Warning: Permanently added '[localhost]:23446' (ECDSA) to the list of known hosts. 2026/01/15 09:19:28 fuzzer started 2026/01/15 09:19:29 dialing manager at localhost:35245 syzkaller login: [ 58.553938] cgroup: Unknown subsys name 'net' [ 58.610092] cgroup: Unknown subsys name 'cpuset' [ 58.621990] cgroup: Unknown subsys name 'rlimit' 2026/01/15 09:19:39 syscalls: 2214 2026/01/15 09:19:39 code coverage: enabled 2026/01/15 09:19:39 comparison tracing: enabled 2026/01/15 09:19:39 extra coverage: enabled 2026/01/15 09:19:39 setuid sandbox: enabled 2026/01/15 09:19:39 namespace sandbox: enabled 2026/01/15 09:19:39 Android sandbox: enabled 2026/01/15 09:19:39 fault injection: enabled 2026/01/15 09:19:39 leak checking: enabled 2026/01/15 09:19:39 net packet injection: enabled 2026/01/15 09:19:39 net device setup: enabled 2026/01/15 09:19:39 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2026/01/15 09:19:39 devlink PCI setup: PCI device 0000:00:10.0 is not available 2026/01/15 09:19:39 USB emulation: enabled 2026/01/15 09:19:39 hci packet injection: enabled 2026/01/15 09:19:39 wifi device emulation: enabled 2026/01/15 09:19:39 802.15.4 emulation: enabled 2026/01/15 09:19:39 fetching corpus: 0, signal 0/2000 (executing program) 2026/01/15 09:19:39 fetching corpus: 48, signal 26202/29714 (executing program) 2026/01/15 09:19:39 fetching corpus: 98, signal 37290/42283 (executing program) 2026/01/15 09:19:39 fetching corpus: 147, signal 46471/52801 (executing program) 2026/01/15 09:19:39 fetching corpus: 197, signal 51993/59668 (executing program) 2026/01/15 09:19:39 fetching corpus: 247, signal 57630/66586 (executing program) 2026/01/15 09:19:39 fetching corpus: 297, signal 62493/72653 (executing program) 2026/01/15 09:19:39 fetching corpus: 347, signal 65942/77334 (executing program) 2026/01/15 09:19:40 fetching corpus: 397, signal 70726/83150 (executing program) 2026/01/15 09:19:40 fetching corpus: 447, signal 73840/87357 (executing program) 2026/01/15 09:19:40 fetching corpus: 497, signal 76115/90770 (executing program) 2026/01/15 09:19:40 fetching corpus: 547, signal 79304/94937 (executing program) 2026/01/15 09:19:40 fetching corpus: 597, signal 82036/98660 (executing program) 2026/01/15 09:19:40 fetching corpus: 647, signal 84743/102276 (executing program) 2026/01/15 09:19:40 fetching corpus: 697, signal 87308/105753 (executing program) 2026/01/15 09:19:40 fetching corpus: 747, signal 89853/109191 (executing program) 2026/01/15 09:19:40 fetching corpus: 797, signal 92455/112641 (executing program) 2026/01/15 09:19:41 fetching corpus: 847, signal 94938/115954 (executing program) 2026/01/15 09:19:41 fetching corpus: 896, signal 96955/118801 (executing program) 2026/01/15 09:19:41 fetching corpus: 946, signal 99213/121788 (executing program) 2026/01/15 09:19:41 fetching corpus: 996, signal 100086/123617 (executing program) 2026/01/15 09:19:41 fetching corpus: 1046, signal 104326/128110 (executing program) 2026/01/15 09:19:41 fetching corpus: 1096, signal 105716/130311 (executing program) 2026/01/15 09:19:41 fetching corpus: 1146, signal 107900/133084 (executing program) 2026/01/15 09:19:41 fetching corpus: 1195, signal 109617/135514 (executing program) 2026/01/15 09:19:42 fetching corpus: 1244, signal 111025/137629 (executing program) 2026/01/15 09:19:42 fetching corpus: 1294, signal 113009/140119 (executing program) 2026/01/15 09:19:42 fetching corpus: 1344, signal 115318/142900 (executing program) 2026/01/15 09:19:42 fetching corpus: 1394, signal 116607/144845 (executing program) 2026/01/15 09:19:42 fetching corpus: 1444, signal 118845/147446 (executing program) 2026/01/15 09:19:42 fetching corpus: 1494, signal 119942/149205 (executing program) 2026/01/15 09:19:42 fetching corpus: 1544, signal 120998/150909 (executing program) 2026/01/15 09:19:42 fetching corpus: 1592, signal 122295/152765 (executing program) 2026/01/15 09:19:42 fetching corpus: 1642, signal 123642/154556 (executing program) 2026/01/15 09:19:43 fetching corpus: 1692, signal 125269/156603 (executing program) 2026/01/15 09:19:43 fetching corpus: 1742, signal 126256/158157 (executing program) 2026/01/15 09:19:43 fetching corpus: 1792, signal 127148/159662 (executing program) 2026/01/15 09:19:43 fetching corpus: 1842, signal 128356/161325 (executing program) 2026/01/15 09:19:43 fetching corpus: 1892, signal 129471/162910 (executing program) 2026/01/15 09:19:43 fetching corpus: 1942, signal 130313/164342 (executing program) 2026/01/15 09:19:43 fetching corpus: 1992, signal 131446/165950 (executing program) 2026/01/15 09:19:43 fetching corpus: 2042, signal 132752/167584 (executing program) 2026/01/15 09:19:43 fetching corpus: 2092, signal 133522/168931 (executing program) 2026/01/15 09:19:43 fetching corpus: 2142, signal 134408/170256 (executing program) 2026/01/15 09:19:44 fetching corpus: 2192, signal 135597/171767 (executing program) 2026/01/15 09:19:44 fetching corpus: 2242, signal 136498/173073 (executing program) 2026/01/15 09:19:44 fetching corpus: 2292, signal 137897/174763 (executing program) 2026/01/15 09:19:44 fetching corpus: 2342, signal 139134/176239 (executing program) 2026/01/15 09:19:44 fetching corpus: 2392, signal 140217/177605 (executing program) 2026/01/15 09:19:44 fetching corpus: 2442, signal 141133/178897 (executing program) 2026/01/15 09:19:44 fetching corpus: 2492, signal 142142/180205 (executing program) 2026/01/15 09:19:44 fetching corpus: 2542, signal 143273/181609 (executing program) 2026/01/15 09:19:44 fetching corpus: 2592, signal 143995/182752 (executing program) 2026/01/15 09:19:45 fetching corpus: 2642, signal 145941/184506 (executing program) 2026/01/15 09:19:45 fetching corpus: 2691, signal 146926/185755 (executing program) 2026/01/15 09:19:45 fetching corpus: 2741, signal 147734/186864 (executing program) 2026/01/15 09:19:45 fetching corpus: 2791, signal 148911/188185 (executing program) 2026/01/15 09:19:45 fetching corpus: 2841, signal 149480/189105 (executing program) 2026/01/15 09:19:45 fetching corpus: 2891, signal 150117/190121 (executing program) 2026/01/15 09:19:45 fetching corpus: 2941, signal 151303/191367 (executing program) 2026/01/15 09:19:45 fetching corpus: 2991, signal 152537/192575 (executing program) 2026/01/15 09:19:45 fetching corpus: 3041, signal 153597/193708 (executing program) 2026/01/15 09:19:46 fetching corpus: 3091, signal 154612/194824 (executing program) 2026/01/15 09:19:46 fetching corpus: 3141, signal 155277/195731 (executing program) 2026/01/15 09:19:46 fetching corpus: 3191, signal 155881/196583 (executing program) 2026/01/15 09:19:46 fetching corpus: 3241, signal 156609/197515 (executing program) 2026/01/15 09:19:46 fetching corpus: 3291, signal 157526/198509 (executing program) 2026/01/15 09:19:46 fetching corpus: 3341, signal 158166/199386 (executing program) 2026/01/15 09:19:46 fetching corpus: 3391, signal 158833/200231 (executing program) 2026/01/15 09:19:46 fetching corpus: 3441, signal 159790/201182 (executing program) 2026/01/15 09:19:46 fetching corpus: 3490, signal 160271/201941 (executing program) 2026/01/15 09:19:47 fetching corpus: 3540, signal 161026/202786 (executing program) 2026/01/15 09:19:47 fetching corpus: 3590, signal 161753/203619 (executing program) 2026/01/15 09:19:47 fetching corpus: 3640, signal 162261/204373 (executing program) 2026/01/15 09:19:47 fetching corpus: 3690, signal 162759/205142 (executing program) 2026/01/15 09:19:47 fetching corpus: 3739, signal 163403/205960 (executing program) 2026/01/15 09:19:47 fetching corpus: 3789, signal 164238/206778 (executing program) 2026/01/15 09:19:47 fetching corpus: 3839, signal 164743/207516 (executing program) 2026/01/15 09:19:47 fetching corpus: 3889, signal 165249/208255 (executing program) 2026/01/15 09:19:47 fetching corpus: 3939, signal 165929/208996 (executing program) 2026/01/15 09:19:47 fetching corpus: 3988, signal 166516/209656 (executing program) 2026/01/15 09:19:48 fetching corpus: 4037, signal 167007/210330 (executing program) 2026/01/15 09:19:48 fetching corpus: 4084, signal 167612/211036 (executing program) 2026/01/15 09:19:48 fetching corpus: 4133, signal 168088/211655 (executing program) 2026/01/15 09:19:48 fetching corpus: 4183, signal 168950/212398 (executing program) 2026/01/15 09:19:48 fetching corpus: 4232, signal 169364/213037 (executing program) 2026/01/15 09:19:48 fetching corpus: 4282, signal 169914/213647 (executing program) 2026/01/15 09:19:48 fetching corpus: 4332, signal 170434/214276 (executing program) 2026/01/15 09:19:48 fetching corpus: 4382, signal 171597/215011 (executing program) 2026/01/15 09:19:49 fetching corpus: 4432, signal 172027/215626 (executing program) 2026/01/15 09:19:49 fetching corpus: 4482, signal 172517/216201 (executing program) 2026/01/15 09:19:49 fetching corpus: 4531, signal 173134/216828 (executing program) 2026/01/15 09:19:49 fetching corpus: 4580, signal 173510/217377 (executing program) 2026/01/15 09:19:49 fetching corpus: 4629, signal 174055/217925 (executing program) 2026/01/15 09:19:49 fetching corpus: 4679, signal 174424/218450 (executing program) 2026/01/15 09:19:49 fetching corpus: 4729, signal 175041/218967 (executing program) 2026/01/15 09:19:49 fetching corpus: 4779, signal 175504/219476 (executing program) 2026/01/15 09:19:49 fetching corpus: 4828, signal 176139/219998 (executing program) 2026/01/15 09:19:49 fetching corpus: 4878, signal 176610/220488 (executing program) 2026/01/15 09:19:50 fetching corpus: 4927, signal 176960/220964 (executing program) 2026/01/15 09:19:50 fetching corpus: 4977, signal 177338/221444 (executing program) 2026/01/15 09:19:50 fetching corpus: 5027, signal 177786/221953 (executing program) 2026/01/15 09:19:50 fetching corpus: 5077, signal 178290/222421 (executing program) 2026/01/15 09:19:50 fetching corpus: 5127, signal 178651/222864 (executing program) 2026/01/15 09:19:50 fetching corpus: 5177, signal 179130/223347 (executing program) 2026/01/15 09:19:50 fetching corpus: 5225, signal 179506/223783 (executing program) 2026/01/15 09:19:50 fetching corpus: 5275, signal 179980/224223 (executing program) 2026/01/15 09:19:50 fetching corpus: 5325, signal 180421/224687 (executing program) 2026/01/15 09:19:51 fetching corpus: 5373, signal 180788/225121 (executing program) 2026/01/15 09:19:51 fetching corpus: 5423, signal 181233/225551 (executing program) 2026/01/15 09:19:51 fetching corpus: 5473, signal 181796/225925 (executing program) 2026/01/15 09:19:51 fetching corpus: 5523, signal 182177/226340 (executing program) 2026/01/15 09:19:51 fetching corpus: 5573, signal 182555/226732 (executing program) 2026/01/15 09:19:51 fetching corpus: 5623, signal 183105/226732 (executing program) 2026/01/15 09:19:51 fetching corpus: 5673, signal 183520/226742 (executing program) 2026/01/15 09:19:51 fetching corpus: 5723, signal 183928/226763 (executing program) 2026/01/15 09:19:51 fetching corpus: 5773, signal 184468/226769 (executing program) 2026/01/15 09:19:52 fetching corpus: 5823, signal 184816/226770 (executing program) 2026/01/15 09:19:52 fetching corpus: 5873, signal 185239/226770 (executing program) 2026/01/15 09:19:52 fetching corpus: 5923, signal 185739/226774 (executing program) 2026/01/15 09:19:52 fetching corpus: 5973, signal 186123/226779 (executing program) 2026/01/15 09:19:52 fetching corpus: 6022, signal 186530/226779 (executing program) 2026/01/15 09:19:52 fetching corpus: 6072, signal 187001/226779 (executing program) 2026/01/15 09:19:52 fetching corpus: 6122, signal 187286/226788 (executing program) 2026/01/15 09:19:52 fetching corpus: 6172, signal 187635/226789 (executing program) 2026/01/15 09:19:52 fetching corpus: 6220, signal 187947/226795 (executing program) 2026/01/15 09:19:53 fetching corpus: 6270, signal 188393/226798 (executing program) 2026/01/15 09:19:53 fetching corpus: 6320, signal 188772/226798 (executing program) 2026/01/15 09:19:53 fetching corpus: 6370, signal 189164/226798 (executing program) 2026/01/15 09:19:53 fetching corpus: 6420, signal 189757/226821 (executing program) 2026/01/15 09:19:53 fetching corpus: 6470, signal 190183/226821 (executing program) 2026/01/15 09:19:53 fetching corpus: 6520, signal 190558/226821 (executing program) 2026/01/15 09:19:53 fetching corpus: 6570, signal 190894/226821 (executing program) 2026/01/15 09:19:53 fetching corpus: 6620, signal 191339/226823 (executing program) 2026/01/15 09:19:53 fetching corpus: 6670, signal 191654/226823 (executing program) 2026/01/15 09:19:53 fetching corpus: 6720, signal 192194/226825 (executing program) 2026/01/15 09:19:54 fetching corpus: 6770, signal 192714/226825 (executing program) 2026/01/15 09:19:54 fetching corpus: 6820, signal 193072/226830 (executing program) 2026/01/15 09:19:54 fetching corpus: 6869, signal 193317/226830 (executing program) 2026/01/15 09:19:54 fetching corpus: 6919, signal 193666/226830 (executing program) 2026/01/15 09:19:54 fetching corpus: 6969, signal 194212/226854 (executing program) 2026/01/15 09:19:54 fetching corpus: 7019, signal 194578/226854 (executing program) 2026/01/15 09:19:54 fetching corpus: 7069, signal 194875/226855 (executing program) 2026/01/15 09:19:54 fetching corpus: 7119, signal 195196/226856 (executing program) 2026/01/15 09:19:54 fetching corpus: 7169, signal 195641/226857 (executing program) 2026/01/15 09:19:54 fetching corpus: 7219, signal 195950/226858 (executing program) 2026/01/15 09:19:54 fetching corpus: 7269, signal 196437/226858 (executing program) 2026/01/15 09:19:55 fetching corpus: 7319, signal 196938/226858 (executing program) 2026/01/15 09:19:55 fetching corpus: 7369, signal 197248/226858 (executing program) 2026/01/15 09:19:55 fetching corpus: 7419, signal 197506/226863 (executing program) 2026/01/15 09:19:55 fetching corpus: 7469, signal 197908/226863 (executing program) 2026/01/15 09:19:55 fetching corpus: 7518, signal 198326/226863 (executing program) 2026/01/15 09:19:55 fetching corpus: 7568, signal 198695/226863 (executing program) 2026/01/15 09:19:55 fetching corpus: 7617, signal 198977/226863 (executing program) 2026/01/15 09:19:55 fetching corpus: 7667, signal 199261/226868 (executing program) 2026/01/15 09:19:55 fetching corpus: 7717, signal 199475/226870 (executing program) 2026/01/15 09:19:56 fetching corpus: 7766, signal 199763/226875 (executing program) 2026/01/15 09:19:56 fetching corpus: 7815, signal 200127/226877 (executing program) 2026/01/15 09:19:56 fetching corpus: 7864, signal 200568/226878 (executing program) 2026/01/15 09:19:56 fetching corpus: 7914, signal 200799/226878 (executing program) 2026/01/15 09:19:56 fetching corpus: 7963, signal 201073/226878 (executing program) 2026/01/15 09:19:56 fetching corpus: 8013, signal 201342/226883 (executing program) 2026/01/15 09:19:56 fetching corpus: 8063, signal 201587/226883 (executing program) 2026/01/15 09:19:56 fetching corpus: 8112, signal 201819/226883 (executing program) 2026/01/15 09:19:56 fetching corpus: 8162, signal 202085/226883 (executing program) 2026/01/15 09:19:56 fetching corpus: 8212, signal 202425/226891 (executing program) 2026/01/15 09:19:57 fetching corpus: 8262, signal 202665/226891 (executing program) 2026/01/15 09:19:57 fetching corpus: 8312, signal 202938/226891 (executing program) 2026/01/15 09:19:57 fetching corpus: 8362, signal 203282/226891 (executing program) 2026/01/15 09:19:57 fetching corpus: 8412, signal 203505/226891 (executing program) 2026/01/15 09:19:57 fetching corpus: 8462, signal 203705/226894 (executing program) 2026/01/15 09:19:57 fetching corpus: 8512, signal 204028/226894 (executing program) 2026/01/15 09:19:57 fetching corpus: 8562, signal 204293/226894 (executing program) 2026/01/15 09:19:57 fetching corpus: 8612, signal 204519/226894 (executing program) 2026/01/15 09:19:57 fetching corpus: 8662, signal 204851/226894 (executing program) 2026/01/15 09:19:58 fetching corpus: 8712, signal 205118/226894 (executing program) 2026/01/15 09:19:58 fetching corpus: 8762, signal 205383/226894 (executing program) 2026/01/15 09:19:58 fetching corpus: 8812, signal 205672/226897 (executing program) 2026/01/15 09:19:58 fetching corpus: 8862, signal 205907/226897 (executing program) 2026/01/15 09:19:58 fetching corpus: 8912, signal 206129/226898 (executing program) 2026/01/15 09:19:58 fetching corpus: 8962, signal 206469/226903 (executing program) 2026/01/15 09:19:58 fetching corpus: 9012, signal 206757/226904 (executing program) 2026/01/15 09:19:58 fetching corpus: 9062, signal 206966/226904 (executing program) 2026/01/15 09:19:58 fetching corpus: 9111, signal 207213/226918 (executing program) 2026/01/15 09:19:59 fetching corpus: 9161, signal 207496/226918 (executing program) 2026/01/15 09:19:59 fetching corpus: 9211, signal 207704/226918 (executing program) 2026/01/15 09:19:59 fetching corpus: 9261, signal 208004/226923 (executing program) 2026/01/15 09:19:59 fetching corpus: 9311, signal 208301/226923 (executing program) 2026/01/15 09:19:59 fetching corpus: 9361, signal 208716/226925 (executing program) 2026/01/15 09:19:59 fetching corpus: 9411, signal 209050/226927 (executing program) 2026/01/15 09:19:59 fetching corpus: 9461, signal 209415/226927 (executing program) 2026/01/15 09:19:59 fetching corpus: 9511, signal 209708/226930 (executing program) 2026/01/15 09:19:59 fetching corpus: 9561, signal 210107/226930 (executing program) 2026/01/15 09:19:59 fetching corpus: 9609, signal 210353/226931 (executing program) 2026/01/15 09:20:00 fetching corpus: 9659, signal 210700/226931 (executing program) 2026/01/15 09:20:00 fetching corpus: 9709, signal 210895/226931 (executing program) 2026/01/15 09:20:00 fetching corpus: 9759, signal 211132/226931 (executing program) 2026/01/15 09:20:00 fetching corpus: 9809, signal 211558/226931 (executing program) 2026/01/15 09:20:00 fetching corpus: 9858, signal 211778/226940 (executing program) 2026/01/15 09:20:00 fetching corpus: 9908, signal 212081/226940 (executing program) 2026/01/15 09:20:00 fetching corpus: 9958, signal 212276/226942 (executing program) 2026/01/15 09:20:00 fetching corpus: 10008, signal 212481/226944 (executing program) 2026/01/15 09:20:00 fetching corpus: 10057, signal 212746/226950 (executing program) 2026/01/15 09:20:01 fetching corpus: 10107, signal 213039/226950 (executing program) 2026/01/15 09:20:01 fetching corpus: 10157, signal 213210/226950 (executing program) 2026/01/15 09:20:01 fetching corpus: 10207, signal 213426/226953 (executing program) 2026/01/15 09:20:01 fetching corpus: 10257, signal 213738/226953 (executing program) 2026/01/15 09:20:01 fetching corpus: 10307, signal 214137/226953 (executing program) 2026/01/15 09:20:01 fetching corpus: 10355, signal 214613/226953 (executing program) 2026/01/15 09:20:01 fetching corpus: 10405, signal 214795/226958 (executing program) 2026/01/15 09:20:01 fetching corpus: 10455, signal 215002/226958 (executing program) 2026/01/15 09:20:01 fetching corpus: 10505, signal 215279/226959 (executing program) 2026/01/15 09:20:01 fetching corpus: 10555, signal 215439/226964 (executing program) 2026/01/15 09:20:02 fetching corpus: 10605, signal 215711/226964 (executing program) 2026/01/15 09:20:02 fetching corpus: 10655, signal 215905/226964 (executing program) 2026/01/15 09:20:02 fetching corpus: 10705, signal 216073/226995 (executing program) 2026/01/15 09:20:02 fetching corpus: 10755, signal 216220/226995 (executing program) 2026/01/15 09:20:02 fetching corpus: 10805, signal 216395/226998 (executing program) 2026/01/15 09:20:02 fetching corpus: 10853, signal 216597/226998 (executing program) 2026/01/15 09:20:02 fetching corpus: 10902, signal 216830/226999 (executing program) 2026/01/15 09:20:02 fetching corpus: 10950, signal 217027/227000 (executing program) 2026/01/15 09:20:03 fetching corpus: 11000, signal 217208/227005 (executing program) 2026/01/15 09:20:03 fetching corpus: 11049, signal 217459/227005 (executing program) 2026/01/15 09:20:03 fetching corpus: 11099, signal 217594/227006 (executing program) 2026/01/15 09:20:03 fetching corpus: 11149, signal 217847/227009 (executing program) 2026/01/15 09:20:03 fetching corpus: 11198, signal 218060/227012 (executing program) 2026/01/15 09:20:03 fetching corpus: 11247, signal 218304/227032 (executing program) 2026/01/15 09:20:03 fetching corpus: 11295, signal 218483/227032 (executing program) 2026/01/15 09:20:03 fetching corpus: 11344, signal 218700/227032 (executing program) 2026/01/15 09:20:03 fetching corpus: 11393, signal 218898/227042 (executing program) 2026/01/15 09:20:03 fetching corpus: 11443, signal 219128/227046 (executing program) 2026/01/15 09:20:04 fetching corpus: 11493, signal 219391/227046 (executing program) 2026/01/15 09:20:04 fetching corpus: 11542, signal 219623/227048 (executing program) 2026/01/15 09:20:04 fetching corpus: 11592, signal 219885/227048 (executing program) 2026/01/15 09:20:04 fetching corpus: 11642, signal 220092/227049 (executing program) 2026/01/15 09:20:04 fetching corpus: 11692, signal 220335/227056 (executing program) 2026/01/15 09:20:04 fetching corpus: 11741, signal 220576/227057 (executing program) 2026/01/15 09:20:04 fetching corpus: 11791, signal 220823/227058 (executing program) 2026/01/15 09:20:04 fetching corpus: 11839, signal 220983/227058 (executing program) 2026/01/15 09:20:04 fetching corpus: 11889, signal 221243/227067 (executing program) 2026/01/15 09:20:05 fetching corpus: 11938, signal 221442/227068 (executing program) 2026/01/15 09:20:05 fetching corpus: 11986, signal 221655/227068 (executing program) 2026/01/15 09:20:05 fetching corpus: 12036, signal 221819/227083 (executing program) 2026/01/15 09:20:05 fetching corpus: 12084, signal 221987/227083 (executing program) 2026/01/15 09:20:05 fetching corpus: 12134, signal 222326/227083 (executing program) 2026/01/15 09:20:05 fetching corpus: 12184, signal 222488/227083 (executing program) 2026/01/15 09:20:05 fetching corpus: 12234, signal 222888/227083 (executing program) 2026/01/15 09:20:05 fetching corpus: 12281, signal 223070/227085 (executing program) 2026/01/15 09:20:05 fetching corpus: 12330, signal 223359/227091 (executing program) 2026/01/15 09:20:06 fetching corpus: 12378, signal 223571/227104 (executing program) 2026/01/15 09:20:06 fetching corpus: 12428, signal 223813/227107 (executing program) 2026/01/15 09:20:06 fetching corpus: 12477, signal 224016/227114 (executing program) 2026/01/15 09:20:06 fetching corpus: 12527, signal 224266/227114 (executing program) 2026/01/15 09:20:06 fetching corpus: 12576, signal 224507/227118 (executing program) 2026/01/15 09:20:06 fetching corpus: 12626, signal 224812/227118 (executing program) 2026/01/15 09:20:06 fetching corpus: 12675, signal 225005/227118 (executing program) 2026/01/15 09:20:06 fetching corpus: 12725, signal 225154/227118 (executing program) 2026/01/15 09:20:06 fetching corpus: 12774, signal 225403/227118 (executing program) 2026/01/15 09:20:06 fetching corpus: 12824, signal 225596/227119 (executing program) 2026/01/15 09:20:06 fetching corpus: 12858, signal 225700/227121 (executing program) 2026/01/15 09:20:06 fetching corpus: 12858, signal 225701/227121 (executing program) 2026/01/15 09:20:07 fetching corpus: 12858, signal 225701/227121 (executing program) 2026/01/15 09:20:08 starting 8 fuzzer processes 09:20:08 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, 0x0, "9b9f4f440e4416b3"}) 09:20:08 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x20000, 0xa, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366f6f84b00080801000440004000f801002000400003000000000000008000"/64, 0x40}, {&(0x7f0000010100)="f8ffff00f0ffffffffffffff00"/32, 0x20, 0x800}, {&(0x7f0000010200)="f8ffff00f0ffffffffffffff00"/32, 0x20, 0x1000}, {&(0x7f0000010300)="f8ffff00f0ffffffffffffff00"/32, 0x20, 0x1800}, {&(0x7f0000010400)="f8ffff00f0ffffffffffffff00"/32, 0x20, 0x2000}, {&(0x7f0000010500)="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", 0x120, 0x2800}, {&(0x7f0000010700)="2e202020202020202020201000a0e870325132510000e87032510300000000002e2e2020202020202020201000a0e870325132510000e870325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c45302020202020202000a0e870325132510000e870325104001a040000", 0x80, 0x7000}, {&(0x7f0000010800)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0xb000}, {&(0x7f0000010d00)='syzkallers\x00'/32, 0x20, 0xf000}, {&(0x7f0000010e00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x17000}], 0x0, &(0x7f0000010f00)) 09:20:08 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) fadvise64(r0, 0x0, 0x1, 0x4) 09:20:08 executing program 7: rseq(&(0x7f0000000040)={0x0, 0x0, 0x0, 0x7}, 0xfffffffffffffe02, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) ioctl$TUNSETOWNER(r0, 0x400454d0, 0xffffffffffffffff) [ 97.999146] audit: type=1400 audit(1768468808.657:7): avc: denied { execmem } for pid=281 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 09:20:08 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/arp\x00') pread64(r0, &(0x7f0000000000)=""/15, 0xf, 0x10001) 09:20:08 executing program 4: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000140)=""/4096, 0x1000) getdents64(r0, 0x0, 0x0) 09:20:08 executing program 5: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000000) 09:20:08 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$inet6_tcp_int(r1, 0x6, 0x0, &(0x7f0000000140), 0x4) [ 99.181387] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 99.183913] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 99.185597] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 99.188765] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 99.191135] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 99.193508] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 99.195161] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 99.195907] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 99.207367] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 99.212762] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 99.238573] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 99.240272] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 99.242008] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 99.247194] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 99.251880] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 99.253986] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 99.255658] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 99.258250] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 99.283143] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 99.288556] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 99.307796] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 99.310643] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 99.312133] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 99.315182] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 99.318648] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 99.332979] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 99.338639] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 99.341651] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 99.353275] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 99.355403] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 99.367980] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 99.371918] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 99.373698] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 99.395483] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 99.403974] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 99.406636] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 99.407666] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 99.461812] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 99.483002] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 99.487007] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 101.211683] Bluetooth: hci1: command tx timeout [ 101.274577] Bluetooth: hci3: command tx timeout [ 101.275708] Bluetooth: hci0: command tx timeout [ 101.339584] Bluetooth: hci2: command tx timeout [ 101.402638] Bluetooth: hci6: command tx timeout [ 101.467561] Bluetooth: hci4: command tx timeout [ 101.531565] Bluetooth: hci5: command tx timeout [ 101.658573] Bluetooth: hci7: command tx timeout [ 103.259569] Bluetooth: hci1: command tx timeout [ 103.323685] Bluetooth: hci0: command tx timeout [ 103.323705] Bluetooth: hci3: command tx timeout [ 103.388580] Bluetooth: hci2: command tx timeout [ 103.452537] Bluetooth: hci6: command tx timeout [ 103.514639] Bluetooth: hci4: command tx timeout [ 103.579557] Bluetooth: hci5: command tx timeout [ 103.706589] Bluetooth: hci7: command tx timeout [ 105.306681] Bluetooth: hci1: command tx timeout [ 105.371551] Bluetooth: hci0: command tx timeout [ 105.371641] Bluetooth: hci3: command tx timeout [ 105.434570] Bluetooth: hci2: command tx timeout [ 105.499534] Bluetooth: hci6: command tx timeout [ 105.562970] Bluetooth: hci4: command tx timeout [ 105.627581] Bluetooth: hci5: command tx timeout [ 105.755014] Bluetooth: hci7: command tx timeout [ 107.355531] Bluetooth: hci1: command tx timeout [ 107.419677] Bluetooth: hci0: command tx timeout [ 107.419724] Bluetooth: hci3: command tx timeout [ 107.484327] Bluetooth: hci2: command tx timeout [ 107.548597] Bluetooth: hci6: command tx timeout [ 107.610581] Bluetooth: hci4: command tx timeout [ 107.675601] Bluetooth: hci5: command tx timeout [ 107.803536] Bluetooth: hci7: command tx timeout [ 131.067409] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.068083] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.167311] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.168325] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.221842] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.222454] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.292152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.292755] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.320756] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.321314] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.362129] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.364165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.379301] audit: type=1400 audit(1768468842.038:8): avc: denied { open } for pid=3871 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 131.380948] audit: type=1400 audit(1768468842.038:9): avc: denied { kernel } for pid=3871 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 131.398684] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.399270] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.493540] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.494101] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.501912] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.502499] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.534216] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.534802] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.579137] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.579730] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.608602] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.609136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.626957] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.627485] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.665698] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.666237] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.703202] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.703764] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.725974] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.727116] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.872449] loop2: detected capacity change from 0 to 368 09:20:42 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff}) sendfile(r1, r0, 0x0, 0xa0103) 09:20:42 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) io_submit(r3, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000)="fa", 0x1}]) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$EXT4_IOC_GROUP_ADD(r4, 0xc0c0583b, &(0x7f00000000c0)={0x19}) r5 = accept$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000200)=0x1c) r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$EXT4_IOC_GROUP_ADD(r6, 0xc0c0583b, &(0x7f00000000c0)={0x19}) r7 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) io_submit(r3, 0x3, &(0x7f0000000340)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x7, 0x800, r0, &(0x7f0000000100)="d4e635fe6ed07de3c657d2fd9d8d65e56aa3e7d278e171eaf2250578c7d6622287a7dcc13fb5f086f8d69a7f30429a13928f7ca77253f2a3a11f4f6f0b14bc6a88aa62cc558b6d59f41c6f667fae53", 0x4f, 0x3d0b, 0x0, 0x3, r4}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x7, 0x100, r5, &(0x7f0000000240)="32c59204ba3a4b8239d98658a3fe5c7f4b155b21a3d80e801681132b96", 0x1d, 0x7, 0x0, 0x3, r6}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x1f1, r7, &(0x7f00000002c0)="dbf176dde675c9212505e10a2046b3212a83a9f8e85e0ae424ad61d1d5a3409aac87", 0x22, 0x80, 0x0, 0x2}]) sendmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x0) 09:20:42 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000400)) 09:20:42 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) unlink(&(0x7f0000000040)='./file0\x00') close_range(r0, 0xffffffffffffffff, 0x0) 09:20:42 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/arp\x00') pread64(r0, &(0x7f0000000000)=""/15, 0xf, 0x10001) 09:20:42 executing program 6: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) 09:20:42 executing program 5: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000000) 09:20:42 executing program 4: r0 = getpid() r1 = pidfd_open(r0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x40032, 0xffffffffffffffff, 0x0) pidfd_send_signal(r1, 0x0, &(0x7f0000000080), 0x0) [ 132.019661] ALSA: seq fatal error: cannot create timer (-22) [ 132.039051] ALSA: seq fatal error: cannot create timer (-22) 09:20:42 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/arp\x00') pread64(r0, &(0x7f0000000000)=""/15, 0xf, 0x10001) 09:20:42 executing program 5: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000000) [ 132.111111] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 09:20:42 executing program 4: perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:20:42 executing program 1: prctl$PR_GET_PDEATHSIG(0x22, &(0x7f0000003400)) 09:20:42 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file1\x00', &(0x7f0000000300), 0x0, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 132.127233] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 132.234733] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 132.235627] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 132.287496] syz-executor.7 (3912) used greatest stack depth: 24240 bytes left 09:20:43 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/arp\x00') pread64(r0, &(0x7f0000000000)=""/15, 0xf, 0x10001) 09:20:43 executing program 0: r0 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000001080)=0x18, 0x4) 09:20:43 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) unlink(&(0x7f0000000040)='./file0\x00') close_range(r0, 0xffffffffffffffff, 0x0) 09:20:43 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) pread64(r0, &(0x7f0000001780)=""/4096, 0x1000, 0x0) 09:20:43 executing program 5: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000000) 09:20:43 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) r2 = add_key(&(0x7f0000000240)='dns_resolver\x00', &(0x7f0000000000)={'syz', 0x3}, &(0x7f0000000280)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xbc, r1) keyctl$read(0xf, r2, 0x0, 0x0) 09:20:43 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x15, 0x0, &(0x7f0000000280)) 09:20:43 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000080)={0x1c, 0x5e, 0x1, 0x0, 0x0, "", [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x4}]}, 0x1c}], 0x1}, 0x0) 09:20:43 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) pread64(r0, &(0x7f0000001780)=""/4096, 0x1000, 0x0) 09:20:43 executing program 0: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000080)) shmget$private(0x0, 0x3000, 0xa50, &(0x7f0000ffd000/0x3000)=nil) r0 = shmget$private(0x0, 0x1000, 0x40, &(0x7f0000ffd000/0x1000)=nil) r1 = shmget$private(0x0, 0x4000, 0x100, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x2000)=nil, 0x2000) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) getresgid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f00000003c0), 0x1000) r2 = fork() tkill(r2, 0x3) 09:20:43 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000000400)={0x14, 0x0, 0x4, 0x801}, 0x14}}, 0x0) 09:20:43 executing program 6: r0 = socket(0xa, 0x3, 0x6) sendto(r0, 0x0, 0xffd8, 0x0, &(0x7f0000000040)=@phonet={0xa}, 0x80) 09:20:43 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, 0x0, 0x0, 0x4) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x0) mincore(&(0x7f0000ff7000/0x3000)=nil, 0x3000, &(0x7f0000000180)=""/167) 09:20:43 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) pread64(r0, &(0x7f0000001780)=""/4096, 0x1000, 0x0) 09:20:43 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) pread64(r0, &(0x7f0000001780)=""/4096, 0x1000, 0x0) 09:20:43 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) r2 = add_key(&(0x7f0000000240)='dns_resolver\x00', &(0x7f0000000000)={'syz', 0x3}, &(0x7f0000000280)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xbc, r1) keyctl$read(0xf, r2, 0x0, 0x0) 09:20:43 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) unlink(&(0x7f0000000040)='./file0\x00') close_range(r0, 0xffffffffffffffff, 0x0) 09:20:44 executing program 6: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000080)) shmget$private(0x0, 0x3000, 0xa50, &(0x7f0000ffd000/0x3000)=nil) r0 = shmget$private(0x0, 0x1000, 0x40, &(0x7f0000ffd000/0x1000)=nil) r1 = shmget$private(0x0, 0x4000, 0x100, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x2000)=nil, 0x2000) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) getresgid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f00000003c0), 0x1000) r2 = fork() tkill(r2, 0x3) 09:20:44 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) unlink(&(0x7f0000000040)='./file0\x00') close_range(r0, 0xffffffffffffffff, 0x0) 09:20:44 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) r2 = add_key(&(0x7f0000000240)='dns_resolver\x00', &(0x7f0000000000)={'syz', 0x3}, &(0x7f0000000280)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xbc, r1) keyctl$read(0xf, r2, 0x0, 0x0) 09:20:44 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$cgroup(0x0, &(0x7f0000000780)='./file0\x00', &(0x7f00000007c0), 0x0, 0x0) 09:20:44 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x2, 0x400, 0x8}, 0x1c) 09:20:44 executing program 0: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000080)) shmget$private(0x0, 0x3000, 0xa50, &(0x7f0000ffd000/0x3000)=nil) r0 = shmget$private(0x0, 0x1000, 0x40, &(0x7f0000ffd000/0x1000)=nil) r1 = shmget$private(0x0, 0x4000, 0x100, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x2000)=nil, 0x2000) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) getresgid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f00000003c0), 0x1000) r2 = fork() tkill(r2, 0x3) 09:20:44 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000300), &(0x7f0000002980), &(0x7f00000029c0)) r0 = fork() ptrace(0x10, r0) r1 = fork() r2 = fork() r3 = getpgid(0xffffffffffffffff) ptrace$setregs(0xd, r3, 0x40, &(0x7f0000000040)="be02ea0ffc069065b265da33939b27a634bfcda0149588267611e88f38bca7fbbb09440ea7296dced991b59f35c3dd277ed99f8784ffd9") r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/class/hwmon', 0x0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/class/hwmon', 0x0, 0x0) getdents(r5, &(0x7f00000000c0)=""/145, 0x91) getdents(r5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r5, 0x40042409, 0x1) getdents(r4, &(0x7f00000000c0)=""/145, 0x91) kcmp(r1, r2, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) 09:20:44 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x67) 09:20:44 executing program 5: keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000f00)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 09:20:44 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000500)={0x2, &(0x7f00000004c0)=[{0x5}, {0x6}]}) 09:20:44 executing program 1: mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) mlock(&(0x7f0000525000/0x4000)=nil, 0x4000) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000f93000/0x4000)=nil, 0x4000) mlock2(&(0x7f00007df000/0x3000)=nil, 0x3000, 0x0) munmap(&(0x7f00004a2000/0x1000)=nil, 0x1000) mlock(&(0x7f00005bf000/0x4000)=nil, 0x4000) mlock(&(0x7f0000926000/0x4000)=nil, 0x4000) munmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000) [ 133.556618] audit: type=1326 audit(1768468844.215:10): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4000 comm="syz-executor.3" exe="/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9a1104fb19 code=0x0 09:20:44 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000180)={0x1f, 0x0, @none, 0x4, 0x1}, 0xe) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000000), 0x2) 09:20:44 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) r2 = add_key(&(0x7f0000000240)='dns_resolver\x00', &(0x7f0000000000)={'syz', 0x3}, &(0x7f0000000280)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xbc, r1) keyctl$read(0xf, r2, 0x0, 0x0) 09:20:44 executing program 7: mknod$loop(&(0x7f0000000580)='./file0\x00', 0x1000, 0x1) faccessat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x0) 09:20:44 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x3e, &(0x7f0000000280)=ANY=[], 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) 09:20:44 executing program 6: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000080)) shmget$private(0x0, 0x3000, 0xa50, &(0x7f0000ffd000/0x3000)=nil) r0 = shmget$private(0x0, 0x1000, 0x40, &(0x7f0000ffd000/0x1000)=nil) r1 = shmget$private(0x0, 0x4000, 0x100, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x2000)=nil, 0x2000) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) getresgid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f00000003c0), 0x1000) r2 = fork() tkill(r2, 0x3) 09:20:44 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000072c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000007480)={0x0, 0x0, &(0x7f0000007440)={&(0x7f0000007300)={0x3c, r1, 0xcc5dc44d44bc83cd, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}]}]}, 0x3c}}, 0x0) 09:20:44 executing program 0: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000080)) shmget$private(0x0, 0x3000, 0xa50, &(0x7f0000ffd000/0x3000)=nil) r0 = shmget$private(0x0, 0x1000, 0x40, &(0x7f0000ffd000/0x1000)=nil) r1 = shmget$private(0x0, 0x4000, 0x100, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x2000)=nil, 0x2000) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) getresgid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f00000003c0), 0x1000) r2 = fork() tkill(r2, 0x3) 09:20:44 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000140), 0x4) 09:20:44 executing program 5: syz_mount_image$nfs4(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001480)={[{'noac,'}]}) 09:20:44 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900)="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", 0x200) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x44000) sendfile(r0, r1, 0x0, 0xfdef) 09:20:44 executing program 4: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000400), 0x8) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x9) ppoll(&(0x7f0000000080)=[{r0}, {r1, 0x100}], 0x2, 0x0, 0x0, 0x0) 09:20:44 executing program 7: io_uring_setup(0x6243, &(0x7f0000000a80)={0x0, 0x0, 0x22}) 09:20:44 executing program 1: mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) mlock(&(0x7f0000525000/0x4000)=nil, 0x4000) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000f93000/0x4000)=nil, 0x4000) mlock2(&(0x7f00007df000/0x3000)=nil, 0x3000, 0x0) munmap(&(0x7f00004a2000/0x1000)=nil, 0x1000) mlock(&(0x7f00005bf000/0x4000)=nil, 0x4000) mlock(&(0x7f0000926000/0x4000)=nil, 0x4000) munmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000) 09:20:44 executing program 6: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000080)) shmget$private(0x0, 0x3000, 0xa50, &(0x7f0000ffd000/0x3000)=nil) r0 = shmget$private(0x0, 0x1000, 0x40, &(0x7f0000ffd000/0x1000)=nil) r1 = shmget$private(0x0, 0x4000, 0x100, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x2000)=nil, 0x2000) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) getresgid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f00000003c0), 0x1000) r2 = fork() tkill(r2, 0x3) 09:20:44 executing program 0: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000080)) shmget$private(0x0, 0x3000, 0xa50, &(0x7f0000ffd000/0x3000)=nil) r0 = shmget$private(0x0, 0x1000, 0x40, &(0x7f0000ffd000/0x1000)=nil) r1 = shmget$private(0x0, 0x4000, 0x100, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x2000)=nil, 0x2000) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) getresgid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f00000003c0), 0x1000) r2 = fork() tkill(r2, 0x3) 09:20:44 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) readlinkat(r0, &(0x7f00000003c0)='./mnt\x00', &(0x7f0000000400)=""/26, 0x1a) 09:20:44 executing program 2: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x28, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) fork() r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) setxattr$system_posix_acl(&(0x7f0000000480)='./file0\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000540)=ANY=[@ANYBLOB="02000000010000000000000100040000007f956b433f520abd5a94a60000000008000000", @ANYRES32=r4, @ANYRES64=r3], 0x2c, 0x0) fchown(r2, 0x0, r4) r5 = fork() ptrace(0x10, r5) ptrace$setregs(0xe, r5, 0x0, &(0x7f00000009c0)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000008800)={{{@in6=@initdev, @in6=@mcast2}}, {{@in6=@ipv4={""/10, ""/2, @private}}, 0x0, @in6=@private0}}, &(0x7f0000008900)=0xe8) 09:20:44 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900)="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", 0x200) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x44000) sendfile(r0, r1, 0x0, 0xfdef) 09:20:45 executing program 5: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r3 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, 0x0, 0x5a, 0x1000}]) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0xff) fcntl$setstatus(r0, 0x4, 0x6800) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r2, 0x0, 0xfdef) 09:20:45 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900)="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", 0x200) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x44000) sendfile(r0, r1, 0x0, 0xfdef) 09:20:45 executing program 6: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, 0x0) 09:20:45 executing program 1: mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) mlock(&(0x7f0000525000/0x4000)=nil, 0x4000) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000f93000/0x4000)=nil, 0x4000) mlock2(&(0x7f00007df000/0x3000)=nil, 0x3000, 0x0) munmap(&(0x7f00004a2000/0x1000)=nil, 0x1000) mlock(&(0x7f00005bf000/0x4000)=nil, 0x4000) mlock(&(0x7f0000926000/0x4000)=nil, 0x4000) munmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000) 09:20:45 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}]}, 0x24}}, 0x0) 09:20:45 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000040)=0x1f) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x0, 0x0, "28a587ea6b9da511f7ff1315aa908ba6ccc7a9"}) readv(r0, &(0x7f00000015c0)=[{&(0x7f0000000180)=""/136, 0x88}], 0x1) 09:20:45 executing program 7: madvise(&(0x7f0000870000/0x4000)=nil, 0x4000, 0x17) munmap(&(0x7f0000874000/0x1000)=nil, 0x1000) mremap(&(0x7f0000871000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffd000/0x1000)=nil) mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f000086f000/0x2000)=nil) 09:20:45 executing program 4: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) open_tree(r0, &(0x7f0000000140)='\x00', 0x1000) [ 134.619930] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list 09:20:45 executing program 2: syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000000)=ANY=[@ANYBLOB='/'], &(0x7f00000001c0)='./file0\x00', 0x0, 0x22b5c98, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0x2) 09:20:45 executing program 4: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) open_tree(r0, &(0x7f0000000140)='\x00', 0x1000) 09:20:45 executing program 6: r0 = socket$inet(0x2, 0x3, 0x26) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f00000001c0)=0x5, 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x2, 0x0, @dev}, 0x10) 09:20:45 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000040)=0x1f) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x0, 0x0, "28a587ea6b9da511f7ff1315aa908ba6ccc7a9"}) readv(r0, &(0x7f00000015c0)=[{&(0x7f0000000180)=""/136, 0x88}], 0x1) 09:20:45 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x0) 09:20:45 executing program 6: r0 = socket$inet(0x2, 0x3, 0x26) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f00000001c0)=0x5, 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x2, 0x0, @dev}, 0x10) 09:20:45 executing program 1: mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) mlock(&(0x7f0000525000/0x4000)=nil, 0x4000) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000f93000/0x4000)=nil, 0x4000) mlock2(&(0x7f00007df000/0x3000)=nil, 0x3000, 0x0) munmap(&(0x7f00004a2000/0x1000)=nil, 0x1000) mlock(&(0x7f00005bf000/0x4000)=nil, 0x4000) mlock(&(0x7f0000926000/0x4000)=nil, 0x4000) munmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000) [ 134.755527] audit: type=1400 audit(1768468845.414:11): avc: denied { write } for pid=4092 comm="syz-executor.7" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 09:20:45 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000040)=0x1f) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x0, 0x0, "28a587ea6b9da511f7ff1315aa908ba6ccc7a9"}) readv(r0, &(0x7f00000015c0)=[{&(0x7f0000000180)=""/136, 0x88}], 0x1) 09:20:45 executing program 6: r0 = socket$inet(0x2, 0x3, 0x26) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f00000001c0)=0x5, 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x2, 0x0, @dev}, 0x10) 09:20:45 executing program 4: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) open_tree(r0, &(0x7f0000000140)='\x00', 0x1000) 09:20:45 executing program 2: syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000000)=ANY=[@ANYBLOB='/'], &(0x7f00000001c0)='./file0\x00', 0x0, 0x22b5c98, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0x2) 09:20:45 executing program 5: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r3 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, 0x0, 0x5a, 0x1000}]) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0xff) fcntl$setstatus(r0, 0x4, 0x6800) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r2, 0x0, 0xfdef) 09:20:45 executing program 7: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r0, &(0x7f0000002040)={0x0, 0x0, 0x0}, 0x0) 09:20:45 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000040)=0x1f) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x0, 0x0, "28a587ea6b9da511f7ff1315aa908ba6ccc7a9"}) readv(r0, &(0x7f00000015c0)=[{&(0x7f0000000180)=""/136, 0x88}], 0x1) 09:20:45 executing program 1: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r3 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, 0x0, 0x5a, 0x1000}]) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0xff) fcntl$setstatus(r0, 0x4, 0x6800) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r2, 0x0, 0xfdef) 09:20:45 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900)="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", 0x200) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x44000) sendfile(r0, r1, 0x0, 0xfdef) 09:20:45 executing program 6: r0 = socket$inet(0x2, 0x3, 0x26) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f00000001c0)=0x5, 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x2, 0x0, @dev}, 0x10) 09:20:45 executing program 4: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) open_tree(r0, &(0x7f0000000140)='\x00', 0x1000) 09:20:45 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[@ANYBLOB="f00000001c00cb"], 0xf0}}, 0x0) 09:20:45 executing program 0: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwritev2(r1, &(0x7f0000001400)=[{&(0x7f0000000180)="a6", 0x1}], 0x1, 0xb840, 0x0, 0x0) pwritev2(r0, &(0x7f0000000140)=[{&(0x7f0000000400)="6e009c5d10cb4f0bfb67396c4463c55310b6d95fa8738a54603fc6911a1756c86f43b3ee4d5de4bc8236831d26d0598c119ab3100f803eaf90cd7c9968efbab9c3074f5e3b5b00f9613c37c35a08b2baf828dcb2fef734d447f8961affedf9f5a66971b977d722c86c9325793b0536350690168730beaf7375d74e618af019ae739dced598798902d6149e5d3c92f83bf9592ed0fd2174230166fb7e1f6109f2ad6ab9243fc3d5da17ae691f5c56d25129c290551c1607c20598af858fd641ad12e0f0d9b81fd548bdf4fd723b117e3b19ff52b8a1641fdbcd6b6c0aec4e3a964a51422fb99465c1b3e68872a829face6268ca8ad05e37e92eb9670e835a1775313a50d45c4a563855e557b87992a792925198f18d3faf878148d330ee0e362f8b62b10bf4d6e8fcac924f5000d057ba2e82b4b49f04b0ff66f2920a7bdd02bd32956b257610f1a0211f3b9a79d5f7bbcbeebcb6eb652b96ed01f81a85176d2c2b240962b351070d504800cc79ddb9f74676c21109d9410636a12b915e4e60b70330b29d41339d48dbadcc1fa256b568dec8e812760a243a3b8ca699dbfc6842b7f32200de639a8a8a75240676240886033ea9d5b8845d7a95919e38eeb801fdb86b923a76a6e2313b7732129690da53c173db44e627232c686861a79af317ebd3aba47ba91941b6f79f7ba58160e460c96f65de2a984b64661b8983342f8cad907826f5953901123ee15d4f539c6eb680d0ef2153d601dc25cc57bc81ee77a323a210baf6568f397dd93ea23e7427a9aeb92b431a57d75680a0653dfb07a09b2d6716f93238128559628e2f6c4f79ed70e3867a8aac6e5f4c9a2b51c7f58465bb684ccd823a7127fd276d3d7e4a6a7ee20483b1d53da6674c16da1ae4cfa6293afa65106eee95c43dbabf5161b8db7251b740c11e7fe22d165746340e5d1078702e26236e76048576724f00a18eb6616b93a620f81237e282209023f36f1aaff074f720acdb4cc90ebb0ada3d24ee078ecff2c3f82519580889d9bd03b03e4ef08f4874be7029f94006c59d39932f1045027ba19d1e3c421cf31e9a068b5392ca8293a5a1ff726313d03ae5da0781b57021ce420b9cfb06aaed66ec25944a819670a9a741281fbfd1233e93ceff2a90a3765ab21e16325ca5e9e42af1790a71faf1e8e5d780198b3c08130e66f5d50203f7f2e6576922403ec170118984c4ab27c1b8e2c5e0e4c344a353a5e46f8817b7535ada0c32c1f36fd1575b4bb47af5e193107888be3a52fa9b66dbeb3c8ad4abefae04141fedfbb6d0c53a2f63750d08bdddb7d21020044d51f2bf090518dc672ce51289990df1866f8cd5170fbae28575f65972ff1f882b83ed0901ad676126b38601f9eee2836b394c69299edcf237406d33f6956ef505d5a97c14b8181d16d9a1be7ee2ab6486e69fa19aa2d6e6036702590538a9c7b840f994bf0e1256d074584c29ff7a07f4b208289edb043921035c44e8edce377dddfffd7cffe80bf472b590ce6454872732cad987e5ebfd3b48f104cb5fcc29fc208f658bd5d9d4e060cf137d23e47fa7c58c473df2a2667b29ed881f597c60219c10c4aef83a447b17e20bb9c6bd0a909c60d4945b13acbac70d50319b6b3fccae7396d0725d28af0cd72ad05f14bbf35fd861e38bd7b73cc1e8e13d26a5465e45ff3189a951e5f18e386763416f6d9e79a3b9b58e6bd445b4fa684cfac10b19f4ac0a1f828d9de70826cb9719676b9f059dd2d8a7d6a25b8bc3f5ef8fb2203d2a8bad2104102da978028bb3d9c2844d4c09b7d92531894c3dfd1035836721d7d6e741305003417aa988fa6b3d1a2ce84863ed04dabe02cbc894042775c988c2fe8c454d8ce2920913c654690246d7c1579b02adbb4dd99b3ce67301f85e958eedd0046cb6f530ffb7ea8e2308a2e91c1bbb95f1de67a45674057112ef86f74fe1ab664ebea81288496bf8251b5f274d88883559f879d1b525bf2333d8858e2dce2f2ed4beecb62215792c6763f81129b0d9640fdae3581997f1afabe9ea51c3066d3f56b98edaaf2fa8404a5f67e407ce5789b54e5479a7aa71fd484705b310f11e88283da622279f8e069a0eed30dc7050f7bf99786e30f781af8ad16c610706e1890e637b82910a90d814dc8a69f00265ba11961118eb862fd59cd3dd10d63f0b13bdf20199b5314f86a94375ee9064abff50ea3388b67003fbfa8bc646afd551659a6b3be4b552c98ef20af835c20f68b5e3297e1ad37647bce9d8f74bac6ad3b0bbc6d864b33dfb6555ac5de47c2e8f6ba6429df9980210efc7ccd05b2916af7ba403353818aec02e718cf77aaa570a494153f8ca15e48d54e6f352dd044c85043542046d436ab58e888860adc1f8a8b614bfbc28fe1419458b348cf532b816643ae8aec4b8e9ab6fd28f6891174f4daa32f91f09049cb7c899c6bf898018930582f092d09089b52ac30552954f71c6b3e33be960ea35f0bfa2054dbade500720691cc2277b0722510e9e8c5fc0df67c415e61ab8447aebcdffb923e8aef034ef63627c03a723ee92160b407b897af9c1a228c7464daf999b816a4e8ee33c6fca82dd871a91dd3c9a1561f7654b4da72a0c710d966f7947b81ea52a36604ebd89baf4572792d601fa95ac5d4597b521add5ec4f24a1b04d31e8bdcd34bb636fbfbbaa8417a321fd7c2de1f8b8a38d04b35562060100adb3e8a43a15ba79369d58d624e501dedc39f7562cca1334a04f33bf821b9faa29ddb686e61eef9b92fc156d0af0bcdfe8a33d4e2e1da910ed4d0843a28d05", 0x7c0}], 0x1, 0x0, 0x0, 0x10) close(r0) 09:20:45 executing program 2: syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000000)=ANY=[@ANYBLOB='/'], &(0x7f00000001c0)='./file0\x00', 0x0, 0x22b5c98, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0x2) [ 135.207944] netlink: 220 bytes leftover after parsing attributes in process `syz-executor.7'. 09:20:45 executing program 5: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r3 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, 0x0, 0x5a, 0x1000}]) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0xff) fcntl$setstatus(r0, 0x4, 0x6800) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r2, 0x0, 0xfdef) 09:20:45 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x48, &(0x7f0000000040)={@mcast2}, 0x20) 09:20:45 executing program 4: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000040)=0x2, 0x4) 09:20:45 executing program 1: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r3 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, 0x0, 0x5a, 0x1000}]) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0xff) fcntl$setstatus(r0, 0x4, 0x6800) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r2, 0x0, 0xfdef) 09:20:45 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[@ANYBLOB="f00000001c00cb"], 0xf0}}, 0x0) 09:20:45 executing program 0: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwritev2(r1, &(0x7f0000001400)=[{&(0x7f0000000180)="a6", 0x1}], 0x1, 0xb840, 0x0, 0x0) pwritev2(r0, &(0x7f0000000140)=[{&(0x7f0000000400)="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", 0x7c0}], 0x1, 0x0, 0x0, 0x10) close(r0) 09:20:45 executing program 2: syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000000)=ANY=[@ANYBLOB='/'], &(0x7f00000001c0)='./file0\x00', 0x0, 0x22b5c98, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0x2) 09:20:45 executing program 6: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000480)={0x20, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000480)={0x20, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0) 09:20:45 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0xeb, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ustat(0x6, &(0x7f0000000080)) [ 135.375908] netlink: 220 bytes leftover after parsing attributes in process `syz-executor.7'. 09:20:46 executing program 0: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwritev2(r1, &(0x7f0000001400)=[{&(0x7f0000000180)="a6", 0x1}], 0x1, 0xb840, 0x0, 0x0) pwritev2(r0, &(0x7f0000000140)=[{&(0x7f0000000400)="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", 0x7c0}], 0x1, 0x0, 0x0, 0x10) close(r0) [ 135.577721] syz-executor.3 (4115) used greatest stack depth: 24112 bytes left 09:20:46 executing program 5: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r3 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, 0x0, 0x5a, 0x1000}]) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0xff) fcntl$setstatus(r0, 0x4, 0x6800) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r2, 0x0, 0xfdef) 09:20:46 executing program 1: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r3 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, 0x0, 0x5a, 0x1000}]) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0xff) fcntl$setstatus(r0, 0x4, 0x6800) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r2, 0x0, 0xfdef) 09:20:46 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[@ANYBLOB="f00000001c00cb"], 0xf0}}, 0x0) 09:20:46 executing program 6: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000480)={0x20, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000480)={0x20, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0) 09:20:46 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'wlan0\x00', &(0x7f0000000000)=@ethtool_rx_ntuple={0x2b, {0x0, @tcp_ip4_spec={@rand_addr, @private}, @esp_ip4_spec={@multicast1, @local}}}}) 09:20:46 executing program 2: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000480)={0x20, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000480)={0x20, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0) 09:20:46 executing program 0: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwritev2(r1, &(0x7f0000001400)=[{&(0x7f0000000180)="a6", 0x1}], 0x1, 0xb840, 0x0, 0x0) pwritev2(r0, &(0x7f0000000140)=[{&(0x7f0000000400)="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", 0x7c0}], 0x1, 0x0, 0x0, 0x10) close(r0) [ 135.629028] netlink: 220 bytes leftover after parsing attributes in process `syz-executor.7'. 09:20:46 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x20, r0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x4}]]}, 0x20}}, 0x0) 09:20:46 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[@ANYBLOB="f00000001c00cb"], 0xf0}}, 0x0) [ 135.720746] netlink: 220 bytes leftover after parsing attributes in process `syz-executor.7'. 09:20:46 executing program 5: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x44032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4000, 0x0, &(0x7f0000000000/0x4000)=nil) 09:20:46 executing program 2: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000480)={0x20, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000480)={0x20, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0) 09:20:46 executing program 6: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000480)={0x20, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000480)={0x20, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0) 09:20:46 executing program 3: syz_emit_ethernet(0x22, &(0x7f0000000800)={@empty, @broadcast, @val={@void, {0x8902}}, {@can={0xc, {{}, 0x0, 0x0, 0x0, 0x0, "1951b1d910687322"}}}}, 0x0) 09:20:46 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) dup2(r0, r1) 09:20:46 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(&(0x7f0000000cc0), &(0x7f0000000d00)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)=ANY=[]) syz_mount_image$nfs(&(0x7f0000000180), &(0x7f0000000240)='./file0\x00', 0x1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000280)='z', 0x1, 0xffff}], 0x101020, &(0x7f0000000680)=ANY=[]) 09:20:46 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount_setattr(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000140)={0x0, 0x0, 0x80000}, 0x20) 09:20:46 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x3d, 0xf1, 0xac, 0x0, 0x19d2, 0x1081, 0xda17, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0xff, 0xff}}]}}]}}, 0x0) 09:20:46 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r1) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x38, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}]}, 0x38}}, 0x0) 09:20:46 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x49, &(0x7f0000000080)=0x68bbd9b0592ebacf, 0x4) 09:20:46 executing program 3: r0 = io_uring_setup(0x5053, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES(r0, 0x18, &(0x7f0000000000), 0x0) 09:20:46 executing program 2: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000480)={0x20, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000480)={0x20, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0) [ 135.911897] loop5: detected capacity change from 0 to 255 09:20:46 executing program 6: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000480)={0x20, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000480)={0x20, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0) [ 135.936055] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy 09:20:46 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000003e80)=[{{0x0, 0x0, &(0x7f0000000740)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000400)=""/101, 0x65}, {0x0}, {&(0x7f0000000480)=""/121, 0x79}, {0x0}, {0x0}], 0x9, &(0x7f0000000800)=[@rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x70}}], 0x1, 0x0, 0x0) sendmmsg$unix(r0, &(0x7f0000000c80), 0x80000, 0x0) [ 135.950132] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.957566] loop5: detected capacity change from 0 to 255 09:20:46 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r1) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x38, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}]}, 0x38}}, 0x0) 09:20:46 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, &(0x7f00000001c0)) 09:20:46 executing program 5: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x48}, 0x40000101) 09:20:46 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r1) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x38, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}]}, 0x38}}, 0x0) 09:20:46 executing program 3: syz_mount_image$nfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000240)={{}, {0x2}, [{}, {}, {}]}, 0x1b, 0x0) 09:20:46 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x141802, 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x141802, 0x0) sendfile(r0, r1, 0x0, 0x19a2) [ 136.228102] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 136.228894] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 136.229474] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 136.230856] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 08 00 [ 136.231495] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x880700 phys_seg 4 prio class 2 [ 136.232948] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 136.234420] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 136.235340] Buffer I/O error on dev sr0, logical block 0, async page read [ 136.247623] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 136.248048] I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 136.249278] Buffer I/O error on dev sr0, logical block 1, async page read [ 136.252617] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 136.253037] I/O error, dev sr0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 136.254392] Buffer I/O error on dev sr0, logical block 2, async page read [ 136.260629] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 136.261049] I/O error, dev sr0, sector 3 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 136.265568] Buffer I/O error on dev sr0, logical block 3, async page read [ 136.266150] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 136.268010] I/O error, dev sr0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 136.270584] Buffer I/O error on dev sr0, logical block 4, async page read [ 136.271158] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 136.276552] I/O error, dev sr0, sector 5 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 136.277199] Buffer I/O error on dev sr0, logical block 5, async page read [ 136.277786] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 136.278227] I/O error, dev sr0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 136.281540] Buffer I/O error on dev sr0, logical block 6, async page read [ 136.282235] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 136.283506] Buffer I/O error on dev sr0, logical block 7, async page read 09:20:47 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x49, &(0x7f0000000080)=0x68bbd9b0592ebacf, 0x4) 09:20:47 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000003e80)=[{{0x0, 0x0, &(0x7f0000000740)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000400)=""/101, 0x65}, {0x0}, {&(0x7f0000000480)=""/121, 0x79}, {0x0}, {0x0}], 0x9, &(0x7f0000000800)=[@rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x70}}], 0x1, 0x0, 0x0) sendmmsg$unix(r0, &(0x7f0000000c80), 0x80000, 0x0) 09:20:47 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x1, 0x1, 0x3, 0x8, 0x0, 0xd362, 0x4, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x100000000}, 0x2000, 0x3fd, 0x5, 0x5, 0x6, 0x6, 0x1ff, 0x0, 0x7d4, 0x0, 0x9}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x3) 09:20:47 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r1) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x38, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}]}, 0x38}}, 0x0) 09:20:47 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r1, 0x0) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x1) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) mlock(&(0x7f0000ff9000/0x1000)=nil, 0x1000) 09:20:47 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000880)={0x0, 0x9fa5, &(0x7f00000002c0)={&(0x7f0000000800)={0x34, r2, 0x5, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x34}}, 0x0) 09:20:47 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x3d, 0xf1, 0xac, 0x0, 0x19d2, 0x1081, 0xda17, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0xff, 0xff}}]}}]}}, 0x0) 09:20:47 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="011f"], 0x6) 09:20:47 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="011f"], 0x6) [ 136.601904] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.609436] misc raw-gadget: fail, usb_gadget_register_driver returned -16 09:20:47 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, 0x0, &(0x7f0000000040)) 09:20:47 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x1, 0x1, 0x3, 0x8, 0x0, 0xd362, 0x4, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x100000000}, 0x2000, 0x3fd, 0x5, 0x5, 0x6, 0x6, 0x1ff, 0x0, 0x7d4, 0x0, 0x9}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x3) 09:20:47 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0xfffffff8, 0x4) 09:20:47 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="011f"], 0x6) 09:20:47 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/dev\x00') preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/18, 0x12}], 0x1, 0x1000, 0x0) 09:20:47 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001a00), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001a40)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_PAGE={0x5}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0xf}]}, 0x2c}}, 0x0) 09:20:47 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000003e80)=[{{0x0, 0x0, &(0x7f0000000740)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000400)=""/101, 0x65}, {0x0}, {&(0x7f0000000480)=""/121, 0x79}, {0x0}, {0x0}], 0x9, &(0x7f0000000800)=[@rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x70}}], 0x1, 0x0, 0x0) sendmmsg$unix(r0, &(0x7f0000000c80), 0x80000, 0x0) 09:20:47 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x3d, 0xf1, 0xac, 0x0, 0x19d2, 0x1081, 0xda17, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0xff, 0xff}}]}}]}}, 0x0) 09:20:47 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) open_by_handle_at(r0, &(0x7f0000000000)=@FILEID_INO32_GEN_PARENT={0x10, 0x2, {{0xb}}}, 0xc0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f00000012c0)={0x91}, 0x14) 09:20:47 executing program 4: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)) syz_mount_image$tmpfs(0x0, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x0) 09:20:47 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x49, &(0x7f0000000080)=0x68bbd9b0592ebacf, 0x4) 09:20:47 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000003e80)=[{{0x0, 0x0, &(0x7f0000000740)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000400)=""/101, 0x65}, {0x0}, {&(0x7f0000000480)=""/121, 0x79}, {0x0}, {0x0}], 0x9, &(0x7f0000000800)=[@rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x70}}], 0x1, 0x0, 0x0) sendmmsg$unix(r0, &(0x7f0000000c80), 0x80000, 0x0) 09:20:47 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x1, 0x1, 0x3, 0x8, 0x0, 0xd362, 0x4, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x100000000}, 0x2000, 0x3fd, 0x5, 0x5, 0x6, 0x6, 0x1ff, 0x0, 0x7d4, 0x0, 0x9}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x3) 09:20:47 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="011f"], 0x6) 09:20:47 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, 0x0, &(0x7f0000000040)) [ 137.275483] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.276471] misc raw-gadget: fail, usb_gadget_register_driver returned -16 09:20:47 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, 0x0, &(0x7f0000000040)) 09:20:47 executing program 3: perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b49, &(0x7f0000000400)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:20:48 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x49, &(0x7f0000000080)=0x68bbd9b0592ebacf, 0x4) 09:20:48 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x1, 0x1, 0x3, 0x8, 0x0, 0xd362, 0x4, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x100000000}, 0x2000, 0x3fd, 0x5, 0x5, 0x6, 0x6, 0x1ff, 0x0, 0x7d4, 0x0, 0x9}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x3) 09:20:48 executing program 3: perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b49, &(0x7f0000000400)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:20:48 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x3d, 0xf1, 0xac, 0x0, 0x19d2, 0x1081, 0xda17, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0xff, 0xff}}]}}]}}, 0x0) 09:20:48 executing program 7: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x66000, 0x0) 09:20:48 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, 0x0, &(0x7f0000000040)) 09:20:48 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) open_by_handle_at(r0, &(0x7f0000000000)=@FILEID_INO32_GEN_PARENT={0x10, 0x2, {{0xb}}}, 0xc0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f00000012c0)={0x91}, 0x14) 09:20:48 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) open_by_handle_at(r0, &(0x7f0000000000)=@FILEID_INO32_GEN_PARENT={0x10, 0x2, {{0xb}}}, 0xc0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f00000012c0)={0x91}, 0x14) 09:20:48 executing program 4: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)) syz_mount_image$tmpfs(0x0, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x0) 09:20:48 executing program 0: syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000300)="eb3c906d6b66732e66617400108001000238000004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000040)) [ 137.843587] loop0: detected capacity change from 0 to 6 [ 137.853482] FAT-fs (loop0): unable to read boot sector (logical sector size = 4096) [ 137.858547] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.859427] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.865833] loop0: detected capacity change from 0 to 6 [ 137.875021] FAT-fs (loop0): unable to read boot sector (logical sector size = 4096) 09:20:48 executing program 3: perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b49, &(0x7f0000000400)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:20:48 executing program 4: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)) syz_mount_image$tmpfs(0x0, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x0) 09:20:48 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7ffcfffd}]}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, 0x0, 0x0, 0x0) 09:20:48 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:20:48 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) open_by_handle_at(r0, &(0x7f0000000000)=@FILEID_INO32_GEN_PARENT={0x10, 0x2, {{0xb}}}, 0xc0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f00000012c0)={0x91}, 0x14) 09:20:48 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_pwait2(r0, &(0x7f0000000000)=[{}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)) 09:20:48 executing program 4: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)) syz_mount_image$tmpfs(0x0, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x0) [ 137.990793] audit: type=1326 audit(1768468848.650:12): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4302 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e8aadbb19 code=0x7ffc0000 [ 137.996370] audit: type=1326 audit(1768468848.652:13): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4302 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f0e8aadbb19 code=0x7ffc0000 [ 137.999296] audit: type=1326 audit(1768468848.657:14): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4302 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e8aadbb19 code=0x7ffc0000 [ 138.005055] audit: type=1326 audit(1768468848.658:15): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4302 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f0e8aadbb19 code=0x7ffc0000 [ 138.006716] audit: type=1326 audit(1768468848.658:16): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4302 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e8aadbb19 code=0x7ffc0000 [ 138.027768] audit: type=1326 audit(1768468848.661:17): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4302 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f0e8aadbb19 code=0x7ffc0000 09:20:48 executing program 3: perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b49, &(0x7f0000000400)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 138.038771] audit: type=1326 audit(1768468848.661:18): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4302 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e8aadbb19 code=0x7ffc0000 [ 138.047431] audit: type=1326 audit(1768468848.662:19): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4302 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f0e8aadbb19 code=0x7ffc0000 09:20:48 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) fstatfs(0xffffffffffffffff, 0x0) ptrace(0xffffffffffffffff, 0x0) wait4(0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') renameat(r0, &(0x7f0000000040)='./mnt\x00', r1, &(0x7f0000000080)='./mnt\x00') [ 138.054962] audit: type=1326 audit(1768468848.662:20): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4302 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e8aadbb19 code=0x7ffc0000 09:20:49 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_pwait2(r0, &(0x7f0000000000)=[{}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)) 09:20:49 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendto$packet(r0, &(0x7f0000000380)="cdda7c47556e3e84173484e688a8", 0x10012, 0x0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) 09:20:49 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) open_by_handle_at(r0, &(0x7f0000000000)=@FILEID_INO32_GEN_PARENT={0x10, 0x2, {{0xb}}}, 0xc0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f00000012c0)={0x91}, 0x14) 09:20:49 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 09:20:49 executing program 7: syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x8, 0x2c, 0x0, @ipv4={'\x00', '\xff\xff', @private}, @mcast2, {[], @echo_request}}}}}, 0x0) 09:20:49 executing program 0: perf_event_open(&(0x7f0000000140)={0x9, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x980}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:20:49 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) open_by_handle_at(r0, &(0x7f0000000000)=@FILEID_INO32_GEN_PARENT={0x10, 0x2, {{0xb}}}, 0xc0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f00000012c0)={0x91}, 0x14) 09:20:49 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/key-users\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x3, 0x80, 0x1, 0x0, 0x2, 0x40, 0x0, 0xa4f6, 0x1010, 0xd, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, @perf_bp={&(0x7f0000000100), 0x7}, 0x50248, 0x8001, 0x8001, 0x6, 0x9, 0x2, 0x2, 0x0, 0x5}, 0x0, 0xa, r1, 0x0) fork() r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305839, &(0x7f0000000040)={0x0, 0x0, 0x7fff, 0x1006}) pread64(r0, &(0x7f0000001500)=""/143, 0x8f, 0x0) 09:20:49 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x4000840, &(0x7f0000000080)={0x2, 0x4e20, @dev}, 0x10) 09:20:49 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) accept(r0, 0x0, 0x0) shutdown(r0, 0x1) 09:20:49 executing program 0: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) 09:20:49 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) open_by_handle_at(r0, &(0x7f0000000000)=@FILEID_INO32_GEN_PARENT={0x10, 0x2, {{0xb}}}, 0xc0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f00000012c0)={0x91}, 0x14) 09:20:49 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x0) kexec_load(0x4ac67fff, 0x1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x4003000}], 0x0) 09:20:49 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/key-users\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x3, 0x80, 0x1, 0x0, 0x2, 0x40, 0x0, 0xa4f6, 0x1010, 0xd, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, @perf_bp={&(0x7f0000000100), 0x7}, 0x50248, 0x8001, 0x8001, 0x6, 0x9, 0x2, 0x2, 0x0, 0x5}, 0x0, 0xa, r1, 0x0) fork() r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305839, &(0x7f0000000040)={0x0, 0x0, 0x7fff, 0x1006}) pread64(r0, &(0x7f0000001500)=""/143, 0x8f, 0x0) 09:20:49 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_pwait2(r0, &(0x7f0000000000)=[{}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)) [ 138.690752] audit: type=1326 audit(1768468849.349:21): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4347 comm="syz-executor.0" exe="/syz-executor.0" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0e8aadbb19 code=0x0 09:20:49 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, 0x0, 0x1, 0x5}, 0x14}}, 0x0) recvfrom(r0, 0x0, 0x0, 0x0, &(0x7f0000001280)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x80) 09:20:49 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mountinfo\x00') readv(r0, &(0x7f0000002300)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1) 09:20:50 executing program 6: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x4840, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x12, r0, 0x0) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) 09:20:50 executing program 2: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000040)) r1 = semget$private(0x0, 0x4, 0x0) semctl$GETNCNT(r1, 0x0, 0xe, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz0\x00', 0x1ff) creat(&(0x7f00000000c0)='./file0\x00', 0x0) semctl$GETALL(r1, 0x0, 0xd, &(0x7f0000000280)=""/151) clone(0x0, &(0x7f0000000340)="33f4bbfc8dac49b85ff067d85128caa4b2459f4a03451e030a8735a0bfa4d0a19d7c6323dc285e9deb696419db7e60472c582e95e1f7c4e097d9a61662a150df726ad0e6b172abcc1db0765e288bc20157a993fa87991c8485be79d8866dd74f35ad9aefa32c409e0e09c5d231ab3ab3d377968ac15657925d1e319342e3a79089a8b92fbb690096391d72425945dffadcde221e8978d80c3f5e8b0752a3f6ca4de346a1c5ba08e4bb14d56bbe18ccc2ae5013ae0619c36797ee94774236ed7a321f82aca028810f5b827faff2a12c9fda118a5b9a3a9645f4c6331062ee3bfb6eb88e36db025bd073450d9538e4b3fc5e00", &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)="ad98193cfbda941e9c823e08b33d953a0f3c9e3c99621c534e06a09dde363e7e4bfad1d19942aa101bd8b5f16dfa6c3a688d9c9daad21514efd0e087e092947abc343a2a32a3cb3e6c055937ce89ec75084174625b89e17631bde50f4c27bef6ca714c86386763bf8107a910559891427394aad2e456156ec14cd528655f16a2bba023411a4f15f90f8d52b2494636171c7ac938f481a45501fcae289c5ad54ab94f4968445d2520ec76ee1aa9da66812fae6dbfe767cc0d1b6b6169eeeaa905059d1ea4a9019e9d81f3d459874dd2e3b4d6410f6307834d") write(r0, &(0x7f0000000100)="34ef9364e0d3f2b7567b9791e73bc45eb2188c2a29c766f1b7bac9ab58dd7f8127dce6dbb62da84984e26a0cc2728bc9a93d09493ed651a5e8b42aea0f8eee7429447f29d88d60de51", 0x49) openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x424200, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) 09:20:50 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_pwait2(r0, &(0x7f0000000000)=[{}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)) 09:20:50 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/key-users\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x3, 0x80, 0x1, 0x0, 0x2, 0x40, 0x0, 0xa4f6, 0x1010, 0xd, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, @perf_bp={&(0x7f0000000100), 0x7}, 0x50248, 0x8001, 0x8001, 0x6, 0x9, 0x2, 0x2, 0x0, 0x5}, 0x0, 0xa, r1, 0x0) fork() r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305839, &(0x7f0000000040)={0x0, 0x0, 0x7fff, 0x1006}) pread64(r0, &(0x7f0000001500)=""/143, 0x8f, 0x0) 09:20:50 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mountinfo\x00') readv(r0, &(0x7f0000002300)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1) 09:20:50 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) accept(r0, 0x0, 0x0) shutdown(r0, 0x1) 09:20:50 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) accept(r0, 0x0, 0x0) shutdown(r0, 0x1) 09:20:50 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x0) kexec_load(0x4ac67fff, 0x1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x4003000}], 0x0) 09:20:50 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mountinfo\x00') readv(r0, &(0x7f0000002300)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1) [ 139.587071] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 139.593074] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 139.593969] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 139.598295] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 06 00 [ 139.599200] blk_print_req_error: 1 callbacks suppressed [ 139.599209] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x880700 phys_seg 3 prio class 2 [ 139.605929] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 139.606418] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 139.607176] Buffer I/O error on dev sr0, logical block 0, async page read [ 139.609613] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 139.610063] I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 139.610797] Buffer I/O error on dev sr0, logical block 1, async page read [ 139.611387] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 139.617579] I/O error, dev sr0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 139.628619] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 139.629072] I/O error, dev sr0, sector 3 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 139.629833] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 139.630283] I/O error, dev sr0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 139.637786] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 139.638241] I/O error, dev sr0, sector 5 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 139.639008] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 139.639442] I/O error, dev sr0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 139.645701] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 139.646181] I/O error, dev sr0, sector 7 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 139.648096] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 139.654145] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 139.655074] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 139.657963] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 139.658488] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 139.659031] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 139.663118] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 139.663645] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 139.664156] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 09:20:50 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mountinfo\x00') readv(r0, &(0x7f0000002300)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1) 09:20:50 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8}]}]}, 0x28}}, 0x0) 09:20:50 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/key-users\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x3, 0x80, 0x1, 0x0, 0x2, 0x40, 0x0, 0xa4f6, 0x1010, 0xd, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, @perf_bp={&(0x7f0000000100), 0x7}, 0x50248, 0x8001, 0x8001, 0x6, 0x9, 0x2, 0x2, 0x0, 0x5}, 0x0, 0xa, r1, 0x0) fork() r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305839, &(0x7f0000000040)={0x0, 0x0, 0x7fff, 0x1006}) pread64(r0, &(0x7f0000001500)=""/143, 0x8f, 0x0) 09:20:50 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000000)={0x1, 0x0, 0xa85, "9a"}) 09:20:50 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x0) kexec_load(0x4ac67fff, 0x1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x4003000}], 0x0) [ 139.769036] program syz-executor.5 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 139.809609] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 139.811485] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 139.812213] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 139.813189] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 02 00 09:20:50 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(r0, 0x29, 0x10, &(0x7f0000000080), 0x4) sendmmsg$inet6(r0, &(0x7f0000003ec0)=[{{&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}], 0x1, 0x0) 09:20:50 executing program 6: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast1, @local, @local}, 0xc) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2a, &(0x7f0000000100)={0x2, {{0x2, 0x0, @multicast1}}}, 0x88) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f00000000c0)={@multicast1, @local, @private}, 0xc) 09:20:50 executing program 2: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000040)) r1 = semget$private(0x0, 0x4, 0x0) semctl$GETNCNT(r1, 0x0, 0xe, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz0\x00', 0x1ff) creat(&(0x7f00000000c0)='./file0\x00', 0x0) semctl$GETALL(r1, 0x0, 0xd, &(0x7f0000000280)=""/151) clone(0x0, &(0x7f0000000340)="33f4bbfc8dac49b85ff067d85128caa4b2459f4a03451e030a8735a0bfa4d0a19d7c6323dc285e9deb696419db7e60472c582e95e1f7c4e097d9a61662a150df726ad0e6b172abcc1db0765e288bc20157a993fa87991c8485be79d8866dd74f35ad9aefa32c409e0e09c5d231ab3ab3d377968ac15657925d1e319342e3a79089a8b92fbb690096391d72425945dffadcde221e8978d80c3f5e8b0752a3f6ca4de346a1c5ba08e4bb14d56bbe18ccc2ae5013ae0619c36797ee94774236ed7a321f82aca028810f5b827faff2a12c9fda118a5b9a3a9645f4c6331062ee3bfb6eb88e36db025bd073450d9538e4b3fc5e00", &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)="ad98193cfbda941e9c823e08b33d953a0f3c9e3c99621c534e06a09dde363e7e4bfad1d19942aa101bd8b5f16dfa6c3a688d9c9daad21514efd0e087e092947abc343a2a32a3cb3e6c055937ce89ec75084174625b89e17631bde50f4c27bef6ca714c86386763bf8107a910559891427394aad2e456156ec14cd528655f16a2bba023411a4f15f90f8d52b2494636171c7ac938f481a45501fcae289c5ad54ab94f4968445d2520ec76ee1aa9da66812fae6dbfe767cc0d1b6b6169eeeaa905059d1ea4a9019e9d81f3d459874dd2e3b4d6410f6307834d") write(r0, &(0x7f0000000100)="34ef9364e0d3f2b7567b9791e73bc45eb2188c2a29c766f1b7bac9ab58dd7f8127dce6dbb62da84984e26a0cc2728bc9a93d09493ed651a5e8b42aea0f8eee7429447f29d88d60de51", 0x49) openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x424200, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) 09:20:50 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000040)) r1 = semget$private(0x0, 0x4, 0x0) semctl$GETNCNT(r1, 0x0, 0xe, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz0\x00', 0x1ff) creat(&(0x7f00000000c0)='./file0\x00', 0x0) semctl$GETALL(r1, 0x0, 0xd, &(0x7f0000000280)=""/151) clone(0x0, &(0x7f0000000340)="33f4bbfc8dac49b85ff067d85128caa4b2459f4a03451e030a8735a0bfa4d0a19d7c6323dc285e9deb696419db7e60472c582e95e1f7c4e097d9a61662a150df726ad0e6b172abcc1db0765e288bc20157a993fa87991c8485be79d8866dd74f35ad9aefa32c409e0e09c5d231ab3ab3d377968ac15657925d1e319342e3a79089a8b92fbb690096391d72425945dffadcde221e8978d80c3f5e8b0752a3f6ca4de346a1c5ba08e4bb14d56bbe18ccc2ae5013ae0619c36797ee94774236ed7a321f82aca028810f5b827faff2a12c9fda118a5b9a3a9645f4c6331062ee3bfb6eb88e36db025bd073450d9538e4b3fc5e00", &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)="ad98193cfbda941e9c823e08b33d953a0f3c9e3c99621c534e06a09dde363e7e4bfad1d19942aa101bd8b5f16dfa6c3a688d9c9daad21514efd0e087e092947abc343a2a32a3cb3e6c055937ce89ec75084174625b89e17631bde50f4c27bef6ca714c86386763bf8107a910559891427394aad2e456156ec14cd528655f16a2bba023411a4f15f90f8d52b2494636171c7ac938f481a45501fcae289c5ad54ab94f4968445d2520ec76ee1aa9da66812fae6dbfe767cc0d1b6b6169eeeaa905059d1ea4a9019e9d81f3d459874dd2e3b4d6410f6307834d") write(r0, &(0x7f0000000100)="34ef9364e0d3f2b7567b9791e73bc45eb2188c2a29c766f1b7bac9ab58dd7f8127dce6dbb62da84984e26a0cc2728bc9a93d09493ed651a5e8b42aea0f8eee7429447f29d88d60de51", 0x49) openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x424200, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) [ 139.920386] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list 09:20:51 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x0) kexec_load(0x4ac67fff, 0x1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x4003000}], 0x0) 09:20:51 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) accept(r0, 0x0, 0x0) shutdown(r0, 0x1) 09:20:51 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000040)) r1 = semget$private(0x0, 0x4, 0x0) semctl$GETNCNT(r1, 0x0, 0xe, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz0\x00', 0x1ff) creat(&(0x7f00000000c0)='./file0\x00', 0x0) semctl$GETALL(r1, 0x0, 0xd, &(0x7f0000000280)=""/151) clone(0x0, &(0x7f0000000340)="33f4bbfc8dac49b85ff067d85128caa4b2459f4a03451e030a8735a0bfa4d0a19d7c6323dc285e9deb696419db7e60472c582e95e1f7c4e097d9a61662a150df726ad0e6b172abcc1db0765e288bc20157a993fa87991c8485be79d8866dd74f35ad9aefa32c409e0e09c5d231ab3ab3d377968ac15657925d1e319342e3a79089a8b92fbb690096391d72425945dffadcde221e8978d80c3f5e8b0752a3f6ca4de346a1c5ba08e4bb14d56bbe18ccc2ae5013ae0619c36797ee94774236ed7a321f82aca028810f5b827faff2a12c9fda118a5b9a3a9645f4c6331062ee3bfb6eb88e36db025bd073450d9538e4b3fc5e00", &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)="ad98193cfbda941e9c823e08b33d953a0f3c9e3c99621c534e06a09dde363e7e4bfad1d19942aa101bd8b5f16dfa6c3a688d9c9daad21514efd0e087e092947abc343a2a32a3cb3e6c055937ce89ec75084174625b89e17631bde50f4c27bef6ca714c86386763bf8107a910559891427394aad2e456156ec14cd528655f16a2bba023411a4f15f90f8d52b2494636171c7ac938f481a45501fcae289c5ad54ab94f4968445d2520ec76ee1aa9da66812fae6dbfe767cc0d1b6b6169eeeaa905059d1ea4a9019e9d81f3d459874dd2e3b4d6410f6307834d") write(r0, &(0x7f0000000100)="34ef9364e0d3f2b7567b9791e73bc45eb2188c2a29c766f1b7bac9ab58dd7f8127dce6dbb62da84984e26a0cc2728bc9a93d09493ed651a5e8b42aea0f8eee7429447f29d88d60de51", 0x49) openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x424200, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) 09:20:51 executing program 5: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x14, r0, 0x3fd}, 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) 09:20:51 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) accept(r0, 0x0, 0x0) shutdown(r0, 0x1) 09:20:51 executing program 2: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000040)) r1 = semget$private(0x0, 0x4, 0x0) semctl$GETNCNT(r1, 0x0, 0xe, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz0\x00', 0x1ff) creat(&(0x7f00000000c0)='./file0\x00', 0x0) semctl$GETALL(r1, 0x0, 0xd, &(0x7f0000000280)=""/151) clone(0x0, &(0x7f0000000340)="33f4bbfc8dac49b85ff067d85128caa4b2459f4a03451e030a8735a0bfa4d0a19d7c6323dc285e9deb696419db7e60472c582e95e1f7c4e097d9a61662a150df726ad0e6b172abcc1db0765e288bc20157a993fa87991c8485be79d8866dd74f35ad9aefa32c409e0e09c5d231ab3ab3d377968ac15657925d1e319342e3a79089a8b92fbb690096391d72425945dffadcde221e8978d80c3f5e8b0752a3f6ca4de346a1c5ba08e4bb14d56bbe18ccc2ae5013ae0619c36797ee94774236ed7a321f82aca028810f5b827faff2a12c9fda118a5b9a3a9645f4c6331062ee3bfb6eb88e36db025bd073450d9538e4b3fc5e00", &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)="ad98193cfbda941e9c823e08b33d953a0f3c9e3c99621c534e06a09dde363e7e4bfad1d19942aa101bd8b5f16dfa6c3a688d9c9daad21514efd0e087e092947abc343a2a32a3cb3e6c055937ce89ec75084174625b89e17631bde50f4c27bef6ca714c86386763bf8107a910559891427394aad2e456156ec14cd528655f16a2bba023411a4f15f90f8d52b2494636171c7ac938f481a45501fcae289c5ad54ab94f4968445d2520ec76ee1aa9da66812fae6dbfe767cc0d1b6b6169eeeaa905059d1ea4a9019e9d81f3d459874dd2e3b4d6410f6307834d") write(r0, &(0x7f0000000100)="34ef9364e0d3f2b7567b9791e73bc45eb2188c2a29c766f1b7bac9ab58dd7f8127dce6dbb62da84984e26a0cc2728bc9a93d09493ed651a5e8b42aea0f8eee7429447f29d88d60de51", 0x49) openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x424200, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) 09:20:51 executing program 6: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000040)) r1 = semget$private(0x0, 0x4, 0x0) semctl$GETNCNT(r1, 0x0, 0xe, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz0\x00', 0x1ff) creat(&(0x7f00000000c0)='./file0\x00', 0x0) semctl$GETALL(r1, 0x0, 0xd, &(0x7f0000000280)=""/151) clone(0x0, &(0x7f0000000340)="33f4bbfc8dac49b85ff067d85128caa4b2459f4a03451e030a8735a0bfa4d0a19d7c6323dc285e9deb696419db7e60472c582e95e1f7c4e097d9a61662a150df726ad0e6b172abcc1db0765e288bc20157a993fa87991c8485be79d8866dd74f35ad9aefa32c409e0e09c5d231ab3ab3d377968ac15657925d1e319342e3a79089a8b92fbb690096391d72425945dffadcde221e8978d80c3f5e8b0752a3f6ca4de346a1c5ba08e4bb14d56bbe18ccc2ae5013ae0619c36797ee94774236ed7a321f82aca028810f5b827faff2a12c9fda118a5b9a3a9645f4c6331062ee3bfb6eb88e36db025bd073450d9538e4b3fc5e00", &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)="ad98193cfbda941e9c823e08b33d953a0f3c9e3c99621c534e06a09dde363e7e4bfad1d19942aa101bd8b5f16dfa6c3a688d9c9daad21514efd0e087e092947abc343a2a32a3cb3e6c055937ce89ec75084174625b89e17631bde50f4c27bef6ca714c86386763bf8107a910559891427394aad2e456156ec14cd528655f16a2bba023411a4f15f90f8d52b2494636171c7ac938f481a45501fcae289c5ad54ab94f4968445d2520ec76ee1aa9da66812fae6dbfe767cc0d1b6b6169eeeaa905059d1ea4a9019e9d81f3d459874dd2e3b4d6410f6307834d") write(r0, &(0x7f0000000100)="34ef9364e0d3f2b7567b9791e73bc45eb2188c2a29c766f1b7bac9ab58dd7f8127dce6dbb62da84984e26a0cc2728bc9a93d09493ed651a5e8b42aea0f8eee7429447f29d88d60de51", 0x49) openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x424200, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) 09:20:51 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fchdir(r0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchmod(r1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x400005}) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8983, 0x0) 09:20:51 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x8) getsockopt$inet6_int(r0, 0x29, 0x4b, 0x0, &(0x7f0000000040)) 09:20:51 executing program 6: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000040)) r1 = semget$private(0x0, 0x4, 0x0) semctl$GETNCNT(r1, 0x0, 0xe, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz0\x00', 0x1ff) creat(&(0x7f00000000c0)='./file0\x00', 0x0) semctl$GETALL(r1, 0x0, 0xd, &(0x7f0000000280)=""/151) clone(0x0, &(0x7f0000000340)="33f4bbfc8dac49b85ff067d85128caa4b2459f4a03451e030a8735a0bfa4d0a19d7c6323dc285e9deb696419db7e60472c582e95e1f7c4e097d9a61662a150df726ad0e6b172abcc1db0765e288bc20157a993fa87991c8485be79d8866dd74f35ad9aefa32c409e0e09c5d231ab3ab3d377968ac15657925d1e319342e3a79089a8b92fbb690096391d72425945dffadcde221e8978d80c3f5e8b0752a3f6ca4de346a1c5ba08e4bb14d56bbe18ccc2ae5013ae0619c36797ee94774236ed7a321f82aca028810f5b827faff2a12c9fda118a5b9a3a9645f4c6331062ee3bfb6eb88e36db025bd073450d9538e4b3fc5e00", &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)="ad98193cfbda941e9c823e08b33d953a0f3c9e3c99621c534e06a09dde363e7e4bfad1d19942aa101bd8b5f16dfa6c3a688d9c9daad21514efd0e087e092947abc343a2a32a3cb3e6c055937ce89ec75084174625b89e17631bde50f4c27bef6ca714c86386763bf8107a910559891427394aad2e456156ec14cd528655f16a2bba023411a4f15f90f8d52b2494636171c7ac938f481a45501fcae289c5ad54ab94f4968445d2520ec76ee1aa9da66812fae6dbfe767cc0d1b6b6169eeeaa905059d1ea4a9019e9d81f3d459874dd2e3b4d6410f6307834d") write(r0, &(0x7f0000000100)="34ef9364e0d3f2b7567b9791e73bc45eb2188c2a29c766f1b7bac9ab58dd7f8127dce6dbb62da84984e26a0cc2728bc9a93d09493ed651a5e8b42aea0f8eee7429447f29d88d60de51", 0x49) openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x424200, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) 09:20:51 executing program 2: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000040)) r1 = semget$private(0x0, 0x4, 0x0) semctl$GETNCNT(r1, 0x0, 0xe, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz0\x00', 0x1ff) creat(&(0x7f00000000c0)='./file0\x00', 0x0) semctl$GETALL(r1, 0x0, 0xd, &(0x7f0000000280)=""/151) clone(0x0, &(0x7f0000000340)="33f4bbfc8dac49b85ff067d85128caa4b2459f4a03451e030a8735a0bfa4d0a19d7c6323dc285e9deb696419db7e60472c582e95e1f7c4e097d9a61662a150df726ad0e6b172abcc1db0765e288bc20157a993fa87991c8485be79d8866dd74f35ad9aefa32c409e0e09c5d231ab3ab3d377968ac15657925d1e319342e3a79089a8b92fbb690096391d72425945dffadcde221e8978d80c3f5e8b0752a3f6ca4de346a1c5ba08e4bb14d56bbe18ccc2ae5013ae0619c36797ee94774236ed7a321f82aca028810f5b827faff2a12c9fda118a5b9a3a9645f4c6331062ee3bfb6eb88e36db025bd073450d9538e4b3fc5e00", &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)="ad98193cfbda941e9c823e08b33d953a0f3c9e3c99621c534e06a09dde363e7e4bfad1d19942aa101bd8b5f16dfa6c3a688d9c9daad21514efd0e087e092947abc343a2a32a3cb3e6c055937ce89ec75084174625b89e17631bde50f4c27bef6ca714c86386763bf8107a910559891427394aad2e456156ec14cd528655f16a2bba023411a4f15f90f8d52b2494636171c7ac938f481a45501fcae289c5ad54ab94f4968445d2520ec76ee1aa9da66812fae6dbfe767cc0d1b6b6169eeeaa905059d1ea4a9019e9d81f3d459874dd2e3b4d6410f6307834d") write(r0, &(0x7f0000000100)="34ef9364e0d3f2b7567b9791e73bc45eb2188c2a29c766f1b7bac9ab58dd7f8127dce6dbb62da84984e26a0cc2728bc9a93d09493ed651a5e8b42aea0f8eee7429447f29d88d60de51", 0x49) openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x424200, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) 09:20:51 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@private0, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x3}}, 0xb8}}, 0x0) 09:20:51 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000040)) r1 = semget$private(0x0, 0x4, 0x0) semctl$GETNCNT(r1, 0x0, 0xe, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz0\x00', 0x1ff) creat(&(0x7f00000000c0)='./file0\x00', 0x0) semctl$GETALL(r1, 0x0, 0xd, &(0x7f0000000280)=""/151) clone(0x0, &(0x7f0000000340)="33f4bbfc8dac49b85ff067d85128caa4b2459f4a03451e030a8735a0bfa4d0a19d7c6323dc285e9deb696419db7e60472c582e95e1f7c4e097d9a61662a150df726ad0e6b172abcc1db0765e288bc20157a993fa87991c8485be79d8866dd74f35ad9aefa32c409e0e09c5d231ab3ab3d377968ac15657925d1e319342e3a79089a8b92fbb690096391d72425945dffadcde221e8978d80c3f5e8b0752a3f6ca4de346a1c5ba08e4bb14d56bbe18ccc2ae5013ae0619c36797ee94774236ed7a321f82aca028810f5b827faff2a12c9fda118a5b9a3a9645f4c6331062ee3bfb6eb88e36db025bd073450d9538e4b3fc5e00", &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)="ad98193cfbda941e9c823e08b33d953a0f3c9e3c99621c534e06a09dde363e7e4bfad1d19942aa101bd8b5f16dfa6c3a688d9c9daad21514efd0e087e092947abc343a2a32a3cb3e6c055937ce89ec75084174625b89e17631bde50f4c27bef6ca714c86386763bf8107a910559891427394aad2e456156ec14cd528655f16a2bba023411a4f15f90f8d52b2494636171c7ac938f481a45501fcae289c5ad54ab94f4968445d2520ec76ee1aa9da66812fae6dbfe767cc0d1b6b6169eeeaa905059d1ea4a9019e9d81f3d459874dd2e3b4d6410f6307834d") write(r0, &(0x7f0000000100)="34ef9364e0d3f2b7567b9791e73bc45eb2188c2a29c766f1b7bac9ab58dd7f8127dce6dbb62da84984e26a0cc2728bc9a93d09493ed651a5e8b42aea0f8eee7429447f29d88d60de51", 0x49) openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x424200, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) 09:20:51 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fchdir(r0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchmod(r1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x400005}) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8983, 0x0) 09:20:51 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rt_sigprocmask(0x0, &(0x7f0000000080), 0x0, 0x8) 09:20:51 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fchdir(r0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchmod(r1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x400005}) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8983, 0x0) 09:20:51 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug', 0x0, 0x0) getdents64(r0, &(0x7f0000000000)=""/25, 0x19) getdents(r0, &(0x7f0000000080)=""/171, 0xab) 09:20:51 executing program 6: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000040)) r1 = semget$private(0x0, 0x4, 0x0) semctl$GETNCNT(r1, 0x0, 0xe, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz0\x00', 0x1ff) creat(&(0x7f00000000c0)='./file0\x00', 0x0) semctl$GETALL(r1, 0x0, 0xd, &(0x7f0000000280)=""/151) clone(0x0, &(0x7f0000000340)="33f4bbfc8dac49b85ff067d85128caa4b2459f4a03451e030a8735a0bfa4d0a19d7c6323dc285e9deb696419db7e60472c582e95e1f7c4e097d9a61662a150df726ad0e6b172abcc1db0765e288bc20157a993fa87991c8485be79d8866dd74f35ad9aefa32c409e0e09c5d231ab3ab3d377968ac15657925d1e319342e3a79089a8b92fbb690096391d72425945dffadcde221e8978d80c3f5e8b0752a3f6ca4de346a1c5ba08e4bb14d56bbe18ccc2ae5013ae0619c36797ee94774236ed7a321f82aca028810f5b827faff2a12c9fda118a5b9a3a9645f4c6331062ee3bfb6eb88e36db025bd073450d9538e4b3fc5e00", &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)="ad98193cfbda941e9c823e08b33d953a0f3c9e3c99621c534e06a09dde363e7e4bfad1d19942aa101bd8b5f16dfa6c3a688d9c9daad21514efd0e087e092947abc343a2a32a3cb3e6c055937ce89ec75084174625b89e17631bde50f4c27bef6ca714c86386763bf8107a910559891427394aad2e456156ec14cd528655f16a2bba023411a4f15f90f8d52b2494636171c7ac938f481a45501fcae289c5ad54ab94f4968445d2520ec76ee1aa9da66812fae6dbfe767cc0d1b6b6169eeeaa905059d1ea4a9019e9d81f3d459874dd2e3b4d6410f6307834d") write(r0, &(0x7f0000000100)="34ef9364e0d3f2b7567b9791e73bc45eb2188c2a29c766f1b7bac9ab58dd7f8127dce6dbb62da84984e26a0cc2728bc9a93d09493ed651a5e8b42aea0f8eee7429447f29d88d60de51", 0x49) openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x424200, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) 09:20:51 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x2, 0x0, 0x52) 09:20:51 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rt_sigprocmask(0x0, &(0x7f0000000080), 0x0, 0x8) 09:20:51 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) accept(r0, 0x0, 0x0) shutdown(r0, 0x1) 09:20:51 executing program 3: r0 = syz_mount_image$tmpfs(&(0x7f0000000380), &(0x7f0000000540)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=ANY=[]) ioctl$FS_IOC_FSSETXATTR(r0, 0x5460, &(0x7f0000000040)) 09:20:51 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fchdir(r0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchmod(r1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x400005}) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8983, 0x0) 09:20:51 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) accept(r0, 0x0, 0x0) shutdown(r0, 0x1) 09:20:51 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={[{@commit}]}) [ 141.368039] No source specified [ 141.371652] No source specified 09:20:52 executing program 4: madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x11) 09:20:52 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rt_sigprocmask(0x0, &(0x7f0000000080), 0x0, 0x8) 09:20:52 executing program 2: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000000), 0x4) 09:20:52 executing program 3: ioprio_set$pid(0x1, 0x0, 0x4000) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') pread64(r0, 0x0, 0x0, 0x0) 09:20:52 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNAPSHOT_UNFREEZE(r0, 0x3302) 09:20:52 executing program 2: r0 = memfd_create(&(0x7f0000000000)=':^/\x00', 0x6) fcntl$addseals(r0, 0x409, 0xe) ftruncate(r0, 0x8800000) 09:20:52 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rt_sigprocmask(0x0, &(0x7f0000000080), 0x0, 0x8) 09:20:52 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = getpid() r2 = getpid() r3 = pidfd_open(r2, 0x0) kcmp$KCMP_EPOLL_TFD(r1, r1, 0x7, r3, &(0x7f0000000040)={r0}) 09:20:52 executing program 3: ioprio_set$pid(0x1, 0x0, 0x4000) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') pread64(r0, 0x0, 0x0, 0x0) 09:20:52 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x24, 0x0, &(0x7f00000000c0)) 09:20:52 executing program 7: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) 09:20:52 executing program 0: r0 = fork() ptrace(0x10, r0) wait4(0x0, &(0x7f0000000000), 0x0, 0x0) 09:20:52 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0) 09:20:53 executing program 2: syz_mount_image$tmpfs(0x0, &(0x7f0000000100)='mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000500)) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='mnt', 0x0, 0x0) fdatasync(r0) 09:20:53 executing program 5: setrlimit(0x7, &(0x7f0000000140)={0x5, 0x88}) epoll_create(0x7fff) pipe2$9p(0x0, 0x0) 09:20:53 executing program 3: ioprio_set$pid(0x1, 0x0, 0x4000) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') pread64(r0, 0x0, 0x0, 0x0) 09:20:53 executing program 1: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) listxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=""/40, 0x28) 09:20:53 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000000)="d1", 0x1, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r0, 0x0) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mbind(&(0x7f0000ffa000/0x6000)=nil, 0x6000, 0x0, 0x0, 0x0, 0x2) 09:20:53 executing program 2: r0 = syz_open_dev$rtc(&(0x7f0000000800), 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x811, 0x0, 0xa4}) 09:20:53 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$SG_IO(r0, 0x2202, 0x0) [ 142.561757] [ 142.561942] ===================================== [ 142.562386] WARNING: bad unlock balance detected! [ 142.562805] 6.19.0-rc5-next-20260115 #1 Not tainted [ 142.563234] ------------------------------------- [ 142.563645] syz-executor.6/4544 is trying to release lock (rcu_read_lock) at: [ 142.564277] [] __wait_on_freeing_inode+0x105/0x350 [ 142.564847] but there are no more locks to release! [ 142.565582] [ 142.565582] other info that might help us debug this: [ 142.567095] 4 locks held by syz-executor.6/4544: [ 142.568030] #0: ffff88800f9123f8 (sb_writers#3){.+.+}-{0:0}, at: filename_create+0xf7/0x400 [ 142.569703] #1: ffff888047dfe330 (&type->i_mutex_dir_key#3/1){+.+.}-{4:4}, at: filename_create+0x1b1/0x400 [ 142.572165] #2: ffff88800f916950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xe32/0x12d0 [ 142.574081] #3: ffffffff85c16898 (inode_hash_lock){+.+.}-{3:3}, at: insert_inode_locked+0xf9/0x890 [ 142.574903] [ 142.574903] stack backtrace: [ 142.575292] CPU: 0 UID: 0 PID: 4544 Comm: syz-executor.6 Not tainted 6.19.0-rc5-next-20260115 #1 PREEMPT(lazy) [ 142.575308] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 142.575316] Call Trace: [ 142.575320] [ 142.575325] dump_stack_lvl+0xca/0x120 [ 142.575343] ? __wait_on_freeing_inode+0x105/0x350 [ 142.575359] print_unlock_imbalance_bug+0x118/0x130 [ 142.575377] ? __wait_on_freeing_inode+0x105/0x350 [ 142.575392] lock_release+0x1ee/0x270 [ 142.575411] __wait_on_freeing_inode+0x10a/0x350 [ 142.575427] ? __pfx___wait_on_freeing_inode+0x10/0x10 [ 142.575446] ? __pfx_var_wake_function+0x10/0x10 [ 142.575467] ? lock_is_held_type+0x9e/0x120 [ 142.575481] insert_inode_locked+0x25f/0x890 [ 142.575502] __ext4_new_inode+0x223d/0x4cd0 [ 142.575525] ? __pfx___ext4_new_inode+0x10/0x10 [ 142.575543] ? __pfx___dquot_initialize+0x10/0x10 [ 142.575563] ? __pfx_avc_has_perm+0x10/0x10 [ 142.575583] ext4_symlink+0x623/0xb40 [ 142.575608] ? __pfx_ext4_symlink+0x10/0x10 [ 142.575626] ? security_inode_permission+0x72/0xe0 [ 142.575643] vfs_symlink+0x44b/0x840 [ 142.575663] filename_symlinkat+0x158/0x440 [ 142.575680] ? __pfx_filename_symlinkat+0x10/0x10 [ 142.575696] ? strncpy_from_user+0x21b/0x2f0 [ 142.575718] __x64_sys_symlink+0x82/0x110 [ 142.575733] do_syscall_64+0xbf/0x420 [ 142.575748] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.575763] RIP: 0033:0x7f7a3e73f427 [ 142.575773] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 58 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 142.575786] RSP: 002b:00007ffe88cbe018 EFLAGS: 00000202 ORIG_RAX: 0000000000000058 [ 142.575798] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f7a3e73f427 [ 142.575806] RDX: ffffffffffffffbc RSI: 00007f7a3e79a00e RDI: 00007f7a3e7991dd [ 142.575814] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007ffe88cbda90 [ 142.575822] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 142.575830] R13: 0000000000000001 R14: 0000000000000001 R15: 00007ffe88cbe0e0 [ 142.575845] [ 142.593372] ------------[ cut here ]------------ [ 142.594872] WARNING: kernel/rcu/tree_plugin.h:443 at __rcu_read_unlock+0x25f/0x5c0, CPU#0: syz-executor.6/4544 [ 142.595854] Modules linked in: [ 142.596172] CPU: 0 UID: 0 PID: 4544 Comm: syz-executor.6 Not tainted 6.19.0-rc5-next-20260115 #1 PREEMPT(lazy) [ 142.597065] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 142.597811] RIP: 0010:__rcu_read_unlock+0x25f/0x5c0 [ 142.598331] Code: f2 02 00 00 c7 43 58 01 00 00 00 bf 09 00 00 00 e8 d6 b7 de ff 4d 85 f6 0f 84 73 fe ff ff e8 38 8a 20 00 fb e9 68 fe ff ff 90 <0f> 0b 90 5b 5d 41 5c 41 5d 41 5e e9 81 4d 74 03 e8 2c 5d 56 00 e9 [ 142.599918] RSP: 0018:ffff88804980f9a0 EFLAGS: 00010286 [ 142.600374] RAX: 00000000ffffffff RBX: ffff888047679b80 RCX: ffffffff815660f7 [ 142.601025] RDX: 0000000000000000 RSI: ffffffff81566100 RDI: ffff888047679f7c [ 142.601679] RBP: ffff888047679b80 R08: 0000000000000000 R09: fffffbfff0ba7040 [ 142.602305] R10: 0000000000000000 R11: 0000000000000001 R12: ffff888047679b80 [ 142.602956] R13: 0000000000000001 R14: ffffffff85c0c750 R15: ffff88801b17f578 [ 142.603611] FS: 000055555ec09400(0000) GS:ffff8880e5342000(0000) knlGS:0000000000000000 [ 142.604296] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 142.604841] CR2: 00007f7a3e7bf546 CR3: 000000000f5f7000 CR4: 0000000000350ef0 [ 142.605451] Call Trace: [ 142.605763] [ 142.606577] __wait_on_freeing_inode+0x10f/0x350 [ 142.607302] ? __pfx___wait_on_freeing_inode+0x10/0x10 [ 142.608559] ? __pfx_var_wake_function+0x10/0x10 [ 142.609920] ? lock_is_held_type+0x9e/0x120 [ 142.611183] insert_inode_locked+0x25f/0x890 [ 142.612999] __ext4_new_inode+0x223d/0x4cd0 [ 142.615731] ? __pfx___ext4_new_inode+0x10/0x10 [ 142.617070] ? __pfx___dquot_initialize+0x10/0x10 [ 142.617905] ? __pfx_avc_has_perm+0x10/0x10 [ 142.619854] ext4_symlink+0x623/0xb40 [ 142.622295] ? __pfx_ext4_symlink+0x10/0x10 [ 142.623385] ? security_inode_permission+0x72/0xe0 [ 142.625249] vfs_symlink+0x44b/0x840 [ 142.626696] filename_symlinkat+0x158/0x440 [ 142.627921] ? __pfx_filename_symlinkat+0x10/0x10 [ 142.628754] ? strncpy_from_user+0x21b/0x2f0 [ 142.630814] __x64_sys_symlink+0x82/0x110 [ 142.631624] do_syscall_64+0xbf/0x420 [ 142.632447] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.633029] RIP: 0033:0x7f7a3e73f427 [ 142.633415] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 58 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 142.635006] RSP: 002b:00007ffe88cbe018 EFLAGS: 00000202 ORIG_RAX: 0000000000000058 [ 142.635690] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f7a3e73f427 [ 142.636288] RDX: ffffffffffffffbc RSI: 00007f7a3e79a00e RDI: 00007f7a3e7991dd [ 142.636930] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007ffe88cbda90 [ 142.637573] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 142.638180] R13: 0000000000000001 R14: 0000000000000001 R15: 00007ffe88cbe0e0 [ 142.641057] [ 142.641264] irq event stamp: 1099 [ 142.641610] hardirqs last enabled at (1099): [] _raw_spin_unlock_irqrestore+0x2c/0x50 [ 142.642489] hardirqs last disabled at (1098): [] _raw_spin_lock_irqsave+0x53/0x60 [ 142.643369] softirqs last enabled at (1094): [] kernel_fpu_end+0x59/0x70 [ 142.644178] softirqs last disabled at (1092): [] kernel_fpu_begin_mask+0x1bb/0x300 [ 142.645065] ---[ end trace 0000000000000000 ]--- [ 143.131103] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 143.132305] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 143.135305] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 143.140842] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 143.142013] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 143.144947] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 143.147053] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 143.147810] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 143.150440] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 143.153376] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 143.154636] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 143.157561] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 143.160362] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 143.161163] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 143.165444] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 143.168463] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 143.171626] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 143.175111] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 143.181859] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 143.183210] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 143.186295] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 143.188992] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 143.190270] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 143.193342] Bluetooth: hci7: Opcode 0x0406 failed: -4 09:20:53 executing program 3: ioprio_set$pid(0x1, 0x0, 0x4000) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') pread64(r0, 0x0, 0x0, 0x0) 09:20:53 executing program 5: r0 = syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)) setregid(0x0, 0x0) linkat(r0, &(0x7f0000000080)='./file1\x00', 0xffffffffffffff9c, 0x0, 0x1400) 09:20:53 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') lseek(r0, 0x1ff, 0x0) getdents64(r0, 0x0, 0x0) 09:20:53 executing program 0: r0 = fork() ptrace(0x10, r0) wait4(0x0, &(0x7f0000000000), 0x0, 0x0) 09:20:53 executing program 7: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) 09:20:53 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000880)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64=0x2}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x3a, 0x0, 0x0, @pid}]}]}, 0x28}], 0x1}, 0x0) 09:20:53 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000001f40)={0x0, 0x1, 0x6, @multicast}, 0x10) 09:20:53 executing program 1: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) listxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=""/40, 0x28) 09:20:53 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000880)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64=0x2}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x3a, 0x0, 0x0, @pid}]}]}, 0x28}], 0x1}, 0x0) 09:20:53 executing program 6: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) listxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=""/40, 0x28) 09:20:53 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) setresuid(0x0, r2, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x12, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r3, 0x0, &(0x7f0000000000), 0x0, 0x4) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) 09:20:54 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/if_inet6\x00') pread64(r0, &(0x7f0000000140)=""/2, 0x2, 0x4c) 09:20:54 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x4}, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000240)={0x4, 0x3}, 0x4) 09:20:54 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000880)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64=0x2}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x3a, 0x0, 0x0, @pid}]}]}, 0x28}], 0x1}, 0x0) 09:20:54 executing program 1: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) listxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=""/40, 0x28) 09:20:54 executing program 3: openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x1e}, 0x18) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x30a) 09:20:54 executing program 0: r0 = fork() ptrace(0x10, r0) wait4(0x0, &(0x7f0000000000), 0x0, 0x0) 09:20:54 executing program 0: r0 = fork() ptrace(0x10, r0) wait4(0x0, &(0x7f0000000000), 0x0, 0x0) 09:20:54 executing program 4: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @multicast, @void, {@arp={0x806, @generic={0x0, 0x0, 0x6, 0x0, 0x0, @local, "", @broadcast, "e026a3cf8fc4f471"}}}}, 0x0) 09:20:54 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x4}, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000240)={0x4, 0x3}, 0x4) 09:20:54 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000880)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64=0x2}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x3a, 0x0, 0x0, @pid}]}]}, 0x28}], 0x1}, 0x0) 09:20:54 executing program 6: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) listxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=""/40, 0x28) 09:20:54 executing program 7: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) 09:20:54 executing program 1: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) listxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=""/40, 0x28) 09:20:54 executing program 3: openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x1e}, 0x18) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x30a) 09:20:54 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000000400)=ANY=[@ANYBLOB="380100001a000100000000000000000020010000000000000000000000000002fe8000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa000000006c000000fe8000000000000000000000000000aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000480003"], 0x138}}, 0x0) 09:20:54 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) statfs(&(0x7f0000000380)='./file0\x00', &(0x7f0000000780)=""/166) 09:20:54 executing program 2: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x44032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) 09:20:54 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x4}, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000240)={0x4, 0x3}, 0x4) 09:20:54 executing program 6: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) listxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=""/40, 0x28) 09:20:54 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="010300000000000008e924"], 0x20}}, 0x0) 09:20:54 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x300}}) 09:20:54 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x3938700}, {0x77359400}}, 0x0) timer_gettime(0x0, &(0x7f0000000080)) 09:20:54 executing program 3: openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x1e}, 0x18) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x30a) 09:20:54 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x4, 0x0, 0x0) 09:20:54 executing program 2: modify_ldt$write2(0x11, 0x0, 0x0) 09:20:54 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x4}, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000240)={0x4, 0x3}, 0x4) 09:20:54 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="010300000000000008e924"], 0x20}}, 0x0) 09:20:54 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6a04, &(0x7f00000000c0), &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000200)) r1 = eventfd2(0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000000)=r1, 0x1) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) 09:20:54 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x89b0, &(0x7f0000000080)={'lo\x00', &(0x7f0000000000)=@ethtool_coalesce}) 09:20:54 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x40, 0x0, 0x0, 0x0, 0x0, 0x1000a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5, 0xcc, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000000f40)=[{{&(0x7f0000000480)={0xa, 0x4e21, 0x0, @loopback={0x0, 0x3}}, 0x1b, 0x0}}], 0x1, 0x0) 09:20:54 executing program 7: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) 09:20:54 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x300}}) 09:20:54 executing program 3: openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x1e}, 0x18) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x30a) 09:20:54 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x300}}) 09:20:54 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_create(0x6) epoll_create(0x6) creat(0x0, 0x4) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) fcntl$dupfd(0xffffffffffffffff, 0x406, r1) io_setup(0x6227, &(0x7f0000000080)=0x0) io_submit(r2, 0x1, &(0x7f0000000280)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r3, 0x4b72, &(0x7f0000000080)={0x1, 0x0, 0x15, 0x1a, 0x100, &(0x7f0000000100)}) 09:20:54 executing program 6: sigaltstack(&(0x7f0000ffc000/0x1000)=nil, 0x0) move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000ffc000/0x4000)=nil], &(0x7f0000000180), &(0x7f00000001c0), 0x0) 09:20:54 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="010300000000000008e924"], 0x20}}, 0x0) 09:20:54 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x40, 0x0, 0x0, 0x0, 0x0, 0x1000a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5, 0xcc, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000000f40)=[{{&(0x7f0000000480)={0xa, 0x4e21, 0x0, @loopback={0x0, 0x3}}, 0x1b, 0x0}}], 0x1, 0x0) 09:20:54 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000540)="f3", 0x1}], 0x1, &(0x7f0000000980)=[@rights={{0x18, 0x1, 0x1, [r0, r0]}}], 0x18}, 0x0) recvmsg$unix(r1, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) 09:20:54 executing program 6: sigaltstack(&(0x7f0000ffc000/0x1000)=nil, 0x0) move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000ffc000/0x4000)=nil], &(0x7f0000000180), &(0x7f00000001c0), 0x0) [ 144.347532] Bluetooth: hci1: command 0x0c1a tx timeout 09:20:55 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r1) setgid(0x0) 09:20:55 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x300}}) 09:20:55 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_create(0x6) epoll_create(0x6) creat(0x0, 0x4) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) fcntl$dupfd(0xffffffffffffffff, 0x406, r1) io_setup(0x6227, &(0x7f0000000080)=0x0) io_submit(r2, 0x1, &(0x7f0000000280)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r3, 0x4b72, &(0x7f0000000080)={0x1, 0x0, 0x15, 0x1a, 0x100, &(0x7f0000000100)}) 09:20:55 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r1, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x49, &(0x7f0000000080)=0x68bbd9b0592ebacf, 0x4) 09:20:55 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x40, 0x0, 0x0, 0x0, 0x0, 0x1000a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5, 0xcc, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000000f40)=[{{&(0x7f0000000480)={0xa, 0x4e21, 0x0, @loopback={0x0, 0x3}}, 0x1b, 0x0}}], 0x1, 0x0) 09:20:55 executing program 1: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='ramfs\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r0 = creat(&(0x7f0000000040)='./file0/file0\x00', 0x0) write$P9_RSETATTR(r0, &(0x7f0000000640)={0x7}, 0xfdef) 09:20:55 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x4e, 0x0, 0x46) 09:20:55 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="010300000000000008e924"], 0x20}}, 0x0) 09:20:55 executing program 6: sigaltstack(&(0x7f0000ffc000/0x1000)=nil, 0x0) move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000ffc000/0x4000)=nil], &(0x7f0000000180), &(0x7f00000001c0), 0x0) 09:20:55 executing program 6: sigaltstack(&(0x7f0000ffc000/0x1000)=nil, 0x0) move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000ffc000/0x4000)=nil], &(0x7f0000000180), &(0x7f00000001c0), 0x0) 09:20:55 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, 0x0, 0x0) 09:20:55 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/unix\x00') preadv(r0, &(0x7f0000000500)=[{&(0x7f0000000100)=""/53, 0x35}], 0x1, 0x7, 0x0) 09:20:55 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f00000000c0)={'veth1_virt_wifi\x00'}) 09:20:55 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r1, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x49, &(0x7f0000000080)=0x68bbd9b0592ebacf, 0x4) 09:20:55 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x40, 0x0, 0x0, 0x0, 0x0, 0x1000a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5, 0xcc, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000000f40)=[{{&(0x7f0000000480)={0xa, 0x4e21, 0x0, @loopback={0x0, 0x3}}, 0x1b, 0x0}}], 0x1, 0x0) 09:20:55 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$VT_ACTIVATE(r1, 0x1267, 0x8000000000004) 09:20:55 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="cdf200000000000000008c00000008000300", @ANYRES32=r3], 0x28}}, 0x0) 09:20:55 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/unix\x00') preadv(r0, &(0x7f0000000500)=[{&(0x7f0000000100)=""/53, 0x35}], 0x1, 0x7, 0x0) 09:20:55 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, r0) keyctl$KEYCTL_RESTRICT_KEYRING(0x5, r1, 0x0, 0x0) 09:20:55 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_create(0x6) epoll_create(0x6) creat(0x0, 0x4) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) fcntl$dupfd(0xffffffffffffffff, 0x406, r1) io_setup(0x6227, &(0x7f0000000080)=0x0) io_submit(r2, 0x1, &(0x7f0000000280)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r3, 0x4b72, &(0x7f0000000080)={0x1, 0x0, 0x15, 0x1a, 0x100, &(0x7f0000000100)}) 09:20:55 executing program 6: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)={0x24, 0x2e, 0xffffffffffffffff, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @pid}]}]}, 0x24}], 0x1}, 0x0) [ 145.000048] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.7'. 09:20:55 executing program 1: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000002b40)='/proc/self/attr/fscreate\x00', 0x2, 0x0) write$binfmt_elf64(r0, 0x0, 0x0) 09:20:55 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000140)={0x9, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f0000000140)=' ', 0x1, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000000c0)={0x0, r2, 0x100000000000000}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000001c0)={{{@in6=@private2, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@private0}}, &(0x7f0000000100)=0xe8) recvmsg$unix(r0, &(0x7f0000000a00)={&(0x7f0000000740)=@abs, 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/252, 0xfc}, {&(0x7f0000000440)=""/82, 0x52}, {&(0x7f00000004c0)=""/106, 0x6a}, {&(0x7f0000000540)=""/200, 0xc8}, {&(0x7f0000000640)=""/251, 0xfb}, {&(0x7f0000000c40)=""/190, 0xbe}, {&(0x7f0000000800)=""/177, 0xb1}], 0x7, &(0x7f0000000940)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}], 0xb8}, 0x100) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x2000000, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_u}, {@nodevmap}, {@loose}, {@dfltuid={'dfltuid', 0x3d, 0xee01}}, {@fscache}, {@noextend}, {@cache_mmap}, {@uname={'uname', 0x3d, '\xaa\xaa\xaa\xaa\xaa'}}, {@cachetag={'cachetag', 0x3d, '\xaa\xaa\xaa\xaa\xaa'}}, {@dfltgid={'dfltgid', 0x3d, 0xffffffffffffffff}}], [{@euid_eq={'euid', 0x3d, r3}}, {@dont_hash}, {@obj_user={'obj_user', 0x3d, '^('}}, {@dont_measure}, {@permit_directio}, {@smackfsroot={'smackfsroot', 0x3d, '\xaa\xaa\xaa\xaa\xaa'}}, {@euid_lt={'euid<', r4}}]}}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) pipe2(&(0x7f0000000040), 0x82000) connect$bt_l2cap(r5, &(0x7f0000001b00)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) write(r5, 0x0, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000bc0)={0x1, 0x2000}, 0x4) openat$dir(0xffffffffffffff9c, &(0x7f0000000c00)='./file0\x00', 0x100, 0x91) close_range(r5, 0xffffffffffffffff, 0x0) 09:20:55 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/config', 0x0, 0x0) lseek(r0, 0x5, 0x0) [ 145.040779] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.7'. [ 145.062937] 9p: Bad value for 'dfltgid' [ 145.063321] 9p: Bad value for 'dfltgid' 09:20:55 executing program 7: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000280)={&(0x7f0000000100), 0xc, &(0x7f0000000240)={&(0x7f0000000500)={0x98, 0x2, 0x1, 0x201, 0x0, 0x0, {}, [@CTA_TUPLE_REPLY={0x18}, @CTA_MARK_MASK={0x8}, @CTA_TUPLE_REPLY={0x5c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x0, 0x1, 0x0, 0x1, @ipv6={{0x0, 0x3, @mcast1}, {0x0, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_STATUS={0x8}]}, 0x98}}, 0x0) 09:20:55 executing program 0: r0 = socket(0x2, 0x3, 0x1) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x200000c1) 09:20:55 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000040)={'veth0_to_bond\x00'}) 09:20:55 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/unix\x00') preadv(r0, &(0x7f0000000500)=[{&(0x7f0000000100)=""/53, 0x35}], 0x1, 0x7, 0x0) 09:20:55 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rt_sigsuspend(&(0x7f0000000240)={[0x8]}, 0x8) [ 145.180285] Bluetooth: hci6: command 0x0c1a tx timeout [ 145.180310] Bluetooth: hci4: command 0x0c1a tx timeout [ 145.180322] Bluetooth: hci3: command 0x0c1a tx timeout [ 145.180333] Bluetooth: hci2: command 0x0c1a tx timeout [ 145.180344] Bluetooth: hci0: command 0x0c1a tx timeout [ 145.199025] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.7'. [ 145.243599] Bluetooth: hci7: command 0x0c1a tx timeout [ 145.244050] Bluetooth: hci5: command 0x0c1a tx timeout 09:20:56 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_buf(r0, 0x29, 0x4c, &(0x7f0000000080), 0x0) 09:20:56 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r0, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000180)=0x7) accept(r0, 0x0, 0x0) 09:20:56 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/timer_list\x00', 0x0, 0x0) dup3(r0, r1, 0x0) 09:20:56 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_create(0x6) epoll_create(0x6) creat(0x0, 0x4) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) fcntl$dupfd(0xffffffffffffffff, 0x406, r1) io_setup(0x6227, &(0x7f0000000080)=0x0) io_submit(r2, 0x1, &(0x7f0000000280)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r3, 0x4b72, &(0x7f0000000080)={0x1, 0x0, 0x15, 0x1a, 0x100, &(0x7f0000000100)}) 09:20:56 executing program 7: perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f00000004c0)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xf}}}, 0x14) 09:20:56 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r1, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x49, &(0x7f0000000080)=0x68bbd9b0592ebacf, 0x4) 09:20:56 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/unix\x00') preadv(r0, &(0x7f0000000500)=[{&(0x7f0000000100)=""/53, 0x35}], 0x1, 0x7, 0x0) 09:20:56 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000040)={'veth0_to_bond\x00'}) 09:20:56 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r0, 0x0) 09:20:56 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000001300)=[{&(0x7f0000000100)="ef", 0x1}], 0x1) 09:20:56 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000040)={'veth0_to_bond\x00'}) 09:20:56 executing program 6: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x20080) unshare(0x24020280) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 09:20:56 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) umount2(&(0x7f0000000040)='./file0/../file0\x00', 0x0) 09:20:56 executing program 4: prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000ffc000/0x1000)=nil) 09:20:56 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0xd) 09:20:57 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="b353000000891741dcf91c"], 0x14}}, 0x0) 09:20:57 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000040)={'veth0_to_bond\x00'}) [ 146.395565] Bluetooth: hci1: command 0x0c1a tx timeout 09:20:57 executing program 1: ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000040)={0x0, 0x0, 0x18b}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'netdevsim0\x00'}) 09:20:57 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0xe, 0x0, 0x0) 09:20:57 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r1, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x49, &(0x7f0000000080)=0x68bbd9b0592ebacf, 0x4) 09:20:57 executing program 6: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x20080) unshare(0x24020280) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 09:20:57 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x20080) unshare(0x24020280) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 09:20:57 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = dup2(r1, r0) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r3, 0x3, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_TTL={0x5, 0x6, 0x70}, @NL80211_MESHCONF_FORWARDING={0x5}]}]}, 0x30}}, 0x0) 09:20:57 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000001300)=[{&(0x7f0000000100)="ef", 0x1}], 0x1) 09:20:57 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsn(&(0x7f00000000c0), 0x400, 0x0) 09:20:57 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000007fc0)={0x1, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @broadcast}}}, 0x108) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000007fc0)={0x1, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108) setsockopt$inet_group_source_req(r0, 0x0, 0x2f, &(0x7f0000007fc0)={0x1, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @local}}}, 0x108) 09:20:57 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000001300)=[{&(0x7f0000000100)="ef", 0x1}], 0x1) 09:20:57 executing program 6: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x20080) unshare(0x24020280) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 09:20:57 executing program 5: ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x189702, 0x0) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900)="5ed0b2ff68d76fb346352b602a2a1295cbe01cb3f64fbed9e7f9bc9be0f300cb97f6a204cc586e45dfb949002f61f8fb969dd435dd0c37c5077e5b10cfeafd75205e215b167323a3b971b0ec98e6c3d4d825cae01271cb35cdd091e4872367f354e0dc81a7e4ac79775bc1dcaafe2f5079da79d1989f1ddce6722fc438a7217526cfe75d53471624d6f091e19a7fb699ea27efa9e0fd1914e7c35f297afd9b9b85ff0ce7a982f4fa0c172ea5f06479eec302f30e5df66273717e028f4ca7d4c5b6bc8a3c3c67f688195f22488a15d9e1f7e5fed3a6c2aba7bc308b0e2c5657f4538f4a3bf9b975bb887a901ab3c85261be3e331b741313e78b5ad63b7b1b378e9c79dc4a95b2b4d15cd1d1b808844378f882a72af1e5b0eefd356e0247246e60643204c3b46183dbe4e066c55cb1dcdaa7b70ef43ab2fa4d2b8c4c1a89cb0e325fd9716874d3856cf368efd1f92d21214e55e4de647c37c71887d11f74f9afe1616e3054ceae601e4b3555e243c1882ad42c7730caeb309e7714ad87c55e9fba308cfc4161e562abde3ac4f3d7e0a3584d492810", 0x194) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) r2 = signalfd(r1, &(0x7f0000000100), 0x8) setsockopt$inet_udp_int(r1, 0x11, 0x65, &(0x7f0000000080)=0xfff, 0x4) lseek(r1, 0x9, 0x1) fcntl$setstatus(r0, 0x4, 0x44000) sendfile(r0, 0xffffffffffffffff, 0x0, 0xfdef) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r2, 0x50009417, &(0x7f0000000ac0)={{}, 0x0, 0x4, @unused=[0x6, 0x1000, 0x6, 0x2], @name="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"}) dup(0xffffffffffffffff) fremovexattr(0xffffffffffffffff, &(0x7f00000003c0)=@known='trusted.overlay.nlink\x00') r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000540)={0x0, {0x2, 0x4e24, @remote}, {0x2, 0x4e24, @local}, {0x2, 0x4e22, @local}, 0x346, 0x0, 0x0, 0x0, 0x3f, &(0x7f00000000c0)='ipvlan0\x00', 0x380, 0x1ff, 0x6}) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000540)={0x0, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1b}}, {0x2, 0x4e24, @local}, {0x2, 0x4e24, @loopback}, 0x346, 0x0, 0x0, 0x0, 0x3d, &(0x7f0000000380)='ipvlan0\x00', 0x380, 0x200, 0x6}) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) fcntl$setstatus(r3, 0x4, 0x400) 09:20:57 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x200000, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000bc0)={0x0, 0x4319, 0x1, 0x0, 0x19}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, 0x0, &(0x7f0000000c80)) 09:20:57 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="1b0000001a00010000040000000a000080"], 0x24}], 0x1}, 0x0) 09:20:57 executing program 1: ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000040)={0x0, 0x0, 0x18b}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'netdevsim0\x00'}) 09:20:57 executing program 6: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x20080) unshare(0x24020280) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 09:20:57 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000001300)=[{&(0x7f0000000100)="ef", 0x1}], 0x1) 09:20:57 executing program 7: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) tee(r0, 0xffffffffffffffff, 0x101, 0x0) 09:20:57 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x20080) unshare(0x24020280) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 09:20:57 executing program 5: syz_emit_ethernet(0x7a, &(0x7f0000000340)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "39bcac", 0x0, 0x6, 0x0, @local, @private0, {[@fragment], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {[@exp_smc]}}, {"84aaaa88e6707263bf30808310f753e888b375e56e86789faa211baf2b94b96bad0e2dec7237f5a518330f17079da67c9977b185d671dc4b1d06de4fe8c6fadf671fca5391f89177b4d9638b7c6b379af3afa4c3d066d3d2867487b87b5ce068356a676bd8635a551f6b610b52dfe7ea799186eb221e08c14d448679ee8177c91a5a769ddf48f98ee5e278fe32168ab6f10c5b1ac335a7783c828186bbabf3051bee26b400e7b25539c8dc2c2fa9f76f41b98184b3c46f29b4fe5c35ebe8a0985842f87a31cbc18d5981ac84606091e564f50e"}}}}}}}, 0x0) 09:20:57 executing program 3: io_setup(0x8, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) io_submit(r0, 0x1, &(0x7f0000001e00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) dup3(r2, r1, 0x0) 09:20:57 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x33, &(0x7f0000000340)=[{&(0x7f0000000080)={0x24, 0x15, 0x1, 0x0, 0x0, "", [@nested={0x2, 0x0, 0x0, 0x1, [@typed={0x2, 0x0, 0x0, 0x0, @fd=r1}, @typed={0x8, 0x1, 0x0, 0x0, @fd}]}]}, 0x24}], 0x1}, 0x0) 09:20:57 executing program 5: syz_emit_ethernet(0x7a, &(0x7f0000000340)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "39bcac", 0x0, 0x6, 0x0, @local, @private0, {[@fragment], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {[@exp_smc]}}, {"84aaaa88e6707263bf30808310f753e888b375e56e86789faa211baf2b94b96bad0e2dec7237f5a518330f17079da67c9977b185d671dc4b1d06de4fe8c6fadf671fca5391f89177b4d9638b7c6b379af3afa4c3d066d3d2867487b87b5ce068356a676bd8635a551f6b610b52dfe7ea799186eb221e08c14d448679ee8177c91a5a769ddf48f98ee5e278fe32168ab6f10c5b1ac335a7783c828186bbabf3051bee26b400e7b25539c8dc2c2fa9f76f41b98184b3c46f29b4fe5c35ebe8a0985842f87a31cbc18d5981ac84606091e564f50e"}}}}}}}, 0x0) 09:20:57 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)={0x18, 0x6a, 0x101, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid}]}, 0x18}], 0x1}, 0x0) 09:20:57 executing program 1: ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000040)={0x0, 0x0, 0x18b}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'netdevsim0\x00'}) 09:20:57 executing program 0: r0 = memfd_create(&(0x7f0000000080)='/proc/thread-self/attr/fscreate\x00\x14~\xfe\x9a!\xb2\xb73h\xd2oR\arV(C\xe7\xbb\xd3\x83\xd4\x9b\xb7\xc8t_X\xf0\xcb\xba_\x82qgk\xcbW\xe7\xcd\x87\xf9\xb2\x89\xb94\x06s\xa1B\x96\xc4\x17\x11\xba\xae\xba/N~%\xaf\xcbw\xa4\xd99\xab)\x8f\x1b2\x1bJ\x86\xb1\xee\x8d;\x12\xd4\x7fT\x06\xaakm^\x85\xd1\xd1\xcd\x98L2\xe3\x14\xb7v\xbb\x94x\x82\xab\xc1dK(\x99/9\xc6\xbe\xcd?\xd6-%\x8b\xbeiSA\xdc\xaa\xec\xban3\xbf\x8ew\xee\x91SB\xb0\xb5\xc4,f\xf0\xca\xb3\xb0\xa5\x02\x1f\xd4\xf8\xe7_A\xf0b\xa4\xec\xe8\xeed\xaf\xdf\xdf-w]_\xe4\xb8\x9850\xcd\x8f*\xb5\x98>Y\xef.5\xfd\xcbC\xf0(=\'\xaa^kD\xf5\x81f\xd0 i\x84\xb2\xc5\x1d\x96\xa5\v\xaf\x18w|J\xdbE\x80\x97\xe9U\xd8\x01[A\xaa\xc1%\xa95^X\xea\x17\x1f&]K\xc4\xe6\x17\x00\x04\xfe\x12o\xf0\xad\xfa\xa8\x81\xdd\xe8\t\xa12P\xfc@\x1a\xea\x92|\x04W\xd6-\xb22S`[oUAY\xa8\x93\xc5H\xbe\xc4\x95\x87\x9b\x05\x80\xfc\xec1\xcd\xe4\x8e\xb8\xb0\xdf\xfd\xd2\x19\xf0\x0e\x98{\x9f\f\xd3\xc3\x8e\xdb\xdf\x86$\x8a\xf1\t\x8a\xa8}\xf27\x9c6\xe5\x05\xe5\t\xb8', 0x0) fallocate(r0, 0x41, 0x0, 0x8) [ 147.227566] Bluetooth: hci0: command 0x0c1a tx timeout [ 147.227646] Bluetooth: hci2: command 0x0c1a tx timeout [ 147.228040] Bluetooth: hci3: command 0x0c1a tx timeout [ 147.228883] Bluetooth: hci4: command 0x0c1a tx timeout [ 147.229279] Bluetooth: hci6: command 0x0c1a tx timeout 09:20:57 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x20080) unshare(0x24020280) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 09:20:57 executing program 7: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r0, &(0x7f0000000080)={0x24, @short}, 0xb) 09:20:57 executing program 3: io_setup(0x8, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) io_submit(r0, 0x1, &(0x7f0000001e00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) dup3(r2, r1, 0x0) 09:20:57 executing program 6: linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) 09:20:57 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_int(r0, 0x29, 0x10, &(0x7f0000000000), 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0), 0x4) 09:20:57 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_mr_cache\x00') pread64(r0, &(0x7f0000000100)=""/123, 0x7b, 0x3) [ 147.292541] Bluetooth: hci5: command 0x0c1a tx timeout [ 147.293005] Bluetooth: hci7: command 0x0c1a tx timeout 09:20:57 executing program 5: syz_emit_ethernet(0x7a, &(0x7f0000000340)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "39bcac", 0x0, 0x6, 0x0, @local, @private0, {[@fragment], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {[@exp_smc]}}, {"84aaaa88e6707263bf30808310f753e888b375e56e86789faa211baf2b94b96bad0e2dec7237f5a518330f17079da67c9977b185d671dc4b1d06de4fe8c6fadf671fca5391f89177b4d9638b7c6b379af3afa4c3d066d3d2867487b87b5ce068356a676bd8635a551f6b610b52dfe7ea799186eb221e08c14d448679ee8177c91a5a769ddf48f98ee5e278fe32168ab6f10c5b1ac335a7783c828186bbabf3051bee26b400e7b25539c8dc2c2fa9f76f41b98184b3c46f29b4fe5c35ebe8a0985842f87a31cbc18d5981ac84606091e564f50e"}}}}}}}, 0x0) 09:20:57 executing program 1: ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000040)={0x0, 0x0, 0x18b}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'netdevsim0\x00'}) 09:20:57 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=r2, @ANYBLOB="28000e0080000000ffffffffffff0802110000000802110000000000000000000000000064000100080026006c09000008000c"], 0x74}}, 0x0) [ 147.360744] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. 09:20:58 executing program 5: syz_emit_ethernet(0x7a, &(0x7f0000000340)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "39bcac", 0x0, 0x6, 0x0, @local, @private0, {[@fragment], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {[@exp_smc]}}, {"84aaaa88e6707263bf30808310f753e888b375e56e86789faa211baf2b94b96bad0e2dec7237f5a518330f17079da67c9977b185d671dc4b1d06de4fe8c6fadf671fca5391f89177b4d9638b7c6b379af3afa4c3d066d3d2867487b87b5ce068356a676bd8635a551f6b610b52dfe7ea799186eb221e08c14d448679ee8177c91a5a769ddf48f98ee5e278fe32168ab6f10c5b1ac335a7783c828186bbabf3051bee26b400e7b25539c8dc2c2fa9f76f41b98184b3c46f29b4fe5c35ebe8a0985842f87a31cbc18d5981ac84606091e564f50e"}}}}}}}, 0x0) 09:20:58 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_int(r0, 0x29, 0x10, &(0x7f0000000000), 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0), 0x4) 09:20:58 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup3(r0, r1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x5, &(0x7f0000000040)={'filter\x00', 0x2, [{}, {}]}, 0x48) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup3(r3, r4, 0x0) 09:20:58 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=r2, @ANYBLOB="28000e0080000000ffffffffffff0802110000000802110000000000000000000000000064000100080026006c09000008000c"], 0x74}}, 0x0) [ 147.440626] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. 09:20:58 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000040)) utimes(&(0x7f0000000180)='./file0\x00', 0x0) 09:20:58 executing program 3: io_setup(0x8, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) io_submit(r0, 0x1, &(0x7f0000001e00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) dup3(r2, r1, 0x0) 09:20:58 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_mr_cache\x00') pread64(r0, &(0x7f0000000100)=""/123, 0x7b, 0x3) 09:20:58 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=r2, @ANYBLOB="28000e0080000000ffffffffffff0802110000000802110000000000000000000000000064000100080026006c09000008000c"], 0x74}}, 0x0) 09:20:58 executing program 5: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000580)) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xfffffff7}) 09:20:58 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='hugetlbfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x423, &(0x7f0000000080)={[{@mode}]}) 09:20:58 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_int(r0, 0x29, 0x10, &(0x7f0000000000), 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0), 0x4) 09:20:58 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_int(r0, 0x29, 0x10, &(0x7f0000000000), 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0), 0x4) [ 147.627860] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. 09:20:58 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='hugetlbfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x423, &(0x7f0000000080)={[{@mode}]}) 09:20:58 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff}, 0x800) io_submit(r0, 0x1, &(0x7f00000003c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000080)="9a", 0x1}]) 09:20:58 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_mr_cache\x00') pread64(r0, &(0x7f0000000100)=""/123, 0x7b, 0x3) 09:20:58 executing program 3: io_setup(0x8, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) io_submit(r0, 0x1, &(0x7f0000001e00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) dup3(r2, r1, 0x0) 09:20:58 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001600)=@polexpire={0xc0, 0x19, 0x3, 0x0, 0x0, {{{@in=@loopback=0x7f00000e, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}}, 0xc0}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@flushpolicy={0x10, 0x1d, 0x1}, 0x10}}, 0x0) 09:20:58 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff}, 0x800) io_submit(r0, 0x1, &(0x7f00000003c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000080)="9a", 0x1}]) 09:20:58 executing program 3: io_setup(0xd10, &(0x7f0000000140)=0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_cancel(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 09:20:58 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_mr_cache\x00') pread64(r0, &(0x7f0000000100)=""/123, 0x7b, 0x3) 09:20:58 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0), r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r1, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4041}, 0x4000000) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r3) sendmsg$IEEE802154_ASSOCIATE_REQ(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_CHANNEL={0x5}]}, 0x1c}}, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), r3) write(r2, &(0x7f0000000900)="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", 0x200) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r2, 0x4, 0x44000) sendfile(r2, r5, 0x0, 0xfdef) 09:20:58 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r1, &(0x7f0000000900)="5ed0", 0x2) pwritev2(r0, &(0x7f00000019c0)=[{&(0x7f0000000600)='a', 0x1}], 0x1, 0x0, 0x0, 0x8) 09:20:58 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=r2, @ANYBLOB="28000e0080000000ffffffffffff0802110000000802110000000000000000000000000064000100080026006c09000008000c"], 0x74}}, 0x0) 09:20:58 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='hugetlbfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x423, &(0x7f0000000080)={[{@mode}]}) [ 147.821322] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 147.835931] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 147.844597] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 09:20:58 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='hugetlbfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x423, &(0x7f0000000080)={[{@mode}]}) 09:20:58 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r1, &(0x7f0000000900)="5ed0", 0x2) pwritev2(r0, &(0x7f00000019c0)=[{&(0x7f0000000600)='a', 0x1}], 0x1, 0x0, 0x0, 0x8) 09:20:58 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r1, &(0x7f0000000900)="5ed0", 0x2) pwritev2(r0, &(0x7f00000019c0)=[{&(0x7f0000000600)='a', 0x1}], 0x1, 0x0, 0x0, 0x8) 09:20:58 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001600)=@polexpire={0xc0, 0x19, 0x3, 0x0, 0x0, {{{@in=@loopback=0x7f00000e, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}}, 0xc0}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@flushpolicy={0x10, 0x1d, 0x1}, 0x10}}, 0x0) 09:20:58 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001600)=@polexpire={0xc0, 0x19, 0x3, 0x0, 0x0, {{{@in=@loopback=0x7f00000e, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}}, 0xc0}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@flushpolicy={0x10, 0x1d, 0x1}, 0x10}}, 0x0) [ 147.984293] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.6'. 09:20:58 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff}, 0x800) io_submit(r0, 0x1, &(0x7f00000003c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000080)="9a", 0x1}]) 09:20:58 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r1, &(0x7f0000000900)="5ed0", 0x2) pwritev2(r0, &(0x7f00000019c0)=[{&(0x7f0000000600)='a', 0x1}], 0x1, 0x0, 0x0, 0x8) 09:20:58 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001600)=@polexpire={0xc0, 0x19, 0x3, 0x0, 0x0, {{{@in=@loopback=0x7f00000e, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}}, 0xc0}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@flushpolicy={0x10, 0x1d, 0x1}, 0x10}}, 0x0) 09:20:58 executing program 3: io_setup(0xd10, &(0x7f0000000140)=0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_cancel(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 09:20:58 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001600)=@polexpire={0xc0, 0x19, 0x3, 0x0, 0x0, {{{@in=@loopback=0x7f00000e, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}}, 0xc0}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@flushpolicy={0x10, 0x1d, 0x1}, 0x10}}, 0x0) 09:20:58 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r1, &(0x7f0000000900)="5ed0", 0x2) pwritev2(r0, &(0x7f00000019c0)=[{&(0x7f0000000600)='a', 0x1}], 0x1, 0x0, 0x0, 0x8) 09:20:58 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0), r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r1, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4041}, 0x4000000) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r3) sendmsg$IEEE802154_ASSOCIATE_REQ(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_CHANNEL={0x5}]}, 0x1c}}, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), r3) write(r2, &(0x7f0000000900)="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", 0x200) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r2, 0x4, 0x44000) sendfile(r2, r5, 0x0, 0xfdef) 09:20:58 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0), r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r1, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4041}, 0x4000000) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r3) sendmsg$IEEE802154_ASSOCIATE_REQ(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_CHANNEL={0x5}]}, 0x1c}}, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), r3) write(r2, &(0x7f0000000900)="5ed0b2ff68d76fb346352b602a2a1295cbe01cb3f64fbed9e7f9bc9be0f300cb97f6a204cc586e45dfb949002f61f8fb969dd435dd0c37c5077e5b10cfeafd75205e215b167323a3b971b0ec98e6c3d4d825cae01271cb35cdd091e4872367f354e0dc81a7e4ac79775bc1dcaafe2f5079da79d1989f1ddce6722fc438a7217526cfe75d53471624d6f091e19a7fb699ea27efa9e0fd1914e7c35f297afd9b9b85ff0ce7a982f4fa0c172ea5f06479eec302f30e5df66273717e028f4ca7d4c5b6bc8a3c3c67f688195f22488a15d9e1f7e5fed3a6c2aba7bc308b0e2c5657f4538f4a3bf9b975bb887a901ab3c85261be3e331b741313e78b5ad63b7b1b378e9c79dc4a95b2b4d15cd1d1b808844378f882a72af1e5b0eefd356e0247246e60643204c3b46183dbe4e066c55cb1dcdaa7b70ef43ab2fa4d2b8c4c1a89cb0e325fd9716874d3856cf368efd1f92d21214e55e4de647c37c71887d11f74f9afe1616e3054ceae601e4b3555e243c1882ad42c7730caeb309e7714ad87c55e9fba308cfc4161e562abde3ac4f3d7e0a3584d4928100197f102307c05c0b4b4898b0591bc1433af443478979f28e6136ffb21aaeac2be5490475a08e96bb94fd9d9d3aa2f8a1e147a80ba9bfd04dac3f476ff128476c693ea71f7be47a508c98eddc479eb703d6f17cc5be2182f7c39b0a47eb23e0808b5d87dd2a9ce88eb48a601", 0x200) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r2, 0x4, 0x44000) sendfile(r2, r5, 0x0, 0xfdef) 09:20:59 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r1, &(0x7f0000000900)="5ed0", 0x2) pwritev2(r0, &(0x7f00000019c0)=[{&(0x7f0000000600)='a', 0x1}], 0x1, 0x0, 0x0, 0x8) 09:20:59 executing program 3: io_setup(0xd10, &(0x7f0000000140)=0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_cancel(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 09:20:59 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001600)=@polexpire={0xc0, 0x19, 0x3, 0x0, 0x0, {{{@in=@loopback=0x7f00000e, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}}, 0xc0}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@flushpolicy={0x10, 0x1d, 0x1}, 0x10}}, 0x0) 09:20:59 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001600)=@polexpire={0xc0, 0x19, 0x3, 0x0, 0x0, {{{@in=@loopback=0x7f00000e, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}}, 0xc0}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@flushpolicy={0x10, 0x1d, 0x1}, 0x10}}, 0x0) [ 148.443655] Bluetooth: hci1: command 0x0c1a tx timeout 09:20:59 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r1, &(0x7f0000000900)="5ed0", 0x2) pwritev2(r0, &(0x7f00000019c0)=[{&(0x7f0000000600)='a', 0x1}], 0x1, 0x0, 0x0, 0x8) 09:20:59 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff}, 0x800) io_submit(r0, 0x1, &(0x7f00000003c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000080)="9a", 0x1}]) 09:20:59 executing program 3: io_setup(0xd10, &(0x7f0000000140)=0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_cancel(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) [ 149.162018] syz-executor.0 (4938) used greatest stack depth: 23736 bytes left 09:20:59 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)) 09:20:59 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0), r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r1, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4041}, 0x4000000) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r3) sendmsg$IEEE802154_ASSOCIATE_REQ(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_CHANNEL={0x5}]}, 0x1c}}, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), r3) write(r2, &(0x7f0000000900)="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", 0x200) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r2, 0x4, 0x44000) sendfile(r2, r5, 0x0, 0xfdef) 09:20:59 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r2) ioctl$KDGETMODE(r0, 0x4b4d, &(0x7f00000000c0)) 09:20:59 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$vga_arbiter(r0, &(0x7f0000000900)=@other={'lock', ' ', 'io'}, 0x8) r1 = socket$inet6_udp(0xa, 0x2, 0x0) dup2(r1, r0) 09:20:59 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) pipe2(&(0x7f00000006c0)={0xffffffffffffffff}, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) tee(r0, r1, 0x5, 0x0) 09:20:59 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0), r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r1, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4041}, 0x4000000) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r3) sendmsg$IEEE802154_ASSOCIATE_REQ(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_CHANNEL={0x5}]}, 0x1c}}, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), r3) write(r2, &(0x7f0000000900)="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", 0x200) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r2, 0x4, 0x44000) sendfile(r2, r5, 0x0, 0xfdef) 09:20:59 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0), r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r1, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4041}, 0x4000000) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r3) sendmsg$IEEE802154_ASSOCIATE_REQ(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_CHANNEL={0x5}]}, 0x1c}}, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), r3) write(r2, &(0x7f0000000900)="5ed0b2ff68d76fb346352b602a2a1295cbe01cb3f64fbed9e7f9bc9be0f300cb97f6a204cc586e45dfb949002f61f8fb969dd435dd0c37c5077e5b10cfeafd75205e215b167323a3b971b0ec98e6c3d4d825cae01271cb35cdd091e4872367f354e0dc81a7e4ac79775bc1dcaafe2f5079da79d1989f1ddce6722fc438a7217526cfe75d53471624d6f091e19a7fb699ea27efa9e0fd1914e7c35f297afd9b9b85ff0ce7a982f4fa0c172ea5f06479eec302f30e5df66273717e028f4ca7d4c5b6bc8a3c3c67f688195f22488a15d9e1f7e5fed3a6c2aba7bc308b0e2c5657f4538f4a3bf9b975bb887a901ab3c85261be3e331b741313e78b5ad63b7b1b378e9c79dc4a95b2b4d15cd1d1b808844378f882a72af1e5b0eefd356e0247246e60643204c3b46183dbe4e066c55cb1dcdaa7b70ef43ab2fa4d2b8c4c1a89cb0e325fd9716874d3856cf368efd1f92d21214e55e4de647c37c71887d11f74f9afe1616e3054ceae601e4b3555e243c1882ad42c7730caeb309e7714ad87c55e9fba308cfc4161e562abde3ac4f3d7e0a3584d4928100197f102307c05c0b4b4898b0591bc1433af443478979f28e6136ffb21aaeac2be5490475a08e96bb94fd9d9d3aa2f8a1e147a80ba9bfd04dac3f476ff128476c693ea71f7be47a508c98eddc479eb703d6f17cc5be2182f7c39b0a47eb23e0808b5d87dd2a9ce88eb48a601", 0x200) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r2, 0x4, 0x44000) sendfile(r2, r5, 0x0, 0xfdef) [ 149.274677] Bluetooth: hci4: command 0x0c1a tx timeout [ 149.275594] Bluetooth: hci2: command 0x0c1a tx timeout [ 149.276423] Bluetooth: hci6: command 0x0c1a tx timeout [ 149.277324] Bluetooth: hci0: command 0x0c1a tx timeout [ 149.277363] Bluetooth: hci3: command 0x0c1a tx timeout 09:20:59 executing program 6: io_setup(0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe) 09:20:59 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000480), &(0x7f00000004c0)='./file0\x00', 0x10000, 0x3, &(0x7f0000000680)=[{&(0x7f0000000500)="c2", 0x1, 0x100000000}, {&(0x7f00000005c0)='M', 0x1}, {0x0}], 0x0, &(0x7f0000000700)={[{@rodir}, {@shortname_winnt}, {@uni_xlateno}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'iso8859-6'}}], [{@seclabel}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@subj_user={'subj_user', 0x3d, ')'}}]}) [ 149.339867] Bluetooth: hci7: command 0x0c1a tx timeout [ 149.339903] Bluetooth: hci5: command 0x0c1a tx timeout [ 149.397289] loop4: detected capacity change from 0 to 264192 [ 149.418959] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 09:21:00 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r2) ioctl$KDGETMODE(r0, 0x4b4d, &(0x7f00000000c0)) 09:21:00 executing program 6: io_setup(0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe) 09:21:00 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) pipe2(&(0x7f00000006c0)={0xffffffffffffffff}, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) tee(r0, r1, 0x5, 0x0) 09:21:00 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000480), &(0x7f00000004c0)='./file0\x00', 0x10000, 0x3, &(0x7f0000000680)=[{&(0x7f0000000500)="c2", 0x1, 0x100000000}, {&(0x7f00000005c0)='M', 0x1}, {0x0}], 0x0, &(0x7f0000000700)={[{@rodir}, {@shortname_winnt}, {@uni_xlateno}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'iso8859-6'}}], [{@seclabel}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@subj_user={'subj_user', 0x3d, ')'}}]}) 09:21:00 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)) 09:21:00 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r2) ioctl$KDGETMODE(r0, 0x4b4d, &(0x7f00000000c0)) [ 149.664785] loop4: detected capacity change from 0 to 264192 [ 149.677492] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 09:21:00 executing program 6: io_setup(0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe) 09:21:00 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) pipe2(&(0x7f00000006c0)={0xffffffffffffffff}, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) tee(r0, r1, 0x5, 0x0) 09:21:00 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000480), &(0x7f00000004c0)='./file0\x00', 0x10000, 0x3, &(0x7f0000000680)=[{&(0x7f0000000500)="c2", 0x1, 0x100000000}, {&(0x7f00000005c0)='M', 0x1}, {0x0}], 0x0, &(0x7f0000000700)={[{@rodir}, {@shortname_winnt}, {@uni_xlateno}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'iso8859-6'}}], [{@seclabel}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@subj_user={'subj_user', 0x3d, ')'}}]}) 09:21:00 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0), r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r1, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4041}, 0x4000000) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r3) sendmsg$IEEE802154_ASSOCIATE_REQ(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_CHANNEL={0x5}]}, 0x1c}}, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), r3) write(r2, &(0x7f0000000900)="5ed0b2ff68d76fb346352b602a2a1295cbe01cb3f64fbed9e7f9bc9be0f300cb97f6a204cc586e45dfb949002f61f8fb969dd435dd0c37c5077e5b10cfeafd75205e215b167323a3b971b0ec98e6c3d4d825cae01271cb35cdd091e4872367f354e0dc81a7e4ac79775bc1dcaafe2f5079da79d1989f1ddce6722fc438a7217526cfe75d53471624d6f091e19a7fb699ea27efa9e0fd1914e7c35f297afd9b9b85ff0ce7a982f4fa0c172ea5f06479eec302f30e5df66273717e028f4ca7d4c5b6bc8a3c3c67f688195f22488a15d9e1f7e5fed3a6c2aba7bc308b0e2c5657f4538f4a3bf9b975bb887a901ab3c85261be3e331b741313e78b5ad63b7b1b378e9c79dc4a95b2b4d15cd1d1b808844378f882a72af1e5b0eefd356e0247246e60643204c3b46183dbe4e066c55cb1dcdaa7b70ef43ab2fa4d2b8c4c1a89cb0e325fd9716874d3856cf368efd1f92d21214e55e4de647c37c71887d11f74f9afe1616e3054ceae601e4b3555e243c1882ad42c7730caeb309e7714ad87c55e9fba308cfc4161e562abde3ac4f3d7e0a3584d4928100197f102307c05c0b4b4898b0591bc1433af443478979f28e6136ffb21aaeac2be5490475a08e96bb94fd9d9d3aa2f8a1e147a80ba9bfd04dac3f476ff128476c693ea71f7be47a508c98eddc479eb703d6f17cc5be2182f7c39b0a47eb23e0808b5d87dd2a9ce88eb48a601", 0x200) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r2, 0x4, 0x44000) sendfile(r2, r5, 0x0, 0xfdef) 09:21:00 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0), r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r1, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4041}, 0x4000000) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r3) sendmsg$IEEE802154_ASSOCIATE_REQ(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_CHANNEL={0x5}]}, 0x1c}}, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), r3) write(r2, &(0x7f0000000900)="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", 0x200) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r2, 0x4, 0x44000) sendfile(r2, r5, 0x0, 0xfdef) 09:21:00 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)) 09:21:00 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) pipe2(&(0x7f00000006c0)={0xffffffffffffffff}, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) tee(r0, r1, 0x5, 0x0) 09:21:00 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0), r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r1, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4041}, 0x4000000) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r3) sendmsg$IEEE802154_ASSOCIATE_REQ(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_CHANNEL={0x5}]}, 0x1c}}, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), r3) write(r2, &(0x7f0000000900)="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", 0x200) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r2, 0x4, 0x44000) sendfile(r2, r5, 0x0, 0xfdef) 09:21:00 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r2) ioctl$KDGETMODE(r0, 0x4b4d, &(0x7f00000000c0)) 09:21:00 executing program 6: io_setup(0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe) [ 150.341678] loop4: detected capacity change from 0 to 264192 [ 150.354189] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 09:21:01 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000480), &(0x7f00000004c0)='./file0\x00', 0x10000, 0x3, &(0x7f0000000680)=[{&(0x7f0000000500)="c2", 0x1, 0x100000000}, {&(0x7f00000005c0)='M', 0x1}, {0x0}], 0x0, &(0x7f0000000700)={[{@rodir}, {@shortname_winnt}, {@uni_xlateno}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'iso8859-6'}}], [{@seclabel}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@subj_user={'subj_user', 0x3d, ')'}}]}) 09:21:01 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)) 09:21:01 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)) [ 150.553325] loop4: detected capacity change from 0 to 264192 09:21:01 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000a40)=ANY=[@ANYBLOB="1800000066000101"], 0x18}], 0x1}, 0x0) [ 150.565377] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 09:21:01 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)) 09:21:01 executing program 7: kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x400000000000}], 0x0) 09:21:01 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000a40)=ANY=[@ANYBLOB="1800000066000101"], 0x18}], 0x1}, 0x0) 09:21:01 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x14, r1, 0x1}, 0x14}}, 0x0) 09:21:01 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/handlers\x00', 0x0, 0x0) pread64(r0, &(0x7f00000000c0)=""/38, 0x26, 0x0) 09:21:01 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)) 09:21:01 executing program 7: kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x400000000000}], 0x0) 09:21:01 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r2) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000080)) 09:21:01 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0), r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r1, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4041}, 0x4000000) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, VM DIAGNOSIS: 09:20:53 Registers: info registers vcpu 0 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff829750a0 RDI=ffffffff889c19e0 RBP=ffffffff889c19a0 RSP=ffff88804980f430 R8 =0000000000000000 R9 =ffffed10016b1046 R10=00000000000fe503 R11=666666203a312320 R12=0000000000000823 R13=0000000000000020 R14=fffffbfff113838e R15=dffffc0000000000 RIP=ffffffff829750f5 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 000055555ec09400 00000000 00000000 GS =0000 ffff8880e5342000 00000000 00000000 LDT=0000 fffffe1900000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f7a3e7bf546 CR3=000000000f5f7000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000a60ce07b00000000cec3662e XMM01=000000000000000003515b82db34ca11 XMM02=0000000000000000333bebdfd0a6a21d XMM03=00000000000000000000000000000000 XMM04=ffffffff0000ff00000000ff00000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=ffff88806ce3f100 RCX=ffffffff8169dc2a RDX=ffff88801b745280 RSI=ffffffff8169dc04 RDI=0000000000000005 RBP=0000000000000003 RSP=ffff888048be76c8 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=ffffed100d9c7e21 R13=ffff88806ce3f108 R14=0000000000000001 R15=dffffc0000000000 RIP=ffffffff8169dc06 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e5442000 00000000 00000000 LDT=0000 fffffe2800000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fa5c4229718 CR3=000000004fbb2000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00007f12001417c000007f12001417c8 XMM02=00007f12001417e000007f12001417c0 XMM03=00007f12001417c800007f12001417c0 XMM04=ffffffff0000ff00000000ff00000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000