Warning: Permanently added '[localhost]:38387' (ECDSA) to the list of known hosts. 2026/01/13 09:48:48 fuzzer started 2026/01/13 09:48:49 dialing manager at localhost:38155 syzkaller login: [ 50.690204] cgroup: Unknown subsys name 'net' [ 50.751102] cgroup: Unknown subsys name 'cpuset' [ 50.761473] cgroup: Unknown subsys name 'rlimit' 2026/01/13 09:48:59 syscalls: 2214 2026/01/13 09:48:59 code coverage: enabled 2026/01/13 09:48:59 comparison tracing: enabled 2026/01/13 09:48:59 extra coverage: enabled 2026/01/13 09:48:59 setuid sandbox: enabled 2026/01/13 09:48:59 namespace sandbox: enabled 2026/01/13 09:48:59 Android sandbox: enabled 2026/01/13 09:48:59 fault injection: enabled 2026/01/13 09:48:59 leak checking: enabled 2026/01/13 09:48:59 net packet injection: enabled 2026/01/13 09:48:59 net device setup: enabled 2026/01/13 09:48:59 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2026/01/13 09:48:59 devlink PCI setup: PCI device 0000:00:10.0 is not available 2026/01/13 09:48:59 USB emulation: enabled 2026/01/13 09:48:59 hci packet injection: enabled 2026/01/13 09:48:59 wifi device emulation: enabled 2026/01/13 09:48:59 802.15.4 emulation: enabled 2026/01/13 09:48:59 fetching corpus: 0, signal 0/2000 (executing program) 2026/01/13 09:48:59 fetching corpus: 50, signal 29275/32799 (executing program) 2026/01/13 09:48:59 fetching corpus: 100, signal 40376/45360 (executing program) 2026/01/13 09:48:59 fetching corpus: 150, signal 49657/56000 (executing program) 2026/01/13 09:49:00 fetching corpus: 200, signal 56851/64504 (executing program) 2026/01/13 09:49:00 fetching corpus: 250, signal 62813/71689 (executing program) 2026/01/13 09:49:00 fetching corpus: 300, signal 67468/77563 (executing program) 2026/01/13 09:49:00 fetching corpus: 350, signal 69958/81301 (executing program) 2026/01/13 09:49:00 fetching corpus: 400, signal 74777/87165 (executing program) 2026/01/13 09:49:00 fetching corpus: 450, signal 79359/92736 (executing program) 2026/01/13 09:49:00 fetching corpus: 500, signal 81252/95821 (executing program) 2026/01/13 09:49:00 fetching corpus: 550, signal 83936/99570 (executing program) 2026/01/13 09:49:00 fetching corpus: 600, signal 86435/103090 (executing program) 2026/01/13 09:49:00 fetching corpus: 650, signal 88677/106349 (executing program) 2026/01/13 09:49:01 fetching corpus: 700, signal 90358/109063 (executing program) 2026/01/13 09:49:01 fetching corpus: 750, signal 92499/112163 (executing program) 2026/01/13 09:49:01 fetching corpus: 800, signal 96139/116508 (executing program) 2026/01/13 09:49:01 fetching corpus: 850, signal 99007/120157 (executing program) 2026/01/13 09:49:01 fetching corpus: 900, signal 101407/123384 (executing program) 2026/01/13 09:49:01 fetching corpus: 950, signal 103473/126293 (executing program) 2026/01/13 09:49:01 fetching corpus: 1000, signal 106977/130301 (executing program) 2026/01/13 09:49:01 fetching corpus: 1050, signal 108691/132802 (executing program) 2026/01/13 09:49:01 fetching corpus: 1100, signal 110498/135367 (executing program) 2026/01/13 09:49:02 fetching corpus: 1150, signal 113037/138423 (executing program) 2026/01/13 09:49:02 fetching corpus: 1200, signal 114688/140777 (executing program) 2026/01/13 09:49:02 fetching corpus: 1250, signal 116394/143115 (executing program) 2026/01/13 09:49:02 fetching corpus: 1300, signal 118033/145406 (executing program) 2026/01/13 09:49:02 fetching corpus: 1350, signal 119826/147796 (executing program) 2026/01/13 09:49:02 fetching corpus: 1400, signal 120905/149622 (executing program) 2026/01/13 09:49:02 fetching corpus: 1450, signal 122308/151708 (executing program) 2026/01/13 09:49:02 fetching corpus: 1500, signal 123604/153645 (executing program) 2026/01/13 09:49:02 fetching corpus: 1550, signal 124735/155454 (executing program) 2026/01/13 09:49:03 fetching corpus: 1600, signal 125828/157221 (executing program) 2026/01/13 09:49:03 fetching corpus: 1650, signal 126405/158631 (executing program) 2026/01/13 09:49:03 fetching corpus: 1700, signal 127394/160264 (executing program) 2026/01/13 09:49:03 fetching corpus: 1750, signal 128817/162202 (executing program) 2026/01/13 09:49:03 fetching corpus: 1800, signal 129999/164001 (executing program) 2026/01/13 09:49:03 fetching corpus: 1850, signal 131472/165886 (executing program) 2026/01/13 09:49:03 fetching corpus: 1900, signal 132612/167548 (executing program) 2026/01/13 09:49:03 fetching corpus: 1950, signal 134452/169724 (executing program) 2026/01/13 09:49:03 fetching corpus: 2000, signal 135629/171385 (executing program) 2026/01/13 09:49:04 fetching corpus: 2050, signal 136931/173078 (executing program) 2026/01/13 09:49:04 fetching corpus: 2100, signal 138089/174729 (executing program) 2026/01/13 09:49:04 fetching corpus: 2150, signal 139298/176379 (executing program) 2026/01/13 09:49:04 fetching corpus: 2200, signal 140477/178003 (executing program) 2026/01/13 09:49:04 fetching corpus: 2250, signal 142076/179838 (executing program) 2026/01/13 09:49:04 fetching corpus: 2300, signal 143073/181288 (executing program) 2026/01/13 09:49:04 fetching corpus: 2350, signal 143823/182555 (executing program) 2026/01/13 09:49:04 fetching corpus: 2400, signal 145349/184303 (executing program) 2026/01/13 09:49:04 fetching corpus: 2450, signal 146239/185662 (executing program) 2026/01/13 09:49:05 fetching corpus: 2500, signal 147181/187004 (executing program) 2026/01/13 09:49:05 fetching corpus: 2550, signal 147754/188097 (executing program) 2026/01/13 09:49:05 fetching corpus: 2600, signal 148589/189336 (executing program) 2026/01/13 09:49:05 fetching corpus: 2650, signal 149147/190401 (executing program) 2026/01/13 09:49:05 fetching corpus: 2700, signal 149788/191516 (executing program) 2026/01/13 09:49:05 fetching corpus: 2750, signal 150647/192744 (executing program) 2026/01/13 09:49:05 fetching corpus: 2800, signal 151324/193833 (executing program) 2026/01/13 09:49:05 fetching corpus: 2850, signal 152142/195065 (executing program) 2026/01/13 09:49:05 fetching corpus: 2900, signal 153270/196345 (executing program) 2026/01/13 09:49:05 fetching corpus: 2950, signal 153945/197408 (executing program) 2026/01/13 09:49:06 fetching corpus: 3000, signal 154732/198607 (executing program) 2026/01/13 09:49:06 fetching corpus: 3050, signal 155267/199600 (executing program) 2026/01/13 09:49:06 fetching corpus: 3100, signal 156185/200738 (executing program) 2026/01/13 09:49:06 fetching corpus: 3150, signal 157238/201926 (executing program) 2026/01/13 09:49:06 fetching corpus: 3200, signal 158110/203028 (executing program) 2026/01/13 09:49:06 fetching corpus: 3250, signal 158576/203916 (executing program) 2026/01/13 09:49:06 fetching corpus: 3300, signal 159387/204965 (executing program) 2026/01/13 09:49:06 fetching corpus: 3350, signal 160216/205978 (executing program) 2026/01/13 09:49:06 fetching corpus: 3400, signal 160886/206932 (executing program) 2026/01/13 09:49:07 fetching corpus: 3450, signal 161862/208003 (executing program) 2026/01/13 09:49:07 fetching corpus: 3500, signal 162376/208888 (executing program) 2026/01/13 09:49:07 fetching corpus: 3550, signal 162948/209785 (executing program) 2026/01/13 09:49:07 fetching corpus: 3600, signal 163696/210720 (executing program) 2026/01/13 09:49:07 fetching corpus: 3650, signal 164817/211817 (executing program) 2026/01/13 09:49:07 fetching corpus: 3700, signal 165418/212671 (executing program) 2026/01/13 09:49:07 fetching corpus: 3750, signal 166042/213522 (executing program) 2026/01/13 09:49:08 fetching corpus: 3800, signal 166652/214360 (executing program) 2026/01/13 09:49:08 fetching corpus: 3850, signal 167455/215275 (executing program) 2026/01/13 09:49:08 fetching corpus: 3900, signal 168296/216152 (executing program) 2026/01/13 09:49:08 fetching corpus: 3950, signal 168969/217013 (executing program) 2026/01/13 09:49:08 fetching corpus: 4000, signal 169488/217759 (executing program) 2026/01/13 09:49:08 fetching corpus: 4050, signal 170161/218607 (executing program) 2026/01/13 09:49:08 fetching corpus: 4100, signal 170698/219376 (executing program) 2026/01/13 09:49:08 fetching corpus: 4150, signal 171121/220077 (executing program) 2026/01/13 09:49:09 fetching corpus: 4200, signal 171638/220826 (executing program) 2026/01/13 09:49:09 fetching corpus: 4250, signal 172137/221529 (executing program) 2026/01/13 09:49:09 fetching corpus: 4300, signal 172985/222313 (executing program) 2026/01/13 09:49:09 fetching corpus: 4350, signal 173486/222979 (executing program) 2026/01/13 09:49:09 fetching corpus: 4400, signal 174179/223723 (executing program) 2026/01/13 09:49:09 fetching corpus: 4450, signal 174560/224364 (executing program) 2026/01/13 09:49:09 fetching corpus: 4500, signal 175283/225115 (executing program) 2026/01/13 09:49:09 fetching corpus: 4550, signal 175723/225772 (executing program) 2026/01/13 09:49:10 fetching corpus: 4600, signal 176108/226400 (executing program) 2026/01/13 09:49:10 fetching corpus: 4650, signal 176619/227045 (executing program) 2026/01/13 09:49:10 fetching corpus: 4700, signal 177169/227708 (executing program) 2026/01/13 09:49:10 fetching corpus: 4750, signal 177841/228355 (executing program) 2026/01/13 09:49:10 fetching corpus: 4800, signal 178423/228995 (executing program) 2026/01/13 09:49:10 fetching corpus: 4850, signal 179180/229644 (executing program) 2026/01/13 09:49:10 fetching corpus: 4900, signal 179492/230205 (executing program) 2026/01/13 09:49:10 fetching corpus: 4950, signal 179912/230804 (executing program) 2026/01/13 09:49:10 fetching corpus: 5000, signal 180859/231467 (executing program) 2026/01/13 09:49:10 fetching corpus: 5050, signal 181249/232027 (executing program) 2026/01/13 09:49:11 fetching corpus: 5100, signal 181701/232556 (executing program) 2026/01/13 09:49:11 fetching corpus: 5150, signal 182169/233099 (executing program) 2026/01/13 09:49:11 fetching corpus: 5200, signal 182603/233617 (executing program) 2026/01/13 09:49:11 fetching corpus: 5250, signal 183239/234149 (executing program) 2026/01/13 09:49:11 fetching corpus: 5300, signal 183586/234680 (executing program) 2026/01/13 09:49:11 fetching corpus: 5350, signal 184054/235207 (executing program) 2026/01/13 09:49:11 fetching corpus: 5400, signal 184357/235707 (executing program) 2026/01/13 09:49:11 fetching corpus: 5450, signal 184834/236208 (executing program) 2026/01/13 09:49:11 fetching corpus: 5500, signal 185422/236719 (executing program) 2026/01/13 09:49:12 fetching corpus: 5550, signal 185785/237205 (executing program) 2026/01/13 09:49:12 fetching corpus: 5600, signal 186373/237658 (executing program) 2026/01/13 09:49:12 fetching corpus: 5650, signal 187038/238119 (executing program) 2026/01/13 09:49:12 fetching corpus: 5700, signal 187309/238600 (executing program) 2026/01/13 09:49:12 fetching corpus: 5750, signal 187567/239043 (executing program) 2026/01/13 09:49:12 fetching corpus: 5800, signal 187980/239544 (executing program) 2026/01/13 09:49:12 fetching corpus: 5850, signal 188367/240020 (executing program) 2026/01/13 09:49:12 fetching corpus: 5900, signal 188757/240477 (executing program) 2026/01/13 09:49:12 fetching corpus: 5950, signal 189097/240776 (executing program) 2026/01/13 09:49:13 fetching corpus: 6000, signal 189473/240776 (executing program) 2026/01/13 09:49:13 fetching corpus: 6050, signal 190252/240776 (executing program) 2026/01/13 09:49:13 fetching corpus: 6100, signal 190544/240784 (executing program) 2026/01/13 09:49:13 fetching corpus: 6150, signal 190867/240784 (executing program) 2026/01/13 09:49:13 fetching corpus: 6200, signal 191207/240784 (executing program) 2026/01/13 09:49:13 fetching corpus: 6250, signal 191639/240788 (executing program) 2026/01/13 09:49:13 fetching corpus: 6300, signal 191986/240790 (executing program) 2026/01/13 09:49:13 fetching corpus: 6350, signal 192272/240791 (executing program) 2026/01/13 09:49:13 fetching corpus: 6400, signal 192823/240791 (executing program) 2026/01/13 09:49:14 fetching corpus: 6450, signal 193100/240791 (executing program) 2026/01/13 09:49:14 fetching corpus: 6500, signal 193494/240792 (executing program) 2026/01/13 09:49:14 fetching corpus: 6550, signal 193826/240792 (executing program) 2026/01/13 09:49:14 fetching corpus: 6600, signal 194130/240792 (executing program) 2026/01/13 09:49:14 fetching corpus: 6650, signal 194428/240793 (executing program) 2026/01/13 09:49:14 fetching corpus: 6700, signal 194652/240797 (executing program) 2026/01/13 09:49:14 fetching corpus: 6750, signal 195002/240797 (executing program) 2026/01/13 09:49:14 fetching corpus: 6800, signal 195402/240799 (executing program) 2026/01/13 09:49:14 fetching corpus: 6850, signal 195671/240799 (executing program) 2026/01/13 09:49:14 fetching corpus: 6900, signal 195992/240799 (executing program) 2026/01/13 09:49:15 fetching corpus: 6950, signal 196412/240801 (executing program) 2026/01/13 09:49:15 fetching corpus: 7000, signal 196712/240804 (executing program) 2026/01/13 09:49:15 fetching corpus: 7050, signal 197020/240813 (executing program) 2026/01/13 09:49:15 fetching corpus: 7100, signal 197427/240813 (executing program) 2026/01/13 09:49:15 fetching corpus: 7150, signal 197752/240813 (executing program) 2026/01/13 09:49:15 fetching corpus: 7200, signal 198067/240813 (executing program) 2026/01/13 09:49:15 fetching corpus: 7250, signal 198509/240813 (executing program) 2026/01/13 09:49:15 fetching corpus: 7300, signal 198949/240813 (executing program) 2026/01/13 09:49:16 fetching corpus: 7350, signal 199258/240813 (executing program) 2026/01/13 09:49:16 fetching corpus: 7400, signal 200062/240813 (executing program) 2026/01/13 09:49:16 fetching corpus: 7450, signal 200408/240818 (executing program) 2026/01/13 09:49:16 fetching corpus: 7500, signal 200711/240818 (executing program) 2026/01/13 09:49:16 fetching corpus: 7550, signal 201020/240818 (executing program) 2026/01/13 09:49:16 fetching corpus: 7600, signal 201578/240818 (executing program) 2026/01/13 09:49:16 fetching corpus: 7650, signal 201904/240819 (executing program) 2026/01/13 09:49:16 fetching corpus: 7700, signal 202257/240819 (executing program) 2026/01/13 09:49:16 fetching corpus: 7750, signal 202743/240819 (executing program) 2026/01/13 09:49:17 fetching corpus: 7800, signal 203095/240819 (executing program) 2026/01/13 09:49:17 fetching corpus: 7850, signal 203353/240820 (executing program) 2026/01/13 09:49:17 fetching corpus: 7900, signal 203631/240820 (executing program) 2026/01/13 09:49:17 fetching corpus: 7950, signal 204009/240824 (executing program) 2026/01/13 09:49:17 fetching corpus: 8000, signal 204413/240824 (executing program) 2026/01/13 09:49:17 fetching corpus: 8050, signal 204787/240833 (executing program) 2026/01/13 09:49:17 fetching corpus: 8100, signal 205166/240858 (executing program) 2026/01/13 09:49:17 fetching corpus: 8150, signal 205490/240859 (executing program) 2026/01/13 09:49:17 fetching corpus: 8200, signal 205726/240860 (executing program) 2026/01/13 09:49:17 fetching corpus: 8250, signal 206129/240860 (executing program) 2026/01/13 09:49:18 fetching corpus: 8300, signal 206310/240860 (executing program) 2026/01/13 09:49:18 fetching corpus: 8350, signal 206624/240860 (executing program) 2026/01/13 09:49:18 fetching corpus: 8400, signal 206914/240869 (executing program) 2026/01/13 09:49:18 fetching corpus: 8450, signal 207232/240874 (executing program) 2026/01/13 09:49:18 fetching corpus: 8500, signal 207541/240874 (executing program) 2026/01/13 09:49:18 fetching corpus: 8550, signal 207850/240874 (executing program) 2026/01/13 09:49:18 fetching corpus: 8600, signal 208246/240876 (executing program) 2026/01/13 09:49:18 fetching corpus: 8650, signal 208493/240876 (executing program) 2026/01/13 09:49:18 fetching corpus: 8700, signal 208735/240876 (executing program) 2026/01/13 09:49:19 fetching corpus: 8750, signal 209155/240877 (executing program) 2026/01/13 09:49:19 fetching corpus: 8800, signal 209488/240877 (executing program) 2026/01/13 09:49:19 fetching corpus: 8850, signal 209770/240877 (executing program) 2026/01/13 09:49:19 fetching corpus: 8900, signal 210097/240877 (executing program) 2026/01/13 09:49:19 fetching corpus: 8950, signal 210466/240877 (executing program) 2026/01/13 09:49:19 fetching corpus: 9000, signal 210727/240877 (executing program) 2026/01/13 09:49:19 fetching corpus: 9050, signal 210978/240877 (executing program) 2026/01/13 09:49:19 fetching corpus: 9100, signal 211243/240877 (executing program) 2026/01/13 09:49:19 fetching corpus: 9150, signal 211504/240877 (executing program) 2026/01/13 09:49:19 fetching corpus: 9200, signal 211832/240877 (executing program) 2026/01/13 09:49:20 fetching corpus: 9250, signal 212022/240882 (executing program) 2026/01/13 09:49:20 fetching corpus: 9300, signal 212209/240882 (executing program) 2026/01/13 09:49:20 fetching corpus: 9350, signal 212459/240884 (executing program) 2026/01/13 09:49:20 fetching corpus: 9400, signal 213328/240888 (executing program) 2026/01/13 09:49:20 fetching corpus: 9450, signal 213609/240888 (executing program) 2026/01/13 09:49:20 fetching corpus: 9500, signal 213919/240891 (executing program) 2026/01/13 09:49:20 fetching corpus: 9550, signal 214087/240891 (executing program) 2026/01/13 09:49:20 fetching corpus: 9600, signal 214483/240891 (executing program) 2026/01/13 09:49:20 fetching corpus: 9650, signal 214791/240891 (executing program) 2026/01/13 09:49:20 fetching corpus: 9700, signal 215267/240891 (executing program) 2026/01/13 09:49:20 fetching corpus: 9750, signal 215524/240891 (executing program) 2026/01/13 09:49:21 fetching corpus: 9800, signal 215770/240893 (executing program) 2026/01/13 09:49:21 fetching corpus: 9850, signal 216102/240893 (executing program) 2026/01/13 09:49:21 fetching corpus: 9900, signal 216365/240893 (executing program) 2026/01/13 09:49:21 fetching corpus: 9950, signal 216655/240893 (executing program) 2026/01/13 09:49:21 fetching corpus: 10000, signal 216896/240893 (executing program) 2026/01/13 09:49:21 fetching corpus: 10050, signal 217143/240893 (executing program) 2026/01/13 09:49:21 fetching corpus: 10100, signal 217362/240894 (executing program) 2026/01/13 09:49:21 fetching corpus: 10150, signal 217647/240894 (executing program) 2026/01/13 09:49:21 fetching corpus: 10200, signal 218002/240894 (executing program) 2026/01/13 09:49:22 fetching corpus: 10250, signal 218355/240899 (executing program) 2026/01/13 09:49:22 fetching corpus: 10300, signal 218722/240900 (executing program) 2026/01/13 09:49:22 fetching corpus: 10350, signal 219029/240902 (executing program) 2026/01/13 09:49:22 fetching corpus: 10400, signal 219215/240902 (executing program) 2026/01/13 09:49:22 fetching corpus: 10450, signal 219581/240902 (executing program) 2026/01/13 09:49:22 fetching corpus: 10500, signal 219805/240910 (executing program) 2026/01/13 09:49:22 fetching corpus: 10550, signal 220097/240910 (executing program) 2026/01/13 09:49:22 fetching corpus: 10600, signal 220298/240910 (executing program) 2026/01/13 09:49:22 fetching corpus: 10650, signal 220540/240931 (executing program) 2026/01/13 09:49:23 fetching corpus: 10700, signal 220743/240931 (executing program) 2026/01/13 09:49:23 fetching corpus: 10750, signal 221003/240931 (executing program) 2026/01/13 09:49:23 fetching corpus: 10800, signal 221239/240931 (executing program) 2026/01/13 09:49:23 fetching corpus: 10850, signal 221474/240931 (executing program) 2026/01/13 09:49:23 fetching corpus: 10900, signal 221688/240932 (executing program) 2026/01/13 09:49:23 fetching corpus: 10950, signal 221924/240932 (executing program) 2026/01/13 09:49:23 fetching corpus: 11000, signal 222132/240932 (executing program) 2026/01/13 09:49:23 fetching corpus: 11050, signal 222317/240933 (executing program) 2026/01/13 09:49:23 fetching corpus: 11100, signal 222679/240933 (executing program) 2026/01/13 09:49:23 fetching corpus: 11150, signal 222976/240933 (executing program) 2026/01/13 09:49:23 fetching corpus: 11200, signal 223194/240933 (executing program) 2026/01/13 09:49:24 fetching corpus: 11250, signal 223427/240934 (executing program) 2026/01/13 09:49:24 fetching corpus: 11300, signal 223625/240934 (executing program) 2026/01/13 09:49:24 fetching corpus: 11350, signal 223979/240934 (executing program) 2026/01/13 09:49:24 fetching corpus: 11400, signal 224252/240934 (executing program) 2026/01/13 09:49:24 fetching corpus: 11450, signal 224468/240934 (executing program) 2026/01/13 09:49:24 fetching corpus: 11500, signal 224721/240939 (executing program) 2026/01/13 09:49:24 fetching corpus: 11550, signal 224954/240941 (executing program) 2026/01/13 09:49:24 fetching corpus: 11600, signal 225105/240942 (executing program) 2026/01/13 09:49:24 fetching corpus: 11650, signal 225312/240942 (executing program) 2026/01/13 09:49:24 fetching corpus: 11700, signal 225576/240997 (executing program) 2026/01/13 09:49:25 fetching corpus: 11750, signal 225823/241002 (executing program) 2026/01/13 09:49:25 fetching corpus: 11800, signal 225990/241007 (executing program) 2026/01/13 09:49:25 fetching corpus: 11850, signal 226225/241007 (executing program) 2026/01/13 09:49:25 fetching corpus: 11900, signal 226422/241007 (executing program) 2026/01/13 09:49:25 fetching corpus: 11950, signal 226612/241007 (executing program) 2026/01/13 09:49:25 fetching corpus: 12000, signal 226869/241007 (executing program) 2026/01/13 09:49:25 fetching corpus: 12050, signal 227096/241008 (executing program) 2026/01/13 09:49:25 fetching corpus: 12100, signal 227336/241008 (executing program) 2026/01/13 09:49:25 fetching corpus: 12150, signal 227684/241009 (executing program) 2026/01/13 09:49:26 fetching corpus: 12200, signal 227906/241011 (executing program) 2026/01/13 09:49:26 fetching corpus: 12250, signal 228130/241011 (executing program) 2026/01/13 09:49:26 fetching corpus: 12300, signal 228362/241011 (executing program) 2026/01/13 09:49:26 fetching corpus: 12350, signal 228702/241012 (executing program) 2026/01/13 09:49:26 fetching corpus: 12399, signal 228938/241013 (executing program) 2026/01/13 09:49:26 fetching corpus: 12449, signal 229235/241014 (executing program) 2026/01/13 09:49:26 fetching corpus: 12499, signal 229391/241016 (executing program) 2026/01/13 09:49:26 fetching corpus: 12549, signal 229617/241017 (executing program) 2026/01/13 09:49:27 fetching corpus: 12599, signal 229863/241019 (executing program) 2026/01/13 09:49:27 fetching corpus: 12649, signal 230082/241022 (executing program) 2026/01/13 09:49:27 fetching corpus: 12699, signal 230256/241022 (executing program) 2026/01/13 09:49:27 fetching corpus: 12749, signal 230486/241022 (executing program) 2026/01/13 09:49:27 fetching corpus: 12799, signal 230709/241022 (executing program) 2026/01/13 09:49:27 fetching corpus: 12849, signal 230905/241024 (executing program) 2026/01/13 09:49:27 fetching corpus: 12899, signal 231091/241024 (executing program) 2026/01/13 09:49:27 fetching corpus: 12949, signal 231315/241029 (executing program) 2026/01/13 09:49:27 fetching corpus: 12999, signal 231477/241030 (executing program) 2026/01/13 09:49:27 fetching corpus: 13049, signal 231702/241030 (executing program) 2026/01/13 09:49:28 fetching corpus: 13099, signal 232880/241044 (executing program) 2026/01/13 09:49:28 fetching corpus: 13148, signal 233137/241044 (executing program) 2026/01/13 09:49:28 fetching corpus: 13197, signal 233360/241046 (executing program) 2026/01/13 09:49:28 fetching corpus: 13247, signal 233515/241046 (executing program) 2026/01/13 09:49:28 fetching corpus: 13297, signal 233743/241050 (executing program) 2026/01/13 09:49:28 fetching corpus: 13346, signal 233994/241050 (executing program) 2026/01/13 09:49:28 fetching corpus: 13396, signal 234189/241052 (executing program) 2026/01/13 09:49:28 fetching corpus: 13446, signal 234456/241056 (executing program) 2026/01/13 09:49:28 fetching corpus: 13494, signal 234591/241056 (executing program) 2026/01/13 09:49:29 fetching corpus: 13544, signal 234848/241062 (executing program) 2026/01/13 09:49:29 fetching corpus: 13594, signal 235072/241065 (executing program) 2026/01/13 09:49:29 fetching corpus: 13644, signal 235237/241065 (executing program) 2026/01/13 09:49:29 fetching corpus: 13694, signal 235395/241065 (executing program) 2026/01/13 09:49:29 fetching corpus: 13744, signal 235568/241065 (executing program) 2026/01/13 09:49:29 fetching corpus: 13794, signal 235704/241071 (executing program) 2026/01/13 09:49:29 fetching corpus: 13844, signal 235839/241071 (executing program) 2026/01/13 09:49:29 fetching corpus: 13894, signal 236029/241071 (executing program) 2026/01/13 09:49:29 fetching corpus: 13944, signal 236230/241071 (executing program) 2026/01/13 09:49:29 fetching corpus: 13994, signal 236377/241071 (executing program) 2026/01/13 09:49:30 fetching corpus: 14044, signal 236554/241071 (executing program) 2026/01/13 09:49:30 fetching corpus: 14094, signal 236778/241076 (executing program) 2026/01/13 09:49:30 fetching corpus: 14144, signal 236894/241076 (executing program) 2026/01/13 09:49:30 fetching corpus: 14193, signal 237124/241086 (executing program) 2026/01/13 09:49:30 fetching corpus: 14242, signal 237264/241087 (executing program) 2026/01/13 09:49:30 fetching corpus: 14292, signal 237455/241087 (executing program) 2026/01/13 09:49:30 fetching corpus: 14342, signal 237693/241088 (executing program) 2026/01/13 09:49:30 fetching corpus: 14392, signal 237876/241096 (executing program) 2026/01/13 09:49:30 fetching corpus: 14442, signal 238059/241096 (executing program) 2026/01/13 09:49:30 fetching corpus: 14492, signal 238365/241096 (executing program) 2026/01/13 09:49:30 fetching corpus: 14542, signal 238511/241101 (executing program) 2026/01/13 09:49:31 fetching corpus: 14592, signal 238792/241101 (executing program) 2026/01/13 09:49:31 fetching corpus: 14642, signal 238935/241102 (executing program) 2026/01/13 09:49:31 fetching corpus: 14692, signal 239109/241102 (executing program) 2026/01/13 09:49:31 fetching corpus: 14742, signal 239304/241102 (executing program) 2026/01/13 09:49:31 fetching corpus: 14777, signal 239436/241102 (executing program) 2026/01/13 09:49:31 fetching corpus: 14777, signal 239436/241102 (executing program) 2026/01/13 09:49:33 starting 8 fuzzer processes 09:49:33 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='attr\x00') getdents(r0, &(0x7f0000000000)=""/95, 0x5f) 09:49:33 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, 0x0) 09:49:33 executing program 7: getpgrp(0x0) 09:49:33 executing program 2: r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$clear(0x3, r0) 09:49:33 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) r1 = dup(r0) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, &(0x7f00000000c0)=""/183) 09:49:33 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x35, &(0x7f0000000080), 0x4) [ 94.655432] audit: type=1400 audit(1768297773.356:7): avc: denied { execmem } for pid=274 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 09:49:33 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)={0x24, 0x18, 0x1, 0x0, 0x0, "", [@nested={0x2, 0x0, 0x0, 0x1, [@typed={0x0, 0x0, 0x0, 0x0, @fd}, @typed={0x8, 0xf, 0x0, 0x0, @fd}]}]}, 0x24}], 0x1}, 0x0) 09:49:33 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x32}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) [ 95.810310] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 95.813784] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 95.817103] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 95.825902] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 95.830932] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 95.874284] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 95.877026] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 95.879034] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 95.892094] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 95.898523] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 95.901263] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 95.902995] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 95.904857] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 95.910124] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 95.912158] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 95.913842] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 95.913901] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 95.916416] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 95.918890] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 95.933544] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 95.933799] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 95.937822] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 95.940797] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 95.944855] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 95.944887] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 95.946715] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 95.949803] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 95.953360] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 95.957754] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 95.959520] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 95.960260] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 95.965215] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 95.974849] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 95.989277] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 96.001958] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 96.009835] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 96.011502] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 96.025536] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 96.032242] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 96.050988] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 97.903658] Bluetooth: hci0: command tx timeout [ 97.966660] Bluetooth: hci1: command tx timeout [ 98.031669] Bluetooth: hci7: command tx timeout [ 98.031769] Bluetooth: hci4: command tx timeout [ 98.032232] Bluetooth: hci3: command tx timeout [ 98.094651] Bluetooth: hci2: command tx timeout [ 98.094685] Bluetooth: hci5: command tx timeout [ 98.158728] Bluetooth: hci6: command tx timeout [ 99.951311] Bluetooth: hci0: command tx timeout [ 100.015598] Bluetooth: hci1: command tx timeout [ 100.079677] Bluetooth: hci3: command tx timeout [ 100.080067] Bluetooth: hci4: command tx timeout [ 100.080461] Bluetooth: hci7: command tx timeout [ 100.142618] Bluetooth: hci2: command tx timeout [ 100.143009] Bluetooth: hci5: command tx timeout [ 100.208022] Bluetooth: hci6: command tx timeout [ 101.999680] Bluetooth: hci0: command tx timeout [ 102.064710] Bluetooth: hci1: command tx timeout [ 102.126632] Bluetooth: hci4: command tx timeout [ 102.127041] Bluetooth: hci3: command tx timeout [ 102.127764] Bluetooth: hci7: command tx timeout [ 102.192627] Bluetooth: hci5: command tx timeout [ 102.193022] Bluetooth: hci2: command tx timeout [ 102.256396] Bluetooth: hci6: command tx timeout [ 104.047609] Bluetooth: hci0: command tx timeout [ 104.111593] Bluetooth: hci1: command tx timeout [ 104.176163] Bluetooth: hci7: command tx timeout [ 104.176587] Bluetooth: hci3: command tx timeout [ 104.176967] Bluetooth: hci4: command tx timeout [ 104.238612] Bluetooth: hci2: command tx timeout [ 104.238933] Bluetooth: hci5: command tx timeout [ 104.303274] Bluetooth: hci6: command tx timeout [ 128.902909] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.903587] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.209900] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.210474] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.231423] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.232430] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.314952] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.316424] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.441233] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.441873] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 09:50:08 executing program 7: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x100000005}) utimes(&(0x7f0000000380)='./file0\x00', 0x0) [ 129.576869] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.577519] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.667723] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.668331] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 09:50:08 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @remote}, {0x0, @link_local}, 0xac1414bb, {0x2, 0x0, @empty}, 'lo\x00'}) 09:50:08 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x3, 0x6, @remote}, 0x10) socket$packet(0x11, 0x2, 0x300) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) [ 129.852789] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.853396] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.886645] audit: type=1400 audit(1768297808.587:8): avc: denied { open } for pid=3848 comm="syz-executor.7" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 129.888318] audit: type=1400 audit(1768297808.587:9): avc: denied { kernel } for pid=3848 comm="syz-executor.7" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 09:50:08 executing program 6: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = dup(r0) connect$netlink(r1, &(0x7f0000000000)=@unspec, 0xc) 09:50:08 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/asound/timers\x00', 0x0, 0x0) pread64(r0, &(0x7f00000000c0)=""/33, 0x21, 0x0) [ 129.991819] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode 09:50:08 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/asound/timers\x00', 0x0, 0x0) pread64(r0, &(0x7f00000000c0)=""/33, 0x21, 0x0) 09:50:08 executing program 6: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001000)='stat\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000000)=""/4096, 0x1000}], 0x1, 0x0, 0x0) [ 130.035192] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.037605] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.041133] mac80211_hwsim hwsim2 wlan0: left promiscuous mode 09:50:08 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x3, 0x6, @remote}, 0x10) socket$packet(0x11, 0x2, 0x300) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) [ 130.159671] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 130.191934] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.193457] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.211528] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 130.280874] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.281480] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.373275] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.374435] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.505814] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 130.561678] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.562244] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.610059] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.610653] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.614745] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.615306] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.674185] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.674824] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 09:50:09 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000000)=0x2) 09:50:09 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bfe529537f261c7b83dac9cfebd740cc14deed8b5244050c4d45c4906ca35eeea0d18fbd5b0560a5b19338c590a8b51226855434924ea2841272eeb0f717e8e1", "e6b1cd2b2272272e4c3ac4623d9cf97bfbd5e7816a5b89e5013e10e3aa435200c533c4cad570ca61c3f95af62678f4a840ff76e08ffb6eabacc48eb8f640e8bb", "058e1e3897e366c55c7f6d6ad7466fd458facd5f150dce52216954edf3d4b96e"}) 09:50:09 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) r1 = dup(r0) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, &(0x7f00000000c0)=""/183) 09:50:09 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x52a85989a8768a7d, &(0x7f0000000080)="a8e19de6", 0x4) 09:50:09 executing program 6: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4, 0x2012, r0, 0x4b000) 09:50:09 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/asound/timers\x00', 0x0, 0x0) pread64(r0, &(0x7f00000000c0)=""/33, 0x21, 0x0) 09:50:09 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x3, 0x6, @remote}, 0x10) socket$packet(0x11, 0x2, 0x300) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 09:50:09 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x35, &(0x7f0000000080), 0x4) 09:50:09 executing program 1: mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x12c253965cc1e678, 0xffffffffffffffff, 0x8000000) [ 130.893054] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 130.957746] mac80211_hwsim hwsim2 wlan0: left promiscuous mode 09:50:09 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x12215, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = creat(0x0, 0x196) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'veth0_to_bond\x00'}) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000400)) shutdown(0xffffffffffffffff, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$sock(r1, &(0x7f00000003c0)={&(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x80, 0x0}, 0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000000c0)={{{@in=@empty, @in=@private}}, {{@in=@private}, 0x0, @in6=@empty}}, 0x0) wait4(0x0, &(0x7f0000000000), 0x8, 0x0) fork() 09:50:09 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x35, &(0x7f0000000080), 0x4) 09:50:09 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x52a85989a8768a7d, &(0x7f0000000080)="a8e19de6", 0x4) 09:50:09 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000014c0), 0x0, 0x60102) ioctl$BLKZEROOUT(r0, 0x127f, 0x0) 09:50:09 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) r1 = dup(r0) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, &(0x7f00000000c0)=""/183) 09:50:09 executing program 6: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4, 0x2012, r0, 0x4b000) 09:50:09 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x3, 0x6, @remote}, 0x10) socket$packet(0x11, 0x2, 0x300) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 09:50:09 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/asound/timers\x00', 0x0, 0x0) pread64(r0, &(0x7f00000000c0)=""/33, 0x21, 0x0) 09:50:09 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x52a85989a8768a7d, &(0x7f0000000080)="a8e19de6", 0x4) [ 131.056895] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 131.061853] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list 09:50:09 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x35, &(0x7f0000000080), 0x4) 09:50:09 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) r1 = dup(r0) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, &(0x7f00000000c0)=""/183) 09:50:09 executing program 1: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b9010000000001b90000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010a00)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000010d00)="2200170000000000001700080000000008007809140b2a3a080200000100000101002200170000000000001700080000000008007809140b2a3a080200000100000101012c00190000000000001964000000000000647809140b2a3a08000000010000010a46494c452e434f4c3b31002600180000000000001800080000000008007809140b2a3a08020000010000010546", 0x92, 0xb800}], 0x0, &(0x7f0000000600)=ANY=[]) getdents(r0, &(0x7f0000000040)=""/93, 0x5d) [ 131.087780] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 131.121815] loop1: detected capacity change from 0 to 184 09:50:09 executing program 1: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b9010000000001b90000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010a00)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000010d00)="2200170000000000001700080000000008007809140b2a3a080200000100000101002200170000000000001700080000000008007809140b2a3a080200000100000101012c00190000000000001964000000000000647809140b2a3a08000000010000010a46494c452e434f4c3b31002600180000000000001800080000000008007809140b2a3a08020000010000010546", 0x92, 0xb800}], 0x0, &(0x7f0000000600)=ANY=[]) getdents(r0, &(0x7f0000000040)=""/93, 0x5d) 09:50:09 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r0, 0x0) ioctl$sock_TIOCOUTQ(r0, 0x5411, 0x0) 09:50:09 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x52a85989a8768a7d, &(0x7f0000000080)="a8e19de6", 0x4) 09:50:09 executing program 6: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4, 0x2012, r0, 0x4b000) 09:50:09 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x12215, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = creat(0x0, 0x196) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'veth0_to_bond\x00'}) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000400)) shutdown(0xffffffffffffffff, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$sock(r1, &(0x7f00000003c0)={&(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x80, 0x0}, 0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000000c0)={{{@in=@empty, @in=@private}}, {{@in=@private}, 0x0, @in6=@empty}}, 0x0) wait4(0x0, &(0x7f0000000000), 0x8, 0x0) fork() 09:50:09 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000080)={0x0, 0x6, '\x00', [@enc_lim, @pad1, @calipso={0x7, 0x28, {0x0, 0x8, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0]}}]}, 0x38) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x0) 09:50:09 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x9, 0x80}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 131.235901] loop1: detected capacity change from 0 to 184 09:50:09 executing program 5: r0 = memfd_create(&(0x7f0000000000)=':^/\x00', 0x0) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000080)=0x7) 09:50:09 executing program 1: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b9010000000001b90000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010a00)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000010d00)="2200170000000000001700080000000008007809140b2a3a080200000100000101002200170000000000001700080000000008007809140b2a3a080200000100000101012c00190000000000001964000000000000647809140b2a3a08000000010000010a46494c452e434f4c3b31002600180000000000001800080000000008007809140b2a3a08020000010000010546", 0x92, 0xb800}], 0x0, &(0x7f0000000600)=ANY=[]) getdents(r0, &(0x7f0000000040)=""/93, 0x5d) 09:50:09 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000180)={0x1f, 0x0, @fixed, 0x0, 0x1}, 0xe) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000180)={0x1f, 0x0, @fixed}, 0xe) 09:50:10 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0xfffffffffffffff9, 0x3, &(0x7f0000000140)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000012e00)="a88a000000080000d0f4655fd2f4655fd2f4655f00000000000004", 0x1b, 0x11080}], 0x0, &(0x7f0000013c00)=ANY=[]) 09:50:10 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000080)={0x0, 0x6, '\x00', [@enc_lim, @pad1, @calipso={0x7, 0x28, {0x0, 0x8, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0]}}]}, 0x38) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x0) 09:50:10 executing program 6: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4, 0x2012, r0, 0x4b000) 09:50:10 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)={0x38, 0x10, 0x1, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64=0x3}, @typed={0xc, 0x0, 0x0, 0x0, @u64=0x8}, @nested={0x10, 0xd, 0x0, 0x1, [@typed={0xc, 0x8, 0x0, 0x0, @u64}]}]}, 0x38}], 0x1}, 0x0) 09:50:10 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000080)={0x0, 0x6, '\x00', [@enc_lim, @pad1, @calipso={0x7, 0x28, {0x0, 0x8, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0]}}]}, 0x38) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x0) [ 131.351869] loop1: detected capacity change from 0 to 184 [ 131.361410] loop7: detected capacity change from 0 to 264192 [ 131.367375] netlink: 'syz-executor.4': attribute type 13 has an invalid length. [ 131.368440] syz_tun: refused to change device tx_queue_len 09:50:10 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000180)={0x1f, 0x0, @fixed, 0x0, 0x1}, 0xe) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000180)={0x1f, 0x0, @fixed}, 0xe) [ 131.381404] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem 09:50:10 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000080)={0x0, 0x6, '\x00', [@enc_lim, @pad1, @calipso={0x7, 0x28, {0x0, 0x8, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0]}}]}, 0x38) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x0) [ 131.397608] EXT4-fs (loop7): corrupt root inode, run e2fsck [ 131.398118] EXT4-fs (loop7): mount failed [ 131.401783] netlink: 'syz-executor.4': attribute type 13 has an invalid length. [ 131.402797] syz_tun: refused to change device tx_queue_len 09:50:10 executing program 1: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b9010000000001b90000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010a00)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000010d00)="2200170000000000001700080000000008007809140b2a3a080200000100000101002200170000000000001700080000000008007809140b2a3a080200000100000101012c00190000000000001964000000000000647809140b2a3a08000000010000010a46494c452e434f4c3b31002600180000000000001800080000000008007809140b2a3a08020000010000010546", 0x92, 0xb800}], 0x0, &(0x7f0000000600)=ANY=[]) getdents(r0, &(0x7f0000000040)=""/93, 0x5d) 09:50:10 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x12215, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = creat(0x0, 0x196) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'veth0_to_bond\x00'}) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000400)) shutdown(0xffffffffffffffff, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$sock(r1, &(0x7f00000003c0)={&(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x80, 0x0}, 0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000000c0)={{{@in=@empty, @in=@private}}, {{@in=@private}, 0x0, @in6=@empty}}, 0x0) wait4(0x0, &(0x7f0000000000), 0x8, 0x0) fork() 09:50:10 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000080)={0x0, 0x6, '\x00', [@enc_lim, @pad1, @calipso={0x7, 0x28, {0x0, 0x8, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0]}}]}, 0x38) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x0) [ 131.431102] loop7: detected capacity change from 0 to 264192 [ 131.437007] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 131.450574] EXT4-fs (loop7): corrupt root inode, run e2fsck [ 131.451055] EXT4-fs (loop7): mount failed [ 131.468019] loop1: detected capacity change from 0 to 184 09:50:10 executing program 6: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) openat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={0x40}, 0x18) 09:50:10 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000080)={0x0, 0x6, '\x00', [@enc_lim, @pad1, @calipso={0x7, 0x28, {0x0, 0x8, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0]}}]}, 0x38) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x0) 09:50:10 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_async', 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000080)='/proc/thread-self/attr/fscreate\x00\x14~\xfe\x9a!\xb2\xb73h\xd2oR\arV(C\xe7\xbb\xd3\x83\xd4\x9b\xb7\xc8t_X\xf0\xcb\xba_\x82qgk\xcbW\xe7\xcd\x87\xf9\xb2\x89\xb94\x06s\xa1B\x96\xc4\x17\x11\xba\xae\xba/N~%\xaf\xcbw\xa4\xd99\xab)\x8f\x1b2\x1bJ\x86\xb1\xee\x8d;\x12\xd4\x7fT\x06\xaakm^\x85\xd1\xd1\xcd\x98L2\xe3\x14\xb7v\xbb\x94x\x82\xab\xc1dK(\x99/9\xc6\xbe\xcd?\xd6-%\x8b\xbeiSA\xdc\xaa\xec\xban3\xbf\x8ew\xee\x91SB\xb0\xb5\xc4,f\xf0\xca\xb3\xb0\xa5\x02\x1f\xd4\xf8\xe7_A\xf0b\xa4\xec\xe8\xeed\xaf\xdf\xdf-w]_\xe4\xb8\x9850\xcd\x8f*\xb5\x98>Y\xef.5\xfd\xcbC\xf0(=\'\xaa^kD\xf5\x81f\xd0 i\x84\xb2\xc5\x1d\x96\xa5\v\xaf\x18w|J\xdbE\x80\x97\xe9U\xd8\x01[A\xaa\xc1%\xa95^X\xea\x17\x1f&]K\xc4\xe6\x17\x00\x04\xfe\x12o\xf0\xad\xfa\xa8\x81\xdd\xe8\t\xa12P\xfc@\x1a\xea\x92|\x04W\xd6-\xb22S`[oUAY\xa8\x93\xc5H\xbe\xc4\x95\x87\x9b\x05\x80\xfc\xec1\xcd\xe4\x8e\xb8\xb0\xdf\xfd\xd2\x19\xf0\x0e\x98{\x9f\f\xd3\xc3\x8e\xdb\xdf\x86$\x8a\xf1\t\x8a\xa8}\xf27\x9c6\xe5\x05\xe5\t\xb8', 0x0) sendfile(r1, r0, 0x0, 0x9) memfd_create(0x0, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) 09:50:10 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000080)={0x0, 0x6, '\x00', [@enc_lim, @pad1, @calipso={0x7, 0x28, {0x0, 0x8, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0]}}]}, 0x38) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x0) 09:50:10 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0xfffffffffffffff9, 0x3, &(0x7f0000000140)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000012e00)="a88a000000080000d0f4655fd2f4655fd2f4655f00000000000004", 0x1b, 0x11080}], 0x0, &(0x7f0000013c00)=ANY=[]) 09:50:10 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8918, &(0x7f0000000080)={@private2, 0x0, r2}) 09:50:10 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x12215, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = creat(0x0, 0x196) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'veth0_to_bond\x00'}) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000400)) shutdown(0xffffffffffffffff, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$sock(r1, &(0x7f00000003c0)={&(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x80, 0x0}, 0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000000c0)={{{@in=@empty, @in=@private}}, {{@in=@private}, 0x0, @in6=@empty}}, 0x0) wait4(0x0, &(0x7f0000000000), 0x8, 0x0) fork() 09:50:10 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000180)={0x1f, 0x0, @fixed, 0x0, 0x1}, 0xe) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000180)={0x1f, 0x0, @fixed}, 0xe) [ 131.581211] loop7: detected capacity change from 0 to 264192 [ 131.596914] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 131.603596] EXT4-fs (loop7): corrupt root inode, run e2fsck [ 131.604078] EXT4-fs (loop7): mount failed 09:50:10 executing program 6: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) readv(r0, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/33, 0x21}], 0x1) 09:50:10 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8918, &(0x7f0000000080)={@private2, 0x0, r2}) 09:50:11 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0xfffffffffffffff9, 0x3, &(0x7f0000000140)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000012e00)="a88a000000080000d0f4655fd2f4655fd2f4655f00000000000004", 0x1b, 0x11080}], 0x0, &(0x7f0000013c00)=ANY=[]) 09:50:11 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@rights={{0x18, 0x1, 0x1, [r0, r0]}}], 0x18}, 0x0) recvmsg$unix(r0, &(0x7f0000002040)={0x0, 0x0, 0x0}, 0x2) 09:50:11 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000180)={0x1f, 0x0, @fixed, 0x0, 0x1}, 0xe) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000180)={0x1f, 0x0, @fixed}, 0xe) 09:50:11 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000002680)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000002680)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) dup2(r2, r1) 09:50:11 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8918, &(0x7f0000000080)={@private2, 0x0, r2}) 09:50:11 executing program 6: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x301}, 0x14}}, 0x0) setsockopt$sock_int(r0, 0x1, 0x22, &(0x7f0000000000)=0xa260, 0x4) recvmmsg(r0, &(0x7f0000001540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001500)=""/4, 0x4}}], 0x1, 0x0, 0x0) 09:50:11 executing program 0: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PTP_PIN_GETFUNC(r0, 0xc0603d06, &(0x7f00000004c0)) [ 132.560585] loop7: detected capacity change from 0 to 264192 [ 132.569712] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 132.575308] EXT4-fs (loop7): corrupt root inode, run e2fsck [ 132.576480] EXT4-fs (loop7): mount failed 09:50:11 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_io_uring_complete(r1) syz_open_procfs(0xffffffffffffffff, 0x0) creat(&(0x7f0000000000)='./file1\x00', 0x0) 09:50:11 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0xfffffffffffffff9, 0x3, &(0x7f0000000140)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000012e00)="a88a000000080000d0f4655fd2f4655fd2f4655f00000000000004", 0x1b, 0x11080}], 0x0, &(0x7f0000013c00)=ANY=[]) 09:50:11 executing program 0: io_setup(0x572, &(0x7f00000002c0)=0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) write$P9_RSTATu(r2, &(0x7f0000000480)=ANY=[], 0xfffffdef) 09:50:11 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8918, &(0x7f0000000080)={@private2, 0x0, r2}) 09:50:11 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)={0x1c, 0x1a, 0x101, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}, 0x1c}], 0x1}, 0x0) 09:50:11 executing program 2: syz_mount_image$tmpfs(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) setgroups(0x0, 0x0) chown(&(0x7f0000000080)='./file0\x00', 0x0, 0xee01) 09:50:11 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000b40), &(0x7f0000000b80), &(0x7f0000002f00)) [ 132.693201] loop7: detected capacity change from 0 to 264192 09:50:11 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7d, 0x7}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x8, 0x1, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x7fff, 0x8}, 0x80, 0x9, 0x0, 0x1, 0x8001, 0x6, 0x8a81, 0x0, 0x9, 0x0, 0xfffffffffffffffb}, 0x0, 0x3, 0xffffffffffffffff, 0xd7ede9b8d2555a0a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r1 = signalfd4(r0, &(0x7f00000001c0)={[0x9]}, 0x8, 0x80000) fallocate(r1, 0x4, 0x401, 0x3f) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r2, &(0x7f0000000900)="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", 0x200) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r2, 0x4, 0x44000) sendfile(r2, r3, 0x0, 0xfdef) [ 132.707407] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 132.721202] EXT4-fs (loop7): corrupt root inode, run e2fsck [ 132.723929] EXT4-fs (loop7): mount failed 09:50:11 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0x14, 0x0, 0x164, &(0x7f0000000040)}) [ 133.110824] syz-executor.4 (4071) used greatest stack depth: 24240 bytes left 09:50:12 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7d, 0x7}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x8, 0x1, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x7fff, 0x8}, 0x80, 0x9, 0x0, 0x1, 0x8001, 0x6, 0x8a81, 0x0, 0x9, 0x0, 0xfffffffffffffffb}, 0x0, 0x3, 0xffffffffffffffff, 0xd7ede9b8d2555a0a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r1 = signalfd4(r0, &(0x7f00000001c0)={[0x9]}, 0x8, 0x80000) fallocate(r1, 0x4, 0x401, 0x3f) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r2, &(0x7f0000000900)="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", 0x200) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r2, 0x4, 0x44000) sendfile(r2, r3, 0x0, 0xfdef) 09:50:12 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_script(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='#!@//'], 0xc) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0) 09:50:12 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) 09:50:12 executing program 1: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1814c2, 0x0) pwrite64(r1, &(0x7f0000000140)=' ', 0x1, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000001400)=[{&(0x7f0000000180)="a6", 0x1}], 0x1, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x7ff}) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000000c0)={0x0, r2}) 09:50:12 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)={0x1c, 0x1a, 0x101, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}, 0x1c}], 0x1}, 0x0) 09:50:12 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000005, 0x32, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f0000000080)={0x0, 0x9204, 0x2}, 0x0, 0x0, &(0x7f0000000140)={0x77359400}, 0x0) 09:50:12 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7d, 0x7}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x8, 0x1, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x7fff, 0x8}, 0x80, 0x9, 0x0, 0x1, 0x8001, 0x6, 0x8a81, 0x0, 0x9, 0x0, 0xfffffffffffffffb}, 0x0, 0x3, 0xffffffffffffffff, 0xd7ede9b8d2555a0a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r1 = signalfd4(r0, &(0x7f00000001c0)={[0x9]}, 0x8, 0x80000) fallocate(r1, 0x4, 0x401, 0x3f) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r2, &(0x7f0000000900)="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", 0x200) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r2, 0x4, 0x44000) sendfile(r2, r3, 0x0, 0xfdef) 09:50:12 executing program 6: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040607000000b9e4fc3b927208f2990d37c6f9c2a9fc39be14bb239b3a88ca86d10100"/50], 0x6) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT, 0x2) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) syz_emit_vhci(&(0x7f0000000680)=ANY=[@ANYRES64], 0x1004) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) ioctl$TIOCL_SETSEL(r1, 0x5452, &(0x7f0000000000)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT, 0x2) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) syz_emit_vhci(&(0x7f0000001b00)=ANY=[@ANYBLOB="b2da5afa6ad811962fafc691f71c5eeb7dbfdf8d25e2e18c3f4646a5789655c732ec7738f87c1e46cfe148ca70ca43888000000000000000184c9711a4a5b3531b50037776a52195bd0553914c53a9ebd87ddeb0f76ec0cd18f38fcdeab77efaf2a0e6747e0dbc16d83da5a641d7ed6d29bd729c7800d43eba52a00ca964a78aa0c8cdefee2ffd7f2d071be2658fff2c74394512442d633b6acd90df5e9bd98cd385d8771b6d31f92f03e06ca8e0e2c27fff00906f7be6a301e03fd75885e503d65ad023528aeb57b45daea4c1f326a501a6295bba29fc3bc9b777a40f6d34e481749d0e3ebe3254e6e82d5aedf23f2300"/255, @ANYBLOB="f5941e7aaa9def654a826bf29b361384174b8caaf6c61920e584bed43a07a02c896ff536aacaca7d8130aaa2758000d4c1fffc5337b0d35ba2776457297d5c67f3c1366b1462a3b30199512cc5a8ed2aa5a51106ee6b12e6d7e1c47126a0ca40f3b314b34582c7c7e2f0f5e9a0599708431e430f1d845fc12595b5eda2c73270b5f95438358c52c2a7c3146da2d901a566161a5f4093d5746c559e0ffedb13b5de072d25fb5428cd07963a72173cc0340f250c8d8ebf334972dbc3dd71cfd24d3b3dff30bdd9be33860aa5df7e03c2a1beadb3da", @ANYRESHEX=r1, @ANYRESDEC, @ANYRES32=0x0, @ANYRES16=r2, @ANYRES64=r1, @ANYBLOB="3ca3aa4247eac5abb6ad45ef9c9bd32f5f071f1af88d3fc313407e16d49f6f82616463a1fff61bd4217ac86ff6a0aa90e59faf48639375056046d9889a15a2f682a3ff3ad62ad25f4986354c8a69da00006a311cc9ab7a6cbd2fe73a6182e06b878031f4c720eed513bbffe6b5f20bf4fd43aa13fd27ff15f08f2603862da7459d98cb58252d249afab2bfba1ae2fd121344820f090d59054b38284da20b46", @ANYRES16=r1, @ANYRESDEC, @ANYRESHEX=r2], 0xfffffc5f) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0xc1}, 0x2) syz_emit_vhci(&(0x7f0000000540)=@HCI_EVENT_PKT={0x4, @hci_ev_key_refresh_complete={{0x30, 0x3}, {0x0, 0xc9}}}, 0x6) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r0, {0x4}}, '\x00'}) io_submit(0x0, 0x1, &(0x7f0000000640)=[&(0x7f0000000500)={0x0, 0x0, 0x0, 0x7, 0xfffc, r1, &(0x7f0000000580)="b4010aef7686dd800db4430c65126677ed27470f0863692141b9b59cd5c2bf9c335f0053cda05165d651dace98a19d84a281ad87ee82745c4fa2eddfe1f871860c892d511216d00c79da80c2be39a20d34b13b857b8ea49f91fa29e53cf131de1b347d33d4167094968b71b2e8e59fe02d6159c605e357227768a8fa5a94e6e7707986", 0x83, 0x9, 0x0, 0x2}]) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}}}, 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x1, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_conn_param_update_rsp={{0x13, 0x2, 0x2}, {0x6}}}}, 0xf) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="040e04004142a0"], 0x7) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x3a, 0x1, 0x0, 0x0) close(r0) [ 133.659535] process 'syz-executor.3' launched './file1' with NULL argv: empty string added 09:50:12 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000040)={0x0, 0x20000183}, 0x1) 09:50:12 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) 09:50:12 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)={0x1c, 0x1a, 0x101, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}, 0x1c}], 0x1}, 0x0) 09:50:12 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPKT(r0, 0x540f, &(0x7f0000004040)) 09:50:12 executing program 1: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f00000001c0)="19", 0x1) 09:50:12 executing program 6: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='hugetlbfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x33820a0, &(0x7f00000006c0)={[{@nr_inodes={'nr_inodes', 0x3d, [0x70]}}]}) 09:50:12 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) 09:50:12 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/warn_count', 0x0, 0x0) clone3(&(0x7f0000000000)={0x2c8004100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) [ 133.923419] hugetlbfs: Bad value 'p' for mount option 'nr_inodes' [ 133.923419] [ 133.935210] hugetlbfs: Bad value 'p' for mount option 'nr_inodes' [ 133.935210] [ 134.226655] syz-executor.4 (4093) used greatest stack depth: 24176 bytes left 09:50:12 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7d, 0x7}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x8, 0x1, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x7fff, 0x8}, 0x80, 0x9, 0x0, 0x1, 0x8001, 0x6, 0x8a81, 0x0, 0x9, 0x0, 0xfffffffffffffffb}, 0x0, 0x3, 0xffffffffffffffff, 0xd7ede9b8d2555a0a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r1 = signalfd4(r0, &(0x7f00000001c0)={[0x9]}, 0x8, 0x80000) fallocate(r1, 0x4, 0x401, 0x3f) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r2, &(0x7f0000000900)="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", 0x200) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r2, 0x4, 0x44000) sendfile(r2, r3, 0x0, 0xfdef) 09:50:12 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/warn_count', 0x0, 0x0) clone3(&(0x7f0000000000)={0x2c8004100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) 09:50:12 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7d, 0x7}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x8, 0x1, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x7fff, 0x8}, 0x80, 0x9, 0x0, 0x1, 0x8001, 0x6, 0x8a81, 0x0, 0x9, 0x0, 0xfffffffffffffffb}, 0x0, 0x3, 0xffffffffffffffff, 0xd7ede9b8d2555a0a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r1 = signalfd4(r0, &(0x7f00000001c0)={[0x9]}, 0x8, 0x80000) fallocate(r1, 0x4, 0x401, 0x3f) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r2, &(0x7f0000000900)="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", 0x200) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r2, 0x4, 0x44000) sendfile(r2, r3, 0x0, 0xfdef) 09:50:12 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)={0x1c, 0x1a, 0x101, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}, 0x1c}], 0x1}, 0x0) 09:50:12 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPKT(r0, 0x540f, &(0x7f0000004040)) 09:50:12 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=@newsa={0x150, 0x10, 0x9063c8f45262bcb, 0x0, 0x0, {{@in6=@private1, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@mcast1, 0x0, 0x33}, @in6=@mcast1, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@algo_auth={0x60, 0x1, {{'cmac(aes)\x00'}, 0xc0, "3c5dfa6b44580a10723498887adb7b7e88e2316be923faf7"}}]}, 0x150}}, 0x0) 09:50:12 executing program 6: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='hugetlbfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x33820a0, &(0x7f00000006c0)={[{@nr_inodes={'nr_inodes', 0x3d, [0x70]}}]}) 09:50:12 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) [ 134.327540] hugetlbfs: Bad value 'p' for mount option 'nr_inodes' [ 134.327540] 09:50:13 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPKT(r0, 0x540f, &(0x7f0000004040)) 09:50:13 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001800)='stat\x00') pread64(r0, 0x0, 0x14, 0x0) 09:50:13 executing program 6: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='hugetlbfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x33820a0, &(0x7f00000006c0)={[{@nr_inodes={'nr_inodes', 0x3d, [0x70]}}]}) 09:50:13 executing program 7: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)={0x0, "ef75735ae64c6cac5a125e50fd61a86806fbddd371c58f55713f551532d817304ed7258936b1371129e8c2b77613802aaaad472128617de646aa814dae780c55"}, 0x48, 0xfffffffffffffffb) keyctl$set_timeout(0xf, r0, 0x0) 09:50:13 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001800)='stat\x00') pread64(r0, 0x0, 0x14, 0x0) 09:50:13 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=@newsa={0x150, 0x10, 0x9063c8f45262bcb, 0x0, 0x0, {{@in6=@private1, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@mcast1, 0x0, 0x33}, @in6=@mcast1, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@algo_auth={0x60, 0x1, {{'cmac(aes)\x00'}, 0xc0, "3c5dfa6b44580a10723498887adb7b7e88e2316be923faf7"}}]}, 0x150}}, 0x0) 09:50:13 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/warn_count', 0x0, 0x0) clone3(&(0x7f0000000000)={0x2c8004100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) 09:50:13 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPKT(r0, 0x540f, &(0x7f0000004040)) [ 134.505605] hugetlbfs: Bad value 'p' for mount option 'nr_inodes' [ 134.505605] 09:50:13 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7d, 0x7}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x8, 0x1, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x7fff, 0x8}, 0x80, 0x9, 0x0, 0x1, 0x8001, 0x6, 0x8a81, 0x0, 0x9, 0x0, 0xfffffffffffffffb}, 0x0, 0x3, 0xffffffffffffffff, 0xd7ede9b8d2555a0a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r1 = signalfd4(r0, &(0x7f00000001c0)={[0x9]}, 0x8, 0x80000) fallocate(r1, 0x4, 0x401, 0x3f) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r2, &(0x7f0000000900)="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", 0x200) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r2, 0x4, 0x44000) sendfile(r2, r3, 0x0, 0xfdef) 09:50:13 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=@newsa={0x150, 0x10, 0x9063c8f45262bcb, 0x0, 0x0, {{@in6=@private1, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@mcast1, 0x0, 0x33}, @in6=@mcast1, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@algo_auth={0x60, 0x1, {{'cmac(aes)\x00'}, 0xc0, "3c5dfa6b44580a10723498887adb7b7e88e2316be923faf7"}}]}, 0x150}}, 0x0) 09:50:13 executing program 7: r0 = socket$unix(0x1, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6}]}, 0x10) close(r0) 09:50:13 executing program 6: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='hugetlbfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x33820a0, &(0x7f00000006c0)={[{@nr_inodes={'nr_inodes', 0x3d, [0x70]}}]}) 09:50:13 executing program 3: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) socket$inet_icmp(0x2, 0x2, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000280)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000180)=@IORING_OP_WRITE={0x17, 0x3, 0x4007, @fd_index=0x6, 0x4, &(0x7f00000005c0)="9dc4eabcc382b29dca7a2d24f797c1b921788f5e530f8bf4915657975ce990ed15a90af8d8a763b737157114e5d0dc902ce1ae0097ccf77764ba6710ffc3e0f2d293585c9177f33817de7883306ed80afc94f79d09e2f6349e2db8f4e2fcabd0e3ec1ad5dee7100355a78b7f7cadaa515aefecd5d9dc339886d11fce99a246407480397a44be2594c49e20ecb45d539ed09dc4bad002397f2f3c14e354900a743545bf41b81e10393239d6f68011737fbddccde4", 0xb4, 0x2}, 0x4) r2 = mq_open(&(0x7f00000002c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\xf9\xff\xff\xff\xff\xff\xff\xff\x00'/124, 0x40, 0x18b, 0x0) mq_timedsend(r2, &(0x7f0000000040)="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", 0xfa, 0x10000000000, &(0x7f0000000140)={0x0, 0x989680}) r3 = dup2(r2, r2) mq_notify(r3, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000059c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRES64=r0, @ANYRESHEX=r3], 0x28}}], 0x2, 0x0) r4 = gettid() rt_sigqueueinfo(r4, 0xffffffff, &(0x7f0000000000)) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 09:50:13 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/warn_count', 0x0, 0x0) clone3(&(0x7f0000000000)={0x2c8004100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) 09:50:13 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001800)='stat\x00') pread64(r0, 0x0, 0x14, 0x0) 09:50:13 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7d, 0x7}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x8, 0x1, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x7fff, 0x8}, 0x80, 0x9, 0x0, 0x1, 0x8001, 0x6, 0x8a81, 0x0, 0x9, 0x0, 0xfffffffffffffffb}, 0x0, 0x3, 0xffffffffffffffff, 0xd7ede9b8d2555a0a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r1 = signalfd4(r0, &(0x7f00000001c0)={[0x9]}, 0x8, 0x80000) fallocate(r1, 0x4, 0x401, 0x3f) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r2, &(0x7f0000000900)="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", 0x200) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r2, 0x4, 0x44000) sendfile(r2, r3, 0x0, 0xfdef) [ 134.908838] hugetlbfs: Bad value 'p' for mount option 'nr_inodes' [ 134.908838] 09:50:13 executing program 7: sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003e00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=[@rthdrdstopts={{0x20, 0x29, 0x37, {0x0, 0x0, '\x00', [@generic={0x0, 0x3, "159918"}]}}}], 0x20}}], 0x1, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x23, &(0x7f0000001580), 0x0) 09:50:13 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=@newsa={0x150, 0x10, 0x9063c8f45262bcb, 0x0, 0x0, {{@in6=@private1, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@mcast1, 0x0, 0x33}, @in6=@mcast1, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@algo_auth={0x60, 0x1, {{'cmac(aes)\x00'}, 0xc0, "3c5dfa6b44580a10723498887adb7b7e88e2316be923faf7"}}]}, 0x150}}, 0x0) 09:50:13 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001800)='stat\x00') pread64(r0, 0x0, 0x14, 0x0) 09:50:13 executing program 6: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug', 0x0, 0x0) getdents(r0, &(0x7f0000000180)=""/163, 0xa3) getdents(r0, &(0x7f0000000080)=""/87, 0x57) 09:50:13 executing program 7: syz_mount_image$tmpfs(&(0x7f0000001c40), &(0x7f0000001c80)='./file0\x00', 0x0, 0x0, 0x0, 0x200888, &(0x7f0000001f00)={[{@mode}]}) 09:50:13 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_cancel(0x0, 0x0, 0x0) 09:50:13 executing program 6: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug', 0x0, 0x0) getdents(r0, &(0x7f0000000180)=""/163, 0xa3) getdents(r0, &(0x7f0000000080)=""/87, 0x57) 09:50:13 executing program 5: r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000a00)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) fstat(r0, &(0x7f00000000c0)) 09:50:14 executing program 3: r0 = memfd_create(&(0x7f0000001280)='\x00', 0x0) fsetxattr$security_selinux(r0, &(0x7f0000000080), &(0x7f0000000000)='system_u:object_r:klogd_var_run_t:s0\x00', 0xb, 0x0) statx(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) syncfs(0xffffffffffffffff) 09:50:14 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x0) 09:50:14 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwrite64(r0, &(0x7f00000000c0)="d0", 0x1, 0x11de60) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4002, 0x0) preadv2(r1, &(0x7f0000000080)=[{&(0x7f0000000100)=""/231, 0xe7}, {0x0, 0x2}], 0x2, 0x0, 0x0, 0x0) 09:50:14 executing program 6: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug', 0x0, 0x0) getdents(r0, &(0x7f0000000180)=""/163, 0xa3) getdents(r0, &(0x7f0000000080)=""/87, 0x57) 09:50:14 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001680)={[{@mpol={'mpol', 0x3d, {'bind', '', @val={0x3a, [0x35, 0x2d, 0x33, 0x2f]}}}}]}) [ 135.545262] SELinux: Context system_u:ob is not valid (left unmapped). [ 135.547341] tmpfs: Bad value for 'mpol' [ 135.553292] tmpfs: Bad value for 'mpol' [ 135.554814] audit: type=1400 audit(1768297814.252:10): avc: denied { associate } for pid=4200 comm="syz-executor.3" name="memfd:" dev="tmpfs" ino=1034 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:ob" 09:50:14 executing program 4: futex(&(0x7f0000000680), 0x8, 0x0, &(0x7f00000006c0)={0x77359400}, 0x0, 0x0) 09:50:14 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r1) setgid(0x0) 09:50:14 executing program 0: newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) setresuid(0x0, r0, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0xffffefff) 09:50:14 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[]) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x104000, 0x0) mount$9p_unix(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1005841, 0x0) syz_mount_image$tmpfs(&(0x7f0000000cc0), &(0x7f0000000d00)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)=ANY=[]) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2001851, 0x0) umount2(&(0x7f0000001380)='./file0\x00', 0x0) 09:50:14 executing program 6: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug', 0x0, 0x0) getdents(r0, &(0x7f0000000180)=""/163, 0xa3) getdents(r0, &(0x7f0000000080)=""/87, 0x57) 09:50:14 executing program 3: r0 = memfd_create(&(0x7f0000001280)='\x00', 0x0) fsetxattr$security_selinux(r0, &(0x7f0000000080), &(0x7f0000000000)='system_u:object_r:klogd_var_run_t:s0\x00', 0xb, 0x0) statx(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) syncfs(0xffffffffffffffff) 09:50:14 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x40}]}, 0x24}}, 0x0) [ 135.666868] ======================================================= [ 135.666868] WARNING: The mand mount option has been deprecated and [ 135.666868] and is ignored by this kernel. Remove the mand [ 135.666868] option from the mount to silence this warning. 09:50:14 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000003c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x34, r1, 0xf1b5a43ca6b9a97, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0xe, 0x1, 'NLBL_MGMT\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}]}, 0x34}}, 0x0) 09:50:14 executing program 4: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_key_refresh_complete={{0x30, 0x3}}}, 0x6) 09:50:14 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwrite64(r0, &(0x7f00000000c0)="d0", 0x1, 0x11de60) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4002, 0x0) preadv2(r1, &(0x7f0000000080)=[{&(0x7f0000000100)=""/231, 0xe7}, {0x0, 0x2}], 0x2, 0x0, 0x0, 0x0) [ 135.666868] ======================================================= 09:50:14 executing program 0: r0 = fsopen(&(0x7f0000000000)='securityfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) r1 = dup2(r0, r0) r2 = fsmount(r1, 0x0, 0x0) mknodat$loop(r2, &(0x7f0000000080)='./file0\x00', 0x0, 0x1) 09:50:14 executing program 3: r0 = memfd_create(&(0x7f0000001280)='\x00', 0x0) fsetxattr$security_selinux(r0, &(0x7f0000000080), &(0x7f0000000000)='system_u:object_r:klogd_var_run_t:s0\x00', 0xb, 0x0) statx(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) syncfs(0xffffffffffffffff) 09:50:14 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000480), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000004c0)={0x0, 0x0, 0x7f}) [ 135.806353] program syz-executor.5 is using a deprecated SCSI ioctl, please convert it to SG_IO 09:50:14 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x401) write$evdev(r0, &(0x7f00000000c0)=[{{0x77359400}, 0x14, 0x3d}], 0xff2f) 09:50:14 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000140)=ANY=[@ANYBLOB="0004000600b80000000000", @ANYRES32, @ANYRES32=0xee01]) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000140)}) 09:50:14 executing program 7: newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setresuid(0x0, r0, 0x0) pipe(&(0x7f0000000880)={0xffffffffffffffff}) fcntl$setstatus(r1, 0x407, 0x1002000) 09:50:14 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000280)=0x3, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) 09:50:14 executing program 6: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000005, 0x32, 0xffffffffffffffff, 0x0) fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x0) 09:50:14 executing program 0: r0 = fsopen(&(0x7f0000000000)='securityfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) r1 = dup2(r0, r0) r2 = fsmount(r1, 0x0, 0x0) mknodat$loop(r2, &(0x7f0000000080)='./file0\x00', 0x0, 0x1) 09:50:14 executing program 3: r0 = memfd_create(&(0x7f0000001280)='\x00', 0x0) fsetxattr$security_selinux(r0, &(0x7f0000000080), &(0x7f0000000000)='system_u:object_r:klogd_var_run_t:s0\x00', 0xb, 0x0) statx(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) syncfs(0xffffffffffffffff) 09:50:14 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwrite64(r0, &(0x7f00000000c0)="d0", 0x1, 0x11de60) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4002, 0x0) preadv2(r1, &(0x7f0000000080)=[{&(0x7f0000000100)=""/231, 0xe7}, {0x0, 0x2}], 0x2, 0x0, 0x0, 0x0) 09:50:14 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000900), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}]}, 0x1c}}, 0x0) 09:50:14 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwrite64(r0, &(0x7f00000000c0)="d0", 0x1, 0x11de60) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4002, 0x0) preadv2(r1, &(0x7f0000000080)=[{&(0x7f0000000100)=""/231, 0xe7}, {0x0, 0x2}], 0x2, 0x0, 0x0, 0x0) 09:50:14 executing program 0: r0 = fsopen(&(0x7f0000000000)='securityfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) r1 = dup2(r0, r0) r2 = fsmount(r1, 0x0, 0x0) mknodat$loop(r2, &(0x7f0000000080)='./file0\x00', 0x0, 0x1) 09:50:14 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x89b0, &(0x7f00000000c0)={'wlan0\x00', &(0x7f0000000000)=@ethtool_rx_ntuple={0x10, {0x0, @tcp_ip4_spec={@rand_addr, @private}, @esp_ip4_spec={@multicast1, @local}}}}) 09:50:14 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x401) write$evdev(r0, &(0x7f00000000c0)=[{{0x77359400}, 0x14, 0x3d}], 0xff2f) 09:50:14 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) write$binfmt_elf64(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="7f454c460000fc00000000000000000003003e0000000000000000000000000040000000c0ffffffffffffff00000000000000000000380001"], 0x40) close(r2) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) 09:50:14 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000900), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}]}, 0x1c}}, 0x0) 09:50:14 executing program 6: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000005, 0x32, 0xffffffffffffffff, 0x0) fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x0) 09:50:14 executing program 0: r0 = fsopen(&(0x7f0000000000)='securityfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) r1 = dup2(r0, r0) r2 = fsmount(r1, 0x0, 0x0) mknodat$loop(r2, &(0x7f0000000080)='./file0\x00', 0x0, 0x1) 09:50:14 executing program 5: pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$KDSIGACCEPT(r0, 0x2, 0x1fffffffffffffd) 09:50:14 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x48, &(0x7f0000000040), 0x4) 09:50:14 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x44000) io_setup(0xfff, &(0x7f0000000040)=0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[], 0x8b) io_submit(r3, 0x1, &(0x7f0000000140)=[0x0]) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) r4 = fsopen(&(0x7f0000000040)='binfmt_misc\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0x0) sendfile(r4, r0, &(0x7f0000000080)=0x3, 0x585) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x8441, 0x0) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r6, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r5, 0x5450, 0x0) ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) 09:50:14 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x401) write$evdev(r0, &(0x7f00000000c0)=[{{0x77359400}, 0x14, 0x3d}], 0xff2f) 09:50:14 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000b80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}}], 0x2, 0x0) 09:50:14 executing program 6: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000005, 0x32, 0xffffffffffffffff, 0x0) fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x0) 09:50:14 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000900), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}]}, 0x1c}}, 0x0) 09:50:14 executing program 0: epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_setup(0x1fca, &(0x7f0000000540)={0x0, 0x0, 0x2, 0x0, 0xb5}) 09:50:14 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setresuid(0x0, r1, 0x0) ioctl$VT_RESIZE(r0, 0x4b48, &(0x7f0000000080)) 09:50:14 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000900), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}]}, 0x1c}}, 0x0) 09:50:14 executing program 5: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x4, &(0x7f0000000200)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000010400)}], 0x0, 0x0) io_setup(0x3, &(0x7f0000000380)=0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x140241, 0x0) io_submit(r0, 0xa, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000)='\n', 0x1}]) 09:50:14 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x401) write$evdev(r0, &(0x7f00000000c0)=[{{0x77359400}, 0x14, 0x3d}], 0xff2f) 09:50:14 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r1) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:50:15 executing program 6: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000005, 0x32, 0xffffffffffffffff, 0x0) fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x0) 09:50:15 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) 09:50:15 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000040), 0x4) 09:50:15 executing program 2: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x4000) r0 = fsmount(0xffffffffffffffff, 0x0, 0xa) ioctl$RTC_EPOCH_SET(r0, 0x4008700e, 0x9) ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004) timerfd_create(0x7, 0x800) syz_io_uring_setup(0x1648, &(0x7f0000000180)={0x0, 0x0, 0x20, 0x2, 0x288, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0xfffffffffffffffc) ioctl$RTC_PLL_SET(0xffffffffffffffff, 0x40207012, &(0x7f0000000280)={0x1, 0x1ff, 0x81, 0x1ff, 0x100, 0x401, 0x9}) socket(0x2b, 0x0, 0x4) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, 0x0, 0x10) syz_io_uring_setup(0x2f48, &(0x7f0000001480)={0x0, 0x3eca, 0x0, 0x2, 0x8d}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000001500), &(0x7f0000001540)) io_cancel(0x0, 0x0, &(0x7f0000001600)) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f00000019c0)={&(0x7f00000016c0), 0xc, &(0x7f0000001980)={&(0x7f0000001740)={0x44, 0x0, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x20, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x4}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc000}, 0xc0) 09:50:15 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000480), 0x0, 0x20982) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000d40)=[{&(0x7f0000000240)="7819b4162400000000000000925a9eed92a8c20c450000000000606d117738a730b2943705d75ce7489d", 0x2a}, {&(0x7f0000000100)="01010000000000005b702ec7c2bd56de9e7f6ee2e018215cc96d88413d6e5339762a2d9dd86993cfecd1", 0x2a}], 0x2) 09:50:15 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x44000) io_setup(0xfff, &(0x7f0000000040)=0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[], 0x8b) io_submit(r3, 0x1, &(0x7f0000000140)=[0x0]) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) r4 = fsopen(&(0x7f0000000040)='binfmt_misc\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0x0) sendfile(r4, r0, &(0x7f0000000080)=0x3, 0x585) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x8441, 0x0) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r6, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r5, 0x5450, 0x0) ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) 09:50:15 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000300)=0xaf, 0x4) sendmmsg$inet6(r0, &(0x7f000000c7c0)=[{{&(0x7f00000028c0)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c, 0x0}}], 0x1, 0x0) 09:50:15 executing program 7: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x4, &(0x7f0000000280)=[{0x28}, {0xa}, {0x1, 0x9, 0x3f, 0x62}, {0xc84, 0x9, 0xaf, 0x1}]}, 0x10) fcntl$setsig(r0, 0xa, 0x2) openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup(r1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000006, 0x12, r2, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r3, 0x0, &(0x7f0000000040), 0x0, 0x4) sigaltstack(&(0x7f0000ffc000/0x4000)=nil, 0x0) mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8) fork() 09:50:15 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000480), 0x0, 0x20982) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000d40)=[{&(0x7f0000000240)="7819b4162400000000000000925a9eed92a8c20c450000000000606d117738a730b2943705d75ce7489d", 0x2a}, {&(0x7f0000000100)="01010000000000005b702ec7c2bd56de9e7f6ee2e018215cc96d88413d6e5339762a2d9dd86993cfecd1", 0x2a}], 0x2) 09:50:15 executing program 6: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x44000) io_setup(0xfff, &(0x7f0000000040)=0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[], 0x8b) io_submit(r3, 0x1, &(0x7f0000000140)=[0x0]) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) r4 = fsopen(&(0x7f0000000040)='binfmt_misc\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0x0) sendfile(r4, r0, &(0x7f0000000080)=0x3, 0x585) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x8441, 0x0) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r6, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r5, 0x5450, 0x0) ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) 09:50:15 executing program 2: accept$packet(0xffffffffffffffff, 0x0, 0x0) 09:50:15 executing program 0: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d0020002000200020002000200020002000200020002000000000000000002900000000000029252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f00000000c0)="a5959462a241cf324b0f22df15d280897132a092744375ad12c204fc97ee897b53331ae103acf82ba60000000000000000", 0x31, 0xf000}], 0x0, &(0x7f0000000000)={[{@check_strict}, {@overriderock}]}) [ 136.612317] loop0: detected capacity change from 0 to 240 [ 136.633751] ISOFS: unable to read i-node block 60 [ 136.634219] isofs_fill_super: get root inode failed [ 136.640327] loop0: detected capacity change from 0 to 240 [ 136.652586] ISOFS: unable to read i-node block 60 [ 136.653016] isofs_fill_super: get root inode failed 09:50:15 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x68, &(0x7f0000000040)=0x3, 0x4) 09:50:15 executing program 2: r0 = syz_open_dev$evdev(&(0x7f00000021c0), 0x0, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f0000002200)) 09:50:15 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000001180)=[{&(0x7f0000000000)="a20e73f1b1812c8df6967520cdfeffffff7a9437ee7aba5fd3289b1b0745", 0x1e}], 0x1) 09:50:15 executing program 0: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d0020002000200020002000200020002000200020002000000000000000002900000000000029252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f00000000c0)="a5959462a241cf324b0f22df15d280897132a092744375ad12c204fc97ee897b53331ae103acf82ba60000000000000000", 0x31, 0xf000}], 0x0, &(0x7f0000000000)={[{@check_strict}, {@overriderock}]}) 09:50:15 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000480), 0x0, 0x20982) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000d40)=[{&(0x7f0000000240)="7819b4162400000000000000925a9eed92a8c20c450000000000606d117738a730b2943705d75ce7489d", 0x2a}, {&(0x7f0000000100)="01010000000000005b702ec7c2bd56de9e7f6ee2e018215cc96d88413d6e5339762a2d9dd86993cfecd1", 0x2a}], 0x2) 09:50:15 executing program 6: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x44000) io_setup(0xfff, &(0x7f0000000040)=0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[], 0x8b) io_submit(r3, 0x1, &(0x7f0000000140)=[0x0]) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) r4 = fsopen(&(0x7f0000000040)='binfmt_misc\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0x0) sendfile(r4, r0, &(0x7f0000000080)=0x3, 0x585) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x8441, 0x0) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r6, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r5, 0x5450, 0x0) ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) 09:50:15 executing program 7: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x4, &(0x7f0000000280)=[{0x28}, {0xa}, {0x1, 0x9, 0x3f, 0x62}, {0xc84, 0x9, 0xaf, 0x1}]}, 0x10) fcntl$setsig(r0, 0xa, 0x2) openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup(r1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000006, 0x12, r2, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r3, 0x0, &(0x7f0000000040), 0x0, 0x4) sigaltstack(&(0x7f0000ffc000/0x4000)=nil, 0x0) mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8) fork() 09:50:15 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x44000) io_setup(0xfff, &(0x7f0000000040)=0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[], 0x8b) io_submit(r3, 0x1, &(0x7f0000000140)=[0x0]) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) r4 = fsopen(&(0x7f0000000040)='binfmt_misc\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0x0) sendfile(r4, r0, &(0x7f0000000080)=0x3, 0x585) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x8441, 0x0) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r6, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r5, 0x5450, 0x0) ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) [ 136.781456] loop0: detected capacity change from 0 to 240 09:50:15 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000000020000190000fffe0100000f000000000000000100000005000000000004000040000020000000ddf4655fddf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000001000008000000d24201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e7e1fc40a6de4c28a2c3627f6ec42b47010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="02000000030000000400000016000f000300040000000000000000000f00c5d7", 0x20, 0x800}, {&(0x7f0000000080)="ed41000000080000da97ad84334ddc240d024771a6c44229f4655fddf4655fddf4655f", 0x23, 0x2100}], 0x0, &(0x7f0000014100)) 09:50:15 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000500), &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)) getxattr(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=@random={'user.', '\x00'}, 0x0, 0x0) 09:50:15 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000480), 0x0, 0x20982) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000d40)=[{&(0x7f0000000240)="7819b4162400000000000000925a9eed92a8c20c450000000000606d117738a730b2943705d75ce7489d", 0x2a}, {&(0x7f0000000100)="01010000000000005b702ec7c2bd56de9e7f6ee2e018215cc96d88413d6e5339762a2d9dd86993cfecd1", 0x2a}], 0x2) [ 136.824141] ISOFS: unable to read i-node block 60 [ 136.824630] isofs_fill_super: get root inode failed 09:50:15 executing program 2: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000100)={0x0, 0x1762, 0x7fff}) [ 136.877022] loop4: detected capacity change from 0 to 2048 [ 136.901617] EXT4-fs error (device loop4): ext4_ext_check_inode:528: inode #2: comm syz-executor.4: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 136.911148] EXT4-fs (loop4): get root inode failed [ 136.911992] EXT4-fs (loop4): mount failed [ 136.923019] loop4: detected capacity change from 0 to 2048 [ 136.930215] EXT4-fs error (device loop4): ext4_ext_check_inode:528: inode #2: comm syz-executor.4: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 136.933212] EXT4-fs (loop4): get root inode failed [ 136.933758] EXT4-fs (loop4): mount failed 09:50:15 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x44000) io_setup(0xfff, &(0x7f0000000040)=0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[], 0x8b) io_submit(r3, 0x1, &(0x7f0000000140)=[0x0]) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) r4 = fsopen(&(0x7f0000000040)='binfmt_misc\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0x0) sendfile(r4, r0, &(0x7f0000000080)=0x3, 0x585) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x8441, 0x0) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r6, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r5, 0x5450, 0x0) ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) 09:50:15 executing program 6: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x44000) io_setup(0xfff, &(0x7f0000000040)=0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[], 0x8b) io_submit(r3, 0x1, &(0x7f0000000140)=[0x0]) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) r4 = fsopen(&(0x7f0000000040)='binfmt_misc\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0x0) sendfile(r4, r0, &(0x7f0000000080)=0x3, 0x585) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x8441, 0x0) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r6, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r5, 0x5450, 0x0) ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) 09:50:15 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000001480)) pwritev2(r1, &(0x7f0000000700)=[{&(0x7f0000000240)="98f2083f3d05fc46c7ae46f601c70df2bd22c533e2f6e5502476b3334850c3a761dec7ac20c03e8593587314235def5ec02c58110e3b1a85d25b260a4aa6398feef9a5e4ad003adcacd998766b671d4fbb5c84c9513720847537e9904b6f13d784cf75", 0x63}, {&(0x7f00000003c0)}, {0x0}, {0x0}, {&(0x7f00000005c0)="784031c6e6ceb94cf927b67abc1e202e8d753af66e980ac0b2effac1e81ab28f745ea4894ebaddc5d1836332f1eed59587f317e6b1", 0x35}, {&(0x7f00000002c0)='j', 0x1}, {&(0x7f0000000640)="8e4c0171c8aa07fd4efe95d365409aa1f4fa7577d64be575dc8ca022e4909e70deb020c43b19dc412531a85f32c9507b616d8213e9981472787de6da815b676f58826c49483e0b16ebd6dc97", 0x4c}], 0x7, 0x0, 0xb750, 0x75576dce4adb44a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r0, &(0x7f0000000900)="5ed0b2ff68d76fb346352b602a2a1295cbe01cb3f64fbed9e7f9bc9be0f300cb97f6a204cc586e45dfb949002f61f8fb969dd435dd0c37c5077e5b10cfeafd75205e215b167323a3b971b0ec98e6c3d4d825cae01271cb35cdd091e4872367f354e0dc81a7e4ac79775bc1dcaafe2f5079da79d1989f1ddce6722fc438a7217526cfe75d53471624d6f091e19a7fb699ea27efa9e0fd1914e7c35f297afd9b9b85ff0ce7a982f4fa0c172ea5f06479eec302f30e5df66273717e028f4ca7d4c5b6bc8a3c3c67f688195f22488a15d9e1f7e5fed3a6c2aba7bc308b0e2c5657f4538f4a3bf9b975bb887a901ab3c85261be3e331b741313e78b5ad63b7b1b378e9c79dc4a95b2b4d15cd1d1b808844378f882a72af1e5b0eefd356e0247246e60643204c3b46183dbe4e066c55cb1dcdaa7b70ef43ab2fa4d2b8c4c1a89cb0e325fd9716874d3856cf368efd1f92d21214e55e4de647c37c71887d11f74f9afe1616e3054ceae601e4b3555e243c1882ad42c7730caeb309e7714ad87c55e9fba308cfc4161e562abde3ac4f3d7e0a3584d4928100197f102307c05c0b4b4898b0591bc1433af443478979f28e6136ffb21aaeac2be5490475a08e96bb94fd9d9d3aa2f8a1e147a80ba9bfd04dac3f476ff128476c693ea71f7be47a508c98eddc479eb703d6f17cc5be2182f7c39b0a47eb23e0808b5d87dd2a9ce88eb48a601", 0x200) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x44000) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80800) r3 = pidfd_open(0xffffffffffffffff, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r3, 0x82307202, &(0x7f0000000340)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) sendfile(r0, r2, 0x0, 0xfdef) 09:50:15 executing program 0: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d0020002000200020002000200020002000200020002000000000000000002900000000000029252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f00000000c0)="a5959462a241cf324b0f22df15d280897132a092744375ad12c204fc97ee897b53331ae103acf82ba60000000000000000", 0x31, 0xf000}], 0x0, &(0x7f0000000000)={[{@check_strict}, {@overriderock}]}) 09:50:15 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = epoll_create1(0x0) epoll_pwait(r0, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) 09:50:15 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$bt_hci(r0, 0x0, 0x1, 0xfffffffffffffffe, &(0x7f0000000080)=0x42) 09:50:15 executing program 7: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x4, &(0x7f0000000280)=[{0x28}, {0xa}, {0x1, 0x9, 0x3f, 0x62}, {0xc84, 0x9, 0xaf, 0x1}]}, 0x10) fcntl$setsig(r0, 0xa, 0x2) openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup(r1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000006, 0x12, r2, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r3, 0x0, &(0x7f0000000040), 0x0, 0x4) sigaltstack(&(0x7f0000ffc000/0x4000)=nil, 0x0) mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8) fork() [ 136.997162] loop0: detected capacity change from 0 to 240 [ 136.999178] program syz-executor.5 is using a deprecated SCSI ioctl, please convert it to SG_IO 09:50:15 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000000020000190000fffe0100000f000000000000000100000005000000000004000040000020000000ddf4655fddf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000001000008000000d24201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e7e1fc40a6de4c28a2c3627f6ec42b47010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="02000000030000000400000016000f000300040000000000000000000f00c5d7", 0x20, 0x800}, {&(0x7f0000000080)="ed41000000080000da97ad84334ddc240d024771a6c44229f4655fddf4655fddf4655f", 0x23, 0x2100}], 0x0, &(0x7f0000014100)) [ 137.022531] ISOFS: unable to read i-node block 60 [ 137.023303] isofs_fill_super: get root inode failed [ 137.050951] loop4: detected capacity change from 0 to 2048 [ 137.103313] EXT4-fs error (device loop4): ext4_ext_check_inode:528: inode #2: comm syz-executor.4: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 137.123915] EXT4-fs (loop4): get root inode failed [ 137.130542] EXT4-fs (loop4): mount failed [ 137.318328] program syz-executor.5 is using a deprecated SCSI ioctl, please convert it to SG_IO 09:50:16 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000000)={0x18, 0x76, 0x1, 0x0, 0x0, "", [@typed={0x8, 0xe, 0x0, 0x0, @pid}]}, 0x18}], 0x1}, 0x0) 09:50:16 executing program 0: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d0020002000200020002000200020002000200020002000000000000000002900000000000029252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f00000000c0)="a5959462a241cf324b0f22df15d280897132a092744375ad12c204fc97ee897b53331ae103acf82ba60000000000000000", 0x31, 0xf000}], 0x0, &(0x7f0000000000)={[{@check_strict}, {@overriderock}]}) 09:50:16 executing program 6: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x5, 0x0, 0x0, @time, {}, {}, @connect}], 0x38) 09:50:16 executing program 7: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x4, &(0x7f0000000280)=[{0x28}, {0xa}, {0x1, 0x9, 0x3f, 0x62}, {0xc84, 0x9, 0xaf, 0x1}]}, 0x10) fcntl$setsig(r0, 0xa, 0x2) openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup(r1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000006, 0x12, r2, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r3, 0x0, &(0x7f0000000040), 0x0, 0x4) sigaltstack(&(0x7f0000ffc000/0x4000)=nil, 0x0) mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8) fork() 09:50:16 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000000020000190000fffe0100000f000000000000000100000005000000000004000040000020000000ddf4655fddf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000001000008000000d24201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e7e1fc40a6de4c28a2c3627f6ec42b47010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="02000000030000000400000016000f000300040000000000000000000f00c5d7", 0x20, 0x800}, {&(0x7f0000000080)="ed41000000080000da97ad84334ddc240d024771a6c44229f4655fddf4655fddf4655f", 0x23, 0x2100}], 0x0, &(0x7f0000014100)) 09:50:16 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$bt_hci(r0, 0x0, 0x1, 0xfffffffffffffffe, &(0x7f0000000080)=0x42) 09:50:16 executing program 3: r0 = memfd_create(&(0x7f0000000000)='\x02\xce\x16Td\xa8\x98\x86\xb1:\x8f\xc5\x88{\xbd\xb4\xc2\xb1\x9b\x84\x97R\xcc\xdb<\x01\xfa\x91\x85\xa0\x81\xa9F0!/\x89\xacX\xbd\xcd\x12R|lTn\xac-\xfd\x8b\n\x1a\xbc\xf0^B6\xb6`[/\x95\x17\xdaYz\xd6\xc7\xbc!\xe5\x89\xc8^\x06np\xc6\xe7\x1d\xe4\xbe\xcaa}\x1c\x12\xf9M\x11\xfeA\xcb\x85\xdb?^\x8f\f\nD\xf2\x1f\x11\xaa\x90>N\xb7\x86\x15\x03=\xcc\xbe\x0f\x0f\x14\x84\xde:;\x0f\xb5\xf1\x86\xf2{yt\xa2\xe9\x01\x00\x00\x00\x8e:^v\xc9\x8d\xd7E\xb4\vw\xbe\\\x11J\xf4\xae\xc6\x88F\x9c\xaflM\x1dSHjH\xd6\x8d\xa6\xbd\x96\xe4SR\xe6\x118L*\x9b\xb2\tbg\xad\x0fRu\xeb\xe4{GO\xa5M\x80-Y\xc6\x1f%\xb8i|\x86\xa9Zm+\x9fe~\x8a\xe7\xca\f\xad?\xa0t\x13_Rq\x1f\xc6\xd9\x1d#\x8a8q\x1e#c\x8c\x193\xab\xdbE\xe1\xc8d=\xe5\r\xe5#\xa2v\x1eY\xf0\xe3\x1c*h\xdbq\x92\xf8a6\x99\x02\xc9}\x14\xfb\x03\xce\xb34\x95/\x18\xacJs0\x9f\x9b>\xae\a2\x01\xa7\x95\xbd\xf2\x99w\x11G\x1c\xd2\xbc\xf0E\x86\xca\x87\xefv\x8e\xad\xb8\xc7u\xc2z\x85\xc1\xd5R\x82\v\x1b\xea\x8f\xad\xc1\x02\x8a$\xd1T\xce\xa6\xa2m\x18K\xd5-\x03\xa0\xeeF^F\vJLx\xdc\xc8\b\xb7\xa1j2l\x8fQ\xc1\x89\xb8\xbef\xc6\x90\r\xae\xd4S\x8f\x7f\xe2[\x1cs\xab&\xa3\x81B<\xc5]n\xfc\x1a\x19\xdf\xc5\xe0O\x8b3\x84?x\xacP\xfb\xb5z\x87\xc0\xa4\x99\xf5\x8fyP\xd5\x8b\x80D\xe1\x979\x06^\xa1\xe0\x11\xa6\xc5:R4\x9c\xad\xac\xed\xa9?`\x80\xa7\x87\xe4(i\xab\xa6\xdbs\xed\xe8', 0x0) lseek(r0, 0xff0f000000000000, 0x3) 09:50:16 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000001480)) pwritev2(r1, &(0x7f0000000700)=[{&(0x7f0000000240)="98f2083f3d05fc46c7ae46f601c70df2bd22c533e2f6e5502476b3334850c3a761dec7ac20c03e8593587314235def5ec02c58110e3b1a85d25b260a4aa6398feef9a5e4ad003adcacd998766b671d4fbb5c84c9513720847537e9904b6f13d784cf75", 0x63}, {&(0x7f00000003c0)}, {0x0}, {0x0}, {&(0x7f00000005c0)="784031c6e6ceb94cf927b67abc1e202e8d753af66e980ac0b2effac1e81ab28f745ea4894ebaddc5d1836332f1eed59587f317e6b1", 0x35}, {&(0x7f00000002c0)='j', 0x1}, {&(0x7f0000000640)="8e4c0171c8aa07fd4efe95d365409aa1f4fa7577d64be575dc8ca022e4909e70deb020c43b19dc412531a85f32c9507b616d8213e9981472787de6da815b676f58826c49483e0b16ebd6dc97", 0x4c}], 0x7, 0x0, 0xb750, 0x75576dce4adb44a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r0, &(0x7f0000000900)="5ed0b2ff68d76fb346352b602a2a1295cbe01cb3f64fbed9e7f9bc9be0f300cb97f6a204cc586e45dfb949002f61f8fb969dd435dd0c37c5077e5b10cfeafd75205e215b167323a3b971b0ec98e6c3d4d825cae01271cb35cdd091e4872367f354e0dc81a7e4ac79775bc1dcaafe2f5079da79d1989f1ddce6722fc438a7217526cfe75d53471624d6f091e19a7fb699ea27efa9e0fd1914e7c35f297afd9b9b85ff0ce7a982f4fa0c172ea5f06479eec302f30e5df66273717e028f4ca7d4c5b6bc8a3c3c67f688195f22488a15d9e1f7e5fed3a6c2aba7bc308b0e2c5657f4538f4a3bf9b975bb887a901ab3c85261be3e331b741313e78b5ad63b7b1b378e9c79dc4a95b2b4d15cd1d1b808844378f882a72af1e5b0eefd356e0247246e60643204c3b46183dbe4e066c55cb1dcdaa7b70ef43ab2fa4d2b8c4c1a89cb0e325fd9716874d3856cf368efd1f92d21214e55e4de647c37c71887d11f74f9afe1616e3054ceae601e4b3555e243c1882ad42c7730caeb309e7714ad87c55e9fba308cfc4161e562abde3ac4f3d7e0a3584d4928100197f102307c05c0b4b4898b0591bc1433af443478979f28e6136ffb21aaeac2be5490475a08e96bb94fd9d9d3aa2f8a1e147a80ba9bfd04dac3f476ff128476c693ea71f7be47a508c98eddc479eb703d6f17cc5be2182f7c39b0a47eb23e0808b5d87dd2a9ce88eb48a601", 0x200) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x44000) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80800) r3 = pidfd_open(0xffffffffffffffff, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r3, 0x82307202, &(0x7f0000000340)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) sendfile(r0, r2, 0x0, 0xfdef) 09:50:16 executing program 6: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000001480)) pwritev2(r1, &(0x7f0000000700)=[{&(0x7f0000000240)="98f2083f3d05fc46c7ae46f601c70df2bd22c533e2f6e5502476b3334850c3a761dec7ac20c03e8593587314235def5ec02c58110e3b1a85d25b260a4aa6398feef9a5e4ad003adcacd998766b671d4fbb5c84c9513720847537e9904b6f13d784cf75", 0x63}, {&(0x7f00000003c0)}, {0x0}, {0x0}, {&(0x7f00000005c0)="784031c6e6ceb94cf927b67abc1e202e8d753af66e980ac0b2effac1e81ab28f745ea4894ebaddc5d1836332f1eed59587f317e6b1", 0x35}, {&(0x7f00000002c0)='j', 0x1}, {&(0x7f0000000640)="8e4c0171c8aa07fd4efe95d365409aa1f4fa7577d64be575dc8ca022e4909e70deb020c43b19dc412531a85f32c9507b616d8213e9981472787de6da815b676f58826c49483e0b16ebd6dc97", 0x4c}], 0x7, 0x0, 0xb750, 0x75576dce4adb44a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r0, &(0x7f0000000900)="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", 0x200) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x44000) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80800) r3 = pidfd_open(0xffffffffffffffff, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r3, 0x82307202, &(0x7f0000000340)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) sendfile(r0, r2, 0x0, 0xfdef) 09:50:16 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0xb341daa0822653b3, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) [ 137.415040] loop4: detected capacity change from 0 to 2048 [ 137.436379] EXT4-fs error (device loop4): ext4_ext_check_inode:528: inode #2: comm syz-executor.4: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 137.444410] EXT4-fs (loop4): get root inode failed [ 137.445487] EXT4-fs (loop4): mount failed 09:50:16 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000300), 0x4) 09:50:16 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000240)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "758107fc976803de3eccf5518ae7a2f42b770280beca5ace8c9c7fd1807a6057", "90381c8c8a761e95a67cb698602e9f4aef18298b5a00aa5ee959a9a4a5c9dcb350caacfcc0bde4cae62cc9d26094a21b", "6d2f4ce61c8f37417c79c16662324de0bd9c464f9b05816bde170ac9", {"efd8377fcd657a7e62d8a47f0c3b3d37", "e3b23b9a995a8e7dff48684a7ce0919a"}}}}}}}, 0x0) recvfrom(r0, 0x0, 0x94, 0x0, 0x0, 0x0) 09:50:16 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000000020000190000fffe0100000f000000000000000100000005000000000004000040000020000000ddf4655fddf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000001000008000000d24201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e7e1fc40a6de4c28a2c3627f6ec42b47010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="02000000030000000400000016000f000300040000000000000000000f00c5d7", 0x20, 0x800}, {&(0x7f0000000080)="ed41000000080000da97ad84334ddc240d024771a6c44229f4655fddf4655fddf4655f", 0x23, 0x2100}], 0x0, &(0x7f0000014100)) [ 137.528618] program syz-executor.5 is using a deprecated SCSI ioctl, please convert it to SG_IO 09:50:16 executing program 0: syz_emit_ethernet(0x2a, &(0x7f0000000180)={@broadcast, @empty, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @remote, @rand_addr=0xe4010102}, {0x0, 0x0, 0x0, @loopback}}}}}, 0x0) 09:50:16 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue1\x00'}) [ 137.581758] loop4: detected capacity change from 0 to 2048 [ 137.595901] EXT4-fs error (device loop4): ext4_ext_check_inode:528: inode #2: comm syz-executor.4: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) 09:50:16 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$bt_hci(r0, 0x0, 0x1, 0xfffffffffffffffe, &(0x7f0000000080)=0x42) [ 137.597887] program syz-executor.6 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 137.604416] EXT4-fs (loop4): get root inode failed [ 137.605094] EXT4-fs (loop4): mount failed 09:50:16 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000240)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "758107fc976803de3eccf5518ae7a2f42b770280beca5ace8c9c7fd1807a6057", "90381c8c8a761e95a67cb698602e9f4aef18298b5a00aa5ee959a9a4a5c9dcb350caacfcc0bde4cae62cc9d26094a21b", "6d2f4ce61c8f37417c79c16662324de0bd9c464f9b05816bde170ac9", {"efd8377fcd657a7e62d8a47f0c3b3d37", "e3b23b9a995a8e7dff48684a7ce0919a"}}}}}}}, 0x0) recvfrom(r0, 0x0, 0x94, 0x0, 0x0, 0x0) 09:50:16 executing program 3: prctl$PR_SET_IO_FLUSHER(0x26, 0x0) [ 137.729119] [ 137.729299] ===================================== [ 137.729678] WARNING: bad unlock balance detected! [ 137.730058] 6.19.0-rc5-next-20260113 #1 Not tainted [ 137.730445] ------------------------------------- [ 137.730815] syz-executor.1/4456 is trying to release lock (rcu_read_lock) at: [ 137.731378] [] __wait_on_freeing_inode+0x105/0x350 [ 137.731896] but there are no more locks to release! [ 137.732279] [ 137.732279] other info that might help us debug this: [ 137.733998] 4 locks held by syz-executor.1/4456: [ 137.734960] #0: ffff88800f8d23f8 (sb_writers#3){.+.+}-{0:0}, at: filename_create+0xf7/0x400 [ 137.736738] #1: ffff888049355020 (&type->i_mutex_dir_key#3/1){+.+.}-{4:4}, at: filename_create+0x1b1/0x400 [ 137.739203] #2: ffff88800f8d6950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xe32/0x12d0 [ 137.741275] #3: ffffffff85c16898 (inode_hash_lock){+.+.}-{3:3}, at: insert_inode_locked+0xf9/0x890 [ 137.742030] [ 137.742030] stack backtrace: [ 137.742388] CPU: 1 UID: 0 PID: 4456 Comm: syz-executor.1 Not tainted 6.19.0-rc5-next-20260113 #1 PREEMPT(lazy) [ 137.742402] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 137.742410] Call Trace: [ 137.742414] [ 137.742418] dump_stack_lvl+0xca/0x120 [ 137.742450] ? __wait_on_freeing_inode+0x105/0x350 [ 137.742464] print_unlock_imbalance_bug+0x118/0x130 [ 137.742481] ? __wait_on_freeing_inode+0x105/0x350 [ 137.742495] lock_release+0x1ee/0x270 [ 137.742510] __wait_on_freeing_inode+0x10a/0x350 [ 137.742525] ? __pfx___wait_on_freeing_inode+0x10/0x10 [ 137.742541] ? __pfx_var_wake_function+0x10/0x10 [ 137.742559] ? lock_is_held_type+0x9e/0x120 [ 137.742571] insert_inode_locked+0x25f/0x890 [ 137.742588] __ext4_new_inode+0x223d/0x4cd0 [ 137.742606] ? __pfx___ext4_new_inode+0x10/0x10 [ 137.742621] ? __pfx___dquot_initialize+0x10/0x10 [ 137.742640] ? __pfx_avc_has_perm+0x10/0x10 [ 137.742658] ext4_symlink+0x406/0xb40 [ 137.742677] ? __pfx_ext4_symlink+0x10/0x10 [ 137.742693] ? security_inode_permission+0x72/0xe0 [ 137.742706] vfs_symlink+0x44b/0x840 [ 137.742723] do_symlinkat+0x153/0x440 [ 137.742737] ? __pfx_do_symlinkat+0x10/0x10 [ 137.742751] ? strncpy_from_user+0x21b/0x2f0 [ 137.742769] __x64_sys_symlink+0x79/0xa0 [ 137.742783] do_syscall_64+0xbf/0x420 [ 137.742797] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.742809] RIP: 0033:0x7fb4805bd427 [ 137.742818] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 58 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 137.742829] RSP: 002b:00007ffda615fc58 EFLAGS: 00000202 ORIG_RAX: 0000000000000058 [ 137.742839] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fb4805bd427 [ 137.742847] RDX: 00007ffda615fd37 RSI: 00007fb480618019 RDI: 00007ffda615fd20 [ 137.742854] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007ffda615faf0 [ 137.742861] R10: 00007ffda615f9a7 R11: 0000000000000202 R12: 0000000000000001 [ 137.742868] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffda615fd20 [ 137.742878] [ 137.758099] ------------[ cut here ]------------ [ 137.758476] WARNING: kernel/rcu/tree_plugin.h:443 at __rcu_read_unlock+0x25f/0x5c0, CPU#1: syz-executor.1/4456 [ 137.759632] Modules linked in: [ 137.759929] CPU: 1 UID: 0 PID: 4456 Comm: syz-executor.1 Not tainted 6.19.0-rc5-next-20260113 #1 PREEMPT(lazy) [ 137.760759] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 137.761402] RIP: 0010:__rcu_read_unlock+0x25f/0x5c0 [ 137.761897] Code: f2 02 00 00 c7 43 58 01 00 00 00 bf 09 00 00 00 e8 a6 bb de ff 4d 85 f6 0f 84 73 fe ff ff e8 38 89 20 00 fb e9 68 fe ff ff 90 <0f> 0b 90 5b 5d 41 5c 41 5d 41 5e e9 61 f9 73 03 e8 0c 88 56 00 e9 [ 137.763349] RSP: 0018:ffff88804aa879a0 EFLAGS: 00010286 [ 137.763819] RAX: 00000000ffffffff RBX: ffff888048ac1b80 RCX: ffffffff815664c7 [ 137.764377] RDX: 0000000000000000 RSI: ffffffff815664d0 RDI: ffff888048ac1f7c [ 137.764982] RBP: ffff888048ac1b80 R08: 0000000000000000 R09: fffffbfff0ba6ff4 [ 137.765538] R10: 0000000000000000 R11: 0000000000000001 R12: ffff888048ac1b80 [ 137.766137] R13: 0000000000000001 R14: ffffffff85c0ce80 R15: ffff8880491e58e0 [ 137.766739] FS: 000055556d01b400(0000) GS:ffff8880e5442000(0000) knlGS:0000000000000000 [ 137.767366] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 137.767861] CR2: 00007fb48063d541 CR3: 000000000d52e000 CR4: 0000000000350ef0 [ 137.768418] Call Trace: [ 137.768747] [ 137.769360] __wait_on_freeing_inode+0x10f/0x350 [ 137.770045] ? __pfx___wait_on_freeing_inode+0x10/0x10 [ 137.772737] ? __pfx_var_wake_function+0x10/0x10 [ 137.773906] ? lock_is_held_type+0x9e/0x120 [ 137.774944] insert_inode_locked+0x25f/0x890 [ 137.776448] __ext4_new_inode+0x223d/0x4cd0 [ 137.778817] ? __pfx___ext4_new_inode+0x10/0x10 [ 137.779985] ? __pfx___dquot_initialize+0x10/0x10 [ 137.780729] ? __pfx_avc_has_perm+0x10/0x10 [ 137.782366] ext4_symlink+0x406/0xb40 [ 137.784462] ? __pfx_ext4_symlink+0x10/0x10 [ 137.785424] ? security_inode_permission+0x72/0xe0 [ 137.786972] vfs_symlink+0x44b/0x840 [ 137.788168] do_symlinkat+0x153/0x440 [ 137.789204] ? __pfx_do_symlinkat+0x10/0x10 [ 137.789901] ? strncpy_from_user+0x21b/0x2f0 [ 137.791676] __x64_sys_symlink+0x79/0xa0 [ 137.792347] do_syscall_64+0xbf/0x420 [ 137.793128] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.793660] RIP: 0033:0x7fb4805bd427 [ 137.794014] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 58 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 137.795468] RSP: 002b:00007ffda615fc58 EFLAGS: 00000202 ORIG_RAX: 0000000000000058 [ 137.796110] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fb4805bd427 [ 137.796712] RDX: 00007ffda615fd37 RSI: 00007fb480618019 RDI: 00007ffda615fd20 [ 137.797266] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007ffda615faf0 [ 137.797862] R10: 00007ffda615f9a7 R11: 0000000000000202 R12: 0000000000000001 [ 137.798413] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffda615fd20 [ 137.800883] [ 137.801076] irq event stamp: 471 [ 137.801338] hardirqs last enabled at (471): [] _raw_spin_unlock_irqrestore+0x2c/0x50 [ 137.802176] hardirqs last disabled at (470): [] _raw_spin_lock_irqsave+0x53/0x60 [ 137.802979] softirqs last enabled at (466): [] kernel_fpu_end+0x59/0x70 [ 137.803728] softirqs last disabled at (464): [] kernel_fpu_begin_mask+0x1bb/0x300 [ 137.804488] ---[ end trace 0000000000000000 ]--- [ 137.832078] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 137.832800] Bluetooth: hci3: Injecting HCI hardware error event 09:50:16 executing program 3: r0 = syz_io_uring_setup(0x6561, &(0x7f0000000400), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0x22, 0x0, 0x0) 09:50:16 executing program 0: syz_mount_image$nfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='system.posix_acl_access\x00', &(0x7f00000049c0)=ANY=[@ANYBLOB="02000000010000000000000004000000f340000010000600000b000020"], 0x24, 0x0) lchown(&(0x7f0000000200)='./file0\x00', 0xee00, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x0, 0x0) 09:50:16 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$bt_hci(r0, 0x0, 0x1, 0xfffffffffffffffe, &(0x7f0000000080)=0x42) 09:50:16 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) chroot(&(0x7f0000000040)='./file0\x00') r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f00000011c0)=""/4096, 0x1000) umount2(&(0x7f0000000140)='./file0\x00', 0x0) 09:50:16 executing program 3: r0 = syz_io_uring_setup(0x6561, &(0x7f0000000400), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0x22, 0x0, 0x0) 09:50:16 executing program 7: setregid(0x0, 0xee01) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) fchown(r0, 0x0, 0x0) 09:50:16 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000240)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "758107fc976803de3eccf5518ae7a2f42b770280beca5ace8c9c7fd1807a6057", "90381c8c8a761e95a67cb698602e9f4aef18298b5a00aa5ee959a9a4a5c9dcb350caacfcc0bde4cae62cc9d26094a21b", "6d2f4ce61c8f37417c79c16662324de0bd9c464f9b05816bde170ac9", {"efd8377fcd657a7e62d8a47f0c3b3d37", "e3b23b9a995a8e7dff48684a7ce0919a"}}}}}}}, 0x0) recvfrom(r0, 0x0, 0x94, 0x0, 0x0, 0x0) 09:50:16 executing program 6: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000001480)) pwritev2(r1, &(0x7f0000000700)=[{&(0x7f0000000240)="98f2083f3d05fc46c7ae46f601c70df2bd22c533e2f6e5502476b3334850c3a761dec7ac20c03e8593587314235def5ec02c58110e3b1a85d25b260a4aa6398feef9a5e4ad003adcacd998766b671d4fbb5c84c9513720847537e9904b6f13d784cf75", 0x63}, {&(0x7f00000003c0)}, {0x0}, {0x0}, {&(0x7f00000005c0)="784031c6e6ceb94cf927b67abc1e202e8d753af66e980ac0b2effac1e81ab28f745ea4894ebaddc5d1836332f1eed59587f317e6b1", 0x35}, {&(0x7f00000002c0)='j', 0x1}, {&(0x7f0000000640)="8e4c0171c8aa07fd4efe95d365409aa1f4fa7577d64be575dc8ca022e4909e70deb020c43b19dc412531a85f32c9507b616d8213e9981472787de6da815b676f58826c49483e0b16ebd6dc97", 0x4c}], 0x7, 0x0, 0xb750, 0x75576dce4adb44a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r0, &(0x7f0000000900)="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", 0x200) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x44000) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80800) r3 = pidfd_open(0xffffffffffffffff, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r3, 0x82307202, &(0x7f0000000340)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) sendfile(r0, r2, 0x0, 0xfdef) 09:50:16 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000001480)) pwritev2(r1, &(0x7f0000000700)=[{&(0x7f0000000240)="98f2083f3d05fc46c7ae46f601c70df2bd22c533e2f6e5502476b3334850c3a761dec7ac20c03e8593587314235def5ec02c58110e3b1a85d25b260a4aa6398feef9a5e4ad003adcacd998766b671d4fbb5c84c9513720847537e9904b6f13d784cf75", 0x63}, {&(0x7f00000003c0)}, {0x0}, {0x0}, {&(0x7f00000005c0)="784031c6e6ceb94cf927b67abc1e202e8d753af66e980ac0b2effac1e81ab28f745ea4894ebaddc5d1836332f1eed59587f317e6b1", 0x35}, {&(0x7f00000002c0)='j', 0x1}, {&(0x7f0000000640)="8e4c0171c8aa07fd4efe95d365409aa1f4fa7577d64be575dc8ca022e4909e70deb020c43b19dc412531a85f32c9507b616d8213e9981472787de6da815b676f58826c49483e0b16ebd6dc97", 0x4c}], 0x7, 0x0, 0xb750, 0x75576dce4adb44a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r0, &(0x7f0000000900)="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", 0x200) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x44000) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80800) r3 = pidfd_open(0xffffffffffffffff, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r3, 0x82307202, &(0x7f0000000340)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) sendfile(r0, r2, 0x0, 0xfdef) [ 138.185802] program syz-executor.5 is using a deprecated SCSI ioctl, please convert it to SG_IO 09:50:16 executing program 3: r0 = syz_io_uring_setup(0x6561, &(0x7f0000000400), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0x22, 0x0, 0x0) [ 138.223993] program syz-executor.6 is using a deprecated SCSI ioctl, please convert it to SG_IO 09:50:16 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000006c0)={0x41000100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 09:50:17 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x2c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x2c}}, 0x0) 09:50:17 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_aout(r0, 0x0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000000)) 09:50:17 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000240)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "758107fc976803de3eccf5518ae7a2f42b770280beca5ace8c9c7fd1807a6057", "90381c8c8a761e95a67cb698602e9f4aef18298b5a00aa5ee959a9a4a5c9dcb350caacfcc0bde4cae62cc9d26094a21b", "6d2f4ce61c8f37417c79c16662324de0bd9c464f9b05816bde170ac9", {"efd8377fcd657a7e62d8a47f0c3b3d37", "e3b23b9a995a8e7dff48684a7ce0919a"}}}}}}}, 0x0) recvfrom(r0, 0x0, 0x94, 0x0, 0x0, 0x0) 09:50:17 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 09:50:17 executing program 3: r0 = syz_io_uring_setup(0x6561, &(0x7f0000000400), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0x22, 0x0, 0x0) 09:50:17 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)={0x14, 0x12, 0xffffffffffffffff, 0x0, 0x0, "", [@generic='\n']}, 0x14}], 0x1}, 0x0) 09:50:17 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000001800ff2b64f70e00000000000a020000776c6109"], 0x1c}], 0x1}, 0x0) [ 138.529331] IPv6: Can't replace route, no match found 09:50:17 executing program 6: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000001480)) pwritev2(r1, &(0x7f0000000700)=[{&(0x7f0000000240)="98f2083f3d05fc46c7ae46f601c70df2bd22c533e2f6e5502476b3334850c3a761dec7ac20c03e8593587314235def5ec02c58110e3b1a85d25b260a4aa6398feef9a5e4ad003adcacd998766b671d4fbb5c84c9513720847537e9904b6f13d784cf75", 0x63}, {&(0x7f00000003c0)}, {0x0}, {0x0}, {&(0x7f00000005c0)="784031c6e6ceb94cf927b67abc1e202e8d753af66e980ac0b2effac1e81ab28f745ea4894ebaddc5d1836332f1eed59587f317e6b1", 0x35}, {&(0x7f00000002c0)='j', 0x1}, {&(0x7f0000000640)="8e4c0171c8aa07fd4efe95d365409aa1f4fa7577d64be575dc8ca022e4909e70deb020c43b19dc412531a85f32c9507b616d8213e9981472787de6da815b676f58826c49483e0b16ebd6dc97", 0x4c}], 0x7, 0x0, 0xb750, 0x75576dce4adb44a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r0, &(0x7f0000000900)="5ed0b2ff68d76fb346352b602a2a1295cbe01cb3f64fbed9e7f9bc9be0f300cb97f6a204cc586e45dfb949002f61f8fb969dd435dd0c37c5077e5b10cfeafd75205e215b167323a3b971b0ec98e6c3d4d825cae01271cb35cdd091e4872367f354e0dc81a7e4ac79775bc1dcaafe2f5079da79d1989f1ddce6722fc438a7217526cfe75d53471624d6f091e19a7fb699ea27efa9e0fd1914e7c35f297afd9b9b85ff0ce7a982f4fa0c172ea5f06479eec302f30e5df66273717e028f4ca7d4c5b6bc8a3c3c67f688195f22488a15d9e1f7e5fed3a6c2aba7bc308b0e2c5657f4538f4a3bf9b975bb887a901ab3c85261be3e331b741313e78b5ad63b7b1b378e9c79dc4a95b2b4d15cd1d1b808844378f882a72af1e5b0eefd356e0247246e60643204c3b46183dbe4e066c55cb1dcdaa7b70ef43ab2fa4d2b8c4c1a89cb0e325fd9716874d3856cf368efd1f92d21214e55e4de647c37c71887d11f74f9afe1616e3054ceae601e4b3555e243c1882ad42c7730caeb309e7714ad87c55e9fba308cfc4161e562abde3ac4f3d7e0a3584d4928100197f102307c05c0b4b4898b0591bc1433af443478979f28e6136ffb21aaeac2be5490475a08e96bb94fd9d9d3aa2f8a1e147a80ba9bfd04dac3f476ff128476c693ea71f7be47a508c98eddc479eb703d6f17cc5be2182f7c39b0a47eb23e0808b5d87dd2a9ce88eb48a601", 0x200) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x44000) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80800) r3 = pidfd_open(0xffffffffffffffff, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r3, 0x82307202, &(0x7f0000000340)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) sendfile(r0, r2, 0x0, 0xfdef) 09:50:17 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp\x00') pread64(r0, &(0x7f0000000080)=""/203, 0xcb, 0x7d) 09:50:17 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000002180)={0x0, 0x0, &(0x7f0000002140)={&(0x7f0000002080)={0x2c, 0x2, 0x2, 0x101, 0x0, 0x0, {0xa}, [@CTA_EXPECT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @loopback}}}]}]}, 0x2c}}, 0x0) 09:50:17 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='sched\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) pread64(r0, &(0x7f0000000080)=""/239, 0xef, 0x5) 09:50:17 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000001800ff2b64f70e00000000000a020000776c6109"], 0x1c}], 0x1}, 0x0) 09:50:17 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000001480)) pwritev2(r1, &(0x7f0000000700)=[{&(0x7f0000000240)="98f2083f3d05fc46c7ae46f601c70df2bd22c533e2f6e5502476b3334850c3a761dec7ac20c03e8593587314235def5ec02c58110e3b1a85d25b260a4aa6398feef9a5e4ad003adcacd998766b671d4fbb5c84c9513720847537e9904b6f13d784cf75", 0x63}, {&(0x7f00000003c0)}, {0x0}, {0x0}, {&(0x7f00000005c0)="784031c6e6ceb94cf927b67abc1e202e8d753af66e980ac0b2effac1e81ab28f745ea4894ebaddc5d1836332f1eed59587f317e6b1", 0x35}, {&(0x7f00000002c0)='j', 0x1}, {&(0x7f0000000640)="8e4c0171c8aa07fd4efe95d365409aa1f4fa7577d64be575dc8ca022e4909e70deb020c43b19dc412531a85f32c9507b616d8213e9981472787de6da815b676f58826c49483e0b16ebd6dc97", 0x4c}], 0x7, 0x0, 0xb750, 0x75576dce4adb44a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r0, &(0x7f0000000900)="5ed0b2ff68d76fb346352b602a2a1295cbe01cb3f64fbed9e7f9bc9be0f300cb97f6a204cc586e45dfb949002f61f8fb969dd435dd0c37c5077e5b10cfeafd75205e215b167323a3b971b0ec98e6c3d4d825cae01271cb35cdd091e4872367f354e0dc81a7e4ac79775bc1dcaafe2f5079da79d1989f1ddce6722fc438a7217526cfe75d53471624d6f091e19a7fb699ea27efa9e0fd1914e7c35f297afd9b9b85ff0ce7a982f4fa0c172ea5f06479eec302f30e5df66273717e028f4ca7d4c5b6bc8a3c3c67f688195f22488a15d9e1f7e5fed3a6c2aba7bc308b0e2c5657f4538f4a3bf9b975bb887a901ab3c85261be3e331b741313e78b5ad63b7b1b378e9c79dc4a95b2b4d15cd1d1b808844378f882a72af1e5b0eefd356e0247246e60643204c3b46183dbe4e066c55cb1dcdaa7b70ef43ab2fa4d2b8c4c1a89cb0e325fd9716874d3856cf368efd1f92d21214e55e4de647c37c71887d11f74f9afe1616e3054ceae601e4b3555e243c1882ad42c7730caeb309e7714ad87c55e9fba308cfc4161e562abde3ac4f3d7e0a3584d4928100197f102307c05c0b4b4898b0591bc1433af443478979f28e6136ffb21aaeac2be5490475a08e96bb94fd9d9d3aa2f8a1e147a80ba9bfd04dac3f476ff128476c693ea71f7be47a508c98eddc479eb703d6f17cc5be2182f7c39b0a47eb23e0808b5d87dd2a9ce88eb48a601", 0x200) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x44000) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80800) r3 = pidfd_open(0xffffffffffffffff, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r3, 0x82307202, &(0x7f0000000340)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) sendfile(r0, r2, 0x0, 0xfdef) 09:50:17 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x4, 0x0, 0x0, 0x1ff}}) [ 138.821874] program syz-executor.5 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 138.823530] audit: type=1326 audit(1768297817.525:11): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4515 comm="syz-executor.4" exe="/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3bdd30bb19 code=0x0 [ 138.843085] IPv6: Can't replace route, no match found [ 138.863808] program syz-executor.6 is using a deprecated SCSI ioctl, please convert it to SG_IO 09:50:17 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000000c0)='./file1\x00', 0x0) open_by_handle_at(r0, &(0x7f0000000140)=@reiserfs_2={0x8, 0x2, {0xd79}}, 0x0) 09:50:17 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b9010000000001b90000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010a00)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000010d00)="2200170000000000001700080000000008007809140b2a3a080200000100000101002200170000000000001700080000000008007809140b2a3a080200000100000101012c00190000000000001964000000000000647809140b2a3a08000000010000010a46494c452e434f4c3b31002600180000000000001800080000000008007809140b2a3a08020000010000010546494c4530", 0x96, 0xb800}, {&(0x7f0000010f00)='\"', 0x1, 0xc000}], 0x0, &(0x7f0000000600)=ANY=[]) openat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140), 0x18) [ 138.891467] loop2: detected capacity change from 0 to 192 [ 139.831070] Bluetooth: hci3: hardware error 0x00 [ 141.430766] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 141.432337] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 141.435331] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 141.439075] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 141.442190] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 141.871637] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 143.471790] Bluetooth: hci2: command tx timeout [ 145.518597] Bluetooth: hci2: command tx timeout [ 147.567622] Bluetooth: hci2: command tx timeout VM DIAGNOSIS: 09:50:16 Registers: info registers vcpu 0 RAX=000000000001662c RBX=ffff88806cf3d340 RCX=ffffc90003ff3000 RDX=0000000000040000 RSI=ffffffff8169db94 RDI=0000000000000005 RBP=0000000000000003 RSP=ffff88804aa2f5a0 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=ffffed100d9e7a69 R13=ffff88806cf3d348 R14=0000000000000001 R15=dffffc0000000000 RIP=ffffffff8169db96 RFL=00000216 [----AP-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f6d02cfd700 00000000 00000000 GS =0000 ffff8880e5342000 00000000 00000000 LDT=0000 fffffe2800000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000020000340 CR3=00000000203bf000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00007f6d0586e7c000007f6d0586e7c8 XMM02=00007f6d0586e7e000007f6d0586e7c0 XMM03=00007f6d0586e7c800007f6d0586e7c0 XMM04=ffffffff0000ff00000000ff00000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000061 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff82977f45 RDI=ffffffff889c1a00 RBP=ffffffff889c19c0 RSP=ffff88804aa87488 R8 =0000000000000000 R9 =ffffed1001d43046 R10=0000000000000061 R11=666666203a322320 R12=0000000000000061 R13=0000000000000010 R14=ffffffff889c19c0 R15=ffffffff82977f30 RIP=ffffffff82977f9d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 000055556d01b400 00000000 00000000 GS =0000 ffff8880e5442000 00000000 00000000 LDT=0000 fffffe5800000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fb48063d541 CR3=000000000d52e000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000a60ce07b00000000cec3662e XMM01=000000000000000003515b82db34ca11 XMM02=0000000000000000333bebdfd0a6a21d XMM03=00000000000000000000000000000000 XMM04=000000ff0000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000