Warning: Permanently added '[localhost]:54171' (ECDSA) to the list of known hosts. 2026/01/15 09:55:26 fuzzer started 2026/01/15 09:55:26 dialing manager at localhost:35245 syzkaller login: [ 43.952551] cgroup: Unknown subsys name 'net' [ 44.022526] cgroup: Unknown subsys name 'cpuset' [ 44.035789] cgroup: Unknown subsys name 'rlimit' 2026/01/15 09:55:36 syscalls: 2214 2026/01/15 09:55:36 code coverage: enabled 2026/01/15 09:55:36 comparison tracing: enabled 2026/01/15 09:55:36 extra coverage: enabled 2026/01/15 09:55:36 setuid sandbox: enabled 2026/01/15 09:55:36 namespace sandbox: enabled 2026/01/15 09:55:36 Android sandbox: enabled 2026/01/15 09:55:36 fault injection: enabled 2026/01/15 09:55:36 leak checking: enabled 2026/01/15 09:55:36 net packet injection: enabled 2026/01/15 09:55:36 net device setup: enabled 2026/01/15 09:55:36 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2026/01/15 09:55:36 devlink PCI setup: PCI device 0000:00:10.0 is not available 2026/01/15 09:55:36 USB emulation: enabled 2026/01/15 09:55:36 hci packet injection: enabled 2026/01/15 09:55:36 wifi device emulation: enabled 2026/01/15 09:55:36 802.15.4 emulation: enabled 2026/01/15 09:55:36 fetching corpus: 0, signal 0/2000 (executing program) 2026/01/15 09:55:36 fetching corpus: 50, signal 31383/34866 (executing program) 2026/01/15 09:55:37 fetching corpus: 100, signal 44249/49135 (executing program) 2026/01/15 09:55:37 fetching corpus: 150, signal 50952/57259 (executing program) 2026/01/15 09:55:37 fetching corpus: 200, signal 56249/63907 (executing program) 2026/01/15 09:55:37 fetching corpus: 250, signal 62548/71406 (executing program) 2026/01/15 09:55:37 fetching corpus: 300, signal 66796/76884 (executing program) 2026/01/15 09:55:37 fetching corpus: 350, signal 70679/81927 (executing program) 2026/01/15 09:55:37 fetching corpus: 400, signal 73507/85920 (executing program) 2026/01/15 09:55:37 fetching corpus: 450, signal 76374/89955 (executing program) 2026/01/15 09:55:37 fetching corpus: 500, signal 79748/94380 (executing program) 2026/01/15 09:55:37 fetching corpus: 550, signal 81991/97730 (executing program) 2026/01/15 09:55:38 fetching corpus: 600, signal 84962/101664 (executing program) 2026/01/15 09:55:38 fetching corpus: 650, signal 87632/105319 (executing program) 2026/01/15 09:55:38 fetching corpus: 700, signal 90689/109263 (executing program) 2026/01/15 09:55:38 fetching corpus: 750, signal 92373/111937 (executing program) 2026/01/15 09:55:38 fetching corpus: 800, signal 95271/115689 (executing program) 2026/01/15 09:55:38 fetching corpus: 850, signal 97555/118854 (executing program) 2026/01/15 09:55:38 fetching corpus: 900, signal 99071/121298 (executing program) 2026/01/15 09:55:38 fetching corpus: 950, signal 100934/124017 (executing program) 2026/01/15 09:55:38 fetching corpus: 1000, signal 102352/126353 (executing program) 2026/01/15 09:55:39 fetching corpus: 1050, signal 104981/129646 (executing program) 2026/01/15 09:55:39 fetching corpus: 1100, signal 106627/132110 (executing program) 2026/01/15 09:55:39 fetching corpus: 1150, signal 108273/134562 (executing program) 2026/01/15 09:55:39 fetching corpus: 1200, signal 109450/136588 (executing program) 2026/01/15 09:55:39 fetching corpus: 1250, signal 111111/138989 (executing program) 2026/01/15 09:55:39 fetching corpus: 1300, signal 115980/143854 (executing program) 2026/01/15 09:55:39 fetching corpus: 1350, signal 117079/145663 (executing program) 2026/01/15 09:55:39 fetching corpus: 1400, signal 118173/147578 (executing program) 2026/01/15 09:55:39 fetching corpus: 1450, signal 120672/150445 (executing program) 2026/01/15 09:55:40 fetching corpus: 1500, signal 122329/152683 (executing program) 2026/01/15 09:55:40 fetching corpus: 1550, signal 123981/154916 (executing program) 2026/01/15 09:55:40 fetching corpus: 1600, signal 125108/156752 (executing program) 2026/01/15 09:55:40 fetching corpus: 1650, signal 126516/158733 (executing program) 2026/01/15 09:55:40 fetching corpus: 1700, signal 127726/160568 (executing program) 2026/01/15 09:55:40 fetching corpus: 1750, signal 128992/162434 (executing program) 2026/01/15 09:55:40 fetching corpus: 1800, signal 130485/164390 (executing program) 2026/01/15 09:55:40 fetching corpus: 1850, signal 131629/166139 (executing program) 2026/01/15 09:55:41 fetching corpus: 1900, signal 133041/167974 (executing program) 2026/01/15 09:55:41 fetching corpus: 1950, signal 134006/169579 (executing program) 2026/01/15 09:55:41 fetching corpus: 2000, signal 135311/171352 (executing program) 2026/01/15 09:55:41 fetching corpus: 2050, signal 136389/172878 (executing program) 2026/01/15 09:55:41 fetching corpus: 2100, signal 138138/174898 (executing program) 2026/01/15 09:55:41 fetching corpus: 2150, signal 139156/176385 (executing program) 2026/01/15 09:55:41 fetching corpus: 2200, signal 140223/177894 (executing program) 2026/01/15 09:55:41 fetching corpus: 2250, signal 140938/179138 (executing program) 2026/01/15 09:55:42 fetching corpus: 2300, signal 141870/180543 (executing program) 2026/01/15 09:55:42 fetching corpus: 2350, signal 143077/182077 (executing program) 2026/01/15 09:55:42 fetching corpus: 2400, signal 143942/183371 (executing program) 2026/01/15 09:55:42 fetching corpus: 2450, signal 145376/185042 (executing program) 2026/01/15 09:55:42 fetching corpus: 2500, signal 146395/186439 (executing program) 2026/01/15 09:55:42 fetching corpus: 2550, signal 147450/187788 (executing program) 2026/01/15 09:55:42 fetching corpus: 2600, signal 148372/189107 (executing program) 2026/01/15 09:55:42 fetching corpus: 2650, signal 149209/190369 (executing program) 2026/01/15 09:55:42 fetching corpus: 2700, signal 150043/191602 (executing program) 2026/01/15 09:55:43 fetching corpus: 2750, signal 151626/193228 (executing program) 2026/01/15 09:55:43 fetching corpus: 2800, signal 152520/194420 (executing program) 2026/01/15 09:55:43 fetching corpus: 2850, signal 153234/195558 (executing program) 2026/01/15 09:55:43 fetching corpus: 2900, signal 154161/196767 (executing program) 2026/01/15 09:55:43 fetching corpus: 2950, signal 155062/197926 (executing program) 2026/01/15 09:55:43 fetching corpus: 3000, signal 155795/199005 (executing program) 2026/01/15 09:55:43 fetching corpus: 3050, signal 156638/200095 (executing program) 2026/01/15 09:55:43 fetching corpus: 3100, signal 157325/201097 (executing program) 2026/01/15 09:55:43 fetching corpus: 3150, signal 157932/202097 (executing program) 2026/01/15 09:55:44 fetching corpus: 3200, signal 158537/203094 (executing program) 2026/01/15 09:55:44 fetching corpus: 3250, signal 159044/204073 (executing program) 2026/01/15 09:55:44 fetching corpus: 3300, signal 159682/205029 (executing program) 2026/01/15 09:55:44 fetching corpus: 3350, signal 160698/206142 (executing program) 2026/01/15 09:55:44 fetching corpus: 3400, signal 161423/207110 (executing program) 2026/01/15 09:55:44 fetching corpus: 3450, signal 161895/207960 (executing program) 2026/01/15 09:55:44 fetching corpus: 3500, signal 162330/208829 (executing program) 2026/01/15 09:55:44 fetching corpus: 3550, signal 163029/209804 (executing program) 2026/01/15 09:55:44 fetching corpus: 3600, signal 163812/210763 (executing program) 2026/01/15 09:55:45 fetching corpus: 3650, signal 164482/211640 (executing program) 2026/01/15 09:55:45 fetching corpus: 3700, signal 165056/212522 (executing program) 2026/01/15 09:55:45 fetching corpus: 3750, signal 165884/213472 (executing program) 2026/01/15 09:55:45 fetching corpus: 3800, signal 166484/214332 (executing program) 2026/01/15 09:55:45 fetching corpus: 3850, signal 167082/215181 (executing program) 2026/01/15 09:55:45 fetching corpus: 3900, signal 167860/216079 (executing program) 2026/01/15 09:55:45 fetching corpus: 3950, signal 168522/216926 (executing program) 2026/01/15 09:55:45 fetching corpus: 4000, signal 169076/217706 (executing program) 2026/01/15 09:55:46 fetching corpus: 4050, signal 169482/218442 (executing program) 2026/01/15 09:55:46 fetching corpus: 4100, signal 170066/219260 (executing program) 2026/01/15 09:55:46 fetching corpus: 4150, signal 170505/220013 (executing program) 2026/01/15 09:55:46 fetching corpus: 4200, signal 171054/220789 (executing program) 2026/01/15 09:55:46 fetching corpus: 4250, signal 172129/221679 (executing program) 2026/01/15 09:55:46 fetching corpus: 4300, signal 172664/222412 (executing program) 2026/01/15 09:55:46 fetching corpus: 4350, signal 173436/223216 (executing program) 2026/01/15 09:55:46 fetching corpus: 4400, signal 173948/223912 (executing program) 2026/01/15 09:55:47 fetching corpus: 4450, signal 174555/224637 (executing program) 2026/01/15 09:55:47 fetching corpus: 4500, signal 175031/225271 (executing program) 2026/01/15 09:55:47 fetching corpus: 4550, signal 175594/225945 (executing program) 2026/01/15 09:55:47 fetching corpus: 4600, signal 176132/226647 (executing program) 2026/01/15 09:55:47 fetching corpus: 4650, signal 176567/227302 (executing program) 2026/01/15 09:55:47 fetching corpus: 4700, signal 177148/227984 (executing program) 2026/01/15 09:55:47 fetching corpus: 4750, signal 177891/228716 (executing program) 2026/01/15 09:55:47 fetching corpus: 4800, signal 178373/229361 (executing program) 2026/01/15 09:55:48 fetching corpus: 4850, signal 178817/229978 (executing program) 2026/01/15 09:55:48 fetching corpus: 4900, signal 179455/230597 (executing program) 2026/01/15 09:55:48 fetching corpus: 4950, signal 180105/231279 (executing program) 2026/01/15 09:55:48 fetching corpus: 5000, signal 180661/231871 (executing program) 2026/01/15 09:55:48 fetching corpus: 5050, signal 181196/232429 (executing program) 2026/01/15 09:55:48 fetching corpus: 5100, signal 181771/232979 (executing program) 2026/01/15 09:55:48 fetching corpus: 5150, signal 182192/233567 (executing program) 2026/01/15 09:55:48 fetching corpus: 5200, signal 182659/234132 (executing program) 2026/01/15 09:55:48 fetching corpus: 5250, signal 183063/234695 (executing program) 2026/01/15 09:55:49 fetching corpus: 5300, signal 183630/235206 (executing program) 2026/01/15 09:55:49 fetching corpus: 5350, signal 184072/235768 (executing program) 2026/01/15 09:55:49 fetching corpus: 5400, signal 184472/236231 (executing program) 2026/01/15 09:55:49 fetching corpus: 5450, signal 184884/236764 (executing program) 2026/01/15 09:55:49 fetching corpus: 5500, signal 185398/237272 (executing program) 2026/01/15 09:55:49 fetching corpus: 5550, signal 185851/237763 (executing program) 2026/01/15 09:55:49 fetching corpus: 5600, signal 186308/238244 (executing program) 2026/01/15 09:55:49 fetching corpus: 5650, signal 187325/238758 (executing program) 2026/01/15 09:55:49 fetching corpus: 5700, signal 187791/239230 (executing program) 2026/01/15 09:55:50 fetching corpus: 5750, signal 188306/239692 (executing program) 2026/01/15 09:55:50 fetching corpus: 5800, signal 188730/240171 (executing program) 2026/01/15 09:55:50 fetching corpus: 5850, signal 189132/240587 (executing program) 2026/01/15 09:55:50 fetching corpus: 5900, signal 189518/241030 (executing program) 2026/01/15 09:55:50 fetching corpus: 5950, signal 189887/241458 (executing program) 2026/01/15 09:55:50 fetching corpus: 6000, signal 190389/241680 (executing program) 2026/01/15 09:55:50 fetching corpus: 6050, signal 190847/241684 (executing program) 2026/01/15 09:55:50 fetching corpus: 6100, signal 191367/241684 (executing program) 2026/01/15 09:55:51 fetching corpus: 6150, signal 191841/241685 (executing program) 2026/01/15 09:55:51 fetching corpus: 6200, signal 192255/241685 (executing program) 2026/01/15 09:55:51 fetching corpus: 6250, signal 192740/241685 (executing program) 2026/01/15 09:55:51 fetching corpus: 6300, signal 193235/241685 (executing program) 2026/01/15 09:55:51 fetching corpus: 6350, signal 193556/241685 (executing program) 2026/01/15 09:55:51 fetching corpus: 6400, signal 193900/241686 (executing program) 2026/01/15 09:55:51 fetching corpus: 6450, signal 194259/241688 (executing program) 2026/01/15 09:55:51 fetching corpus: 6500, signal 194603/241715 (executing program) 2026/01/15 09:55:51 fetching corpus: 6550, signal 194876/241721 (executing program) 2026/01/15 09:55:51 fetching corpus: 6600, signal 195230/241721 (executing program) 2026/01/15 09:55:52 fetching corpus: 6650, signal 195633/241729 (executing program) 2026/01/15 09:55:52 fetching corpus: 6700, signal 196271/241729 (executing program) 2026/01/15 09:55:52 fetching corpus: 6750, signal 196706/241734 (executing program) 2026/01/15 09:55:52 fetching corpus: 6800, signal 197116/241734 (executing program) 2026/01/15 09:55:52 fetching corpus: 6850, signal 197481/241738 (executing program) 2026/01/15 09:55:52 fetching corpus: 6900, signal 197899/241738 (executing program) 2026/01/15 09:55:52 fetching corpus: 6950, signal 198184/241738 (executing program) 2026/01/15 09:55:52 fetching corpus: 7000, signal 198565/241739 (executing program) 2026/01/15 09:55:52 fetching corpus: 7050, signal 198942/241739 (executing program) 2026/01/15 09:55:53 fetching corpus: 7100, signal 199272/241739 (executing program) 2026/01/15 09:55:53 fetching corpus: 7150, signal 199609/241739 (executing program) 2026/01/15 09:55:53 fetching corpus: 7200, signal 200231/241739 (executing program) 2026/01/15 09:55:53 fetching corpus: 7250, signal 200561/241739 (executing program) 2026/01/15 09:55:53 fetching corpus: 7300, signal 200881/241740 (executing program) 2026/01/15 09:55:53 fetching corpus: 7350, signal 201232/241740 (executing program) 2026/01/15 09:55:53 fetching corpus: 7400, signal 201550/241740 (executing program) 2026/01/15 09:55:53 fetching corpus: 7450, signal 201880/241743 (executing program) 2026/01/15 09:55:53 fetching corpus: 7500, signal 202379/241743 (executing program) 2026/01/15 09:55:53 fetching corpus: 7550, signal 202752/241773 (executing program) 2026/01/15 09:55:54 fetching corpus: 7600, signal 203188/241773 (executing program) 2026/01/15 09:55:54 fetching corpus: 7650, signal 203533/241778 (executing program) 2026/01/15 09:55:54 fetching corpus: 7700, signal 203892/241778 (executing program) 2026/01/15 09:55:54 fetching corpus: 7750, signal 204297/241779 (executing program) 2026/01/15 09:55:54 fetching corpus: 7800, signal 204539/241785 (executing program) 2026/01/15 09:55:54 fetching corpus: 7850, signal 204794/241785 (executing program) 2026/01/15 09:55:54 fetching corpus: 7900, signal 205006/241785 (executing program) 2026/01/15 09:55:54 fetching corpus: 7950, signal 205337/241785 (executing program) 2026/01/15 09:55:54 fetching corpus: 8000, signal 205680/241785 (executing program) 2026/01/15 09:55:54 fetching corpus: 8050, signal 206072/241786 (executing program) 2026/01/15 09:55:55 fetching corpus: 8100, signal 206324/241787 (executing program) 2026/01/15 09:55:55 fetching corpus: 8150, signal 206633/241789 (executing program) 2026/01/15 09:55:55 fetching corpus: 8200, signal 206922/241789 (executing program) 2026/01/15 09:55:55 fetching corpus: 8250, signal 207154/241790 (executing program) 2026/01/15 09:55:55 fetching corpus: 8300, signal 207487/241795 (executing program) 2026/01/15 09:55:55 fetching corpus: 8350, signal 207712/241795 (executing program) 2026/01/15 09:55:55 fetching corpus: 8400, signal 207965/241796 (executing program) 2026/01/15 09:55:55 fetching corpus: 8450, signal 208171/241798 (executing program) 2026/01/15 09:55:55 fetching corpus: 8500, signal 208436/241807 (executing program) 2026/01/15 09:55:55 fetching corpus: 8550, signal 208862/241807 (executing program) 2026/01/15 09:55:56 fetching corpus: 8600, signal 209153/241819 (executing program) 2026/01/15 09:55:56 fetching corpus: 8650, signal 209577/241819 (executing program) 2026/01/15 09:55:56 fetching corpus: 8700, signal 209854/241834 (executing program) 2026/01/15 09:55:56 fetching corpus: 8750, signal 210164/241835 (executing program) 2026/01/15 09:55:56 fetching corpus: 8800, signal 210576/241835 (executing program) 2026/01/15 09:55:56 fetching corpus: 8850, signal 210952/241835 (executing program) 2026/01/15 09:55:56 fetching corpus: 8900, signal 211297/241836 (executing program) 2026/01/15 09:55:56 fetching corpus: 8950, signal 211633/241836 (executing program) 2026/01/15 09:55:57 fetching corpus: 9000, signal 211960/241841 (executing program) 2026/01/15 09:55:57 fetching corpus: 9050, signal 212368/241842 (executing program) 2026/01/15 09:55:57 fetching corpus: 9100, signal 212662/241845 (executing program) 2026/01/15 09:55:57 fetching corpus: 9150, signal 213035/241845 (executing program) 2026/01/15 09:55:57 fetching corpus: 9200, signal 213287/241845 (executing program) 2026/01/15 09:55:57 fetching corpus: 9250, signal 213535/241845 (executing program) 2026/01/15 09:55:57 fetching corpus: 9300, signal 213768/241845 (executing program) 2026/01/15 09:55:57 fetching corpus: 9350, signal 214067/241845 (executing program) 2026/01/15 09:55:57 fetching corpus: 9400, signal 214324/241845 (executing program) 2026/01/15 09:55:58 fetching corpus: 9450, signal 214598/241848 (executing program) 2026/01/15 09:55:58 fetching corpus: 9500, signal 214884/241848 (executing program) 2026/01/15 09:55:58 fetching corpus: 9550, signal 215055/241848 (executing program) 2026/01/15 09:55:58 fetching corpus: 9600, signal 215469/241848 (executing program) 2026/01/15 09:55:58 fetching corpus: 9650, signal 215742/241869 (executing program) 2026/01/15 09:55:58 fetching corpus: 9700, signal 216204/241869 (executing program) 2026/01/15 09:55:58 fetching corpus: 9750, signal 216463/241869 (executing program) 2026/01/15 09:55:58 fetching corpus: 9800, signal 216803/241878 (executing program) 2026/01/15 09:55:58 fetching corpus: 9850, signal 217067/241878 (executing program) 2026/01/15 09:55:58 fetching corpus: 9900, signal 217412/241879 (executing program) 2026/01/15 09:55:59 fetching corpus: 9950, signal 217847/241880 (executing program) 2026/01/15 09:55:59 fetching corpus: 10000, signal 218128/241926 (executing program) 2026/01/15 09:55:59 fetching corpus: 10050, signal 218357/241928 (executing program) 2026/01/15 09:55:59 fetching corpus: 10100, signal 218585/241928 (executing program) 2026/01/15 09:55:59 fetching corpus: 10150, signal 218793/241928 (executing program) 2026/01/15 09:55:59 fetching corpus: 10200, signal 219027/241929 (executing program) 2026/01/15 09:55:59 fetching corpus: 10250, signal 219390/241935 (executing program) 2026/01/15 09:55:59 fetching corpus: 10300, signal 219770/241935 (executing program) 2026/01/15 09:56:00 fetching corpus: 10350, signal 219985/241935 (executing program) 2026/01/15 09:56:00 fetching corpus: 10400, signal 220299/241935 (executing program) 2026/01/15 09:56:00 fetching corpus: 10450, signal 220664/241949 (executing program) 2026/01/15 09:56:00 fetching corpus: 10500, signal 220953/241949 (executing program) 2026/01/15 09:56:00 fetching corpus: 10550, signal 221150/241949 (executing program) 2026/01/15 09:56:00 fetching corpus: 10600, signal 221449/241951 (executing program) 2026/01/15 09:56:00 fetching corpus: 10650, signal 221776/241951 (executing program) 2026/01/15 09:56:00 fetching corpus: 10700, signal 222086/241951 (executing program) 2026/01/15 09:56:01 fetching corpus: 10750, signal 222345/241971 (executing program) 2026/01/15 09:56:01 fetching corpus: 10800, signal 222530/241971 (executing program) 2026/01/15 09:56:01 fetching corpus: 10850, signal 222709/241975 (executing program) 2026/01/15 09:56:01 fetching corpus: 10900, signal 222928/241975 (executing program) 2026/01/15 09:56:01 fetching corpus: 10950, signal 223255/241976 (executing program) 2026/01/15 09:56:01 fetching corpus: 11000, signal 223428/241976 (executing program) 2026/01/15 09:56:01 fetching corpus: 11050, signal 223676/241977 (executing program) 2026/01/15 09:56:01 fetching corpus: 11100, signal 223896/241977 (executing program) 2026/01/15 09:56:01 fetching corpus: 11150, signal 224153/241987 (executing program) 2026/01/15 09:56:02 fetching corpus: 11200, signal 224368/241987 (executing program) 2026/01/15 09:56:02 fetching corpus: 11250, signal 224659/241987 (executing program) 2026/01/15 09:56:02 fetching corpus: 11300, signal 224941/241988 (executing program) 2026/01/15 09:56:02 fetching corpus: 11350, signal 225183/241988 (executing program) 2026/01/15 09:56:02 fetching corpus: 11400, signal 225501/241988 (executing program) 2026/01/15 09:56:02 fetching corpus: 11450, signal 225736/241988 (executing program) 2026/01/15 09:56:02 fetching corpus: 11500, signal 226010/241988 (executing program) 2026/01/15 09:56:02 fetching corpus: 11550, signal 226219/241989 (executing program) 2026/01/15 09:56:03 fetching corpus: 11600, signal 226424/241989 (executing program) 2026/01/15 09:56:03 fetching corpus: 11650, signal 226635/241989 (executing program) 2026/01/15 09:56:03 fetching corpus: 11700, signal 226880/241990 (executing program) 2026/01/15 09:56:03 fetching corpus: 11750, signal 227116/241990 (executing program) 2026/01/15 09:56:03 fetching corpus: 11800, signal 227310/241990 (executing program) 2026/01/15 09:56:03 fetching corpus: 11850, signal 227588/241991 (executing program) 2026/01/15 09:56:03 fetching corpus: 11900, signal 227868/241991 (executing program) 2026/01/15 09:56:03 fetching corpus: 11950, signal 228067/241991 (executing program) 2026/01/15 09:56:03 fetching corpus: 12000, signal 228307/241991 (executing program) 2026/01/15 09:56:03 fetching corpus: 12050, signal 228662/241991 (executing program) 2026/01/15 09:56:04 fetching corpus: 12100, signal 228881/241995 (executing program) 2026/01/15 09:56:04 fetching corpus: 12150, signal 229092/241995 (executing program) 2026/01/15 09:56:04 fetching corpus: 12200, signal 229283/241995 (executing program) 2026/01/15 09:56:04 fetching corpus: 12250, signal 229509/241995 (executing program) 2026/01/15 09:56:04 fetching corpus: 12300, signal 229726/241995 (executing program) 2026/01/15 09:56:04 fetching corpus: 12350, signal 229939/241995 (executing program) 2026/01/15 09:56:04 fetching corpus: 12400, signal 230133/241996 (executing program) 2026/01/15 09:56:04 fetching corpus: 12450, signal 230362/241996 (executing program) 2026/01/15 09:56:04 fetching corpus: 12500, signal 230626/241996 (executing program) 2026/01/15 09:56:05 fetching corpus: 12550, signal 230840/242003 (executing program) 2026/01/15 09:56:05 fetching corpus: 12600, signal 231069/242003 (executing program) 2026/01/15 09:56:05 fetching corpus: 12650, signal 231272/242004 (executing program) 2026/01/15 09:56:05 fetching corpus: 12700, signal 231482/242004 (executing program) 2026/01/15 09:56:05 fetching corpus: 12750, signal 231699/242004 (executing program) 2026/01/15 09:56:05 fetching corpus: 12800, signal 232028/242006 (executing program) 2026/01/15 09:56:05 fetching corpus: 12850, signal 232189/242007 (executing program) 2026/01/15 09:56:05 fetching corpus: 12900, signal 232354/242018 (executing program) 2026/01/15 09:56:06 fetching corpus: 12950, signal 232569/242018 (executing program) 2026/01/15 09:56:06 fetching corpus: 13000, signal 232743/242018 (executing program) 2026/01/15 09:56:06 fetching corpus: 13050, signal 233073/242019 (executing program) 2026/01/15 09:56:06 fetching corpus: 13100, signal 233309/242019 (executing program) 2026/01/15 09:56:06 fetching corpus: 13150, signal 233505/242020 (executing program) 2026/01/15 09:56:06 fetching corpus: 13200, signal 233696/242020 (executing program) 2026/01/15 09:56:06 fetching corpus: 13250, signal 233921/242020 (executing program) 2026/01/15 09:56:06 fetching corpus: 13300, signal 234152/242020 (executing program) 2026/01/15 09:56:06 fetching corpus: 13350, signal 234414/242022 (executing program) 2026/01/15 09:56:07 fetching corpus: 13400, signal 234675/242022 (executing program) 2026/01/15 09:56:07 fetching corpus: 13450, signal 234896/242022 (executing program) 2026/01/15 09:56:07 fetching corpus: 13500, signal 235134/242022 (executing program) 2026/01/15 09:56:07 fetching corpus: 13550, signal 235343/242022 (executing program) 2026/01/15 09:56:07 fetching corpus: 13600, signal 235616/242022 (executing program) 2026/01/15 09:56:07 fetching corpus: 13650, signal 235791/242034 (executing program) 2026/01/15 09:56:07 fetching corpus: 13700, signal 236134/242035 (executing program) 2026/01/15 09:56:07 fetching corpus: 13750, signal 236367/242035 (executing program) 2026/01/15 09:56:07 fetching corpus: 13800, signal 236568/242041 (executing program) 2026/01/15 09:56:08 fetching corpus: 13850, signal 236749/242047 (executing program) 2026/01/15 09:56:08 fetching corpus: 13900, signal 236911/242047 (executing program) 2026/01/15 09:56:08 fetching corpus: 13950, signal 238129/242047 (executing program) 2026/01/15 09:56:08 fetching corpus: 14000, signal 238391/242047 (executing program) 2026/01/15 09:56:08 fetching corpus: 14050, signal 238678/242048 (executing program) 2026/01/15 09:56:08 fetching corpus: 14100, signal 238867/242048 (executing program) 2026/01/15 09:56:08 fetching corpus: 14150, signal 239017/242055 (executing program) 2026/01/15 09:56:08 fetching corpus: 14200, signal 239646/242056 (executing program) 2026/01/15 09:56:08 fetching corpus: 14250, signal 239801/242062 (executing program) 2026/01/15 09:56:09 fetching corpus: 14300, signal 240038/242074 (executing program) 2026/01/15 09:56:09 fetching corpus: 14349, signal 240230/242080 (executing program) 2026/01/15 09:56:09 fetching corpus: 14369, signal 240306/242080 (executing program) 2026/01/15 09:56:09 fetching corpus: 14369, signal 240309/242080 (executing program) 2026/01/15 09:56:09 fetching corpus: 14369, signal 240309/242080 (executing program) 2026/01/15 09:56:10 starting 8 fuzzer processes 09:56:10 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000001100)=[{0x21, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0x1c) 09:56:11 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 09:56:11 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) 09:56:11 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed, 0x0, 0x3}, 0xe) 09:56:11 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000040)={0x2c, 0x19, 0x1, 0x0, 0x0, "", [@typed={0xa, 0x0, 0x0, 0x0, @str='wla\x021\x00'}, @nested={0x10, 0x9, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}]}, 0x2c}], 0x1}, 0x0) 09:56:11 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000280)=0x3, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) [ 88.254081] audit: type=1400 audit(1768470971.107:7): avc: denied { execmem } for pid=273 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 09:56:11 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x58, 0x1, 0x2, 0x201, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_ZONE={0x6}]}, 0x58}}, 0x0) 09:56:11 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40086607, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') pwritev(r1, 0x0, 0x0, 0x0, 0x0) [ 89.427389] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 89.429916] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 89.435056] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 89.436279] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 89.438117] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 89.438119] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 89.445115] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 89.450010] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 89.450957] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 89.456022] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 89.497024] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 89.510230] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 89.515116] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 89.522122] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 89.526045] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 89.552012] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 89.587044] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 89.592297] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 89.594673] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 89.601651] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 89.609310] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 89.613515] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 89.620104] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 89.653180] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 89.655741] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 89.659315] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 89.661989] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 89.666100] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 89.669381] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 89.672927] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 89.721352] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 89.738070] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 89.740969] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 89.751023] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 89.754970] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 89.777933] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 89.818590] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 89.832933] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 89.847149] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 89.852938] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 91.506340] Bluetooth: hci1: command tx timeout [ 91.507008] Bluetooth: hci0: command tx timeout [ 91.568956] Bluetooth: hci2: command tx timeout [ 91.696930] Bluetooth: hci3: command tx timeout [ 91.761691] Bluetooth: hci4: command tx timeout [ 91.762417] Bluetooth: hci5: command tx timeout [ 91.953065] Bluetooth: hci7: command tx timeout [ 91.954164] Bluetooth: hci6: command tx timeout [ 93.553419] Bluetooth: hci1: command tx timeout [ 93.554441] Bluetooth: hci0: command tx timeout [ 93.617906] Bluetooth: hci2: command tx timeout [ 93.745913] Bluetooth: hci3: command tx timeout [ 93.809904] Bluetooth: hci4: command tx timeout [ 93.810762] Bluetooth: hci5: command tx timeout [ 94.001349] Bluetooth: hci7: command tx timeout [ 94.002264] Bluetooth: hci6: command tx timeout [ 95.600955] Bluetooth: hci1: command tx timeout [ 95.601791] Bluetooth: hci0: command tx timeout [ 95.665980] Bluetooth: hci2: command tx timeout [ 95.792961] Bluetooth: hci3: command tx timeout [ 95.857902] Bluetooth: hci5: command tx timeout [ 95.858732] Bluetooth: hci4: command tx timeout [ 96.049060] Bluetooth: hci7: command tx timeout [ 96.049945] Bluetooth: hci6: command tx timeout [ 97.648994] Bluetooth: hci0: command tx timeout [ 97.649460] Bluetooth: hci1: command tx timeout [ 97.713902] Bluetooth: hci2: command tx timeout [ 97.842907] Bluetooth: hci3: command tx timeout [ 97.904899] Bluetooth: hci4: command tx timeout [ 97.905348] Bluetooth: hci5: command tx timeout [ 98.097983] Bluetooth: hci7: command tx timeout [ 98.098433] Bluetooth: hci6: command tx timeout [ 126.791518] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.792159] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.910204] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.911555] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.026185] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.026825] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.174675] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.175371] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.265281] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.265884] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.290176] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.290821] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.507446] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.516237] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.556091] audit: type=1400 audit(1768471010.411:8): avc: denied { open } for pid=3851 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 127.561480] audit: type=1400 audit(1768471010.411:9): avc: denied { kernel } for pid=3851 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 09:56:50 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0xc0f85403, &(0x7f0000000040)) [ 127.608006] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.608594] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 09:56:50 executing program 7: creat(&(0x7f00000003c0)='./file0\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d0f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)) [ 127.679765] loop7: detected capacity change from 0 to 512 [ 127.683998] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.684587] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.711440] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.712077] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 09:56:50 executing program 4: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r1 = shmat(r0, &(0x7f0000400000/0xc00000)=nil, 0x5000) shmdt(r1) [ 127.730554] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.765314] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. 09:56:50 executing program 5: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0x80811501, 0x0) 09:56:50 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000540)={0xffffffffffffffff}, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000580)) 09:56:50 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000003000)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast2, 0x5}, 0x1c, 0x0}}], 0x1, 0x0) 09:56:50 executing program 7: creat(&(0x7f00000003c0)='./file0\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d0f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)) [ 127.896742] loop7: detected capacity change from 0 to 512 [ 127.911698] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.914607] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.918266] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.918842] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 09:56:50 executing program 7: creat(&(0x7f00000003c0)='./file0\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d0f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)) [ 127.966560] loop7: detected capacity change from 0 to 512 [ 127.974603] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.977008] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.994138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.994736] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.082914] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.083531] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.109912] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.110526] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.201286] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.202453] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.291466] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.295091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 09:56:51 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000001100)=[{0x21, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0x1c) 09:56:51 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed, 0x0, 0x3}, 0xe) 09:56:51 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) setpgid(0x0, 0x0) 09:56:51 executing program 7: creat(&(0x7f00000003c0)='./file0\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d0f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)) 09:56:51 executing program 4: sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, 0x0, 0x547261abc1052ac9) 09:56:51 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000001d00)=[{{&(0x7f0000000080)={0xa, 0x4e21, 0x0, @empty}, 0x1c, &(0x7f0000001580)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000580)="7db54ec77ff951904bfe528ebd20bdbf74c57eb1520bd924b0869cd344caf6df5bbbff82dfecc0b74df8345ce208a612bced879a68336cb31dac7723fd0df39e89e1be49a785f1a994a27473e4be6a0b868c51ab1160588cd03d3c00393d111613c8397c40b14ce4f9b38400e944a5925bad925df25caca3af70a85abc1f2b8ae385", 0x82}, {0x0}, {&(0x7f0000000240)}, {0x0}, {0x0}, {0x0, 0x47}], 0x9, &(0x7f0000001640)=[@hoplimit_2292={{0x14}}, @tclass={{0x14}}], 0x30}}, {{&(0x7f0000000300)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c, 0x0}}], 0x2, 0x0) 09:56:51 executing program 6: prctl$PR_CAPBSET_READ(0x17, 0x0) 09:56:51 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000cc0), &(0x7f0000000d00)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)=ANY=[]) syz_mount_image$tmpfs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x33820a0, &(0x7f0000000000)={[{@huge_never}]}) 09:56:51 executing program 4: sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, 0x0, 0x547261abc1052ac9) 09:56:51 executing program 6: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = dup(r0) connect$inet(r1, &(0x7f0000000180)={0x2, 0x0, @broadcast}, 0x10) [ 128.568401] loop7: detected capacity change from 0 to 512 09:56:51 executing program 3: mknod$loop(&(0x7f0000000140)='./file0\x00', 0x1000, 0x1) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 09:56:51 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f00000000c0)=0x8673c, 0x4) sendmsg(r0, &(0x7f0000000540)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x3ff, @mcast2}, 0x80, 0x0}, 0x0) 09:56:51 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed, 0x0, 0x3}, 0xe) [ 128.632899] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 09:56:51 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xd81b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0xd16) fork() 09:56:51 executing program 4: sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, 0x0, 0x547261abc1052ac9) [ 128.664580] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. 09:56:51 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, &(0x7f0000000cc0)) 09:56:51 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000001100)=[{0x21, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0x1c) 09:56:51 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000002180)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x46, 0x0, "513560a8dfa1273239320761b0bdd1d2c8f224252632d62e4c3795657865e2021923d37da8da241753db27b862a5d807234af8900000000800000000000000000000ff010000000000af9700"}, 0xd8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) 09:56:51 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed, 0x0, 0x3}, 0xe) 09:56:51 executing program 4: sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, 0x0, 0x547261abc1052ac9) 09:56:51 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8947, &(0x7f0000006f00)={'wpan1\x00'}) 09:56:51 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xd81b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0xd16) fork() 09:56:51 executing program 3: r0 = openat$hpet(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xb, 0x13, r0, 0x0) 09:56:51 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 09:56:51 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x34, &(0x7f0000000040), 0x4) 09:56:51 executing program 7: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_int(r0, 0x1, 0x28, 0x0, &(0x7f0000001b40)) 09:56:51 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x1) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c02, 0x0) 09:56:51 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {0x0, 0x0, 0xffffffffffffffff}, {&(0x7f0000010400)="030000001300030023", 0x9, 0x800}], 0x0, &(0x7f0000000140)={[{@nolazytime}, {@min_batch_time={'min_batch_time', 0x3d, 0x401}}, {@resgid}, {@errors_remount}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@nombcache}, {@grpjquota}]}) [ 129.099312] loop2: detected capacity change from 0 to 16383 [ 129.111903] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 196627)! [ 129.115607] EXT4-fs (loop2): group descriptors corrupted! [ 129.127960] loop2: detected capacity change from 0 to 16383 [ 129.137978] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 196627)! [ 129.144935] EXT4-fs (loop2): group descriptors corrupted! 09:56:52 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000001100)=[{0x21, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0x1c) 09:56:52 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000002c0)={0x20, 0x19, 0x1, 0x0, 0x0, "", [@generic="02", @nested={0xc, 0x0, 0x0, 0x0, [@typed={0x8, 0x0, 0x0, 0x0, @u32}]}]}, 0x20}], 0x1}, 0x0) 09:56:52 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 09:56:52 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = inotify_init() perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000000)=[{r0}, {r1}], 0x2, &(0x7f0000000040)={0x0, 0x989680}, 0x0, 0x0) 09:56:52 executing program 4: r0 = syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[]) mkdirat(r0, &(0x7f0000000140)='./file0\x00', 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f00000000c0)='./file0/file0\x00', 0x0) rmdir(&(0x7f0000000040)='./file0\x00') 09:56:52 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {0x0, 0x0, 0xffffffffffffffff}, {&(0x7f0000010400)="030000001300030023", 0x9, 0x800}], 0x0, &(0x7f0000000140)={[{@nolazytime}, {@min_batch_time={'min_batch_time', 0x3d, 0x401}}, {@resgid}, {@errors_remount}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@nombcache}, {@grpjquota}]}) 09:56:52 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000002180)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x46, 0x0, "513560a8dfa1273239320761b0bdd1d2c8f224252632d62e4c3795657865e2021923d37da8da241753db27b862a5d807234af8900000000800000000000000000000ff010000000000af9700"}, 0xd8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) 09:56:52 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xd81b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0xd16) fork() [ 129.842668] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.7'. [ 129.845451] loop2: detected capacity change from 0 to 16383 [ 129.851697] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.7'. [ 129.856034] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 196627)! [ 129.856833] EXT4-fs (loop2): group descriptors corrupted! 09:56:52 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 09:56:53 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f0000001840)=@file={0x1, './file0\x00'}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000003900)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000003640)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x0) 09:56:53 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000002c0)={0x20, 0x19, 0x1, 0x0, 0x0, "", [@generic="02", @nested={0xc, 0x0, 0x0, 0x0, [@typed={0x8, 0x0, 0x0, 0x0, @u32}]}]}, 0x20}], 0x1}, 0x0) 09:56:53 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000001800), 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c05, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "33b85e96cf85dbb6ca34eac707f811f253ebea364c3daab41c8f901cd5829a50567303d758e30144185ef79ca199cc827a823623011c39f0ca8f4e3f1f27a965", "20796ace1289e4d249d3083e300ae920e30453383610db0417767fecc49663e0c5df068fa754b3403ef9a20d26ba905c7589bc456e5b33490507088d678b263c", "9ebf4e337d71c315b819f01bcd69aea149d2ad4c460f81177ac96030c649a9a8"}) 09:56:53 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {0x0, 0x0, 0xffffffffffffffff}, {&(0x7f0000010400)="030000001300030023", 0x9, 0x800}], 0x0, &(0x7f0000000140)={[{@nolazytime}, {@min_batch_time={'min_batch_time', 0x3d, 0x401}}, {@resgid}, {@errors_remount}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@nombcache}, {@grpjquota}]}) 09:56:53 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xd81b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0xd16) fork() 09:56:53 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 09:56:53 executing program 5: perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400001, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:56:53 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000002180)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x46, 0x0, "513560a8dfa1273239320761b0bdd1d2c8f224252632d62e4c3795657865e2021923d37da8da241753db27b862a5d807234af8900000000800000000000000000000ff010000000000af9700"}, 0xd8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) [ 130.729104] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.7'. [ 130.733790] loop2: detected capacity change from 0 to 16383 09:56:53 executing program 3: syz_mount_image$msdos(&(0x7f0000000180), &(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001540)={[{@fat=@fmask}]}) 09:56:53 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000002c0)={0x20, 0x19, 0x1, 0x0, 0x0, "", [@generic="02", @nested={0xc, 0x0, 0x0, 0x0, [@typed={0x8, 0x0, 0x0, 0x0, @u32}]}]}, 0x20}], 0x1}, 0x0) [ 130.787955] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 196627)! [ 130.788755] EXT4-fs (loop2): group descriptors corrupted! 09:56:53 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000000c0), 0x8) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000006340), 0x4) [ 130.822367] No source specified 09:56:53 executing program 5: perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400001, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 130.828661] No source specified [ 130.836895] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.7'. 09:56:53 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x49, &(0x7f00000000c0)={0x0, 0x0}, 0x10) 09:56:53 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) getsockopt$sock_buf(r0, 0x1, 0x1a, &(0x7f00000000c0)=""/225, &(0x7f00000001c0)=0xe1) 09:56:53 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {0x0, 0x0, 0xffffffffffffffff}, {&(0x7f0000010400)="030000001300030023", 0x9, 0x800}], 0x0, &(0x7f0000000140)={[{@nolazytime}, {@min_batch_time={'min_batch_time', 0x3d, 0x401}}, {@resgid}, {@errors_remount}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@nombcache}, {@grpjquota}]}) [ 130.869370] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list 09:56:53 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000002c0)={0x20, 0x19, 0x1, 0x0, 0x0, "", [@generic="02", @nested={0xc, 0x0, 0x0, 0x0, [@typed={0x8, 0x0, 0x0, 0x0, @u32}]}]}, 0x20}], 0x1}, 0x0) 09:56:53 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x13, 0x0, 0x0) [ 130.917738] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.7'. [ 130.919052] loop2: detected capacity change from 0 to 16383 [ 130.927036] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 196627)! [ 130.927803] EXT4-fs (loop2): group descriptors corrupted! 09:56:54 executing program 5: perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400001, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:56:54 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'wlan0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x11, 0x0, 0x0, 0x0, 0x0, 0x6}}) 09:56:54 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = epoll_create(0x6) epoll_pwait2(r0, &(0x7f0000000000)=[{}], 0x1, &(0x7f0000000080), 0x0, 0x0) 09:56:54 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) getsockopt$sock_buf(r0, 0x1, 0x1a, &(0x7f00000000c0)=""/225, &(0x7f00000001c0)=0xe1) 09:56:54 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000002180)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x46, 0x0, "513560a8dfa1273239320761b0bdd1d2c8f224252632d62e4c3795657865e2021923d37da8da241753db27b862a5d807234af8900000000800000000000000000000ff010000000000af9700"}, 0xd8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) 09:56:54 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000010401080000000000001700000000000500010003"], 0x1c}}, 0x0) 09:56:54 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000000c0), 0x8) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000006340), 0x4) 09:56:54 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0xfffffffd, 0x0, 0x0, "d6060109662a21e29865b6488461357f4ff5aa"}) 09:56:54 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000000c0), 0x8) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000006340), 0x4) 09:56:54 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="340000002c0001"], 0x34}], 0x1}, 0x0) 09:56:54 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) getsockopt$sock_buf(r0, 0x1, 0x1a, &(0x7f00000000c0)=""/225, &(0x7f00000001c0)=0xe1) 09:56:54 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) request_key(&(0x7f00000002c0)='logon\x00', &(0x7f0000000300)={'syz', 0x1}, &(0x7f00000003c0)='logon\x00', 0x0) 09:56:54 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x2) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000001bc0)={0x0, 0x0, &(0x7f0000001b80)={&(0x7f0000001b00)={0x14}, 0x14}}, 0x0) bind$netlink(r0, &(0x7f0000001c00)={0x10, 0x0, 0x0, 0x2000}, 0xc) 09:56:54 executing program 5: perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400001, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 131.807644] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.7'. 09:56:54 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000000c0), 0x8) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000006340), 0x4) 09:56:55 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) getsockopt$sock_buf(r0, 0x1, 0x1a, &(0x7f00000000c0)=""/225, &(0x7f00000001c0)=0xe1) 09:56:55 executing program 5: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 09:56:55 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000010401080000000000001700000000000500010003"], 0x1c}}, 0x0) 09:56:55 executing program 4: r0 = msgget$private(0x0, 0x0) msgrcv(r0, 0x0, 0x0, 0x0, 0x0) msgctl$IPC_RMID(r0, 0x0) 09:56:55 executing program 7: timer_create(0x0, 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_gettime(0x0, &(0x7f0000000300)) 09:56:55 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) 09:56:55 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) 09:56:55 executing program 6: setresuid(0x0, 0xee01, 0x0) setfsuid(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r0, 0x4b33, &(0x7f0000000000)={0x0, 0x0}) 09:56:55 executing program 5: syz_emit_ethernet(0x36, &(0x7f0000000140)={@link_local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @dev, @broadcast}, @timestamp_reply={0x11, 0x0, 0x0, 0x0, 0x0, 0x1000000}}}}}, 0x0) 09:56:55 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000100), 0x8) writev(r0, &(0x7f0000001580)=[{&(0x7f00000000c0)="8d", 0x9801}], 0x1) 09:56:55 executing program 4: r0 = msgget$private(0x0, 0x0) msgrcv(r0, 0x0, 0x0, 0x0, 0x0) msgctl$IPC_RMID(r0, 0x0) 09:56:55 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000010401080000000000001700000000000500010003"], 0x1c}}, 0x0) 09:56:55 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCXONC(r0, 0x4bfa, 0x0) 09:56:55 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x33, 0xfffffffffffffffe}) [ 132.833424] [ 132.833751] ===================================== [ 132.834483] WARNING: bad unlock balance detected! [ 132.835186] 6.19.0-rc5-next-20260115 #1 Not tainted [ 132.835906] ------------------------------------- [ 132.837829] syz-executor.2/4104 is trying to release lock (rcu_read_lock) at: [ 132.840441] [] __wait_on_freeing_inode+0x105/0x350 [ 132.843344] but there are no more locks to release! [ 132.844989] [ 132.844989] other info that might help us debug this: [ 132.845995] 4 locks held by syz-executor.2/4104: [ 132.846694] #0: ffff88800f82c3f8 (sb_writers#3){.+.+}-{0:0}, at: filename_create+0xf7/0x400 [ 132.847999] #1: ffff8880494f0d68 (&type->i_mutex_dir_key#3/1){+.+.}-{4:4}, at: filename_create+0x1b1/0x400 [ 132.849487] #2: ffff88800fa30950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xe32/0x12d0 [ 132.850832] #3: ffffffff85c16898 (inode_hash_lock){+.+.}-{3:3}, at: insert_inode_locked+0xf9/0x890 [ 132.852205] [ 132.852205] stack backtrace: [ 132.852864] CPU: 0 UID: 0 PID: 4104 Comm: syz-executor.2 Not tainted 6.19.0-rc5-next-20260115 #1 PREEMPT(lazy) [ 132.852890] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 132.852902] Call Trace: [ 132.852910] [ 132.852917] dump_stack_lvl+0xca/0x120 [ 132.852960] ? __wait_on_freeing_inode+0x105/0x350 [ 132.852987] print_unlock_imbalance_bug+0x118/0x130 [ 132.853013] ? __wait_on_freeing_inode+0x105/0x350 [ 132.853040] lock_release+0x1ee/0x270 [ 132.853068] __wait_on_freeing_inode+0x10a/0x350 [ 132.853095] ? __pfx___wait_on_freeing_inode+0x10/0x10 [ 132.853124] ? __pfx_var_wake_function+0x10/0x10 [ 132.853157] ? lock_is_held_type+0x9e/0x120 [ 132.853179] insert_inode_locked+0x25f/0x890 [ 132.853212] __ext4_new_inode+0x223d/0x4cd0 [ 132.853245] ? __pfx___ext4_new_inode+0x10/0x10 [ 132.853273] ? __pfx___dquot_initialize+0x10/0x10 [ 132.853305] ? __pfx_avc_has_perm+0x10/0x10 [ 132.853336] ext4_symlink+0x623/0xb40 [ 132.853372] ? __pfx_ext4_symlink+0x10/0x10 [ 132.853401] ? security_inode_permission+0x72/0xe0 [ 132.853427] vfs_symlink+0x44b/0x840 [ 132.853458] filename_symlinkat+0x158/0x440 [ 132.853484] ? __pfx_filename_symlinkat+0x10/0x10 [ 132.853510] ? strncpy_from_user+0x21b/0x2f0 [ 132.853542] __x64_sys_symlink+0x82/0x110 [ 132.853567] do_syscall_64+0xbf/0x420 [ 132.853600] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.853622] RIP: 0033:0x7f16155a9427 [ 132.853638] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 58 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 132.853658] RSP: 002b:00007fff265b1f68 EFLAGS: 00000206 ORIG_RAX: 0000000000000058 [ 132.853678] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f16155a9427 [ 132.853692] RDX: ffffffffffffffbc RSI: 00007f161560400e RDI: 00007f16156031dd [ 132.853706] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007fff265b19e0 [ 132.853718] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 132.853731] R13: 0000000000000000 R14: 0000000000000001 R15: 00007fff265b2030 [ 132.853753] [ 132.883395] ------------[ cut here ]------------ [ 132.886030] WARNING: kernel/rcu/tree_plugin.h:443 at __rcu_read_unlock+0x25f/0x5c0, CPU#0: syz-executor.2/4104 [ 132.887694] Modules linked in: [ 132.888267] CPU: 0 UID: 0 PID: 4104 Comm: syz-executor.2 Not tainted 6.19.0-rc5-next-20260115 #1 PREEMPT(lazy) [ 132.889811] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 132.891104] RIP: 0010:__rcu_read_unlock+0x25f/0x5c0 [ 132.892064] Code: f2 02 00 00 c7 43 58 01 00 00 00 bf 09 00 00 00 e8 d6 b7 de ff 4d 85 f6 0f 84 73 fe ff ff e8 38 8a 20 00 fb e9 68 fe ff ff 90 <0f> 0b 90 5b 5d 41 5c 41 5d 41 5e e9 81 4d 74 03 e8 2c 5d 56 00 e9 [ 132.894947] RSP: 0018:ffff888048b5f9a0 EFLAGS: 00010286 [ 132.895738] RAX: 00000000ffffffff RBX: ffff888020119b80 RCX: ffffffff815660f7 [ 132.896993] RDX: 0000000000000000 RSI: ffffffff81566100 RDI: ffff888020119f7c [ 132.898130] RBP: ffff888020119b80 R08: 0000000000000000 R09: fffffbfff0ba7040 [ 132.899261] R10: 0000000000000000 R11: 0000000000000001 R12: ffff888020119b80 [ 132.900376] R13: 0000000000000001 R14: ffffffff85c0ee60 R15: ffff8880494cb2c0 [ 132.901496] FS: 000055558a4d3400(0000) GS:ffff8880e5342000(0000) knlGS:0000000000000000 [ 132.902765] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 132.903715] CR2: 00007ffcadff80a0 CR3: 000000001e6bb000 CR4: 0000000000350ef0 [ 132.904927] Call Trace: [ 132.905367] [ 132.906669] __wait_on_freeing_inode+0x10f/0x350 [ 132.908045] ? __pfx___wait_on_freeing_inode+0x10/0x10 [ 132.910122] ? __pfx_var_wake_function+0x10/0x10 [ 132.912473] ? lock_is_held_type+0x9e/0x120 [ 132.914608] insert_inode_locked+0x25f/0x890 [ 132.917738] __ext4_new_inode+0x223d/0x4cd0 [ 132.922561] ? __pfx___ext4_new_inode+0x10/0x10 [ 132.925068] ? __pfx___dquot_initialize+0x10/0x10 [ 132.926531] ? __pfx_avc_has_perm+0x10/0x10 [ 132.930007] ext4_symlink+0x623/0xb40 [ 132.934324] ? __pfx_ext4_symlink+0x10/0x10 [ 132.936265] ? security_inode_permission+0x72/0xe0 [ 132.939446] vfs_symlink+0x44b/0x840 [ 132.942028] filename_symlinkat+0x158/0x440 [ 132.944196] ? __pfx_filename_symlinkat+0x10/0x10 [ 132.945617] ? strncpy_from_user+0x21b/0x2f0 [ 132.949263] __x64_sys_symlink+0x82/0x110 [ 132.950675] do_syscall_64+0xbf/0x420 [ 132.952267] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.953288] RIP: 0033:0x7f16155a9427 [ 132.954055] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 58 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 132.956761] RSP: 002b:00007fff265b1f68 EFLAGS: 00000206 ORIG_RAX: 0000000000000058 [ 132.957964] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f16155a9427 [ 132.959086] RDX: ffffffffffffffbc RSI: 00007f161560400e RDI: 00007f16156031dd [ 132.960209] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007fff265b19e0 [ 132.961328] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 132.962464] R13: 0000000000000000 R14: 0000000000000001 R15: 00007fff265b2030 [ 132.967474] [ 132.967839] irq event stamp: 883 [ 132.968418] hardirqs last enabled at (883): [] _raw_spin_unlock_irqrestore+0x2c/0x50 [ 132.969982] hardirqs last disabled at (882): [] _raw_spin_lock_irqsave+0x53/0x60 [ 132.971474] softirqs last enabled at (878): [] kernel_fpu_end+0x59/0x70 [ 132.972944] softirqs last disabled at (876): [] kernel_fpu_begin_mask+0x1bb/0x300 [ 132.974469] ---[ end trace 0000000000000000 ]--- 09:56:55 executing program 7: r0 = gettid() rt_sigqueueinfo(r0, 0x21, &(0x7f0000000100)={0x0, 0x0, 0xfffffffb}) 09:56:55 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000100), 0x8) writev(r0, &(0x7f0000001580)=[{&(0x7f00000000c0)="8d", 0x9801}], 0x1) 09:56:55 executing program 7: r0 = socket(0xa, 0x3, 0x6) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)=@phonet={0xa}, 0x80) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 09:56:55 executing program 7: r0 = socket(0xa, 0x3, 0x6) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)=@phonet={0xa}, 0x80) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 09:56:56 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCXONC(r0, 0x4bfa, 0x0) 09:56:56 executing program 7: r0 = socket(0xa, 0x3, 0x6) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)=@phonet={0xa}, 0x80) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 09:56:56 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000100), 0x8) writev(r0, &(0x7f0000001580)=[{&(0x7f00000000c0)="8d", 0x9801}], 0x1) 09:56:56 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000010401080000000000001700000000000500010003"], 0x1c}}, 0x0) 09:56:56 executing program 7: r0 = socket(0xa, 0x3, 0x6) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)=@phonet={0xa}, 0x80) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 09:56:56 executing program 4: r0 = msgget$private(0x0, 0x0) msgrcv(r0, 0x0, 0x0, 0x0, 0x0) msgctl$IPC_RMID(r0, 0x0) 09:56:56 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000200)={{{@in=@local, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}, {{@in=@multicast2, 0x0, 0x6c}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0xe8) close_range(r0, 0xffffffffffffffff, 0x0) 09:56:56 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000002700)={0x1f, @none}, 0x8) 09:56:56 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) 09:56:56 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCXONC(r0, 0x4bfa, 0x0) 09:56:56 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000100), 0x8) writev(r0, &(0x7f0000001580)=[{&(0x7f00000000c0)="8d", 0x9801}], 0x1) 09:56:56 executing program 5: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x0) mmap(&(0x7f0000ff3000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) 09:56:56 executing program 7: r0 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3e, &(0x7f0000001c40)=0x80000001, 0x4) 09:56:56 executing program 1: futex(0x0, 0x4, 0x0, &(0x7f0000000400)={0x0, 0x989680}, 0x0, 0x0) 09:56:56 executing program 4: r0 = msgget$private(0x0, 0x0) msgrcv(r0, 0x0, 0x0, 0x0, 0x0) msgctl$IPC_RMID(r0, 0x0) 09:56:56 executing program 6: r0 = io_uring_setup(0x3e96, &(0x7f0000000140)) r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000000640)={0x10, 0x0, 0x0, 0x1}, 0xc) close_range(r0, 0xffffffffffffffff, 0x0) 09:56:56 executing program 7: prctl$PR_SET_MM_MAP(0x39, 0xe, 0x0, 0x0) [ 133.588034] audit: type=1400 audit(1768471016.439:10): avc: denied { read } for pid=4149 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 133.602250] audit: type=1400 audit(1768471016.440:11): avc: denied { write } for pid=4149 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 09:56:56 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCXONC(r0, 0x4bfa, 0x0) 09:56:56 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) 09:56:56 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$BLKTRACESTART(r0, 0x1262, 0x0) 09:56:56 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCNOTTY(r0, 0x4b47) 09:56:56 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) recvmmsg(r0, &(0x7f0000003040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x1, 0x0) 09:56:56 executing program 6: r0 = io_uring_setup(0x3e96, &(0x7f0000000140)) r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000000640)={0x10, 0x0, 0x0, 0x1}, 0xc) close_range(r0, 0xffffffffffffffff, 0x0) 09:56:56 executing program 5: r0 = getpid() r1 = pidfd_open(r0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open_by_handle_at(r1, &(0x7f0000000140)=@raw={0x8, 0xfe, {"930f000000"}}, 0x0) 09:56:56 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x0, 0x0) read(r0, &(0x7f0000000300)=""/102400, 0x19000) 09:56:56 executing program 7: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000080)) creat(&(0x7f0000000040)='./file0\x00', 0x0) r0 = inotify_init() r1 = inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0xd400080b) inotify_rm_watch(r0, r1) 09:56:56 executing program 6: r0 = io_uring_setup(0x3e96, &(0x7f0000000140)) r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000000640)={0x10, 0x0, 0x0, 0x1}, 0xc) close_range(r0, 0xffffffffffffffff, 0x0) 09:56:56 executing program 1: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(r0, &(0x7f0000000a00)="506cbe107bf1cd4a237540a62b7d4311ed8c0a97faca6cc5e3a00525abf0e62875da9e7d0633cb5f4e2a9bf652b87af75c966cc769cfffabafb2a9ca2306827dd41d0001b60ed3d1a84c0a59a8dc491fb2dc9e1ca150a27f084646ecffd7f35838e3ea0e9683d2039490587119462c00d7d36fd30610422eed34bed7ed30cfa45bbad42ef7a3a1fb635bbeaf13123ebdd67d2ce47b20a6cc6c28aeec23a29a628d5b7bce35aeb391fca65916d1afadcef315e1de514c9c4ac2483a4e17ec69ad80e7be15393f560f35cf93b2d7750901277b", 0xd2) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00e18622783d23fc238a1d2147c1c4efaceaeba3002bd67184f79cec11440b3e48a1ac046f136132125010023c741f69072e0000710d0e9b7d5e0f1f834c5a9b602ac6"]) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000840)=""/104, 0x68}, {&(0x7f0000000500)=""/223, 0xdf}, {&(0x7f0000000600)=""/241, 0xf1}, {&(0x7f0000000700)=""/2, 0x2}, {&(0x7f0000000740)=""/85, 0x55}], 0x5, &(0x7f0000000940)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x88}, 0x20) perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21208, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x4d, 0x0, 0x7, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x3, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x800c3e429c4f1bd1) r2 = socket$netlink(0x10, 0x3, 0x4) close_range(0xffffffffffffffff, r2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$cgroup2(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000400), 0x18, 0x244480) setsockopt$WPAN_SECURITY(r3, 0x0, 0x1, &(0x7f0000000440)=0x1, 0x4) r4 = fork() ptrace(0x10, r4) ptrace(0x8, r4) mknodat$loop(r1, &(0x7f0000000000)='./file0\x00', 0x0, 0x1) futimesat(r1, 0x0, 0x0) mkdirat(r1, &(0x7f0000001040)='./file0\x00', 0xd) syz_io_uring_setup(0x3ce1, &(0x7f0000000480), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000000180), &(0x7f0000001240)) 09:56:56 executing program 5: r0 = getpid() r1 = pidfd_open(r0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open_by_handle_at(r1, &(0x7f0000000140)=@raw={0x8, 0xfe, {"930f000000"}}, 0x0) 09:56:56 executing program 4: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = epoll_create(0xe9) r3 = epoll_create(0xe9) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000280)) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000240)) close_range(r1, 0xffffffffffffffff, 0x0) 09:56:56 executing program 6: r0 = io_uring_setup(0x3e96, &(0x7f0000000140)) r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000000640)={0x10, 0x0, 0x0, 0x1}, 0xc) close_range(r0, 0xffffffffffffffff, 0x0) [ 133.871185] audit: type=1400 audit(1768471016.725:12): avc: denied { watch_reads } for pid=4185 comm="syz-executor.7" path="/syzkaller-testdir213423375/syzkaller.Gsuw5j/21/file0" dev="sda" ino=16001 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 [ 133.939737] loop1: detected capacity change from 0 to 64 [ 133.941883] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 09:56:56 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x5411, &(0x7f0000000000)={'sit0\x00'}) 09:56:56 executing program 3: ppoll(0xfffffffffffffffd, 0x0, &(0x7f0000000cc0)={0x0, 0x989680}, 0x0, 0x0) 09:56:56 executing program 4: syz_emit_ethernet(0x2a, &(0x7f0000000300)={@local, @multicast, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @local, @multicast1}, {0x0, 0x0, 0x0, @broadcast}}}}}, 0x0) 09:56:56 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) 09:56:56 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@polexpire={0xcc, 0x1b, 0x39c8be0fc4478919, 0x0, 0x0, {{{@in, @in=@multicast2}}}, [@mark={0xc}]}, 0xcc}}, 0x0) 09:56:56 executing program 5: r0 = getpid() r1 = pidfd_open(r0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open_by_handle_at(r1, &(0x7f0000000140)=@raw={0x8, 0xfe, {"930f000000"}}, 0x0) 09:56:56 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0xeb, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/config', 0x0, 0x0) lseek(r0, 0x5, 0x0) getdents(r0, 0x0, 0x0) 09:56:56 executing program 1: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(r0, &(0x7f0000000a00)="506cbe107bf1cd4a237540a62b7d4311ed8c0a97faca6cc5e3a00525abf0e62875da9e7d0633cb5f4e2a9bf652b87af75c966cc769cfffabafb2a9ca2306827dd41d0001b60ed3d1a84c0a59a8dc491fb2dc9e1ca150a27f084646ecffd7f35838e3ea0e9683d2039490587119462c00d7d36fd30610422eed34bed7ed30cfa45bbad42ef7a3a1fb635bbeaf13123ebdd67d2ce47b20a6cc6c28aeec23a29a628d5b7bce35aeb391fca65916d1afadcef315e1de514c9c4ac2483a4e17ec69ad80e7be15393f560f35cf93b2d7750901277b", 0xd2) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00e18622783d23fc238a1d2147c1c4efaceaeba3002bd67184f79cec11440b3e48a1ac046f136132125010023c741f69072e0000710d0e9b7d5e0f1f834c5a9b602ac6"]) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000840)=""/104, 0x68}, {&(0x7f0000000500)=""/223, 0xdf}, {&(0x7f0000000600)=""/241, 0xf1}, {&(0x7f0000000700)=""/2, 0x2}, {&(0x7f0000000740)=""/85, 0x55}], 0x5, &(0x7f0000000940)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x88}, 0x20) perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21208, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x4d, 0x0, 0x7, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x3, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x800c3e429c4f1bd1) r2 = socket$netlink(0x10, 0x3, 0x4) close_range(0xffffffffffffffff, r2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$cgroup2(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000400), 0x18, 0x244480) setsockopt$WPAN_SECURITY(r3, 0x0, 0x1, &(0x7f0000000440)=0x1, 0x4) r4 = fork() ptrace(0x10, r4) ptrace(0x8, r4) mknodat$loop(r1, &(0x7f0000000000)='./file0\x00', 0x0, 0x1) futimesat(r1, 0x0, 0x0) mkdirat(r1, &(0x7f0000001040)='./file0\x00', 0xd) syz_io_uring_setup(0x3ce1, &(0x7f0000000480), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000000180), &(0x7f0000001240)) [ 134.147446] syz-executor.6 uses obsolete (PF_INET,SOCK_PACKET) 09:56:57 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@polexpire={0xcc, 0x1b, 0x39c8be0fc4478919, 0x0, 0x0, {{{@in, @in=@multicast2}}}, [@mark={0xc}]}, 0xcc}}, 0x0) 09:56:57 executing program 5: r0 = getpid() r1 = pidfd_open(r0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open_by_handle_at(r1, &(0x7f0000000140)=@raw={0x8, 0xfe, {"930f000000"}}, 0x0) 09:56:57 executing program 3: ppoll(0xfffffffffffffffd, 0x0, &(0x7f0000000cc0)={0x0, 0x989680}, 0x0, 0x0) 09:56:57 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x11}, {@val={0x8, 0x117}, @void}}}, 0x1c}}, 0x0) 09:56:57 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timerfd_create(0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000040)={{0x77359400}}, 0x0) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@link_local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "2f2802", 0x0, 0x0, 0x0, @local, @local}}}}, 0x0) [ 135.408906] Bluetooth: hci6: command 0x0405 tx timeout [ 136.759264] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 136.764241] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 136.771749] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 136.776816] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 136.779636] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 138.800916] Bluetooth: hci4: command tx timeout [ 140.848954] Bluetooth: hci4: command tx timeout VM DIAGNOSIS: 09:56:55 Registers: info registers vcpu 0 RAX=dffffc0000000005 RBX=00000000000003f9 RCX=0000000000000000 RDX=00000000000003f9 RSI=ffffffff829750a0 RDI=ffffffff889c19e0 RBP=ffffffff889c19a0 RSP=ffff888048b5f4b0 R8 =0000000000000001 R9 =ffffed100916be87 R10=0000000000000000 R11=6666666666663c5b R12=0000000000000048 R13=ffffffff889c19f0 R14=ffffffff889c19a0 R15=ffffffff889c1c60 RIP=ffffffff829750f5 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 000055558a4d3400 00000000 00000000 GS =0000 ffff8880e5342000 00000000 00000000 LDT=0000 fffffe7c00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffcadff80a0 CR3=000000001e6bb000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000a60ce07b00000000cec3662e XMM01=000000000000000003515b82db34ca11 XMM02=0000000000000000333bebdfd0a6a21d XMM03=00000000000000000000000000000000 XMM04=ffffffff0000ff00000000ff00000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000001 RBX=0000000000000001 RCX=ffffffff84d1a2ce RDX=fffffbfff0b82d11 RSI=0000000000000004 RDI=ffffffff85c16880 RBP=ffffffff85c16880 RSP=ffff88801aebfb40 R8 =0000000000000000 R9 =fffffbfff0b82d10 R10=ffffffff85c16883 R11=0000000000000000 R12=1ffff110035d7f69 R13=0000000000000003 R14=fffffbfff0b82d10 R15=ffff88801aebfb78 RIP=ffffffff84d1a460 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 000055555b786400 00000000 00000000 GS =0000 ffff8880e5442000 00000000 00000000 LDT=0000 fffffe0100000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055555b78fc58 CR3=000000001dca3000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000a60ce07b00000000cec3662e XMM01=000000000000000003515b82db34ca11 XMM02=0000000000000000333bebdfd0a6a21d XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000