Warning: Permanently added '[localhost]:25064' (ECDSA) to the list of known hosts.
2026/01/15 09:54:58 fuzzer started
2026/01/15 09:54:58 dialing manager at localhost:35245
syzkaller login: [   51.670210] cgroup: Unknown subsys name 'net'
[   51.743581] cgroup: Unknown subsys name 'cpuset'
[   51.756288] cgroup: Unknown subsys name 'rlimit'
2026/01/15 09:55:08 syscalls: 2214
2026/01/15 09:55:08 code coverage: enabled
2026/01/15 09:55:08 comparison tracing: enabled
2026/01/15 09:55:08 extra coverage: enabled
2026/01/15 09:55:08 setuid sandbox: enabled
2026/01/15 09:55:08 namespace sandbox: enabled
2026/01/15 09:55:08 Android sandbox: enabled
2026/01/15 09:55:08 fault injection: enabled
2026/01/15 09:55:08 leak checking: enabled
2026/01/15 09:55:08 net packet injection: enabled
2026/01/15 09:55:08 net device setup: enabled
2026/01/15 09:55:08 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2026/01/15 09:55:08 devlink PCI setup: PCI device 0000:00:10.0 is not available
2026/01/15 09:55:08 USB emulation: enabled
2026/01/15 09:55:08 hci packet injection: enabled
2026/01/15 09:55:08 wifi device emulation: enabled
2026/01/15 09:55:08 802.15.4 emulation: enabled
2026/01/15 09:55:08 fetching corpus: 0, signal 0/2000 (executing program)
2026/01/15 09:55:08 fetching corpus: 50, signal 23109/26713 (executing program)
2026/01/15 09:55:09 fetching corpus: 100, signal 40677/45672 (executing program)
2026/01/15 09:55:09 fetching corpus: 150, signal 46677/53095 (executing program)
2026/01/15 09:55:09 fetching corpus: 200, signal 55990/63639 (executing program)
2026/01/15 09:55:09 fetching corpus: 250, signal 61108/70067 (executing program)
2026/01/15 09:55:09 fetching corpus: 300, signal 67819/77920 (executing program)
2026/01/15 09:55:09 fetching corpus: 350, signal 71207/82535 (executing program)
2026/01/15 09:55:09 fetching corpus: 400, signal 74635/87137 (executing program)
2026/01/15 09:55:10 fetching corpus: 450, signal 78240/91809 (executing program)
2026/01/15 09:55:10 fetching corpus: 500, signal 80350/95100 (executing program)
2026/01/15 09:55:10 fetching corpus: 550, signal 83388/99127 (executing program)
2026/01/15 09:55:10 fetching corpus: 600, signal 87493/104087 (executing program)
2026/01/15 09:55:10 fetching corpus: 650, signal 90463/107999 (executing program)
2026/01/15 09:55:10 fetching corpus: 700, signal 92175/110778 (executing program)
2026/01/15 09:55:10 fetching corpus: 750, signal 96429/115770 (executing program)
2026/01/15 09:55:10 fetching corpus: 800, signal 98319/118588 (executing program)
2026/01/15 09:55:11 fetching corpus: 850, signal 100715/121813 (executing program)
2026/01/15 09:55:11 fetching corpus: 900, signal 101948/123974 (executing program)
2026/01/15 09:55:11 fetching corpus: 950, signal 104168/126963 (executing program)
2026/01/15 09:55:11 fetching corpus: 1000, signal 106354/129866 (executing program)
2026/01/15 09:55:11 fetching corpus: 1050, signal 109259/133319 (executing program)
2026/01/15 09:55:11 fetching corpus: 1100, signal 111666/136392 (executing program)
2026/01/15 09:55:11 fetching corpus: 1150, signal 112874/138413 (executing program)
2026/01/15 09:55:11 fetching corpus: 1200, signal 113985/140369 (executing program)
2026/01/15 09:55:12 fetching corpus: 1250, signal 115267/142454 (executing program)
2026/01/15 09:55:12 fetching corpus: 1300, signal 117183/144967 (executing program)
2026/01/15 09:55:12 fetching corpus: 1350, signal 118346/146899 (executing program)
2026/01/15 09:55:12 fetching corpus: 1400, signal 119518/148803 (executing program)
2026/01/15 09:55:12 fetching corpus: 1450, signal 121370/151246 (executing program)
2026/01/15 09:55:12 fetching corpus: 1500, signal 122460/153064 (executing program)
2026/01/15 09:55:12 fetching corpus: 1550, signal 123686/154966 (executing program)
2026/01/15 09:55:12 fetching corpus: 1600, signal 126045/157683 (executing program)
2026/01/15 09:55:13 fetching corpus: 1650, signal 127069/159436 (executing program)
2026/01/15 09:55:13 fetching corpus: 1700, signal 128553/161491 (executing program)
2026/01/15 09:55:13 fetching corpus: 1750, signal 130236/163610 (executing program)
2026/01/15 09:55:13 fetching corpus: 1800, signal 131592/165495 (executing program)
2026/01/15 09:55:13 fetching corpus: 1850, signal 132564/167089 (executing program)
2026/01/15 09:55:13 fetching corpus: 1900, signal 134223/169135 (executing program)
2026/01/15 09:55:13 fetching corpus: 1950, signal 135216/170715 (executing program)
2026/01/15 09:55:13 fetching corpus: 2000, signal 136222/172288 (executing program)
2026/01/15 09:55:13 fetching corpus: 2050, signal 137451/173949 (executing program)
2026/01/15 09:55:14 fetching corpus: 2100, signal 138308/175409 (executing program)
2026/01/15 09:55:14 fetching corpus: 2150, signal 140107/177392 (executing program)
2026/01/15 09:55:14 fetching corpus: 2200, signal 141535/179188 (executing program)
2026/01/15 09:55:14 fetching corpus: 2250, signal 142969/180905 (executing program)
2026/01/15 09:55:14 fetching corpus: 2300, signal 143903/182330 (executing program)
2026/01/15 09:55:14 fetching corpus: 2350, signal 144854/183669 (executing program)
2026/01/15 09:55:14 fetching corpus: 2400, signal 145887/185083 (executing program)
2026/01/15 09:55:14 fetching corpus: 2450, signal 147045/186541 (executing program)
2026/01/15 09:55:15 fetching corpus: 2500, signal 147605/187646 (executing program)
2026/01/15 09:55:15 fetching corpus: 2550, signal 148266/188786 (executing program)
2026/01/15 09:55:15 fetching corpus: 2600, signal 148966/189981 (executing program)
2026/01/15 09:55:15 fetching corpus: 2650, signal 149937/191274 (executing program)
2026/01/15 09:55:15 fetching corpus: 2700, signal 150530/192337 (executing program)
2026/01/15 09:55:15 fetching corpus: 2750, signal 151559/193630 (executing program)
2026/01/15 09:55:15 fetching corpus: 2800, signal 152260/194748 (executing program)
2026/01/15 09:55:15 fetching corpus: 2850, signal 153312/196010 (executing program)
2026/01/15 09:55:16 fetching corpus: 2900, signal 154324/197231 (executing program)
2026/01/15 09:55:16 fetching corpus: 2950, signal 155023/198308 (executing program)
2026/01/15 09:55:16 fetching corpus: 3000, signal 155741/199414 (executing program)
2026/01/15 09:55:16 fetching corpus: 3050, signal 156519/200558 (executing program)
2026/01/15 09:55:16 fetching corpus: 3100, signal 157078/201579 (executing program)
2026/01/15 09:55:16 fetching corpus: 3150, signal 157888/202638 (executing program)
2026/01/15 09:55:16 fetching corpus: 3200, signal 158780/203761 (executing program)
2026/01/15 09:55:16 fetching corpus: 3250, signal 159276/204681 (executing program)
2026/01/15 09:55:16 fetching corpus: 3300, signal 161217/206237 (executing program)
2026/01/15 09:55:16 fetching corpus: 3350, signal 161696/207105 (executing program)
2026/01/15 09:55:17 fetching corpus: 3400, signal 162418/208066 (executing program)
2026/01/15 09:55:17 fetching corpus: 3450, signal 163139/208978 (executing program)
2026/01/15 09:55:17 fetching corpus: 3500, signal 163720/209883 (executing program)
2026/01/15 09:55:17 fetching corpus: 3550, signal 164346/210754 (executing program)
2026/01/15 09:55:17 fetching corpus: 3600, signal 164987/211639 (executing program)
2026/01/15 09:55:17 fetching corpus: 3650, signal 165759/212563 (executing program)
2026/01/15 09:55:17 fetching corpus: 3700, signal 166308/213412 (executing program)
2026/01/15 09:55:17 fetching corpus: 3750, signal 167209/214355 (executing program)
2026/01/15 09:55:18 fetching corpus: 3800, signal 167781/215163 (executing program)
2026/01/15 09:55:18 fetching corpus: 3850, signal 168345/216002 (executing program)
2026/01/15 09:55:18 fetching corpus: 3900, signal 169041/216844 (executing program)
2026/01/15 09:55:18 fetching corpus: 3950, signal 169556/217639 (executing program)
2026/01/15 09:55:18 fetching corpus: 4000, signal 170048/218414 (executing program)
2026/01/15 09:55:18 fetching corpus: 4050, signal 170815/219280 (executing program)
2026/01/15 09:55:18 fetching corpus: 4100, signal 171403/220046 (executing program)
2026/01/15 09:55:18 fetching corpus: 4150, signal 172144/220864 (executing program)
2026/01/15 09:55:18 fetching corpus: 4200, signal 172699/221593 (executing program)
2026/01/15 09:55:19 fetching corpus: 4250, signal 173054/222261 (executing program)
2026/01/15 09:55:19 fetching corpus: 4300, signal 175472/223509 (executing program)
2026/01/15 09:55:19 fetching corpus: 4350, signal 176338/224294 (executing program)
2026/01/15 09:55:19 fetching corpus: 4400, signal 176835/224948 (executing program)
2026/01/15 09:55:19 fetching corpus: 4450, signal 177572/225691 (executing program)
2026/01/15 09:55:19 fetching corpus: 4500, signal 177971/226275 (executing program)
2026/01/15 09:55:19 fetching corpus: 4550, signal 178929/227032 (executing program)
2026/01/15 09:55:19 fetching corpus: 4600, signal 179294/227664 (executing program)
2026/01/15 09:55:20 fetching corpus: 4650, signal 179624/228237 (executing program)
2026/01/15 09:55:20 fetching corpus: 4700, signal 180739/228985 (executing program)
2026/01/15 09:55:20 fetching corpus: 4750, signal 181413/229635 (executing program)
2026/01/15 09:55:20 fetching corpus: 4800, signal 181792/230228 (executing program)
2026/01/15 09:55:20 fetching corpus: 4850, signal 182418/230870 (executing program)
2026/01/15 09:55:20 fetching corpus: 4900, signal 183217/231505 (executing program)
2026/01/15 09:55:20 fetching corpus: 4950, signal 183627/232032 (executing program)
2026/01/15 09:55:20 fetching corpus: 5000, signal 184200/232622 (executing program)
2026/01/15 09:55:20 fetching corpus: 5050, signal 184649/233178 (executing program)
2026/01/15 09:55:21 fetching corpus: 5100, signal 185157/233702 (executing program)
2026/01/15 09:55:21 fetching corpus: 5150, signal 185665/234274 (executing program)
2026/01/15 09:55:21 fetching corpus: 5200, signal 186099/234792 (executing program)
2026/01/15 09:55:21 fetching corpus: 5250, signal 186531/235301 (executing program)
2026/01/15 09:55:21 fetching corpus: 5300, signal 186953/235817 (executing program)
2026/01/15 09:55:21 fetching corpus: 5350, signal 187323/236294 (executing program)
2026/01/15 09:55:21 fetching corpus: 5400, signal 188032/236807 (executing program)
2026/01/15 09:55:21 fetching corpus: 5450, signal 188397/237278 (executing program)
2026/01/15 09:55:21 fetching corpus: 5500, signal 188892/237764 (executing program)
2026/01/15 09:55:21 fetching corpus: 5550, signal 189353/238258 (executing program)
2026/01/15 09:55:22 fetching corpus: 5600, signal 189721/238682 (executing program)
2026/01/15 09:55:22 fetching corpus: 5650, signal 190200/239100 (executing program)
2026/01/15 09:55:22 fetching corpus: 5700, signal 190590/239547 (executing program)
2026/01/15 09:55:22 fetching corpus: 5750, signal 191062/239961 (executing program)
2026/01/15 09:55:22 fetching corpus: 5800, signal 191476/240349 (executing program)
2026/01/15 09:55:22 fetching corpus: 5850, signal 191936/240757 (executing program)
2026/01/15 09:55:22 fetching corpus: 5900, signal 192277/241188 (executing program)
2026/01/15 09:55:22 fetching corpus: 5950, signal 192742/241581 (executing program)
2026/01/15 09:55:22 fetching corpus: 6000, signal 193213/241787 (executing program)
2026/01/15 09:55:23 fetching corpus: 6050, signal 193694/241787 (executing program)
2026/01/15 09:55:23 fetching corpus: 6100, signal 194095/241787 (executing program)
2026/01/15 09:55:23 fetching corpus: 6150, signal 194416/241791 (executing program)
2026/01/15 09:55:23 fetching corpus: 6200, signal 194758/241791 (executing program)
2026/01/15 09:55:23 fetching corpus: 6250, signal 195086/241801 (executing program)
2026/01/15 09:55:23 fetching corpus: 6300, signal 195514/241801 (executing program)
2026/01/15 09:55:23 fetching corpus: 6350, signal 195936/241801 (executing program)
2026/01/15 09:55:23 fetching corpus: 6400, signal 196299/241801 (executing program)
2026/01/15 09:55:23 fetching corpus: 6450, signal 196665/241801 (executing program)
2026/01/15 09:55:23 fetching corpus: 6500, signal 197115/241805 (executing program)
2026/01/15 09:55:24 fetching corpus: 6550, signal 197450/241805 (executing program)
2026/01/15 09:55:24 fetching corpus: 6600, signal 197913/241805 (executing program)
2026/01/15 09:55:24 fetching corpus: 6650, signal 198303/241806 (executing program)
2026/01/15 09:55:24 fetching corpus: 6700, signal 198584/241806 (executing program)
2026/01/15 09:55:24 fetching corpus: 6750, signal 199146/241810 (executing program)
2026/01/15 09:55:24 fetching corpus: 6800, signal 199432/241811 (executing program)
2026/01/15 09:55:24 fetching corpus: 6850, signal 199807/241811 (executing program)
2026/01/15 09:55:24 fetching corpus: 6900, signal 200209/241812 (executing program)
2026/01/15 09:55:24 fetching corpus: 6950, signal 200500/241812 (executing program)
2026/01/15 09:55:25 fetching corpus: 7000, signal 200807/241821 (executing program)
2026/01/15 09:55:25 fetching corpus: 7050, signal 201180/241821 (executing program)
2026/01/15 09:55:25 fetching corpus: 7100, signal 201541/241821 (executing program)
2026/01/15 09:55:25 fetching corpus: 7150, signal 201912/241825 (executing program)
2026/01/15 09:55:25 fetching corpus: 7200, signal 202631/241829 (executing program)
2026/01/15 09:55:25 fetching corpus: 7250, signal 203014/241830 (executing program)
2026/01/15 09:55:25 fetching corpus: 7300, signal 203423/241849 (executing program)
2026/01/15 09:55:25 fetching corpus: 7350, signal 203788/241849 (executing program)
2026/01/15 09:55:25 fetching corpus: 7400, signal 204084/241849 (executing program)
2026/01/15 09:55:26 fetching corpus: 7450, signal 204368/241849 (executing program)
2026/01/15 09:55:26 fetching corpus: 7500, signal 204949/241856 (executing program)
2026/01/15 09:55:26 fetching corpus: 7550, signal 205290/241856 (executing program)
2026/01/15 09:55:26 fetching corpus: 7600, signal 205684/241861 (executing program)
2026/01/15 09:55:26 fetching corpus: 7650, signal 205986/241862 (executing program)
2026/01/15 09:55:26 fetching corpus: 7700, signal 206388/241867 (executing program)
2026/01/15 09:55:26 fetching corpus: 7750, signal 206711/241867 (executing program)
2026/01/15 09:55:26 fetching corpus: 7800, signal 207006/241872 (executing program)
2026/01/15 09:55:26 fetching corpus: 7850, signal 207294/241872 (executing program)
2026/01/15 09:55:26 fetching corpus: 7900, signal 207540/241872 (executing program)
2026/01/15 09:55:27 fetching corpus: 7950, signal 207773/241872 (executing program)
2026/01/15 09:55:27 fetching corpus: 8000, signal 208119/241873 (executing program)
2026/01/15 09:55:27 fetching corpus: 8050, signal 208491/241873 (executing program)
2026/01/15 09:55:27 fetching corpus: 8100, signal 208780/241873 (executing program)
2026/01/15 09:55:27 fetching corpus: 8150, signal 208969/241873 (executing program)
2026/01/15 09:55:27 fetching corpus: 8200, signal 209241/241874 (executing program)
2026/01/15 09:55:27 fetching corpus: 8250, signal 209495/241874 (executing program)
2026/01/15 09:55:27 fetching corpus: 8300, signal 209876/241875 (executing program)
2026/01/15 09:55:27 fetching corpus: 8350, signal 210114/241875 (executing program)
2026/01/15 09:55:28 fetching corpus: 8400, signal 210354/241875 (executing program)
2026/01/15 09:55:28 fetching corpus: 8450, signal 210712/241875 (executing program)
2026/01/15 09:55:28 fetching corpus: 8500, signal 211059/241892 (executing program)
2026/01/15 09:55:28 fetching corpus: 8550, signal 211357/241895 (executing program)
2026/01/15 09:55:28 fetching corpus: 8600, signal 211594/241902 (executing program)
2026/01/15 09:55:28 fetching corpus: 8650, signal 211926/241902 (executing program)
2026/01/15 09:55:28 fetching corpus: 8700, signal 212322/241902 (executing program)
2026/01/15 09:55:28 fetching corpus: 8750, signal 212624/241904 (executing program)
2026/01/15 09:55:28 fetching corpus: 8800, signal 212899/241905 (executing program)
2026/01/15 09:55:29 fetching corpus: 8850, signal 213181/241905 (executing program)
2026/01/15 09:55:29 fetching corpus: 8900, signal 213390/241905 (executing program)
2026/01/15 09:55:29 fetching corpus: 8950, signal 213773/241909 (executing program)
2026/01/15 09:55:29 fetching corpus: 9000, signal 214032/241909 (executing program)
2026/01/15 09:55:29 fetching corpus: 9050, signal 214379/241909 (executing program)
2026/01/15 09:55:29 fetching corpus: 9100, signal 214766/241921 (executing program)
2026/01/15 09:55:29 fetching corpus: 9150, signal 215083/241921 (executing program)
2026/01/15 09:55:29 fetching corpus: 9200, signal 215366/241921 (executing program)
2026/01/15 09:55:30 fetching corpus: 9250, signal 215595/241923 (executing program)
2026/01/15 09:55:30 fetching corpus: 9300, signal 215911/241923 (executing program)
2026/01/15 09:55:30 fetching corpus: 9350, signal 216166/241928 (executing program)
2026/01/15 09:55:30 fetching corpus: 9400, signal 216400/241931 (executing program)
2026/01/15 09:55:30 fetching corpus: 9450, signal 216626/241934 (executing program)
2026/01/15 09:55:30 fetching corpus: 9500, signal 217067/241934 (executing program)
2026/01/15 09:55:30 fetching corpus: 9550, signal 217322/241934 (executing program)
2026/01/15 09:55:30 fetching corpus: 9600, signal 217565/241943 (executing program)
2026/01/15 09:55:30 fetching corpus: 9650, signal 217901/241943 (executing program)
2026/01/15 09:55:30 fetching corpus: 9700, signal 218234/241943 (executing program)
2026/01/15 09:55:30 fetching corpus: 9750, signal 218475/241943 (executing program)
2026/01/15 09:55:31 fetching corpus: 9800, signal 218743/241945 (executing program)
2026/01/15 09:55:31 fetching corpus: 9850, signal 218978/241946 (executing program)
2026/01/15 09:55:31 fetching corpus: 9900, signal 219274/241948 (executing program)
2026/01/15 09:55:31 fetching corpus: 9950, signal 219536/241948 (executing program)
2026/01/15 09:55:31 fetching corpus: 10000, signal 219804/241948 (executing program)
2026/01/15 09:55:31 fetching corpus: 10050, signal 220152/241953 (executing program)
2026/01/15 09:55:31 fetching corpus: 10100, signal 220407/241955 (executing program)
2026/01/15 09:55:31 fetching corpus: 10150, signal 220662/241956 (executing program)
2026/01/15 09:55:32 fetching corpus: 10200, signal 220990/241961 (executing program)
2026/01/15 09:55:32 fetching corpus: 10250, signal 221237/241961 (executing program)
2026/01/15 09:55:32 fetching corpus: 10300, signal 221504/241961 (executing program)
2026/01/15 09:55:32 fetching corpus: 10350, signal 221810/241961 (executing program)
2026/01/15 09:55:32 fetching corpus: 10400, signal 222349/241963 (executing program)
2026/01/15 09:55:32 fetching corpus: 10450, signal 222664/241963 (executing program)
2026/01/15 09:55:32 fetching corpus: 10500, signal 222897/241963 (executing program)
2026/01/15 09:55:32 fetching corpus: 10550, signal 223145/241969 (executing program)
2026/01/15 09:55:32 fetching corpus: 10600, signal 223431/241970 (executing program)
2026/01/15 09:55:33 fetching corpus: 10650, signal 223643/241971 (executing program)
2026/01/15 09:55:33 fetching corpus: 10700, signal 223870/241971 (executing program)
2026/01/15 09:55:33 fetching corpus: 10750, signal 224109/241972 (executing program)
2026/01/15 09:55:33 fetching corpus: 10800, signal 224321/241972 (executing program)
2026/01/15 09:55:33 fetching corpus: 10850, signal 224566/241973 (executing program)
2026/01/15 09:55:33 fetching corpus: 10900, signal 224826/241973 (executing program)
2026/01/15 09:55:33 fetching corpus: 10950, signal 225107/241973 (executing program)
2026/01/15 09:55:33 fetching corpus: 11000, signal 225377/241973 (executing program)
2026/01/15 09:55:34 fetching corpus: 11050, signal 225628/241973 (executing program)
2026/01/15 09:55:34 fetching corpus: 11100, signal 225836/241973 (executing program)
2026/01/15 09:55:34 fetching corpus: 11150, signal 226043/241974 (executing program)
2026/01/15 09:55:34 fetching corpus: 11200, signal 226296/241974 (executing program)
2026/01/15 09:55:34 fetching corpus: 11250, signal 226534/241989 (executing program)
2026/01/15 09:55:34 fetching corpus: 11300, signal 226739/241990 (executing program)
2026/01/15 09:55:34 fetching corpus: 11350, signal 226933/241990 (executing program)
2026/01/15 09:55:34 fetching corpus: 11400, signal 227270/241998 (executing program)
2026/01/15 09:55:34 fetching corpus: 11450, signal 227489/241998 (executing program)
2026/01/15 09:55:35 fetching corpus: 11500, signal 227787/241998 (executing program)
2026/01/15 09:55:35 fetching corpus: 11550, signal 228053/242000 (executing program)
2026/01/15 09:55:35 fetching corpus: 11600, signal 228263/242002 (executing program)
2026/01/15 09:55:35 fetching corpus: 11650, signal 228490/242002 (executing program)
2026/01/15 09:55:35 fetching corpus: 11700, signal 228704/242002 (executing program)
2026/01/15 09:55:35 fetching corpus: 11750, signal 228931/242003 (executing program)
2026/01/15 09:55:35 fetching corpus: 11800, signal 229159/242003 (executing program)
2026/01/15 09:55:35 fetching corpus: 11850, signal 229359/242003 (executing program)
2026/01/15 09:55:36 fetching corpus: 11900, signal 229641/242003 (executing program)
2026/01/15 09:55:36 fetching corpus: 11950, signal 229979/242003 (executing program)
2026/01/15 09:55:36 fetching corpus: 12000, signal 230198/242004 (executing program)
2026/01/15 09:55:36 fetching corpus: 12050, signal 230430/242004 (executing program)
2026/01/15 09:55:36 fetching corpus: 12100, signal 230683/242004 (executing program)
2026/01/15 09:55:36 fetching corpus: 12150, signal 230884/242006 (executing program)
2026/01/15 09:55:36 fetching corpus: 12200, signal 231172/242007 (executing program)
2026/01/15 09:55:36 fetching corpus: 12250, signal 231467/242007 (executing program)
2026/01/15 09:55:37 fetching corpus: 12300, signal 231669/242012 (executing program)
2026/01/15 09:55:37 fetching corpus: 12350, signal 232019/242017 (executing program)
2026/01/15 09:55:37 fetching corpus: 12400, signal 232187/242017 (executing program)
2026/01/15 09:55:37 fetching corpus: 12450, signal 232456/242017 (executing program)
2026/01/15 09:55:37 fetching corpus: 12500, signal 232741/242018 (executing program)
2026/01/15 09:55:37 fetching corpus: 12550, signal 232876/242022 (executing program)
2026/01/15 09:55:37 fetching corpus: 12600, signal 233058/242022 (executing program)
2026/01/15 09:55:37 fetching corpus: 12650, signal 233253/242022 (executing program)
2026/01/15 09:55:37 fetching corpus: 12700, signal 233489/242022 (executing program)
2026/01/15 09:55:37 fetching corpus: 12750, signal 233768/242022 (executing program)
2026/01/15 09:55:38 fetching corpus: 12800, signal 233945/242022 (executing program)
2026/01/15 09:55:38 fetching corpus: 12850, signal 234162/242022 (executing program)
2026/01/15 09:55:38 fetching corpus: 12900, signal 234400/242022 (executing program)
2026/01/15 09:55:38 fetching corpus: 12950, signal 234569/242022 (executing program)
2026/01/15 09:55:38 fetching corpus: 13000, signal 234739/242023 (executing program)
2026/01/15 09:55:38 fetching corpus: 13050, signal 234905/242023 (executing program)
2026/01/15 09:55:38 fetching corpus: 13100, signal 235077/242024 (executing program)
2026/01/15 09:55:38 fetching corpus: 13150, signal 235262/242024 (executing program)
2026/01/15 09:55:39 fetching corpus: 13200, signal 235416/242026 (executing program)
2026/01/15 09:55:39 fetching corpus: 13250, signal 235679/242034 (executing program)
2026/01/15 09:55:39 fetching corpus: 13300, signal 235895/242034 (executing program)
2026/01/15 09:55:39 fetching corpus: 13350, signal 236102/242042 (executing program)
2026/01/15 09:55:39 fetching corpus: 13400, signal 236278/242042 (executing program)
2026/01/15 09:55:39 fetching corpus: 13450, signal 236516/242056 (executing program)
2026/01/15 09:55:39 fetching corpus: 13500, signal 236756/242057 (executing program)
2026/01/15 09:55:39 fetching corpus: 13550, signal 237012/242057 (executing program)
2026/01/15 09:55:39 fetching corpus: 13600, signal 237168/242058 (executing program)
2026/01/15 09:55:40 fetching corpus: 13650, signal 237399/242058 (executing program)
2026/01/15 09:55:40 fetching corpus: 13700, signal 237632/242058 (executing program)
2026/01/15 09:55:40 fetching corpus: 13750, signal 237800/242063 (executing program)
2026/01/15 09:55:40 fetching corpus: 13800, signal 238095/242063 (executing program)
2026/01/15 09:55:40 fetching corpus: 13850, signal 238254/242063 (executing program)
2026/01/15 09:55:40 fetching corpus: 13900, signal 238533/242063 (executing program)
2026/01/15 09:55:40 fetching corpus: 13950, signal 238704/242063 (executing program)
2026/01/15 09:55:40 fetching corpus: 14000, signal 238898/242063 (executing program)
2026/01/15 09:55:41 fetching corpus: 14050, signal 239056/242063 (executing program)
2026/01/15 09:55:41 fetching corpus: 14100, signal 239302/242063 (executing program)
2026/01/15 09:55:41 fetching corpus: 14150, signal 239520/242063 (executing program)
2026/01/15 09:55:41 fetching corpus: 14200, signal 239693/242066 (executing program)
2026/01/15 09:55:41 fetching corpus: 14250, signal 239877/242066 (executing program)
2026/01/15 09:55:41 fetching corpus: 14300, signal 240057/242066 (executing program)
2026/01/15 09:55:41 fetching corpus: 14350, signal 240253/242066 (executing program)
2026/01/15 09:55:41 fetching corpus: 14367, signal 240303/242071 (executing program)
2026/01/15 09:55:41 fetching corpus: 14367, signal 240303/242071 (executing program)
2026/01/15 09:55:44 starting 8 fuzzer processes
09:55:44 executing program 0:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000001740)={0x1, &(0x7f0000001700)=[{0x6}]}, 0x10)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r0)

09:55:44 executing program 1:
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000040))
clock_getres(0x0, 0x0)

09:55:44 executing program 2:
modify_ldt$write(0x1, &(0x7f0000000080), 0x10)
modify_ldt$write(0x1, &(0x7f0000000040)={0x80000001, 0x1000, 0x1000, 0x1, 0x3, 0x1}, 0x10)
modify_ldt$write(0x1, &(0x7f0000000100)={0xffffffc1, 0x1000, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1}, 0x10)
modify_ldt$write(0xffffc90000000000, &(0x7f0000000180), 0x10)

09:55:44 executing program 3:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="06", 0x1}], 0x1}, 0x40011)
recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0)

[   97.177567] audit: type=1400 audit(1768470944.157:7): avc:  denied  { execmem } for  pid=272 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
09:55:44 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
inotify_init()

09:55:44 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
nanosleep(&(0x7f0000000040), 0x0)

09:55:44 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$tmpfs(&(0x7f0000000380), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[])
symlinkat(&(0x7f0000000040)='./file0/file0\x00', r0, &(0x7f0000000200)='./file0\x00')
unlinkat(r0, &(0x7f0000000280)='./file0/file0\x00', 0x0)

09:55:44 executing program 7:
r0 = memfd_secret(0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, 0x12011, r0, 0x0)

[   98.474474] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   98.476916] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   98.478431] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   98.479004] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   98.490815] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   98.491861] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   98.493373] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   98.494596] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   98.500415] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   98.505346] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   98.509303] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   98.520930] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   98.528403] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   98.538090] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   98.540491] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   98.541337] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   98.543639] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   98.547542] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   98.558334] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   98.560405] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   98.650885] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   98.660417] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   98.663483] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   98.686012] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   98.736096] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[   98.736119] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[   98.739897] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[   98.741523] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[   98.751430] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[   98.755923] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   98.757287] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   98.758997] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   98.759190] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   98.764482] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[   98.768675] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[   98.772581] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   98.774678] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   98.777885] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[   98.786558] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[   98.790235] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  100.551699] Bluetooth: hci1: command tx timeout
[  100.615201] Bluetooth: hci2: command tx timeout
[  100.615261] Bluetooth: hci0: command tx timeout
[  100.615858] Bluetooth: hci3: command tx timeout
[  100.872209] Bluetooth: hci7: command tx timeout
[  100.872809] Bluetooth: hci6: command tx timeout
[  100.874209] Bluetooth: hci5: command tx timeout
[  100.936478] Bluetooth: hci4: command tx timeout
[  102.599302] Bluetooth: hci1: command tx timeout
[  102.663195] Bluetooth: hci0: command tx timeout
[  102.663643] Bluetooth: hci2: command tx timeout
[  102.664194] Bluetooth: hci3: command tx timeout
[  102.919982] Bluetooth: hci7: command tx timeout
[  102.920691] Bluetooth: hci6: command tx timeout
[  102.921164] Bluetooth: hci5: command tx timeout
[  102.984161] Bluetooth: hci4: command tx timeout
[  104.649256] Bluetooth: hci1: command tx timeout
[  104.712734] Bluetooth: hci3: command tx timeout
[  104.713287] Bluetooth: hci2: command tx timeout
[  104.713679] Bluetooth: hci0: command tx timeout
[  104.970212] Bluetooth: hci5: command tx timeout
[  104.970794] Bluetooth: hci6: command tx timeout
[  104.971212] Bluetooth: hci7: command tx timeout
[  105.032891] Bluetooth: hci4: command tx timeout
[  106.695194] Bluetooth: hci1: command tx timeout
[  106.760200] Bluetooth: hci3: command tx timeout
[  106.760645] Bluetooth: hci0: command tx timeout
[  106.761017] Bluetooth: hci2: command tx timeout
[  107.015985] Bluetooth: hci6: command tx timeout
[  107.016186] Bluetooth: hci5: command tx timeout
[  107.016538] Bluetooth: hci7: command tx timeout
[  107.079200] Bluetooth: hci4: command tx timeout
[  129.712564] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  129.714397] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  129.962590] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  129.963250] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  130.046455] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  130.047103] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  130.124523] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  130.125162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  130.150052] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  130.150653] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  130.172443] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  130.173030] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  130.200627] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  130.201208] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  130.246267] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  130.246907] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  130.262037] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  130.262630] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
09:56:17 executing program 2:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
kexec_load(0x0, 0x4f, 0x0, 0x0)

09:56:17 executing program 7:
r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
ioctl$BLKPG(r0, 0x1269, &(0x7f0000000180)={0x0, 0x0, 0x11, &(0x7f0000001480)="6463d5bd49b70bf9953c90ea0defe248db"})

[  130.323487] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  130.324077] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
09:56:17 executing program 2:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
kexec_load(0x0, 0x4f, 0x0, 0x0)

09:56:17 executing program 2:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
kexec_load(0x0, 0x4f, 0x0, 0x0)

09:56:17 executing program 2:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
kexec_load(0x0, 0x4f, 0x0, 0x0)

09:56:17 executing program 7:
r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
ioctl$BLKPG(r0, 0x1269, &(0x7f0000000180)={0x0, 0x0, 0x11, &(0x7f0000001480)="6463d5bd49b70bf9953c90ea0defe248db"})

[  130.405700] audit: type=1400 audit(1768470977.383:8): avc:  denied  { open } for  pid=3882 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[  130.409852] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  130.410002] audit: type=1400 audit(1768470977.383:9): avc:  denied  { kernel } for  pid=3882 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[  130.410459] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  130.434848] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  130.435738] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
09:56:17 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
nanosleep(&(0x7f0000000040), 0x0)

09:56:17 executing program 7:
r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
ioctl$BLKPG(r0, 0x1269, &(0x7f0000000180)={0x0, 0x0, 0x11, &(0x7f0000001480)="6463d5bd49b70bf9953c90ea0defe248db"})

[  130.531480] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  130.532070] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  130.551342] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  130.551902] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  130.632003] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  130.632712] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  130.661552] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  130.662162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  130.768723] tmpfs: Unknown parameter './file0/file0'
09:56:18 executing program 7:
r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
ioctl$BLKPG(r0, 0x1269, &(0x7f0000000180)={0x0, 0x0, 0x11, &(0x7f0000001480)="6463d5bd49b70bf9953c90ea0defe248db"})

09:56:18 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
nanosleep(&(0x7f0000000040), 0x0)

09:56:18 executing program 4:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{0x7}, {@void, @val={0x8, 0x3, r3}, @val={0xc}}}}, 0x28}}, 0x0)

09:56:18 executing program 3:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, 0x0, &(0x7f00000000c0))

09:56:18 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000380), &(0x7f0000000540)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=ANY=[])
mount$9p_unix(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x100000, 0x0)
pivot_root(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00')

09:56:18 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0500df3070d342a163f05abd8b5408000300", @ANYRES32=r2], 0x3c}}, 0x0)

09:56:18 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100))
mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
name_to_handle_at(r0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@fuse={0xc}, &(0x7f0000000080), 0x0)

09:56:18 executing program 0:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000001740)={0x1, &(0x7f0000001700)=[{0x6}]}, 0x10)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r0)

[  131.731028] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.6'.
09:56:18 executing program 6:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = gettid()
rt_sigqueueinfo(r0, 0x12, &(0x7f0000000000))

09:56:18 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
nanosleep(&(0x7f0000000040), 0x0)

09:56:18 executing program 1:
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/config', 0x0, 0x0)
lseek(r0, 0x0, 0x0)

09:56:19 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x49, &(0x7f0000000000)=0x3, 0x4)
close(r0)

09:56:19 executing program 0:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000001740)={0x1, &(0x7f0000001700)=[{0x6}]}, 0x10)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r0)

09:56:19 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe)
connect$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe)

09:56:19 executing program 6:
creat(&(0x7f0000000080)='./file0\x00', 0x926d875da6ad5cfc)
link(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file1\x00')
creat(&(0x7f0000000000)='./file1\x00', 0x0)

09:56:19 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100))
mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
name_to_handle_at(r0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@fuse={0xc}, &(0x7f0000000080), 0x0)

09:56:19 executing program 5:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, 0x1c)
connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, 0x1c)

09:56:19 executing program 4:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{0x7}, {@void, @val={0x8, 0x3, r3}, @val={0xc}}}}, 0x28}}, 0x0)

09:56:19 executing program 7:
syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT, 0x4)
syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_mode_change={{0x14, 0x6}}}, 0x9)

[  132.119847] Bluetooth: hci7: SCO packet for unknown connection handle 0
09:56:19 executing program 3:
r0 = eventfd2(0x0, 0x0)
io_setup(0x2, &(0x7f0000000080)=<r1=>0x0)
io_submit(r1, 0x2, &(0x7f00000007c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x0, r0, &(0x7f00000001c0)="6980eece356f4c", 0x7, 0x0, 0x0, 0x3, r0}])

09:56:19 executing program 1:
capget(&(0x7f00000000c0), &(0x7f0000000100))

09:56:19 executing program 5:
r0 = getpid()
r1 = pidfd_open(r0, 0x0)
ftruncate(r1, 0xffffffff)

09:56:19 executing program 7:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x0, 0x6}})

09:56:19 executing program 0:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000001740)={0x1, &(0x7f0000001700)=[{0x6}]}, 0x10)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r0)

09:56:19 executing program 6:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3007}, 0x4)
setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0xa, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x4)

09:56:19 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100))
mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
name_to_handle_at(r0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@fuse={0xc}, &(0x7f0000000080), 0x0)

09:56:19 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', <r3=>0x0})
sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000280)={0x20, r1, 0x1, 0x0, 0x0, {0x1a}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}}, 0x0)

09:56:19 executing program 3:
prlimit64(0x0, 0x2, &(0x7f0000000040), 0x0)
mremap(&(0x7f0000871000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffd000/0x1000)=nil)

09:56:19 executing program 4:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{0x7}, {@void, @val={0x8, 0x3, r3}, @val={0xc}}}}, 0x28}}, 0x0)

[  132.120281] Bluetooth: hci7: SCO packet for unknown connection handle 0
[  132.434116] mmap: syz-executor.3 (3987): VmData 37384192 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data.
09:56:19 executing program 5:
syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='ramfs\x00', 0x0, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x3dbd4d0200473eaf, 0x0)

09:56:19 executing program 7:
request_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000000200)={'syz', 0x0}, 0x0, 0xfffffffffffffffe)
r0 = add_key$keyring(&(0x7f0000000640), &(0x7f0000000680)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$read(0xb, r0, &(0x7f00000006c0)=""/45, 0x2d)

09:56:19 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, 0x0, 0x0)

09:56:19 executing program 6:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x0)

09:56:19 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100))
mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
name_to_handle_at(r0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@fuse={0xc}, &(0x7f0000000080), 0x0)

09:56:19 executing program 5:
syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='ramfs\x00', 0x0, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x3dbd4d0200473eaf, 0x0)

09:56:19 executing program 7:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44028, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x66c8a9f7, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r1, &(0x7f0000000380)=""/4096, 0x1000)
getdents(r1, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x3e)
getdents64(0xffffffffffffffff, 0x0, 0x0)
ioctl$EXT4_IOC_MIGRATE(r1, 0x6609)
pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x80001, 0x0)
write$binfmt_script(r2, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

09:56:19 executing program 4:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{0x7}, {@void, @val={0x8, 0x3, r3}, @val={0xc}}}}, 0x28}}, 0x0)

[  132.688971] audit: type=1400 audit(1768470979.668:10): avc:  denied  { write } for  pid=3995 comm="syz-executor.6" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
09:56:19 executing program 1:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone3(&(0x7f0000000500)={0xa2807700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

[  132.720062] 
[  132.720344] =====================================
[  132.720976] WARNING: bad unlock balance detected!
[  132.721608] 6.19.0-rc5-next-20260115 #1 Not tainted
[  132.722247] -------------------------------------
[  132.723523] syz-executor.7/4004 is trying to release lock (rcu_read_lock) at:
[  132.726191] [<ffffffff81c1dee5>] __wait_on_freeing_inode+0x105/0x350
[  132.727732] but there are no more locks to release!
[  132.729443] 
[  132.729443] other info that might help us debug this:
[  132.731553] 4 locks held by syz-executor.7/4004:
[  132.732951]  #0: ffff88800f8963f8 (sb_writers#3){.+.+}-{0:0}, at: filename_create+0xf7/0x400
[  132.734112]  #1: ffff888013dc2a00 (&type->i_mutex_dir_key#3/1){+.+.}-{4:4}, at: filename_create+0x1b1/0x400
[  132.735416]  #2: ffff88800f7fa950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xe32/0x12d0
[  132.736597]  #3: ffffffff85c16898 (inode_hash_lock){+.+.}-{3:3}, at: insert_inode_locked+0xf9/0x890
[  132.737801] 
[  132.737801] stack backtrace:
[  132.738380] CPU: 0 UID: 0 PID: 4004 Comm: syz-executor.7 Not tainted 6.19.0-rc5-next-20260115 #1 PREEMPT(lazy) 
[  132.738403] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  132.738414] Call Trace:
[  132.738421]  <TASK>
[  132.738428]  dump_stack_lvl+0xca/0x120
[  132.738471]  ? __wait_on_freeing_inode+0x105/0x350
[  132.738495]  print_unlock_imbalance_bug+0x118/0x130
[  132.738520]  ? __wait_on_freeing_inode+0x105/0x350
[  132.738543]  lock_release+0x1ee/0x270
[  132.738568]  __wait_on_freeing_inode+0x10a/0x350
[  132.738593]  ? __pfx___wait_on_freeing_inode+0x10/0x10
[  132.738619]  ? __pfx_var_wake_function+0x10/0x10
[  132.738648]  ? lock_is_held_type+0x9e/0x120
[  132.738669]  insert_inode_locked+0x25f/0x890
[  132.738698]  __ext4_new_inode+0x223d/0x4cd0
[  132.738729]  ? __pfx___ext4_new_inode+0x10/0x10
[  132.738753]  ? __pfx___dquot_initialize+0x10/0x10
[  132.738783]  ? __pfx_avc_has_perm+0x10/0x10
[  132.738811]  ext4_symlink+0x623/0xb40
[  132.738844]  ? __pfx_ext4_symlink+0x10/0x10
[  132.738870]  ? security_inode_permission+0x72/0xe0
[  132.738893]  vfs_symlink+0x44b/0x840
[  132.738921]  filename_symlinkat+0x158/0x440
[  132.738945]  ? __pfx_filename_symlinkat+0x10/0x10
[  132.738968]  ? strncpy_from_user+0x21b/0x2f0
[  132.738998]  __x64_sys_symlink+0x82/0x110
[  132.739020]  do_syscall_64+0xbf/0x420
[  132.739042]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  132.739062] RIP: 0033:0x7f46be590427
[  132.739077] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 58 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  132.739095] RSP: 002b:00007ffdf11c1b88 EFLAGS: 00000206 ORIG_RAX: 0000000000000058
[  132.739112] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f46be590427
[  132.739125] RDX: 00007ffdf11c1c67 RSI: 00007f46be5eb019 RDI: 00007ffdf11c1c50
[  132.739137] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007ffdf11c1a20
[  132.739148] R10: 00007ffdf11c18d7 R11: 0000000000000206 R12: 0000000000000001
[  132.739160] R13: 0000000000000001 R14: 0000000000000001 R15: 00007ffdf11c1c50
[  132.739182]  </TASK>
[  132.764198] ------------[ cut here ]------------
[  132.764802] WARNING: kernel/rcu/tree_plugin.h:443 at __rcu_read_unlock+0x25f/0x5c0, CPU#0: syz-executor.7/4004
[  132.766151] Modules linked in:
[  132.766620] CPU: 0 UID: 0 PID: 4004 Comm: syz-executor.7 Not tainted 6.19.0-rc5-next-20260115 #1 PREEMPT(lazy) 
[  132.767875] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  132.768909] RIP: 0010:__rcu_read_unlock+0x25f/0x5c0
[  132.769644] Code: f2 02 00 00 c7 43 58 01 00 00 00 bf 09 00 00 00 e8 d6 b7 de ff 4d 85 f6 0f 84 73 fe ff ff e8 38 8a 20 00 fb e9 68 fe ff ff 90 <0f> 0b 90 5b 5d 41 5c 41 5d 41 5e e9 81 4d 74 03 e8 2c 5d 56 00 e9
[  132.771906] RSP: 0018:ffff88806ce08cb8 EFLAGS: 00010086
[  132.772587] RAX: 00000000ffffffff RBX: ffff88800f5f1b80 RCX: 0000000000000005
[  132.773479] RDX: 0000000000000000 RSI: ffffffff85e25fc0 RDI: ffff88800f5f1f7c
[  132.774357] RBP: ffff88800f5f1b80 R08: 0000000000000000 R09: ffffffff84e98ac0
[  132.775245] R10: 0000000000000000 R11: 00000000000002e2 R12: ffff88800f5f1b80
[  132.776129] R13: 0000000000000000 R14: ffff88806ce379c0 R15: ffff88806ce37a20
[  132.777024] FS:  0000555576a0a400(0000) GS:ffff8880e5342000(0000) knlGS:0000000000000000
[  132.778020] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  132.778748] CR2: 00007f46be610547 CR3: 000000001f030000 CR4: 0000000000350ef0
[  132.779643] Call Trace:
[  132.780015]  <IRQ>
[  132.781041]  sched_tick+0x232/0x6e0
[  132.783075]  update_process_times+0x116/0x210
[  132.784655]  tick_nohz_handler+0x4ff/0x8c0
[  132.786035]  ? __pfx_tick_nohz_handler+0x10/0x10
[  132.787143]  ? lock_release+0x1c7/0x270
[  132.788453]  ? __pfx_tick_nohz_handler+0x10/0x10
[  132.789837]  __hrtimer_run_queues+0x654/0xbb0
[  132.792941]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  132.793674]  ? ktime_get_update_offsets_now+0x252/0x3c0
[  132.796401]  hrtimer_interrupt+0x369/0x830
[  132.799743]  __sysvec_apic_timer_interrupt+0xbb/0x300
[  132.800962]  sysvec_apic_timer_interrupt+0x6b/0x80
[  132.801855]  </IRQ>
[  132.802144]  <TASK>
[  132.802705]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  132.803492] RIP: 0010:__sanitizer_cov_trace_pc+0x8/0x80
[  132.804261] Code: 5c 03 48 c7 c0 f4 ff ff ff eb 92 0f 1f 80 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 34 24 <65> 48 8b 15 a8 5d 38 06 65 8b 05 b9 5d 38 06 a9 00 01 ff 00 74 27
[  132.806475] RSP: 0018:ffff888048657748 EFLAGS: 00000283
[  132.807132] RAX: 0000000000000000 RBX: ffffffff86679aa0 RCX: ffffffff84c54bdf
[  132.808001] RDX: ffff88800f5f1b80 RSI: ffffffff84c54bad RDI: 0000000000000006
[  132.808881] RBP: ffffffff812f0472 R08: 0000000000000000 R09: 0000000000000000
[  132.809748] R10: ffffffff812f0472 R11: 0000000000000000 R12: ffffffff815d742f
[  132.810617] R13: dffffc0000000000 R14: 0000000000000002 R15: 000000000000000b
[  132.811896]  ? __rcu_read_unlock+0x25f/0x5c0
[  132.812545]  ? arch_enable_hybrid_capacity_scale+0x1e2/0x230
[  132.813627]  ? arch_enable_hybrid_capacity_scale+0x1e2/0x230
[  132.814837]  ? __report_bug+0x4cf/0x5b0
[  132.815568]  ? __report_bug+0x49d/0x5b0
[  132.817049]  ? __rcu_read_unlock+0x25f/0x5c0
[  132.817695]  __report_bug+0x49d/0x5b0
[  132.818860]  ? _printk+0xbe/0xf0
[  132.819658]  ? __pfx___report_bug+0x10/0x10
[  132.821812]  ? __is_insn_slot_addr+0x140/0x290
[  132.823983]  ? __rcu_read_unlock+0x25f/0x5c0
[  132.825033]  report_bug+0x7c/0x120
[  132.825754]  ? __rcu_read_unlock+0x25f/0x5c0
[  132.826528]  handle_bug+0x2e8/0x4f0
[  132.827250]  ? trace_hardirqs_off_finish+0xe3/0x110
[  132.828777]  exc_invalid_op+0x35/0x80
[  132.829797]  asm_exc_invalid_op+0x1a/0x20
[  132.830441] RIP: 0010:__rcu_read_unlock+0x25f/0x5c0
[  132.831138] Code: f2 02 00 00 c7 43 58 01 00 00 00 bf 09 00 00 00 e8 d6 b7 de ff 4d 85 f6 0f 84 73 fe ff ff e8 38 8a 20 00 fb e9 68 fe ff ff 90 <0f> 0b 90 5b 5d 41 5c 41 5d 41 5e e9 81 4d 74 03 e8 2c 5d 56 00 e9
[  132.833329] RSP: 0018:ffff8880486579a0 EFLAGS: 00010286
[  132.833970] RAX: 00000000ffffffff RBX: ffff88800f5f1b80 RCX: ffffffff815660f7
[  132.834824] RDX: 0000000000000000 RSI: ffffffff81566100 RDI: ffff88800f5f1f7c
[  132.835674] RBP: ffff88800f5f1b80 R08: 0000000000000000 R09: fffffbfff0ba7040
[  132.836538] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88800f5f1b80
[  132.837383] R13: 0000000000000001 R14: ffffffff85c10b70 R15: ffff888013da0318
[  132.839728]  ? nbcon_cpu_emergency_exit+0x117/0x1c0
[  132.840563]  ? nbcon_cpu_emergency_exit+0x120/0x1c0
[  132.842787]  __wait_on_freeing_inode+0x10f/0x350
[  132.843770]  ? __pfx___wait_on_freeing_inode+0x10/0x10
[  132.845314]  ? __pfx_var_wake_function+0x10/0x10
[  132.847065]  ? lock_is_held_type+0x9e/0x120
[  132.848619]  insert_inode_locked+0x25f/0x890
[  132.850890]  __ext4_new_inode+0x223d/0x4cd0
[  132.854359]  ? __pfx___ext4_new_inode+0x10/0x10
[  132.856082]  ? __pfx___dquot_initialize+0x10/0x10
[  132.857178]  ? __pfx_avc_has_perm+0x10/0x10
[  132.859665]  ext4_symlink+0x623/0xb40
[  132.862805]  ? __pfx_ext4_symlink+0x10/0x10
[  132.864216]  ? security_inode_permission+0x72/0xe0
[  132.866481]  vfs_symlink+0x44b/0x840
[  132.868274]  filename_symlinkat+0x158/0x440
[  132.869851]  ? __pfx_filename_symlinkat+0x10/0x10
[  132.870918]  ? strncpy_from_user+0x21b/0x2f0
[  132.873521]  __x64_sys_symlink+0x82/0x110
[  132.874540]  do_syscall_64+0xbf/0x420
[  132.875652]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  132.876393] RIP: 0033:0x7f46be590427
[  132.876923] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 58 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  132.879023] RSP: 002b:00007ffdf11c1b88 EFLAGS: 00000206 ORIG_RAX: 0000000000000058
[  132.879904] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f46be590427
[  132.880743] RDX: 00007ffdf11c1c67 RSI: 00007f46be5eb019 RDI: 00007ffdf11c1c50
[  132.881566] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007ffdf11c1a20
[  132.882394] R10: 00007ffdf11c18d7 R11: 0000000000000206 R12: 0000000000000001
[  132.883221] R13: 0000000000000001 R14: 0000000000000001 R15: 00007ffdf11c1c50
[  132.886791]  </TASK>
[  132.887071] irq event stamp: 583
[  132.887465] hardirqs last  enabled at (583): [<ffffffff84d19a7c>] _raw_spin_unlock_irqrestore+0x2c/0x50
[  132.888643] hardirqs last disabled at (582): [<ffffffff84d197d3>] _raw_spin_lock_irqsave+0x53/0x60
[  132.889763] softirqs last  enabled at (578): [<ffffffff812cda79>] kernel_fpu_end+0x59/0x70
[  132.890802] softirqs last disabled at (576): [<ffffffff812ce94b>] kernel_fpu_begin_mask+0x1bb/0x300
[  132.891917] ---[ end trace 0000000000000000 ]---
09:56:19 executing program 5:
syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='ramfs\x00', 0x0, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x3dbd4d0200473eaf, 0x0)

09:56:19 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_ADD_TX_TS(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {{0x76}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0)

09:56:19 executing program 0:
msgget(0x2, 0x0)

09:56:19 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
fcntl$setlease(r0, 0x400, 0x1)
fremovexattr(r0, &(0x7f0000000000)=@known='system.posix_acl_default\x00')

09:56:19 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, 0x0, 0x0)

09:56:19 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
pwrite64(r0, &(0x7f0000000000)="d1", 0x1, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r0, 0x0)
mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
pwrite64(r0, &(0x7f0000000080)="b9", 0x1, 0x3)

09:56:20 executing program 5:
syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='ramfs\x00', 0x0, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x3dbd4d0200473eaf, 0x0)

[  133.076978] random: crng reseeded on system resumption
09:56:20 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)

09:56:20 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
fcntl$setlease(r0, 0x400, 0x1)
fremovexattr(r0, &(0x7f0000000000)=@known='system.posix_acl_default\x00')

09:56:20 executing program 1:
syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000480)=[{&(0x7f0000010c00)="ff4344303031", 0x6, 0x9000}], 0x8000, &(0x7f0000012200))

09:56:20 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, 0x0, 0x0)

09:56:20 executing program 7:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44028, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x66c8a9f7, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r1, &(0x7f0000000380)=""/4096, 0x1000)
getdents(r1, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x3e)
getdents64(0xffffffffffffffff, 0x0, 0x0)
ioctl$EXT4_IOC_MIGRATE(r1, 0x6609)
pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x80001, 0x0)
write$binfmt_script(r2, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

09:56:20 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)

09:56:20 executing program 6:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x0)

09:56:20 executing program 2:
prctl$PR_CAPBSET_DROP(0x18, 0x27)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="6f734bd40a97383032313100d70e337779a534f73be04a461c3dd6e2294b409d137641510f8fb031f9eb927ab06fb661b9b0061202c89601238b943339808aa0bb6a494f75a8c0592051b8c6529e666bf9bc00050000483588ee78596e70"])
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getgroups(0x2, &(0x7f0000000480)=[<r0=>0x0, 0x0])
getgroups(0x2, &(0x7f0000000240)=[r0, r0])
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc)
getresgid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440))
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
r2 = dup(r1)
sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x2}, 0xb, &(0x7f0000000240)={0x0}}, 0x0)
getsockname$unix(r2, &(0x7f00000004c0), &(0x7f0000000300)=0x6e)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001240)={0x1c, r4, 0x5, 0x0, 0x25dfdc01, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)
r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001340), 0x3, 0x0)
ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r5, 0x80083313, &(0x7f0000000000))
ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r5, 0xf502, 0x0)

[  133.205052] audit: type=1326 audit(1768470980.184:11): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4038 comm="syz-executor.5" exe="/syz-executor.5" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f561b2d4b19 code=0x0
[  133.206089] loop1: detected capacity change from 0 to 144
[  133.229872] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  133.232124] random: crng reseeded on system resumption
[  133.246416] loop1: detected capacity change from 0 to 144
09:56:20 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, 0x0, 0x0)

09:56:20 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
fcntl$setlease(r0, 0x400, 0x1)
fremovexattr(r0, &(0x7f0000000000)=@known='system.posix_acl_default\x00')

09:56:20 executing program 1:
syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000480)=[{&(0x7f0000010c00)="ff4344303031", 0x6, 0x9000}], 0x8000, &(0x7f0000012200))

09:56:20 executing program 7:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44028, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x66c8a9f7, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r1, &(0x7f0000000380)=""/4096, 0x1000)
getdents(r1, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x3e)
getdents64(0xffffffffffffffff, 0x0, 0x0)
ioctl$EXT4_IOC_MIGRATE(r1, 0x6609)
pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x80001, 0x0)
write$binfmt_script(r2, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

[  133.293512] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  133.297332] random: crng reseeded on system resumption
[  133.307155] syz-executor.2 (4046) used greatest stack depth: 22896 bytes left
[  133.327717] loop1: detected capacity change from 0 to 144
09:56:20 executing program 1:
syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000480)=[{&(0x7f0000010c00)="ff4344303031", 0x6, 0x9000}], 0x8000, &(0x7f0000012200))

[  133.372429] loop1: detected capacity change from 0 to 144
09:56:20 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e)
connect$unix(r0, &(0x7f00000003c0)=@file={0x1, './file0\x00'}, 0x6e)
connect$unix(r0, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e)

09:56:20 executing program 1:
syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000480)=[{&(0x7f0000010c00)="ff4344303031", 0x6, 0x9000}], 0x8000, &(0x7f0000012200))

09:56:20 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='sched\x00')
lseek(r0, 0x0, 0x4)

[  133.413078] loop1: detected capacity change from 0 to 144
[  133.437501] random: crng reseeded on system resumption
[  134.041103] audit: type=1326 audit(1768470981.020:12): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4038 comm="syz-executor.5" exe="/syz-executor.5" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f561b2d4b19 code=0x0
09:56:21 executing program 1:
r0 = socket$packet(0x11, 0x3, 0x300)
sendmmsg$sock(r0, &(0x7f0000000600)=[{{&(0x7f0000000200)=@nfc={0x27, 0x1}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000300)="e557ce3bd6d952e732a1369d88f7", 0x1000e}], 0x1}}], 0x1, 0x0)

09:56:21 executing program 3:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x28)

09:56:21 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)

09:56:21 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
fcntl$setlease(r0, 0x400, 0x1)
fremovexattr(r0, &(0x7f0000000000)=@known='system.posix_acl_default\x00')

09:56:21 executing program 6:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x0)

09:56:21 executing program 4:
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000))
getgid()

09:56:21 executing program 7:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44028, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x66c8a9f7, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents64(r1, &(0x7f0000000380)=""/4096, 0x1000)
getdents(r1, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x3e)
getdents64(0xffffffffffffffff, 0x0, 0x0)
ioctl$EXT4_IOC_MIGRATE(r1, 0x6609)
pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x80001, 0x0)
write$binfmt_script(r2, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

09:56:21 executing program 2:
prctl$PR_CAPBSET_DROP(0x18, 0x27)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="6f734bd40a97383032313100d70e337779a534f73be04a461c3dd6e2294b409d137641510f8fb031f9eb927ab06fb661b9b0061202c89601238b943339808aa0bb6a494f75a8c0592051b8c6529e666bf9bc00050000483588ee78596e70"])
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getgroups(0x2, &(0x7f0000000480)=[<r0=>0x0, 0x0])
getgroups(0x2, &(0x7f0000000240)=[r0, r0])
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc)
getresgid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440))
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
r2 = dup(r1)
sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x2}, 0xb, &(0x7f0000000240)={0x0}}, 0x0)
getsockname$unix(r2, &(0x7f00000004c0), &(0x7f0000000300)=0x6e)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001240)={0x1c, r4, 0x5, 0x0, 0x25dfdc01, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)
r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001340), 0x3, 0x0)
ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r5, 0x80083313, &(0x7f0000000000))
ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r5, 0xf502, 0x0)

[  134.093029] audit: type=1326 audit(1768470981.072:13): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4082 comm="syz-executor.5" exe="/syz-executor.5" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f561b2d4b19 code=0x0
[  134.108842] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  134.115214] random: crng reseeded on system resumption
09:56:21 executing program 3:
prctl$PR_CAPBSET_DROP(0x18, 0x27)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="6f734bd40a97383032313100d70e337779a534f73be04a461c3dd6e2294b409d137641510f8fb031f9eb927ab06fb661b9b0061202c89601238b943339808aa0bb6a494f75a8c0592051b8c6529e666bf9bc00050000483588ee78596e70"])
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getgroups(0x2, &(0x7f0000000480)=[<r0=>0x0, 0x0])
getgroups(0x2, &(0x7f0000000240)=[r0, r0])
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc)
getresgid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440))
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
r2 = dup(r1)
sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x2}, 0xb, &(0x7f0000000240)={0x0}}, 0x0)
getsockname$unix(r2, &(0x7f00000004c0), &(0x7f0000000300)=0x6e)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001240)={0x1c, r4, 0x5, 0x0, 0x25dfdc01, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)
r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001340), 0x3, 0x0)
ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r5, 0x80083313, &(0x7f0000000000))
ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r5, 0xf502, 0x0)

[  134.210392] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  134.221696] random: crng reseeded on system resumption
09:56:21 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)

09:56:21 executing program 2:
prctl$PR_CAPBSET_DROP(0x18, 0x27)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="6f734bd40a97383032313100d70e337779a534f73be04a461c3dd6e2294b409d137641510f8fb031f9eb927ab06fb661b9b0061202c89601238b943339808aa0bb6a494f75a8c0592051b8c6529e666bf9bc00050000483588ee78596e70"])
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getgroups(0x2, &(0x7f0000000480)=[<r0=>0x0, 0x0])
getgroups(0x2, &(0x7f0000000240)=[r0, r0])
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc)
getresgid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440))
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
r2 = dup(r1)
sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x2}, 0xb, &(0x7f0000000240)={0x0}}, 0x0)
getsockname$unix(r2, &(0x7f00000004c0), &(0x7f0000000300)=0x6e)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001240)={0x1c, r4, 0x5, 0x0, 0x25dfdc01, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)
r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001340), 0x3, 0x0)
ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r5, 0x80083313, &(0x7f0000000000))
ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r5, 0xf502, 0x0)

09:56:21 executing program 6:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x0)

09:56:21 executing program 7:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}, 0x1c)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @local}, 0x1b)

09:56:21 executing program 3:
prctl$PR_CAPBSET_DROP(0x18, 0x27)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="6f734bd40a97383032313100d70e337779a534f73be04a461c3dd6e2294b409d137641510f8fb031f9eb927ab06fb661b9b0061202c89601238b943339808aa0bb6a494f75a8c0592051b8c6529e666bf9bc00050000483588ee78596e70"])
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getgroups(0x2, &(0x7f0000000480)=[<r0=>0x0, 0x0])
getgroups(0x2, &(0x7f0000000240)=[r0, r0])
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc)
getresgid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440))
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
r2 = dup(r1)
sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x2}, 0xb, &(0x7f0000000240)={0x0}}, 0x0)
getsockname$unix(r2, &(0x7f00000004c0), &(0x7f0000000300)=0x6e)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001240)={0x1c, r4, 0x5, 0x0, 0x25dfdc01, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)
r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001340), 0x3, 0x0)
ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r5, 0x80083313, &(0x7f0000000000))
ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r5, 0xf502, 0x0)

09:56:21 executing program 4:
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0x13, &(0x7f0000000c00)=0x800, 0x4)

09:56:21 executing program 1:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, 0x0, 0x0)
io_setup(0x4, &(0x7f0000000180)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f00000017c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}])
close(r1)
connect$unix(r0, &(0x7f0000000480)=@abs, 0x6e)

09:56:21 executing program 0:
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000))
execve(0x0, 0x0, 0x0)

[  135.031755] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
09:56:22 executing program 7:
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d0f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900))

[  135.048827] random: crng reseeded on system resumption
[  135.055487] audit: type=1326 audit(1768470982.034:14): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4110 comm="syz-executor.5" exe="/syz-executor.5" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f561b2d4b19 code=0x0
[  135.067500] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
09:56:22 executing program 0:
syz_mount_image$tmpfs(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setgroups(0x0, 0x0)
chown(&(0x7f0000000080)='./file0\x00', 0x0, 0xee01)

[  135.105960] loop7: detected capacity change from 0 to 512
09:56:22 executing program 4:
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0x13, &(0x7f0000000c00)=0x800, 0x4)

[  135.143936] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
09:56:22 executing program 1:
r0 = memfd_create(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000080))
fstatfs(r0, &(0x7f0000000100)=""/141)

[  135.176746] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
09:56:22 executing program 3:
prctl$PR_CAPBSET_DROP(0x18, 0x27)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="6f734bd40a97383032313100d70e337779a534f73be04a461c3dd6e2294b409d137641510f8fb031f9eb927ab06fb661b9b0061202c89601238b943339808aa0bb6a494f75a8c0592051b8c6529e666bf9bc00050000483588ee78596e70"])
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getgroups(0x2, &(0x7f0000000480)=[<r0=>0x0, 0x0])
getgroups(0x2, &(0x7f0000000240)=[r0, r0])
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc)
getresgid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440))
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
r2 = dup(r1)
sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x2}, 0xb, &(0x7f0000000240)={0x0}}, 0x0)
getsockname$unix(r2, &(0x7f00000004c0), &(0x7f0000000300)=0x6e)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001240)={0x1c, r4, 0x5, 0x0, 0x25dfdc01, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)
r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001340), 0x3, 0x0)
ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r5, 0x80083313, &(0x7f0000000000))
ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r5, 0xf502, 0x0)

09:56:22 executing program 6:
io_setup(0x2, &(0x7f0000000080)=<r0=>0x0)
r1 = socket$inet6(0xa, 0x1, 0x0)
io_submit(r0, 0x1, &(0x7f00000007c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}])
io_submit(0x0, 0x1, &(0x7f0000000100)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x101, 0xffffffffffffffff, &(0x7f0000000040)="a503799e45a3d5f0c084428d019391526d711651907aa8f88584e14ecfbec5ac8f9b2fb34b3bde24321c5277449419bf780c6347d7d5b65a19b4c5b1ee722a9b81fea428d7cc41d978ee7112f3e55aa776455cae6f", 0x55, 0x2, 0x0, 0x1}])
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000, 0x914}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
read(0xffffffffffffffff, 0x0, 0x0)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x148201, 0x0)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)

09:56:22 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000001a80)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20048011)

09:56:22 executing program 2:
prctl$PR_CAPBSET_DROP(0x18, 0x27)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="6f734bd40a97383032313100d70e337779a534f73be04a461c3dd6e2294b409d137641510f8fb031f9eb927ab06fb661b9b0061202c89601238b943339808aa0bb6a494f75a8c0592051b8c6529e666bf9bc00050000483588ee78596e70"])
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getgroups(0x2, &(0x7f0000000480)=[<r0=>0x0, 0x0])
getgroups(0x2, &(0x7f0000000240)=[r0, r0])
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc)
getresgid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440))
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
r2 = dup(r1)
sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x2}, 0xb, &(0x7f0000000240)={0x0}}, 0x0)
getsockname$unix(r2, &(0x7f00000004c0), &(0x7f0000000300)=0x6e)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001240)={0x1c, r4, 0x5, 0x0, 0x25dfdc01, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)
r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001340), 0x3, 0x0)
ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r5, 0x80083313, &(0x7f0000000000))
ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r5, 0xf502, 0x0)

[  135.341090] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  135.355222] random: crng reseeded on system resumption
[  135.357621] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
09:56:22 executing program 4:
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0x13, &(0x7f0000000c00)=0x800, 0x4)

09:56:22 executing program 1:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0)
r1 = dup(r0)
r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, 0x12, r1, 0x0)
syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x1008, &(0x7f0000000000), 0x0, 0x4)
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=<r3=>0x0)
syz_io_uring_submit(0x0, r3, &(0x7f0000000280)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'wlan1\x00', <r7=>0x0})
sendmsg$ETHTOOL_MSG_PAUSE_GET(r4, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000280)={0x20, r5, 0x1, 0x0, 0x0, {0x17}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x20}}, 0x0)
r8 = syz_io_uring_setup(0x455, &(0x7f0000003a00), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000003ac0))
r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r8, 0x14, 0x0, r9)
syz_io_uring_submit(0x0, r3, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x1, 0x0, @fd=r4, 0x0, 0x0, 0x0, {0x8400}, 0x0, {0x0, r9}}, 0x401)
syz_io_uring_submit(r2, r3, &(0x7f0000000100)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x3, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)="a6a91e0304d51ef8f90974ab5cec43d6bafab0b6f4195a2eeaa2797f110180a1bd1449a34eade39ce3a80ffc67131c181197", 0x32, 0x10000, 0x1}, 0x8)
fork()

09:56:22 executing program 7:
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d0f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900))

09:56:22 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fsopen(&(0x7f00000027c0)='aio\x00', 0x0)

09:56:22 executing program 6:
waitid(0x2, 0xffffffffffffffff, &(0x7f0000000000), 0x2, &(0x7f0000000080))

09:56:22 executing program 3:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r0, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}], 0xfffffde7)

09:56:22 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000100), r0)
sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @remote}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}]}, 0x4c}}, 0x0)

09:56:22 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)

[  135.957928] loop7: detected capacity change from 0 to 512
[  135.980819] audit: type=1326 audit(1768470982.960:15): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4149 comm="syz-executor.5" exe="/syz-executor.5" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f561b2d4b19 code=0x0
09:56:22 executing program 6:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@flushsa={0x14, 0x1c, 0x1}, 0x14}}, 0x0)

[  136.028275] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  136.032431] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
09:56:23 executing program 6:
syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0)

09:56:23 executing program 4:
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0x13, &(0x7f0000000c00)=0x800, 0x4)

09:56:23 executing program 2:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff)
perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3b, 0x6, 0x3, 0x9, 0x0, 0x1f, 0x2a08c, 0xe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f00000004c0)}, 0x5d041, 0xbaf, 0x7, 0x3, 0x2, 0x106, 0x101, 0x0, 0xfffff520, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0x1, 0x4)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000003c0)="0774ab99a781e3ec6073783e60c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x2d, r0}, 0x68)
bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c)
shutdown(0xffffffffffffffff, 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e24, 0x400, @remote, 0x3f}, 0x1c)
r2 = signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000003040)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="db4d31d6805ecdac87307b14c169d9d9", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000a00)='m', 0x1}], 0x1}}], 0x3, 0x44894)
connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x1c)
shutdown(r1, 0x1)
bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e1c, 0x3226f22d, @private1={0xfc, 0x1, '\x00', 0x1}, 0x15a8}, 0x1c)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz0\x00', 0x1ff)
clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58)

09:56:23 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, <r1=>0x0}, &(0x7f0000000040)=0x5)
setuid(r1)
ioprio_get$uid(0x3, r1)

09:56:23 executing program 1:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0)
r1 = dup(r0)
r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, 0x12, r1, 0x0)
syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x1008, &(0x7f0000000000), 0x0, 0x4)
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=<r3=>0x0)
syz_io_uring_submit(0x0, r3, &(0x7f0000000280)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'wlan1\x00', <r7=>0x0})
sendmsg$ETHTOOL_MSG_PAUSE_GET(r4, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000280)={0x20, r5, 0x1, 0x0, 0x0, {0x17}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x20}}, 0x0)
r8 = syz_io_uring_setup(0x455, &(0x7f0000003a00), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000003ac0))
r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r8, 0x14, 0x0, r9)
syz_io_uring_submit(0x0, r3, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x1, 0x0, @fd=r4, 0x0, 0x0, 0x0, {0x8400}, 0x0, {0x0, r9}}, 0x401)
syz_io_uring_submit(r2, r3, &(0x7f0000000100)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x3, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)="a6a91e0304d51ef8f90974ab5cec43d6bafab0b6f4195a2eeaa2797f110180a1bd1449a34eade39ce3a80ffc67131c181197", 0x32, 0x10000, 0x1}, 0x8)
fork()

09:56:26 executing program 3:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r0, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}], 0xfffffde7)

09:56:26 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0)
r1 = dup(r0)
r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, 0x12, r1, 0x0)
syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x1008, &(0x7f0000000000), 0x0, 0x4)
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=<r3=>0x0)
syz_io_uring_submit(0x0, r3, &(0x7f0000000280)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'wlan1\x00', <r7=>0x0})
sendmsg$ETHTOOL_MSG_PAUSE_GET(r4, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000280)={0x20, r5, 0x1, 0x0, 0x0, {0x17}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x20}}, 0x0)
r8 = syz_io_uring_setup(0x455, &(0x7f0000003a00), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000003ac0))
r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r8, 0x14, 0x0, r9)
syz_io_uring_submit(0x0, r3, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x1, 0x0, @fd=r4, 0x0, 0x0, 0x0, {0x8400}, 0x0, {0x0, r9}}, 0x401)
syz_io_uring_submit(r2, r3, &(0x7f0000000100)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x3, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)="a6a91e0304d51ef8f90974ab5cec43d6bafab0b6f4195a2eeaa2797f110180a1bd1449a34eade39ce3a80ffc67131c181197", 0x32, 0x10000, 0x1}, 0x8)
fork()

09:56:26 executing program 2:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff)
perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3b, 0x6, 0x3, 0x9, 0x0, 0x1f, 0x2a08c, 0xe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f00000004c0)}, 0x5d041, 0xbaf, 0x7, 0x3, 0x2, 0x106, 0x101, 0x0, 0xfffff520, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0x1, 0x4)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000003c0)="0774ab99a781e3ec6073783e60c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x2d, r0}, 0x68)
bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c)
shutdown(0xffffffffffffffff, 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e24, 0x400, @remote, 0x3f}, 0x1c)
r2 = signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000003040)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="db4d31d6805ecdac87307b14c169d9d9", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000a00)='m', 0x1}], 0x1}}], 0x3, 0x44894)
connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x1c)
shutdown(r1, 0x1)
bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e1c, 0x3226f22d, @private1={0xfc, 0x1, '\x00', 0x1}, 0x15a8}, 0x1c)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz0\x00', 0x1ff)
clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58)

09:56:26 executing program 1:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0)
r1 = dup(r0)
r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, 0x12, r1, 0x0)
syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x1008, &(0x7f0000000000), 0x0, 0x4)
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=<r3=>0x0)
syz_io_uring_submit(0x0, r3, &(0x7f0000000280)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'wlan1\x00', <r7=>0x0})
sendmsg$ETHTOOL_MSG_PAUSE_GET(r4, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000280)={0x20, r5, 0x1, 0x0, 0x0, {0x17}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x20}}, 0x0)
r8 = syz_io_uring_setup(0x455, &(0x7f0000003a00), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000003ac0))
r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r8, 0x14, 0x0, r9)
syz_io_uring_submit(0x0, r3, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x1, 0x0, @fd=r4, 0x0, 0x0, 0x0, {0x8400}, 0x0, {0x0, r9}}, 0x401)
syz_io_uring_submit(r2, r3, &(0x7f0000000100)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x3, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)="a6a91e0304d51ef8f90974ab5cec43d6bafab0b6f4195a2eeaa2797f110180a1bd1449a34eade39ce3a80ffc67131c181197", 0x32, 0x10000, 0x1}, 0x8)
fork()

09:56:26 executing program 5:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff)
perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3b, 0x6, 0x3, 0x9, 0x0, 0x1f, 0x2a08c, 0xe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f00000004c0)}, 0x5d041, 0xbaf, 0x7, 0x3, 0x2, 0x106, 0x101, 0x0, 0xfffff520, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0x1, 0x4)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000003c0)="0774ab99a781e3ec6073783e60c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x2d, r0}, 0x68)
bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c)
shutdown(0xffffffffffffffff, 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e24, 0x400, @remote, 0x3f}, 0x1c)
r2 = signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000003040)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="db4d31d6805ecdac87307b14c169d9d9", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000a00)='m', 0x1}], 0x1}}], 0x3, 0x44894)
connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x1c)
shutdown(r1, 0x1)
bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e1c, 0x3226f22d, @private1={0xfc, 0x1, '\x00', 0x1}, 0x15a8}, 0x1c)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz0\x00', 0x1ff)
clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58)

09:56:26 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fsopen(&(0x7f00000027c0)='aio\x00', 0x0)

09:56:26 executing program 7:
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d0f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900))

09:56:26 executing program 4:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff)
perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3b, 0x6, 0x3, 0x9, 0x0, 0x1f, 0x2a08c, 0xe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f00000004c0)}, 0x5d041, 0xbaf, 0x7, 0x3, 0x2, 0x106, 0x101, 0x0, 0xfffff520, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0x1, 0x4)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000003c0)="0774ab99a781e3ec6073783e60c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x2d, r0}, 0x68)
bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c)
shutdown(0xffffffffffffffff, 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e24, 0x400, @remote, 0x3f}, 0x1c)
r2 = signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000003040)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="db4d31d6805ecdac87307b14c169d9d9", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000a00)='m', 0x1}], 0x1}}], 0x3, 0x44894)
connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x1c)
shutdown(r1, 0x1)
bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e1c, 0x3226f22d, @private1={0xfc, 0x1, '\x00', 0x1}, 0x15a8}, 0x1c)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz0\x00', 0x1ff)
clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58)

[  139.466150] loop7: detected capacity change from 0 to 512
[  139.479612] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  139.481386] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
09:56:26 executing program 7:
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d0f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900))

[  139.585722] loop7: detected capacity change from 0 to 512
[  139.601617] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  139.603443] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
09:56:26 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fsopen(&(0x7f00000027c0)='aio\x00', 0x0)

09:56:26 executing program 1:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0)
r1 = dup(r0)
r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, 0x12, r1, 0x0)
syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x1008, &(0x7f0000000000), 0x0, 0x4)
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=<r3=>0x0)
syz_io_uring_submit(0x0, r3, &(0x7f0000000280)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'wlan1\x00', <r7=>0x0})
sendmsg$ETHTOOL_MSG_PAUSE_GET(r4, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000280)={0x20, r5, 0x1, 0x0, 0x0, {0x17}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x20}}, 0x0)
r8 = syz_io_uring_setup(0x455, &(0x7f0000003a00), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000003ac0))
r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r8, 0x14, 0x0, r9)
syz_io_uring_submit(0x0, r3, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x1, 0x0, @fd=r4, 0x0, 0x0, 0x0, {0x8400}, 0x0, {0x0, r9}}, 0x401)
syz_io_uring_submit(r2, r3, &(0x7f0000000100)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x3, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)="a6a91e0304d51ef8f90974ab5cec43d6bafab0b6f4195a2eeaa2797f110180a1bd1449a34eade39ce3a80ffc67131c181197", 0x32, 0x10000, 0x1}, 0x8)
fork()

09:56:26 executing program 4:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff)
perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3b, 0x6, 0x3, 0x9, 0x0, 0x1f, 0x2a08c, 0xe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f00000004c0)}, 0x5d041, 0xbaf, 0x7, 0x3, 0x2, 0x106, 0x101, 0x0, 0xfffff520, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0x1, 0x4)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000003c0)="0774ab99a781e3ec6073783e60c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x2d, r0}, 0x68)
bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c)
shutdown(0xffffffffffffffff, 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e24, 0x400, @remote, 0x3f}, 0x1c)
r2 = signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000003040)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="db4d31d6805ecdac87307b14c169d9d9", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000a00)='m', 0x1}], 0x1}}], 0x3, 0x44894)
connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x1c)
shutdown(r1, 0x1)
bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e1c, 0x3226f22d, @private1={0xfc, 0x1, '\x00', 0x1}, 0x15a8}, 0x1c)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz0\x00', 0x1ff)
clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58)

09:56:26 executing program 2:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff)
perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3b, 0x6, 0x3, 0x9, 0x0, 0x1f, 0x2a08c, 0xe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f00000004c0)}, 0x5d041, 0xbaf, 0x7, 0x3, 0x2, 0x106, 0x101, 0x0, 0xfffff520, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0x1, 0x4)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000003c0)="0774ab99a781e3ec6073783e60c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x2d, r0}, 0x68)
bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c)
shutdown(0xffffffffffffffff, 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e24, 0x400, @remote, 0x3f}, 0x1c)
r2 = signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000003040)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="db4d31d6805ecdac87307b14c169d9d9", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000a00)='m', 0x1}], 0x1}}], 0x3, 0x44894)
connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x1c)
shutdown(r1, 0x1)
bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e1c, 0x3226f22d, @private1={0xfc, 0x1, '\x00', 0x1}, 0x15a8}, 0x1c)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz0\x00', 0x1ff)
clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58)

09:56:26 executing program 5:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff)
perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3b, 0x6, 0x3, 0x9, 0x0, 0x1f, 0x2a08c, 0xe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f00000004c0)}, 0x5d041, 0xbaf, 0x7, 0x3, 0x2, 0x106, 0x101, 0x0, 0xfffff520, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0x1, 0x4)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000003c0)="0774ab99a781e3ec6073783e60c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x2d, r0}, 0x68)
bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c)
shutdown(0xffffffffffffffff, 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e24, 0x400, @remote, 0x3f}, 0x1c)
r2 = signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000003040)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="db4d31d6805ecdac87307b14c169d9d9", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000a00)='m', 0x1}], 0x1}}], 0x3, 0x44894)
connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x1c)
shutdown(r1, 0x1)
bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e1c, 0x3226f22d, @private1={0xfc, 0x1, '\x00', 0x1}, 0x15a8}, 0x1c)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz0\x00', 0x1ff)
clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58)

09:56:26 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0)
r1 = dup(r0)
r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, 0x12, r1, 0x0)
syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x1008, &(0x7f0000000000), 0x0, 0x4)
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=<r3=>0x0)
syz_io_uring_submit(0x0, r3, &(0x7f0000000280)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'wlan1\x00', <r7=>0x0})
sendmsg$ETHTOOL_MSG_PAUSE_GET(r4, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000280)={0x20, r5, 0x1, 0x0, 0x0, {0x17}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x20}}, 0x0)
r8 = syz_io_uring_setup(0x455, &(0x7f0000003a00), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000003ac0))
r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r8, 0x14, 0x0, r9)
syz_io_uring_submit(0x0, r3, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x1, 0x0, @fd=r4, 0x0, 0x0, 0x0, {0x8400}, 0x0, {0x0, r9}}, 0x401)
syz_io_uring_submit(r2, r3, &(0x7f0000000100)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x3, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)="a6a91e0304d51ef8f90974ab5cec43d6bafab0b6f4195a2eeaa2797f110180a1bd1449a34eade39ce3a80ffc67131c181197", 0x32, 0x10000, 0x1}, 0x8)
fork()

09:56:26 executing program 4:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff)
perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3b, 0x6, 0x3, 0x9, 0x0, 0x1f, 0x2a08c, 0xe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f00000004c0)}, 0x5d041, 0xbaf, 0x7, 0x3, 0x2, 0x106, 0x101, 0x0, 0xfffff520, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0x1, 0x4)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000003c0)="0774ab99a781e3ec6073783e60c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x2d, r0}, 0x68)
bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c)
shutdown(0xffffffffffffffff, 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e24, 0x400, @remote, 0x3f}, 0x1c)
r2 = signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000003040)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="db4d31d6805ecdac87307b14c169d9d9", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000a00)='m', 0x1}], 0x1}}], 0x3, 0x44894)
connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x1c)
shutdown(r1, 0x1)
bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e1c, 0x3226f22d, @private1={0xfc, 0x1, '\x00', 0x1}, 0x15a8}, 0x1c)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz0\x00', 0x1ff)
clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58)


VM DIAGNOSIS:
09:56:19  Registers:
info registers vcpu 0
RAX=0000000000000075 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff82975135 RDI=ffffffff889c19e0 RBP=ffffffff889c19a0 RSP=ffff8880486574a8
R8 =0000000000000000 R9 =ffffed10013c6046 R10=0000000000000075 R11=0000000020747562
R12=0000000000000075 R13=0000000000000010 R14=ffffffff889c19a0 R15=ffffffff82975120
RIP=ffffffff8297518d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000555576a0a400 00000000 00000000
GS =0000 ffff8880e5342000 00000000 00000000
LDT=0000 fffffe5800000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f46be610547 CR3=000000001f030000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000a60ce07b00000000cec3662e XMM01=000000000000000003515b82db34ca11
XMM02=0000000000000000333bebdfd0a6a21d XMM03=00000000000000000000000000000000
XMM04=000000ff0000000000000000000000ff XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000001 RBX=0000000000000001 RCX=ffffffff84d1a2ce RDX=fffffbfff0b82d11
RSI=0000000000000004 RDI=ffffffff85c16880 RBP=ffffffff85c16880 RSP=ffff888017507b10
R8 =0000000000000000 R9 =fffffbfff0b82d10 R10=ffffffff85c16883 R11=0000000000000000
R12=1ffff11002ea0f63 R13=0000000000000003 R14=fffffbfff0b82d10 R15=ffff888017507b48
RIP=ffffffff84d1a460 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 000055555ed29400 00000000 00000000
GS =0000 ffff8880e5442000 00000000 00000000
LDT=0000 fffffe4c00000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055555ed32c58 CR3=000000000a2a0000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=000000000000002f002f2e2e2f002e2e XMM01=0000000000000000696c61766e49002f
XMM02=ffffffffffffff0f0e0d0c0b0a090807 XMM03=0000000000000000000037706f6f6c2f
XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=0000561205d4a2c00000561205d4a300
XMM06=0000561205d4a27000000000ffffffff XMM07=00000000000000000000000000000000
XMM08=2f63697361622f6372732f2e2e000d0a XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000