Warning: Permanently added '[localhost]:14607' (ECDSA) to the list of known hosts. 2026/01/13 09:56:18 fuzzer started 2026/01/13 09:56:18 dialing manager at localhost:38155 syzkaller login: [ 50.619633] cgroup: Unknown subsys name 'net' [ 50.686863] cgroup: Unknown subsys name 'cpuset' [ 50.699778] cgroup: Unknown subsys name 'rlimit' 2026/01/13 09:56:28 syscalls: 2214 2026/01/13 09:56:28 code coverage: enabled 2026/01/13 09:56:28 comparison tracing: enabled 2026/01/13 09:56:28 extra coverage: enabled 2026/01/13 09:56:28 setuid sandbox: enabled 2026/01/13 09:56:28 namespace sandbox: enabled 2026/01/13 09:56:28 Android sandbox: enabled 2026/01/13 09:56:28 fault injection: enabled 2026/01/13 09:56:28 leak checking: enabled 2026/01/13 09:56:28 net packet injection: enabled 2026/01/13 09:56:28 net device setup: enabled 2026/01/13 09:56:28 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2026/01/13 09:56:28 devlink PCI setup: PCI device 0000:00:10.0 is not available 2026/01/13 09:56:28 USB emulation: enabled 2026/01/13 09:56:28 hci packet injection: enabled 2026/01/13 09:56:28 wifi device emulation: enabled 2026/01/13 09:56:28 802.15.4 emulation: enabled 2026/01/13 09:56:28 fetching corpus: 0, signal 0/2000 (executing program) 2026/01/13 09:56:28 fetching corpus: 38, signal 21927/25549 (executing program) 2026/01/13 09:56:28 fetching corpus: 86, signal 34603/39728 (executing program) 2026/01/13 09:56:28 fetching corpus: 135, signal 43496/50023 (executing program) 2026/01/13 09:56:28 fetching corpus: 185, signal 52125/59948 (executing program) 2026/01/13 09:56:29 fetching corpus: 235, signal 59377/68393 (executing program) 2026/01/13 09:56:29 fetching corpus: 285, signal 65405/75528 (executing program) 2026/01/13 09:56:29 fetching corpus: 335, signal 68514/79926 (executing program) 2026/01/13 09:56:29 fetching corpus: 385, signal 73037/85564 (executing program) 2026/01/13 09:56:29 fetching corpus: 435, signal 75540/89256 (executing program) 2026/01/13 09:56:29 fetching corpus: 485, signal 79188/93973 (executing program) 2026/01/13 09:56:29 fetching corpus: 535, signal 82404/98228 (executing program) 2026/01/13 09:56:29 fetching corpus: 585, signal 85863/102665 (executing program) 2026/01/13 09:56:29 fetching corpus: 635, signal 90898/108441 (executing program) 2026/01/13 09:56:30 fetching corpus: 685, signal 93694/112100 (executing program) 2026/01/13 09:56:30 fetching corpus: 735, signal 98388/117394 (executing program) 2026/01/13 09:56:30 fetching corpus: 785, signal 100289/120219 (executing program) 2026/01/13 09:56:30 fetching corpus: 835, signal 102030/122894 (executing program) 2026/01/13 09:56:30 fetching corpus: 885, signal 103613/125393 (executing program) 2026/01/13 09:56:30 fetching corpus: 935, signal 106300/128811 (executing program) 2026/01/13 09:56:30 fetching corpus: 985, signal 107785/131150 (executing program) 2026/01/13 09:56:30 fetching corpus: 1035, signal 110104/134164 (executing program) 2026/01/13 09:56:30 fetching corpus: 1085, signal 111033/136018 (executing program) 2026/01/13 09:56:31 fetching corpus: 1135, signal 113175/138855 (executing program) 2026/01/13 09:56:31 fetching corpus: 1185, signal 114374/140867 (executing program) 2026/01/13 09:56:31 fetching corpus: 1235, signal 116560/143586 (executing program) 2026/01/13 09:56:31 fetching corpus: 1285, signal 117700/145517 (executing program) 2026/01/13 09:56:31 fetching corpus: 1335, signal 118954/147474 (executing program) 2026/01/13 09:56:31 fetching corpus: 1385, signal 120953/150020 (executing program) 2026/01/13 09:56:31 fetching corpus: 1435, signal 122815/152396 (executing program) 2026/01/13 09:56:31 fetching corpus: 1485, signal 124143/154332 (executing program) 2026/01/13 09:56:32 fetching corpus: 1535, signal 125623/156422 (executing program) 2026/01/13 09:56:32 fetching corpus: 1585, signal 126367/157960 (executing program) 2026/01/13 09:56:32 fetching corpus: 1634, signal 127698/159874 (executing program) 2026/01/13 09:56:32 fetching corpus: 1684, signal 128694/161588 (executing program) 2026/01/13 09:56:32 fetching corpus: 1734, signal 130087/163513 (executing program) 2026/01/13 09:56:32 fetching corpus: 1784, signal 131139/165179 (executing program) 2026/01/13 09:56:32 fetching corpus: 1834, signal 132308/166913 (executing program) 2026/01/13 09:56:32 fetching corpus: 1884, signal 133444/168616 (executing program) 2026/01/13 09:56:33 fetching corpus: 1934, signal 134722/170381 (executing program) 2026/01/13 09:56:33 fetching corpus: 1984, signal 135446/171789 (executing program) 2026/01/13 09:56:33 fetching corpus: 2034, signal 136535/173361 (executing program) 2026/01/13 09:56:33 fetching corpus: 2084, signal 137428/174810 (executing program) 2026/01/13 09:56:33 fetching corpus: 2134, signal 138363/176315 (executing program) 2026/01/13 09:56:33 fetching corpus: 2184, signal 139594/178002 (executing program) 2026/01/13 09:56:33 fetching corpus: 2234, signal 140521/179409 (executing program) 2026/01/13 09:56:33 fetching corpus: 2283, signal 141140/180615 (executing program) 2026/01/13 09:56:34 fetching corpus: 2333, signal 142115/182005 (executing program) 2026/01/13 09:56:34 fetching corpus: 2383, signal 142580/183087 (executing program) 2026/01/13 09:56:34 fetching corpus: 2432, signal 143446/184454 (executing program) 2026/01/13 09:56:34 fetching corpus: 2482, signal 144803/186079 (executing program) 2026/01/13 09:56:34 fetching corpus: 2532, signal 145492/187268 (executing program) 2026/01/13 09:56:34 fetching corpus: 2582, signal 146724/188865 (executing program) 2026/01/13 09:56:34 fetching corpus: 2632, signal 147368/190024 (executing program) 2026/01/13 09:56:34 fetching corpus: 2682, signal 148212/191325 (executing program) 2026/01/13 09:56:35 fetching corpus: 2732, signal 149444/192788 (executing program) 2026/01/13 09:56:35 fetching corpus: 2782, signal 150199/193961 (executing program) 2026/01/13 09:56:35 fetching corpus: 2832, signal 150802/195041 (executing program) 2026/01/13 09:56:35 fetching corpus: 2882, signal 151782/196288 (executing program) 2026/01/13 09:56:35 fetching corpus: 2932, signal 152574/197474 (executing program) 2026/01/13 09:56:35 fetching corpus: 2982, signal 153126/198501 (executing program) 2026/01/13 09:56:35 fetching corpus: 3032, signal 153821/199617 (executing program) 2026/01/13 09:56:35 fetching corpus: 3082, signal 155162/201000 (executing program) 2026/01/13 09:56:35 fetching corpus: 3132, signal 156074/202220 (executing program) 2026/01/13 09:56:36 fetching corpus: 3182, signal 157614/203638 (executing program) 2026/01/13 09:56:36 fetching corpus: 3232, signal 158525/204740 (executing program) 2026/01/13 09:56:36 fetching corpus: 3282, signal 159353/205839 (executing program) 2026/01/13 09:56:36 fetching corpus: 3332, signal 159912/206807 (executing program) 2026/01/13 09:56:36 fetching corpus: 3382, signal 160429/207729 (executing program) 2026/01/13 09:56:36 fetching corpus: 3432, signal 161251/208726 (executing program) 2026/01/13 09:56:36 fetching corpus: 3482, signal 161699/209625 (executing program) 2026/01/13 09:56:36 fetching corpus: 3532, signal 162087/210453 (executing program) 2026/01/13 09:56:37 fetching corpus: 3582, signal 162688/211369 (executing program) 2026/01/13 09:56:37 fetching corpus: 3632, signal 163484/212312 (executing program) 2026/01/13 09:56:37 fetching corpus: 3682, signal 164289/213305 (executing program) 2026/01/13 09:56:37 fetching corpus: 3732, signal 165037/214236 (executing program) 2026/01/13 09:56:37 fetching corpus: 3782, signal 165759/215140 (executing program) 2026/01/13 09:56:37 fetching corpus: 3832, signal 166703/216080 (executing program) 2026/01/13 09:56:37 fetching corpus: 3882, signal 167301/216936 (executing program) 2026/01/13 09:56:37 fetching corpus: 3932, signal 167981/217794 (executing program) 2026/01/13 09:56:37 fetching corpus: 3982, signal 168856/218680 (executing program) 2026/01/13 09:56:38 fetching corpus: 4032, signal 169553/219510 (executing program) 2026/01/13 09:56:38 fetching corpus: 4082, signal 170094/220312 (executing program) 2026/01/13 09:56:38 fetching corpus: 4132, signal 170570/221077 (executing program) 2026/01/13 09:56:38 fetching corpus: 4182, signal 171170/221860 (executing program) 2026/01/13 09:56:38 fetching corpus: 4232, signal 171715/222602 (executing program) 2026/01/13 09:56:38 fetching corpus: 4282, signal 172291/223381 (executing program) 2026/01/13 09:56:38 fetching corpus: 4332, signal 173122/224221 (executing program) 2026/01/13 09:56:38 fetching corpus: 4382, signal 173544/224907 (executing program) 2026/01/13 09:56:39 fetching corpus: 4432, signal 174138/225592 (executing program) 2026/01/13 09:56:39 fetching corpus: 4482, signal 174611/226326 (executing program) 2026/01/13 09:56:39 fetching corpus: 4532, signal 174934/226938 (executing program) 2026/01/13 09:56:39 fetching corpus: 4582, signal 175536/227652 (executing program) 2026/01/13 09:56:39 fetching corpus: 4632, signal 175931/228320 (executing program) 2026/01/13 09:56:39 fetching corpus: 4682, signal 176477/228947 (executing program) 2026/01/13 09:56:39 fetching corpus: 4732, signal 177131/229640 (executing program) 2026/01/13 09:56:39 fetching corpus: 4782, signal 177656/230283 (executing program) 2026/01/13 09:56:39 fetching corpus: 4832, signal 178081/230924 (executing program) 2026/01/13 09:56:40 fetching corpus: 4882, signal 178565/231547 (executing program) 2026/01/13 09:56:40 fetching corpus: 4931, signal 179012/232208 (executing program) 2026/01/13 09:56:40 fetching corpus: 4981, signal 179414/232807 (executing program) 2026/01/13 09:56:40 fetching corpus: 5031, signal 179686/233414 (executing program) 2026/01/13 09:56:40 fetching corpus: 5081, signal 180289/234058 (executing program) 2026/01/13 09:56:40 fetching corpus: 5131, signal 180862/234692 (executing program) 2026/01/13 09:56:40 fetching corpus: 5180, signal 181357/235298 (executing program) 2026/01/13 09:56:40 fetching corpus: 5230, signal 181892/235858 (executing program) 2026/01/13 09:56:41 fetching corpus: 5280, signal 182310/236444 (executing program) 2026/01/13 09:56:41 fetching corpus: 5330, signal 183045/237037 (executing program) 2026/01/13 09:56:41 fetching corpus: 5380, signal 183433/237593 (executing program) 2026/01/13 09:56:41 fetching corpus: 5430, signal 183792/238138 (executing program) 2026/01/13 09:56:41 fetching corpus: 5480, signal 184168/238669 (executing program) 2026/01/13 09:56:41 fetching corpus: 5530, signal 184482/239156 (executing program) 2026/01/13 09:56:41 fetching corpus: 5580, signal 184904/239646 (executing program) 2026/01/13 09:56:41 fetching corpus: 5630, signal 185314/240110 (executing program) 2026/01/13 09:56:41 fetching corpus: 5680, signal 185784/240628 (executing program) 2026/01/13 09:56:42 fetching corpus: 5730, signal 186148/241141 (executing program) 2026/01/13 09:56:42 fetching corpus: 5780, signal 186511/241612 (executing program) 2026/01/13 09:56:42 fetching corpus: 5830, signal 186959/242117 (executing program) 2026/01/13 09:56:42 fetching corpus: 5880, signal 187361/242633 (executing program) 2026/01/13 09:56:42 fetching corpus: 5930, signal 187875/243094 (executing program) 2026/01/13 09:56:42 fetching corpus: 5980, signal 188239/243554 (executing program) 2026/01/13 09:56:42 fetching corpus: 6030, signal 189179/243558 (executing program) 2026/01/13 09:56:42 fetching corpus: 6080, signal 189466/243558 (executing program) 2026/01/13 09:56:42 fetching corpus: 6130, signal 190258/243558 (executing program) 2026/01/13 09:56:43 fetching corpus: 6180, signal 190630/243561 (executing program) 2026/01/13 09:56:43 fetching corpus: 6230, signal 191096/243563 (executing program) 2026/01/13 09:56:43 fetching corpus: 6280, signal 191368/243563 (executing program) 2026/01/13 09:56:43 fetching corpus: 6330, signal 191741/243564 (executing program) 2026/01/13 09:56:43 fetching corpus: 6380, signal 192026/243564 (executing program) 2026/01/13 09:56:43 fetching corpus: 6430, signal 192306/243564 (executing program) 2026/01/13 09:56:43 fetching corpus: 6480, signal 192933/243584 (executing program) 2026/01/13 09:56:43 fetching corpus: 6530, signal 193348/243584 (executing program) 2026/01/13 09:56:43 fetching corpus: 6579, signal 193828/243584 (executing program) 2026/01/13 09:56:44 fetching corpus: 6628, signal 194169/243597 (executing program) 2026/01/13 09:56:44 fetching corpus: 6678, signal 194796/243597 (executing program) 2026/01/13 09:56:44 fetching corpus: 6728, signal 195122/243597 (executing program) 2026/01/13 09:56:44 fetching corpus: 6778, signal 195615/243597 (executing program) 2026/01/13 09:56:44 fetching corpus: 6828, signal 195982/243600 (executing program) 2026/01/13 09:56:44 fetching corpus: 6878, signal 196386/243605 (executing program) 2026/01/13 09:56:44 fetching corpus: 6928, signal 196891/243610 (executing program) 2026/01/13 09:56:44 fetching corpus: 6978, signal 197251/243610 (executing program) 2026/01/13 09:56:45 fetching corpus: 7028, signal 197575/243620 (executing program) 2026/01/13 09:56:45 fetching corpus: 7078, signal 197910/243621 (executing program) 2026/01/13 09:56:45 fetching corpus: 7128, signal 198401/243624 (executing program) 2026/01/13 09:56:45 fetching corpus: 7178, signal 198728/243624 (executing program) 2026/01/13 09:56:45 fetching corpus: 7228, signal 199227/243624 (executing program) 2026/01/13 09:56:45 fetching corpus: 7278, signal 199559/243624 (executing program) 2026/01/13 09:56:45 fetching corpus: 7328, signal 200018/243628 (executing program) 2026/01/13 09:56:45 fetching corpus: 7378, signal 200269/243630 (executing program) 2026/01/13 09:56:45 fetching corpus: 7428, signal 200535/243633 (executing program) 2026/01/13 09:56:46 fetching corpus: 7478, signal 201051/243636 (executing program) 2026/01/13 09:56:46 fetching corpus: 7528, signal 201436/243636 (executing program) 2026/01/13 09:56:46 fetching corpus: 7578, signal 201797/243636 (executing program) 2026/01/13 09:56:46 fetching corpus: 7627, signal 202116/243636 (executing program) 2026/01/13 09:56:46 fetching corpus: 7677, signal 202402/243637 (executing program) 2026/01/13 09:56:46 fetching corpus: 7727, signal 202638/243637 (executing program) 2026/01/13 09:56:46 fetching corpus: 7777, signal 202876/243637 (executing program) 2026/01/13 09:56:46 fetching corpus: 7827, signal 203204/243638 (executing program) 2026/01/13 09:56:46 fetching corpus: 7877, signal 203588/243638 (executing program) 2026/01/13 09:56:46 fetching corpus: 7927, signal 203925/243640 (executing program) 2026/01/13 09:56:47 fetching corpus: 7977, signal 204341/243643 (executing program) 2026/01/13 09:56:47 fetching corpus: 8026, signal 204702/243643 (executing program) 2026/01/13 09:56:47 fetching corpus: 8076, signal 205037/243645 (executing program) 2026/01/13 09:56:47 fetching corpus: 8126, signal 205598/243646 (executing program) 2026/01/13 09:56:47 fetching corpus: 8176, signal 205989/243646 (executing program) 2026/01/13 09:56:47 fetching corpus: 8226, signal 206433/243646 (executing program) 2026/01/13 09:56:47 fetching corpus: 8276, signal 206757/243646 (executing program) 2026/01/13 09:56:47 fetching corpus: 8326, signal 207081/243646 (executing program) 2026/01/13 09:56:47 fetching corpus: 8376, signal 207466/243648 (executing program) 2026/01/13 09:56:48 fetching corpus: 8426, signal 207779/243648 (executing program) 2026/01/13 09:56:48 fetching corpus: 8476, signal 208173/243650 (executing program) 2026/01/13 09:56:48 fetching corpus: 8526, signal 208641/243650 (executing program) 2026/01/13 09:56:48 fetching corpus: 8576, signal 208895/243650 (executing program) 2026/01/13 09:56:48 fetching corpus: 8625, signal 209206/243666 (executing program) 2026/01/13 09:56:48 fetching corpus: 8675, signal 209468/243666 (executing program) 2026/01/13 09:56:48 fetching corpus: 8725, signal 209785/243666 (executing program) 2026/01/13 09:56:48 fetching corpus: 8775, signal 210077/243672 (executing program) 2026/01/13 09:56:48 fetching corpus: 8825, signal 210428/243672 (executing program) 2026/01/13 09:56:49 fetching corpus: 8875, signal 210838/243672 (executing program) 2026/01/13 09:56:49 fetching corpus: 8925, signal 211107/243672 (executing program) 2026/01/13 09:56:49 fetching corpus: 8975, signal 211594/243672 (executing program) 2026/01/13 09:56:49 fetching corpus: 9025, signal 211906/243674 (executing program) 2026/01/13 09:56:49 fetching corpus: 9075, signal 212322/243674 (executing program) 2026/01/13 09:56:49 fetching corpus: 9125, signal 212622/243674 (executing program) 2026/01/13 09:56:49 fetching corpus: 9175, signal 212977/243686 (executing program) 2026/01/13 09:56:49 fetching corpus: 9225, signal 213302/243687 (executing program) 2026/01/13 09:56:49 fetching corpus: 9275, signal 214526/243689 (executing program) 2026/01/13 09:56:49 fetching corpus: 9325, signal 214750/243689 (executing program) 2026/01/13 09:56:50 fetching corpus: 9375, signal 215112/243689 (executing program) 2026/01/13 09:56:50 fetching corpus: 9425, signal 215371/243693 (executing program) 2026/01/13 09:56:50 fetching corpus: 9475, signal 215580/243693 (executing program) 2026/01/13 09:56:50 fetching corpus: 9525, signal 215887/243694 (executing program) 2026/01/13 09:56:50 fetching corpus: 9575, signal 216207/243694 (executing program) 2026/01/13 09:56:50 fetching corpus: 9625, signal 216574/243694 (executing program) 2026/01/13 09:56:50 fetching corpus: 9675, signal 216874/243695 (executing program) 2026/01/13 09:56:50 fetching corpus: 9725, signal 217204/243695 (executing program) 2026/01/13 09:56:51 fetching corpus: 9775, signal 217510/243695 (executing program) 2026/01/13 09:56:51 fetching corpus: 9825, signal 217785/243695 (executing program) 2026/01/13 09:56:51 fetching corpus: 9875, signal 218026/243695 (executing program) 2026/01/13 09:56:51 fetching corpus: 9925, signal 218262/243695 (executing program) 2026/01/13 09:56:51 fetching corpus: 9975, signal 218519/243696 (executing program) 2026/01/13 09:56:51 fetching corpus: 10024, signal 218810/243696 (executing program) 2026/01/13 09:56:51 fetching corpus: 10074, signal 219028/243696 (executing program) 2026/01/13 09:56:51 fetching corpus: 10124, signal 219239/243696 (executing program) 2026/01/13 09:56:51 fetching corpus: 10174, signal 219473/243696 (executing program) 2026/01/13 09:56:51 fetching corpus: 10224, signal 219786/243697 (executing program) 2026/01/13 09:56:52 fetching corpus: 10274, signal 220053/243697 (executing program) 2026/01/13 09:56:52 fetching corpus: 10324, signal 220296/243697 (executing program) 2026/01/13 09:56:52 fetching corpus: 10374, signal 220557/243697 (executing program) 2026/01/13 09:56:52 fetching corpus: 10424, signal 220914/243698 (executing program) 2026/01/13 09:56:52 fetching corpus: 10474, signal 221218/243698 (executing program) 2026/01/13 09:56:52 fetching corpus: 10524, signal 221425/243698 (executing program) 2026/01/13 09:56:52 fetching corpus: 10574, signal 221929/243698 (executing program) 2026/01/13 09:56:52 fetching corpus: 10624, signal 222183/243699 (executing program) 2026/01/13 09:56:53 fetching corpus: 10674, signal 222417/243699 (executing program) 2026/01/13 09:56:53 fetching corpus: 10724, signal 222626/243699 (executing program) 2026/01/13 09:56:53 fetching corpus: 10774, signal 222883/243699 (executing program) 2026/01/13 09:56:53 fetching corpus: 10824, signal 223088/243699 (executing program) 2026/01/13 09:56:53 fetching corpus: 10874, signal 223326/243699 (executing program) 2026/01/13 09:56:53 fetching corpus: 10924, signal 223538/243699 (executing program) 2026/01/13 09:56:53 fetching corpus: 10974, signal 223761/243701 (executing program) 2026/01/13 09:56:53 fetching corpus: 11024, signal 224039/243701 (executing program) 2026/01/13 09:56:53 fetching corpus: 11074, signal 224221/243701 (executing program) 2026/01/13 09:56:54 fetching corpus: 11124, signal 224479/243701 (executing program) 2026/01/13 09:56:54 fetching corpus: 11174, signal 224703/243701 (executing program) 2026/01/13 09:56:54 fetching corpus: 11224, signal 225073/243702 (executing program) 2026/01/13 09:56:54 fetching corpus: 11274, signal 225355/243702 (executing program) 2026/01/13 09:56:54 fetching corpus: 11324, signal 225573/243702 (executing program) 2026/01/13 09:56:54 fetching corpus: 11374, signal 225811/243702 (executing program) 2026/01/13 09:56:54 fetching corpus: 11422, signal 225996/243702 (executing program) 2026/01/13 09:56:54 fetching corpus: 11471, signal 226241/243702 (executing program) 2026/01/13 09:56:55 fetching corpus: 11521, signal 226408/243704 (executing program) 2026/01/13 09:56:55 fetching corpus: 11571, signal 226728/243704 (executing program) 2026/01/13 09:56:55 fetching corpus: 11621, signal 226968/243704 (executing program) 2026/01/13 09:56:55 fetching corpus: 11671, signal 227310/243704 (executing program) 2026/01/13 09:56:55 fetching corpus: 11721, signal 227508/243704 (executing program) 2026/01/13 09:56:55 fetching corpus: 11771, signal 227720/243704 (executing program) 2026/01/13 09:56:55 fetching corpus: 11819, signal 227931/243704 (executing program) 2026/01/13 09:56:55 fetching corpus: 11869, signal 228145/243705 (executing program) 2026/01/13 09:56:55 fetching corpus: 11919, signal 228822/243705 (executing program) 2026/01/13 09:56:56 fetching corpus: 11969, signal 228980/243705 (executing program) 2026/01/13 09:56:56 fetching corpus: 12019, signal 229247/243705 (executing program) 2026/01/13 09:56:56 fetching corpus: 12069, signal 229431/243705 (executing program) 2026/01/13 09:56:56 fetching corpus: 12119, signal 229633/243705 (executing program) 2026/01/13 09:56:56 fetching corpus: 12169, signal 229920/243705 (executing program) 2026/01/13 09:56:56 fetching corpus: 12219, signal 230115/243706 (executing program) 2026/01/13 09:56:56 fetching corpus: 12269, signal 230325/243708 (executing program) 2026/01/13 09:56:56 fetching corpus: 12319, signal 230622/243709 (executing program) 2026/01/13 09:56:56 fetching corpus: 12369, signal 230849/243709 (executing program) 2026/01/13 09:56:56 fetching corpus: 12419, signal 231136/243709 (executing program) 2026/01/13 09:56:57 fetching corpus: 12469, signal 231383/243709 (executing program) 2026/01/13 09:56:57 fetching corpus: 12519, signal 231625/243709 (executing program) 2026/01/13 09:56:57 fetching corpus: 12569, signal 231878/243711 (executing program) 2026/01/13 09:56:57 fetching corpus: 12619, signal 232032/243711 (executing program) 2026/01/13 09:56:57 fetching corpus: 12669, signal 232268/243711 (executing program) 2026/01/13 09:56:57 fetching corpus: 12719, signal 232440/243712 (executing program) 2026/01/13 09:56:57 fetching corpus: 12769, signal 232655/243712 (executing program) 2026/01/13 09:56:57 fetching corpus: 12819, signal 232791/243712 (executing program) 2026/01/13 09:56:57 fetching corpus: 12868, signal 232963/243712 (executing program) 2026/01/13 09:56:57 fetching corpus: 12918, signal 233181/243712 (executing program) 2026/01/13 09:56:58 fetching corpus: 12967, signal 233456/243712 (executing program) 2026/01/13 09:56:58 fetching corpus: 13016, signal 233623/243712 (executing program) 2026/01/13 09:56:58 fetching corpus: 13066, signal 233824/243712 (executing program) 2026/01/13 09:56:58 fetching corpus: 13116, signal 234080/243712 (executing program) 2026/01/13 09:56:58 fetching corpus: 13166, signal 234375/243712 (executing program) 2026/01/13 09:56:58 fetching corpus: 13216, signal 234650/243717 (executing program) 2026/01/13 09:56:58 fetching corpus: 13266, signal 234794/243719 (executing program) 2026/01/13 09:56:58 fetching corpus: 13316, signal 235026/243719 (executing program) 2026/01/13 09:56:58 fetching corpus: 13366, signal 235235/243719 (executing program) 2026/01/13 09:56:58 fetching corpus: 13416, signal 235487/243719 (executing program) 2026/01/13 09:56:59 fetching corpus: 13466, signal 235688/243720 (executing program) 2026/01/13 09:56:59 fetching corpus: 13516, signal 235940/243720 (executing program) 2026/01/13 09:56:59 fetching corpus: 13566, signal 236160/243720 (executing program) 2026/01/13 09:56:59 fetching corpus: 13616, signal 236360/243720 (executing program) 2026/01/13 09:56:59 fetching corpus: 13666, signal 236598/243720 (executing program) 2026/01/13 09:56:59 fetching corpus: 13716, signal 236779/243720 (executing program) 2026/01/13 09:56:59 fetching corpus: 13766, signal 236962/243720 (executing program) 2026/01/13 09:56:59 fetching corpus: 13816, signal 237141/243725 (executing program) 2026/01/13 09:56:59 fetching corpus: 13866, signal 237310/243725 (executing program) 2026/01/13 09:57:00 fetching corpus: 13916, signal 237465/243725 (executing program) 2026/01/13 09:57:00 fetching corpus: 13966, signal 237646/243725 (executing program) 2026/01/13 09:57:00 fetching corpus: 14016, signal 237819/243727 (executing program) 2026/01/13 09:57:00 fetching corpus: 14066, signal 238045/243727 (executing program) 2026/01/13 09:57:00 fetching corpus: 14116, signal 238220/243727 (executing program) 2026/01/13 09:57:00 fetching corpus: 14165, signal 238414/243727 (executing program) 2026/01/13 09:57:00 fetching corpus: 14215, signal 238578/243727 (executing program) 2026/01/13 09:57:00 fetching corpus: 14265, signal 238843/243727 (executing program) 2026/01/13 09:57:00 fetching corpus: 14315, signal 239166/243727 (executing program) 2026/01/13 09:57:00 fetching corpus: 14365, signal 239311/243740 (executing program) 2026/01/13 09:57:01 fetching corpus: 14415, signal 239530/243740 (executing program) 2026/01/13 09:57:01 fetching corpus: 14465, signal 239769/243740 (executing program) 2026/01/13 09:57:01 fetching corpus: 14515, signal 239972/243745 (executing program) 2026/01/13 09:57:01 fetching corpus: 14565, signal 240092/243745 (executing program) 2026/01/13 09:57:01 fetching corpus: 14615, signal 240261/243745 (executing program) 2026/01/13 09:57:01 fetching corpus: 14665, signal 240444/243750 (executing program) 2026/01/13 09:57:01 fetching corpus: 14715, signal 240618/243750 (executing program) 2026/01/13 09:57:01 fetching corpus: 14765, signal 240772/243750 (executing program) 2026/01/13 09:57:01 fetching corpus: 14815, signal 240912/243750 (executing program) 2026/01/13 09:57:01 fetching corpus: 14864, signal 241097/243750 (executing program) 2026/01/13 09:57:02 fetching corpus: 14913, signal 241249/243750 (executing program) 2026/01/13 09:57:02 fetching corpus: 14963, signal 241443/243750 (executing program) 2026/01/13 09:57:02 fetching corpus: 15013, signal 241601/243751 (executing program) 2026/01/13 09:57:02 fetching corpus: 15063, signal 241801/243751 (executing program) 2026/01/13 09:57:02 fetching corpus: 15097, signal 241972/243751 (executing program) 2026/01/13 09:57:02 fetching corpus: 15097, signal 241972/243751 (executing program) 2026/01/13 09:57:04 starting 8 fuzzer processes 09:57:04 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000480)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:57:04 executing program 1: r0 = fsopen(&(0x7f0000000040)='9p\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='posixacl\x00', &(0x7f0000000200)='\x00', 0x0) 09:57:04 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) 09:57:04 executing program 3: set_mempolicy(0x6, &(0x7f0000000040)=0x7, 0x5db) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x104c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(0xffffffffffffffff, 0x40049421, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6}]}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 09:57:04 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$netlink(r0, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="280000001e000109000104000000000007"], 0x28}], 0x1}, 0x0) [ 97.044009] audit: type=1400 audit(1768298224.947:7): avc: denied { execmem } for pid=272 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 09:57:05 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) shutdown(r0, 0x0) accept$unix(r0, 0x0, 0x0) 09:57:05 executing program 6: syz_mount_image$tmpfs(&(0x7f0000002480), &(0x7f00000024c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002600)={[{@mpol={'mpol', 0x3d, {'prefer', '', @void}}}, {@huge_within_size}]}) 09:57:05 executing program 7: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_timeval(r0, 0x1, 0x14, 0x0, &(0x7f0000000900)) [ 98.219731] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 98.223840] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 98.227960] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 98.232402] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 98.236442] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 98.286148] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 98.286907] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 98.288429] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 98.289453] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 98.293803] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 98.296389] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 98.298586] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 98.300909] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 98.307529] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 98.310986] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 98.341857] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 98.352026] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 98.352276] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 98.354444] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 98.356474] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 98.359013] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 98.360350] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 98.362286] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 98.366141] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 98.370506] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 98.407690] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 98.408976] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 98.419055] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 98.437384] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 98.446122] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 98.447740] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 98.455150] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 98.468065] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 98.474481] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 98.479237] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 98.480182] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 98.486850] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 98.516002] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 98.535224] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 98.537141] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 100.251588] Bluetooth: hci0: command tx timeout [ 100.378367] Bluetooth: hci1: command tx timeout [ 100.378991] Bluetooth: hci2: command tx timeout [ 100.442014] Bluetooth: hci3: command tx timeout [ 100.442198] Bluetooth: hci4: command tx timeout [ 100.506531] Bluetooth: hci5: command tx timeout [ 100.570987] Bluetooth: hci6: command tx timeout [ 100.572100] Bluetooth: hci7: command tx timeout [ 102.299516] Bluetooth: hci0: command tx timeout [ 102.426950] Bluetooth: hci2: command tx timeout [ 102.427382] Bluetooth: hci1: command tx timeout [ 102.490953] Bluetooth: hci3: command tx timeout [ 102.490981] Bluetooth: hci4: command tx timeout [ 102.557008] Bluetooth: hci5: command tx timeout [ 102.618091] Bluetooth: hci7: command tx timeout [ 102.618171] Bluetooth: hci6: command tx timeout [ 104.346949] Bluetooth: hci0: command tx timeout [ 104.475955] Bluetooth: hci1: command tx timeout [ 104.475975] Bluetooth: hci2: command tx timeout [ 104.537964] Bluetooth: hci3: command tx timeout [ 104.539382] Bluetooth: hci4: command tx timeout [ 104.603006] Bluetooth: hci5: command tx timeout [ 104.666398] Bluetooth: hci7: command tx timeout [ 104.666795] Bluetooth: hci6: command tx timeout [ 106.394247] Bluetooth: hci0: command tx timeout [ 106.522955] Bluetooth: hci2: command tx timeout [ 106.523386] Bluetooth: hci1: command tx timeout [ 106.588259] Bluetooth: hci4: command tx timeout [ 106.588798] Bluetooth: hci3: command tx timeout [ 106.651009] Bluetooth: hci5: command tx timeout [ 106.713979] Bluetooth: hci7: command tx timeout [ 106.715051] Bluetooth: hci6: command tx timeout [ 135.061463] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.062417] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.218861] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.219511] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.503379] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.508971] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 09:57:43 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000000)={{0x77359400}, {0x77359400}}, 0x0) [ 135.650415] audit: type=1400 audit(1768298263.553:8): avc: denied { open } for pid=3726 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 135.652050] audit: type=1400 audit(1768298263.553:9): avc: denied { kernel } for pid=3726 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 135.812931] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.813566] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 09:57:43 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000840)={'\x00', 0x0, 0xe5e4, 0x1}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) 09:57:44 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000840)={'\x00', 0x0, 0xe5e4, 0x1}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) [ 136.253424] tmpfs: Unsupported parameter 'huge' [ 136.279616] tmpfs: Unsupported parameter 'huge' 09:57:44 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000840)={'\x00', 0x0, 0xe5e4, 0x1}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) 09:57:44 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000840)={'\x00', 0x0, 0xe5e4, 0x1}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) [ 136.450277] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.450894] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 09:57:44 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000840)={'\x00', 0x0, 0xe5e4, 0x1}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) [ 136.659194] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.660403] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 09:57:44 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000840)={'\x00', 0x0, 0xe5e4, 0x1}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) 09:57:44 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1}, 0x1c) [ 136.918414] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.919552] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.103282] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.112168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.583796] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.588985] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.607863] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 137.780389] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.781455] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.550378] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.551351] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.739225] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.740161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.823238] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.823987] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.893346] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.894031] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.927884] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.928699] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.953364] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.954196] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 139.024229] audit: type=1326 audit(1768298266.927:10): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=3911 comm="syz-executor.3" exe="/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3ff1cfcb19 code=0x0 [ 139.063145] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 139.065876] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 139.865438] audit: type=1326 audit(1768298267.769:11): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=3911 comm="syz-executor.3" exe="/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3ff1cfcb19 code=0x0 09:57:47 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, &(0x7f0000000540)=0x1f, 0x2) gettid() perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, @perf_config_ext, 0x80d, 0x0, 0x7fffffff, 0x3, 0x6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x950cde6}, 0x0, 0xd, r0, 0x0) syz_open_dev$rtc(0x0, 0x0, 0x0) set_mempolicy(0x3, &(0x7f00000000c0)=0x3, 0x7) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x7005, 0x0) getpriority(0x3, 0x0) 09:57:47 executing program 0: epoll_create1(0x0) pipe(&(0x7f00000001c0)) fsopen(&(0x7f0000000000)='securityfs\x00', 0x0) socket$netlink(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f00000004c0)={0x3}, 0x0, &(0x7f0000000080)={0x8e}, 0x0, 0x0) 09:57:47 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000840)={'\x00', 0x0, 0xe5e4, 0x1}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) 09:57:47 executing program 1: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_rdma(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB='trins=rdma,port=0x0000000000004e21,rq=0x0000000000000003,timeout=0']) 09:57:47 executing program 2: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000080)) symlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') lsetxattr$security_selinux(&(0x7f0000000380)='./file0\x00', &(0x7f00000002c0), &(0x7f0000000300)='system_u:object_r:var_t:s0\x00', 0x1b, 0x0) 09:57:47 executing program 5: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='hugetlbfs\x00', 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r1) chown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 09:57:47 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$netlink(r0, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="280000001e000109000104000000000007"], 0x28}], 0x1}, 0x0) 09:57:47 executing program 7: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) copy_file_range(r0, 0x0, r1, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, 0x0) pidfd_getfd(r2, r2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fcntl$setlease(r3, 0x400, 0x0) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fcntl$setlease(r4, 0x400, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f00000002c0), 0x80200, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000180)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x24}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) [ 140.021148] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 09:57:47 executing program 1: r0 = creat(&(0x7f00000000c0)='./file1\x00', 0x0) fcntl$setlease(r0, 0x400, 0x1) fcntl$setown(r0, 0x8, 0xffffffffffffffff) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) creat(&(0x7f0000000080)='./file1\x00', 0x0) 09:57:47 executing program 0: epoll_create1(0x0) pipe(&(0x7f00000001c0)) fsopen(&(0x7f0000000000)='securityfs\x00', 0x0) socket$netlink(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f00000004c0)={0x3}, 0x0, &(0x7f0000000080)={0x8e}, 0x0, 0x0) 09:57:48 executing program 2: shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x5000) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9) 09:57:48 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000440)='system.posix_acl_access\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000010000000000000020000000000010bb"], 0x24, 0x0) 09:57:48 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$netlink(r0, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="280000001e000109000104000000000007"], 0x28}], 0x1}, 0x0) 09:57:48 executing program 0: epoll_create1(0x0) pipe(&(0x7f00000001c0)) fsopen(&(0x7f0000000000)='securityfs\x00', 0x0) socket$netlink(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f00000004c0)={0x3}, 0x0, &(0x7f0000000080)={0x8e}, 0x0, 0x0) [ 140.299885] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 09:57:48 executing program 3: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) copy_file_range(r0, 0x0, r1, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, 0x0) pidfd_getfd(r2, r2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fcntl$setlease(r3, 0x400, 0x0) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fcntl$setlease(r4, 0x400, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f00000002c0), 0x80200, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000180)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x24}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 09:57:48 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)={0x10, r1, 0x1, 0x0, 0x0, {{0x39}, {@val={0xfffffc91}, @void}}, [@NL80211_ATTR_CONTROL_PORT_OVER_NL80211]}, 0x30}}, 0x0) 09:57:48 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$netlink(r0, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="280000001e000109000104000000000007"], 0x28}], 0x1}, 0x0) 09:57:48 executing program 0: epoll_create1(0x0) pipe(&(0x7f00000001c0)) fsopen(&(0x7f0000000000)='securityfs\x00', 0x0) socket$netlink(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f00000004c0)={0x3}, 0x0, &(0x7f0000000080)={0x8e}, 0x0, 0x0) 09:57:48 executing program 7: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) copy_file_range(r0, 0x0, r1, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, 0x0) pidfd_getfd(r2, r2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fcntl$setlease(r3, 0x400, 0x0) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fcntl$setlease(r4, 0x400, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f00000002c0), 0x80200, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000180)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x24}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 09:57:48 executing program 6: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) copy_file_range(r0, 0x0, r1, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, 0x0) pidfd_getfd(r2, r2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fcntl$setlease(r3, 0x400, 0x0) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fcntl$setlease(r4, 0x400, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f00000002c0), 0x80200, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000180)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x24}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 09:57:48 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000440)='system.posix_acl_access\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000010000000000000020000000000010bb"], 0x24, 0x0) 09:57:48 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/if_inet6\x00') pread64(r0, &(0x7f0000000000)=""/26, 0x1a, 0x0) 09:57:49 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000000000), 0x6) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$sock_bt_hci(r1, 0x800448d5, &(0x7f0000000080)) [ 141.162095] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 09:57:49 executing program 1: r0 = io_uring_setup(0x6aff, &(0x7f0000000140)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = eventfd(0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000000)=r1, 0x1) 09:57:49 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000440)='system.posix_acl_access\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000010000000000000020000000000010bb"], 0x24, 0x0) 09:57:49 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$describe(0x6, r0, 0x0, 0x0) 09:57:49 executing program 3: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) copy_file_range(r0, 0x0, r1, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, 0x0) pidfd_getfd(r2, r2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fcntl$setlease(r3, 0x400, 0x0) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fcntl$setlease(r4, 0x400, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f00000002c0), 0x80200, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000180)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x24}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 09:57:49 executing program 7: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) copy_file_range(r0, 0x0, r1, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, 0x0) pidfd_getfd(r2, r2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fcntl$setlease(r3, 0x400, 0x0) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fcntl$setlease(r4, 0x400, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f00000002c0), 0x80200, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000180)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x24}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 09:57:49 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000440)='system.posix_acl_access\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000010000000000000020000000000010bb"], 0x24, 0x0) 09:57:49 executing program 6: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) copy_file_range(r0, 0x0, r1, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, 0x0) pidfd_getfd(r2, r2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fcntl$setlease(r3, 0x400, 0x0) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fcntl$setlease(r4, 0x400, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f00000002c0), 0x80200, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000180)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x24}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 09:57:49 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd607437b800140400fe8000000000000000002000000000aafe"], 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) 09:57:49 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r0, 0x107, 0x7, 0x0, &(0x7f00000000c0)) 09:57:49 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000000000), 0x6) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$sock_bt_hci(r1, 0x800448d5, &(0x7f0000000080)) 09:57:49 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_hci(r0, 0x0, 0x3, &(0x7f00000013c0)=""/205, &(0x7f0000000080)=0xcd) 09:57:49 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000180)={0x1f, 0x0, @fixed, 0x0, 0x1}, 0xe) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f00000000c0), &(0x7f0000000140)=0x2) 09:57:49 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe3, 0xe9, 0x48, 0x0, 0x1199, 0x9063, 0x1129, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x9c, 0x2f, 0xbd}}]}}]}}, 0x0) [ 141.865026] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.866669] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.382257] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.384026] misc raw-gadget: fail, usb_gadget_register_driver returned -16 09:57:50 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000000000), 0x6) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$sock_bt_hci(r1, 0x800448d5, &(0x7f0000000080)) 09:57:50 executing program 6: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) copy_file_range(r0, 0x0, r1, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, 0x0) pidfd_getfd(r2, r2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fcntl$setlease(r3, 0x400, 0x0) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fcntl$setlease(r4, 0x400, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f00000002c0), 0x80200, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000180)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x24}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 09:57:50 executing program 3: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) copy_file_range(r0, 0x0, r1, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, 0x0) pidfd_getfd(r2, r2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fcntl$setlease(r3, 0x400, 0x0) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fcntl$setlease(r4, 0x400, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f00000002c0), 0x80200, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000180)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x24}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 09:57:50 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) clone3(&(0x7f0000005880)={0x14f824100, 0x0, &(0x7f0000000280), 0x0, {0x1f}, 0x0, 0x0, &(0x7f00000000c0)=""/1, 0x0}, 0x58) 09:57:50 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x3, [{}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x31) nanosleep(0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) nanosleep(0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000540)=@data_frame={@qos_no_ht={{@type11={{0x0, 0x2, 0xa}, {0x1}, @device_a, @device_b, @broadcast, {0x8, 0xddf}, @broadcast}}, {@type10={{}, {}, @initial, @device_a, @from_mac=@device_b}}}}, 0x3a) 09:57:50 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000180)={0x1f, 0x0, @fixed, 0x0, 0x1}, 0xe) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f00000000c0), &(0x7f0000000140)=0x2) 09:57:50 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe3, 0xe9, 0x48, 0x0, 0x1199, 0x9063, 0x1129, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x9c, 0x2f, 0xbd}}]}}]}}, 0x0) 09:57:50 executing program 7: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) copy_file_range(r0, 0x0, r1, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, 0x0) pidfd_getfd(r2, r2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fcntl$setlease(r3, 0x400, 0x0) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fcntl$setlease(r4, 0x400, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f00000002c0), 0x80200, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000180)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x24}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) [ 142.474471] audit: type=1400 audit(1768298270.377:12): avc: denied { tracepoint } for pid=4022 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 142.523866] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.531262] misc raw-gadget: fail, usb_gadget_register_driver returned -16 09:57:50 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000180)={0x1f, 0x0, @fixed, 0x0, 0x1}, 0xe) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f00000000c0), &(0x7f0000000140)=0x2) [ 142.595244] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 142.599084] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 09:57:50 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000000000), 0x6) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$sock_bt_hci(r1, 0x800448d5, &(0x7f0000000080)) 09:57:50 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000180)={0x1f, 0x0, @fixed, 0x0, 0x1}, 0xe) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f00000000c0), &(0x7f0000000140)=0x2) 09:57:50 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000080)={0x34, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x5f, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP]}]}]}, 0x34}}, 0x0) 09:57:50 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='pagemap\x00') readv(r0, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}], 0x1) [ 142.985251] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 142.988425] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 09:57:50 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x3, [{}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x31) nanosleep(0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) nanosleep(0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000540)=@data_frame={@qos_no_ht={{@type11={{0x0, 0x2, 0xa}, {0x1}, @device_a, @device_b, @broadcast, {0x8, 0xddf}, @broadcast}}, {@type10={{}, {}, @initial, @device_a, @from_mac=@device_b}}}}, 0x3a) 09:57:50 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000080), &(0x7f0000000180)=0x4) 09:57:50 executing program 6: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/tcp\x00') preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/136, 0x88}], 0x1, 0x2, 0x0) 09:57:50 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000080)={0x34, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x5f, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP]}]}]}, 0x34}}, 0x0) 09:57:50 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x3, [{}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x31) nanosleep(0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) nanosleep(0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000540)=@data_frame={@qos_no_ht={{@type11={{0x0, 0x2, 0xa}, {0x1}, @device_a, @device_b, @broadcast, {0x8, 0xddf}, @broadcast}}, {@type10={{}, {}, @initial, @device_a, @from_mac=@device_b}}}}, 0x3a) 09:57:50 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe3, 0xe9, 0x48, 0x0, 0x1199, 0x9063, 0x1129, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x9c, 0x2f, 0xbd}}]}}]}}, 0x0) 09:57:50 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) clone3(&(0x7f0000005880)={0x14f824100, 0x0, &(0x7f0000000280), 0x0, {0x1f}, 0x0, 0x0, &(0x7f00000000c0)=""/1, 0x0}, 0x58) 09:57:51 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setreuid(0xffffffffffffffff, 0xffffffffffffffff) [ 143.151672] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.161272] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 143.169230] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.177573] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 09:57:51 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'wlan0\x00', &(0x7f0000000000)=@ethtool_rx_ntuple={0x50, {0x0, @tcp_ip4_spec={@rand_addr, @private}, @esp_ip4_spec={@multicast1, @local}}}}) 09:57:51 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdab39eac554c6bee, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x208, &(0x7f0000000080)=0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) io_submit(r0, 0x1, &(0x7f0000000240)=[0x0]) io_setup(0x4, 0x0) io_destroy(0x0) r2 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x7fffdf001000, 0x0, 0x11, r2, 0x0) r3 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x7fffdf001000, 0x0, 0x11, r3, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xa924, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r4, &(0x7f0000000900)="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", 0x200) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r4, 0x4, 0x44000) sendfile(r4, r5, 0x0, 0xfdef) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x10000002}) [ 143.193912] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 143.209198] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 09:57:51 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000080)={0x34, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x5f, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP]}]}]}, 0x34}}, 0x0) 09:57:51 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) capset(&(0x7f0000001980)={0x20080522}, &(0x7f00000025c0)) 09:57:51 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000080)={0x34, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x5f, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP]}]}]}, 0x34}}, 0x0) 09:57:51 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_ACTIVATE(r0, 0x4bfa, 0x800000001000) 09:57:51 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x49, 0x0, &(0x7f0000007b80)) 09:57:51 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) clone3(&(0x7f0000005880)={0x14f824100, 0x0, &(0x7f0000000280), 0x0, {0x1f}, 0x0, 0x0, &(0x7f00000000c0)=""/1, 0x0}, 0x58) 09:57:51 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '-'}}]}}) 09:57:51 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_ACTIVATE(r0, 0x4bfa, 0x800000001000) 09:57:51 executing program 7: personality(0x410000e) ppoll(0x0, 0x0, &(0x7f0000000400), 0x0, 0x0) 09:57:51 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x3, [{}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x31) nanosleep(0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) nanosleep(0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000540)=@data_frame={@qos_no_ht={{@type11={{0x0, 0x2, 0xa}, {0x1}, @device_a, @device_b, @broadcast, {0x8, 0xddf}, @broadcast}}, {@type10={{}, {}, @initial, @device_a, @from_mac=@device_b}}}}, 0x3a) 09:57:51 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x3, [{}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x31) nanosleep(0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) nanosleep(0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000540)=@data_frame={@qos_no_ht={{@type11={{0x0, 0x2, 0xa}, {0x1}, @device_a, @device_b, @broadcast, {0x8, 0xddf}, @broadcast}}, {@type10={{}, {}, @initial, @device_a, @from_mac=@device_b}}}}, 0x3a) [ 143.637670] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 143.640946] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 143.648617] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 143.650702] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 09:57:51 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdab39eac554c6bee, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x208, &(0x7f0000000080)=0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) io_submit(r0, 0x1, &(0x7f0000000240)=[0x0]) io_setup(0x4, 0x0) io_destroy(0x0) r2 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x7fffdf001000, 0x0, 0x11, r2, 0x0) r3 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x7fffdf001000, 0x0, 0x11, r3, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xa924, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r4, &(0x7f0000000900)="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", 0x200) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r4, 0x4, 0x44000) sendfile(r4, r5, 0x0, 0xfdef) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x10000002}) 09:57:51 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe3, 0xe9, 0x48, 0x0, 0x1199, 0x9063, 0x1129, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x9c, 0x2f, 0xbd}}]}}]}}, 0x0) 09:57:51 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '-'}}]}}) 09:57:51 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x3, [{}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x31) nanosleep(0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) nanosleep(0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000540)=@data_frame={@qos_no_ht={{@type11={{0x0, 0x2, 0xa}, {0x1}, @device_a, @device_b, @broadcast, {0x8, 0xddf}, @broadcast}}, {@type10={{}, {}, @initial, @device_a, @from_mac=@device_b}}}}, 0x3a) 09:57:51 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x3, [{}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x31) nanosleep(0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) nanosleep(0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000540)=@data_frame={@qos_no_ht={{@type11={{0x0, 0x2, 0xa}, {0x1}, @device_a, @device_b, @broadcast, {0x8, 0xddf}, @broadcast}}, {@type10={{}, {}, @initial, @device_a, @from_mac=@device_b}}}}, 0x3a) 09:57:51 executing program 7: r0 = syz_open_dev$evdev(&(0x7f0000000140), 0x0, 0x20001) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/raw\x00') r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) fsetxattr$security_selinux(r3, &(0x7f0000000080), &(0x7f00000000c0)='system_u:object_r:zero_device_t:s0\x00', 0x23, 0x1) r4 = pidfd_getfd(r1, r0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r6, 0x800448d3, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1, {0x9b}}, './file0\x00'}) close(r7) close(r6) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000040)={0x1c, 0x5e, 0xffffffffffffffff, 0x0, 0x0, "", [@generic="bf3d1e1489d17b8037"]}, 0x1c}], 0x1}, 0x0) sendfile(r8, r1, &(0x7f0000000200)=0x4, 0x2) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000240)=@kern={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280), 0x0, 0x0, 0x0, 0x5}, 0x48000) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) 09:57:51 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) clone3(&(0x7f0000005880)={0x14f824100, 0x0, &(0x7f0000000280), 0x0, {0x1f}, 0x0, 0x0, &(0x7f00000000c0)=""/1, 0x0}, 0x58) 09:57:51 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_ACTIVATE(r0, 0x4bfa, 0x800000001000) [ 144.072911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.080370] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.101091] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 144.121888] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 144.126550] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 09:57:52 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_ACTIVATE(r0, 0x4bfa, 0x800000001000) [ 144.158144] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 09:57:52 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdab39eac554c6bee, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x208, &(0x7f0000000080)=0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) io_submit(r0, 0x1, &(0x7f0000000240)=[0x0]) io_setup(0x4, 0x0) io_destroy(0x0) r2 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x7fffdf001000, 0x0, 0x11, r2, 0x0) r3 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x7fffdf001000, 0x0, 0x11, r3, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xa924, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r4, &(0x7f0000000900)="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", 0x200) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r4, 0x4, 0x44000) sendfile(r4, r5, 0x0, 0xfdef) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x10000002}) 09:57:52 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '-'}}]}}) 09:57:52 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdab39eac554c6bee, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x208, &(0x7f0000000080)=0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) io_submit(r0, 0x1, &(0x7f0000000240)=[0x0]) io_setup(0x4, 0x0) io_destroy(0x0) r2 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x7fffdf001000, 0x0, 0x11, r2, 0x0) r3 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x7fffdf001000, 0x0, 0x11, r3, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xa924, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r4, &(0x7f0000000900)="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", 0x200) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r4, 0x4, 0x44000) sendfile(r4, r5, 0x0, 0xfdef) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x10000002}) 09:57:52 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCMGET(r0, 0x5415, 0x0) 09:57:52 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCMGET(r0, 0x5415, 0x0) 09:57:52 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdab39eac554c6bee, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x208, &(0x7f0000000080)=0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) io_submit(r0, 0x1, &(0x7f0000000240)=[0x0]) io_setup(0x4, 0x0) io_destroy(0x0) r2 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x7fffdf001000, 0x0, 0x11, r2, 0x0) r3 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x7fffdf001000, 0x0, 0x11, r3, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xa924, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r4, &(0x7f0000000900)="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", 0x200) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r4, 0x4, 0x44000) sendfile(r4, r5, 0x0, 0xfdef) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x10000002}) 09:57:52 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x401) write$evdev(r0, &(0x7f00000000c0)=[{{0x77359400}, 0x1, 0x63, 0x2}], 0xff2f) 09:57:52 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0) 09:57:52 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCMGET(r0, 0x5415, 0x0) 09:57:52 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="06", 0x1}], 0x1}, 0x40011) recvmmsg(r1, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x1, 0x0) shutdown(r0, 0x1) recvfrom(r1, 0x0, 0x0, 0x22, 0x0, 0x0) 09:57:52 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCMGET(r0, 0x5415, 0x0) 09:57:53 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdab39eac554c6bee, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x208, &(0x7f0000000080)=0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) io_submit(r0, 0x1, &(0x7f0000000240)=[0x0]) io_setup(0x4, 0x0) io_destroy(0x0) r2 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x7fffdf001000, 0x0, 0x11, r2, 0x0) r3 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x7fffdf001000, 0x0, 0x11, r3, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xa924, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r4, &(0x7f0000000900)="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", 0x200) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r4, 0x4, 0x44000) sendfile(r4, r5, 0x0, 0xfdef) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x10000002}) 09:57:53 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0) 09:57:53 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdab39eac554c6bee, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x208, &(0x7f0000000080)=0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) io_submit(r0, 0x1, &(0x7f0000000240)=[0x0]) io_setup(0x4, 0x0) io_destroy(0x0) r2 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x7fffdf001000, 0x0, 0x11, r2, 0x0) r3 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x7fffdf001000, 0x0, 0x11, r3, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xa924, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r4, &(0x7f0000000900)="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", 0x200) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r4, 0x4, 0x44000) sendfile(r4, r5, 0x0, 0xfdef) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x10000002}) 09:57:53 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '-'}}]}}) 09:57:53 executing program 2: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000001b00)) utimensat(0xffffffffffffffff, 0x0, 0x0, 0x0) 09:57:53 executing program 5: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x1ff) getgroups(0x0, &(0x7f00000000c0)) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) setresgid(r1, 0x0, 0xee01) fstat(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) setresgid(r3, 0x0, 0xee01) r4 = getegid() newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xb24ce62207e50b5b) setgroups(0x6, &(0x7f0000000340)=[r1, 0x0, r2, r3, r4, r5]) getegid() lstat(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, r6, 0xee01) getgroups(0x2, &(0x7f0000000000)=[0xee01, 0xee00]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz1\x00', 0x200002, 0x0) setfsgid(r7) setresgid(0x0, 0x0, 0xee01) 09:57:53 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x401) write$evdev(r0, &(0x7f00000000c0)=[{{0x77359400}, 0x1, 0x63, 0x2}], 0xff2f) 09:57:53 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdab39eac554c6bee, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x208, &(0x7f0000000080)=0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) io_submit(r0, 0x1, &(0x7f0000000240)=[0x0]) io_setup(0x4, 0x0) io_destroy(0x0) r2 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x7fffdf001000, 0x0, 0x11, r2, 0x0) r3 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x7fffdf001000, 0x0, 0x11, r3, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xa924, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r4, &(0x7f0000000900)="5ed0b2ff68d76fb346352b602a2a1295cbe01cb3f64fbed9e7f9bc9be0f300cb97f6a204cc586e45dfb949002f61f8fb969dd435dd0c37c5077e5b10cfeafd75205e215b167323a3b971b0ec98e6c3d4d825cae01271cb35cdd091e4872367f354e0dc81a7e4ac79775bc1dcaafe2f5079da79d1989f1ddce6722fc438a7217526cfe75d53471624d6f091e19a7fb699ea27efa9e0fd1914e7c35f297afd9b9b85ff0ce7a982f4fa0c172ea5f06479eec302f30e5df66273717e028f4ca7d4c5b6bc8a3c3c67f688195f22488a15d9e1f7e5fed3a6c2aba7bc308b0e2c5657f4538f4a3bf9b975bb887a901ab3c85261be3e331b741313e78b5ad63b7b1b378e9c79dc4a95b2b4d15cd1d1b808844378f882a72af1e5b0eefd356e0247246e60643204c3b46183dbe4e066c55cb1dcdaa7b70ef43ab2fa4d2b8c4c1a89cb0e325fd9716874d3856cf368efd1f92d21214e55e4de647c37c71887d11f74f9afe1616e3054ceae601e4b3555e243c1882ad42c7730caeb309e7714ad87c55e9fba308cfc4161e562abde3ac4f3d7e0a3584d4928100197f102307c05c0b4b4898b0591bc1433af443478979f28e6136ffb21aaeac2be5490475a08e96bb94fd9d9d3aa2f8a1e147a80ba9bfd04dac3f476ff128476c693ea71f7be47a508c98eddc479eb703d6f17cc5be2182f7c39b0a47eb23e0808b5d87dd2a9ce88eb48a601", 0x200) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r4, 0x4, 0x44000) sendfile(r4, r5, 0x0, 0xfdef) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x10000002}) 09:57:53 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x181201) writev(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)="9811b416240000000000000092675abeed92a8120c45248749b781ffffffffffffff462af69d1bfa35600a54599575c5", 0x30}, {&(0x7f0000000600)="530300007ca4869f74505160d3718faf4232d300000000d38c65353ede1c8fd89d293bfd90c15ea8ad00e65a8b8004000000bd76edd09f4170d84798000c6a69bc57bc64106e3673fb3a4b0987045d1c5fea993cd89fc991", 0x58}], 0x2) 09:57:53 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0) 09:57:53 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[]) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x104000, 0x0) mount$9p_unix(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1005841, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2001851, 0x0) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[]) umount2(&(0x7f0000001380)='./file0\x00', 0x3) umount2(&(0x7f0000000200)='./file0\x00', 0x0) [ 145.530092] ======================================================= [ 145.530092] WARNING: The mand mount option has been deprecated and [ 145.530092] and is ignored by this kernel. Remove the mand [ 145.530092] option from the mount to silence this warning. [ 145.530092] ======================================================= 09:57:53 executing program 5: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x1ff) getgroups(0x0, &(0x7f00000000c0)) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) setresgid(r1, 0x0, 0xee01) fstat(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) setresgid(r3, 0x0, 0xee01) r4 = getegid() newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xb24ce62207e50b5b) setgroups(0x6, &(0x7f0000000340)=[r1, 0x0, r2, r3, r4, r5]) getegid() lstat(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, r6, 0xee01) getgroups(0x2, &(0x7f0000000000)=[0xee01, 0xee00]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz1\x00', 0x200002, 0x0) setfsgid(r7) setresgid(0x0, 0x0, 0xee01) [ 145.639538] tmpfs: Unknown parameter './file0' 09:57:53 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0) 09:57:53 executing program 5: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x1ff) getgroups(0x0, &(0x7f00000000c0)) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) setresgid(r1, 0x0, 0xee01) fstat(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) setresgid(r3, 0x0, 0xee01) r4 = getegid() newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xb24ce62207e50b5b) setgroups(0x6, &(0x7f0000000340)=[r1, 0x0, r2, r3, r4, r5]) getegid() lstat(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, r6, 0xee01) getgroups(0x2, &(0x7f0000000000)=[0xee01, 0xee00]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz1\x00', 0x200002, 0x0) setfsgid(r7) setresgid(0x0, 0x0, 0xee01) [ 145.970748] syz-executor.6 (4171) used greatest stack depth: 22960 bytes left 09:57:54 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x401) write$evdev(r0, &(0x7f00000000c0)=[{{0x77359400}, 0x1, 0x63, 0x2}], 0xff2f) 09:57:54 executing program 2: r0 = fork() r1 = gettid() kcmp(r0, r1, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) 09:57:54 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000640), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000a80)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEV(r3, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000200)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}]}, 0x1c}}, 0x0) 09:57:54 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdab39eac554c6bee, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x208, &(0x7f0000000080)=0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) io_submit(r0, 0x1, &(0x7f0000000240)=[0x0]) io_setup(0x4, 0x0) io_destroy(0x0) r2 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x7fffdf001000, 0x0, 0x11, r2, 0x0) r3 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x7fffdf001000, 0x0, 0x11, r3, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xa924, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r4, &(0x7f0000000900)="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", 0x200) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r4, 0x4, 0x44000) sendfile(r4, r5, 0x0, 0xfdef) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x10000002}) 09:57:54 executing program 5: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x1ff) getgroups(0x0, &(0x7f00000000c0)) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) setresgid(r1, 0x0, 0xee01) fstat(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) setresgid(r3, 0x0, 0xee01) r4 = getegid() newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xb24ce62207e50b5b) setgroups(0x6, &(0x7f0000000340)=[r1, 0x0, r2, r3, r4, r5]) getegid() lstat(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, r6, 0xee01) getgroups(0x2, &(0x7f0000000000)=[0xee01, 0xee00]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz1\x00', 0x200002, 0x0) setfsgid(r7) setresgid(0x0, 0x0, 0xee01) 09:57:54 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000700)={0x28, 0x13, 0x1, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64=0x2}, @nested={0x4}, @typed={0x8, 0x1a, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x28}], 0x1}, 0x0) 09:57:54 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdab39eac554c6bee, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x208, &(0x7f0000000080)=0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) io_submit(r0, 0x1, &(0x7f0000000240)=[0x0]) io_setup(0x4, 0x0) io_destroy(0x0) r2 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x7fffdf001000, 0x0, 0x11, r2, 0x0) r3 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x7fffdf001000, 0x0, 0x11, r3, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xa924, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r4, &(0x7f0000000900)="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", 0x200) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r4, 0x4, 0x44000) sendfile(r4, r5, 0x0, 0xfdef) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x10000002}) 09:57:54 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="3b25000000000000c20400007ffe07"], 0x130) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x0) dup2(r0, r1) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) 09:57:54 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_mr_vif\x00') pread64(r0, &(0x7f00000002c0)=""/178, 0xb2, 0x81) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000000)=""/124, &(0x7f0000000080)=0x7c) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() unshare(0x8000000) clone3(&(0x7f0000000240)={0x10060000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 146.236809] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list 09:57:54 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0), r0) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}}, 0x0) 09:57:54 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, 0x12, r1, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000004, 0x11, r1, 0x0) syz_io_uring_submit(r3, 0x0, 0x0, 0x0) syz_io_uring_submit(r2, 0x0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x8000000) 09:57:54 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x401) write$evdev(r0, &(0x7f00000000c0)=[{{0x77359400}, 0x1, 0x63, 0x2}], 0xff2f) 09:57:54 executing program 2: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) 09:57:54 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) shutdown(r0, 0x0) ppoll(&(0x7f0000000080)=[{r0}], 0x1, &(0x7f0000000200), 0x0, 0x0) 09:57:54 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="3b25000000000000c20400007ffe07"], 0x130) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x0) dup2(r0, r1) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) 09:57:54 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="3b25000000000000c20400007ffe07"], 0x130) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x0) dup2(r0, r1) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) 09:57:54 executing program 2: syz_mount_image$nfs(0x0, 0x0, 0x0, 0x1, &(0x7f00000003c0)=[{0x0}], 0x0, 0x0) 09:57:54 executing program 5: ptrace$setregset(0x4205, 0x0, 0x0, 0x0) sendmsg$802154_raw(0xffffffffffffffff, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x1}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 09:57:54 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0x0, 0x0, &(0x7f0000000a40)=0xffffff7f) 09:57:54 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGSOFTCAR(r0, 0x5603, &(0x7f0000000140)) 09:57:54 executing program 5: pwritev2(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000040)="e7", 0x1}], 0x1, 0x0, 0x0, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000080), 0x10, 0x0) 09:57:54 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="3b25000000000000c20400007ffe07"], 0x130) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x0) dup2(r0, r1) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) 09:57:54 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="3b25000000000000c20400007ffe07"], 0x130) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x0) dup2(r0, r1) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) 09:57:54 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet(r0, &(0x7f0000000900)=[{{&(0x7f00000001c0)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000800)=[{&(0x7f0000000200)="06d5", 0x2}], 0x1, &(0x7f0000000a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @remote}}}], 0x20}}, {{&(0x7f0000000040), 0x10, 0x0, 0x0, &(0x7f0000000c40)=[@ip_retopts={{0xf}}], 0x10}}], 0x2, 0x0) 09:57:54 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') getdents(r0, &(0x7f0000001700)=""/133, 0x85) syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), 0xffffffffffffffff) getdents(r0, &(0x7f0000000180)=""/149, 0x95) 09:57:54 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) get_robust_list(0xffffffffffffffff, 0x0, 0x0) 09:57:54 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGSOFTCAR(r0, 0x5603, &(0x7f0000000140)) 09:57:54 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$SG_GET_SG_TABLESIZE(r0, 0x2288, &(0x7f0000000000)) 09:57:54 executing program 7: keyctl$search(0xc, 0x0, &(0x7f0000002480)='big_key\x00', &(0x7f00000024c0)={'syz', 0x2}, 0x0) 09:57:54 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="3b25000000000000c20400007ffe07"], 0x130) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x0) dup2(r0, r1) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) 09:57:54 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x201) ioctl$SG_IO(r0, 0x2285, 0x0) writev(r0, &(0x7f0000000140)=[{&(0x7f00000001c0)="9811b416240000000000000092675a9e2c92a8c20c45248749b781ffffffffffffff462af69d1bfa35600a599575c5", 0x2f}, {&(0x7f0000000200)="df09bcae0f010000003729b772f92a441f56eab8ff00c67c89a4a99b0f2b08785aff63d51f8c494d8e6cdf83623eea8942503c116e7b", 0x36}], 0x2) [ 147.090599] [ 147.090779] ===================================== [ 147.091156] WARNING: bad unlock balance detected! [ 147.091528] 6.19.0-rc5-next-20260113 #1 Not tainted [ 147.091922] ------------------------------------- [ 147.092303] syz-executor.4/4262 is trying to release lock (rcu_read_lock) at: [ 147.092872] [] __wait_on_freeing_inode+0x105/0x350 [ 147.093392] but there are no more locks to release! [ 147.097230] [ 147.097230] other info that might help us debug this: [ 147.097749] 4 locks held by syz-executor.4/4262: [ 147.098138] #0: ffff88800ffea3f8 (sb_writers#3){.+.+}-{0:0}, at: filename_create+0xf7/0x400 [ 147.098832] #1: ffff88803c4b8d68 (&type->i_mutex_dir_key#3/1){+.+.}-{4:4}, at: filename_create+0x1b1/0x400 [ 147.099619] #2: ffff88800ffee950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xe32/0x12d0 [ 147.100325] #3: ffffffff85c16898 (inode_hash_lock){+.+.}-{3:3}, at: insert_inode_locked+0xf9/0x890 [ 147.101053] [ 147.101053] stack backtrace: [ 147.101413] CPU: 1 UID: 0 PID: 4262 Comm: syz-executor.4 Not tainted 6.19.0-rc5-next-20260113 #1 PREEMPT(lazy) [ 147.101427] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 147.101434] Call Trace: [ 147.101439] [ 147.101443] dump_stack_lvl+0xca/0x120 [ 147.101469] ? __wait_on_freeing_inode+0x105/0x350 [ 147.101483] print_unlock_imbalance_bug+0x118/0x130 [ 147.101499] ? __wait_on_freeing_inode+0x105/0x350 [ 147.101514] lock_release+0x1ee/0x270 [ 147.101529] __wait_on_freeing_inode+0x10a/0x350 [ 147.101545] ? __pfx___wait_on_freeing_inode+0x10/0x10 [ 147.101561] ? __pfx_var_wake_function+0x10/0x10 [ 147.101580] ? lock_is_held_type+0x9e/0x120 [ 147.101593] insert_inode_locked+0x25f/0x890 [ 147.101612] __ext4_new_inode+0x223d/0x4cd0 [ 147.101632] ? __pfx___ext4_new_inode+0x10/0x10 [ 147.101647] ? __pfx___dquot_initialize+0x10/0x10 [ 147.101667] ? __pfx_avc_has_perm+0x10/0x10 [ 147.101686] ext4_symlink+0x406/0xb40 [ 147.101707] ? __pfx_ext4_symlink+0x10/0x10 [ 147.101723] ? security_inode_permission+0x72/0xe0 [ 147.101738] vfs_symlink+0x44b/0x840 [ 147.101756] do_symlinkat+0x153/0x440 [ 147.101770] ? __pfx_do_symlinkat+0x10/0x10 [ 147.101790] ? strncpy_from_user+0x21b/0x2f0 [ 147.101810] __x64_sys_symlink+0x79/0xa0 [ 147.101824] do_syscall_64+0xbf/0x420 [ 147.101838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.101851] RIP: 0033:0x7fc9e5c07427 [ 147.101860] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 58 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 147.101871] RSP: 002b:00007ffe3d05b008 EFLAGS: 00000202 ORIG_RAX: 0000000000000058 [ 147.101881] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc9e5c07427 [ 147.101889] RDX: 00007ffe3d05b0e7 RSI: 00007fc9e5c62019 RDI: 00007ffe3d05b0d0 [ 147.101896] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007ffe3d05aea0 [ 147.101903] R10: 00007ffe3d05ad57 R11: 0000000000000202 R12: 0000000000000001 [ 147.101910] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffe3d05b0d0 [ 147.101922] [ 147.117997] ------------[ cut here ]------------ [ 147.118374] WARNING: kernel/rcu/tree_plugin.h:443 at __rcu_read_unlock+0x25f/0x5c0, CPU#1: syz-executor.4/4262 [ 147.120199] Modules linked in: [ 147.120498] CPU: 1 UID: 0 PID: 4262 Comm: syz-executor.4 Not tainted 6.19.0-rc5-next-20260113 #1 PREEMPT(lazy) [ 147.121362] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 147.122058] RIP: 0010:__rcu_read_unlock+0x25f/0x5c0 [ 147.122518] Code: f2 02 00 00 c7 43 58 01 00 00 00 bf 09 00 00 00 e8 a6 bb de ff 4d 85 f6 0f 84 73 fe ff ff e8 38 89 20 00 fb e9 68 fe ff ff 90 <0f> 0b 90 5b 5d 41 5c 41 5d 41 5e e9 61 f9 73 03 e8 0c 88 56 00 e9 [ 147.123978] RSP: 0018:ffff88804b0d79a0 EFLAGS: 00010286 [ 147.124436] RAX: 00000000ffffffff RBX: ffff88801ad7d280 RCX: ffffffff815664c7 [ 147.125068] RDX: 0000000000000000 RSI: ffffffff815664d0 RDI: ffff88801ad7d67c [ 147.125627] RBP: ffff88801ad7d280 R08: 0000000000000000 R09: fffffbfff0ba6ff4 [ 147.126243] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88801ad7d280 [ 147.126800] R13: 0000000000000001 R14: ffffffff85c0e690 R15: ffff88803c4258e0 [ 147.127404] FS: 000055558a1e5400(0000) GS:ffff8880e5442000(0000) knlGS:0000000000000000 [ 147.128075] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 147.128532] CR2: 00007fc9e5c87544 CR3: 000000004b7f6000 CR4: 0000000000350ef0 [ 147.129132] Call Trace: [ 147.129371] [ 147.130038] __wait_on_freeing_inode+0x10f/0x350 [ 147.130680] ? __pfx___wait_on_freeing_inode+0x10/0x10 [ 147.131711] ? __pfx_var_wake_function+0x10/0x10 [ 147.132877] ? lock_is_held_type+0x9e/0x120 [ 147.133970] insert_inode_locked+0x25f/0x890 [ 147.135483] __ext4_new_inode+0x223d/0x4cd0 [ 147.137804] ? __pfx___ext4_new_inode+0x10/0x10 [ 147.139005] ? __pfx___dquot_initialize+0x10/0x10 [ 147.139709] ? __pfx_avc_has_perm+0x10/0x10 [ 147.141387] ext4_symlink+0x406/0xb40 [ 147.143504] ? __pfx_ext4_symlink+0x10/0x10 [ 147.144468] ? security_inode_permission+0x72/0xe0 [ 147.146034] vfs_symlink+0x44b/0x840 [ 147.147240] do_symlinkat+0x153/0x440 [ 147.148279] ? __pfx_do_symlinkat+0x10/0x10 [ 147.148982] ? strncpy_from_user+0x21b/0x2f0 [ 147.150728] __x64_sys_symlink+0x79/0xa0 [ 147.151441] do_syscall_64+0xbf/0x420 [ 147.152220] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.152719] RIP: 0033:0x7fc9e5c07427 [ 147.153119] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 58 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 147.154594] RSP: 002b:00007ffe3d05b008 EFLAGS: 00000202 ORIG_RAX: 0000000000000058 [ 147.155240] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc9e5c07427 [ 147.155802] RDX: 00007ffe3d05b0e7 RSI: 00007fc9e5c62019 RDI: 00007ffe3d05b0d0 [ 147.156410] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007ffe3d05aea0 [ 147.157012] R10: 00007ffe3d05ad57 R11: 0000000000000202 R12: 0000000000000001 [ 147.157578] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffe3d05b0d0 [ 147.160070] [ 147.160263] irq event stamp: 179 [ 147.160529] hardirqs last enabled at (179): [] _raw_spin_unlock_irqrestore+0x2c/0x50 [ 147.161370] hardirqs last disabled at (178): [] _raw_spin_lock_irqsave+0x53/0x60 [ 147.162186] softirqs last enabled at (174): [] kernel_fpu_end+0x59/0x70 [ 147.162897] softirqs last disabled at (172): [] kernel_fpu_begin_mask+0x1bb/0x300 [ 147.163705] ---[ end trace 0000000000000000 ]--- 09:57:55 executing program 5: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug', 0x0, 0x0) getdents(r0, &(0x7f0000000180)=""/163, 0xa3) lseek(r0, 0x10001, 0x1) 09:57:55 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGSOFTCAR(r0, 0x5603, &(0x7f0000000140)) [ 147.193669] sg_write: data in/out 235/12 bytes for SCSI command 0x1f-- guessing data in; [ 147.193669] program syz-executor.2 not setting count and/or reply_len properly [ 147.201500] sg_write: data in/out 235/12 bytes for SCSI command 0x1f-- guessing data in; [ 147.201500] program syz-executor.2 not setting count and/or reply_len properly 09:57:55 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGSOFTCAR(r0, 0x5603, &(0x7f0000000140)) 09:57:55 executing program 5: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug', 0x0, 0x0) getdents(r0, &(0x7f0000000180)=""/163, 0xa3) lseek(r0, 0x10001, 0x1) 09:57:55 executing program 2: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$PTP_PIN_SETFUNC(r0, 0x40603d07, 0x0) 09:57:55 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="3b25000000000000c20400007ffe07"], 0x130) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x0) dup2(r0, r1) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) 09:57:55 executing program 7: mbind(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x2) 09:57:55 executing program 0: r0 = syz_io_uring_setup(0x6130, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000000080)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_setup(0x458b, &(0x7f00000000c0)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180), &(0x7f0000000140)) 09:57:55 executing program 7: r0 = mq_open(&(0x7f00000000c0)='{@!(*@\x00', 0x40, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) mq_unlink(&(0x7f0000000140)='{@!(*@\x00') 09:57:55 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000140), 0x4) 09:57:55 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="6f73322e4c6c671e8e84186320cb2b383032313100"]) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xffffffffffffffff]) getgroups(0x2, &(0x7f0000000240)=[r0, r0]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) getresgid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = dup(r1) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x2}, 0xb, &(0x7f0000000240)={0x0}}, 0x0) getsockname$unix(r2, &(0x7f00000004c0), &(0x7f0000000300)=0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001240)={0x1c, r4, 0x5, 0x0, 0x25dfdc01, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r4, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x9, 0x1}, {0x5c, 0x1}, {0x0, 0x4}], "df5f66ca4f0ec51d"}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x850) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001340), 0x3, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r5, 0x80083313, &(0x7f0000000000)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r5, 0xf502, 0x0) 09:57:55 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$CDROMREADAUDIO(r0, 0x530e, &(0x7f0000000080)={@lba=0x81, 0x2, 0x17, 0x0}) 09:57:55 executing program 6: r0 = creat(&(0x7f00000000c0)='./file1\x00', 0x0) fcntl$setlease(r0, 0x400, 0x1) fcntl$setown(r0, 0x8, 0xffffffffffffffff) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xa02, 0x0) 09:57:55 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) lseek(r0, 0xfffffffffffffffc, 0x4) 09:57:55 executing program 5: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug', 0x0, 0x0) getdents(r0, &(0x7f0000000180)=""/163, 0xa3) lseek(r0, 0x10001, 0x1) [ 147.473692] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2 09:57:55 executing program 7: r0 = mq_open(&(0x7f00000000c0)='{@!(*@\x00', 0x40, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) mq_unlink(&(0x7f0000000140)='{@!(*@\x00') [ 147.479673] random: crng reseeded on system resumption [ 147.532870] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2 [ 147.537310] random: crng reseeded on system resumption [ 147.579821] syz-executor.2 (4299) used greatest stack depth: 22896 bytes left 09:57:56 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$CDROMREADAUDIO(r0, 0x530e, &(0x7f0000000080)={@lba=0x81, 0x2, 0x17, 0x0}) 09:57:56 executing program 5: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug', 0x0, 0x0) getdents(r0, &(0x7f0000000180)=""/163, 0xa3) lseek(r0, 0x10001, 0x1) 09:57:56 executing program 7: r0 = mq_open(&(0x7f00000000c0)='{@!(*@\x00', 0x40, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) mq_unlink(&(0x7f0000000140)='{@!(*@\x00') 09:57:56 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="6f73322e4c6c671e8e84186320cb2b383032313100"]) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xffffffffffffffff]) getgroups(0x2, &(0x7f0000000240)=[r0, r0]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) getresgid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = dup(r1) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x2}, 0xb, &(0x7f0000000240)={0x0}}, 0x0) getsockname$unix(r2, &(0x7f00000004c0), &(0x7f0000000300)=0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001240)={0x1c, r4, 0x5, 0x0, 0x25dfdc01, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r4, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x9, 0x1}, {0x5c, 0x1}, {0x0, 0x4}], "df5f66ca4f0ec51d"}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x850) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001340), 0x3, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r5, 0x80083313, &(0x7f0000000000)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r5, 0xf502, 0x0) 09:57:56 executing program 1: r0 = mq_open(&(0x7f00000000c0)='{@!(*@\x00', 0x40, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) mq_unlink(&(0x7f0000000140)='{@!(*@\x00') 09:57:56 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="6f73322e4c6c671e8e84186320cb2b383032313100"]) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xffffffffffffffff]) getgroups(0x2, &(0x7f0000000240)=[r0, r0]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) getresgid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = dup(r1) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x2}, 0xb, &(0x7f0000000240)={0x0}}, 0x0) getsockname$unix(r2, &(0x7f00000004c0), &(0x7f0000000300)=0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001240)={0x1c, r4, 0x5, 0x0, 0x25dfdc01, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r4, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x9, 0x1}, {0x5c, 0x1}, {0x0, 0x4}], "df5f66ca4f0ec51d"}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x850) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001340), 0x3, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r5, 0x80083313, &(0x7f0000000000)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r5, 0xf502, 0x0) 09:57:56 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0xa, &(0x7f0000009dc0), 0x4) 09:57:56 executing program 6: r0 = creat(&(0x7f00000000c0)='./file1\x00', 0x0) fcntl$setlease(r0, 0x400, 0x1) fcntl$setown(r0, 0x8, 0xffffffffffffffff) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xa02, 0x0) [ 148.335747] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2 09:57:56 executing program 7: r0 = mq_open(&(0x7f00000000c0)='{@!(*@\x00', 0x40, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) mq_unlink(&(0x7f0000000140)='{@!(*@\x00') [ 148.343383] random: crng reseeded on system resumption 09:57:56 executing program 0: prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x0) [ 148.363953] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2 [ 148.373649] random: crng reseeded on system resumption 09:57:56 executing program 1: r0 = mq_open(&(0x7f00000000c0)='{@!(*@\x00', 0x40, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) mq_unlink(&(0x7f0000000140)='{@!(*@\x00') 09:57:56 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f0000000040)='binfmt_misc\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x5, &(0x7f0000000000)='dirsync\x00', 0x0, 0x0) 09:57:56 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="6f73322e4c6c671e8e84186320cb2b383032313100"]) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xffffffffffffffff]) getgroups(0x2, &(0x7f0000000240)=[r0, r0]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) getresgid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = dup(r1) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x2}, 0xb, &(0x7f0000000240)={0x0}}, 0x0) getsockname$unix(r2, &(0x7f00000004c0), &(0x7f0000000300)=0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001240)={0x1c, r4, 0x5, 0x0, 0x25dfdc01, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r4, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x9, 0x1}, {0x5c, 0x1}, {0x0, 0x4}], "df5f66ca4f0ec51d"}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x850) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001340), 0x3, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r5, 0x80083313, &(0x7f0000000000)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r5, 0xf502, 0x0) [ 148.464685] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2 [ 148.466508] random: crng reseeded on system resumption 09:57:57 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)={0x20, r1, 0xb341daa0822653b3, 0x0, 0x0, {0x19}, [@ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}}, 0x0) 09:57:57 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$CDROMREADAUDIO(r0, 0x530e, &(0x7f0000000080)={@lba=0x81, 0x2, 0x17, 0x0}) 09:57:57 executing program 1: r0 = mq_open(&(0x7f00000000c0)='{@!(*@\x00', 0x40, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) mq_unlink(&(0x7f0000000140)='{@!(*@\x00') 09:57:57 executing program 6: r0 = creat(&(0x7f00000000c0)='./file1\x00', 0x0) fcntl$setlease(r0, 0x400, 0x1) fcntl$setown(r0, 0x8, 0xffffffffffffffff) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xa02, 0x0) 09:57:57 executing program 5: timer_create(0x3, 0x0, &(0x7f0000000100)) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) timer_delete(0x0) 09:57:57 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="6f73322e4c6c671e8e84186320cb2b383032313100"]) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xffffffffffffffff]) getgroups(0x2, &(0x7f0000000240)=[r0, r0]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) getresgid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = dup(r1) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x2}, 0xb, &(0x7f0000000240)={0x0}}, 0x0) getsockname$unix(r2, &(0x7f00000004c0), &(0x7f0000000300)=0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001240)={0x1c, r4, 0x5, 0x0, 0x25dfdc01, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r4, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x9, 0x1}, {0x5c, 0x1}, {0x0, 0x4}], "df5f66ca4f0ec51d"}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x850) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001340), 0x3, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r5, 0x80083313, &(0x7f0000000000)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r5, 0xf502, 0x0) 09:57:57 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="6f73322e4c6c671e8e84186320cb2b383032313100"]) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xffffffffffffffff]) getgroups(0x2, &(0x7f0000000240)=[r0, r0]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) getresgid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = dup(r1) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x2}, 0xb, &(0x7f0000000240)={0x0}}, 0x0) getsockname$unix(r2, &(0x7f00000004c0), &(0x7f0000000300)=0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001240)={0x1c, r4, 0x5, 0x0, 0x25dfdc01, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r4, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x9, 0x1}, {0x5c, 0x1}, {0x0, 0x4}], "df5f66ca4f0ec51d"}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x850) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001340), 0x3, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r5, 0x80083313, &(0x7f0000000000)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r5, 0xf502, 0x0) 09:57:57 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001140)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0}) [ 149.292674] audit: type=1326 audit(1768298277.195:13): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4350 comm="syz-executor.5" exe="/syz-executor.5" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f57f7da0b19 code=0x0 09:57:57 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)={0x20, r1, 0xb341daa0822653b3, 0x0, 0x0, {0x19}, [@ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}}, 0x0) [ 149.313398] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2 [ 149.321337] random: crng reseeded on system resumption 09:57:57 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001140)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0}) 09:57:57 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$CDROMREADAUDIO(r0, 0x530e, &(0x7f0000000080)={@lba=0x81, 0x2, 0x17, 0x0}) 09:57:57 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="6f73322e4c6c671e8e84186320cb2b383032313100"]) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xffffffffffffffff]) getgroups(0x2, &(0x7f0000000240)=[r0, r0]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) getresgid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = dup(r1) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x2}, 0xb, &(0x7f0000000240)={0x0}}, 0x0) getsockname$unix(r2, &(0x7f00000004c0), &(0x7f0000000300)=0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001240)={0x1c, r4, 0x5, 0x0, 0x25dfdc01, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r4, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x9, 0x1}, {0x5c, 0x1}, {0x0, 0x4}], "df5f66ca4f0ec51d"}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x850) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001340), 0x3, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r5, 0x80083313, &(0x7f0000000000)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r5, 0xf502, 0x0) 09:57:57 executing program 1: ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000040)={'bond0\x00', @ifru_addrs=@l2={0x1f, 0x0, @none}}) madvise(&(0x7f0000904000/0x3000)=nil, 0x3000, 0x10) mlock(&(0x7f0000f13000/0x1000)=nil, 0x1000) mlock2(&(0x7f00008b6000/0x2000)=nil, 0x2000, 0x0) madvise(&(0x7f00008b6000/0x3000)=nil, 0x3000, 0x12) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) mremap(&(0x7f00008b6000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00008f9000/0x4000)=nil) 09:57:57 executing program 2: r0 = epoll_create1(0x0) r1 = eventfd(0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) read$eventfd(r1, &(0x7f00000010c0), 0x8) 09:57:57 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001140)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0}) 09:57:57 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)={0x20, r1, 0xb341daa0822653b3, 0x0, 0x0, {0x19}, [@ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}}, 0x0) 09:57:57 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8918, &(0x7f0000000080)={@ipv4, 0x0, r2}) [ 149.548747] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2 [ 149.600330] random: crng reseeded on system resumption [ 150.120121] audit: type=1326 audit(1768298278.023:14): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4350 comm="syz-executor.5" exe="/syz-executor.5" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f57f7da0b19 code=0x0 09:57:58 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = timerfd_create(0x0, 0x0) timerfd_gettime(r0, &(0x7f0000000000)) 09:57:58 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="06", 0x1}], 0x1}, 0x40011) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xb) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 09:57:58 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001140)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0}) 09:57:58 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) shutdown(r0, 0x0) 09:57:58 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)={0x20, r1, 0xb341daa0822653b3, 0x0, 0x0, {0x19}, [@ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}}, 0x0) 09:57:58 executing program 4: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x2) fallocate(r0, 0x20, 0x0, 0x10100000000) 09:57:58 executing program 5: timer_create(0x3, 0x0, &(0x7f0000000100)) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) timer_delete(0x0) 09:57:58 executing program 6: r0 = creat(&(0x7f00000000c0)='./file1\x00', 0x0) fcntl$setlease(r0, 0x400, 0x1) fcntl$setown(r0, 0x8, 0xffffffffffffffff) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xa02, 0x0) [ 150.236068] audit: type=1326 audit(1768298278.139:15): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4399 comm="syz-executor.5" exe="/syz-executor.5" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f57f7da0b19 code=0x0 09:57:58 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r0, 0x1, 0x3d, &(0x7f0000000040)=""/38, &(0x7f0000000080)=0x26) 09:57:58 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_GET_PACK_ID(r0, 0x227e, &(0x7f0000001400)) 09:57:58 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = timerfd_create(0x0, 0x0) timerfd_gettime(r0, &(0x7f0000000000)) 09:57:58 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="06", 0x1}], 0x1}, 0x40011) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xb) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 09:57:58 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) io_submit(r0, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x2000000}]) 09:57:58 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r0, 0x1, 0x3d, &(0x7f0000000040)=""/38, &(0x7f0000000080)=0x26) 09:57:58 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x3c}, 0x0, @in=@empty}}, 0xe8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}}, 0x1c) 09:57:58 executing program 4: r0 = syz_io_uring_setup(0x77bc, &(0x7f0000000080), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000001240)) r1 = fcntl$dupfd(r0, 0x0, r0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x16, &(0x7f0000000380)=[{0x0}], 0x1) 09:57:58 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="06", 0x1}], 0x1}, 0x40011) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xb) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 09:57:58 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x7, &(0x7f00000000c0), 0x0) dup(r0) 09:57:58 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x0) link(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file1\x00') 09:57:58 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r0, 0x1, 0x3d, &(0x7f0000000040)=""/38, &(0x7f0000000080)=0x26) 09:57:58 executing program 7: prctl$PR_SET_SECUREBITS(0x1c, 0x36) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setfsuid(r0) 09:57:58 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = timerfd_create(0x0, 0x0) timerfd_gettime(r0, &(0x7f0000000000)) 09:57:58 executing program 5: timer_create(0x3, 0x0, &(0x7f0000000100)) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) timer_delete(0x0) 09:57:58 executing program 6: madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x66) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000f65000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 151.164130] audit: type=1326 audit(1768298279.066:16): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4432 comm="syz-executor.5" exe="/syz-executor.5" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f57f7da0b19 code=0x0 09:57:59 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = timerfd_create(0x0, 0x0) timerfd_gettime(r0, &(0x7f0000000000)) 09:57:59 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r0, 0x1, 0x3d, &(0x7f0000000040)=""/38, &(0x7f0000000080)=0x26) 09:57:59 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="06", 0x1}], 0x1}, 0x40011) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xb) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 09:57:59 executing program 4: r0 = getpid() r1 = pidfd_open(r0, 0x0) fsetxattr$trusted_overlay_opaque(r1, &(0x7f0000000000), 0x0, 0x0, 0x0) r2 = getpid() r3 = pidfd_open(r2, 0x0) fsetxattr$trusted_overlay_opaque(r3, &(0x7f0000000000), 0x0, 0x0, 0x0) 09:57:59 executing program 2: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448f0, &(0x7f0000000200)) 09:57:59 executing program 7: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000040)={0xb3}) utime(&(0x7f00000000c0)='./file0\x00', 0x0) 09:57:59 executing program 6: madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x66) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000f65000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:57:59 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000001300)={0x14, r2, 0xc23adcfda61e8fd3, 0x0, 0x0, {0x26}}, 0x14}}, 0x0) 09:57:59 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000080), 0x10, 0x1972) 09:57:59 executing program 7: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) poll(&(0x7f0000000300)=[{r0}], 0x1, 0x0) 09:57:59 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) sync_file_range(r0, 0x0, 0x0, 0x0) [ 152.172973] Bluetooth: hci0: Opcode 0x0401 failed: -4 09:58:00 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff4000}]}) r0 = getpgid(0x0) sched_rr_get_interval(r0, &(0x7f0000000000)) 09:58:00 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz0\x00', 0x1ff) uname(&(0x7f0000000400)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x1ff) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.net/syz1\x00', 0x1ff) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) copy_file_range(r1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = syz_open_procfs(0x0, 0x0) r3 = pidfd_getfd(r2, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000340)={0x0}, &(0x7f0000000380)=0xc) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x40, 0x4, 0x80, 0x1, 0x0, 0x0, 0xc970, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000004c0)}, 0x0, 0xfffffffffffffffd, 0x765c, 0x0, 0x1, 0x79, 0x3ff, 0x0, 0x1, 0x0, 0x2}, r4, 0x8, 0xffffffffffffffff, 0x3) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x1ff) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000180)) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 09:58:00 executing program 2: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/udplite\x00') perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x86, 0x1, 0x9, 0x0, 0x1f, 0x80, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_config_ext={0x3, 0x9}, 0xc040, 0x102, 0x7, 0x5, 0x80000000, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc000000000000}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0xe7, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in6={{0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0xffffffff}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003040)=[{{0x0, 0x0, &(0x7f0000000500)}}, {{0x0, 0x0, &(0x7f0000000700)}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000a00)="06", 0x1}], 0x1}}], 0x3, 0x44894) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e24, 0x400, @remote, 0x3f}, 0x1c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e21, 0x5, @private1, 0xfffffff9}, 0x1c) shutdown(r1, 0x1) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x20, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, 0x15aa}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 09:58:00 executing program 6: madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x66) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000f65000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:58:00 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x80045439, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCGSID(r0, 0x5429, 0x0) 09:58:00 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000080), 0x10, 0x1972) 09:58:00 executing program 0: r0 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000c12000/0x2000)=nil, 0x6000) shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x0) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0xd) syz_emit_vhci(&(0x7f00000005c0)=ANY=[@ANYBLOB="02c850fb00ff00010003060800080004000755660452f892af52401e8c9d04c0f44bbe3f25dd417db52a9382732b41dfb114d315505ae60bc96c79ec94e5bf03997c624accbc2bedca2bdc8baaf59e7a05618a7e0df4b952a2e2b4ef1957137b16895dc6b4f4bcec10287fbcc129446156b17db0cc2b0652f987dda008fd8fc3279de90b097df9bd9bb1b433844877225a9d0dba70f8a0062554de8e5f19d5af5a408dcb993988542b66d1de94dfcda2ec11782fdcb321696d696c94e6104a1b4058e66ac72778976ac9d8cb72c36643b534de8ab9df209f93b9435a2dc12225b7e863b0ec65000000000000"], 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x1}, {0x4, 0x0, 0x419}}}, 0x7) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x2082, 0x0) syz_emit_vhci(&(0x7f00000004c0)=ANY=[@ANYBLOB="321363f43dc6d3e0f3b9cf06fc87f323248c2b57e070ac26f9a26255b1cad8655e6f0112cb15146e2824d010713cd699c9be57de231a4f814b5b814ed6dcd4e7122023ea8c41f666b6ded65d924eaaaaa749c14580a64b88b6d9bb4b677771e5628601d8d0c61bf3f3b34ab38ec0a9594000f677d8b34c20806bda7217c2996ca5ced11f8b8a9ba2eac472c4787f8162d240db8b45072a51252fa7da38cd717bd180df7cee076d6044af8f7eabe38198316e1385764ce9b81d05"], 0x6) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xffff, 0x10001, &(0x7f0000000300)) getdents64(r1, &(0x7f00000000c0)=""/107, 0x6b) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x2, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_ecred_conn_rsp={{0x18, 0x7, 0xa}, {0x100, 0x0, 0xffde, 0x0, [0x9]}}}}, 0x17) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000006c0)=ANY=[@ANYBLOB="03c9008762fa9762e3b6e3fe088d941122be93b738e38a3043da75b42cbe7d0e20511e6c8e0a4b48e14c2a1a03a177cbb1ae17e4f63bfdd7d65a4bcd11731de5c46ab42e0e82c090243795a4ebab739c9ad97a94011e5189ef74a30435ef98b564ab775e28b9e0fe5b95d557e4d4022e74c30a2962f2738f548cd5c71a753ae54d6d9a8d6c3ffec5f4c14224e8e6f4a6ef72c4aca50afc8b8f874b193e783c873c20c31b619fe38639af5618e1f26e1e2023863fc549dd729b43f5937251e037d4e552d6"], 0x8b) r2 = syz_open_dev$sg(&(0x7f0000002ac0), 0xffffffff, 0x84041) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"]) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="02c91010bbc3a50007ca663560000000002000f50000000000000000ed3cc8705b352a2d6679825c04d9d9e92b09c5a21524cbb7c94993159e49bff2a084a347da177c870dc886f77f7a72a4a0f418a58e37bbcc39a405b7b7d4d1bf0aa4ba48ccfc50c03eebb06b5fdbaa8bee1f2913d84e753cdc28534cfb9ba948f0fdf8fa3d3a2669674a51a70de60ff1e75b4a"], 0x15) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="02c9000000131b02ffff000251d0dde19505a5cf7c246cce803cc572ab0614e00b1914d45efb5286b3347e5e1a5fa84e00aaa680989bfc17367dfbaf106668286754aa0d"], 0xf) clone(0xa805ed00, 0x0, &(0x7f0000000140), 0x0, 0x0) 09:58:00 executing program 5: timer_create(0x3, 0x0, &(0x7f0000000100)) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) timer_delete(0x0) [ 152.280188] audit: type=1326 audit(1768298280.183:17): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4482 comm="syz-executor.5" exe="/syz-executor.5" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f57f7da0b19 code=0x0 [ 152.283037] Bluetooth: unknown link type 6 [ 152.283908] Bluetooth: hci1: connection err: -111 09:58:00 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001880)='/proc/locks\x00', 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/249, 0xf9}], 0x1) fcntl$setlease(r0, 0x400, 0x2) [ 152.304299] Bluetooth: Unexpected continuation frame (len 16) [ 152.308112] Bluetooth: unknown link type 6 [ 152.308882] Bluetooth: hci1: connection err: -111 [ 152.317034] Bluetooth: Unexpected start frame (len 10) 09:58:00 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x80045439, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCGSID(r0, 0x5429, 0x0) 09:58:00 executing program 6: madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x66) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000f65000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:58:00 executing program 0: r0 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000c12000/0x2000)=nil, 0x6000) shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x0) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0xd) syz_emit_vhci(&(0x7f00000005c0)=ANY=[@ANYBLOB="02c850fb00ff00010003060800080004000755660452f892af52401e8c9d04c0f44bbe3f25dd417db52a9382732b41dfb114d315505ae60bc96c79ec94e5bf03997c624accbc2bedca2bdc8baaf59e7a05618a7e0df4b952a2e2b4ef1957137b16895dc6b4f4bcec10287fbcc129446156b17db0cc2b0652f987dda008fd8fc3279de90b097df9bd9bb1b433844877225a9d0dba70f8a0062554de8e5f19d5af5a408dcb993988542b66d1de94dfcda2ec11782fdcb321696d696c94e6104a1b4058e66ac72778976ac9d8cb72c36643b534de8ab9df209f93b9435a2dc12225b7e863b0ec65000000000000"], 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x1}, {0x4, 0x0, 0x419}}}, 0x7) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x2082, 0x0) syz_emit_vhci(&(0x7f00000004c0)=ANY=[@ANYBLOB="321363f43dc6d3e0f3b9cf06fc87f323248c2b57e070ac26f9a26255b1cad8655e6f0112cb15146e2824d010713cd699c9be57de231a4f814b5b814ed6dcd4e7122023ea8c41f666b6ded65d924eaaaaa749c14580a64b88b6d9bb4b677771e5628601d8d0c61bf3f3b34ab38ec0a9594000f677d8b34c20806bda7217c2996ca5ced11f8b8a9ba2eac472c4787f8162d240db8b45072a51252fa7da38cd717bd180df7cee076d6044af8f7eabe38198316e1385764ce9b81d05"], 0x6) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xffff, 0x10001, &(0x7f0000000300)) getdents64(r1, &(0x7f00000000c0)=""/107, 0x6b) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x2, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_ecred_conn_rsp={{0x18, 0x7, 0xa}, {0x100, 0x0, 0xffde, 0x0, [0x9]}}}}, 0x17) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000006c0)=ANY=[@ANYBLOB="03c9008762fa9762e3b6e3fe088d941122be93b738e38a3043da75b42cbe7d0e20511e6c8e0a4b48e14c2a1a03a177cbb1ae17e4f63bfdd7d65a4bcd11731de5c46ab42e0e82c090243795a4ebab739c9ad97a94011e5189ef74a30435ef98b564ab775e28b9e0fe5b95d557e4d4022e74c30a2962f2738f548cd5c71a753ae54d6d9a8d6c3ffec5f4c14224e8e6f4a6ef72c4aca50afc8b8f874b193e783c873c20c31b619fe38639af5618e1f26e1e2023863fc549dd729b43f5937251e037d4e552d6"], 0x8b) r2 = syz_open_dev$sg(&(0x7f0000002ac0), 0xffffffff, 0x84041) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"]) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="02c91010bbc3a50007ca663560000000002000f50000000000000000ed3cc8705b352a2d6679825c04d9d9e92b09c5a21524cbb7c94993159e49bff2a084a347da177c870dc886f77f7a72a4a0f418a58e37bbcc39a405b7b7d4d1bf0aa4ba48ccfc50c03eebb06b5fdbaa8bee1f2913d84e753cdc28534cfb9ba948f0fdf8fa3d3a2669674a51a70de60ff1e75b4a"], 0x15) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="02c9000000131b02ffff000251d0dde19505a5cf7c246cce803cc572ab0614e00b1914d45efb5286b3347e5e1a5fa84e00aaa680989bfc17367dfbaf106668286754aa0d"], 0xf) clone(0xa805ed00, 0x0, &(0x7f0000000140), 0x0, 0x0) 09:58:00 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000080), 0x10, 0x1972) [ 152.502711] Bluetooth: unknown link type 6 [ 152.503481] Bluetooth: hci1: connection err: -111 [ 152.508892] Bluetooth: Unexpected start frame (len 10) 09:58:01 executing program 2: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/udplite\x00') perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x86, 0x1, 0x9, 0x0, 0x1f, 0x80, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_config_ext={0x3, 0x9}, 0xc040, 0x102, 0x7, 0x5, 0x80000000, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc000000000000}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0xe7, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in6={{0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0xffffffff}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003040)=[{{0x0, 0x0, &(0x7f0000000500)}}, {{0x0, 0x0, &(0x7f0000000700)}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000a00)="06", 0x1}], 0x1}}], 0x3, 0x44894) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e24, 0x400, @remote, 0x3f}, 0x1c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e21, 0x5, @private1, 0xfffffff9}, 0x1c) shutdown(r1, 0x1) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x20, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, 0x15aa}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 09:58:01 executing program 0: r0 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000c12000/0x2000)=nil, 0x6000) shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x0) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0xd) syz_emit_vhci(&(0x7f00000005c0)=ANY=[@ANYBLOB="02c850fb00ff00010003060800080004000755660452f892af52401e8c9d04c0f44bbe3f25dd417db52a9382732b41dfb114d315505ae60bc96c79ec94e5bf03997c624accbc2bedca2bdc8baaf59e7a05618a7e0df4b952a2e2b4ef1957137b16895dc6b4f4bcec10287fbcc129446156b17db0cc2b0652f987dda008fd8fc3279de90b097df9bd9bb1b433844877225a9d0dba70f8a0062554de8e5f19d5af5a408dcb993988542b66d1de94dfcda2ec11782fdcb321696d696c94e6104a1b4058e66ac72778976ac9d8cb72c36643b534de8ab9df209f93b9435a2dc12225b7e863b0ec65000000000000"], 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x1}, {0x4, 0x0, 0x419}}}, 0x7) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x2082, 0x0) syz_emit_vhci(&(0x7f00000004c0)=ANY=[@ANYBLOB="321363f43dc6d3e0f3b9cf06fc87f323248c2b57e070ac26f9a26255b1cad8655e6f0112cb15146e2824d010713cd699c9be57de231a4f814b5b814ed6dcd4e7122023ea8c41f666b6ded65d924eaaaaa749c14580a64b88b6d9bb4b677771e5628601d8d0c61bf3f3b34ab38ec0a9594000f677d8b34c20806bda7217c2996ca5ced11f8b8a9ba2eac472c4787f8162d240db8b45072a51252fa7da38cd717bd180df7cee076d6044af8f7eabe38198316e1385764ce9b81d05"], 0x6) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xffff, 0x10001, &(0x7f0000000300)) getdents64(r1, &(0x7f00000000c0)=""/107, 0x6b) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x2, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_ecred_conn_rsp={{0x18, 0x7, 0xa}, {0x100, 0x0, 0xffde, 0x0, [0x9]}}}}, 0x17) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000006c0)=ANY=[@ANYBLOB="03c9008762fa9762e3b6e3fe088d941122be93b738e38a3043da75b42cbe7d0e20511e6c8e0a4b48e14c2a1a03a177cbb1ae17e4f63bfdd7d65a4bcd11731de5c46ab42e0e82c090243795a4ebab739c9ad97a94011e5189ef74a30435ef98b564ab775e28b9e0fe5b95d557e4d4022e74c30a2962f2738f548cd5c71a753ae54d6d9a8d6c3ffec5f4c14224e8e6f4a6ef72c4aca50afc8b8f874b193e783c873c20c31b619fe38639af5618e1f26e1e2023863fc549dd729b43f5937251e037d4e552d6"], 0x8b) r2 = syz_open_dev$sg(&(0x7f0000002ac0), 0xffffffff, 0x84041) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000c00)=ANY=[@ANYBLOB="01000000f9ffffffffffffff6b6e326bd9fd73d4575b613e156001a1bcb82504d2538542e12508e378d17f49a2520fe19f124e02b5c5a60c1cd855bf4a54046a303e2255695576692a499063f526d32697a6b4b396e1b9c2d85833aee1b2cfe7da60708f08fa4a67472c7ddd4a8952dda55c66381e02fb58d364e376821622590d362c64a7f5669248a56470f1f20a33bff41519e84535df75c1c62727d0d6630842d77e9f2dc67a98a1c160d5e310e308abc78c21341ed6e647b641c599801497194a422ab70c6b336c9bb6c39f2f26a27c2fcf0675a8e78bfefc407006685113a176738dd43b87c76f72c6b62d7a7f5dda270b366a0f42ea83e26d4b6f5671cdbced7f00000000"]) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="02c91010bbc3a50007ca663560000000002000f50000000000000000ed3cc8705b352a2d6679825c04d9d9e92b09c5a21524cbb7c94993159e49bff2a084a347da177c870dc886f77f7a72a4a0f418a58e37bbcc39a405b7b7d4d1bf0aa4ba48ccfc50c03eebb06b5fdbaa8bee1f2913d84e753cdc28534cfb9ba948f0fdf8fa3d3a2669674a51a70de60ff1e75b4a"], 0x15) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="02c9000000131b02ffff000251d0dde19505a5cf7c246cce803cc572ab0614e00b1914d45efb5286b3347e5e1a5fa84e00aaa680989bfc17367dfbaf106668286754aa0d"], 0xf) clone(0xa805ed00, 0x0, &(0x7f0000000140), 0x0, 0x0) 09:58:01 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x80045439, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCGSID(r0, 0x5429, 0x0) 09:58:01 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_score_adj\x00') readv(r0, &(0x7f0000001280)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1) 09:58:01 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000080), 0x10, 0x1972) 09:58:01 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/udplite\x00') perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x86, 0x1, 0x9, 0x0, 0x1f, 0x80, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_config_ext={0x3, 0x9}, 0xc040, 0x102, 0x7, 0x5, 0x80000000, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc000000000000}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0xe7, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in6={{0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0xffffffff}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003040)=[{{0x0, 0x0, &(0x7f0000000500)}}, {{0x0, 0x0, &(0x7f0000000700)}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000a00)="06", 0x1}], 0x1}}], 0x3, 0x44894) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e24, 0x400, @remote, 0x3f}, 0x1c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e21, 0x5, @private1, 0xfffffff9}, 0x1c) shutdown(r1, 0x1) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x20, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, 0x15aa}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 09:58:01 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x80045439, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCGSID(r0, 0x5429, 0x0) 09:58:01 executing program 5: syz_emit_ethernet(0x76, &(0x7f0000000140)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "282fb5de5f3e6b5f4d72be692def9b94"}, @md5sig={0x13, 0x12, "85cd0000009d23b3d2afc6d749000700"}, @generic={0x0, 0x12, "83e7b495cc08a927785573d24de4a122"}, @window={0x3, 0x3}, @eol, @fastopen={0x22, 0x3, "d8"}]}}}}}}}, 0x0) 09:58:01 executing program 3: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write(r0, &(0x7f00000000c0)="9030a2ff3eb58e44bb385dd1b9530054370b9d7f9e31de052125794071859595f3bbfb82af18f38fcbd1510809c0bd037c200bb3fec8337d1f74c52ec741e166285747fcb936be64e6c575fb4cbd77d6e0f4caf6134f1caab6fc7d4a563eb8d8a9c8d761d8cfdad00254c68287ff81700cc6ae8d02f7846d2359c35b7e8f6449bda5dafe89dabf5b8e714986ac39ca81112d74ff04492a3eedcd40b2a8337046611a35dd12", 0xa5) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)=0x8) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) r4 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0xeeb) ioctl$BTRFS_IOC_SUBVOL_CREATE(0xffffffffffffffff, 0x5000940e, &(0x7f0000000400)={{}, "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"}) r5 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r5, r6, 0x0, 0xa0103) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa0103) [ 153.216317] Bluetooth: unknown link type 6 [ 153.217037] Bluetooth: hci1: connection err: -111 09:58:01 executing program 6: clone3(&(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 153.235012] Bluetooth: Unexpected start frame (len 10) 09:58:01 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x80045439, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCGSID(r0, 0x5429, 0x0) 09:58:01 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0xaa, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0xfff, &(0x7f0000000040)) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x8b) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000380)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x800}}, './file0\x00'}) 09:58:01 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x80045439, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCGSID(r0, 0x5429, 0x0) 09:58:01 executing program 0: r0 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000c12000/0x2000)=nil, 0x6000) shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x0) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="04040aaaaab49ea900d79124062fb47a30282e79a7c31ecb01a6e019fa9e51d3c413f8014b069f47ec3276024d8c54f9cc8491d5d00932de6822e53e959eb570a27efd8c3471237c43278a5f6b895d968a61a6ae92351c42b6de5d6a98ebd1155d513c19ccc8c8979a85280b7ca364a122696b6aef6d97bf5ac0910ce4c391e0b9b01b6cc07baa06d352eaadb63c29823a1ec10270b2815007bee2454413106ad083ac96f4e98e9adc4356772fbe66746eb6f0802c9d7e4154d21df360e73e6b69a779ffded11c8b774475de5d9a03e95fac0a50fd67f4256c01eb6cbeed7f10d30ce6f94283b376095bd74148877ffa3f7354479626165dbded78773d801f8c45bf1bd052bdc2829c2451af9bf0af410c64f7df183ccb6574089bc0578c2d9601c00884dfe21bbc1ca1842ab79683188cb67ef6dbfe879955a4f33d0c8677c037dc8f884dd6d7d7af181f5d9c10ada2061bfab4961905059b65dd5604501e5b18f71467a5f8b0ad76c4c4d95086f0418e3a7f246681181d93c886ae90a7b6d062c20e7fc4eba56ea221b78347e735e6cbccc45b55e21888da2fa98d54a6f3e468e1af5c9bc72664b38438cf6d51bdb903565294ae502d2b3fbfa3da5dc5fb58c11fd1969e9ddb2914c3f2ac761cb46dcacf51b1131ef5eae2b62985754f86daa5705dec97205441dcdd8c591770f43b5e0143e5d24a06f6ac16cdde2c99bc7eb7fa5b003b26581fadb87e167280fce51ae57e"], 0xd) syz_emit_vhci(&(0x7f00000005c0)=ANY=[@ANYBLOB="02c850fb00ff00010003060800080004000755660452f892af52401e8c9d04c0f44bbe3f25dd417db52a9382732b41dfb114d315505ae60bc96c79ec94e5bf03997c624accbc2bedca2bdc8baaf59e7a05618a7e0df4b952a2e2b4ef1957137b16895dc6b4f4bcec10287fbcc129446156b17db0cc2b0652f987dda008fd8fc3279de90b097df9bd9bb1b433844877225a9d0dba70f8a0062554de8e5f19d5af5a408dcb993988542b66d1de94dfcda2ec11782fdcb321696d696c94e6104a1b4058e66ac72778976ac9d8cb72c36643b534de8ab9df209f93b9435a2dc12225b7e863b0ec65000000000000"], 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x1}, {0x4, 0x0, 0x419}}}, 0x7) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x2082, 0x0) syz_emit_vhci(&(0x7f00000004c0)=ANY=[@ANYBLOB="321363f43dc6d3e0f3b9cf06fc87f323248c2b57e070ac26f9a26255b1cad8655e6f0112cb15146e2824d010713cd699c9be57de231a4f814b5b814ed6dcd4e7122023ea8c41f666b6ded65d924eaaaaa749c14580a64b88b6d9bb4b677771e5628601d8d0c61bf3f3b34ab38ec0a9594000f677d8b34c20806bda7217c2996ca5ced11f8b8a9ba2eac472c4787f8162d240db8b45072a51252fa7da38cd717bd180df7cee076d6044af8f7eabe38198316e1385764ce9b81d05"], 0x6) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xffff, 0x10001, &(0x7f0000000300)) getdents64(r1, &(0x7f00000000c0)=""/107, 0x6b) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x2, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_ecred_conn_rsp={{0x18, 0x7, 0xa}, {0x100, 0x0, 0xffde, 0x0, [0x9]}}}}, 0x17) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000006c0)=ANY=[@ANYBLOB="03c9008762fa9762e3b6e3fe088d941122be93b738e38a3043da75b42cbe7d0e20511e6c8e0a4b48e14c2a1a03a177cbb1ae17e4f63bfdd7d65a4bcd11731de5c46ab42e0e82c090243795a4ebab739c9ad97a94011e5189ef74a30435ef98b564ab775e28b9e0fe5b95d557e4d4022e74c30a2962f2738f548cd5c71a753ae54d6d9a8d6c3ffec5f4c14224e8e6f4a6ef72c4aca50afc8b8f874b193e783c873c20c31b619fe38639af5618e1f26e1e2023863fc549dd729b43f5937251e037d4e552d6"], 0x8b) r2 = syz_open_dev$sg(&(0x7f0000002ac0), 0xffffffff, 0x84041) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"]) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="02c91010bbc3a50007ca663560000000002000f50000000000000000ed3cc8705b352a2d6679825c04d9d9e92b09c5a21524cbb7c94993159e49bff2a084a347da177c870dc886f77f7a72a4a0f418a58e37bbcc39a405b7b7d4d1bf0aa4ba48ccfc50c03eebb06b5fdbaa8bee1f2913d84e753cdc28534cfb9ba948f0fdf8fa3d3a2669674a51a70de60ff1e75b4a"], 0x15) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="02c9000000131b02ffff000251d0dde19505a5cf7c246cce803cc572ab0614e00b1914d45efb5286b3347e5e1a5fa84e00aaa680989bfc17367dfbaf106668286754aa0d"], 0xf) clone(0xa805ed00, 0x0, &(0x7f0000000140), 0x0, 0x0) 09:58:01 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x80045439, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCGSID(r0, 0x5429, 0x0) [ 153.369992] Bluetooth: hci0: command 0x0401 tx timeout [ 153.410427] Bluetooth: unknown link type 6 [ 153.411186] Bluetooth: hci1: connection err: -111 [ 153.444257] Bluetooth: Unexpected start frame (len 10) 09:58:01 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x50, 0x1, 0x2, 0x201, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x50}}, 0x0) 09:58:01 executing program 7: openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000140)}) 09:58:01 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/udplite\x00') perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x86, 0x1, 0x9, 0x0, 0x1f, 0x80, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_config_ext={0x3, 0x9}, 0xc040, 0x102, 0x7, 0x5, 0x80000000, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc000000000000}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0xe7, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in6={{0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0xffffffff}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003040)=[{{0x0, 0x0, &(0x7f0000000500)}}, {{0x0, 0x0, &(0x7f0000000700)}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000a00)="06", 0x1}], 0x1}}], 0x3, 0x44894) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e24, 0x400, @remote, 0x3f}, 0x1c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e21, 0x5, @private1, 0xfffffff9}, 0x1c) shutdown(r1, 0x1) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x20, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, 0x15aa}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 09:58:01 executing program 2: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/udplite\x00') perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x86, 0x1, 0x9, 0x0, 0x1f, 0x80, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_config_ext={0x3, 0x9}, 0xc040, 0x102, 0x7, 0x5, 0x80000000, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc000000000000}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0xe7, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in6={{0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0xffffffff}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003040)=[{{0x0, 0x0, &(0x7f0000000500)}}, {{0x0, 0x0, &(0x7f0000000700)}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000a00)="06", 0x1}], 0x1}}], 0x3, 0x44894) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e24, 0x400, @remote, 0x3f}, 0x1c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e21, 0x5, @private1, 0xfffffff9}, 0x1c) shutdown(r1, 0x1) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x20, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, 0x15aa}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 09:58:01 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a2d, &(0x7f0000000000), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x18, &(0x7f0000000640)=[{0x0}], 0x1) 09:58:01 executing program 0: syz_emit_ethernet(0x4e, &(0x7f0000000000)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x18, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], @mld={0x0, 0x0, 0x0, 0x0, 0x0, @mcast1}}}}}}, 0x0) 09:58:01 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='hugetlbfs\x00', 0x0, 0x0) r0 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0xa40024, &(0x7f0000000040)=ANY=[]) mknodat$loop(r0, &(0x7f0000000180)='./file0\x00', 0x0, 0x1) 09:58:01 executing program 7: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write(r0, &(0x7f00000000c0)="9030a2ff3eb58e44bb385dd1b9530054370b9d7f9e31de052125794071859595f3bbfb82af18f38fcbd1510809c0bd037c200bb3fec8337d1f74c52ec741e166285747fcb936be64e6c575fb4cbd77d6e0f4caf6134f1caab6fc7d4a563eb8d8a9c8d761d8cfdad00254c68287ff81700cc6ae8d02f7846d2359c35b7e8f6449bda5dafe89dabf5b8e714986ac39ca81112d74ff04492a3eedcd40b2a8337046611a35dd12", 0xa5) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)=0x8) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) r4 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0xeeb) ioctl$BTRFS_IOC_SUBVOL_CREATE(0xffffffffffffffff, 0x5000940e, &(0x7f0000000400)={{}, "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"}) r5 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r5, r6, 0x0, 0xa0103) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa0103) 09:58:01 executing program 3: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write(r0, &(0x7f00000000c0)="9030a2ff3eb58e44bb385dd1b9530054370b9d7f9e31de052125794071859595f3bbfb82af18f38fcbd1510809c0bd037c200bb3fec8337d1f74c52ec741e166285747fcb936be64e6c575fb4cbd77d6e0f4caf6134f1caab6fc7d4a563eb8d8a9c8d761d8cfdad00254c68287ff81700cc6ae8d02f7846d2359c35b7e8f6449bda5dafe89dabf5b8e714986ac39ca81112d74ff04492a3eedcd40b2a8337046611a35dd12", 0xa5) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)=0x8) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) r4 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0xeeb) ioctl$BTRFS_IOC_SUBVOL_CREATE(0xffffffffffffffff, 0x5000940e, &(0x7f0000000400)={{}, "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"}) r5 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r5, r6, 0x0, 0xa0103) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa0103) 09:58:01 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/udplite\x00') perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x86, 0x1, 0x9, 0x0, 0x1f, 0x80, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_config_ext={0x3, 0x9}, 0xc040, 0x102, 0x7, 0x5, 0x80000000, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc000000000000}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0xe7, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in6={{0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0xffffffff}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003040)=[{{0x0, 0x0, &(0x7f0000000500)}}, {{0x0, 0x0, &(0x7f0000000700)}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000a00)="06", 0x1}], 0x1}}], 0x3, 0x44894) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e24, 0x400, @remote, 0x3f}, 0x1c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e21, 0x5, @private1, 0xfffffff9}, 0x1c) shutdown(r1, 0x1) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x20, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, 0x15aa}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 09:58:01 executing program 2: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/udplite\x00') perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x86, 0x1, 0x9, 0x0, 0x1f, 0x80, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_config_ext={0x3, 0x9}, 0xc040, 0x102, 0x7, 0x5, 0x80000000, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc000000000000}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0xe7, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in6={{0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0xffffffff}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003040)=[{{0x0, 0x0, &(0x7f0000000500)}}, {{0x0, 0x0, &(0x7f0000000700)}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000a00)="06", 0x1}], 0x1}}], 0x3, 0x44894) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e24, 0x400, @remote, 0x3f}, 0x1c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e21, 0x5, @private1, 0xfffffff9}, 0x1c) shutdown(r1, 0x1) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x20, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, 0x15aa}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 09:58:01 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0xaa, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0xfff, &(0x7f0000000040)) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x8b) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000380)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x800}}, './file0\x00'}) 09:58:01 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0xaa, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0xfff, &(0x7f0000000040)) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x8b) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000380)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x800}}, './file0\x00'}) 09:58:01 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a2d, &(0x7f0000000000), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000080)) io_uring_register$IORING_REGIS VM DIAGNOSIS: 09:57:55 Registers: info registers vcpu 0 RAX=0000000000000001 RBX=0000000000000001 RCX=ffffffff84d1527e RDX=fffffbfff0b82d11 RSI=0000000000000004 RDI=ffffffff85c16880 RBP=ffffffff85c16880 RSP=ffff88804b11f950 R8 =0000000000000000 R9 =fffffbfff0b82d10 R10=ffffffff85c16883 R11=0000000000000000 R12=1ffff11009623f2b R13=0000000000000003 R14=fffffbfff0b82d10 R15=ffff88804b11f988 RIP=ffffffff84d15410 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000555584e70400 00000000 00000000 GS =0000 ffff8880e5342000 00000000 00000000 LDT=0000 fffffe3b00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f3ff1d7c543 CR3=0000000017dec000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000a60ce07b00000000cec3662e XMM01=000000000000000003515b82db34ca11 XMM02=0000000000000000333bebdfd0a6a21d XMM03=00000000000000000000000000000000 XMM04=000000ff0000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=000000000000000a RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff82977f45 RDI=ffffffff889c1a00 RBP=ffffffff889c19c0 RSP=ffff88804b0d74a8 R8 =0000000000000000 R9 =ffffed10015af046 R10=0000000000000001 R11=0000000020747562 R12=000000000000000a R13=0000000000000010 R14=ffffffff889c19c0 R15=ffffffff82977f30 RIP=ffffffff82977f9d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 000055558a1e5400 00000000 00000000 GS =0000 ffff8880e5442000 00000000 00000000 LDT=0000 fffffe5100000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fc9e5c87544 CR3=000000004b7f6000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000a60ce07b00000000cec3662e XMM01=000000000000000003515b82db34ca11 XMM02=0000000000000000333bebdfd0a6a21d XMM03=00000000000000000000000000000000 XMM04=000000ff0000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000