, 0x0, "", [@typed={0xa, 0x0, 0x0, 0x0, @str='wlan1\x00'}]}, 0x1c}], 0x1}, 0x0) 09:24:56 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)={0x14, 0x12, 0xffffffffffffffff, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) recvmmsg(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000002400)=[{&(0x7f0000000140)=""/28, 0x1c}, {&(0x7f0000000e80)=""/95, 0x5f}, {&(0x7f0000000200)=""/135, 0x87}, {&(0x7f00000002c0)=""/95, 0x5f}, {&(0x7f0000000e40)=""/56, 0x38}, {&(0x7f0000001400)=""/4096, 0x1000}], 0x6}}], 0x1, 0x0, 0x0) 09:24:56 executing program 6: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg(r0, &(0x7f0000001b40)=[{{&(0x7f0000001bc0)=@l2tp6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000180)='N5', 0x2}], 0x1}}], 0x1, 0x0) 09:24:56 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='wchan\x00') pread64(r0, &(0x7f0000000080)=""/203, 0xcb, 0x0) 09:24:56 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x9, 0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000000640)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000100)="6930a1e02954b40244bb", 0x480}], 0x1, &(0x7f0000000240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x20}}], 0x1, 0x0) 09:24:56 executing program 2: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001780)={[{@dots}, {@fat=@uid}]}) [ 131.283103] No source specified [ 131.288469] No source specified 09:24:56 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001a00), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001a40)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x4}, @NL802154_ATTR_CHANNEL={0x5}]}, 0x2c}}, 0x0) 09:24:56 executing program 6: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg(r0, &(0x7f0000001b40)=[{{&(0x7f0000001bc0)=@l2tp6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000180)='N5', 0x2}], 0x1}}], 0x1, 0x0) 09:24:56 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000100)="19ee32e1d34fa2e5c0442300f8793ff6b13eca7f639bdf15ef5617b13b4bad467274a933cb5aa9e15b8ac88eab9ea52a63432edf47063599bd0bd5b6bc09a6a6d808b00ac878a8e53bdde0f2b267db485d49da4b53142e1fb41ace4aa2c5ecc66f95e2d504e240ead51dd70d46a5a6d4731cc5638d0f9f4dd79d6819babfac03dadd83629c65d57cb7700bcfc90db0bf29b17f830d90dc974c4c4965b15edf01ffb5d42ac02125", 0xa7}, {&(0x7f00000001c0)}], 0x3) 09:24:56 executing program 4: r0 = syz_mount_image$tmpfs(&(0x7f0000000cc0), &(0x7f0000000d00)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)={[{@nr_inodes={'nr_inodes', 0x3d, [0x31]}}]}) mknodat$loop(r0, &(0x7f0000000080)='./file0\x00', 0x1000, 0x1) 09:24:56 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x1, 0x4, 0x201, 0x0, 0x0, {}, [@NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x24}}, 0x0) 09:24:56 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x3a, 0x1, &(0x7f0000000140), 0x4) 09:24:56 executing program 6: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg(r0, &(0x7f0000001b40)=[{{&(0x7f0000001bc0)=@l2tp6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000180)='N5', 0x2}], 0x1}}], 0x1, 0x0) 09:24:56 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x3a, 0x1, &(0x7f0000000140), 0x4) 09:24:56 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x2}, 0x40804}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) lsetxattr$security_selinux(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280), &(0x7f00000002c0)='/usr/lib/telepathy/mission-control-5\x00', 0x25, 0x0) r1 = fork() ptrace(0x10, r1) r2 = fork() ptrace(0x10, r2) ptrace$setregs(0xf, r2, 0x2, &(0x7f0000000680)="ae14ed05dea8842d9718093b066536d44809167011589f3036316e4f65a737363bb09c1950a7c5d111944da1a9a8751c778d703084d6b7e005e16312cc3245dec57f386919ea8adb27faffac3fbfd4f20ae31a1693b78dd407d1ec78f829155588f3ab7d5cfe58ff42e2d3dc17c2670a32c1bb491cfad9d6a4fcc9f513a1d4d009d1a13445ca96822c69e569b454e9f3688d8e9396c2631fd0054107276cfafa8673eac54883a2d9fc91d3343e373b4408af5bc25b22639d98dcb52f056aeb5a0feaa29a1a0775715d53bf61bb107c1fee4f6d7dfd19118b99e5b3e0c711b2ae3c8062b016dfffd2a8645e21c4d2732043") waitid(0x0, r2, &(0x7f0000000080), 0x8, 0x0) timer_create(0x3, &(0x7f0000000380)={0x0, 0x4, 0x4, @tid=r2}, &(0x7f00000003c0)) ptrace(0x4207, r2) ptrace$setregs(0xf, r1, 0x2, &(0x7f0000000680)="ae14ed05dea8842d9718093b066536d44809167011589f3036316e4f65a737363bb09c1950a7c5d111944da1a9a8751c778d703084d6b7e005e16312cc3245dec57f386919ea8adb27faffac3fbfd4f20ae31a1693b78dd407d1ec78f829155588f3ab7d5cfe58ff42e2d3dc17c2670a32c1bb491cfad9d6a4fcc9f513a1d4d009d1a13445ca96822c69e569b454e9f3688d8e9396c2631fd0054107276cfafa8673eac54883a2d9fc91d3343e373b4408af5bc25b22639d98dcb52f056aeb5a0feaa29a1a0775715d53bf61bb107c1fee4f6d7dfd19118b99e5b3e0c711b2ae3c8062b016dfffd2a8645e21c4d2732043") waitid(0x0, r1, &(0x7f0000000080), 0x8, 0x0) recvmmsg$unix(r0, &(0x7f0000000300)=[{{&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000000500)=[{&(0x7f0000000400)=""/115, 0x73}, {&(0x7f0000000200)=""/44, 0x2c}, {&(0x7f0000000480)=""/94, 0x5e}, {&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f0000001780)=""/4096, 0x1000}, {&(0x7f0000002780)=""/4096, 0x1000}], 0x6, &(0x7f0000000580)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x78}}], 0x1, 0x2, &(0x7f0000000600)={0x0, 0x3938700}) wait4(r3, &(0x7f0000000640), 0xa0000008, &(0x7f0000003780)) [ 131.535782] SELinux: Context /usr/lib/telepathy/mission-control-5 is not valid (left unmapped). 09:24:56 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x9, 0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000000640)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000100)="6930a1e02954b40244bb", 0x480}], 0x1, &(0x7f0000000240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x20}}], 0x1, 0x0) 09:24:56 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00') getdents(r0, &(0x7f00000000c0)=""/32, 0x20) 09:24:56 executing program 4: r0 = clone3(&(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000000)=""/238, 0xee, 0x0, 0x0}, 0x58) kcmp(r0, r0, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) 09:24:56 executing program 2: r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000003c0), 0x802, 0x0) pread64(r0, &(0x7f00000001c0)=""/70, 0x46, 0x7fffffffffffffff) 09:24:57 executing program 6: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg(r0, &(0x7f0000001b40)=[{{&(0x7f0000001bc0)=@l2tp6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000180)='N5', 0x2}], 0x1}}], 0x1, 0x0) 09:24:57 executing program 0: r0 = syz_io_uring_setup(0x2262, &(0x7f0000003a00), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0x1c, 0x0, r1) 09:24:57 executing program 1: io_submit(0x0, 0x1, &(0x7f0000000300)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040)="5399593869b613a522b989d472a0e52a11", 0x11}]) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0xd) 09:24:57 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x3a, 0x1, &(0x7f0000000140), 0x4) 09:24:57 executing program 6: arch_prctl$ARCH_GET_GS(0x1021, &(0x7f0000000040)) 09:24:57 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x9, 0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000000640)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000100)="6930a1e02954b40244bb", 0x480}], 0x1, &(0x7f0000000240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x20}}], 0x1, 0x0) 09:24:57 executing program 0: r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = epoll_create(0xe9) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000080)={0x20000008}) close_range(r1, 0xffffffffffffffff, 0x0) 09:24:57 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x2}, 0x40804}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) lsetxattr$security_selinux(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280), &(0x7f00000002c0)='/usr/lib/telepathy/mission-control-5\x00', 0x25, 0x0) r1 = fork() ptrace(0x10, r1) r2 = fork() ptrace(0x10, r2) ptrace$setregs(0xf, r2, 0x2, &(0x7f0000000680)="ae14ed05dea8842d9718093b066536d44809167011589f3036316e4f65a737363bb09c1950a7c5d111944da1a9a8751c778d703084d6b7e005e16312cc3245dec57f386919ea8adb27faffac3fbfd4f20ae31a1693b78dd407d1ec78f829155588f3ab7d5cfe58ff42e2d3dc17c2670a32c1bb491cfad9d6a4fcc9f513a1d4d009d1a13445ca96822c69e569b454e9f3688d8e9396c2631fd0054107276cfafa8673eac54883a2d9fc91d3343e373b4408af5bc25b22639d98dcb52f056aeb5a0feaa29a1a0775715d53bf61bb107c1fee4f6d7dfd19118b99e5b3e0c711b2ae3c8062b016dfffd2a8645e21c4d2732043") waitid(0x0, r2, &(0x7f0000000080), 0x8, 0x0) timer_create(0x3, &(0x7f0000000380)={0x0, 0x4, 0x4, @tid=r2}, &(0x7f00000003c0)) ptrace(0x4207, r2) ptrace$setregs(0xf, r1, 0x2, &(0x7f0000000680)="ae14ed05dea8842d9718093b066536d44809167011589f3036316e4f65a737363bb09c1950a7c5d111944da1a9a8751c778d703084d6b7e005e16312cc3245dec57f386919ea8adb27faffac3fbfd4f20ae31a1693b78dd407d1ec78f829155588f3ab7d5cfe58ff42e2d3dc17c2670a32c1bb491cfad9d6a4fcc9f513a1d4d009d1a13445ca96822c69e569b454e9f3688d8e9396c2631fd0054107276cfafa8673eac54883a2d9fc91d3343e373b4408af5bc25b22639d98dcb52f056aeb5a0feaa29a1a0775715d53bf61bb107c1fee4f6d7dfd19118b99e5b3e0c711b2ae3c8062b016dfffd2a8645e21c4d2732043") waitid(0x0, r1, &(0x7f0000000080), 0x8, 0x0) recvmmsg$unix(r0, &(0x7f0000000300)=[{{&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000000500)=[{&(0x7f0000000400)=""/115, 0x73}, {&(0x7f0000000200)=""/44, 0x2c}, {&(0x7f0000000480)=""/94, 0x5e}, {&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f0000001780)=""/4096, 0x1000}, {&(0x7f0000002780)=""/4096, 0x1000}], 0x6, &(0x7f0000000580)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x78}}], 0x1, 0x2, &(0x7f0000000600)={0x0, 0x3938700}) wait4(r3, &(0x7f0000000640), 0xa0000008, &(0x7f0000003780)) [ 132.516152] tmpfs: Bad value for 'mpol' [ 132.518524] tmpfs: Bad value for 'mpol' 09:24:57 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000200), &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@mpol={'mpol', 0x3d, {'bind', '=relative', @void}}}]}) 09:24:57 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x3a, 0x1, &(0x7f0000000140), 0x4) 09:24:57 executing program 4: r0 = clone3(&(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000000)=""/238, 0xee, 0x0, 0x0}, 0x58) kcmp(r0, r0, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) 09:24:57 executing program 7: r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = epoll_create(0xe9) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000080)={0x20000008}) close_range(r1, 0xffffffffffffffff, 0x0) 09:24:57 executing program 0: r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = epoll_create(0xe9) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000080)={0x20000008}) close_range(r1, 0xffffffffffffffff, 0x0) 09:24:57 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x2}, 0x40804}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) lsetxattr$security_selinux(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280), &(0x7f00000002c0)='/usr/lib/telepathy/mission-control-5\x00', 0x25, 0x0) r1 = fork() ptrace(0x10, r1) r2 = fork() ptrace(0x10, r2) ptrace$setregs(0xf, r2, 0x2, &(0x7f0000000680)="ae14ed05dea8842d9718093b066536d44809167011589f3036316e4f65a737363bb09c1950a7c5d111944da1a9a8751c778d703084d6b7e005e16312cc3245dec57f386919ea8adb27faffac3fbfd4f20ae31a1693b78dd407d1ec78f829155588f3ab7d5cfe58ff42e2d3dc17c2670a32c1bb491cfad9d6a4fcc9f513a1d4d009d1a13445ca96822c69e569b454e9f3688d8e9396c2631fd0054107276cfafa8673eac54883a2d9fc91d3343e373b4408af5bc25b22639d98dcb52f056aeb5a0feaa29a1a0775715d53bf61bb107c1fee4f6d7dfd19118b99e5b3e0c711b2ae3c8062b016dfffd2a8645e21c4d2732043") waitid(0x0, r2, &(0x7f0000000080), 0x8, 0x0) timer_create(0x3, &(0x7f0000000380)={0x0, 0x4, 0x4, @tid=r2}, &(0x7f00000003c0)) ptrace(0x4207, r2) ptrace$setregs(0xf, r1, 0x2, &(0x7f0000000680)="ae14ed05dea8842d9718093b066536d44809167011589f3036316e4f65a737363bb09c1950a7c5d111944da1a9a8751c778d703084d6b7e005e16312cc3245dec57f386919ea8adb27faffac3fbfd4f20ae31a1693b78dd407d1ec78f829155588f3ab7d5cfe58ff42e2d3dc17c2670a32c1bb491cfad9d6a4fcc9f513a1d4d009d1a13445ca96822c69e569b454e9f3688d8e9396c2631fd0054107276cfafa8673eac54883a2d9fc91d3343e373b4408af5bc25b22639d98dcb52f056aeb5a0feaa29a1a0775715d53bf61bb107c1fee4f6d7dfd19118b99e5b3e0c711b2ae3c8062b016dfffd2a8645e21c4d2732043") waitid(0x0, r1, &(0x7f0000000080), 0x8, 0x0) recvmmsg$unix(r0, &(0x7f0000000300)=[{{&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000000500)=[{&(0x7f0000000400)=""/115, 0x73}, {&(0x7f0000000200)=""/44, 0x2c}, {&(0x7f0000000480)=""/94, 0x5e}, {&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f0000001780)=""/4096, 0x1000}, {&(0x7f0000002780)=""/4096, 0x1000}], 0x6, &(0x7f0000000580)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x78}}], 0x1, 0x2, &(0x7f0000000600)={0x0, 0x3938700}) wait4(r3, &(0x7f0000000640), 0xa0000008, &(0x7f0000003780)) 09:24:57 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TIOCGSID(r0, 0x5429, 0x0) 09:24:58 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x2}, 0x40804}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) lsetxattr$security_selinux(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280), &(0x7f00000002c0)='/usr/lib/telepathy/mission-control-5\x00', 0x25, 0x0) r1 = fork() ptrace(0x10, r1) r2 = fork() ptrace(0x10, r2) ptrace$setregs(0xf, r2, 0x2, &(0x7f0000000680)="ae14ed05dea8842d9718093b066536d44809167011589f3036316e4f65a737363bb09c1950a7c5d111944da1a9a8751c778d703084d6b7e005e16312cc3245dec57f386919ea8adb27faffac3fbfd4f20ae31a1693b78dd407d1ec78f829155588f3ab7d5cfe58ff42e2d3dc17c2670a32c1bb491cfad9d6a4fcc9f513a1d4d009d1a13445ca96822c69e569b454e9f3688d8e9396c2631fd0054107276cfafa8673eac54883a2d9fc91d3343e373b4408af5bc25b22639d98dcb52f056aeb5a0feaa29a1a0775715d53bf61bb107c1fee4f6d7dfd19118b99e5b3e0c711b2ae3c8062b016dfffd2a8645e21c4d2732043") waitid(0x0, r2, &(0x7f0000000080), 0x8, 0x0) timer_create(0x3, &(0x7f0000000380)={0x0, 0x4, 0x4, @tid=r2}, &(0x7f00000003c0)) ptrace(0x4207, r2) ptrace$setregs(0xf, r1, 0x2, &(0x7f0000000680)="ae14ed05dea8842d9718093b066536d44809167011589f3036316e4f65a737363bb09c1950a7c5d111944da1a9a8751c778d703084d6b7e005e16312cc3245dec57f386919ea8adb27faffac3fbfd4f20ae31a1693b78dd407d1ec78f829155588f3ab7d5cfe58ff42e2d3dc17c2670a32c1bb491cfad9d6a4fcc9f513a1d4d009d1a13445ca96822c69e569b454e9f3688d8e9396c2631fd0054107276cfafa8673eac54883a2d9fc91d3343e373b4408af5bc25b22639d98dcb52f056aeb5a0feaa29a1a0775715d53bf61bb107c1fee4f6d7dfd19118b99e5b3e0c711b2ae3c8062b016dfffd2a8645e21c4d2732043") waitid(0x0, r1, &(0x7f0000000080), 0x8, 0x0) recvmmsg$unix(r0, &(0x7f0000000300)=[{{&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000000500)=[{&(0x7f0000000400)=""/115, 0x73}, {&(0x7f0000000200)=""/44, 0x2c}, {&(0x7f0000000480)=""/94, 0x5e}, {&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f0000001780)=""/4096, 0x1000}, {&(0x7f0000002780)=""/4096, 0x1000}], 0x6, &(0x7f0000000580)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x78}}], 0x1, 0x2, &(0x7f0000000600)={0x0, 0x3938700}) wait4(r3, &(0x7f0000000640), 0xa0000008, &(0x7f0000003780)) 09:24:58 executing program 4: r0 = clone3(&(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000000)=""/238, 0xee, 0x0, 0x0}, 0x58) kcmp(r0, r0, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) 09:24:58 executing program 3: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSTAT(r1, &(0x7f0000000300)=ANY=[], 0xffd3) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f000001a080)=[{&(0x7f0000001080)=""/102400, 0x19000}], 0x1) 09:24:58 executing program 7: r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = epoll_create(0xe9) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000080)={0x20000008}) close_range(r1, 0xffffffffffffffff, 0x0) 09:24:58 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TIOCGSID(r0, 0x5429, 0x0) 09:24:58 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TIOCGSID(r0, 0x5429, 0x0) 09:24:58 executing program 0: r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = epoll_create(0xe9) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000080)={0x20000008}) close_range(r1, 0xffffffffffffffff, 0x0) 09:24:58 executing program 4: r0 = clone3(&(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000000)=""/238, 0xee, 0x0, 0x0}, 0x58) kcmp(r0, r0, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) 09:24:58 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TIOCGSID(r0, 0x5429, 0x0) 09:24:58 executing program 7: r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = epoll_create(0xe9) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000080)={0x20000008}) close_range(r1, 0xffffffffffffffff, 0x0) 09:24:58 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TIOCGSID(r0, 0x5429, 0x0) 09:24:58 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x2}, 0x40804}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) lsetxattr$security_selinux(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280), &(0x7f00000002c0)='/usr/lib/telepathy/mission-control-5\x00', 0x25, 0x0) r1 = fork() ptrace(0x10, r1) r2 = fork() ptrace(0x10, r2) ptrace$setregs(0xf, r2, 0x2, &(0x7f0000000680)="ae14ed05dea8842d9718093b066536d44809167011589f3036316e4f65a737363bb09c1950a7c5d111944da1a9a8751c778d703084d6b7e005e16312cc3245dec57f386919ea8adb27faffac3fbfd4f20ae31a1693b78dd407d1ec78f829155588f3ab7d5cfe58ff42e2d3dc17c2670a32c1bb491cfad9d6a4fcc9f513a1d4d009d1a13445ca96822c69e569b454e9f3688d8e9396c2631fd0054107276cfafa8673eac54883a2d9fc91d3343e373b4408af5bc25b22639d98dcb52f056aeb5a0feaa29a1a0775715d53bf61bb107c1fee4f6d7dfd19118b99e5b3e0c711b2ae3c8062b016dfffd2a8645e21c4d2732043") waitid(0x0, r2, &(0x7f0000000080), 0x8, 0x0) timer_create(0x3, &(0x7f0000000380)={0x0, 0x4, 0x4, @tid=r2}, &(0x7f00000003c0)) ptrace(0x4207, r2) ptrace$setregs(0xf, r1, 0x2, &(0x7f0000000680)="ae14ed05dea8842d9718093b066536d44809167011589f3036316e4f65a737363bb09c1950a7c5d111944da1a9a8751c778d703084d6b7e005e16312cc3245dec57f386919ea8adb27faffac3fbfd4f20ae31a1693b78dd407d1ec78f829155588f3ab7d5cfe58ff42e2d3dc17c2670a32c1bb491cfad9d6a4fcc9f513a1d4d009d1a13445ca96822c69e569b454e9f3688d8e9396c2631fd0054107276cfafa8673eac54883a2d9fc91d3343e373b4408af5bc25b22639d98dcb52f056aeb5a0feaa29a1a0775715d53bf61bb107c1fee4f6d7dfd19118b99e5b3e0c711b2ae3c8062b016dfffd2a8645e21c4d2732043") waitid(0x0, r1, &(0x7f0000000080), 0x8, 0x0) recvmmsg$unix(r0, &(0x7f0000000300)=[{{&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000000500)=[{&(0x7f0000000400)=""/115, 0x73}, {&(0x7f0000000200)=""/44, 0x2c}, {&(0x7f0000000480)=""/94, 0x5e}, {&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f0000001780)=""/4096, 0x1000}, {&(0x7f0000002780)=""/4096, 0x1000}], 0x6, &(0x7f0000000580)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x78}}], 0x1, 0x2, &(0x7f0000000600)={0x0, 0x3938700}) wait4(r3, &(0x7f0000000640), 0xa0000008, &(0x7f0000003780)) 09:24:58 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00') getdents64(r0, &(0x7f0000001380)=""/4104, 0x1008) 09:24:58 executing program 0: r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = epoll_create(0xe9) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000080)={0x20000008}) close_range(r1, 0xffffffffffffffff, 0x0) 09:24:58 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x2}, 0x40804}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) lsetxattr$security_selinux(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280), &(0x7f00000002c0)='/usr/lib/telepathy/mission-control-5\x00', 0x25, 0x0) r1 = fork() ptrace(0x10, r1) r2 = fork() ptrace(0x10, r2) ptrace$setregs(0xf, r2, 0x2, &(0x7f0000000680)="ae14ed05dea8842d9718093b066536d44809167011589f3036316e4f65a737363bb09c1950a7c5d111944da1a9a8751c778d703084d6b7e005e16312cc3245dec57f386919ea8adb27faffac3fbfd4f20ae31a1693b78dd407d1ec78f829155588f3ab7d5cfe58ff42e2d3dc17c2670a32c1bb491cfad9d6a4fcc9f513a1d4d009d1a13445ca96822c69e569b454e9f3688d8e9396c2631fd0054107276cfafa8673eac54883a2d9fc91d3343e373b4408af5bc25b22639d98dcb52f056aeb5a0feaa29a1a0775715d53bf61bb107c1fee4f6d7dfd19118b99e5b3e0c711b2ae3c8062b016dfffd2a8645e21c4d2732043") waitid(0x0, r2, &(0x7f0000000080), 0x8, 0x0) timer_create(0x3, &(0x7f0000000380)={0x0, 0x4, 0x4, @tid=r2}, &(0x7f00000003c0)) ptrace(0x4207, r2) ptrace$setregs(0xf, r1, 0x2, &(0x7f0000000680)="ae14ed05dea8842d9718093b066536d44809167011589f3036316e4f65a737363bb09c1950a7c5d111944da1a9a8751c778d703084d6b7e005e16312cc3245dec57f386919ea8adb27faffac3fbfd4f20ae31a1693b78dd407d1ec78f829155588f3ab7d5cfe58ff42e2d3dc17c2670a32c1bb491cfad9d6a4fcc9f513a1d4d009d1a13445ca96822c69e569b454e9f3688d8e9396c2631fd0054107276cfafa8673eac54883a2d9fc91d3343e373b4408af5bc25b22639d98dcb52f056aeb5a0feaa29a1a0775715d53bf61bb107c1fee4f6d7dfd19118b99e5b3e0c711b2ae3c8062b016dfffd2a8645e21c4d2732043") waitid(0x0, r1, &(0x7f0000000080), 0x8, 0x0) recvmmsg$unix(r0, &(0x7f0000000300)=[{{&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000000500)=[{&(0x7f0000000400)=""/115, 0x73}, {&(0x7f0000000200)=""/44, 0x2c}, {&(0x7f0000000480)=""/94, 0x5e}, {&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f0000001780)=""/4096, 0x1000}, {&(0x7f0000002780)=""/4096, 0x1000}], 0x6, &(0x7f0000000580)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x78}}], 0x1, 0x2, &(0x7f0000000600)={0x0, 0x3938700}) wait4(r3, &(0x7f0000000640), 0xa0000008, &(0x7f0000003780)) 09:24:58 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x2}, 0x40804}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) lsetxattr$security_selinux(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280), &(0x7f00000002c0)='/usr/lib/telepathy/mission-control-5\x00', 0x25, 0x0) r1 = fork() ptrace(0x10, r1) r2 = fork() ptrace(0x10, r2) ptrace$setregs(0xf, r2, 0x2, &(0x7f0000000680)="ae14ed05dea8842d9718093b066536d44809167011589f3036316e4f65a737363bb09c1950a7c5d111944da1a9a8751c778d703084d6b7e005e16312cc3245dec57f386919ea8adb27faffac3fbfd4f20ae31a1693b78dd407d1ec78f829155588f3ab7d5cfe58ff42e2d3dc17c2670a32c1bb491cfad9d6a4fcc9f513a1d4d009d1a13445ca96822c69e569b454e9f3688d8e9396c2631fd0054107276cfafa8673eac54883a2d9fc91d3343e373b4408af5bc25b22639d98dcb52f056aeb5a0feaa29a1a0775715d53bf61bb107c1fee4f6d7dfd19118b99e5b3e0c711b2ae3c8062b016dfffd2a8645e21c4d2732043") waitid(0x0, r2, &(0x7f0000000080), 0x8, 0x0) timer_create(0x3, &(0x7f0000000380)={0x0, 0x4, 0x4, @tid=r2}, &(0x7f00000003c0)) ptrace(0x4207, r2) ptrace$setregs(0xf, r1, 0x2, &(0x7f0000000680)="ae14ed05dea8842d9718093b066536d44809167011589f3036316e4f65a737363bb09c1950a7c5d111944da1a9a8751c778d703084d6b7e005e16312cc3245dec57f386919ea8adb27faffac3fbfd4f20ae31a1693b78dd407d1ec78f829155588f3ab7d5cfe58ff42e2d3dc17c2670a32c1bb491cfad9d6a4fcc9f513a1d4d009d1a13445ca96822c69e569b454e9f3688d8e9396c2631fd0054107276cfafa8673eac54883a2d9fc91d3343e373b4408af5bc25b22639d98dcb52f056aeb5a0feaa29a1a0775715d53bf61bb107c1fee4f6d7dfd19118b99e5b3e0c711b2ae3c8062b016dfffd2a8645e21c4d2732043") waitid(0x0, r1, &(0x7f0000000080), 0x8, 0x0) recvmmsg$unix(r0, &(0x7f0000000300)=[{{&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000000500)=[{&(0x7f0000000400)=""/115, 0x73}, {&(0x7f0000000200)=""/44, 0x2c}, {&(0x7f0000000480)=""/94, 0x5e}, {&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f0000001780)=""/4096, 0x1000}, {&(0x7f0000002780)=""/4096, 0x1000}], 0x6, &(0x7f0000000580)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x78}}], 0x1, 0x2, &(0x7f0000000600)={0x0, 0x3938700}) wait4(r3, &(0x7f0000000640), 0xa0000008, &(0x7f0000003780)) 09:24:59 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TIOCGSID(r0, 0x5429, 0x0) 09:24:59 executing program 4: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x4840, 0x0) sendfile(r0, r1, &(0x7f0000000100)=0x100000000, 0x7) 09:24:59 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TIOCGSID(r0, 0x5429, 0x0) 09:24:59 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x0) ioctl$EVIOCGREP(r0, 0x80084504, &(0x7f0000000340)=""/29) 09:24:59 executing program 7: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000080), 0x8) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f00000001c0), 0x2) 09:24:59 executing program 4: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) 09:24:59 executing program 3: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000100)) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_ext_features={{0x23, 0xd}, {0x0, 0x0, 0x0, 0x0, "7dda99f08374815b"}}}, 0xd) 09:24:59 executing program 0: r0 = fsopen(&(0x7f0000000000)='9p\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x8, 0x0, 0x0, 0x0) [ 133.922701] Bluetooth: hci5: unexpected event 0x23 length: 10 < 13 [ 133.923910] Bluetooth: hci5: unexpected event 0x23 length: 10 < 13 09:24:59 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x2}, 0x40804}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) lsetxattr$security_selinux(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280), &(0x7f00000002c0)='/usr/lib/telepathy/mission-control-5\x00', 0x25, 0x0) r1 = fork() ptrace(0x10, r1) r2 = fork() ptrace(0x10, r2) ptrace$setregs(0xf, r2, 0x2, &(0x7f0000000680)="ae14ed05dea8842d9718093b066536d44809167011589f3036316e4f65a737363bb09c1950a7c5d111944da1a9a8751c778d703084d6b7e005e16312cc3245dec57f386919ea8adb27faffac3fbfd4f20ae31a1693b78dd407d1ec78f829155588f3ab7d5cfe58ff42e2d3dc17c2670a32c1bb491cfad9d6a4fcc9f513a1d4d009d1a13445ca96822c69e569b454e9f3688d8e9396c2631fd0054107276cfafa8673eac54883a2d9fc91d3343e373b4408af5bc25b22639d98dcb52f056aeb5a0feaa29a1a0775715d53bf61bb107c1fee4f6d7dfd19118b99e5b3e0c711b2ae3c8062b016dfffd2a8645e21c4d2732043") waitid(0x0, r2, &(0x7f0000000080), 0x8, 0x0) timer_create(0x3, &(0x7f0000000380)={0x0, 0x4, 0x4, @tid=r2}, &(0x7f00000003c0)) ptrace(0x4207, r2) ptrace$setregs(0xf, r1, 0x2, &(0x7f0000000680)="ae14ed05dea8842d9718093b066536d44809167011589f3036316e4f65a737363bb09c1950a7c5d111944da1a9a8751c778d703084d6b7e005e16312cc3245dec57f386919ea8adb27faffac3fbfd4f20ae31a1693b78dd407d1ec78f829155588f3ab7d5cfe58ff42e2d3dc17c2670a32c1bb491cfad9d6a4fcc9f513a1d4d009d1a13445ca96822c69e569b454e9f3688d8e9396c2631fd0054107276cfafa8673eac54883a2d9fc91d3343e373b4408af5bc25b22639d98dcb52f056aeb5a0feaa29a1a0775715d53bf61bb107c1fee4f6d7dfd19118b99e5b3e0c711b2ae3c8062b016dfffd2a8645e21c4d2732043") waitid(0x0, r1, &(0x7f0000000080), 0x8, 0x0) recvmmsg$unix(r0, &(0x7f0000000300)=[{{&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000000500)=[{&(0x7f0000000400)=""/115, 0x73}, {&(0x7f0000000200)=""/44, 0x2c}, {&(0x7f0000000480)=""/94, 0x5e}, {&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f0000001780)=""/4096, 0x1000}, {&(0x7f0000002780)=""/4096, 0x1000}], 0x6, &(0x7f0000000580)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x78}}], 0x1, 0x2, &(0x7f0000000600)={0x0, 0x3938700}) wait4(r3, &(0x7f0000000640), 0xa0000008, &(0x7f0000003780)) 09:24:59 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x2}, 0x40804}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) lsetxattr$security_selinux(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280), &(0x7f00000002c0)='/usr/lib/telepathy/mission-control-5\x00', 0x25, 0x0) r1 = fork() ptrace(0x10, r1) r2 = fork() ptrace(0x10, r2) ptrace$setregs(0xf, r2, 0x2, &(0x7f0000000680)="ae14ed05dea8842d9718093b066536d44809167011589f3036316e4f65a737363bb09c1950a7c5d111944da1a9a8751c778d703084d6b7e005e16312cc3245dec57f386919ea8adb27faffac3fbfd4f20ae31a1693b78dd407d1ec78f829155588f3ab7d5cfe58ff42e2d3dc17c2670a32c1bb491cfad9d6a4fcc9f513a1d4d009d1a13445ca96822c69e569b454e9f3688d8e9396c2631fd0054107276cfafa8673eac54883a2d9fc91d3343e373b4408af5bc25b22639d98dcb52f056aeb5a0feaa29a1a0775715d53bf61bb107c1fee4f6d7dfd19118b99e5b3e0c711b2ae3c8062b016dfffd2a8645e21c4d2732043") waitid(0x0, r2, &(0x7f0000000080), 0x8, 0x0) timer_create(0x3, &(0x7f0000000380)={0x0, 0x4, 0x4, @tid=r2}, &(0x7f00000003c0)) ptrace(0x4207, r2) ptrace$setregs(0xf, r1, 0x2, &(0x7f0000000680)="ae14ed05dea8842d9718093b066536d44809167011589f3036316e4f65a737363bb09c1950a7c5d111944da1a9a8751c778d703084d6b7e005e16312cc3245dec57f386919ea8adb27faffac3fbfd4f20ae31a1693b78dd407d1ec78f829155588f3ab7d5cfe58ff42e2d3dc17c2670a32c1bb491cfad9d6a4fcc9f513a1d4d009d1a13445ca96822c69e569b454e9f3688d8e9396c2631fd0054107276cfafa8673eac54883a2d9fc91d3343e373b4408af5bc25b22639d98dcb52f056aeb5a0feaa29a1a0775715d53bf61bb107c1fee4f6d7dfd19118b99e5b3e0c711b2ae3c8062b016dfffd2a8645e21c4d2732043") waitid(0x0, r1, &(0x7f0000000080), 0x8, 0x0) recvmmsg$unix(r0, &(0x7f0000000300)=[{{&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000000500)=[{&(0x7f0000000400)=""/115, 0x73}, {&(0x7f0000000200)=""/44, 0x2c}, {&(0x7f0000000480)=""/94, 0x5e}, {&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f0000001780)=""/4096, 0x1000}, {&(0x7f0000002780)=""/4096, 0x1000}], 0x6, &(0x7f0000000580)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x78}}], 0x1, 0x2, &(0x7f0000000600)={0x0, 0x3938700}) wait4(r3, &(0x7f0000000640), 0xa0000008, &(0x7f0000003780)) 09:24:59 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x2}, 0x40804}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) lsetxattr$security_selinux(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280), &(0x7f00000002c0)='/usr/lib/telepathy/mission-control-5\x00', 0x25, 0x0) r1 = fork() ptrace(0x10, r1) r2 = fork() ptrace(0x10, r2) ptrace$setregs(0xf, r2, 0x2, &(0x7f0000000680)="ae14ed05dea8842d9718093b066536d44809167011589f3036316e4f65a737363bb09c1950a7c5d111944da1a9a8751c778d703084d6b7e005e16312cc3245dec57f386919ea8adb27faffac3fbfd4f20ae31a1693b78dd407d1ec78f829155588f3ab7d5cfe58ff42e2d3dc17c2670a32c1bb491cfad9d6a4fcc9f513a1d4d009d1a13445ca96822c69e569b454e9f3688d8e9396c2631fd0054107276cfafa8673eac54883a2d9fc91d3343e373b4408af5bc25b22639d98dcb52f056aeb5a0feaa29a1a0775715d53bf61bb107c1fee4f6d7dfd19118b99e5b3e0c711b2ae3c8062b016dfffd2a8645e21c4d2732043") waitid(0x0, r2, &(0x7f0000000080), 0x8, 0x0) timer_create(0x3, &(0x7f0000000380)={0x0, 0x4, 0x4, @tid=r2}, &(0x7f00000003c0)) ptrace(0x4207, r2) ptrace$setregs(0xf, r1, 0x2, &(0x7f0000000680)="ae14ed05dea8842d9718093b066536d44809167011589f3036316e4f65a737363bb09c1950a7c5d111944da1a9a8751c778d703084d6b7e005e16312cc3245dec57f386919ea8adb27faffac3fbfd4f20ae31a1693b78dd407d1ec78f829155588f3ab7d5cfe58ff42e2d3dc17c2670a32c1bb491cfad9d6a4fcc9f513a1d4d009d1a13445ca96822c69e569b454e9f3688d8e9396c2631fd0054107276cfafa8673eac54883a2d9fc91d3343e373b4408af5bc25b22639d98dcb52f056aeb5a0feaa29a1a0775715d53bf61bb107c1fee4f6d7dfd19118b99e5b3e0c711b2ae3c8062b016dfffd2a8645e21c4d2732043") waitid(0x0, r1, &(0x7f0000000080), 0x8, 0x0) recvmmsg$unix(r0, &(0x7f0000000300)=[{{&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000000500)=[{&(0x7f0000000400)=""/115, 0x73}, {&(0x7f0000000200)=""/44, 0x2c}, {&(0x7f0000000480)=""/94, 0x5e}, {&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f0000001780)=""/4096, 0x1000}, {&(0x7f0000002780)=""/4096, 0x1000}], 0x6, &(0x7f0000000580)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x78}}], 0x1, 0x2, &(0x7f0000000600)={0x0, 0x3938700}) wait4(r3, &(0x7f0000000640), 0xa0000008, &(0x7f0000003780)) 09:24:59 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, 0x0, 0x0) 09:24:59 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = semget$private(0x0, 0x5, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) 09:24:59 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x141802, 0x0) ioctl$CDROM_LOCKDOOR(r0, 0x127c, 0xf0ff1f00000000) 09:24:59 executing program 0: prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x40000000000}, 0x0) 09:24:59 executing program 4: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) 09:24:59 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_vif\x00') pread64(r0, &(0x7f0000000480)=""/134, 0x86, 0x9) 09:24:59 executing program 3: perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:25:00 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8953, &(0x7f0000000100)={{0x2, 0x0, @private}, {}, 0x2c, {0x2, 0x0, @empty}}) 09:25:00 executing program 3: perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:25:00 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='cgroup2\x00', 0x0, 0x0) chroot(&(0x7f0000000140)='./file0\x00') umount2(&(0x7f0000000180)='./file0\x00', 0x2) pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='./file0\x00') 09:25:00 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x141802, 0x0) ioctl$CDROM_LOCKDOOR(r0, 0x127c, 0xf0ff1f00000000) 09:25:00 executing program 3: perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 134.748624] syz-executor.4 (4302) used greatest stack depth: 24200 bytes left 09:25:00 executing program 4: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) 09:25:00 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x141802, 0x0) ioctl$CDROM_LOCKDOOR(r0, 0x127c, 0xf0ff1f00000000) 09:25:00 executing program 4: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) 09:25:00 executing program 5: rseq(&(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}, 0xffffffffffffff85, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x1) 09:25:00 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xbbf, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x9, 0xff, 0x1, 0x8, 0x0, 0x6, 0x32210, 0xf, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1, @perf_bp={&(0x7f00000001c0)}, 0x4000, 0x6, 0x3f, 0x0, 0x7, 0x1, 0x5, 0x0, 0x1, 0x0, 0x7fff}, 0xffffffffffffffff, 0x8, r0, 0x2) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup(r1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, 0x12, r2, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r3, 0x0, &(0x7f0000000000), 0x0, 0x4) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2, &(0x7f00000000c0)={0x3, &(0x7f0000000040)=[{0x2, 0xac, 0x8, 0xc1}, {0x800, 0x0, 0x6, 0x80000}, {0x0, 0x7, 0x7, 0x7}]}) r5 = syz_io_uring_setup(0x2262, &(0x7f0000003a00), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) memfd_create(&(0x7f0000000140)='/dev/sg#\x00', 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000002c0)={0x6, &(0x7f0000000280)=[{0x7, 0x8, 0x8, 0x9}, {0x4, 0x1, 0x4, 0x1f7}, {0x5, 0x7, 0x40, 0x20}, {0x17f8, 0x4, 0x0, 0x2}, {0x7, 0x0, 0x0, 0x8}, {0xb0, 0x1c, 0x20, 0x400}]}) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0x5, 0x0, r6) syz_io_uring_submit(r3, 0x0, &(0x7f0000000100)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd=r4, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r6}}, 0x52) r7 = socket$inet6(0xa, 0x80000, 0x81) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'geneve1\x00'}) 09:25:00 executing program 6: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) r2 = getpid() kcmp(r2, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x90000, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x4, 0x6, 0x9, 0x6, 0x0, 0x3, 0x5040e, 0xa, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7fff, 0x2, @perf_bp={&(0x7f0000000080), 0x1}, 0x10200, 0x100000001, 0x2, 0x9, 0x1, 0x200, 0x5, 0x0, 0x5, 0x0, 0x1f}, r2, 0x9, r3, 0x0) close_range(r0, r1, 0x2) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) listen(r4, 0x0) 09:25:00 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MLSLVLLST={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x3}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}}, 0x0) 09:25:00 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8953, &(0x7f0000000100)={{0x2, 0x0, @private}, {}, 0x2c, {0x2, 0x0, @empty}}) 09:25:00 executing program 3: perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:25:00 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8953, &(0x7f0000000100)={{0x2, 0x0, @private}, {}, 0x2c, {0x2, 0x0, @empty}}) 09:25:00 executing program 6: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) r2 = getpid() kcmp(r2, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x90000, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x4, 0x6, 0x9, 0x6, 0x0, 0x3, 0x5040e, 0xa, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7fff, 0x2, @perf_bp={&(0x7f0000000080), 0x1}, 0x10200, 0x100000001, 0x2, 0x9, 0x1, 0x200, 0x5, 0x0, 0x5, 0x0, 0x1f}, r2, 0x9, r3, 0x0) close_range(r0, r1, 0x2) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) listen(r4, 0x0) 09:25:00 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x30, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc, 0x99, {0x1}}}}}, 0x30}}, 0x0) 09:25:00 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x141802, 0x0) ioctl$CDROM_LOCKDOOR(r0, 0x127c, 0xf0ff1f00000000) 09:25:00 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8953, &(0x7f0000000100)={{0x2, 0x0, @private}, {}, 0x2c, {0x2, 0x0, @empty}}) 09:25:01 executing program 5: rseq(&(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}, 0xffffffffffffff85, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x1) 09:25:01 executing program 2: rseq(&(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}, 0xffffffffffffff85, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x1) 09:25:01 executing program 0: keyctl$unlink(0x9, 0x0, 0xfffffffffffffffe) 09:25:01 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000240)=0x6) 09:25:01 executing program 6: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) r2 = getpid() kcmp(r2, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x90000, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x4, 0x6, 0x9, 0x6, 0x0, 0x3, 0x5040e, 0xa, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7fff, 0x2, @perf_bp={&(0x7f0000000080), 0x1}, 0x10200, 0x100000001, 0x2, 0x9, 0x1, 0x200, 0x5, 0x0, 0x5, 0x0, 0x1f}, r2, 0x9, r3, 0x0) close_range(r0, r1, 0x2) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) listen(r4, 0x0) 09:25:01 executing program 1: ppoll(0x0, 0x36, 0x0, 0x0, 0x36) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x49, &(0x7f0000000080)=0x68bbd9b0592ebacf, 0x4) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000000)) 09:25:01 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000001c0)={0x28, 0x21, 0x1, 0x0, 0x0, "", [@nested={0x2, 0x0, 0x0, 0x1, [@typed={0xfd, 0x25f, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}]}, 0x28}], 0x1}, 0x0) 09:25:01 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x33, &(0x7f0000000340)=[{&(0x7f0000000080)={0x24, 0x1c, 0x1, 0x0, 0x0, "", [@nested={0x2, 0x0, 0x0, 0x1, [@typed={0x2, 0x0, 0x0, 0x0, @fd=r1}, @typed={0x8, 0x1, 0x0, 0x0, @fd}]}]}, 0x24}], 0x1}, 0x0) [ 135.833860] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 09:25:01 executing program 2: rseq(&(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}, 0xffffffffffffff85, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x1) 09:25:01 executing program 5: rseq(&(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}, 0xffffffffffffff85, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x1) 09:25:01 executing program 6: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) r2 = getpid() kcmp(r2, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x90000, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x4, 0x6, 0x9, 0x6, 0x0, 0x3, 0x5040e, 0xa, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7fff, 0x2, @perf_bp={&(0x7f0000000080), 0x1}, 0x10200, 0x100000001, 0x2, 0x9, 0x1, 0x200, 0x5, 0x0, 0x5, 0x0, 0x1f}, r2, 0x9, r3, 0x0) close_range(r0, r1, 0x2) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) listen(r4, 0x0) 09:25:01 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='uid_map\x00') pread64(r0, &(0x7f0000000200)=""/206, 0xce, 0x100000000) 09:25:01 executing program 7: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002200), 0x0, 0x0, &(0x7f0000002380)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg$unix(r0, &(0x7f0000001700)=[{{0x0, 0xfffffffffffffe1c, 0x0, 0x0, 0x0, 0x57}}], 0x572, 0x0, 0x0) 09:25:01 executing program 2: rseq(&(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}, 0xffffffffffffff85, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x1) 09:25:01 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000001c0)={0x28, 0x21, 0x1, 0x0, 0x0, "", [@nested={0x2, 0x0, 0x0, 0x1, [@typed={0xfd, 0x25f, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}]}, 0x28}], 0x1}, 0x0) 09:25:01 executing program 1: ppoll(0x0, 0x36, 0x0, 0x0, 0x36) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x49, &(0x7f0000000080)=0x68bbd9b0592ebacf, 0x4) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000000)) 09:25:01 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) ioctl$int_out(r0, 0x5460, &(0x7f0000000040)) [ 136.034230] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 09:25:01 executing program 6: r0 = io_uring_setup(0x5053, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES(r0, 0x1d, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) 09:25:01 executing program 3: r0 = getpid() perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = pidfd_open(r0, 0x0) process_madvise(r1, &(0x7f00000016c0)=[{}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0, 0x0) 09:25:01 executing program 7: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002200), 0x0, 0x0, &(0x7f0000002380)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg$unix(r0, &(0x7f0000001700)=[{{0x0, 0xfffffffffffffe1c, 0x0, 0x0, 0x0, 0x57}}], 0x572, 0x0, 0x0) 09:25:01 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000001c0)={0x28, 0x21, 0x1, 0x0, 0x0, "", [@nested={0x2, 0x0, 0x0, 0x1, [@typed={0xfd, 0x25f, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}]}, 0x28}], 0x1}, 0x0) 09:25:01 executing program 6: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000005880), &(0x7f00000058c0)=0x2) [ 136.208411] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 09:25:01 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000001c0)={0x28, 0x21, 0x1, 0x0, 0x0, "", [@nested={0x2, 0x0, 0x0, 0x1, [@typed={0xfd, 0x25f, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}]}, 0x28}], 0x1}, 0x0) 09:25:01 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) ioctl$int_out(r0, 0x5460, &(0x7f0000000040)) 09:25:01 executing program 2: set_mempolicy(0x6, &(0x7f0000000040)=0x7, 0x5db) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='smaps_rollup\x00') preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000000)=""/55, 0x37}], 0x1, 0x0, 0x0) 09:25:01 executing program 7: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002200), 0x0, 0x0, &(0x7f0000002380)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg$unix(r0, &(0x7f0000001700)=[{{0x0, 0xfffffffffffffe1c, 0x0, 0x0, 0x0, 0x57}}], 0x572, 0x0, 0x0) 09:25:01 executing program 1: ppoll(0x0, 0x36, 0x0, 0x0, 0x36) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x49, &(0x7f0000000080)=0x68bbd9b0592ebacf, 0x4) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000000)) 09:25:01 executing program 3: r0 = getpid() perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = pidfd_open(r0, 0x0) process_madvise(r1, &(0x7f00000016c0)=[{}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0, 0x0) 09:25:01 executing program 6: openat$sr(0xffffffffffffff9c, 0x0, 0x101200, 0x0) 09:25:01 executing program 5: rseq(&(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}, 0xffffffffffffff85, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x1) 09:25:01 executing program 6: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="1df8b2a2b7dbef6093379027e6247e38e57e41dc277c7e526c1662da8bdf113bf9e3e2e723dc0eb4d947eea5b47c130bf36430f5df0d200203f2de119694063eff1cf062b9c0e5fd8dc0851490e45e2cab157f9fd4d21f5cffb6d4a62785aba7ff9d85595062cb27c4cf057eda7f5c31bf2ae60a4754f1955df53542a39c4b4bffa65dfb", 0x84}, {&(0x7f0000000140)="22bae2b7f8cd72ceedb21b8081cc0a6ece3f96f4f1049881f41a114738fe05fd0b47b5f99c99e5c506488257f14b92a44a9e9d272bd7aebc37b04526db", 0x3d}], 0x2}, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000100), 0x4) [ 136.335085] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 09:25:01 executing program 3: r0 = getpid() perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = pidfd_open(r0, 0x0) process_madvise(r1, &(0x7f00000016c0)=[{}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0, 0x0) 09:25:01 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) ioctl$int_out(r0, 0x5460, &(0x7f0000000040)) 09:25:01 executing program 5: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/time_for_children\x00') ioctl$NS_GET_NSTYPE(r0, 0xb704, 0x0) 09:25:01 executing program 1: ppoll(0x0, 0x36, 0x0, 0x0, 0x36) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x49, &(0x7f0000000080)=0x68bbd9b0592ebacf, 0x4) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000000)) 09:25:01 executing program 6: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="1df8b2a2b7dbef6093379027e6247e38e57e41dc277c7e526c1662da8bdf113bf9e3e2e723dc0eb4d947eea5b47c130bf36430f5df0d200203f2de119694063eff1cf062b9c0e5fd8dc0851490e45e2cab157f9fd4d21f5cffb6d4a62785aba7ff9d85595062cb27c4cf057eda7f5c31bf2ae60a4754f1955df53542a39c4b4bffa65dfb", 0x84}, {&(0x7f0000000140)="22bae2b7f8cd72ceedb21b8081cc0a6ece3f96f4f1049881f41a114738fe05fd0b47b5f99c99e5c506488257f14b92a44a9e9d272bd7aebc37b04526db", 0x3d}], 0x2}, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000100), 0x4) 09:25:01 executing program 2: set_mempolicy(0x6, &(0x7f0000000040)=0x7, 0x5db) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='smaps_rollup\x00') preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000000)=""/55, 0x37}], 0x1, 0x0, 0x0) 09:25:01 executing program 7: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002200), 0x0, 0x0, &(0x7f0000002380)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg$unix(r0, &(0x7f0000001700)=[{{0x0, 0xfffffffffffffe1c, 0x0, 0x0, 0x0, 0x57}}], 0x572, 0x0, 0x0) 09:25:01 executing program 3: r0 = getpid() perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = pidfd_open(r0, 0x0) process_madvise(r1, &(0x7f00000016c0)=[{}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0, 0x0) 09:25:01 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x1154, &(0x7f0000000000)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2403, 0x0) 09:25:01 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) eventfd2(0x0, 0x0) io_setup(0x4, &(0x7f0000000080)=0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) io_submit(r0, 0x1, &(0x7f0000003f40)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}]) 09:25:01 executing program 6: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="1df8b2a2b7dbef6093379027e6247e38e57e41dc277c7e526c1662da8bdf113bf9e3e2e723dc0eb4d947eea5b47c130bf36430f5df0d200203f2de119694063eff1cf062b9c0e5fd8dc0851490e45e2cab157f9fd4d21f5cffb6d4a62785aba7ff9d85595062cb27c4cf057eda7f5c31bf2ae60a4754f1955df53542a39c4b4bffa65dfb", 0x84}, {&(0x7f0000000140)="22bae2b7f8cd72ceedb21b8081cc0a6ece3f96f4f1049881f41a114738fe05fd0b47b5f99c99e5c506488257f14b92a44a9e9d272bd7aebc37b04526db", 0x3d}], 0x2}, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000100), 0x4) [ 136.510518] kauditd_printk_skb: 29 callbacks suppressed [ 136.511075] audit: type=1400 audit(1768382701.957:47): avc: denied { write } for pid=4443 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 09:25:02 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) ioctl$int_out(r0, 0x5460, &(0x7f0000000040)) 09:25:02 executing program 6: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="1df8b2a2b7dbef6093379027e6247e38e57e41dc277c7e526c1662da8bdf113bf9e3e2e723dc0eb4d947eea5b47c130bf36430f5df0d200203f2de119694063eff1cf062b9c0e5fd8dc0851490e45e2cab157f9fd4d21f5cffb6d4a62785aba7ff9d85595062cb27c4cf057eda7f5c31bf2ae60a4754f1955df53542a39c4b4bffa65dfb", 0x84}, {&(0x7f0000000140)="22bae2b7f8cd72ceedb21b8081cc0a6ece3f96f4f1049881f41a114738fe05fd0b47b5f99c99e5c506488257f14b92a44a9e9d272bd7aebc37b04526db", 0x3d}], 0x2}, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000100), 0x4) 09:25:02 executing program 7: newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setresuid(0x0, r0, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:25:02 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000380)={{0x2, 0x0, @dev}, {0x0, @local}, 0x3c, {0x2, 0x0, @private=0xa010100}, 'geneve1\x00'}) ioctl$int_in(r0, 0x5421, &(0x7f0000000080)=0x200) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) splice(r0, 0x0, r2, 0x0, 0x7ff, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x7ff, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000000)={@private=0xa010101, @dev={0xac, 0x14, 0x14, 0x26}}, 0xc) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x78, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4604, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x841, 0x4}, 0xffffffffffffffff, 0x0, r0, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) syz_open_dev$ttys(0xc, 0x2, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$int_in(r6, 0x5421, &(0x7f0000000080)=0x200) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x1) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) splice(r6, 0x0, r7, 0x0, 0x7ff, 0x0) 09:25:02 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) eventfd2(0x0, 0x0) io_setup(0x4, &(0x7f0000000080)=0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) io_submit(r0, 0x1, &(0x7f0000003f40)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}]) 09:25:02 executing program 2: set_mempolicy(0x6, &(0x7f0000000040)=0x7, 0x5db) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='smaps_rollup\x00') preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000000)=""/55, 0x37}], 0x1, 0x0, 0x0) 09:25:02 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x1154, &(0x7f0000000000)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2403, 0x0) 09:25:02 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) eventfd2(0x0, 0x0) io_setup(0x4, &(0x7f0000000080)=0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) io_submit(r0, 0x1, &(0x7f0000003f40)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}]) 09:25:02 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) arch_prctl$ARCH_GET_GS(0x1022, 0xfffffffffffffffe) 09:25:02 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') openat$sysfs(0xffffffffffffff9c, &(0x7f0000000c00)='/sys/kernel/kexec_loaded', 0xf0ffff, 0x0) 09:25:02 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, 0x0, 0x0) 09:25:02 executing program 2: set_mempolicy(0x6, &(0x7f0000000040)=0x7, 0x5db) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='smaps_rollup\x00') preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000000)=""/55, 0x37}], 0x1, 0x0, 0x0) 09:25:02 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x40000) 09:25:02 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) eventfd2(0x0, 0x0) io_setup(0x4, &(0x7f0000000080)=0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) io_submit(r0, 0x1, &(0x7f0000003f40)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}]) 09:25:02 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) eventfd2(0x0, 0x0) io_setup(0x4, &(0x7f0000000080)=0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) io_submit(r0, 0x1, &(0x7f0000003f40)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}]) 09:25:02 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_buf(r0, 0x29, 0x23, &(0x7f0000001500), 0x0) 09:25:02 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000003e80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x70}}], 0x1, 0x0, 0x0) sendmmsg$unix(r0, &(0x7f0000000c80), 0x80000, 0x0) [ 136.894940] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list 09:25:02 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x40000) 09:25:02 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x1154, &(0x7f0000000000)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2403, 0x0) 09:25:02 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e2}], 0x0, &(0x7f0000013b00)) 09:25:02 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, 0x0, 0x0) 09:25:02 executing program 6: syz_mount_image$tmpfs(0x0, &(0x7f0000000d00)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0xd400080b) r1 = dup(r0) inotify_add_watch(r1, &(0x7f0000000000)='./file0\x00', 0x80000004) 09:25:02 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = io_uring_setup(0x5053, &(0x7f0000000140)) sendmsg$netlink(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="2400000024000100000000000000000008000000", @ANYRES32=r1, @ANYBLOB='\f\x00\x00B;'], 0x24}], 0x1}, 0x0) 09:25:02 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) eventfd2(0x0, 0x0) io_setup(0x4, &(0x7f0000000080)=0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) io_submit(r0, 0x1, &(0x7f0000003f40)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}]) 09:25:02 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) eventfd2(0x0, 0x0) io_setup(0x4, &(0x7f0000000080)=0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) io_submit(r0, 0x1, &(0x7f0000003f40)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}]) [ 137.121365] loop4: detected capacity change from 0 to 4 [ 137.131303] EXT4-fs (loop4): fragment/cluster size (16384) != block size (1024) [ 137.134728] loop4: detected capacity change from 0 to 4 [ 137.136359] EXT4-fs (loop4): fragment/cluster size (16384) != block size (1024) [ 137.143193] audit: type=1400 audit(1768382702.590:48): avc: denied { watch_reads } for pid=4501 comm="syz-executor.6" path="/syzkaller-testdir806321915/syzkaller.9j83lj/34/file0" dev="sda" ino=16020 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 09:25:02 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)={0x24, 0x18, 0x1, 0x0, 0x0, "", [@nested={0x2, 0x0, 0x0, 0x1, [@typed={0x0, 0x0, 0x0, 0x0, @fd}, @typed={0x8, 0x6, 0x0, 0x0, @fd}]}]}, 0x24}], 0x1}, 0x0) 09:25:02 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, 0x0, 0x0) 09:25:02 executing program 5: pipe(&(0x7f0000002640)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) dup3(r1, r2, 0x0) splice(r0, 0x0, r2, 0x0, 0x40, 0x0) 09:25:02 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x1154, &(0x7f0000000000)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2403, 0x0) 09:25:02 executing program 6: semget$private(0x0, 0x0, 0x0) semget$private(0x0, 0x0, 0x0) semop(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semctl$SEM_STAT_ANY(0x0, 0x3, 0x14, 0x0) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x0, 0x1000}], 0x1, &(0x7f0000000100)={0x77359400}) 09:25:02 executing program 2: rt_sigaction(0x0, &(0x7f0000001c80)={0x0, 0x0, 0x0}, &(0x7f0000001d40)={0x0, 0x0, 0x0}, 0x8, &(0x7f0000001d80)) 09:25:02 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, 0x0, 0x0) 09:25:02 executing program 4: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000040)={0x0, 0xffffffff}) 09:25:02 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)={0x24, 0x10, 0x1, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64=0x2}, @nested={0x8, 0x0, 0x0, 0x1, [@typed={0x4, 0x14}]}]}, 0x24}], 0x1}, 0x0) 09:25:02 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x4c, &(0x7f0000000080), 0x4) fcntl$setstatus(r0, 0x4, 0xc0400) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000180)={0x8, 0x43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x9}, 0x0, 0x9, 0xffffffffffffffff, 0x8) r1 = fork() waitid(0x2, 0x0, 0x0, 0x8, &(0x7f00000000c0)) ptrace(0x10, r1) 09:25:02 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x35, 0x0, 0x0, @u32}]}]}, 0x28}], 0x1}, 0x0) 09:25:02 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x40000) 09:25:02 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) recvmmsg$unix(r0, &(0x7f0000001700)=[{{0x0, 0xfffffffffffffe1c, 0x0, 0x0, 0x0, 0x57}}], 0x572, 0x0, 0x0) 09:25:02 executing program 4: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000040)={0x0, 0xffffffff}) 09:25:02 executing program 0: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) fallocate(r0, 0x10, 0x600, 0x400) 09:25:02 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) recvmmsg$unix(r0, &(0x7f0000001700)=[{{0x0, 0xfffffffffffffe1c, 0x0, 0x0, 0x0, 0x57}}], 0x572, 0x0, 0x0) 09:25:02 executing program 3: syz_mount_image$tmpfs(0x0, &(0x7f0000000d00)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)='system_u:object_r:udev_exec_t:s0\x00', 0x21, 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000080)='./file1\x00') 09:25:03 executing program 4: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000040)={0x0, 0xffffffff}) 09:25:03 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)={0x14, 0x52, 0xffffffffffffffff, 0x0, 0x0, "", [@generic="02"]}, 0x14}], 0x1}, 0x0) 09:25:03 executing program 3: syz_mount_image$tmpfs(0x0, &(0x7f0000000d00)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)='system_u:object_r:udev_exec_t:s0\x00', 0x21, 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000080)='./file1\x00') 09:25:03 executing program 0: setrlimit(0x7, &(0x7f0000000140)={0x5, 0x88}) epoll_create(0x7fff) pipe2$9p(0x0, 0x0) 09:25:03 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x40000) 09:25:03 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_ACTIVATE(r0, 0x4b31, 0x7ffffffff000) 09:25:03 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x4c, &(0x7f0000000080), 0x4) fcntl$setstatus(r0, 0x4, 0xc0400) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000180)={0x8, 0x43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x9}, 0x0, 0x9, 0xffffffffffffffff, 0x8) r1 = fork() waitid(0x2, 0x0, 0x0, 0x8, &(0x7f00000000c0)) ptrace(0x10, r1) 09:25:03 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) recvmmsg$unix(r0, &(0x7f0000001700)=[{{0x0, 0xfffffffffffffe1c, 0x0, 0x0, 0x0, 0x57}}], 0x572, 0x0, 0x0) 09:25:03 executing program 5: r0 = syz_open_dev$rtc(&(0x7f0000000800), 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x0) 09:25:03 executing program 4: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000040)={0x0, 0xffffffff}) 09:25:03 executing program 5: r0 = syz_open_dev$rtc(&(0x7f0000000800), 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x0) 09:25:03 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$SG_EMULATED_HOST(r0, 0x80081270, &(0x7f0000002040)) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$SG_EMULATED_HOST(r1, 0x40081271, &(0x7f0000002040)) ioctl$SG_GET_TIMEOUT(r1, 0x2202, 0x0) 09:25:03 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = dup(r0) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0xe, 0x0, 0x0) 09:25:03 executing program 3: syz_mount_image$tmpfs(0x0, &(0x7f0000000d00)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)='system_u:object_r:udev_exec_t:s0\x00', 0x21, 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000080)='./file1\x00') 09:25:03 executing program 4: r0 = io_uring_setup(0x16d1, &(0x7f0000000a40)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x21, 0x0, 0x0) 09:25:03 executing program 5: r0 = syz_open_dev$rtc(&(0x7f0000000800), 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x0) 09:25:03 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='rpc_pipefs\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) umount2(&(0x7f0000000000)='./file0\x00', 0x0) 09:25:03 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f00000001c0)={'\x00', 0x0, 0x1}) 09:25:03 executing program 3: syz_mount_image$tmpfs(0x0, &(0x7f0000000d00)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)='system_u:object_r:udev_exec_t:s0\x00', 0x21, 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000080)='./file1\x00') 09:25:03 executing program 5: r0 = syz_open_dev$rtc(&(0x7f0000000800), 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x0) 09:25:03 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x4c, &(0x7f0000000080), 0x4) fcntl$setstatus(r0, 0x4, 0xc0400) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000180)={0x8, 0x43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x9}, 0x0, 0x9, 0xffffffffffffffff, 0x8) r1 = fork() waitid(0x2, 0x0, 0x0, 0x8, &(0x7f00000000c0)) ptrace(0x10, r1) 09:25:03 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) recvmmsg$unix(r0, &(0x7f0000001700)=[{{0x0, 0xfffffffffffffe1c, 0x0, 0x0, 0x0, 0x57}}], 0x572, 0x0, 0x0) 09:25:03 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x24, &(0x7f0000000000)=ANY=[@ANYRES64], 0x90) sendmsg(r0, &(0x7f0000000280)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0}, 0x0) 09:25:03 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x5, &(0x7f0000000040)=0x1a, 0x4) 09:25:03 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='rpc_pipefs\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) umount2(&(0x7f0000000000)='./file0\x00', 0x0) 09:25:03 executing program 7: r0 = socket$packet(0x11, 0x2, 0x300) bind$packet(r0, 0x0, 0x0) 09:25:03 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = dup(r0) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0xe, 0x0, 0x0) 09:25:03 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = timerfd_create(0x0, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) timerfd_settime(r0, 0x1, &(0x7f0000000100)={{0x0, r1+10000000}, {0x0, 0x3938700}}, 0x0) timerfd_gettime(r0, &(0x7f0000000000)) 09:25:03 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = fcntl$dupfd(r0, 0x0, r1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$bt_hci(r2, &(0x7f0000000080), 0x6) 09:25:03 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='rpc_pipefs\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) umount2(&(0x7f0000000000)='./file0\x00', 0x0) 09:25:03 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040), 0x14) 09:25:03 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x4c, &(0x7f0000000080), 0x4) fcntl$setstatus(r0, 0x4, 0xc0400) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000180)={0x8, 0x43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x9}, 0x0, 0x9, 0xffffffffffffffff, 0x8) r1 = fork() waitid(0x2, 0x0, 0x0, 0x8, &(0x7f00000000c0)) ptrace(0x10, r1) 09:25:03 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x24, &(0x7f0000000000)=ANY=[@ANYRES64], 0x90) sendmsg(r0, &(0x7f0000000280)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0}, 0x0) 09:25:03 executing program 6: sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r0, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000800)='\x00') syz_genetlink_get_family_id$netlbl_calipso(0x0, 0xffffffffffffffff) 09:25:03 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = dup(r0) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0xe, 0x0, 0x0) 09:25:03 executing program 7: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCADDDLCI(r0, 0x89e0, &(0x7f0000000000)={'bond0\x00'}) 09:25:03 executing program 5: setresgid(0x0, 0xffffffffffffffff, 0x0) 09:25:03 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) 09:25:03 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x24, &(0x7f0000000000)=ANY=[@ANYRES64], 0x90) sendmsg(r0, &(0x7f0000000280)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0}, 0x0) 09:25:03 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='rpc_pipefs\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) umount2(&(0x7f0000000000)='./file0\x00', 0x0) 09:25:03 executing program 6: sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r0, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000800)='\x00') syz_genetlink_get_family_id$netlbl_calipso(0x0, 0xffffffffffffffff) 09:25:03 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = dup(r0) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0xe, 0x0, 0x0) 09:25:03 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000000)={0x0, 0x6, 0x5215}) [ 138.419999] program syz-executor.7 is using a deprecated SCSI ioctl, please convert it to SG_IO 09:25:03 executing program 5: setresgid(0x0, 0xffffffffffffffff, 0x0) 09:25:03 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e07d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) 09:25:03 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='syscall\x00') pread64(r0, &(0x7f00000003c0)=""/203, 0xcb, 0x0) 09:25:03 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0), 0x8, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 09:25:03 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x24, &(0x7f0000000000)=ANY=[@ANYRES64], 0x90) sendmsg(r0, &(0x7f0000000280)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0}, 0x0) 09:25:04 executing program 5: setresgid(0x0, 0xffffffffffffffff, 0x0) 09:25:04 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpgid(0x0, 0x0) 09:25:04 executing program 6: sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r0, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000800)='\x00') syz_genetlink_get_family_id$netlbl_calipso(0x0, 0xffffffffffffffff) 09:25:04 executing program 0: openat$sndseq(0xffffffffffffff9c, &(0x7f0000002cc0), 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x17) syz_emit_vhci(&(0x7f0000000340)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYRES32], 0x3e) syz_emit_vhci(&(0x7f0000000180)=ANY=[], 0x1a) init_module(0x0, 0xfffc2, 0x0) init_module(&(0x7f0000000180)='9u\x10\xac`)\xbe\a\xb2<^{}\xdc)\x00', 0xc, &(0x7f0000000200)='-\x00\x02T\xb0V>\x8d\x99\xcb\x94\xd5\xb0\x01\x98\x01\xa5x\xf7v8q\xf1P\xf4(\x7f\xbc\r\x1e$\r\xcf\'\x8aGQR`\xad\x1fT\xfc\x1a\x06\xe7\xb8vva\x11\xb7\x19\xd8\xc9\xa35D\xf6g\xa2\x8fU<\xcc\x01\x9b~2\x12\xc3y\x87>\xbc\xbd\xf8\xc7\x86\xaa\xcaHv)l\xc4\x1b$\x8e}\x03\x00,') r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x6, 0x0, 0x428}}}, 0x7) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYRES64], 0x9) r1 = syz_open_dev$vcsa(&(0x7f0000000400), 0x18, 0x244480) setsockopt$WPAN_SECURITY(r1, 0x0, 0x1, &(0x7f0000000440)=0x2, 0x4) r2 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x1ff0000000000000, 0x200000) bind$802154_dgram(r0, &(0x7f00000001c0)={0x24, @short={0x2, 0x3, 0xaaa2}}, 0xfffffffffffffe78) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, &(0x7f0000000200)={0x81, 0x0, 0x40}) syz_emit_vhci(&(0x7f00000006c0)=ANY=[@ANYRES64, @ANYRESOCT=r2, @ANYRES32, @ANYRES64=0x0, @ANYBLOB= VM DIAGNOSIS: 09:24:56 Registers: info registers vcpu 0 RAX=0000000000000001 RBX=0000000000000001 RCX=ffffffff84d172ee RDX=fffffbfff0b82d11 RSI=0000000000000004 RDI=ffffffff85c16880 RBP=ffffffff85c16880 RSP=ffff88801b837b50 R8 =0000000000000000 R9 =fffffbfff0b82d10 R10=ffffffff85c16883 R11=0000000000000000 R12=1ffff11003706f6b R13=0000000000000003 R14=fffffbfff0b82d10 R15=ffff88801b837b88 RIP=ffffffff84d17480 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 000055555fe04400 00000000 00000000 GS =0000 ffff8880e5343000 00000000 00000000 LDT=0000 fffffe2400000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffd6ed2cff8 CR3=000000001670e000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000a60ce07b00000000cec3662e XMM01=000000000000000003515b82db34ca11 XMM02=0000000000000000333bebdfd0a6a21d XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff82973905 RDI=ffffffff889c0960 RBP=ffffffff889c0920 RSP=ffff888016837488 R8 =0000000000000000 R9 =ffffed1001436046 R10=0000000000000020 R11=666666203a332320 R12=0000000000000020 R13=0000000000000010 R14=ffffffff889c0920 R15=ffffffff829738f0 RIP=ffffffff8297395d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 000055558cdd6400 00000000 00000000 GS =0000 ffff8880e5443000 00000000 00000000 LDT=0000 fffffe5100000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055558cdd6708 CR3=00000000489ce000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000a60ce07b00000000cec3662e XMM01=000000000000000003515b82db34ca11 XMM02=0000000000000000333bebdfd0a6a21d XMM03=00000000000000000000000000000000 XMM04=ffffffff0000ff00000000ff00000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000