Warning: Permanently added '[localhost]:42799' (ECDSA) to the list of known hosts. 2026/01/14 09:28:38 fuzzer started 2026/01/14 09:28:39 dialing manager at localhost:46753 syzkaller login: [ 50.882083] cgroup: Unknown subsys name 'net' [ 50.959297] cgroup: Unknown subsys name 'cpuset' [ 50.972734] cgroup: Unknown subsys name 'rlimit' 2026/01/14 09:28:48 syscalls: 2214 2026/01/14 09:28:48 code coverage: enabled 2026/01/14 09:28:48 comparison tracing: enabled 2026/01/14 09:28:48 extra coverage: enabled 2026/01/14 09:28:48 setuid sandbox: enabled 2026/01/14 09:28:48 namespace sandbox: enabled 2026/01/14 09:28:48 Android sandbox: enabled 2026/01/14 09:28:48 fault injection: enabled 2026/01/14 09:28:48 leak checking: enabled 2026/01/14 09:28:48 net packet injection: enabled 2026/01/14 09:28:48 net device setup: enabled 2026/01/14 09:28:48 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2026/01/14 09:28:48 devlink PCI setup: PCI device 0000:00:10.0 is not available 2026/01/14 09:28:48 USB emulation: enabled 2026/01/14 09:28:48 hci packet injection: enabled 2026/01/14 09:28:48 wifi device emulation: enabled 2026/01/14 09:28:48 802.15.4 emulation: enabled 2026/01/14 09:28:48 fetching corpus: 0, signal 0/2000 (executing program) 2026/01/14 09:28:49 fetching corpus: 50, signal 33280/36697 (executing program) 2026/01/14 09:28:49 fetching corpus: 100, signal 44348/49211 (executing program) 2026/01/14 09:28:49 fetching corpus: 150, signal 50953/57204 (executing program) 2026/01/14 09:28:49 fetching corpus: 200, signal 56702/64313 (executing program) 2026/01/14 09:28:49 fetching corpus: 250, signal 60132/69064 (executing program) 2026/01/14 09:28:49 fetching corpus: 300, signal 65035/75145 (executing program) 2026/01/14 09:28:49 fetching corpus: 350, signal 68387/79691 (executing program) 2026/01/14 09:28:49 fetching corpus: 400, signal 72340/84701 (executing program) 2026/01/14 09:28:49 fetching corpus: 450, signal 75772/89219 (executing program) 2026/01/14 09:28:50 fetching corpus: 500, signal 80800/95168 (executing program) 2026/01/14 09:28:50 fetching corpus: 550, signal 82626/98093 (executing program) 2026/01/14 09:28:50 fetching corpus: 600, signal 85107/101611 (executing program) 2026/01/14 09:28:50 fetching corpus: 650, signal 88810/106149 (executing program) 2026/01/14 09:28:50 fetching corpus: 700, signal 91839/110002 (executing program) 2026/01/14 09:28:50 fetching corpus: 750, signal 93928/113029 (executing program) 2026/01/14 09:28:50 fetching corpus: 800, signal 96021/116045 (executing program) 2026/01/14 09:28:50 fetching corpus: 850, signal 98209/119015 (executing program) 2026/01/14 09:28:51 fetching corpus: 900, signal 100214/121800 (executing program) 2026/01/14 09:28:51 fetching corpus: 950, signal 102253/124619 (executing program) 2026/01/14 09:28:51 fetching corpus: 1000, signal 104359/127445 (executing program) 2026/01/14 09:28:51 fetching corpus: 1050, signal 106044/129907 (executing program) 2026/01/14 09:28:51 fetching corpus: 1100, signal 109353/133642 (executing program) 2026/01/14 09:28:51 fetching corpus: 1150, signal 110711/135790 (executing program) 2026/01/14 09:28:51 fetching corpus: 1200, signal 112244/138032 (executing program) 2026/01/14 09:28:51 fetching corpus: 1250, signal 113859/140301 (executing program) 2026/01/14 09:28:51 fetching corpus: 1300, signal 115775/142795 (executing program) 2026/01/14 09:28:52 fetching corpus: 1350, signal 117716/145236 (executing program) 2026/01/14 09:28:52 fetching corpus: 1400, signal 118540/146794 (executing program) 2026/01/14 09:28:52 fetching corpus: 1450, signal 119590/148578 (executing program) 2026/01/14 09:28:52 fetching corpus: 1500, signal 120733/150366 (executing program) 2026/01/14 09:28:52 fetching corpus: 1550, signal 121637/152022 (executing program) 2026/01/14 09:28:52 fetching corpus: 1600, signal 122960/153937 (executing program) 2026/01/14 09:28:52 fetching corpus: 1650, signal 124573/156032 (executing program) 2026/01/14 09:28:52 fetching corpus: 1700, signal 125635/157760 (executing program) 2026/01/14 09:28:52 fetching corpus: 1750, signal 128259/160518 (executing program) 2026/01/14 09:28:52 fetching corpus: 1800, signal 129322/162140 (executing program) 2026/01/14 09:28:53 fetching corpus: 1850, signal 131105/164261 (executing program) 2026/01/14 09:28:53 fetching corpus: 1900, signal 131979/165666 (executing program) 2026/01/14 09:28:53 fetching corpus: 1950, signal 133043/167192 (executing program) 2026/01/14 09:28:53 fetching corpus: 2000, signal 133870/168602 (executing program) 2026/01/14 09:28:53 fetching corpus: 2050, signal 134885/170080 (executing program) 2026/01/14 09:28:53 fetching corpus: 2100, signal 136087/171708 (executing program) 2026/01/14 09:28:53 fetching corpus: 2150, signal 136760/172965 (executing program) 2026/01/14 09:28:53 fetching corpus: 2200, signal 137621/174233 (executing program) 2026/01/14 09:28:53 fetching corpus: 2250, signal 139070/175913 (executing program) 2026/01/14 09:28:54 fetching corpus: 2300, signal 139877/177178 (executing program) 2026/01/14 09:28:54 fetching corpus: 2350, signal 140717/178435 (executing program) 2026/01/14 09:28:54 fetching corpus: 2400, signal 142050/179979 (executing program) 2026/01/14 09:28:54 fetching corpus: 2450, signal 142827/181184 (executing program) 2026/01/14 09:28:54 fetching corpus: 2500, signal 143761/182461 (executing program) 2026/01/14 09:28:54 fetching corpus: 2550, signal 144793/183784 (executing program) 2026/01/14 09:28:54 fetching corpus: 2600, signal 145503/184929 (executing program) 2026/01/14 09:28:54 fetching corpus: 2650, signal 146253/186039 (executing program) 2026/01/14 09:28:54 fetching corpus: 2700, signal 147441/187417 (executing program) 2026/01/14 09:28:55 fetching corpus: 2750, signal 148643/188813 (executing program) 2026/01/14 09:28:55 fetching corpus: 2800, signal 149456/189929 (executing program) 2026/01/14 09:28:55 fetching corpus: 2850, signal 150567/191211 (executing program) 2026/01/14 09:28:55 fetching corpus: 2900, signal 151218/192201 (executing program) 2026/01/14 09:28:55 fetching corpus: 2950, signal 152041/193293 (executing program) 2026/01/14 09:28:55 fetching corpus: 3000, signal 152979/194411 (executing program) 2026/01/14 09:28:55 fetching corpus: 3050, signal 153787/195464 (executing program) 2026/01/14 09:28:55 fetching corpus: 3100, signal 154426/196386 (executing program) 2026/01/14 09:28:56 fetching corpus: 3150, signal 155169/197374 (executing program) 2026/01/14 09:28:56 fetching corpus: 3200, signal 155752/198317 (executing program) 2026/01/14 09:28:56 fetching corpus: 3250, signal 156201/199133 (executing program) 2026/01/14 09:28:56 fetching corpus: 3300, signal 156983/200138 (executing program) 2026/01/14 09:28:56 fetching corpus: 3350, signal 157495/200996 (executing program) 2026/01/14 09:28:56 fetching corpus: 3400, signal 158266/202012 (executing program) 2026/01/14 09:28:56 fetching corpus: 3450, signal 158718/202786 (executing program) 2026/01/14 09:28:56 fetching corpus: 3500, signal 159509/203715 (executing program) 2026/01/14 09:28:56 fetching corpus: 3550, signal 160237/204614 (executing program) 2026/01/14 09:28:57 fetching corpus: 3599, signal 160790/205464 (executing program) 2026/01/14 09:28:57 fetching corpus: 3649, signal 161320/206290 (executing program) 2026/01/14 09:28:57 fetching corpus: 3699, signal 162082/207227 (executing program) 2026/01/14 09:28:57 fetching corpus: 3749, signal 162763/208034 (executing program) 2026/01/14 09:28:57 fetching corpus: 3799, signal 163378/208839 (executing program) 2026/01/14 09:28:57 fetching corpus: 3849, signal 163907/209600 (executing program) 2026/01/14 09:28:57 fetching corpus: 3899, signal 164585/210480 (executing program) 2026/01/14 09:28:57 fetching corpus: 3949, signal 165301/211253 (executing program) 2026/01/14 09:28:57 fetching corpus: 3999, signal 165755/211990 (executing program) 2026/01/14 09:28:57 fetching corpus: 4049, signal 166475/212803 (executing program) 2026/01/14 09:28:58 fetching corpus: 4099, signal 166959/213489 (executing program) 2026/01/14 09:28:58 fetching corpus: 4147, signal 167588/214190 (executing program) 2026/01/14 09:28:58 fetching corpus: 4196, signal 168180/214882 (executing program) 2026/01/14 09:28:58 fetching corpus: 4246, signal 169138/215702 (executing program) 2026/01/14 09:28:58 fetching corpus: 4296, signal 169908/216484 (executing program) 2026/01/14 09:28:58 fetching corpus: 4346, signal 170445/217155 (executing program) 2026/01/14 09:28:58 fetching corpus: 4396, signal 171012/217785 (executing program) 2026/01/14 09:28:58 fetching corpus: 4446, signal 171342/218360 (executing program) 2026/01/14 09:28:59 fetching corpus: 4496, signal 171872/218990 (executing program) 2026/01/14 09:28:59 fetching corpus: 4546, signal 172592/219685 (executing program) 2026/01/14 09:28:59 fetching corpus: 4595, signal 173125/220301 (executing program) 2026/01/14 09:28:59 fetching corpus: 4645, signal 173755/220913 (executing program) 2026/01/14 09:28:59 fetching corpus: 4695, signal 174139/221497 (executing program) 2026/01/14 09:28:59 fetching corpus: 4745, signal 174737/222076 (executing program) 2026/01/14 09:28:59 fetching corpus: 4795, signal 175059/222641 (executing program) 2026/01/14 09:28:59 fetching corpus: 4845, signal 175743/223207 (executing program) 2026/01/14 09:29:00 fetching corpus: 4895, signal 176319/223768 (executing program) 2026/01/14 09:29:00 fetching corpus: 4945, signal 176774/224341 (executing program) 2026/01/14 09:29:00 fetching corpus: 4995, signal 177383/224883 (executing program) 2026/01/14 09:29:00 fetching corpus: 5043, signal 177830/225390 (executing program) 2026/01/14 09:29:00 fetching corpus: 5092, signal 178272/225928 (executing program) 2026/01/14 09:29:00 fetching corpus: 5142, signal 178622/226417 (executing program) 2026/01/14 09:29:00 fetching corpus: 5192, signal 179092/226948 (executing program) 2026/01/14 09:29:00 fetching corpus: 5242, signal 179547/227457 (executing program) 2026/01/14 09:29:00 fetching corpus: 5292, signal 179955/227956 (executing program) 2026/01/14 09:29:00 fetching corpus: 5342, signal 180507/228444 (executing program) 2026/01/14 09:29:01 fetching corpus: 5391, signal 180964/228944 (executing program) 2026/01/14 09:29:01 fetching corpus: 5441, signal 181403/229405 (executing program) 2026/01/14 09:29:01 fetching corpus: 5491, signal 182040/229866 (executing program) 2026/01/14 09:29:01 fetching corpus: 5541, signal 182374/230331 (executing program) 2026/01/14 09:29:01 fetching corpus: 5591, signal 182958/230779 (executing program) 2026/01/14 09:29:01 fetching corpus: 5640, signal 183515/231221 (executing program) 2026/01/14 09:29:01 fetching corpus: 5690, signal 183873/231647 (executing program) 2026/01/14 09:29:01 fetching corpus: 5740, signal 184375/231957 (executing program) 2026/01/14 09:29:01 fetching corpus: 5790, signal 184899/231958 (executing program) 2026/01/14 09:29:02 fetching corpus: 5840, signal 185264/231967 (executing program) 2026/01/14 09:29:02 fetching corpus: 5888, signal 185911/231967 (executing program) 2026/01/14 09:29:02 fetching corpus: 5938, signal 186784/231967 (executing program) 2026/01/14 09:29:02 fetching corpus: 5988, signal 187209/231974 (executing program) 2026/01/14 09:29:02 fetching corpus: 6038, signal 187589/231974 (executing program) 2026/01/14 09:29:02 fetching corpus: 6088, signal 187916/231974 (executing program) 2026/01/14 09:29:02 fetching corpus: 6138, signal 188378/231995 (executing program) 2026/01/14 09:29:02 fetching corpus: 6188, signal 188908/231995 (executing program) 2026/01/14 09:29:02 fetching corpus: 6237, signal 189242/232002 (executing program) 2026/01/14 09:29:02 fetching corpus: 6287, signal 189610/232002 (executing program) 2026/01/14 09:29:03 fetching corpus: 6337, signal 189870/232002 (executing program) 2026/01/14 09:29:03 fetching corpus: 6387, signal 190298/232002 (executing program) 2026/01/14 09:29:03 fetching corpus: 6437, signal 190882/232010 (executing program) 2026/01/14 09:29:03 fetching corpus: 6487, signal 191315/232010 (executing program) 2026/01/14 09:29:03 fetching corpus: 6537, signal 191761/232010 (executing program) 2026/01/14 09:29:03 fetching corpus: 6587, signal 192103/232010 (executing program) 2026/01/14 09:29:03 fetching corpus: 6637, signal 192431/232010 (executing program) 2026/01/14 09:29:03 fetching corpus: 6687, signal 192735/232022 (executing program) 2026/01/14 09:29:03 fetching corpus: 6736, signal 193315/232022 (executing program) 2026/01/14 09:29:03 fetching corpus: 6782, signal 193593/232028 (executing program) 2026/01/14 09:29:03 fetching corpus: 6832, signal 193954/232028 (executing program) 2026/01/14 09:29:03 fetching corpus: 6882, signal 194303/232028 (executing program) 2026/01/14 09:29:04 fetching corpus: 6932, signal 194696/232028 (executing program) 2026/01/14 09:29:04 fetching corpus: 6982, signal 195078/232029 (executing program) 2026/01/14 09:29:04 fetching corpus: 7032, signal 195431/232031 (executing program) 2026/01/14 09:29:04 fetching corpus: 7082, signal 195715/232050 (executing program) 2026/01/14 09:29:04 fetching corpus: 7132, signal 195971/232050 (executing program) 2026/01/14 09:29:04 fetching corpus: 7182, signal 196950/232051 (executing program) 2026/01/14 09:29:04 fetching corpus: 7231, signal 197318/232055 (executing program) 2026/01/14 09:29:04 fetching corpus: 7281, signal 197616/232055 (executing program) 2026/01/14 09:29:04 fetching corpus: 7331, signal 198022/232055 (executing program) 2026/01/14 09:29:04 fetching corpus: 7381, signal 198381/232058 (executing program) 2026/01/14 09:29:05 fetching corpus: 7431, signal 199235/232058 (executing program) 2026/01/14 09:29:05 fetching corpus: 7480, signal 199651/232064 (executing program) 2026/01/14 09:29:05 fetching corpus: 7530, signal 199863/232064 (executing program) 2026/01/14 09:29:05 fetching corpus: 7580, signal 200170/232064 (executing program) 2026/01/14 09:29:05 fetching corpus: 7630, signal 200520/232064 (executing program) 2026/01/14 09:29:05 fetching corpus: 7680, signal 200684/232066 (executing program) 2026/01/14 09:29:05 fetching corpus: 7730, signal 201068/232066 (executing program) 2026/01/14 09:29:05 fetching corpus: 7780, signal 201322/232066 (executing program) 2026/01/14 09:29:05 fetching corpus: 7830, signal 201541/232066 (executing program) 2026/01/14 09:29:05 fetching corpus: 7880, signal 201784/232066 (executing program) 2026/01/14 09:29:06 fetching corpus: 7930, signal 202054/232066 (executing program) 2026/01/14 09:29:06 fetching corpus: 7979, signal 202330/232068 (executing program) 2026/01/14 09:29:06 fetching corpus: 8029, signal 202575/232078 (executing program) 2026/01/14 09:29:06 fetching corpus: 8079, signal 202913/232079 (executing program) 2026/01/14 09:29:06 fetching corpus: 8129, signal 203360/232099 (executing program) 2026/01/14 09:29:06 fetching corpus: 8179, signal 203772/232100 (executing program) 2026/01/14 09:29:06 fetching corpus: 8229, signal 204035/232100 (executing program) 2026/01/14 09:29:06 fetching corpus: 8279, signal 204326/232108 (executing program) 2026/01/14 09:29:06 fetching corpus: 8329, signal 204640/232108 (executing program) 2026/01/14 09:29:07 fetching corpus: 8379, signal 204877/232108 (executing program) 2026/01/14 09:29:07 fetching corpus: 8429, signal 205214/232108 (executing program) 2026/01/14 09:29:07 fetching corpus: 8479, signal 205455/232109 (executing program) 2026/01/14 09:29:07 fetching corpus: 8528, signal 205815/232109 (executing program) 2026/01/14 09:29:07 fetching corpus: 8578, signal 206107/232109 (executing program) 2026/01/14 09:29:07 fetching corpus: 8628, signal 206384/232116 (executing program) 2026/01/14 09:29:07 fetching corpus: 8678, signal 206688/232116 (executing program) 2026/01/14 09:29:07 fetching corpus: 8728, signal 206928/232121 (executing program) 2026/01/14 09:29:07 fetching corpus: 8778, signal 207258/232123 (executing program) 2026/01/14 09:29:08 fetching corpus: 8827, signal 207598/232161 (executing program) 2026/01/14 09:29:08 fetching corpus: 8876, signal 207937/232167 (executing program) 2026/01/14 09:29:08 fetching corpus: 8925, signal 208140/232167 (executing program) 2026/01/14 09:29:08 fetching corpus: 8975, signal 208417/232167 (executing program) 2026/01/14 09:29:08 fetching corpus: 9025, signal 208648/232167 (executing program) 2026/01/14 09:29:08 fetching corpus: 9074, signal 208881/232170 (executing program) 2026/01/14 09:29:08 fetching corpus: 9124, signal 209258/232170 (executing program) 2026/01/14 09:29:08 fetching corpus: 9174, signal 209684/232171 (executing program) 2026/01/14 09:29:08 fetching corpus: 9224, signal 209976/232171 (executing program) 2026/01/14 09:29:08 fetching corpus: 9274, signal 210211/232174 (executing program) 2026/01/14 09:29:09 fetching corpus: 9324, signal 210508/232187 (executing program) 2026/01/14 09:29:09 fetching corpus: 9374, signal 210748/232187 (executing program) 2026/01/14 09:29:09 fetching corpus: 9423, signal 211150/232192 (executing program) 2026/01/14 09:29:09 fetching corpus: 9472, signal 211286/232202 (executing program) 2026/01/14 09:29:09 fetching corpus: 9522, signal 211489/232202 (executing program) 2026/01/14 09:29:09 fetching corpus: 9571, signal 211890/232202 (executing program) 2026/01/14 09:29:09 fetching corpus: 9619, signal 212106/232202 (executing program) 2026/01/14 09:29:09 fetching corpus: 9669, signal 212429/232203 (executing program) 2026/01/14 09:29:09 fetching corpus: 9719, signal 212722/232203 (executing program) 2026/01/14 09:29:10 fetching corpus: 9769, signal 213056/232212 (executing program) 2026/01/14 09:29:10 fetching corpus: 9817, signal 213367/232217 (executing program) 2026/01/14 09:29:10 fetching corpus: 9867, signal 213639/232217 (executing program) 2026/01/14 09:29:10 fetching corpus: 9917, signal 213900/232217 (executing program) 2026/01/14 09:29:10 fetching corpus: 9967, signal 214114/232217 (executing program) 2026/01/14 09:29:10 fetching corpus: 10017, signal 214341/232217 (executing program) 2026/01/14 09:29:10 fetching corpus: 10067, signal 214649/232217 (executing program) 2026/01/14 09:29:10 fetching corpus: 10117, signal 214919/232217 (executing program) 2026/01/14 09:29:11 fetching corpus: 10167, signal 215262/232220 (executing program) 2026/01/14 09:29:11 fetching corpus: 10217, signal 215577/232220 (executing program) 2026/01/14 09:29:11 fetching corpus: 10267, signal 215807/232220 (executing program) 2026/01/14 09:29:11 fetching corpus: 10316, signal 216217/232220 (executing program) 2026/01/14 09:29:11 fetching corpus: 10366, signal 216483/232220 (executing program) 2026/01/14 09:29:11 fetching corpus: 10416, signal 216708/232220 (executing program) 2026/01/14 09:29:11 fetching corpus: 10466, signal 216990/232220 (executing program) 2026/01/14 09:29:11 fetching corpus: 10516, signal 217326/232220 (executing program) 2026/01/14 09:29:11 fetching corpus: 10564, signal 217533/232225 (executing program) 2026/01/14 09:29:11 fetching corpus: 10614, signal 217770/232228 (executing program) 2026/01/14 09:29:11 fetching corpus: 10663, signal 218023/232228 (executing program) 2026/01/14 09:29:12 fetching corpus: 10713, signal 218220/232229 (executing program) 2026/01/14 09:29:12 fetching corpus: 10762, signal 218476/232229 (executing program) 2026/01/14 09:29:12 fetching corpus: 10811, signal 218652/232233 (executing program) 2026/01/14 09:29:12 fetching corpus: 10861, signal 218895/232238 (executing program) 2026/01/14 09:29:12 fetching corpus: 10911, signal 219347/232238 (executing program) 2026/01/14 09:29:12 fetching corpus: 10960, signal 219588/232238 (executing program) 2026/01/14 09:29:12 fetching corpus: 11010, signal 219764/232238 (executing program) 2026/01/14 09:29:12 fetching corpus: 11060, signal 220045/232238 (executing program) 2026/01/14 09:29:12 fetching corpus: 11110, signal 220237/232238 (executing program) 2026/01/14 09:29:12 fetching corpus: 11159, signal 220387/232250 (executing program) 2026/01/14 09:29:13 fetching corpus: 11209, signal 220616/232250 (executing program) 2026/01/14 09:29:13 fetching corpus: 11259, signal 220829/232252 (executing program) 2026/01/14 09:29:13 fetching corpus: 11309, signal 221025/232252 (executing program) 2026/01/14 09:29:13 fetching corpus: 11359, signal 221301/232252 (executing program) 2026/01/14 09:29:13 fetching corpus: 11409, signal 221595/232252 (executing program) 2026/01/14 09:29:13 fetching corpus: 11458, signal 222021/232252 (executing program) 2026/01/14 09:29:13 fetching corpus: 11507, signal 222169/232252 (executing program) 2026/01/14 09:29:13 fetching corpus: 11556, signal 222494/232252 (executing program) 2026/01/14 09:29:13 fetching corpus: 11606, signal 222660/232252 (executing program) 2026/01/14 09:29:14 fetching corpus: 11655, signal 222846/232252 (executing program) 2026/01/14 09:29:14 fetching corpus: 11705, signal 223137/232256 (executing program) 2026/01/14 09:29:14 fetching corpus: 11755, signal 223321/232256 (executing program) 2026/01/14 09:29:14 fetching corpus: 11802, signal 223604/232265 (executing program) 2026/01/14 09:29:14 fetching corpus: 11852, signal 223803/232265 (executing program) 2026/01/14 09:29:14 fetching corpus: 11902, signal 224012/232265 (executing program) 2026/01/14 09:29:14 fetching corpus: 11952, signal 224226/232265 (executing program) 2026/01/14 09:29:14 fetching corpus: 12002, signal 224399/232273 (executing program) 2026/01/14 09:29:14 fetching corpus: 12051, signal 224642/232273 (executing program) 2026/01/14 09:29:14 fetching corpus: 12101, signal 224863/232289 (executing program) 2026/01/14 09:29:15 fetching corpus: 12151, signal 225099/232289 (executing program) 2026/01/14 09:29:15 fetching corpus: 12200, signal 225301/232289 (executing program) 2026/01/14 09:29:15 fetching corpus: 12250, signal 225508/232289 (executing program) 2026/01/14 09:29:15 fetching corpus: 12300, signal 225909/232289 (executing program) 2026/01/14 09:29:15 fetching corpus: 12349, signal 226082/232291 (executing program) 2026/01/14 09:29:15 fetching corpus: 12399, signal 226409/232291 (executing program) 2026/01/14 09:29:15 fetching corpus: 12448, signal 226579/232291 (executing program) 2026/01/14 09:29:15 fetching corpus: 12497, signal 226771/232291 (executing program) 2026/01/14 09:29:15 fetching corpus: 12546, signal 226947/232294 (executing program) 2026/01/14 09:29:16 fetching corpus: 12596, signal 227149/232295 (executing program) 2026/01/14 09:29:16 fetching corpus: 12645, signal 227362/232296 (executing program) 2026/01/14 09:29:16 fetching corpus: 12695, signal 227544/232298 (executing program) 2026/01/14 09:29:16 fetching corpus: 12745, signal 227669/232301 (executing program) 2026/01/14 09:29:16 fetching corpus: 12795, signal 227856/232301 (executing program) 2026/01/14 09:29:16 fetching corpus: 12845, signal 228085/232301 (executing program) 2026/01/14 09:29:16 fetching corpus: 12895, signal 228354/232301 (executing program) 2026/01/14 09:29:16 fetching corpus: 12945, signal 228570/232314 (executing program) 2026/01/14 09:29:16 fetching corpus: 12995, signal 228751/232314 (executing program) 2026/01/14 09:29:17 fetching corpus: 13045, signal 229004/232314 (executing program) 2026/01/14 09:29:17 fetching corpus: 13095, signal 229176/232314 (executing program) 2026/01/14 09:29:17 fetching corpus: 13145, signal 229317/232314 (executing program) 2026/01/14 09:29:17 fetching corpus: 13195, signal 229475/232314 (executing program) 2026/01/14 09:29:17 fetching corpus: 13245, signal 229622/232316 (executing program) 2026/01/14 09:29:17 fetching corpus: 13294, signal 229822/232316 (executing program) 2026/01/14 09:29:17 fetching corpus: 13344, signal 230008/232317 (executing program) 2026/01/14 09:29:17 fetching corpus: 13394, signal 230267/232317 (executing program) 2026/01/14 09:29:18 fetching corpus: 13443, signal 230447/232317 (executing program) 2026/01/14 09:29:18 fetching corpus: 13493, signal 230630/232319 (executing program) 2026/01/14 09:29:18 fetching corpus: 13531, signal 230748/232321 (executing program) 2026/01/14 09:29:18 fetching corpus: 13531, signal 230748/232321 (executing program) 2026/01/14 09:29:19 starting 8 fuzzer processes 09:29:19 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000002c40)={0x18, 0x6a, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @pid}]}, 0x18}], 0x1}, 0x0) 09:29:19 executing program 7: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r2, 0x2, 0x6, @link_local}, 0x10) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 09:29:19 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r0, &(0x7f00000000c0), 0x12) 09:29:19 executing program 4: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000040)={{}, 0xbf000000}) [ 91.508555] audit: type=1400 audit(1768382959.853:7): avc: denied { execmem } for pid=273 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 09:29:19 executing program 2: r0 = memfd_create(&(0x7f0000000080)=':^/\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x40000000) 09:29:19 executing program 5: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev(r0, &(0x7f0000002780)=[{&(0x7f0000000380)="bb", 0x1}], 0x1, 0x0, 0x0) truncate(&(0x7f0000000000)='./file0\x00', 0x1) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0xba47}) 09:29:19 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x7, &(0x7f00000000c0), 0x0) epoll_create(0x2) 09:29:19 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000140)=@allocspi={0xf8, 0x15, 0x327, 0x0, 0x0, {{{@in6=@private0, @in6=@ipv4={'\x00', '\xff\xff', @private}}, {@in=@empty}, @in6=@private0}}}, 0xf8}}, 0x0) [ 92.658661] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 92.659367] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 92.664783] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 92.664841] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 92.667936] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 92.668888] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 92.673591] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 92.676127] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 92.678574] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 92.685976] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 92.778561] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 92.784197] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 92.787331] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 92.802062] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 92.804663] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 92.807273] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 92.810404] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 92.812766] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 92.817876] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 92.823025] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 92.825430] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 92.827819] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 92.836999] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 92.840882] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 92.841213] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 92.843680] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 92.846014] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 92.849205] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 92.854499] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 92.857686] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 92.859634] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 92.860954] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 92.865028] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 92.891130] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 92.895904] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 92.914145] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 92.961707] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 92.963905] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 92.966403] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 92.975030] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 94.739989] Bluetooth: hci0: command tx timeout [ 94.741201] Bluetooth: hci1: command tx timeout [ 94.868537] Bluetooth: hci3: command tx timeout [ 94.870573] Bluetooth: hci7: command tx timeout [ 94.931599] Bluetooth: hci4: command tx timeout [ 94.932529] Bluetooth: hci2: command tx timeout [ 94.996482] Bluetooth: hci6: command tx timeout [ 95.061480] Bluetooth: hci5: command tx timeout [ 96.788174] Bluetooth: hci1: command tx timeout [ 96.789107] Bluetooth: hci0: command tx timeout [ 96.915516] Bluetooth: hci3: command tx timeout [ 96.915967] Bluetooth: hci7: command tx timeout [ 96.979547] Bluetooth: hci4: command tx timeout [ 96.980013] Bluetooth: hci2: command tx timeout [ 97.043835] Bluetooth: hci6: command tx timeout [ 97.107498] Bluetooth: hci5: command tx timeout [ 98.835701] Bluetooth: hci0: command tx timeout [ 98.836140] Bluetooth: hci1: command tx timeout [ 98.963873] Bluetooth: hci7: command tx timeout [ 98.964328] Bluetooth: hci3: command tx timeout [ 99.028492] Bluetooth: hci4: command tx timeout [ 99.028938] Bluetooth: hci2: command tx timeout [ 99.091489] Bluetooth: hci6: command tx timeout [ 99.155514] Bluetooth: hci5: command tx timeout [ 100.884517] Bluetooth: hci1: command tx timeout [ 100.884970] Bluetooth: hci0: command tx timeout [ 101.011608] Bluetooth: hci3: command tx timeout [ 101.012063] Bluetooth: hci7: command tx timeout [ 101.075538] Bluetooth: hci2: command tx timeout [ 101.075983] Bluetooth: hci4: command tx timeout [ 101.140517] Bluetooth: hci6: command tx timeout [ 101.204751] Bluetooth: hci5: command tx timeout [ 128.555810] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.556880] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.721630] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.722261] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.905831] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.906478] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 09:29:57 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet(r0, &(0x7f0000000900)=[{{&(0x7f00000001c0)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000800)=[{&(0x7f0000000240)="06d5", 0x2}], 0x1, &(0x7f0000000a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @remote}}}], 0x20}}, {{&(0x7f0000000040), 0x10, 0x0, 0x0, &(0x7f0000000280)=[@ip_retopts={{0x18, 0x0, 0x34, {[@cipso={0x86, 0x6}]}}}], 0x18}}], 0x2, 0x0) [ 129.042785] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.043387] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 09:29:57 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) 09:29:57 executing program 2: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}) [ 129.148669] audit: type=1400 audit(1768382997.493:8): avc: denied { open } for pid=3835 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 129.150346] audit: type=1400 audit(1768382997.493:9): avc: denied { kernel } for pid=3835 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 129.174899] audit: type=1400 audit(1768382997.519:10): avc: denied { write } for pid=3835 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 129.190425] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.192478] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 09:29:57 executing program 2: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}) [ 129.315771] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.316418] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 09:29:57 executing program 2: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}) [ 129.370109] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.371630] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 09:29:57 executing program 2: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}) [ 129.485936] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.487528] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 09:29:57 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r0, &(0x7f00000000c0), 0x12) 09:29:57 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) fallocate(r0, 0x0, 0x0, 0x0) [ 129.617841] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.618425] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.644482] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.645108] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.805770] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.806349] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.871778] mac80211_hwsim hwsim9 wlan0: entered allmulticast mode [ 129.873248] mac80211_hwsim hwsim9 wlan0: left allmulticast mode [ 129.879395] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.880050] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.930070] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.930915] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.974260] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.974858] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.004317] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.005304] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.044133] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.044725] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 09:29:58 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0x0, 0x0) readv(r0, &(0x7f00000013c0)=[{&(0x7f0000001240)=""/73, 0x49}], 0x1) 09:29:58 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r0, &(0x7f00000000c0), 0x12) 09:29:58 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)={0x24, 0x1a, 0x1, 0x0, 0x0, "", [@nested={0xa, 0x0, 0x0, 0x1, [@typed={0x0, 0x0, 0x0, 0x0, @fd}, @typed={0x8, 0x10, 0x0, 0x0, @fd}]}]}, 0x24}], 0x1}, 0x0) 09:29:58 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000180)={0x1f, 0x0, @fixed}, 0xe) listen(r0, 0x0) accept(r0, 0x0, 0x0) 09:29:58 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x7, &(0x7f00000000c0), 0x0) epoll_create(0x2) 09:29:58 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) fallocate(r0, 0x0, 0x0, 0x0) 09:29:58 executing program 7: r0 = getpid() r1 = pidfd_open(r0, 0x0) process_madvise(r1, &(0x7f00000016c0)=[{&(0x7f0000000000)='B', 0x1}, {0x0}, {0x0}, {&(0x7f00000003c0), 0x2}, {&(0x7f00000004c0)}, {0x0}, {0x0}, {&(0x7f00000015c0)}, {0x0, 0xfffffdf8}], 0x9, 0x15, 0x0) 09:29:58 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[]) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x104000, 0x0) mount$9p_unix(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1005841, 0x0) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[]) umount2(&(0x7f0000001380)='./file0\x00', 0x3) [ 130.229912] ======================================================= [ 130.229912] WARNING: The mand mount option has been deprecated and [ 130.229912] and is ignored by this kernel. Remove the mand [ 130.229912] option from the mount to silence this warning. [ 130.229912] ======================================================= 09:29:59 executing program 4: kexec_load(0x0, 0x10, 0x0, 0x0) 09:29:59 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) fallocate(r0, 0x0, 0x0, 0x0) 09:29:59 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="0d8fbb9dc2850f669541b114ee023e286e456b5d46b3928107ff5dabb2205855628ec5c71c8f82ed775629e1e7ad5c9eebfa38f51b5bc6b4b43b2defe569d74a79b9547b166104407a99cd9323d1fae48108d54c68312152b74460953c99e3bcdb8a09cfb7d6", 0x66}], 0x1) 09:29:59 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r0, &(0x7f00000000c0), 0x12) 09:29:59 executing program 7: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x5b}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'dummy0\x00'}) ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f00000000c0)={'veth1_virt_wifi\x00'}) 09:29:59 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x7, &(0x7f00000000c0), 0x0) epoll_create(0x2) 09:29:59 executing program 6: pipe(&(0x7f0000000880)={0xffffffffffffffff}) fcntl$setstatus(r0, 0x407, 0x85020000) 09:29:59 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000180)={0x1f, 0x0, @fixed}, 0xe) listen(r0, 0x0) accept(r0, 0x0, 0x0) 09:29:59 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) fallocate(r0, 0x0, 0x0, 0x0) 09:29:59 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000480), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000004c0)={0x0, 0x0, 0x7f}) 09:29:59 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@updpolicy={0xc4, 0x19, 0x441, 0x0, 0x0, {{@in6=@remote, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x0) [ 131.284853] program syz-executor.6 is using a deprecated SCSI ioctl, please convert it to SG_IO 09:29:59 executing program 4: kexec_load(0x0, 0x1, &(0x7f0000000180)=[{0x0, 0x0, 0x5d, 0xfffffffffffffffb}], 0x0) 09:29:59 executing program 6: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0xaa, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioprio_set$uid(0x0, 0x0, 0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x63, 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x0) io_setup(0xfff, &(0x7f0000000040)) syz_open_dev$ptys(0xc, 0x3, 0x0) lstat(&(0x7f0000001400)='./file0\x00', 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x0, 0x8, 0x7, 0x0, 0x0, 0xa3, 0x27888, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x101, 0x0, @perf_config_ext={0x10000}, 0xa401, 0x4, 0x5, 0x6, 0x101, 0x0, 0x8, 0x0, 0x9}, 0x0, 0xd, r0, 0x3) pidfd_getfd(r1, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) 09:29:59 executing program 1: syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='..'], &(0x7f0000000200)='./file0\x00', 0x0, 0x200d090, 0x0) 09:30:00 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="0d8fbb9dc2850f669541b114ee023e286e456b5d46b3928107ff5dabb2205855628ec5c71c8f82ed775629e1e7ad5c9eebfa38f51b5bc6b4b43b2defe569d74a79b9547b166104407a99cd9323d1fae48108d54c68312152b74460953c99e3bcdb8a09cfb7d6", 0x66}], 0x1) 09:30:00 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000180)={0x1f, 0x0, @fixed}, 0xe) listen(r0, 0x0) accept(r0, 0x0, 0x0) 09:30:00 executing program 4: r0 = getpid() wait4(r0, 0x0, 0x20000000, 0x0) 09:30:00 executing program 1: syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='..'], &(0x7f0000000200)='./file0\x00', 0x0, 0x200d090, 0x0) 09:30:00 executing program 7: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x5b}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'dummy0\x00'}) ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f00000000c0)={'veth1_virt_wifi\x00'}) 09:30:00 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdab39eac554c6bee, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x208, &(0x7f0000000080)=0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) io_submit(r0, 0x1, &(0x7f0000000240)=[0x0]) io_setup(0x4, 0x0) io_destroy(0x0) r2 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x7fffdf001000, 0x0, 0x11, r2, 0x0) r3 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x7fffdf001000, 0x0, 0x11, r3, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r4, &(0x7f0000000900)="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", 0x200) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r4, 0x4, 0x44000) sendfile(r4, r5, 0x0, 0xfdef) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x10000002}) 09:30:00 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x7, &(0x7f00000000c0), 0x0) epoll_create(0x2) 09:30:00 executing program 2: r0 = memfd_create(&(0x7f0000000000)=':^/\x00', 0x7) lseek(r0, 0x0, 0x3) 09:30:00 executing program 4: r0 = socket$inet(0x2, 0x3, 0x26) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x2, 0x0, @dev}, 0x10) r1 = dup2(r0, r0) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) 09:30:00 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) mlock2(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0) 09:30:00 executing program 1: syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='..'], &(0x7f0000000200)='./file0\x00', 0x0, 0x200d090, 0x0) 09:30:00 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="0d8fbb9dc2850f669541b114ee023e286e456b5d46b3928107ff5dabb2205855628ec5c71c8f82ed775629e1e7ad5c9eebfa38f51b5bc6b4b43b2defe569d74a79b9547b166104407a99cd9323d1fae48108d54c68312152b74460953c99e3bcdb8a09cfb7d6", 0x66}], 0x1) 09:30:00 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r0, 0x0) sendmsg$inet(r1, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x20004880) 09:30:00 executing program 7: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x5b}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'dummy0\x00'}) ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f00000000c0)={'veth1_virt_wifi\x00'}) 09:30:01 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000180)={0x1f, 0x0, @fixed}, 0xe) listen(r0, 0x0) accept(r0, 0x0, 0x0) 09:30:01 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) mlock2(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0) 09:30:01 executing program 7: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x5b}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'dummy0\x00'}) ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f00000000c0)={'veth1_virt_wifi\x00'}) 09:30:01 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x2) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='ramfs\x00', 0x14000, 0x0) r0 = syz_mount_image$tmpfs(&(0x7f00000001c0), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0xa40024, &(0x7f0000000200)=ANY=[]) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setuid(r1) mknodat$loop(r0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) 09:30:01 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdab39eac554c6bee, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x208, &(0x7f0000000080)=0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) io_submit(r0, 0x1, &(0x7f0000000240)=[0x0]) io_setup(0x4, 0x0) io_destroy(0x0) r2 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x7fffdf001000, 0x0, 0x11, r2, 0x0) r3 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x7fffdf001000, 0x0, 0x11, r3, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r4, &(0x7f0000000900)="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", 0x200) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r4, 0x4, 0x44000) sendfile(r4, r5, 0x0, 0xfdef) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x10000002}) 09:30:01 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="0d8fbb9dc2850f669541b114ee023e286e456b5d46b3928107ff5dabb2205855628ec5c71c8f82ed775629e1e7ad5c9eebfa38f51b5bc6b4b43b2defe569d74a79b9547b166104407a99cd9323d1fae48108d54c68312152b74460953c99e3bcdb8a09cfb7d6", 0x66}], 0x1) 09:30:01 executing program 1: syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='..'], &(0x7f0000000200)='./file0\x00', 0x0, 0x200d090, 0x0) 09:30:01 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = dup(r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) 09:30:01 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdab39eac554c6bee, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x208, &(0x7f0000000080)=0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) io_submit(r0, 0x1, &(0x7f0000000240)=[0x0]) io_setup(0x4, 0x0) io_destroy(0x0) r2 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x7fffdf001000, 0x0, 0x11, r2, 0x0) r3 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x7fffdf001000, 0x0, 0x11, r3, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r4, &(0x7f0000000900)="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", 0x200) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r4, 0x4, 0x44000) sendfile(r4, r5, 0x0, 0xfdef) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x10000002}) 09:30:01 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdab39eac554c6bee, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x208, &(0x7f0000000080)=0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) io_submit(r0, 0x1, &(0x7f0000000240)=[0x0]) io_setup(0x4, 0x0) io_destroy(0x0) r2 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x7fffdf001000, 0x0, 0x11, r2, 0x0) r3 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x7fffdf001000, 0x0, 0x11, r3, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r4, &(0x7f0000000900)="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", 0x200) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r4, 0x4, 0x44000) sendfile(r4, r5, 0x0, 0xfdef) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x10000002}) 09:30:01 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)={0x1c, r2, 0x5, 0x0, 0x0, {{0x7}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) pread64(r1, &(0x7f0000000180)=""/48, 0x30, 0x10001) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r3, 0x5, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x220}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x28, r2, 0x200, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x1, 0x2c}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20004055}, 0x804) io_submit(0x0, 0x1, &(0x7f0000000300)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040)="5399593869b613a532b989d472a0e52a11", 0x11}]) readahead(0xffffffffffffffff, 0x0, 0x98) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x3, 0x1ff, 0xffffffff}) io_setup(0x1ff, &(0x7f0000000000)) faccessat2(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x2, 0x1200) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) dup3(r0, r5, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00') pread64(r6, &(0x7f0000000040)=""/156, 0x9c, 0x0) ioctl$SIOCGIFHWADDR(r6, 0x8927, &(0x7f0000000140)={'veth0_macvtap\x00'}) 09:30:01 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x3, 0x0) setsockopt$packet_fanout(r0, 0x107, 0xf, &(0x7f00000000c0), 0x4) 09:30:01 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000400)="edbc08196769616e5ec353cafc477b3496e78e8dac8e8cd1ac4b02706fbb057b22", 0x0, 0x0, 0x0, 0x0, 0x0}) 09:30:01 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) mlock2(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0) 09:30:01 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCRTMSG(r0, 0x890d, 0x0) [ 133.942917] syz-executor.6 (4015) used greatest stack depth: 23672 bytes left 09:30:02 executing program 7: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)={0x1c, r2, 0x5, 0x0, 0x0, {{0x7}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) pread64(r1, &(0x7f0000000180)=""/48, 0x30, 0x10001) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r3, 0x5, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x220}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x28, r2, 0x200, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x1, 0x2c}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20004055}, 0x804) io_submit(0x0, 0x1, &(0x7f0000000300)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040)="5399593869b613a532b989d472a0e52a11", 0x11}]) readahead(0xffffffffffffffff, 0x0, 0x98) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x3, 0x1ff, 0xffffffff}) io_setup(0x1ff, &(0x7f0000000000)) faccessat2(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x2, 0x1200) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) dup3(r0, r5, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00') pread64(r6, &(0x7f0000000040)=""/156, 0x9c, 0x0) ioctl$SIOCGIFHWADDR(r6, 0x8927, &(0x7f0000000140)={'veth0_macvtap\x00'}) 09:30:02 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdab39eac554c6bee, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x208, &(0x7f0000000080)=0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) io_submit(r0, 0x1, &(0x7f0000000240)=[0x0]) io_setup(0x4, 0x0) io_destroy(0x0) r2 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x7fffdf001000, 0x0, 0x11, r2, 0x0) r3 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x7fffdf001000, 0x0, 0x11, r3, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r4, &(0x7f0000000900)="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", 0x200) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r4, 0x4, 0x44000) sendfile(r4, r5, 0x0, 0xfdef) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x10000002}) 09:30:02 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) mlock2(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0) 09:30:02 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)={0x1c, r2, 0x5, 0x0, 0x0, {{0x7}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) pread64(r1, &(0x7f0000000180)=""/48, 0x30, 0x10001) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r3, 0x5, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x220}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x28, r2, 0x200, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x1, 0x2c}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20004055}, 0x804) io_submit(0x0, 0x1, &(0x7f0000000300)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040)="5399593869b613a532b989d472a0e52a11", 0x11}]) readahead(0xffffffffffffffff, 0x0, 0x98) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x3, 0x1ff, 0xffffffff}) io_setup(0x1ff, &(0x7f0000000000)) faccessat2(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x2, 0x1200) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) dup3(r0, r5, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00') pread64(r6, &(0x7f0000000040)=""/156, 0x9c, 0x0) ioctl$SIOCGIFHWADDR(r6, 0x8927, &(0x7f0000000140)={'veth0_macvtap\x00'}) 09:30:02 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdab39eac554c6bee, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x208, &(0x7f0000000080)=0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) io_submit(r0, 0x1, &(0x7f0000000240)=[0x0]) io_setup(0x4, 0x0) io_destroy(0x0) r2 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x7fffdf001000, 0x0, 0x11, r2, 0x0) r3 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x7fffdf001000, 0x0, 0x11, r3, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r4, &(0x7f0000000900)="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", 0x200) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r4, 0x4, 0x44000) sendfile(r4, r5, 0x0, 0xfdef) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x10000002}) 09:30:02 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCRTMSG(r0, 0x890d, 0x0) 09:30:02 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)={0x1c, r2, 0x5, 0x0, 0x0, {{0x7}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) pread64(r1, &(0x7f0000000180)=""/48, 0x30, 0x10001) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r3, 0x5, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x220}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x28, r2, 0x200, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x1, 0x2c}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20004055}, 0x804) io_submit(0x0, 0x1, &(0x7f0000000300)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040)="5399593869b613a532b989d472a0e52a11", 0x11}]) readahead(0xffffffffffffffff, 0x0, 0x98) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x3, 0x1ff, 0xffffffff}) io_setup(0x1ff, &(0x7f0000000000)) faccessat2(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x2, 0x1200) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) dup3(r0, r5, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00') pread64(r6, &(0x7f0000000040)=""/156, 0x9c, 0x0) ioctl$SIOCGIFHWADDR(r6, 0x8927, &(0x7f0000000140)={'veth0_macvtap\x00'}) 09:30:02 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdab39eac554c6bee, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x208, &(0x7f0000000080)=0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) io_submit(r0, 0x1, &(0x7f0000000240)=[0x0]) io_setup(0x4, 0x0) io_destroy(0x0) r2 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x7fffdf001000, 0x0, 0x11, r2, 0x0) r3 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x7fffdf001000, 0x0, 0x11, r3, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r4, &(0x7f0000000900)="5ed0b2ff68d76fb346352b602a2a1295cbe01cb3f64fbed9e7f9bc9be0f300cb97f6a204cc586e45dfb949002f61f8fb969dd435dd0c37c5077e5b10cfeafd75205e215b167323a3b971b0ec98e6c3d4d825cae01271cb35cdd091e4872367f354e0dc81a7e4ac79775bc1dcaafe2f5079da79d1989f1ddce6722fc438a7217526cfe75d53471624d6f091e19a7fb699ea27efa9e0fd1914e7c35f297afd9b9b85ff0ce7a982f4fa0c172ea5f06479eec302f30e5df66273717e028f4ca7d4c5b6bc8a3c3c67f688195f22488a15d9e1f7e5fed3a6c2aba7bc308b0e2c5657f4538f4a3bf9b975bb887a901ab3c85261be3e331b741313e78b5ad63b7b1b378e9c79dc4a95b2b4d15cd1d1b808844378f882a72af1e5b0eefd356e0247246e60643204c3b46183dbe4e066c55cb1dcdaa7b70ef43ab2fa4d2b8c4c1a89cb0e325fd9716874d3856cf368efd1f92d21214e55e4de647c37c71887d11f74f9afe1616e3054ceae601e4b3555e243c1882ad42c7730caeb309e7714ad87c55e9fba308cfc4161e562abde3ac4f3d7e0a3584d4928100197f102307c05c0b4b4898b0591bc1433af443478979f28e6136ffb21aaeac2be5490475a08e96bb94fd9d9d3aa2f8a1e147a80ba9bfd04dac3f476ff128476c693ea71f7be47a508c98eddc479eb703d6f17cc5be2182f7c39b0a47eb23e0808b5d87dd2a9ce88eb48a601", 0x200) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r4, 0x4, 0x44000) sendfile(r4, r5, 0x0, 0xfdef) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x10000002}) 09:30:02 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCRTMSG(r0, 0x890d, 0x0) 09:30:02 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCRTMSG(r0, 0x890d, 0x0) 09:30:02 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)={0x1c, r2, 0x5, 0x0, 0x0, {{0x7}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) pread64(r1, &(0x7f0000000180)=""/48, 0x30, 0x10001) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r3, 0x5, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x220}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x28, r2, 0x200, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x1, 0x2c}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20004055}, 0x804) io_submit(0x0, 0x1, &(0x7f0000000300)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040)="5399593869b613a532b989d472a0e52a11", 0x11}]) readahead(0xffffffffffffffff, 0x0, 0x98) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x3, 0x1ff, 0xffffffff}) io_setup(0x1ff, &(0x7f0000000000)) faccessat2(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x2, 0x1200) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) dup3(r0, r5, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00') pread64(r6, &(0x7f0000000040)=""/156, 0x9c, 0x0) ioctl$SIOCGIFHWADDR(r6, 0x8927, &(0x7f0000000140)={'veth0_macvtap\x00'}) 09:30:02 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)={0x1c, r2, 0x5, 0x0, 0x0, {{0x7}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) pread64(r1, &(0x7f0000000180)=""/48, 0x30, 0x10001) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r3, 0x5, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x220}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x28, r2, 0x200, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x1, 0x2c}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20004055}, 0x804) io_submit(0x0, 0x1, &(0x7f0000000300)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040)="5399593869b613a532b989d472a0e52a11", 0x11}]) readahead(0xffffffffffffffff, 0x0, 0x98) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x3, 0x1ff, 0xffffffff}) io_setup(0x1ff, &(0x7f0000000000)) faccessat2(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x2, 0x1200) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) dup3(r0, r5, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00') pread64(r6, &(0x7f0000000040)=""/156, 0x9c, 0x0) ioctl$SIOCGIFHWADDR(r6, 0x8927, &(0x7f0000000140)={'veth0_macvtap\x00'}) 09:30:02 executing program 7: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)={0x1c, r2, 0x5, 0x0, 0x0, {{0x7}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) pread64(r1, &(0x7f0000000180)=""/48, 0x30, 0x10001) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r3, 0x5, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x220}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x28, r2, 0x200, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x1, 0x2c}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20004055}, 0x804) io_submit(0x0, 0x1, &(0x7f0000000300)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040)="5399593869b613a532b989d472a0e52a11", 0x11}]) readahead(0xffffffffffffffff, 0x0, 0x98) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x3, 0x1ff, 0xffffffff}) io_setup(0x1ff, &(0x7f0000000000)) faccessat2(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x2, 0x1200) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) dup3(r0, r5, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00') pread64(r6, &(0x7f0000000040)=""/156, 0x9c, 0x0) ioctl$SIOCGIFHWADDR(r6, 0x8927, &(0x7f0000000140)={'veth0_macvtap\x00'}) 09:30:02 executing program 2: prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x0) 09:30:02 executing program 7: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)={0x1c, r2, 0x5, 0x0, 0x0, {{0x7}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) pread64(r1, &(0x7f0000000180)=""/48, 0x30, 0x10001) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r3, 0x5, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x220}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x28, r2, 0x200, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x1, 0x2c}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20004055}, 0x804) io_submit(0x0, 0x1, &(0x7f0000000300)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040)="5399593869b613a532b989d472a0e52a11", 0x11}]) readahead(0xffffffffffffffff, 0x0, 0x98) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x3, 0x1ff, 0xffffffff}) io_setup(0x1ff, &(0x7f0000000000)) faccessat2(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x2, 0x1200) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) dup3(r0, r5, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00') pread64(r6, &(0x7f0000000040)=""/156, 0x9c, 0x0) ioctl$SIOCGIFHWADDR(r6, 0x8927, &(0x7f0000000140)={'veth0_macvtap\x00'}) 09:30:02 executing program 5: openat$bsg(0xffffffffffffff9c, &(0x7f0000000600), 0x418001, 0x0) 09:30:02 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)={0x1c, r2, 0x5, 0x0, 0x0, {{0x7}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) pread64(r1, &(0x7f0000000180)=""/48, 0x30, 0x10001) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r3, 0x5, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x220}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x28, r2, 0x200, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x1, 0x2c}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20004055}, 0x804) io_submit(0x0, 0x1, &(0x7f0000000300)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040)="5399593869b613a532b989d472a0e52a11", 0x11}]) readahead(0xffffffffffffffff, 0x0, 0x98) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x3, 0x1ff, 0xffffffff}) io_setup(0x1ff, &(0x7f0000000000)) faccessat2(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x2, 0x1200) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) dup3(r0, r5, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00') pread64(r6, &(0x7f0000000040)=""/156, 0x9c, 0x0) ioctl$SIOCGIFHWADDR(r6, 0x8927, &(0x7f0000000140)={'veth0_macvtap\x00'}) 09:30:02 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)={0x1c, r2, 0x5, 0x0, 0x0, {{0x7}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) pread64(r1, &(0x7f0000000180)=""/48, 0x30, 0x10001) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r3, 0x5, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x220}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x28, r2, 0x200, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x1, 0x2c}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20004055}, 0x804) io_submit(0x0, 0x1, &(0x7f0000000300)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040)="5399593869b613a532b989d472a0e52a11", 0x11}]) readahead(0xffffffffffffffff, 0x0, 0x98) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x3, 0x1ff, 0xffffffff}) io_setup(0x1ff, &(0x7f0000000000)) faccessat2(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x2, 0x1200) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) dup3(r0, r5, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00') pread64(r6, &(0x7f0000000040)=""/156, 0x9c, 0x0) ioctl$SIOCGIFHWADDR(r6, 0x8927, &(0x7f0000000140)={'veth0_macvtap\x00'}) 09:30:03 executing program 2: prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x0) 09:30:03 executing program 5: openat$bsg(0xffffffffffffff9c, &(0x7f0000000600), 0x418001, 0x0) 09:30:03 executing program 7: sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00', @ANYRES16=0x0, @ANYBLOB="000000000000000000000700000014000300ff02000000000000000000000000000114ea"], 0x3c}}, 0x0) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='nfs\x00', 0x0, &(0x7f00000000c0)='\x04') 09:30:03 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdab39eac554c6bee, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x208, &(0x7f0000000080)=0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) io_submit(r0, 0x1, &(0x7f0000000240)=[0x0]) io_setup(0x4, 0x0) io_destroy(0x0) r2 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x7fffdf001000, 0x0, 0x11, r2, 0x0) r3 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x7fffdf001000, 0x0, 0x11, r3, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r4, &(0x7f0000000900)="5ed0b2ff68d76fb346352b602a2a1295cbe01cb3f64fbed9e7f9bc9be0f300cb97f6a204cc586e45dfb949002f61f8fb969dd435dd0c37c5077e5b10cfeafd75205e215b167323a3b971b0ec98e6c3d4d825cae01271cb35cdd091e4872367f354e0dc81a7e4ac79775bc1dcaafe2f5079da79d1989f1ddce6722fc438a7217526cfe75d53471624d6f091e19a7fb699ea27efa9e0fd1914e7c35f297afd9b9b85ff0ce7a982f4fa0c172ea5f06479eec302f30e5df66273717e028f4ca7d4c5b6bc8a3c3c67f688195f22488a15d9e1f7e5fed3a6c2aba7bc308b0e2c5657f4538f4a3bf9b975bb887a901ab3c85261be3e331b741313e78b5ad63b7b1b378e9c79dc4a95b2b4d15cd1d1b808844378f882a72af1e5b0eefd356e0247246e60643204c3b46183dbe4e066c55cb1dcdaa7b70ef43ab2fa4d2b8c4c1a89cb0e325fd9716874d3856cf368efd1f92d21214e55e4de647c37c71887d11f74f9afe1616e3054ceae601e4b3555e243c1882ad42c7730caeb309e7714ad87c55e9fba308cfc4161e562abde3ac4f3d7e0a3584d4928100197f102307c05c0b4b4898b0591bc1433af443478979f28e6136ffb21aaeac2be5490475a08e96bb94fd9d9d3aa2f8a1e147a80ba9bfd04dac3f476ff128476c693ea71f7be47a508c98eddc479eb703d6f17cc5be2182f7c39b0a47eb23e0808b5d87dd2a9ce88eb48a601", 0x200) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r4, 0x4, 0x44000) sendfile(r4, r5, 0x0, 0xfdef) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x10000002}) 09:30:03 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdab39eac554c6bee, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x208, &(0x7f0000000080)=0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) io_submit(r0, 0x1, &(0x7f0000000240)=[0x0]) io_setup(0x4, 0x0) io_destroy(0x0) r2 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x7fffdf001000, 0x0, 0x11, r2, 0x0) r3 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x7fffdf001000, 0x0, 0x11, r3, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r4, &(0x7f0000000900)="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", 0x200) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r4, 0x4, 0x44000) sendfile(r4, r5, 0x0, 0xfdef) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x10000002}) 09:30:03 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) recvmmsg(r0, &(0x7f00000029c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=""/193, 0xc1}}], 0x1, 0x0, 0x0) 09:30:03 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdab39eac554c6bee, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x208, &(0x7f0000000080)=0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) io_submit(r0, 0x1, &(0x7f0000000240)=[0x0]) io_setup(0x4, 0x0) io_destroy(0x0) r2 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x7fffdf001000, 0x0, 0x11, r2, 0x0) r3 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x7fffdf001000, 0x0, 0x11, r3, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r4, &(0x7f0000000900)="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", 0x200) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r4, 0x4, 0x44000) sendfile(r4, r5, 0x0, 0xfdef) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x10000002}) 09:30:03 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f00000043c0)=[{{&(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback={0xffffff7f00000000}}, 0x1c, 0x0}}], 0x1, 0x0) 09:30:03 executing program 2: prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x0) 09:30:03 executing program 5: openat$bsg(0xffffffffffffff9c, &(0x7f0000000600), 0x418001, 0x0) 09:30:03 executing program 2: prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x0) 09:30:03 executing program 7: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r2, 0x1, 0x6, @remote}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000000c0)={r2, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x2, &(0x7f0000000000)={0x0, 0x1, 0x6, @remote}, 0x10) 09:30:03 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f00000043c0)=[{{&(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback={0xffffff7f00000000}}, 0x1c, 0x0}}], 0x1, 0x0) 09:30:03 executing program 2: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x40032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) [ 135.368483] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 135.379053] mac80211_hwsim hwsim11 wlan1: left promiscuous mode [ 135.390942] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 135.394583] mac80211_hwsim hwsim11 wlan1: left promiscuous mode 09:30:03 executing program 5: openat$bsg(0xffffffffffffff9c, &(0x7f0000000600), 0x418001, 0x0) 09:30:03 executing program 2: shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000100)=""/93) [ 136.036818] syz-executor.1 (4103) used greatest stack depth: 23536 bytes left 09:30:04 executing program 7: r0 = socket$packet(0x11, 0x2, 0x300) fallocate(r0, 0x0, 0x0, 0x48d) 09:30:04 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f00000043c0)=[{{&(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback={0xffffff7f00000000}}, 0x1c, 0x0}}], 0x1, 0x0) 09:30:04 executing program 2: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) 09:30:04 executing program 5: ptrace(0x10, 0x1) wait4(0x0, 0x0, 0x0, 0x0) 09:30:04 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) recvmmsg(r0, &(0x7f00000029c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=""/193, 0xc1}}], 0x1, 0x0, 0x0) 09:30:04 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0x13, &(0x7f0000001100), &(0x7f0000001140)=0x4) 09:30:04 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x4}) 09:30:04 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f00000043c0)=[{{&(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback={0xffffff7f00000000}}, 0x1c, 0x0}}], 0x1, 0x0) 09:30:04 executing program 7: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write$binfmt_aout(r1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 09:30:04 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$IP_SET_OP_GET_FNAME(r0, 0x1, 0x45, 0x0, &(0x7f00000007c0)) 09:30:04 executing program 2: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) 09:30:04 executing program 7: r0 = msgget$private(0x0, 0x90) msgsnd(r0, &(0x7f0000001480)={0x1}, 0x8, 0x0) 09:30:04 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000040)=':\x19\xbd\x9d', 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) 09:30:04 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0xfff, &(0x7f0000000040)) [ 136.431923] [ 136.432131] ===================================== [ 136.432515] WARNING: bad unlock balance detected! [ 136.432900] 6.19.0-rc5-next-20260114 #1 Not tainted [ 136.433344] ------------------------------------- [ 136.433790] syz-executor.2/286 is trying to release lock (rcu_read_lock) at: [ 136.434418] [] __wait_on_freeing_inode+0x105/0x350 [ 136.435411] but there are no more locks to release! [ 136.436085] [ 136.436085] other info that might help us debug this: [ 136.436966] 4 locks held by syz-executor.2/286: [ 136.437787] #0: ffff88800fbca3f8 (sb_writers#3){.+.+}-{0:0}, at: filename_create+0xf7/0x400 [ 136.439173] #1: ffff88801c06ecb8 (&type->i_mutex_dir_key#3/1){+.+.}-{4:4}, at: filename_create+0x1b1/0x400 [ 136.440633] #2: ffff88800f96a950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xe32/0x12d0 [ 136.442046] #3: ffffffff85c16898 (inode_hash_lock){+.+.}-{3:3}, at: insert_inode_locked+0xf9/0x890 [ 136.443529] [ 136.443529] stack backtrace: [ 136.444188] CPU: 1 UID: 0 PID: 286 Comm: syz-executor.2 Not tainted 6.19.0-rc5-next-20260114 #1 PREEMPT(lazy) [ 136.444204] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 136.444211] Call Trace: [ 136.444215] [ 136.444220] dump_stack_lvl+0xca/0x120 [ 136.444250] ? __wait_on_freeing_inode+0x105/0x350 [ 136.444264] print_unlock_imbalance_bug+0x118/0x130 [ 136.444280] ? __wait_on_freeing_inode+0x105/0x350 [ 136.444295] lock_release+0x1ee/0x270 [ 136.444311] __wait_on_freeing_inode+0x10a/0x350 [ 136.444326] ? __pfx___wait_on_freeing_inode+0x10/0x10 [ 136.444342] ? __pfx_var_wake_function+0x10/0x10 [ 136.444361] ? lock_is_held_type+0x9e/0x120 [ 136.444381] insert_inode_locked+0x25f/0x890 [ 136.444400] __ext4_new_inode+0x223d/0x4cd0 [ 136.444419] ? __pfx___ext4_new_inode+0x10/0x10 [ 136.444434] ? __pfx_avc_has_perm+0x10/0x10 [ 136.444449] ? __pfx___dquot_initialize+0x10/0x10 [ 136.444471] ext4_mkdir+0x331/0xb30 [ 136.444492] ? __pfx_ext4_mkdir+0x10/0x10 [ 136.444508] ? security_inode_permission+0x72/0xe0 [ 136.444522] vfs_mkdir+0x6d8/0xc00 [ 136.444540] do_mkdirat+0x11a/0x440 [ 136.444554] ? __pfx_do_mkdirat+0x10/0x10 [ 136.444566] ? strncpy_from_user+0x21b/0x2f0 [ 136.444584] __x64_sys_mkdir+0x65/0x80 [ 136.444597] do_syscall_64+0xbf/0x420 [ 136.444610] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.444623] RIP: 0033:0x7fb5ec135c27 [ 136.444632] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 136.444643] RSP: 002b:00007ffd5e4f0308 EFLAGS: 00000202 ORIG_RAX: 0000000000000053 [ 136.444655] RAX: ffffffffffffffda RBX: 00007ffd5e4f0390 RCX: 00007fb5ec135c27 [ 136.444662] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 00007ffd5e4f0390 [ 136.444669] RBP: 00007ffd5e4f036c R08: 0000000000000000 R09: 0000000000000004 [ 136.444676] R10: 00007ffd5e4f00a6 R11: 0000000000000202 R12: 0000000000000032 [ 136.444684] R13: 0000000000021404 R14: 0000000000000006 R15: 00007ffd5e4f03d0 [ 136.444696] [ 136.463275] ------------[ cut here ]------------ [ 136.463749] WARNING: kernel/rcu/tree_plugin.h:443 at __rcu_read_unlock+0x25f/0x5c0, CPU#1: syz-executor.2/286 [ 136.464745] Modules linked in: [ 136.465077] CPU: 1 UID: 0 PID: 286 Comm: syz-executor.2 Not tainted 6.19.0-rc5-next-20260114 #1 PREEMPT(lazy) [ 136.466002] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 136.466779] RIP: 0010:__rcu_read_unlock+0x25f/0x5c0 [ 136.467292] Code: f2 02 00 00 c7 43 58 01 00 00 00 bf 09 00 00 00 e8 16 c0 de ff 4d 85 f6 0f 84 73 fe ff ff e8 38 8a 20 00 fb e9 68 fe ff ff 90 <0f> 0b 90 5b 5d 41 5c 41 5d 41 5e e9 81 24 74 03 e8 bc 5c 56 00 e9 [ 136.468959] RSP: 0018:ffff88801ad1f9e0 EFLAGS: 00010286 [ 136.469482] RAX: 00000000ffffffff RBX: ffff8880168a3700 RCX: ffffffff81565a27 [ 136.470112] RDX: 0000000000000000 RSI: ffffffff81565a30 RDI: ffff8880168a3afc [ 136.470791] RBP: ffff8880168a3700 R08: 0000000000000000 R09: fffffbfff0ba6ffc [ 136.471423] R10: 0000000000000000 R11: 0000000000000001 R12: ffff8880168a3700 [ 136.472119] R13: 0000000000000001 R14: ffffffff85c0eaf0 R15: ffff88804e4fa938 [ 136.472811] FS: 0000555567ecf400(0000) GS:ffff8880e5443000(0000) knlGS:0000000000000000 [ 136.473570] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 136.474090] CR2: 00007ffd5e4eefa8 CR3: 000000001f194000 CR4: 0000000000350ef0 [ 136.474784] Call Trace: [ 136.475055] [ 136.475767] __wait_on_freeing_inode+0x10f/0x350 [ 136.476531] ? __pfx___wait_on_freeing_inode+0x10/0x10 [ 136.477669] ? __pfx_var_wake_function+0x10/0x10 [ 136.478938] ? lock_is_held_type+0x9e/0x120 [ 136.480084] insert_inode_locked+0x25f/0x890 [ 136.481761] __ext4_new_inode+0x223d/0x4cd0 [ 136.484241] ? __pfx___ext4_new_inode+0x10/0x10 [ 136.485229] ? __pfx_avc_has_perm+0x10/0x10 [ 136.485910] ? __pfx___dquot_initialize+0x10/0x10 [ 136.488141] ext4_mkdir+0x331/0xb30 [ 136.490113] ? __pfx_ext4_mkdir+0x10/0x10 [ 136.490784] ? security_inode_permission+0x72/0xe0 [ 136.492476] vfs_mkdir+0x6d8/0xc00 [ 136.493855] do_mkdirat+0x11a/0x440 [ 136.494872] ? __pfx_do_mkdirat+0x10/0x10 [ 136.495625] ? strncpy_from_user+0x21b/0x2f0 [ 136.497477] __x64_sys_mkdir+0x65/0x80 [ 136.498054] do_syscall_64+0xbf/0x420 [ 136.498844] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.499325] RIP: 0033:0x7fb5ec135c27 [ 136.499714] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 136.501089] RSP: 002b:00007ffd5e4f0308 EFLAGS: 00000202 ORIG_RAX: 0000000000000053 [ 136.501696] RAX: ffffffffffffffda RBX: 00007ffd5e4f0390 RCX: 00007fb5ec135c27 [ 136.502222] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 00007ffd5e4f0390 [ 136.502790] RBP: 00007ffd5e4f036c R08: 0000000000000000 R09: 0000000000000004 [ 136.503321] R10: 00007ffd5e4f00a6 R11: 0000000000000202 R12: 0000000000000032 [ 136.503891] R13: 0000000000021404 R14: 0000000000000006 R15: 00007ffd5e4f03d0 [ 136.506415] [ 136.506644] irq event stamp: 257117 [ 136.506917] hardirqs last enabled at (257117): [] _raw_spin_unlock_irqrestore+0x2c/0x50 [ 136.507735] hardirqs last disabled at (257116): [] _raw_spin_lock_irqsave+0x53/0x60 [ 136.508529] softirqs last enabled at (257112): [] kernel_fpu_end+0x59/0x70 [ 136.509222] softirqs last disabled at (257110): [] kernel_fpu_begin_mask+0x1bb/0x300 [ 136.510013] ---[ end trace 0000000000000000 ]--- VM DIAGNOSIS: 09:30:05 Registers: info registers vcpu 0 RAX=0000000000000001 RBX=0000000000000001 RCX=ffffffff84d172ee RDX=0000000000000000 RSI=0000000000000004 RDI=ffffffff85c16880 RBP=ffffffff85c16880 RSP=ffff888019707b10 R8 =0000000000000000 R9 =fffffbfff0b82d10 R10=ffffffff85c16883 R11=0000000000000000 R12=1ffff110032e0f64 R13=0000000000000003 R14=fffffbfff0b82d10 R15=ffff888019707b50 RIP=ffffffff81b3d0ec RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 000055558c036400 00000000 00000000 GS =0000 ffff8880e5343000 00000000 00000000 LDT=0000 fffffe1600000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055558c03fc58 CR3=000000000e13c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=0000ff000000000000000000000000ff XMM01=657200353278246d6f72667663657200 XMM02=00000000000000000000000000000000 XMM03=00007f92d71b77c800007f92d71b77c0 XMM04=ffffffff0000ff00000000ff00000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff82973870 RDI=ffffffff889c0960 RBP=ffffffff889c0920 RSP=ffff88806cf088a0 R8 =0000000000000000 R9 =ffffed10016a6046 R10=00000000000fe503 R11=0000000041543c20 R12=0000000000000823 R13=0000000000000060 R14=fffffbfff113817e R15=dffffc0000000000 RIP=ffffffff829738c5 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000555567ecf400 00000000 00000000 GS =0000 ffff8880e5443000 00000000 00000000 LDT=0000 fffffe4f00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffd5e4eefa8 CR3=000000001f194000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000a60ce07b00000000cec3662e XMM01=000000000000000003515b82db34ca11 XMM02=0000000000000000333bebdfd0a6a21d XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000