Warning: Permanently added '[localhost]:53373' (ECDSA) to the list of known hosts. 2026/01/16 14:44:41 fuzzer started 2026/01/16 14:44:41 dialing manager at localhost:42157 syzkaller login: [ 50.165607] cgroup: Unknown subsys name 'net' [ 50.234561] cgroup: Unknown subsys name 'cpuset' [ 50.246863] cgroup: Unknown subsys name 'rlimit' 2026/01/16 14:44:51 syscalls: 2214 2026/01/16 14:44:51 code coverage: enabled 2026/01/16 14:44:51 comparison tracing: enabled 2026/01/16 14:44:51 extra coverage: enabled 2026/01/16 14:44:51 setuid sandbox: enabled 2026/01/16 14:44:51 namespace sandbox: enabled 2026/01/16 14:44:51 Android sandbox: enabled 2026/01/16 14:44:51 fault injection: enabled 2026/01/16 14:44:51 leak checking: enabled 2026/01/16 14:44:51 net packet injection: enabled 2026/01/16 14:44:51 net device setup: enabled 2026/01/16 14:44:51 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2026/01/16 14:44:51 devlink PCI setup: PCI device 0000:00:10.0 is not available 2026/01/16 14:44:51 USB emulation: enabled 2026/01/16 14:44:51 hci packet injection: enabled 2026/01/16 14:44:51 wifi device emulation: enabled 2026/01/16 14:44:51 802.15.4 emulation: enabled 2026/01/16 14:44:51 fetching corpus: 0, signal 0/2000 (executing program) 2026/01/16 14:44:51 fetching corpus: 47, signal 20616/24222 (executing program) 2026/01/16 14:44:51 fetching corpus: 97, signal 37326/42262 (executing program) 2026/01/16 14:44:52 fetching corpus: 147, signal 50229/56316 (executing program) 2026/01/16 14:44:52 fetching corpus: 197, signal 54834/62254 (executing program) 2026/01/16 14:44:52 fetching corpus: 247, signal 59445/68071 (executing program) 2026/01/16 14:44:52 fetching corpus: 297, signal 63654/73460 (executing program) 2026/01/16 14:44:52 fetching corpus: 347, signal 68118/78969 (executing program) 2026/01/16 14:44:52 fetching corpus: 397, signal 73320/85115 (executing program) 2026/01/16 14:44:52 fetching corpus: 447, signal 78142/90796 (executing program) 2026/01/16 14:44:52 fetching corpus: 497, signal 81309/94881 (executing program) 2026/01/16 14:44:52 fetching corpus: 547, signal 85165/99502 (executing program) 2026/01/16 14:44:53 fetching corpus: 597, signal 89811/104803 (executing program) 2026/01/16 14:44:53 fetching corpus: 647, signal 92112/107908 (executing program) 2026/01/16 14:44:53 fetching corpus: 697, signal 94573/111169 (executing program) 2026/01/16 14:44:53 fetching corpus: 747, signal 96538/113978 (executing program) 2026/01/16 14:44:53 fetching corpus: 797, signal 98771/116921 (executing program) 2026/01/16 14:44:53 fetching corpus: 847, signal 101053/119820 (executing program) 2026/01/16 14:44:53 fetching corpus: 897, signal 102299/121907 (executing program) 2026/01/16 14:44:53 fetching corpus: 947, signal 104665/124907 (executing program) 2026/01/16 14:44:53 fetching corpus: 997, signal 106237/127195 (executing program) 2026/01/16 14:44:54 fetching corpus: 1047, signal 108237/129760 (executing program) 2026/01/16 14:44:54 fetching corpus: 1096, signal 109848/132028 (executing program) 2026/01/16 14:44:54 fetching corpus: 1146, signal 111386/134204 (executing program) 2026/01/16 14:44:54 fetching corpus: 1195, signal 112906/136412 (executing program) 2026/01/16 14:44:54 fetching corpus: 1244, signal 114101/138265 (executing program) 2026/01/16 14:44:54 fetching corpus: 1293, signal 115440/140200 (executing program) 2026/01/16 14:44:54 fetching corpus: 1343, signal 117632/142699 (executing program) 2026/01/16 14:44:54 fetching corpus: 1393, signal 118682/144385 (executing program) 2026/01/16 14:44:54 fetching corpus: 1443, signal 120199/146377 (executing program) 2026/01/16 14:44:54 fetching corpus: 1493, signal 121568/148200 (executing program) 2026/01/16 14:44:55 fetching corpus: 1543, signal 122482/149702 (executing program) 2026/01/16 14:44:55 fetching corpus: 1593, signal 123723/151389 (executing program) 2026/01/16 14:44:55 fetching corpus: 1642, signal 124929/153121 (executing program) 2026/01/16 14:44:55 fetching corpus: 1692, signal 125946/154624 (executing program) 2026/01/16 14:44:55 fetching corpus: 1742, signal 127210/156302 (executing program) 2026/01/16 14:44:55 fetching corpus: 1789, signal 128815/158211 (executing program) 2026/01/16 14:44:55 fetching corpus: 1839, signal 129937/159595 (executing program) 2026/01/16 14:44:55 fetching corpus: 1887, signal 131558/161376 (executing program) 2026/01/16 14:44:55 fetching corpus: 1937, signal 132473/162730 (executing program) 2026/01/16 14:44:56 fetching corpus: 1987, signal 133391/164070 (executing program) 2026/01/16 14:44:56 fetching corpus: 2037, signal 134487/165505 (executing program) 2026/01/16 14:44:56 fetching corpus: 2087, signal 135491/166832 (executing program) 2026/01/16 14:44:56 fetching corpus: 2137, signal 136268/168056 (executing program) 2026/01/16 14:44:56 fetching corpus: 2187, signal 137431/169482 (executing program) 2026/01/16 14:44:56 fetching corpus: 2237, signal 138479/170781 (executing program) 2026/01/16 14:44:56 fetching corpus: 2287, signal 139188/171821 (executing program) 2026/01/16 14:44:56 fetching corpus: 2337, signal 140135/173048 (executing program) 2026/01/16 14:44:56 fetching corpus: 2387, signal 140739/174061 (executing program) 2026/01/16 14:44:57 fetching corpus: 2437, signal 141656/175239 (executing program) 2026/01/16 14:44:57 fetching corpus: 2487, signal 143454/176803 (executing program) 2026/01/16 14:44:57 fetching corpus: 2537, signal 145323/178412 (executing program) 2026/01/16 14:44:57 fetching corpus: 2587, signal 146201/179513 (executing program) 2026/01/16 14:44:57 fetching corpus: 2637, signal 147286/180663 (executing program) 2026/01/16 14:44:57 fetching corpus: 2687, signal 148127/181700 (executing program) 2026/01/16 14:44:57 fetching corpus: 2737, signal 148904/182686 (executing program) 2026/01/16 14:44:57 fetching corpus: 2787, signal 149948/183773 (executing program) 2026/01/16 14:44:58 fetching corpus: 2837, signal 150881/184778 (executing program) 2026/01/16 14:44:58 fetching corpus: 2887, signal 151793/185781 (executing program) 2026/01/16 14:44:58 fetching corpus: 2937, signal 152546/186650 (executing program) 2026/01/16 14:44:58 fetching corpus: 2987, signal 153151/187460 (executing program) 2026/01/16 14:44:58 fetching corpus: 3037, signal 153802/188324 (executing program) 2026/01/16 14:44:58 fetching corpus: 3087, signal 154356/189128 (executing program) 2026/01/16 14:44:58 fetching corpus: 3137, signal 155676/190193 (executing program) 2026/01/16 14:44:58 fetching corpus: 3187, signal 156418/190994 (executing program) 2026/01/16 14:44:58 fetching corpus: 3237, signal 157155/191831 (executing program) 2026/01/16 14:44:59 fetching corpus: 3287, signal 157774/192588 (executing program) 2026/01/16 14:44:59 fetching corpus: 3337, signal 158823/193459 (executing program) 2026/01/16 14:44:59 fetching corpus: 3387, signal 159283/194161 (executing program) 2026/01/16 14:44:59 fetching corpus: 3437, signal 160253/194981 (executing program) 2026/01/16 14:44:59 fetching corpus: 3487, signal 160653/195624 (executing program) 2026/01/16 14:44:59 fetching corpus: 3537, signal 161111/196244 (executing program) 2026/01/16 14:44:59 fetching corpus: 3587, signal 161664/196881 (executing program) 2026/01/16 14:44:59 fetching corpus: 3637, signal 162437/197586 (executing program) 2026/01/16 14:45:00 fetching corpus: 3687, signal 163017/198251 (executing program) 2026/01/16 14:45:00 fetching corpus: 3737, signal 163513/198877 (executing program) 2026/01/16 14:45:00 fetching corpus: 3787, signal 164137/199519 (executing program) 2026/01/16 14:45:00 fetching corpus: 3837, signal 164846/200167 (executing program) 2026/01/16 14:45:00 fetching corpus: 3887, signal 165473/200720 (executing program) 2026/01/16 14:45:00 fetching corpus: 3937, signal 166161/201352 (executing program) 2026/01/16 14:45:00 fetching corpus: 3987, signal 166718/201922 (executing program) 2026/01/16 14:45:00 fetching corpus: 4037, signal 167305/202489 (executing program) 2026/01/16 14:45:00 fetching corpus: 4087, signal 167836/203039 (executing program) 2026/01/16 14:45:01 fetching corpus: 4137, signal 168459/203578 (executing program) 2026/01/16 14:45:01 fetching corpus: 4187, signal 169180/204146 (executing program) 2026/01/16 14:45:01 fetching corpus: 4237, signal 169952/204721 (executing program) 2026/01/16 14:45:01 fetching corpus: 4287, signal 170441/205194 (executing program) 2026/01/16 14:45:01 fetching corpus: 4337, signal 170840/205653 (executing program) 2026/01/16 14:45:01 fetching corpus: 4387, signal 171251/206080 (executing program) 2026/01/16 14:45:01 fetching corpus: 4437, signal 171871/206558 (executing program) 2026/01/16 14:45:01 fetching corpus: 4487, signal 172413/207001 (executing program) 2026/01/16 14:45:01 fetching corpus: 4537, signal 172792/207402 (executing program) 2026/01/16 14:45:02 fetching corpus: 4587, signal 173448/207885 (executing program) 2026/01/16 14:45:02 fetching corpus: 4637, signal 174253/208318 (executing program) 2026/01/16 14:45:02 fetching corpus: 4687, signal 174744/208679 (executing program) 2026/01/16 14:45:02 fetching corpus: 4737, signal 175250/209090 (executing program) 2026/01/16 14:45:02 fetching corpus: 4787, signal 175790/209487 (executing program) 2026/01/16 14:45:02 fetching corpus: 4837, signal 176302/209885 (executing program) 2026/01/16 14:45:02 fetching corpus: 4886, signal 176863/210287 (executing program) 2026/01/16 14:45:02 fetching corpus: 4936, signal 177326/210645 (executing program) 2026/01/16 14:45:02 fetching corpus: 4986, signal 177732/210943 (executing program) 2026/01/16 14:45:03 fetching corpus: 5036, signal 178184/211351 (executing program) 2026/01/16 14:45:03 fetching corpus: 5086, signal 178829/211698 (executing program) 2026/01/16 14:45:03 fetching corpus: 5136, signal 179269/212049 (executing program) 2026/01/16 14:45:03 fetching corpus: 5186, signal 179633/212386 (executing program) 2026/01/16 14:45:03 fetching corpus: 5236, signal 180081/212387 (executing program) 2026/01/16 14:45:03 fetching corpus: 5286, signal 180464/212391 (executing program) 2026/01/16 14:45:03 fetching corpus: 5334, signal 180962/212459 (executing program) 2026/01/16 14:45:03 fetching corpus: 5384, signal 181509/212474 (executing program) 2026/01/16 14:45:04 fetching corpus: 5434, signal 181998/212484 (executing program) 2026/01/16 14:45:04 fetching corpus: 5484, signal 182436/212486 (executing program) 2026/01/16 14:45:04 fetching corpus: 5534, signal 182847/212486 (executing program) 2026/01/16 14:45:04 fetching corpus: 5584, signal 183278/212486 (executing program) 2026/01/16 14:45:04 fetching corpus: 5634, signal 183867/212486 (executing program) 2026/01/16 14:45:04 fetching corpus: 5684, signal 184196/212492 (executing program) 2026/01/16 14:45:04 fetching corpus: 5734, signal 184456/212492 (executing program) 2026/01/16 14:45:04 fetching corpus: 5784, signal 184829/212492 (executing program) 2026/01/16 14:45:04 fetching corpus: 5834, signal 185184/212497 (executing program) 2026/01/16 14:45:05 fetching corpus: 5884, signal 185476/212497 (executing program) 2026/01/16 14:45:05 fetching corpus: 5934, signal 185846/212514 (executing program) 2026/01/16 14:45:05 fetching corpus: 5984, signal 186419/212514 (executing program) 2026/01/16 14:45:05 fetching corpus: 6034, signal 186745/212516 (executing program) 2026/01/16 14:45:05 fetching corpus: 6084, signal 187158/212528 (executing program) 2026/01/16 14:45:05 fetching corpus: 6134, signal 187495/212528 (executing program) 2026/01/16 14:45:05 fetching corpus: 6184, signal 187893/212528 (executing program) 2026/01/16 14:45:05 fetching corpus: 6234, signal 188345/212537 (executing program) 2026/01/16 14:45:05 fetching corpus: 6284, signal 188742/212537 (executing program) 2026/01/16 14:45:05 fetching corpus: 6334, signal 189241/212542 (executing program) 2026/01/16 14:45:06 fetching corpus: 6384, signal 189657/212550 (executing program) 2026/01/16 14:45:06 fetching corpus: 6434, signal 189947/212552 (executing program) 2026/01/16 14:45:06 fetching corpus: 6484, signal 190391/212553 (executing program) 2026/01/16 14:45:06 fetching corpus: 6534, signal 190750/212559 (executing program) 2026/01/16 14:45:06 fetching corpus: 6584, signal 191219/212559 (executing program) 2026/01/16 14:45:06 fetching corpus: 6634, signal 191592/212573 (executing program) 2026/01/16 14:45:06 fetching corpus: 6684, signal 191917/212573 (executing program) 2026/01/16 14:45:06 fetching corpus: 6734, signal 192257/212575 (executing program) 2026/01/16 14:45:06 fetching corpus: 6784, signal 192541/212575 (executing program) 2026/01/16 14:45:06 fetching corpus: 6834, signal 192866/212578 (executing program) 2026/01/16 14:45:07 fetching corpus: 6884, signal 193430/212578 (executing program) 2026/01/16 14:45:07 fetching corpus: 6934, signal 193776/212578 (executing program) 2026/01/16 14:45:07 fetching corpus: 6984, signal 194114/212578 (executing program) 2026/01/16 14:45:07 fetching corpus: 7034, signal 194403/212578 (executing program) 2026/01/16 14:45:07 fetching corpus: 7084, signal 194755/212580 (executing program) 2026/01/16 14:45:07 fetching corpus: 7134, signal 195172/212580 (executing program) 2026/01/16 14:45:07 fetching corpus: 7183, signal 195520/212580 (executing program) 2026/01/16 14:45:07 fetching corpus: 7233, signal 195897/212591 (executing program) 2026/01/16 14:45:07 fetching corpus: 7283, signal 196317/212592 (executing program) 2026/01/16 14:45:07 fetching corpus: 7333, signal 196633/212592 (executing program) 2026/01/16 14:45:08 fetching corpus: 7383, signal 196922/212592 (executing program) 2026/01/16 14:45:08 fetching corpus: 7433, signal 197276/212595 (executing program) 2026/01/16 14:45:08 fetching corpus: 7483, signal 197653/212597 (executing program) 2026/01/16 14:45:08 fetching corpus: 7533, signal 197881/212597 (executing program) 2026/01/16 14:45:08 fetching corpus: 7583, signal 198199/212601 (executing program) 2026/01/16 14:45:08 fetching corpus: 7633, signal 198514/212601 (executing program) 2026/01/16 14:45:08 fetching corpus: 7683, signal 198853/212601 (executing program) 2026/01/16 14:45:08 fetching corpus: 7733, signal 199155/212602 (executing program) 2026/01/16 14:45:08 fetching corpus: 7783, signal 199553/212602 (executing program) 2026/01/16 14:45:08 fetching corpus: 7833, signal 199833/212602 (executing program) 2026/01/16 14:45:09 fetching corpus: 7883, signal 200338/212603 (executing program) 2026/01/16 14:45:09 fetching corpus: 7933, signal 200691/212604 (executing program) 2026/01/16 14:45:09 fetching corpus: 7983, signal 200920/212604 (executing program) 2026/01/16 14:45:09 fetching corpus: 8033, signal 201265/212607 (executing program) 2026/01/16 14:45:09 fetching corpus: 8083, signal 201669/212608 (executing program) 2026/01/16 14:45:09 fetching corpus: 8133, signal 201984/212608 (executing program) 2026/01/16 14:45:09 fetching corpus: 8183, signal 202286/212608 (executing program) 2026/01/16 14:45:09 fetching corpus: 8233, signal 202605/212609 (executing program) 2026/01/16 14:45:09 fetching corpus: 8283, signal 202973/212613 (executing program) 2026/01/16 14:45:09 fetching corpus: 8333, signal 203393/212613 (executing program) 2026/01/16 14:45:09 fetching corpus: 8383, signal 203641/212613 (executing program) 2026/01/16 14:45:10 fetching corpus: 8433, signal 203920/212613 (executing program) 2026/01/16 14:45:10 fetching corpus: 8483, signal 204241/212629 (executing program) 2026/01/16 14:45:10 fetching corpus: 8533, signal 204495/212630 (executing program) 2026/01/16 14:45:10 fetching corpus: 8583, signal 204758/212630 (executing program) 2026/01/16 14:45:10 fetching corpus: 8633, signal 205090/212630 (executing program) 2026/01/16 14:45:10 fetching corpus: 8683, signal 205433/212636 (executing program) 2026/01/16 14:45:10 fetching corpus: 8733, signal 205757/212636 (executing program) 2026/01/16 14:45:10 fetching corpus: 8783, signal 205987/212636 (executing program) 2026/01/16 14:45:10 fetching corpus: 8833, signal 206429/212636 (executing program) 2026/01/16 14:45:10 fetching corpus: 8883, signal 206615/212636 (executing program) 2026/01/16 14:45:10 fetching corpus: 8933, signal 206870/212636 (executing program) 2026/01/16 14:45:11 fetching corpus: 8983, signal 207189/212636 (executing program) 2026/01/16 14:45:11 fetching corpus: 9033, signal 207465/212636 (executing program) 2026/01/16 14:45:11 fetching corpus: 9083, signal 207826/212636 (executing program) 2026/01/16 14:45:11 fetching corpus: 9133, signal 208035/212637 (executing program) 2026/01/16 14:45:11 fetching corpus: 9183, signal 208245/212637 (executing program) 2026/01/16 14:45:11 fetching corpus: 9233, signal 208564/212637 (executing program) 2026/01/16 14:45:11 fetching corpus: 9283, signal 208910/212637 (executing program) 2026/01/16 14:45:11 fetching corpus: 9333, signal 209173/212637 (executing program) 2026/01/16 14:45:11 fetching corpus: 9383, signal 209440/212638 (executing program) 2026/01/16 14:45:11 fetching corpus: 9433, signal 209793/212638 (executing program) 2026/01/16 14:45:12 fetching corpus: 9483, signal 210075/212638 (executing program) 2026/01/16 14:45:12 fetching corpus: 9533, signal 210316/212638 (executing program) 2026/01/16 14:45:12 fetching corpus: 9583, signal 210625/212641 (executing program) 2026/01/16 14:45:12 fetching corpus: 9633, signal 210855/212646 (executing program) 2026/01/16 14:45:12 fetching corpus: 9683, signal 211058/212657 (executing program) 2026/01/16 14:45:12 fetching corpus: 9709, signal 211211/212657 (executing program) 2026/01/16 14:45:12 fetching corpus: 9709, signal 211211/212657 (executing program) 2026/01/16 14:45:13 starting 8 fuzzer processes 14:45:13 executing program 0: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000080)) io_setup(0xfff, &(0x7f0000000040)=0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) io_submit(r0, 0x0, 0x0) 14:45:13 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1e, 0x0, 0x1300) 14:45:13 executing program 1: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) 14:45:14 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) fcntl$lock(r0, 0x7, &(0x7f0000000180)) fcntl$lock(r0, 0x24, &(0x7f0000000100)={0x2}) 14:45:14 executing program 5: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) lseek(r0, 0xdfcc, 0x0) getdents64(r0, &(0x7f0000000200)=""/188, 0xbc) 14:45:14 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f0000000000)={0xb00}, 0x8) [ 82.151646] audit: type=1400 audit(1768574714.082:7): avc: denied { execmem } for pid=273 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 14:45:14 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="2400000018000105000080000000000002"], 0x24}], 0x1}, 0x0) 14:45:14 executing program 6: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000013600)={0xffffffffffffffff}) sendmmsg$sock(r0, &(0x7f0000017780)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000013b40)=@l2={0x1f, 0x0, @fixed}, 0x80, 0x0}}], 0x2, 0x0) [ 83.291942] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 83.292339] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 83.294245] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 83.297325] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 83.299853] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 83.302632] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 83.304794] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 83.305402] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 83.329547] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 83.337842] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 83.349790] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 83.352977] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 83.356510] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 83.359449] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 83.361576] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 83.363998] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 83.371763] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 83.399568] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 83.410705] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 83.431274] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 83.468267] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 83.469643] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 83.471869] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 83.477599] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 83.478719] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 83.488451] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 83.492286] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 83.496776] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 83.500731] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 83.502532] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 83.504560] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 83.517962] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 83.563432] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 83.597793] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 83.602444] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 83.609259] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 83.652292] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 83.662493] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 83.669986] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 83.677575] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 85.372571] Bluetooth: hci0: command tx timeout [ 85.373106] Bluetooth: hci1: command tx timeout [ 85.435212] Bluetooth: hci2: command tx timeout [ 85.564253] Bluetooth: hci4: command tx timeout [ 85.564341] Bluetooth: hci3: command tx timeout [ 85.627866] Bluetooth: hci5: command tx timeout [ 85.692245] Bluetooth: hci6: command tx timeout [ 85.820036] Bluetooth: hci7: command tx timeout [ 87.420197] Bluetooth: hci1: command tx timeout [ 87.420326] Bluetooth: hci0: command tx timeout [ 87.483242] Bluetooth: hci2: command tx timeout [ 87.612309] Bluetooth: hci3: command tx timeout [ 87.612332] Bluetooth: hci4: command tx timeout [ 87.675429] Bluetooth: hci5: command tx timeout [ 87.740173] Bluetooth: hci6: command tx timeout [ 87.867254] Bluetooth: hci7: command tx timeout [ 89.467231] Bluetooth: hci1: command tx timeout [ 89.469204] Bluetooth: hci0: command tx timeout [ 89.531271] Bluetooth: hci2: command tx timeout [ 89.660217] Bluetooth: hci4: command tx timeout [ 89.660658] Bluetooth: hci3: command tx timeout [ 89.723228] Bluetooth: hci5: command tx timeout [ 89.787494] Bluetooth: hci6: command tx timeout [ 89.915761] Bluetooth: hci7: command tx timeout [ 91.515402] Bluetooth: hci0: command tx timeout [ 91.515454] Bluetooth: hci1: command tx timeout [ 91.580167] Bluetooth: hci2: command tx timeout [ 91.707200] Bluetooth: hci3: command tx timeout [ 91.707646] Bluetooth: hci4: command tx timeout [ 91.772214] Bluetooth: hci5: command tx timeout [ 91.835231] Bluetooth: hci6: command tx timeout [ 91.963223] Bluetooth: hci7: command tx timeout [ 118.018765] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.019453] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.262727] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.263838] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 14:45:50 executing program 6: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000013600)={0xffffffffffffffff}) sendmmsg$sock(r0, &(0x7f0000017780)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000013b40)=@l2={0x1f, 0x0, @fixed}, 0x80, 0x0}}], 0x2, 0x0) 14:45:50 executing program 6: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000013600)={0xffffffffffffffff}) sendmmsg$sock(r0, &(0x7f0000017780)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000013b40)=@l2={0x1f, 0x0, @fixed}, 0x80, 0x0}}], 0x2, 0x0) 14:45:51 executing program 6: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000013600)={0xffffffffffffffff}) sendmmsg$sock(r0, &(0x7f0000017780)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000013b40)=@l2={0x1f, 0x0, @fixed}, 0x80, 0x0}}], 0x2, 0x0) [ 119.254412] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.255008] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 14:45:51 executing program 6: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, 0x0, 0x0) add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, r0) 14:45:51 executing program 6: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, 0x0, 0x0) add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, r0) [ 119.366467] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.367054] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.465344] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.465984] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 14:45:51 executing program 6: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, 0x0, 0x0) add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, r0) 14:45:51 executing program 6: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, 0x0, 0x0) add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, r0) [ 119.630163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.630777] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 14:45:51 executing program 6: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, 0x0, 0x0) add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, r0) [ 119.766560] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.767702] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.983816] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.984946] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.023450] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.024078] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.093459] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.094079] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.147898] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.148543] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.253854] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.254636] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.509052] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.510190] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.543440] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.544084] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.559359] audit: type=1400 audit(1768574752.489:8): avc: denied { open } for pid=3905 comm="syz-executor.7" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 120.564373] audit: type=1400 audit(1768574752.489:9): avc: denied { kernel } for pid=3905 comm="syz-executor.7" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 120.575211] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. [ 120.606824] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. [ 120.611478] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.612075] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.627161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.627733] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.755579] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list 14:45:52 executing program 0: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000080)) io_setup(0xfff, &(0x7f0000000040)=0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) io_submit(r0, 0x0, 0x0) 14:45:52 executing program 1: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) 14:45:52 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) fcntl$lock(r0, 0x7, &(0x7f0000000180)) fcntl$lock(r0, 0x24, &(0x7f0000000100)={0x2}) 14:45:52 executing program 5: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) lseek(r0, 0xdfcc, 0x0) getdents64(r0, &(0x7f0000000200)=""/188, 0xbc) 14:45:52 executing program 6: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, 0x0, 0x0) add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, r0) 14:45:52 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f0000000000)={0xb00}, 0x8) 14:45:52 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1e, 0x0, 0x1300) 14:45:52 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@mcast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x2}, {{@in=@private, 0x0, 0x3c}, 0x0, @in6=@dev}}, 0xe8) 14:45:52 executing program 1: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) 14:45:52 executing program 6: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, 0x0, 0x0) add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, r0) 14:45:52 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1e, 0x0, 0x1300) 14:45:52 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@mcast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x2}, {{@in=@private, 0x0, 0x3c}, 0x0, @in6=@dev}}, 0xe8) 14:45:52 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) fcntl$lock(r0, 0x7, &(0x7f0000000180)) fcntl$lock(r0, 0x24, &(0x7f0000000100)={0x2}) 14:45:52 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f0000000000)={0xb00}, 0x8) 14:45:52 executing program 5: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) lseek(r0, 0xdfcc, 0x0) getdents64(r0, &(0x7f0000000200)=""/188, 0xbc) 14:45:52 executing program 1: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) 14:45:52 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) fcntl$lock(r0, 0x7, &(0x7f0000000180)) fcntl$lock(r0, 0x24, &(0x7f0000000100)={0x2}) 14:45:52 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f0000000000)={0xb00}, 0x8) 14:45:52 executing program 1: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) lseek(r0, 0xdfcc, 0x0) getdents64(r0, &(0x7f0000000200)=""/188, 0xbc) 14:45:52 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1e, 0x0, 0x1300) 14:45:52 executing program 6: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) lseek(r0, 0xdfcc, 0x0) getdents64(r0, &(0x7f0000000200)=""/188, 0xbc) 14:45:52 executing program 5: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) lseek(r0, 0xdfcc, 0x0) getdents64(r0, &(0x7f0000000200)=""/188, 0xbc) 14:45:52 executing program 0: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000080)) io_setup(0xfff, &(0x7f0000000040)=0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) io_submit(r0, 0x0, 0x0) 14:45:52 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@mcast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x2}, {{@in=@private, 0x0, 0x3c}, 0x0, @in6=@dev}}, 0xe8) 14:45:53 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_SETSEL(r0, 0x4b30, &(0x7f0000000000)) 14:45:53 executing program 1: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) lseek(r0, 0xdfcc, 0x0) getdents64(r0, &(0x7f0000000200)=""/188, 0xbc) 14:45:53 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug', 0x0, 0x0) getdents(r0, &(0x7f0000000180)=""/163, 0xa3) lseek(r0, 0x10001, 0x1) 14:45:53 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@mcast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x2}, {{@in=@private, 0x0, 0x3c}, 0x0, @in6=@dev}}, 0xe8) 14:45:53 executing program 0: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000080)) io_setup(0xfff, &(0x7f0000000040)=0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) io_submit(r0, 0x0, 0x0) 14:45:53 executing program 6: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) lseek(r0, 0xdfcc, 0x0) getdents64(r0, &(0x7f0000000200)=""/188, 0xbc) 14:45:53 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000003c0), 0x4) 14:45:53 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_SETSEL(r0, 0x4b30, &(0x7f0000000000)) 14:45:53 executing program 1: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) lseek(r0, 0xdfcc, 0x0) getdents64(r0, &(0x7f0000000200)=""/188, 0xbc) 14:45:53 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000001d00)=[{{&(0x7f0000000080)={0xa, 0x4e21, 0x0, @empty}, 0x1c, 0x0, 0x0, &(0x7f0000001640)=[@hoplimit_2292={{0x14}}, @dstopts={{0x18}}], 0x30}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 14:45:53 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000003c0), 0x4) 14:45:53 executing program 6: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) lseek(r0, 0xdfcc, 0x0) getdents64(r0, &(0x7f0000000200)=""/188, 0xbc) 14:45:53 executing program 0: r0 = syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[]) move_mount(r0, 0x0, 0xffffffffffffff9c, 0x0, 0x66) creat(&(0x7f0000000040)='./file0/../file0\x00', 0x0) 14:45:53 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$IP_SET_OP_GET_FNAME(r0, 0x1, 0x38, 0x0, &(0x7f00000007c0)) 14:45:53 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug', 0x0, 0x0) getdents(r0, &(0x7f0000000180)=""/163, 0xa3) lseek(r0, 0x10001, 0x1) 14:45:53 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil) 14:45:53 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_SETSEL(r0, 0x4b30, &(0x7f0000000000)) 14:45:53 executing program 1: symlink(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file1\x00') syz_mount_image$tmpfs(&(0x7f00000005c0), &(0x7f00000000c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)) pivot_root(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='./file1\x00') 14:45:53 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug', 0x0, 0x0) getdents(r0, &(0x7f0000000180)=""/163, 0xa3) lseek(r0, 0x10001, 0x1) 14:45:53 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$IP_SET_OP_GET_FNAME(r0, 0x1, 0x38, 0x0, &(0x7f00000007c0)) 14:45:53 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000003c0), 0x4) 14:45:53 executing program 0: r0 = syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[]) move_mount(r0, 0x0, 0xffffffffffffff9c, 0x0, 0x66) creat(&(0x7f0000000040)='./file0/../file0\x00', 0x0) 14:45:53 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_SETSEL(r0, 0x4b30, &(0x7f0000000000)) 14:45:53 executing program 1: symlink(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file1\x00') syz_mount_image$tmpfs(&(0x7f00000005c0), &(0x7f00000000c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)) pivot_root(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='./file1\x00') 14:45:53 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil) 14:45:53 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000003c0), 0x4) 14:45:53 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$IP_SET_OP_GET_FNAME(r0, 0x1, 0x38, 0x0, &(0x7f00000007c0)) 14:45:53 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setresuid(0x0, 0xee01, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8927, &(0x7f0000000000)={'bridge0\x00'}) 14:45:53 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xe, &(0x7f00000000c0), 0x4) 14:45:53 executing program 1: symlink(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file1\x00') syz_mount_image$tmpfs(&(0x7f00000005c0), &(0x7f00000000c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)) pivot_root(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='./file1\x00') 14:45:53 executing program 0: r0 = syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[]) move_mount(r0, 0x0, 0xffffffffffffff9c, 0x0, 0x66) creat(&(0x7f0000000040)='./file0/../file0\x00', 0x0) 14:45:53 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug', 0x0, 0x0) getdents(r0, &(0x7f0000000180)=""/163, 0xa3) lseek(r0, 0x10001, 0x1) 14:45:53 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) unlink(&(0x7f0000000080)='./file0\x00') [ 121.653940] [ 121.654150] ===================================== [ 121.654525] WARNING: bad unlock balance detected! [ 121.654914] 6.19.0-rc5-next-20260116 #1 Not tainted [ 121.655301] ------------------------------------- [ 121.655677] syz-executor.5/4032 is trying to release lock (rcu_read_lock) at: 14:45:53 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xe, &(0x7f00000000c0), 0x4) [ 121.656888] [] __wait_on_freeing_inode+0x105/0x350 [ 121.660215] but there are no more locks to release! [ 121.660605] [ 121.660605] other info that might help us debug this: [ 121.661115] 4 locks held by syz-executor.5/4032: [ 121.661499] #0: ffff88800f4e63f8 (sb_writers#3){.+.+}-{0:0}, at: filename_create+0xf7/0x400 [ 121.662198] #1: ffff8880549b16f0 (&type->i_mutex_dir_key#3/1){+.+.}-{4:4}, at: filename_create+0x1b1/0x400 [ 121.662985] #2: ffff88800f4ba950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xe32/0x12d0 [ 121.663687] #3: ffffffff85c16898 (inode_hash_lock){+.+.}-{3:3}, at: insert_inode_locked+0xf9/0x890 [ 121.664418] [ 121.664418] stack backtrace: [ 121.664773] CPU: 1 UID: 0 PID: 4032 Comm: syz-executor.5 Not tainted 6.19.0-rc5-next-20260116 #1 PREEMPT(lazy) [ 121.664787] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 121.664794] Call Trace: [ 121.664798] [ 121.664802] dump_stack_lvl+0xca/0x120 [ 121.664833] ? __wait_on_freeing_inode+0x105/0x350 [ 121.664847] print_unlock_imbalance_bug+0x118/0x130 [ 121.664862] ? __wait_on_freeing_inode+0x105/0x350 [ 121.664876] lock_release+0x1ee/0x270 [ 121.664891] __wait_on_freeing_inode+0x10a/0x350 [ 121.664905] ? __pfx___wait_on_freeing_inode+0x10/0x10 [ 121.664920] ? __pfx_var_wake_function+0x10/0x10 [ 121.664937] ? lock_is_held_type+0x9e/0x120 [ 121.664948] insert_inode_locked+0x25f/0x890 [ 121.664965] __ext4_new_inode+0x223d/0x4cd0 [ 121.664982] ? __pfx___ext4_new_inode+0x10/0x10 [ 121.664996] ? __pfx___dquot_initialize+0x10/0x10 [ 121.665014] ? __pfx_avc_has_perm+0x10/0x10 [ 121.665030] ext4_symlink+0x623/0xb40 [ 121.665048] ? __pfx_ext4_symlink+0x10/0x10 [ 121.665063] ? security_inode_permission+0x72/0xe0 [ 121.665076] vfs_symlink+0x44b/0x840 [ 121.665092] filename_symlinkat+0x158/0x440 [ 121.665105] ? __pfx_filename_symlinkat+0x10/0x10 [ 121.665119] ? strncpy_from_user+0x21b/0x2f0 [ 121.665135] __x64_sys_symlink+0x82/0x110 [ 121.665148] do_syscall_64+0xbf/0x420 [ 121.665161] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.665173] RIP: 0033:0x7f0951e68427 [ 121.665182] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 58 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 121.665193] RSP: 002b:00007ffe28af79a8 EFLAGS: 00000202 ORIG_RAX: 0000000000000058 [ 121.665204] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f0951e68427 [ 121.665211] RDX: 00007ffe28af7a83 RSI: 00007f0951ec3022 RDI: 00007ffe28af7a70 [ 121.665218] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007ffe28af7840 [ 121.665225] R10: 00007ffe28af76f7 R11: 0000000000000202 R12: 0000000000000001 [ 121.665232] R13: 0000000000000001 R14: 0000000000000001 R15: 00007ffe28af7a70 [ 121.665242] [ 121.681057] ------------[ cut here ]------------ [ 121.696540] WARNING: kernel/rcu/tree_plugin.h:443 at __rcu_read_unlock+0x25f/0x5c0, CPU#1: syz-executor.5/4032 [ 121.716482] Modules linked in: [ 121.716789] CPU: 1 UID: 0 PID: 4032 Comm: syz-executor.5 Not tainted 6.19.0-rc5-next-20260116 #1 PREEMPT(lazy) [ 121.737743] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 121.765239] RIP: 0010:__rcu_read_unlock+0x25f/0x5c0 [ 121.765719] Code: f2 02 00 00 c7 43 58 01 00 00 00 bf 09 00 00 00 e8 d6 b7 de ff 4d 85 f6 0f 84 73 fe ff ff e8 38 8a 20 00 fb e9 68 fe ff ff 90 <0f> 0b 90 5b 5d 41 5c 41 5d 41 5e e9 81 4d 74 03 e8 2c 5d 56 00 e9 [ 121.788895] RSP: 0018:ffff88805ac179a0 EFLAGS: 00010286 [ 121.818654] RAX: 00000000ffffffff RBX: ffff888057f38000 RCX: ffffffff815660f7 [ 121.847935] RDX: 0000000000000000 RSI: ffffffff81566100 RDI: ffff888057f383fc [ 121.877268] RBP: ffff888057f38000 R08: 0000000000000000 R09: fffffbfff0ba7040 [ 121.877836] R10: 0000000000000000 R11: 0000000000000001 R12: ffff888057f38000 [ 121.899211] R13: 0000000000000001 R14: ffffffff85c0e050 R15: ffff88805496f578 [ 121.899787] FS: 00005555709cb400(0000) GS:ffff8880e5442000(0000) knlGS:0000000000000000 [ 121.915220] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 121.915690] CR2: 00007f0951ee8545 CR3: 000000005970d000 CR4: 0000000000350ef0 [ 121.946674] Call Trace: [ 121.946933] [ 122.044462] __wait_on_freeing_inode+0x10f/0x350 [ 122.077599] ? __pfx___wait_on_freeing_inode+0x10/0x10 [ 122.111773] ? __pfx_var_wake_function+0x10/0x10 [ 122.154715] ? lock_is_held_type+0x9e/0x120 [ 122.173047] insert_inode_locked+0x25f/0x890 [ 122.243929] __ext4_new_inode+0x223d/0x4cd0 [ 122.292844] ? __pfx___ext4_new_inode+0x10/0x10 [ 122.294636] ? __pfx___dquot_initialize+0x10/0x10 [ 122.295423] ? __pfx_avc_has_perm+0x10/0x10 [ 122.297194] ext4_symlink+0x623/0xb40 [ 122.299434] ? __pfx_ext4_symlink+0x10/0x10 [ 122.300432] ? security_inode_permission+0x72/0xe0 [ 122.302022] vfs_symlink+0x44b/0x840 [ 122.303332] filename_symlinkat+0x158/0x440 [ 122.304445] ? __pfx_filename_symlinkat+0x10/0x10 [ 122.305208] ? strncpy_from_user+0x21b/0x2f0 [ 122.307036] __x64_sys_symlink+0x82/0x110 [ 122.307784] do_syscall_64+0xbf/0x420 [ 122.308591] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.309103] RIP: 0033:0x7f0951e68427 [ 122.309509] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 58 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 122.310988] RSP: 002b:00007ffe28af79a8 EFLAGS: 00000202 ORIG_RAX: 0000000000000058 [ 122.311633] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f0951e68427 [ 122.312235] RDX: 00007ffe28af7a83 RSI: 00007f0951ec3022 RDI: 00007ffe28af7a70 [ 122.312803] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007ffe28af7840 [ 122.313411] R10: 00007ffe28af76f7 R11: 0000000000000202 R12: 0000000000000001 [ 122.313980] R13: 0000000000000001 R14: 0000000000000001 R15: 00007ffe28af7a70 [ 122.316626] [ 122.316824] irq event stamp: 273 [ 122.317091] hardirqs last enabled at (273): [] _raw_spin_unlock_irqrestore+0x2c/0x50 [ 122.317945] hardirqs last disabled at (272): [] _raw_spin_lock_irqsave+0x53/0x60 [ 122.318761] softirqs last enabled at (268): [] kernel_fpu_end+0x59/0x70 [ 122.319536] softirqs last disabled at (266): [] kernel_fpu_begin_mask+0x1bb/0x300 [ 122.320373] ---[ end trace 0000000000000000 ]--- 14:45:54 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xe, &(0x7f00000000c0), 0x4) 14:45:54 executing program 0: r0 = syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[]) move_mount(r0, 0x0, 0xffffffffffffff9c, 0x0, 0x66) creat(&(0x7f0000000040)='./file0/../file0\x00', 0x0) 14:45:54 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xe, &(0x7f00000000c0), 0x4) 14:45:54 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$IP_SET_OP_GET_FNAME(r0, 0x1, 0x38, 0x0, &(0x7f00000007c0)) 14:45:54 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setresuid(0x0, 0xee01, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8927, &(0x7f0000000000)={'bridge0\x00'}) 14:45:54 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x101002, 0x0) sendfile(r0, r0, 0x0, 0x5) 14:45:54 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x34, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x999}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xff91}]]}, 0x34}}, 0x0) 14:45:54 executing program 1: symlink(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file1\x00') syz_mount_image$tmpfs(&(0x7f00000005c0), &(0x7f00000000c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)) pivot_root(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='./file1\x00') 14:45:54 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) unlink(&(0x7f0000000080)='./file0\x00') 14:45:54 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil) 14:45:54 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setresuid(0x0, 0xee01, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8927, &(0x7f0000000000)={'bridge0\x00'}) 14:45:54 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x541b, 0x0) 14:45:54 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x34, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x999}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xff91}]]}, 0x34}}, 0x0) 14:45:54 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x101002, 0x0) sendfile(r0, r0, 0x0, 0x5) 14:45:54 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCDELRT(r0, 0x8912, &(0x7f00000000c0)={@mcast2, @mcast2, @private1}) 14:45:54 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setresuid(0x0, 0xee01, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8927, &(0x7f0000000000)={'bridge0\x00'}) 14:45:54 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) unlink(&(0x7f0000000080)='./file0\x00') 14:45:54 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil) 14:45:54 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r2) shmctl$SHM_LOCK(r0, 0xb) 14:45:54 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x34, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x999}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xff91}]]}, 0x34}}, 0x0) 14:45:54 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x541b, 0x0) 14:45:54 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MLSLVLLST={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfffffffe}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}}, 0x0) 14:45:54 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f0000013c00)=ANY=[]) 14:45:54 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCDELRT(r0, 0x8912, &(0x7f00000000c0)={@mcast2, @mcast2, @private1}) 14:45:54 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r2) shmctl$SHM_LOCK(r0, 0xb) 14:45:54 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x541b, 0x0) 14:45:54 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x34, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x999}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xff91}]]}, 0x34}}, 0x0) 14:45:54 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MLSLVLLST={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfffffffe}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}}, 0x0) 14:45:54 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCDELRT(r0, 0x8912, &(0x7f00000000c0)={@mcast2, @mcast2, @private1}) [ 122.919884] loop6: detected capacity change from 0 to 512 [ 122.923023] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 122.964354] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 14:45:54 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x101002, 0x0) sendfile(r0, r0, 0x0, 0x5) 14:45:54 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x541b, 0x0) 14:45:54 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MLSLVLLST={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfffffffe}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}}, 0x0) 14:45:54 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) unlink(&(0x7f0000000080)='./file0\x00') 14:45:54 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r2) shmctl$SHM_LOCK(r0, 0xb) 14:45:54 executing program 4: rt_sigaction(0x21, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f00000002c0)) 14:45:54 executing program 4: rt_sigaction(0x21, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f00000002c0)) 14:45:54 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MLSLVLLST={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfffffffe}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}}, 0x0) [ 123.069717] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. 14:45:55 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x101002, 0x0) sendfile(r0, r0, 0x0, 0x5) 14:45:55 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r2) shmctl$SHM_LOCK(r0, 0xb) 14:45:55 executing program 4: rt_sigaction(0x21, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f00000002c0)) 14:45:55 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r0, 0x0) sendmsg$inet(r1, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x20004880) 14:45:55 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCDELRT(r0, 0x8912, &(0x7f00000000c0)={@mcast2, @mcast2, @private1}) 14:45:55 executing program 3: syz_emit_ethernet(0x76, &(0x7f0000000140)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0x5, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "282fb5de5f3e6b5f4d72be692def9b94"}, @md5sig={0x13, 0x12, "85cd0000009d23b3d2afc6d749000700"}, @generic={0x0, 0x12, "83e7b495cc08a927785573d24de4a122"}, @window={0x3, 0x3}, @eol, @fastopen={0x22, 0x3, "d8"}]}}}}}}}, 0x0) 14:45:55 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)={0x14, 0x12, 0xffffffffffffffff, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) recvmmsg(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000002400)=[{&(0x7f0000000140)=""/28, 0x1c}, {&(0x7f0000000e80)=""/95, 0x5f}, {&(0x7f0000000200)=""/135, 0x87}, {&(0x7f00000002c0)=""/95, 0x5f}, {&(0x7f0000000e40)=""/56, 0x38}, {&(0x7f0000001400)=""/4096, 0x1000}], 0x6}}], 0x1, 0x0, 0x0) 14:45:55 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f0000013c00)=ANY=[]) 14:45:55 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r0, 0x0) sendmsg$inet(r1, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x20004880) 14:45:55 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)={0x14, 0x12, 0xffffffffffffffff, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) recvmmsg(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000002400)=[{&(0x7f0000000140)=""/28, 0x1c}, {&(0x7f0000000e80)=""/95, 0x5f}, {&(0x7f0000000200)=""/135, 0x87}, {&(0x7f00000002c0)=""/95, 0x5f}, {&(0x7f0000000e40)=""/56, 0x38}, {&(0x7f0000001400)=""/4096, 0x1000}], 0x6}}], 0x1, 0x0, 0x0) [ 123.206431] loop6: detected capacity change from 0 to 512 14:45:55 executing program 3: syz_emit_ethernet(0x76, &(0x7f0000000140)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0x5, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "282fb5de5f3e6b5f4d72be692def9b94"}, @md5sig={0x13, 0x12, "85cd0000009d23b3d2afc6d749000700"}, @generic={0x0, 0x12, "83e7b495cc08a927785573d24de4a122"}, @window={0x3, 0x3}, @eol, @fastopen={0x22, 0x3, "d8"}]}}}}}}}, 0x0) 14:45:55 executing program 4: rt_sigaction(0x21, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f00000002c0)) [ 123.249559] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 123.258668] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 14:45:55 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0xb341daa0822653b3, 0x0, 0x0, {0x1d}}, 0x14}}, 0x0) 14:45:55 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f0000013c00)=ANY=[]) 14:45:55 executing program 3: syz_emit_ethernet(0x76, &(0x7f0000000140)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0x5, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "282fb5de5f3e6b5f4d72be692def9b94"}, @md5sig={0x13, 0x12, "85cd0000009d23b3d2afc6d749000700"}, @generic={0x0, 0x12, "83e7b495cc08a927785573d24de4a122"}, @window={0x3, 0x3}, @eol, @fastopen={0x22, 0x3, "d8"}]}}}}}}}, 0x0) 14:45:55 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)={0x14, 0x12, 0xffffffffffffffff, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) recvmmsg(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000002400)=[{&(0x7f0000000140)=""/28, 0x1c}, {&(0x7f0000000e80)=""/95, 0x5f}, {&(0x7f0000000200)=""/135, 0x87}, {&(0x7f00000002c0)=""/95, 0x5f}, {&(0x7f0000000e40)=""/56, 0x38}, {&(0x7f0000001400)=""/4096, 0x1000}], 0x6}}], 0x1, 0x0, 0x0) 14:45:55 executing program 4: sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, 0x0, 0xbfb516efaef55d54) 14:45:55 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0xb341daa0822653b3, 0x0, 0x0, {0x1d}}, 0x14}}, 0x0) 14:45:55 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r0, 0x0) sendmsg$inet(r1, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x20004880) 14:45:55 executing program 1: iopl(0x3) syz_io_uring_setup(0x0, 0xfffffffffffffffe, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, 0x0) [ 123.368474] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. 14:45:55 executing program 7: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[]) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x104000, 0x0) mount$9p_unix(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1005841, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2001851, 0x0) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[]) umount2(&(0x7f0000001380)='./file0\x00', 0x3) [ 123.445628] ======================================================= [ 123.445628] WARNING: The mand mount option has been deprecated and [ 123.445628] and is ignored by this kernel. Remove the mand [ 123.445628] option from the mount to silence this warning. [ 123.445628] ======================================================= 14:45:55 executing program 1: iopl(0x3) syz_io_uring_setup(0x0, 0xfffffffffffffffe, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, 0x0) 14:45:55 executing program 3: syz_emit_ethernet(0x76, &(0x7f0000000140)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0x5, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "282fb5de5f3e6b5f4d72be692def9b94"}, @md5sig={0x13, 0x12, "85cd0000009d23b3d2afc6d749000700"}, @generic={0x0, 0x12, "83e7b495cc08a927785573d24de4a122"}, @window={0x3, 0x3}, @eol, @fastopen={0x22, 0x3, "d8"}]}}}}}}}, 0x0) 14:45:55 executing program 4: sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, 0x0, 0xbfb516efaef55d54) [ 123.481296] loop6: detected capacity change from 0 to 512 [ 123.518855] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 123.524746] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 14:45:55 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0xb341daa0822653b3, 0x0, 0x0, {0x1d}}, 0x14}}, 0x0) 14:45:55 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)={0x14, 0x12, 0xffffffffffffffff, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) recvmmsg(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000002400)=[{&(0x7f0000000140)=""/28, 0x1c}, {&(0x7f0000000e80)=""/95, 0x5f}, {&(0x7f0000000200)=""/135, 0x87}, {&(0x7f00000002c0)=""/95, 0x5f}, {&(0x7f0000000e40)=""/56, 0x38}, {&(0x7f0000001400)=""/4096, 0x1000}], 0x6}}], 0x1, 0x0, 0x0) 14:45:55 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r0, 0x0) sendmsg$inet(r1, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x20004880) 14:45:55 executing program 1: iopl(0x3) syz_io_uring_setup(0x0, 0xfffffffffffffffe, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, 0x0) 14:45:55 executing program 7: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[]) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x104000, 0x0) mount$9p_unix(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1005841, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2001851, 0x0) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[]) umount2(&(0x7f0000001380)='./file0\x00', 0x3) 14:45:55 executing program 4: sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, 0x0, 0xbfb516efaef55d54) 14:45:55 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f0000013c00)=ANY=[]) 14:45:55 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) memfd_create(0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) creat(0x0, 0x0) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) [ 123.643464] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.680943] loop6: detected capacity change from 0 to 512 [ 123.684098] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 123.687087] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 14:45:55 executing program 4: sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, 0x0, 0xbfb516efaef55d54) 14:45:55 executing program 1: iopl(0x3) syz_io_uring_setup(0x0, 0xfffffffffffffffe, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, 0x0) 14:45:55 executing program 7: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[]) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x104000, 0x0) mount$9p_unix(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1005841, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2001851, 0x0) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[]) umount2(&(0x7f0000001380)='./file0\x00', 0x3) 14:45:55 executing program 5: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) [ 123.850408] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.857160] capability: warning: `syz-executor.5' uses deprecated v2 capabilities in a way that may be insecure 14:45:55 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0xb341daa0822653b3, 0x0, 0x0, {0x1d}}, 0x14}}, 0x0) 14:45:55 executing program 7: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[]) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x104000, 0x0) mount$9p_unix(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1005841, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2001851, 0x0) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[]) umount2(&(0x7f0000001380)='./file0\x00', 0x3) 14:45:55 executing program 5: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 14:45:55 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) memfd_create(0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) creat(0x0, 0x0) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 14:45:55 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) fcntl$lock(r0, 0x26, &(0x7f0000000180)) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 14:45:55 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) fcntl$lock(r0, 0x26, &(0x7f0000000180)) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 14:45:55 executing program 5: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 14:45:55 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) memfd_create(0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) creat(0x0, 0x0) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 14:45:55 executing program 5: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 14:45:55 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) fcntl$lock(r0, 0x26, &(0x7f0000000180)) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 14:45:55 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) memfd_create(0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) creat(0x0, 0x0) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 14:45:55 executing program 4: io_setup(0x208, &(0x7f0000000080)=0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/mem_sleep', 0x28001, 0x0) io_submit(r0, 0x1, &(0x7f0000003a80)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000003bc0)="39e268c57d14", 0x6}]) 14:45:55 executing program 1: r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='^@:,\x00') 14:45:55 executing program 7: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev(r0, 0x0, 0x0, 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x105002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0x40000014100) 14:45:55 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) fcntl$lock(r0, 0x26, &(0x7f0000000180)) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff}) [ 124.066306] audit: type=1400 audit(1768574755.996:10): avc: denied { write } for pid=4227 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 14:45:56 executing program 1: r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='^@:,\x00') 14:45:56 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) fcntl$lock(r0, 0x26, &(0x7f0000000180)) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 14:45:56 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) memfd_create(0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) creat(0x0, 0x0) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 14:45:56 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xe, &(0x7f0000000000)=0x2, 0x4) 14:45:56 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) memfd_create(0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) creat(0x0, 0x0) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 14:45:56 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) fcntl$lock(r0, 0x26, &(0x7f0000000180)) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 14:45:56 executing program 4: io_setup(0x208, &(0x7f0000000080)=0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/mem_sleep', 0x28001, 0x0) io_submit(r0, 0x1, &(0x7f0000003a80)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000003bc0)="39e268c57d14", 0x6}]) 14:45:56 executing program 1: r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='^@:,\x00') 14:45:56 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) fcntl$lock(r0, 0x26, &(0x7f0000000180)) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 14:45:56 executing program 1: r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='^@:,\x00') 14:45:56 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) memfd_create(0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) creat(0x0, 0x0) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 14:45:56 executing program 4: io_setup(0x208, &(0x7f0000000080)=0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/mem_sleep', 0x28001, 0x0) io_submit(r0, 0x1, &(0x7f0000003a80)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000003bc0)="39e268c57d14", 0x6}]) 14:45:56 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xe, &(0x7f0000000000)=0x2, 0x4) 14:45:56 executing program 3: io_setup(0x208, &(0x7f0000000080)=0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/mem_sleep', 0x28001, 0x0) io_submit(r0, 0x1, &(0x7f0000003a80)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000003bc0)="39e268c57d14", 0x6}]) 14:45:56 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdab39eac554c6bee, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_destroy(0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x10000002}) 14:45:56 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, 0x0) 14:45:56 executing program 6: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r0, 0x80045301, &(0x7f0000000100)) 14:45:56 executing program 3: io_setup(0x208, &(0x7f0000000080)=0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/mem_sleep', 0x28001, 0x0) io_submit(r0, 0x1, &(0x7f0000003a80)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000003bc0)="39e268c57d14", 0x6}]) 14:45:56 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') utimensat(r0, &(0x7f0000000200)='./mnt\x00', 0x0, 0x100) 14:45:56 executing program 4: io_setup(0x208, &(0x7f0000000080)=0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/mem_sleep', 0x28001, 0x0) io_submit(r0, 0x1, &(0x7f0000003a80)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000003bc0)="39e268c57d14", 0x6}]) 14:45:56 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xe, &(0x7f0000000000)=0x2, 0x4) 14:45:56 executing program 7: symlink(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file1\x00') syz_mount_image$tmpfs(&(0x7f00000005c0), &(0x7f0000000600)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002800)) mount$9p_unix(&(0x7f0000000040)='./file1\x00', &(0x7f0000000200)='./file1\x00', 0x0, 0x1241405, 0x0) [ 124.976650] audit: type=1400 audit(1768574756.906:11): avc: denied { write } for pid=4275 comm="syz-executor.0" name="mnt" dev="proc" ino=6098 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lnk_file permissive=1 [ 124.987473] program syz-executor.2 is using a deprecated SCSI ioctl, please convert it to SG_IO 14:45:56 executing program 6: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r0, 0x80045301, &(0x7f0000000100)) 14:45:56 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xe, &(0x7f0000000000)=0x2, 0x4) 14:45:56 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') utimensat(r0, &(0x7f0000000200)='./mnt\x00', 0x0, 0x100) 14:45:56 executing program 6: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r0, 0x80045301, &(0x7f0000000100)) 14:45:56 executing program 3: io_setup(0x208, &(0x7f0000000080)=0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/mem_sleep', 0x28001, 0x0) io_submit(r0, 0x1, &(0x7f0000003a80)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000003bc0)="39e268c57d14", 0x6}]) 14:45:56 executing program 7: symlink(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file1\x00') syz_mount_image$tmpfs(&(0x7f00000005c0), &(0x7f0000000600)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002800)) mount$9p_unix(&(0x7f0000000040)='./file1\x00', &(0x7f0000000200)='./file1\x00', 0x0, 0x1241405, 0x0) 14:45:56 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, 0x0) [ 125.088166] program syz-executor.2 is using a deprecated SCSI ioctl, please convert it to SG_IO 14:45:57 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') utimensat(r0, &(0x7f0000000200)='./mnt\x00', 0x0, 0x100) 14:45:57 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdab39eac554c6bee, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_destroy(0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x10000002}) 14:45:57 executing program 6: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r0, 0x80045301, &(0x7f0000000100)) 14:45:57 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, 0x0) 14:45:57 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') utimensat(r0, &(0x7f0000000200)='./mnt\x00', 0x0, 0x100) 14:45:57 executing program 7: symlink(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file1\x00') syz_mount_image$tmpfs(&(0x7f00000005c0), &(0x7f0000000600)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002800)) mount$9p_unix(&(0x7f0000000040)='./file1\x00', &(0x7f0000000200)='./file1\x00', 0x0, 0x1241405, 0x0) 14:45:57 executing program 3: syz_mount_image$msdos(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) utime(&(0x7f0000000300)='./file0\x00', 0x0) 14:45:57 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="280000001800010000000000000000000200008014b2ff"], 0x28}], 0x1}, 0x0) 14:45:57 executing program 5: creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000140)={0x9, 0x80}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x9, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 125.189126] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 125.194435] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 125.198633] ref_ctr_offset mismatch. inode: 0x3e80 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x4 [ 125.200644] program syz-executor.2 is using a deprecated SCSI ioctl, please convert it to SG_IO 14:45:57 executing program 7: symlink(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file1\x00') syz_mount_image$tmpfs(&(0x7f00000005c0), &(0x7f0000000600)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002800)) mount$9p_unix(&(0x7f0000000040)='./file1\x00', &(0x7f0000000200)='./file1\x00', 0x0, 0x1241405, 0x0) 14:45:57 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fchdir(r0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchmod(r1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x400005}) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8983, 0x0) 14:45:57 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, 0x0) 14:45:57 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="280000001800010000000000000000000200008014b2ff"], 0x28}], 0x1}, 0x0) 14:45:57 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x302) ioctl$SCSI_IOCTL_START_UNIT(r0, 0x5) 14:45:57 executing program 6: r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3000003, 0x88172, 0xffffffffffffffff, 0x8000000) pkey_mprotect(&(0x7f0000ff7000/0x9000)=nil, 0x9000, 0x0, 0xffffffffffffffff) munmap(&(0x7f0000ff8000/0x3000)=nil, 0x3000) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) syz_io_uring_submit(r0, 0x0, 0x0, 0x0) [ 125.260074] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 125.263379] program syz-executor.2 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 125.265323] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 125.278363] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 14:45:57 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, 0x0, 0x141802, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000280)={0x80, 0x6, 0x4e, 0x4eb4, 0x1b, "5e029e1d389cbc1712788de3f33a656c7274d3"}) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) dup(r1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAPCLR(r2, 0x4b68, &(0x7f0000000000)={0x0, 0x20, 0x8}) fcntl$setstatus(r1, 0x4, 0x42400) io_setup(0x0, &(0x7f00000000c0)=0x0) pread64(0xffffffffffffffff, &(0x7f0000000180)=""/238, 0xee, 0x2) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000300)={0x5, &(0x7f00000002c0)=[{}, {}, {}, {}, {}]}) io_submit(r3, 0x1, &(0x7f0000000380)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000480)="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", 0x170}]) 14:45:57 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdab39eac554c6bee, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_destroy(0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x10000002}) 14:45:57 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, 0x0, 0x141802, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000280)={0x80, 0x6, 0x4e, 0x4eb4, 0x1b, "5e029e1d389cbc1712788de3f33a656c7274d3"}) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) dup(r1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAPCLR(r2, 0x4b68, &(0x7f0000000000)={0x0, 0x20, 0x8}) fcntl$setstatus(r1, 0x4, 0x42400) io_setup(0x0, &(0x7f00000000c0)=0x0) pread64(0xffffffffffffffff, &(0x7f0000000180)=""/238, 0xee, 0x2) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000300)={0x5, &(0x7f00000002c0)=[{}, {}, {}, {}, {}]}) io_submit(r3, 0x1, &(0x7f0000000380)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000480)="c9a30aee2491bc1544648f8ebed193a188d62123d10418479b60e3255228771943f1263ac7a1a6fdb8670a0b554ee2a242029ac9cb89efc94eb37529b0e7a1009757f74f24e84a0b29aaa02d98acd5f1657b90cb6b56ff35653b78cc8c2171c4cb6a0526584c4418d08ec721ad52d3a843d9ee7b08212bb21a3689353b391f03935abca9118fd36b6dd36b56b236d95cfef1257cd371106a3ec8dbb8fb7c2d2053cde003671fd45da47a62ed33e50fd7389fceaabe0d8d46eb84e0d7866c83740270d9c214760397feab0b286bebbbca90f66d79e05cd565691ab5df757c5b16d01c4d5440fe15214e8b7cc91cd270f71a56e3d966b8c6e70814d03c91ebc8ad04e0640a096ce2b17d3962fcfe0a7038c31f271ddbeec82bd94643da1b9995bc9d193a4ca5d4253fbed6b5ab196ce9f0db26f3148a28abc26344f1618d14546273b7e2598455479b0dd87b6d82e99f1f71b5040d165da4b375b1d8426f29afecb7d75fb0fa902fe3a69c694a8c2dc7ad", 0x170}]) 14:45:57 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fchdir(r0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchmod(r1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x400005}) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8983, 0x0) 14:45:57 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$CDROM_SEND_PACKET(r0, 0x5392, &(0x7f0000000100)={'\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 14:45:57 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="280000001800010000000000000000000200008014b2ff"], 0x28}], 0x1}, 0x0) 14:45:57 executing program 5: creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000140)={0x9, 0x80}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x9, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 14:45:57 executing program 6: r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3000003, 0x88172, 0xffffffffffffffff, 0x8000000) pkey_mprotect(&(0x7f0000ff7000/0x9000)=nil, 0x9000, 0x0, 0xffffffffffffffff) munmap(&(0x7f0000ff8000/0x3000)=nil, 0x3000) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) syz_io_uring_submit(r0, 0x0, 0x0, 0x0) 14:45:57 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x302) ioctl$SCSI_IOCTL_START_UNIT(r0, 0x5) [ 125.462192] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 125.468632] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 125.474656] ref_ctr_offset mismatch. inode: 0x3e7c offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x4 14:45:57 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="280000001800010000000000000000000200008014b2ff"], 0x28}], 0x1}, 0x0) 14:45:57 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x302) ioctl$SCSI_IOCTL_START_UNIT(r0, 0x5) 14:45:57 executing program 6: r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3000003, 0x88172, 0xffffffffffffffff, 0x8000000) pkey_mprotect(&(0x7f0000ff7000/0x9000)=nil, 0x9000, 0x0, 0xffffffffffffffff) munmap(&(0x7f0000ff8000/0x3000)=nil, 0x3000) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) syz_io_uring_submit(r0, 0x0, 0x0, 0x0) [ 125.512604] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 125.558537] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 14:45:57 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, 0x0, 0x141802, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000280)={0x80, 0x6, 0x4e, 0x4eb4, 0x1b, "5e029e1d389cbc1712788de3f33a656c7274d3"}) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) dup(r1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAPCLR(r2, 0x4b68, &(0x7f0000000000)={0x0, 0x20, 0x8}) fcntl$setstatus(r1, 0x4, 0x42400) io_setup(0x0, &(0x7f00000000c0)=0x0) pread64(0xffffffffffffffff, &(0x7f0000000180)=""/238, 0xee, 0x2) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000300)={0x5, &(0x7f00000002c0)=[{}, {}, {}, {}, {}]}) io_submit(r3, 0x1, &(0x7f0000000380)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000480)="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", 0x170}]) 14:45:57 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fchdir(r0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchmod(r1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x400005}) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8983, 0x0) 14:45:57 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x302) ioctl$SCSI_IOCTL_START_UNIT(r0, 0x5) 14:45:57 executing program 6: r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3000003, 0x88172, 0xffffffffffffffff, 0x8000000) pkey_mprotect(&(0x7f0000ff7000/0x9000)=nil, 0x9000, 0x0, 0xffffffffffffffff) munmap(&(0x7f0000ff8000/0x3000)=nil, 0x3000) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) syz_io_uring_submit(r0, 0x0, 0x0, 0x0) 14:45:57 executing program 5: creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000140)={0x9, 0x80}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x9, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 14:45:57 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdab39eac554c6bee, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_destroy(0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x10000002}) 14:45:57 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, 0x0, 0x141802, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000280)={0x80, 0x6, 0x4e, 0x4eb4, 0x1b, "5e029e1d389cbc1712788de3f33a656c7274d3"}) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) dup(r1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAPCLR(r2, 0x4b68, &(0x7f0000000000)={0x0, 0x20, 0x8}) fcntl$setstatus(r1, 0x4, 0x42400) io_setup(0x0, &(0x7f00000000c0)=0x0) pread64(0xffffffffffffffff, &(0x7f0000000180)=""/238, 0xee, 0x2) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000300)={0x5, &(0x7f00000002c0)=[{}, {}, {}, {}, {}]}) io_submit(r3, 0x1, &(0x7f0000000380)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000480)="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", 0x170}]) 14:45:57 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$CDROM_SEND_PACKET(r0, 0x5392, &(0x7f0000000100)={'\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 125.662690] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO 14:45:57 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, 0x0, 0x141802, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000280)={0x80, 0x6, 0x4e, 0x4eb4, 0x1b, "5e029e1d389cbc1712788de3f33a656c7274d3"}) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) dup(r1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAPCLR(r2, 0x4b68, &(0x7f0000000000)={0x0, 0x20, 0x8}) fcntl$setstatus(r1, 0x4, 0x42400) io_setup(0x0, &(0x7f00000000c0)=0x0) pread64(0xffffffffffffffff, &(0x7f0000000180)=""/238, 0xee, 0x2) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000300)={0x5, &(0x7f00000002c0)=[{}, {}, {}, {}, {}]}) io_submit(r3, 0x1, &(0x7f0000000380)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000480)="c9a30aee2491bc1544648f8ebed193a188d62123d10418479b60e3255228771943f1263ac7a1a6fdb8670a0b554ee2a242029ac9cb89efc94eb37529b0e7a1009757f74f24e84a0b29aaa02d98acd5f1657b90cb6b56ff35653b78cc8c2171c4cb6a0526584c4418d08ec721ad52d3a843d9ee7b08212bb21a3689353b391f03935abca9118fd36b6dd36b56b236d95cfef1257cd371106a3ec8dbb8fb7c2d2053cde003671fd45da47a62ed33e50fd7389fceaabe0d8d46eb84e0d7866c83740270d9c214760397feab0b286bebbbca90f66d79e05cd565691ab5df757c5b16d01c4d5440fe15214e8b7cc91cd270f71a56e3d966b8c6e70814d03c91ebc8ad04e0640a096ce2b17d3962fcfe0a7038c31f271ddbeec82bd94643da1b9995bc9d193a4ca5d4253fbed6b5ab196ce9f0db26f3148a28abc26344f1618d14546273b7e2598455479b0dd87b6d82e99f1f71b5040d165da4b375b1d8426f29afecb7d75fb0fa902fe3a69c694a8c2dc7ad", 0x170}]) [ 125.676621] ref_ctr_offset mismatch. inode: 0x3e86 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x4 14:45:57 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, 0x0, 0x141802, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000280)={0x80, 0x6, 0x4e, 0x4eb4, 0x1b, "5e029e1d389cbc1712788de3f33a656c7274d3"}) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) dup(r1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAPCLR(r2, 0x4b68, &(0x7f0000000000)={0x0, 0x20, 0x8}) fcntl$setstatus(r1, 0x4, 0x42400) io_setup(0x0, &(0x7f00000000c0)=0x0) pread64(0xffffffffffffffff, &(0x7f0000000180)=""/238, 0xee, 0x2) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000300)={0x5, &(0x7f00000002c0)=[{}, {}, {}, {}, {}]}) io_submit(r3, 0x1, &(0x7f0000000380)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000480)="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", 0x170}]) 14:45:57 executing program 5: creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000140)={0x9, 0x80}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x9, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 125.778883] ref_ctr_offset mismatch. inode: 0x3e75 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x4 14:45:57 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, 0x0, 0x141802, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000280)={0x80, 0x6, 0x4e, 0x4eb4, 0x1b, "5e029e1d389cbc1712788de3f33a656c7274d3"}) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) dup(r1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAPCLR(r2, 0x4b68, &(0x7f0000000000)={0x0, 0x20, 0x8}) fcntl$setstatus(r1, 0x4, 0x42400) io_setup(0x0, &(0x7f00000000c0)=0x0) pread64(0xffffffffffffffff, &(0x7f0000000180)=""/238, 0xee, 0x2) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000300)={0x5, &(0x7f00000002c0)=[{}, {}, {}, {}, {}]}) io_submit(r3, 0x1, &(0x7f0000000380)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000480)="c9a30aee2491bc1544648f8ebed193a188d62123d10418479b60e3255228771943f1263ac7a1a6fdb8670a0b554ee2a242029ac9cb89efc94eb37529b0e7a1009757f74f24e84a0b29aaa02d98acd5f1657b90cb6b56ff35653b78cc8c2171c4cb6a0526584c4418d08ec721ad52d3a843d9ee7b08212bb21a3689353b391f03935abca9118fd36b6dd36b56b236d95cfef1257cd371106a3ec8dbb8fb7c2d2053cde003671fd45da47a62ed33e50fd7389fceaabe0d8d46eb84e0d7866c83740270d9c214760397feab0b286bebbbca90f66d79e05cd565691ab5df757c5b16d01c4d5440fe15214e8b7cc91cd270f71a56e3d966b8c6e70814d03c91ebc8ad04e0640a096ce2b17d3962fcfe0a7038c31f271ddbeec82bd94643da1b9995bc9d193a4ca5d4253fbed6b5ab196ce9f0db26f3148a28abc26344f1618d14546273b7e2598455479b0dd87b6d82e99f1f71b5040d165da4b375b1d8426f29afecb7d75fb0fa902fe3a69c694a8c2dc7ad", 0x170}]) 14:45:57 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, 0x0, 0x141802, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000280)={0x80, 0x6, 0x4e, 0x4eb4, 0x1b, "5e029e1d389cbc1712788de3f33a656c7274d3"}) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) dup(r1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAPCLR(r2, 0x4b68, &(0x7f0000000000)={0x0, 0x20, 0x8}) fcntl$setstatus(r1, 0x4, 0x42400) io_setup(0x0, &(0x7f00000000c0)=0x0) pread64(0xffffffffffffffff, &(0x7f0000000180)=""/238, 0xee, 0x2) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000300)={0x5, &(0x7f00000002c0)=[{}, {}, {}, {}, {}]}) io_submit(r3, 0x1, &(0x7f0000000380)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000480)="c9a30aee2491bc1544648f8ebed193a188d62123d10418479b60e3255228771943f1263ac7a1a6fdb8670a0b554ee2a242029ac9cb89efc94eb37529b0e7a1009757f74f24e84a0b29aaa02d98acd5f1657b90cb6b56ff35653b78cc8c2171c4cb6a0526584c4418d08ec721ad52d3a843d9ee7b08212bb21a3689353b391f03935abca9118fd36b6dd36b56b236d95cfef1257cd371106a3ec8dbb8fb7c2d2053cde003671fd45da47a62ed33e50fd7389fceaabe0d8d46eb84e0d7866c83740270d9c214760397feab0b286bebbbca90f66d79e05cd565691ab5df757c5b16d01c4d5440fe15214e8b7cc91cd270f71a56e3d966b8c6e70814d03c91ebc8ad04e0640a096ce2b17d3962fcfe0a7038c31f271ddbeec82bd94643da1b9995bc9d193a4ca5d4253fbed6b5ab196ce9f0db26f3148a28abc26344f1618d14546273b7e2598455479b0dd87b6d82e99f1f71b5040d165da4b375b1d8426f29afecb7d75fb0fa902fe3a69c694a8c2dc7ad", 0x170}]) 14:45:57 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$CDROM_SEND_PACKET(r0, 0x5392, &(0x7f0000000100)={'\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 14:45:57 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, 0x0, 0x141802, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000280)={0x80, 0x6, 0x4e, 0x4eb4, 0x1b, "5e029e1d389cbc1712788de3f33a656c7274d3"}) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) dup(r1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAPCLR(r2, 0x4b68, &(0x7f0000000000)={0x0, 0x20, 0x8}) fcntl$setstatus(r1, 0x4, 0x42400) io_setup(0x0, &(0x7f00000000c0)=0x0) pread64(0xffffffffffffffff, &(0x7f0000000180)=""/238, 0xee, 0x2) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000300)={0x5, &(0x7f00000002c0)=[{}, {}, {}, {}, {}]}) io_submit(r3, 0x1, &(0x7f0000000380)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000480)="c9a30aee2491bc1544648f8ebed193a188d62123d10418479b60e3255228771943f1263ac7a1a6fdb8670a0b554ee2a242029ac9cb89efc94eb37529b0e7a1009757f74f24e84a0b29aaa02d98acd5f1657b90cb6b56ff35653b78cc8c2171c4cb6a0526584c4418d08ec721ad52d3a843d9ee7b08212bb21a3689353b391f03935abca9118fd36b6dd36b56b236d95cfef1257cd371106a3ec8dbb8fb7c2d2053cde003671fd45da47a62ed33e50fd7389fceaabe0d8d46eb84e0d7866c83740270d9c214760397feab0b286bebbbca90f66d79e05cd565691ab5df757c5b16d01c4d5440fe15214e8b7cc91cd270f71a56e3d966b8c6e70814d03c91ebc8ad04e0640a096ce2b17d3962fcfe0a7038c31f271ddbeec82bd94643da1b9995bc9d193a4ca5d4253fbed6b5ab196ce9f0db26f3148a28abc26344f1618d14546273b7e2598455479b0dd87b6d82e99f1f71b5040d165da4b375b1d8426f29afecb7d75fb0fa902fe3a69c694a8c2dc7ad", 0x170}]) 14:45:57 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, 0x0, 0x141802, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000280)={0x80, 0x6, 0x4e, 0x4eb4, 0x1b, "5e029e1d389cbc1712788de3f33a656c7274d3"}) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) dup(r1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAPCLR(r2, 0x4b68, &(0x7f0000000000)={0x0, 0x20, 0x8}) fcntl$setstatus(r1, 0x4, 0x42400) io_setup(0x0, &(0x7f00000000c0)=0x0) pread64(0xffffffffffffffff, &(0x7f0000000180)=""/238, 0xee, 0x2) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000300)={0x5, &(0x7f00000002c0)=[{}, {}, {}, {}, {}]}) io_submit(r3, 0x1, &(0x7f0000000380)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000480)="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", 0x170}]) 14:45:57 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, 0x0, 0x141802, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000280)={0x80, 0x6, 0x4e, 0x4eb4, 0x1b, "5e029e1d389cbc1712788de3f33a656c7274d3"}) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) dup(r1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAPCLR(r2, 0x4b68, &(0x7f0000000000)={0x0, 0x20, 0x8}) fcntl$setstatus(r1, 0x4, 0x42400) io_setup(0x0, &(0x7f00000000c0)=0x0) pread64(0xffffffffffffffff, &(0x7f0000000180)=""/238, 0xee, 0x2) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000300)={0x5, &(0x7f00000002c0)=[{}, {}, {}, {}, {}]}) io_submit(r3, 0x1, &(0x7f0000000380)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000480)="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", 0x170}]) 14:45:57 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fchdir(r0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchmod(r1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x400005}) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8983, 0x0) 14:45:57 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fchdir(r0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchmod(r1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x400005}) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8983, 0x0) 14:45:57 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, 0x0, 0x141802, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000280)={0x80, 0x6, 0x4e, 0x4eb4, 0x1b, "5e029e1d389cbc1712788de3f33a656c7274d3"}) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) dup(r1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAPCLR(r2, 0x4b68, &(0x7f0000000000)={0x0, 0x20, 0x8}) fcntl$setstatus(r1, 0x4, 0x42400) io_setup(0x0, &(0x7f00000000c0)=0x0) pread64(0xffffffffffffffff, &(0x7f0000000180)=""/238, 0xee, 0x2) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000300)={0x5, &(0x7f00000002c0)=[{}, {}, {}, {}, {}]}) io_submit(r3, 0x1, &(0x7f0000000380)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000480)="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", 0x170}]) 14:45:57 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, 0x0, 0x141802, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000280)={0x80, 0x6, 0x4e, 0x4eb4, 0x1b, "5e029e1d389cbc1712788de3f33a656c7274d3"}) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) dup(r1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAPCLR(r2, 0x4b68, &(0x7f0000000000)={0x0, 0x20, 0x8}) fcntl$setstatus(r1, 0x4, 0x42400) io_setup(0x0, &(0x7f00000000c0)=0x0) pread64(0xffffffffffffffff, &(0x7f0000000180)=""/238, 0xee, 0x2) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000300)={0x5, &(0x7f00000002c0)=[{}, {}, {}, {}, {}]}) io_submit(r3, 0x1, &(0x7f0000000380)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000480)="c9a30aee2491bc1544648f8ebed193a188d62123d10418479b60e3255228771943f1263ac7a1a6fdb8670a0b554ee2a242029ac9cb89efc94eb37529b0e7a1009757f74f24e84a0b29aaa02d98acd5f1657b90cb6b56ff35653b78cc8c2171c4cb6a0526584c4418d08ec721ad52d3a843d9ee7b08212bb21a3689353b391f03935abca9118fd36b6dd36b56b236d95cfef1257cd371106a3ec8dbb8fb7c2d2053cde003671fd45da47a62ed33e50fd7389fceaabe0d8d46eb84e0d7866c83740270d9c214760397feab0b286bebbbca90f66d79e05cd565691ab5df757c5b16d01c4d5440fe15214e8b7cc91cd270f71a56e3d966b8c6e70814d03c91ebc8ad04e0640a096ce2b17d3962fcfe0a7038c31f271ddbeec82bd94643da1b9995bc9d193a4ca5d4253fbed6b5ab196ce9f0db26f3148a28abc26344f1618d14546273b7e2598455479b0dd87b6d82e99f1f71b5040d165da4b375b1d8426f29afecb7d75fb0fa902fe3a69c694a8c2dc7ad", 0x170}]) 14:45:57 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fchdir(r0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchmod(r1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x400005}) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8983, 0x0) 14:45:57 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, 0x0, 0x141802, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000280)={0x80, 0x6, 0x4e, 0x4eb4, 0x1b, "5e029e1d389cbc1712788de3f33a656c7274d3"}) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) dup(r1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAPCLR(r2, 0x4b68, &(0x7f0000000000)={0x0, 0x20, 0x8}) fcntl$setstatus(r1, 0x4, 0x42400) io_setup(0x0, &(0x7f00000000c0)=0x0) pread64(0xffffffffffffffff, &(0x7f0000000180)=""/238, 0xee, 0x2) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000300)={0x5, &(0x7f00000002c0)=[{}, {}, {}, {}, {}]}) io_submit(r3, 0x1, &(0x7f0000000380)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000480)="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", 0x170}]) 14:45:57 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, 0x0, 0x141802, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000280)={0x80, 0x6, 0x4e, 0x4eb4, 0x1b, "5e029e1d389cbc1712788de3f33a656c7274d3"}) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) dup(r1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAPCLR(r2, 0x4b68, &(0x7f0000000000)={0x0, 0x20, 0x8}) fcntl$setstatus(r1, 0x4, 0x42400) io_setup(0x0, &(0x7f00000000c0)=0x0) pread64(0xffffffffffffffff, &(0x7f0000000180)=""/238, 0xee, 0x2) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000300)={0x5, &(0x7f00000002c0)=[{}, {}, {}, {}, {}]}) io_submit(r3, 0x1, &(0x7f0000000380)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000480)="c9a30aee2491bc1544648f8ebed193a188d62123d10418479b60e3255228771943f1263ac7a1a6fdb8670a0b554ee2a242029ac9cb89efc94eb37529b0e7a1009757f74f24e84a0b29aaa02d98acd5f1657b90cb6b56ff35653b78cc8c2171c4cb6a0526584c4418d08ec721ad52d3a843d9ee7b08212bb21a3689353b391f03935abca9118fd36b6dd36b56b236d95cfef1257cd371106a3ec8dbb8fb7c2d2053cde003671fd45da47a62ed33e50fd7389fceaabe0d8d46eb84e0d7866c83740270d9c214760397feab0b286bebbbca90f66d79e05cd565691ab5df757c5b16d01c4d5440fe15214e8b7cc91cd270f71a56e3d966b8c6e70814d03c91ebc8ad04e0640a096ce2b17d3962fcfe0a7038c31f271ddbeec82bd94643da1b9995bc9d193a4ca5d4253fbed6b5ab196ce9f0db26f3148a28abc26344f1618d14546273b7e2598455479b0dd87b6d82e99f1f71b5040d165da4b375b1d8426f29afecb7d75fb0fa902fe3a69c694a8c2dc7ad", 0x170}]) 14:45:57 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$CDROM_SEND_PACKET(r0, 0x5392, &(0x7f0000000100)={'\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 14:45:58 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, 0x0, 0x141802, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000280)={0x80, 0x6, 0x4e, 0x4eb4, 0x1b, "5e029e1d389cbc1712788de3f33a656c7274d3"}) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) dup(r1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAPCLR(r2, 0x4b68, &(0x7f0000000000)={0x0, 0x20, 0x8}) fcntl$setstatus(r1, 0x4, 0x42400) io_setup(0x0, &(0x7f00000000c0)=0x0) pread64(0xffffffffffffffff, &(0x7f0000000180)=""/238, 0xee, 0x2) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000300)={0x5, &(0x7f00000002c0)=[{}, {}, {}, {}, {}]}) io_submit(r3, 0x1, &(0x7f0000000380)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000480)="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", 0x170}]) 14:45:58 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fchdir(r0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchmod(r1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x400005}) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8983, 0x0) 14:45:58 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x11}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 14:45:58 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fchdir(r0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchmod(r1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x400005}) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8983, 0x0) 14:45:58 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg$sock(r0, &(0x7f00000046c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) ppoll(&(0x7f0000000100)=[{r0}], 0x1, 0x0, 0x0, 0x0) 14:45:58 executing program 3: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000009c0), 0x28081, 0x0) write$P9_RREADLINK(r0, 0x0, 0x0) 14:45:58 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), 0xffffffffffffffff) 14:45:58 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x11}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 14:45:58 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x13, &(0x7f0000000240)={@loopback}, 0x14) 14:45:58 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_MCE_KILL(0x35, 0x0, 0x2) 14:45:58 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg$sock(r0, &(0x7f00000046c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) ppoll(&(0x7f0000000100)=[{r0}], 0x1, 0x0, 0x0, 0x0) 14:45:58 executing program 3: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000009c0), 0x28081, 0x0) write$P9_RREADLINK(r0, 0x0, 0x0) 14:45:58 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x13, &(0x7f0000000240)={@loopback}, 0x14) 14:45:58 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fchdir(r0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchmod(r1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x400005}) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8983, 0x0) 14:45:58 executing program 1: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000009c0), 0x28081, 0x0) write$P9_RREADLINK(r0, 0x0, 0x0) 14:45:58 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x11}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 14:45:58 executing program 1: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000009c0), 0x28081, 0x0) write$P9_RREADLINK(r0, 0x0, 0x0) 14:45:58 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fchdir(r0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchmod(r1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x400005}) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8983, 0x0) 14:45:58 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x13, &(0x7f0000000240)={@loopback}, 0x14) 14:45:58 executing program 3: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000009c0), 0x28081, 0x0) write$P9_RREADLINK(r0, 0x0, 0x0) 14:45:58 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg$sock(r0, &(0x7f00000046c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) ppoll(&(0x7f0000000100)=[{r0}], 0x1, 0x0, 0x0, 0x0) 14:45:58 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x11}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 14:45:58 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_MCE_KILL(0x35, 0x0, 0x2) 14:45:58 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x13, &(0x7f0000000240)={@loopback}, 0x14) 14:45:58 executing program 3: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000009c0), 0x28081, 0x0) write$P9_RREADLINK(r0, 0x0, 0x0) 14:45:58 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg$sock(r0, &(0x7f00000046c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) ppoll(&(0x7f0000000100)=[{r0}], 0x1, 0x0, 0x0, 0x0) 14:45:58 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_MCE_KILL(0x35, 0x0, 0x2) 14:45:58 executing program 1: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000009c0), 0x28081, 0x0) write$P9_RREADLINK(r0, 0x0, 0x0) 14:45:58 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) flock(r1, 0x2) dup3(r0, r1, 0x0) 14:45:58 executing program 7: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)={0x1c, 0x26, 0x101, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}, 0x1c}], 0x1}, 0x0) 14:45:58 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7d, 0x7}, 0x2000, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xfffff7ffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x8, 0x1, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x7fff, 0x8}, 0x80, 0x9, 0x0, 0x1, 0x8001, 0x6, 0x8a81, 0x0, 0x9, 0x0, 0xfffffffffffffffb}, 0x0, 0x3, 0xffffffffffffffff, 0xd7ede9b8d2555a0a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r1 = signalfd4(r0, &(0x7f00000001c0)={[0x9]}, 0x8, 0x80000) fallocate(r1, 0x4, 0x401, 0x3f) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r2, &(0x7f0000000900)="5ed0b2ff68d76fb346352b602a2a1295cbe01cb3f64fbed9e7f9bc9be0f300cb97f6a204cc586e45dfb949002f61f8fb969dd435dd0c37c5077e5b10cfeafd75205e215b167323a3b971b0ec98e6c3d4d825cae01271cb35cdd091e4872367f354e0dc81a7e4ac79775bc1dcaafe2f5079da79d1989f1ddce6722fc438a7217526cfe75d53471624d6f091e19a7fb699ea27efa9e0fd1914e7c35f297afd9b9b85ff0ce7a982f4fa0c172ea5f06479eec302f30e5df66273717e028f4ca7d4c5b6bc8a3c3c67f688195f22488a15d9e1f7e5fed3a6c2aba7bc308b0e2c5657f4538f4a3bf9b975bb887a901ab3c85261be3e331b741313e78b5ad63b7b1b378e9c79dc4a95b2b4d15cd1d1b808844378f882a72af1e5b0eefd356e0247246e60643204c3b46183dbe4e066c55cb1dcdaa7b70ef43ab2fa4d2b8c4c1a89cb0e325fd9716874d3856cf368efd1f92d21214e55e4de647c37c71887d11f74f9afe1616e3054ceae601e4b3555e243c1882ad42c7730caeb309e7714ad87c55e9fba308cfc4161e562abde3ac4f3d7e0a3584d4928100197f102307c05c0b4b4898b0591bc1433af443478979f28e6136ffb21aaeac2be5490475a08e96bb94fd9d9d3aa2f8a1e147a80ba9bfd04dac3f476ff128476c693ea71f7be47a508c98eddc479eb703d6f17cc5be2182f7c39b0a47eb23e0808b5d87dd2a9ce88eb48a601", 0x200) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r2, 0x4, 0x44000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz0\x00', 0x1ff) sendfile(r2, r3, 0x0, 0xfdef) 14:45:58 executing program 3: io_getevents(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) 14:45:58 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)={0x28, 0x12, 0xffffffffffffffff, 0x0, 0x0, "", [@typed={0x380, 0x0, 0x0, 0x0, @fd}, @nested={0x10, 0x0, 0x0, 0x1, [@typed={0x4}, @typed={0x8, 0x0, 0x0, 0x0, @u32}]}]}, 0x28}], 0x1}, 0x0) 14:45:58 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) fcntl$addseals(r0, 0x409, 0x82f9930744ca6c97) 14:45:58 executing program 3: io_getevents(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) 14:45:58 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept$inet(0xffffffffffffffff, 0x0, 0x0) 14:45:58 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) fcntl$addseals(r0, 0x409, 0x82f9930744ca6c97) 14:45:58 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_MCE_KILL(0x35, 0x0, 0x2) 14:45:58 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) flock(r1, 0x2) dup3(r0, r1, 0x0) 14:45:58 executing program 3: io_getevents(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) 14:45:58 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)={0x28, 0x12, 0xffffffffffffffff, 0x0, 0x0, "", [@typed={0x380, 0x0, 0x0, 0x0, @fd}, @nested={0x10, 0x0, 0x0, 0x1, [@typed={0x4}, @typed={0x8, 0x0, 0x0, 0x0, @u32}]}]}, 0x28}], 0x1}, 0x0) [ 126.942612] syz-executor.5 (4486) used greatest stack depth: 23864 bytes left 14:45:58 executing program 3: io_getevents(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) 14:45:58 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) fcntl$addseals(r0, 0x409, 0x82f9930744ca6c97) 14:45:58 executing program 7: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)={0x1c, 0x26, 0x101, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}, 0x1c}], 0x1}, 0x0) 14:45:58 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) flock(r1, 0x2) dup3(r0, r1, 0x0) 14:45:58 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept$inet(0xffffffffffffffff, 0x0, 0x0) 14:45:58 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)={0x28, 0x12, 0xffffffffffffffff, 0x0, 0x0, "", [@typed={0x380, 0x0, 0x0, 0x0, @fd}, @nested={0x10, 0x0, 0x0, 0x1, [@typed={0x4}, @typed={0x8, 0x0, 0x0, 0x0, @u32}]}]}, 0x28}], 0x1}, 0x0) 14:45:58 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) flock(r1, 0x2) dup3(r0, r1, 0x0) 14:45:58 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7d, 0x7}, 0x2000, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xfffff7ffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x8, 0x1, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x7fff, 0x8}, 0x80, 0x9, 0x0, 0x1, 0x8001, 0x6, 0x8a81, 0x0, 0x9, 0x0, 0xfffffffffffffffb}, 0x0, 0x3, 0xffffffffffffffff, 0xd7ede9b8d2555a0a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r1 = signalfd4(r0, &(0x7f00000001c0)={[0x9]}, 0x8, 0x80000) fallocate(r1, 0x4, 0x401, 0x3f) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r2, &(0x7f0000000900)="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", 0x200) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r2, 0x4, 0x44000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz0\x00', 0x1ff) sendfile(r2, r3, 0x0, 0xfdef) 14:45:58 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7d, 0x7}, 0x2000, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xfffff7ffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x8, 0x1, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x7fff, 0x8}, 0x80, 0x9, 0x0, 0x1, 0x8001, 0x6, 0x8a81, 0x0, 0x9, 0x0, 0xfffffffffffffffb}, 0x0, 0x3, 0xffffffffffffffff, 0xd7ede9b8d2555a0a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r1 = signalfd4(r0, &(0x7f00000001c0)={[0x9]}, 0x8, 0x80000) fallocate(r1, 0x4, 0x401, 0x3f) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r2, &(0x7f0000000900)="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", 0x200) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r2, 0x4, 0x44000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz0\x00', 0x1ff) sendfile(r2, r3, 0x0, 0xfdef) 14:45:58 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) fcntl$addseals(r0, 0x409, 0x82f9930744ca6c97) 14:45:58 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)={0x28, 0x12, 0xffffffffffffffff, 0x0, 0x0, "", [@typed={0x380, 0x0, 0x0, 0x0, @fd}, @nested={0x10, 0x0, 0x0, 0x1, [@typed={0x4}, @typed={0x8, 0x0, 0x0, 0x0, @u32}]}]}, 0x28}], 0x1}, 0x0) 14:45:59 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept$inet(0xffffffffffffffff, 0x0, 0x0) 14:45:59 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7d, 0x7}, 0x2000, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xfffff7ffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x8, 0x1, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x7fff, 0x8}, 0x80, 0x9, 0x0, 0x1, 0x8001, 0x6, 0x8a81, 0x0, 0x9, 0x0, 0xfffffffffffffffb}, 0x0, 0x3, 0xffffffffffffffff, 0xd7ede9b8d2555a0a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r1 = signalfd4(r0, &(0x7f00000001c0)={[0x9]}, 0x8, 0x80000) fallocate(r1, 0x4, 0x401, 0x3f) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r2, &(0x7f0000000900)="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", 0x200) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r2, 0x4, 0x44000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz0\x00', 0x1ff) sendfile(r2, r3, 0x0, 0xfdef) 14:45:59 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) flock(r1, 0x2) dup3(r0, r1, 0x0) 14:45:59 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) flock(r1, 0x2) dup3(r0, r1, 0x0) 14:45:59 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7d, 0x7}, 0x2000, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xfffff7ffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x8, 0x1, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x7fff, 0x8}, 0x80, 0x9, 0x0, 0x1, 0x8001, 0x6, 0x8a81, 0x0, 0x9, 0x0, 0xfffffffffffffffb}, 0x0, 0x3, 0xffffffffffffffff, 0xd7ede9b8d2555a0a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r1 = signalfd4(r0, &(0x7f00000001c0)={[0x9]}, 0x8, 0x80000) fallocate(r1, 0x4, 0x401, 0x3f) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r2, &(0x7f0000000900)="5ed0b2ff68d76fb346352b602a2a1295cbe01cb3f64fbed9e7f9bc9be0f300cb97f6a204cc586e45dfb949002f61f8fb969dd435dd0c37c5077e5b10cfeafd75205e215b167323a3b971b0ec98e6c3d4d825cae01271cb35cdd091e4872367f354e0dc81a7e4ac79775bc1dcaafe2f5079da79d1989f1ddce6722fc438a7217526cfe75d53471624d6f091e19a7fb699ea27efa9e0fd1914e7c35f297afd9b9b85ff0ce7a982f4fa0c172ea5f06479eec302f30e5df66273717e028f4ca7d4c5b6bc8a3c3c67f688195f22488a15d9e1f7e5fed3a6c2aba7bc308b0e2c5657f4538f4a3bf9b975bb887a901ab3c85261be3e331b741313e78b5ad63b7b1b378e9c79dc4a95b2b4d15cd1d1b808844378f882a72af1e5b0eefd356e0247246e60643204c3b46183dbe4e066c55cb1dcdaa7b70ef43ab2fa4d2b8c4c1a89cb0e325fd9716874d3856cf368efd1f92d21214e55e4de647c37c71887d11f74f9afe1616e3054ceae601e4b3555e243c1882ad42c7730caeb309e7714ad87c55e9fba308cfc4161e562abde3ac4f3d7e0a3584d4928100197f102307c05c0b4b4898b0591bc1433af443478979f28e6136ffb21aaeac2be5490475a08e96bb94fd9d9d3aa2f8a1e147a80ba9bfd04dac3f476ff128476c693ea71f7be47a508c98eddc479eb703d6f17cc5be2182f7c39b0a47eb23e0808b5d87dd2a9ce88eb48a601", 0x200) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r2, 0x4, 0x44000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz0\x00', 0x1ff) sendfile(r2, r3, 0x0, 0xfdef) 14:45:59 executing program 7: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)={0x1c, 0x26, 0x101, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}, 0x1c}], 0x1}, 0x0) 14:45:59 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x121a02, 0x0) write$cgroup_devices(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB='b L'], 0x9) 14:45:59 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7d, 0x7}, 0x2000, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xfffff7ffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x8, 0x1, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x7fff, 0x8}, 0x80, 0x9, 0x0, 0x1, 0x8001, 0x6, 0x8a81, 0x0, 0x9, 0x0, 0xfffffffffffffffb}, 0x0, 0x3, 0xffffffffffffffff, 0xd7ede9b8d2555a0a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r1 = signalfd4(r0, &(0x7f00000001c0)={[0x9]}, 0x8, 0x80000) fallocate(r1, 0x4, 0x401, 0x3f) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r2, &(0x7f0000000900)="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", 0x200) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r2, 0x4, 0x44000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz0\x00', 0x1ff) sendfile(r2, r3, 0x0, 0xfdef) 14:45:59 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept$inet(0xffffffffffffffff, 0x0, 0x0) 14:45:59 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x121a02, 0x0) write$cgroup_devices(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB='b L'], 0x9) 14:45:59 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) flock(r1, 0x2) dup3(r0, r1, 0x0) 14:45:59 executing program 6: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknodat$null(0xffffffffffffffff, 0x0, 0x0, 0x103) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f00000003c0)={0x288008000, &(0x7f0000000180), 0x0, &(0x7f0000000200), {}, &(0x7f0000000240)=""/28, 0x1c, &(0x7f0000000280)=""/245, &(0x7f0000000380)=[0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff], 0xa, {r0}}, 0x58) socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$tmpfs(&(0x7f0000004940), &(0x7f0000004980)='./file0\x00', 0x3, 0x0, 0x0, 0x0, &(0x7f0000005ac0)={[{@mpol={'mpol', 0x3d, {'local', '=relative'}}}]}) syz_mount_image$iso9660(0x0, 0x0, 0x8, 0x7, &(0x7f0000006f00)=[{&(0x7f0000005bc0)="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 VM DIAGNOSIS: 14:45:53 Registers: info registers vcpu 0 RAX=ffffc90000660000 RBX=ffff88800b430000 RCX=ffffffff8156f91a RDX=1ffff1100168623a RSI=ffffffff83674f2f RDI=000000000000000a RBP=0000000000000083 RSP=ffff88806ce08ea8 R8 =0000000000000000 R9 =fffffbfff0ccdd0a R10=0000000000000001 R11=ffff88806ce08ff8 R12=dffffc0000000000 R13=ffff8880093e8000 R14=ffff88800b4311d0 R15=000000000000000a RIP=ffffffff83674f57 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f4fafff4900 00000000 00000000 GS =0000 ffff8880e5342000 00000000 00000000 LDT=0000 fffffe3a00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000c00f12cbb0 CR3=000000000bd0e000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ea27bdef5fec016ee9beb9424156cb79 XMM02=3b23b4cd6cbd4d28cd6f8985a6653232 XMM03=37f6194913446bf001d20c1295a53ed5 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=0d0c0f0e09080b0a0504070601000302 XMM07=0e0d0c0f0a09080b0605040702010003 XMM08=81d4a3a10819e879bd53041e05e39584 XMM09=962230a47aefdde7e6a79a9e33b843a0 XMM10=b35af52bf9cc494a37e7ad5e667a6be6 XMM11=81663ec1043f5a327d97c8528e30cdba XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000038 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff82975135 RDI=ffffffff889c19e0 RBP=ffffffff889c19a0 RSP=ffff88805ac174a8 R8 =0000000000000000 R9 =ffffed1001503046 R10=0000000000000038 R11=6666666666663c5b R12=0000000000000038 R13=0000000000000010 R14=ffffffff889c19a0 R15=ffffffff82975120 RIP=ffffffff8297518d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00005555709cb400 00000000 00000000 GS =0000 ffff8880e5442000 00000000 00000000 LDT=0000 fffffe4f00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f0951ee8545 CR3=000000005970d000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000a60ce07b00000000cec3662e XMM01=000000000000000003515b82db34ca11 XMM02=0000000000000000333bebdfd0a6a21d XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000