Warning: Permanently added '[localhost]:25490' (ECDSA) to the list of known hosts. 2026/01/16 14:56:06 fuzzer started 2026/01/16 14:56:07 dialing manager at localhost:42157 syzkaller login: [ 58.128256] cgroup: Unknown subsys name 'net' [ 58.206999] cgroup: Unknown subsys name 'cpuset' [ 58.220349] cgroup: Unknown subsys name 'rlimit' 2026/01/16 14:56:19 syscalls: 2214 2026/01/16 14:56:19 code coverage: enabled 2026/01/16 14:56:19 comparison tracing: enabled 2026/01/16 14:56:19 extra coverage: enabled 2026/01/16 14:56:19 setuid sandbox: enabled 2026/01/16 14:56:19 namespace sandbox: enabled 2026/01/16 14:56:19 Android sandbox: enabled 2026/01/16 14:56:19 fault injection: enabled 2026/01/16 14:56:19 leak checking: enabled 2026/01/16 14:56:19 net packet injection: enabled 2026/01/16 14:56:19 net device setup: enabled 2026/01/16 14:56:19 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2026/01/16 14:56:19 devlink PCI setup: PCI device 0000:00:10.0 is not available 2026/01/16 14:56:19 USB emulation: enabled 2026/01/16 14:56:19 hci packet injection: enabled 2026/01/16 14:56:19 wifi device emulation: enabled 2026/01/16 14:56:19 802.15.4 emulation: enabled 2026/01/16 14:56:19 fetching corpus: 0, signal 0/2000 (executing program) 2026/01/16 14:56:19 fetching corpus: 50, signal 25784/29339 (executing program) 2026/01/16 14:56:19 fetching corpus: 100, signal 35092/40151 (executing program) 2026/01/16 14:56:19 fetching corpus: 150, signal 43331/49792 (executing program) 2026/01/16 14:56:20 fetching corpus: 200, signal 52574/60223 (executing program) 2026/01/16 14:56:20 fetching corpus: 250, signal 58223/67089 (executing program) 2026/01/16 14:56:20 fetching corpus: 300, signal 64281/74215 (executing program) 2026/01/16 14:56:20 fetching corpus: 350, signal 67421/78559 (executing program) 2026/01/16 14:56:20 fetching corpus: 400, signal 72753/84839 (executing program) 2026/01/16 14:56:20 fetching corpus: 450, signal 76014/89176 (executing program) 2026/01/16 14:56:20 fetching corpus: 500, signal 79344/93474 (executing program) 2026/01/16 14:56:20 fetching corpus: 550, signal 82195/97342 (executing program) 2026/01/16 14:56:21 fetching corpus: 600, signal 84760/100845 (executing program) 2026/01/16 14:56:21 fetching corpus: 650, signal 87239/104177 (executing program) 2026/01/16 14:56:21 fetching corpus: 700, signal 90578/108257 (executing program) 2026/01/16 14:56:21 fetching corpus: 750, signal 92803/111341 (executing program) 2026/01/16 14:56:21 fetching corpus: 800, signal 94858/114268 (executing program) 2026/01/16 14:56:21 fetching corpus: 850, signal 98508/118514 (executing program) 2026/01/16 14:56:21 fetching corpus: 900, signal 100595/121323 (executing program) 2026/01/16 14:56:21 fetching corpus: 950, signal 103310/124667 (executing program) 2026/01/16 14:56:22 fetching corpus: 1000, signal 105485/127470 (executing program) 2026/01/16 14:56:22 fetching corpus: 1050, signal 108185/130701 (executing program) 2026/01/16 14:56:22 fetching corpus: 1100, signal 110039/133229 (executing program) 2026/01/16 14:56:22 fetching corpus: 1150, signal 112195/135970 (executing program) 2026/01/16 14:56:22 fetching corpus: 1200, signal 113267/137754 (executing program) 2026/01/16 14:56:22 fetching corpus: 1250, signal 114857/139973 (executing program) 2026/01/16 14:56:22 fetching corpus: 1300, signal 115797/141642 (executing program) 2026/01/16 14:56:22 fetching corpus: 1350, signal 117708/144148 (executing program) 2026/01/16 14:56:22 fetching corpus: 1400, signal 118804/145867 (executing program) 2026/01/16 14:56:23 fetching corpus: 1450, signal 120287/147845 (executing program) 2026/01/16 14:56:23 fetching corpus: 1500, signal 122036/150043 (executing program) 2026/01/16 14:56:23 fetching corpus: 1550, signal 123229/151801 (executing program) 2026/01/16 14:56:23 fetching corpus: 1600, signal 125101/154011 (executing program) 2026/01/16 14:56:23 fetching corpus: 1650, signal 125980/155515 (executing program) 2026/01/16 14:56:23 fetching corpus: 1700, signal 127269/157268 (executing program) 2026/01/16 14:56:23 fetching corpus: 1750, signal 128439/158940 (executing program) 2026/01/16 14:56:23 fetching corpus: 1800, signal 129462/160561 (executing program) 2026/01/16 14:56:23 fetching corpus: 1850, signal 130673/162215 (executing program) 2026/01/16 14:56:23 fetching corpus: 1900, signal 131848/163813 (executing program) 2026/01/16 14:56:24 fetching corpus: 1950, signal 132701/165141 (executing program) 2026/01/16 14:56:24 fetching corpus: 2000, signal 134263/166889 (executing program) 2026/01/16 14:56:24 fetching corpus: 2050, signal 135794/168623 (executing program) 2026/01/16 14:56:24 fetching corpus: 2100, signal 136969/170091 (executing program) 2026/01/16 14:56:24 fetching corpus: 2150, signal 137729/171385 (executing program) 2026/01/16 14:56:24 fetching corpus: 2200, signal 138862/172828 (executing program) 2026/01/16 14:56:24 fetching corpus: 2250, signal 139866/174188 (executing program) 2026/01/16 14:56:24 fetching corpus: 2300, signal 140791/175406 (executing program) 2026/01/16 14:56:24 fetching corpus: 2350, signal 141368/176505 (executing program) 2026/01/16 14:56:25 fetching corpus: 2400, signal 142051/177651 (executing program) 2026/01/16 14:56:25 fetching corpus: 2450, signal 143060/178954 (executing program) 2026/01/16 14:56:25 fetching corpus: 2500, signal 143840/180097 (executing program) 2026/01/16 14:56:25 fetching corpus: 2550, signal 144650/181274 (executing program) 2026/01/16 14:56:25 fetching corpus: 2600, signal 145400/182376 (executing program) 2026/01/16 14:56:25 fetching corpus: 2650, signal 147257/184030 (executing program) 2026/01/16 14:56:25 fetching corpus: 2700, signal 148031/185121 (executing program) 2026/01/16 14:56:25 fetching corpus: 2750, signal 148747/186166 (executing program) 2026/01/16 14:56:25 fetching corpus: 2800, signal 149785/187294 (executing program) 2026/01/16 14:56:26 fetching corpus: 2850, signal 150533/188273 (executing program) 2026/01/16 14:56:26 fetching corpus: 2900, signal 151346/189282 (executing program) 2026/01/16 14:56:26 fetching corpus: 2950, signal 152218/190301 (executing program) 2026/01/16 14:56:26 fetching corpus: 3000, signal 153238/191416 (executing program) 2026/01/16 14:56:26 fetching corpus: 3050, signal 154310/192521 (executing program) 2026/01/16 14:56:26 fetching corpus: 3100, signal 155106/193483 (executing program) 2026/01/16 14:56:26 fetching corpus: 3150, signal 156045/194513 (executing program) 2026/01/16 14:56:26 fetching corpus: 3200, signal 156607/195364 (executing program) 2026/01/16 14:56:27 fetching corpus: 3250, signal 157681/196372 (executing program) 2026/01/16 14:56:27 fetching corpus: 3300, signal 158544/197455 (executing program) 2026/01/16 14:56:27 fetching corpus: 3350, signal 158908/198152 (executing program) 2026/01/16 14:56:27 fetching corpus: 3400, signal 159747/199010 (executing program) 2026/01/16 14:56:27 fetching corpus: 3450, signal 160385/199822 (executing program) 2026/01/16 14:56:27 fetching corpus: 3500, signal 160972/200571 (executing program) 2026/01/16 14:56:27 fetching corpus: 3550, signal 161555/201337 (executing program) 2026/01/16 14:56:27 fetching corpus: 3600, signal 162039/202076 (executing program) 2026/01/16 14:56:27 fetching corpus: 3650, signal 162704/202788 (executing program) 2026/01/16 14:56:27 fetching corpus: 3700, signal 163179/203500 (executing program) 2026/01/16 14:56:28 fetching corpus: 3750, signal 163719/204207 (executing program) 2026/01/16 14:56:28 fetching corpus: 3800, signal 164431/205012 (executing program) 2026/01/16 14:56:28 fetching corpus: 3850, signal 165098/205755 (executing program) 2026/01/16 14:56:28 fetching corpus: 3900, signal 165476/206387 (executing program) 2026/01/16 14:56:28 fetching corpus: 3950, signal 165944/207027 (executing program) 2026/01/16 14:56:28 fetching corpus: 4000, signal 166632/207696 (executing program) 2026/01/16 14:56:28 fetching corpus: 4050, signal 167092/208310 (executing program) 2026/01/16 14:56:28 fetching corpus: 4100, signal 167642/208933 (executing program) 2026/01/16 14:56:28 fetching corpus: 4150, signal 168150/209579 (executing program) 2026/01/16 14:56:28 fetching corpus: 4200, signal 168486/210130 (executing program) 2026/01/16 14:56:29 fetching corpus: 4250, signal 169007/210734 (executing program) 2026/01/16 14:56:29 fetching corpus: 4300, signal 169499/211350 (executing program) 2026/01/16 14:56:29 fetching corpus: 4350, signal 169998/211933 (executing program) 2026/01/16 14:56:29 fetching corpus: 4400, signal 170431/212536 (executing program) 2026/01/16 14:56:29 fetching corpus: 4450, signal 170920/213112 (executing program) 2026/01/16 14:56:29 fetching corpus: 4500, signal 171448/213647 (executing program) 2026/01/16 14:56:29 fetching corpus: 4550, signal 171939/214204 (executing program) 2026/01/16 14:56:29 fetching corpus: 4600, signal 172296/214720 (executing program) 2026/01/16 14:56:29 fetching corpus: 4650, signal 172800/215256 (executing program) 2026/01/16 14:56:30 fetching corpus: 4700, signal 173264/215770 (executing program) 2026/01/16 14:56:30 fetching corpus: 4750, signal 173647/216294 (executing program) 2026/01/16 14:56:30 fetching corpus: 4800, signal 174074/216783 (executing program) 2026/01/16 14:56:30 fetching corpus: 4850, signal 174675/217297 (executing program) 2026/01/16 14:56:30 fetching corpus: 4900, signal 175211/217843 (executing program) 2026/01/16 14:56:30 fetching corpus: 4950, signal 175949/218329 (executing program) 2026/01/16 14:56:30 fetching corpus: 5000, signal 176363/218791 (executing program) 2026/01/16 14:56:30 fetching corpus: 5050, signal 176816/219252 (executing program) 2026/01/16 14:56:31 fetching corpus: 5100, signal 177223/219710 (executing program) 2026/01/16 14:56:31 fetching corpus: 5150, signal 177859/220135 (executing program) 2026/01/16 14:56:31 fetching corpus: 5200, signal 178270/220565 (executing program) 2026/01/16 14:56:31 fetching corpus: 5250, signal 178689/220980 (executing program) 2026/01/16 14:56:31 fetching corpus: 5300, signal 179027/221379 (executing program) 2026/01/16 14:56:31 fetching corpus: 5350, signal 179481/221806 (executing program) 2026/01/16 14:56:31 fetching corpus: 5400, signal 180300/222205 (executing program) 2026/01/16 14:56:31 fetching corpus: 5450, signal 180906/222604 (executing program) 2026/01/16 14:56:32 fetching corpus: 5500, signal 181369/222633 (executing program) 2026/01/16 14:56:32 fetching corpus: 5550, signal 181912/222637 (executing program) 2026/01/16 14:56:32 fetching corpus: 5600, signal 182356/222637 (executing program) 2026/01/16 14:56:32 fetching corpus: 5650, signal 182703/222645 (executing program) 2026/01/16 14:56:32 fetching corpus: 5700, signal 183300/222645 (executing program) 2026/01/16 14:56:32 fetching corpus: 5750, signal 183812/222645 (executing program) 2026/01/16 14:56:32 fetching corpus: 5800, signal 184204/222645 (executing program) 2026/01/16 14:56:32 fetching corpus: 5850, signal 184834/222652 (executing program) 2026/01/16 14:56:32 fetching corpus: 5900, signal 185287/222652 (executing program) 2026/01/16 14:56:33 fetching corpus: 5950, signal 185616/222652 (executing program) 2026/01/16 14:56:33 fetching corpus: 6000, signal 186036/222656 (executing program) 2026/01/16 14:56:33 fetching corpus: 6050, signal 186385/222657 (executing program) 2026/01/16 14:56:33 fetching corpus: 6100, signal 186695/222657 (executing program) 2026/01/16 14:56:33 fetching corpus: 6150, signal 187049/222667 (executing program) 2026/01/16 14:56:33 fetching corpus: 6200, signal 187340/222667 (executing program) 2026/01/16 14:56:33 fetching corpus: 6250, signal 188140/222668 (executing program) 2026/01/16 14:56:33 fetching corpus: 6300, signal 188407/222668 (executing program) 2026/01/16 14:56:33 fetching corpus: 6350, signal 188892/222668 (executing program) 2026/01/16 14:56:33 fetching corpus: 6400, signal 189382/222668 (executing program) 2026/01/16 14:56:34 fetching corpus: 6450, signal 189910/222668 (executing program) 2026/01/16 14:56:34 fetching corpus: 6500, signal 190298/222668 (executing program) 2026/01/16 14:56:34 fetching corpus: 6550, signal 190982/222668 (executing program) 2026/01/16 14:56:34 fetching corpus: 6600, signal 191357/222669 (executing program) 2026/01/16 14:56:34 fetching corpus: 6650, signal 191628/222669 (executing program) 2026/01/16 14:56:34 fetching corpus: 6700, signal 192040/222669 (executing program) 2026/01/16 14:56:34 fetching corpus: 6750, signal 192273/222670 (executing program) 2026/01/16 14:56:34 fetching corpus: 6800, signal 192596/222679 (executing program) 2026/01/16 14:56:34 fetching corpus: 6850, signal 193048/222679 (executing program) 2026/01/16 14:56:34 fetching corpus: 6900, signal 193497/222679 (executing program) 2026/01/16 14:56:35 fetching corpus: 6950, signal 193880/222680 (executing program) 2026/01/16 14:56:35 fetching corpus: 7000, signal 194187/222681 (executing program) 2026/01/16 14:56:35 fetching corpus: 7050, signal 194504/222682 (executing program) 2026/01/16 14:56:35 fetching corpus: 7100, signal 194833/222686 (executing program) 2026/01/16 14:56:35 fetching corpus: 7150, signal 195272/222686 (executing program) 2026/01/16 14:56:35 fetching corpus: 7200, signal 195540/222690 (executing program) 2026/01/16 14:56:35 fetching corpus: 7250, signal 195937/222690 (executing program) 2026/01/16 14:56:35 fetching corpus: 7300, signal 196363/222692 (executing program) 2026/01/16 14:56:35 fetching corpus: 7350, signal 196676/222693 (executing program) 2026/01/16 14:56:36 fetching corpus: 7400, signal 196970/222693 (executing program) 2026/01/16 14:56:36 fetching corpus: 7450, signal 197337/222693 (executing program) 2026/01/16 14:56:36 fetching corpus: 7500, signal 197695/222704 (executing program) 2026/01/16 14:56:36 fetching corpus: 7550, signal 198033/222705 (executing program) 2026/01/16 14:56:36 fetching corpus: 7600, signal 198305/222706 (executing program) 2026/01/16 14:56:36 fetching corpus: 7650, signal 198700/222714 (executing program) 2026/01/16 14:56:36 fetching corpus: 7700, signal 199070/222714 (executing program) 2026/01/16 14:56:36 fetching corpus: 7750, signal 199281/222714 (executing program) 2026/01/16 14:56:36 fetching corpus: 7800, signal 199528/222714 (executing program) 2026/01/16 14:56:36 fetching corpus: 7850, signal 199959/222715 (executing program) 2026/01/16 14:56:36 fetching corpus: 7900, signal 200251/222717 (executing program) 2026/01/16 14:56:37 fetching corpus: 7950, signal 200486/222718 (executing program) 2026/01/16 14:56:37 fetching corpus: 8000, signal 200816/222718 (executing program) 2026/01/16 14:56:37 fetching corpus: 8050, signal 201127/222718 (executing program) 2026/01/16 14:56:37 fetching corpus: 8100, signal 201393/222718 (executing program) 2026/01/16 14:56:37 fetching corpus: 8150, signal 201658/222719 (executing program) 2026/01/16 14:56:37 fetching corpus: 8200, signal 202031/222720 (executing program) 2026/01/16 14:56:37 fetching corpus: 8250, signal 202450/222720 (executing program) 2026/01/16 14:56:37 fetching corpus: 8300, signal 202679/222720 (executing program) 2026/01/16 14:56:37 fetching corpus: 8350, signal 202958/222720 (executing program) 2026/01/16 14:56:38 fetching corpus: 8400, signal 203228/222724 (executing program) 2026/01/16 14:56:38 fetching corpus: 8450, signal 203504/222726 (executing program) 2026/01/16 14:56:38 fetching corpus: 8500, signal 203782/222727 (executing program) 2026/01/16 14:56:38 fetching corpus: 8550, signal 204279/222727 (executing program) 2026/01/16 14:56:38 fetching corpus: 8600, signal 204583/222757 (executing program) 2026/01/16 14:56:38 fetching corpus: 8650, signal 204878/222757 (executing program) 2026/01/16 14:56:38 fetching corpus: 8700, signal 205121/222758 (executing program) 2026/01/16 14:56:38 fetching corpus: 8750, signal 205455/222770 (executing program) 2026/01/16 14:56:38 fetching corpus: 8800, signal 205732/222771 (executing program) 2026/01/16 14:56:38 fetching corpus: 8850, signal 205986/222771 (executing program) 2026/01/16 14:56:39 fetching corpus: 8900, signal 206373/222771 (executing program) 2026/01/16 14:56:39 fetching corpus: 8950, signal 206604/222771 (executing program) 2026/01/16 14:56:39 fetching corpus: 9000, signal 206908/222773 (executing program) 2026/01/16 14:56:39 fetching corpus: 9050, signal 207171/222773 (executing program) 2026/01/16 14:56:39 fetching corpus: 9100, signal 207681/222773 (executing program) 2026/01/16 14:56:39 fetching corpus: 9150, signal 208008/222779 (executing program) 2026/01/16 14:56:39 fetching corpus: 9200, signal 208280/222779 (executing program) 2026/01/16 14:56:39 fetching corpus: 9250, signal 208605/222779 (executing program) 2026/01/16 14:56:39 fetching corpus: 9300, signal 208845/222779 (executing program) 2026/01/16 14:56:40 fetching corpus: 9350, signal 209202/222779 (executing program) 2026/01/16 14:56:40 fetching corpus: 9400, signal 209437/222780 (executing program) 2026/01/16 14:56:40 fetching corpus: 9450, signal 209647/222780 (executing program) 2026/01/16 14:56:40 fetching corpus: 9500, signal 209878/222780 (executing program) 2026/01/16 14:56:40 fetching corpus: 9550, signal 210107/222780 (executing program) 2026/01/16 14:56:40 fetching corpus: 9600, signal 210301/222780 (executing program) 2026/01/16 14:56:40 fetching corpus: 9650, signal 210584/222784 (executing program) 2026/01/16 14:56:40 fetching corpus: 9700, signal 210810/222784 (executing program) 2026/01/16 14:56:41 fetching corpus: 9750, signal 211063/222784 (executing program) 2026/01/16 14:56:41 fetching corpus: 9800, signal 211404/222788 (executing program) 2026/01/16 14:56:41 fetching corpus: 9850, signal 211640/222788 (executing program) 2026/01/16 14:56:41 fetching corpus: 9900, signal 211954/222792 (executing program) 2026/01/16 14:56:41 fetching corpus: 9950, signal 212179/222795 (executing program) 2026/01/16 14:56:41 fetching corpus: 10000, signal 212522/222795 (executing program) 2026/01/16 14:56:41 fetching corpus: 10050, signal 212727/222801 (executing program) 2026/01/16 14:56:41 fetching corpus: 10100, signal 213112/222801 (executing program) 2026/01/16 14:56:41 fetching corpus: 10150, signal 213412/222801 (executing program) 2026/01/16 14:56:42 fetching corpus: 10200, signal 213665/222801 (executing program) 2026/01/16 14:56:42 fetching corpus: 10250, signal 214047/222801 (executing program) 2026/01/16 14:56:42 fetching corpus: 10300, signal 214276/222801 (executing program) 2026/01/16 14:56:42 fetching corpus: 10350, signal 214645/222802 (executing program) 2026/01/16 14:56:42 fetching corpus: 10400, signal 214887/222802 (executing program) 2026/01/16 14:56:42 fetching corpus: 10450, signal 215103/222804 (executing program) 2026/01/16 14:56:42 fetching corpus: 10500, signal 215388/222804 (executing program) 2026/01/16 14:56:42 fetching corpus: 10550, signal 215597/222804 (executing program) 2026/01/16 14:56:42 fetching corpus: 10600, signal 215872/222818 (executing program) 2026/01/16 14:56:42 fetching corpus: 10650, signal 216148/222818 (executing program) 2026/01/16 14:56:42 fetching corpus: 10700, signal 216397/222818 (executing program) 2026/01/16 14:56:43 fetching corpus: 10750, signal 216630/222818 (executing program) 2026/01/16 14:56:43 fetching corpus: 10800, signal 216869/222818 (executing program) 2026/01/16 14:56:43 fetching corpus: 10850, signal 217162/222818 (executing program) 2026/01/16 14:56:43 fetching corpus: 10900, signal 217431/222830 (executing program) 2026/01/16 14:56:43 fetching corpus: 10950, signal 217701/222830 (executing program) 2026/01/16 14:56:43 fetching corpus: 11000, signal 217929/222830 (executing program) 2026/01/16 14:56:43 fetching corpus: 11050, signal 218151/222830 (executing program) 2026/01/16 14:56:43 fetching corpus: 11100, signal 218393/222830 (executing program) 2026/01/16 14:56:43 fetching corpus: 11150, signal 218590/222830 (executing program) 2026/01/16 14:56:43 fetching corpus: 11200, signal 218850/222830 (executing program) 2026/01/16 14:56:43 fetching corpus: 11250, signal 219136/222831 (executing program) 2026/01/16 14:56:44 fetching corpus: 11300, signal 219400/222831 (executing program) 2026/01/16 14:56:44 fetching corpus: 11350, signal 219647/222832 (executing program) 2026/01/16 14:56:44 fetching corpus: 11400, signal 219796/222832 (executing program) 2026/01/16 14:56:44 fetching corpus: 11450, signal 219987/222832 (executing program) 2026/01/16 14:56:44 fetching corpus: 11500, signal 220232/222837 (executing program) 2026/01/16 14:56:44 fetching corpus: 11550, signal 220461/222842 (executing program) 2026/01/16 14:56:44 fetching corpus: 11600, signal 220701/222846 (executing program) 2026/01/16 14:56:44 fetching corpus: 11650, signal 220887/222850 (executing program) 2026/01/16 14:56:44 fetching corpus: 11700, signal 221147/222850 (executing program) 2026/01/16 14:56:44 fetching corpus: 11734, signal 221282/222850 (executing program) 2026/01/16 14:56:44 fetching corpus: 11734, signal 221282/222850 (executing program) 2026/01/16 14:56:47 starting 8 fuzzer processes 14:56:47 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8921, &(0x7f0000000740)={'wpan1\x00'}) 14:56:47 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000180)) 14:56:47 executing program 1: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f0000000140)=' ', 0x1, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000001400)=[{&(0x7f0000000180)="a6", 0x1}], 0x1, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000000c0)={0x0, r2, 0x100000000000000}) 14:56:47 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r0, 0x2, &(0x7f0000000040)) r1 = getpid() process_vm_readv(r1, &(0x7f0000000200)=[{&(0x7f0000000080)=""/184, 0x7ffff000}, {&(0x7f0000000140)=""/178, 0xb2}], 0x2, &(0x7f0000000380)=[{0x0}, {0x0}, {0xfffffffffffffffc}, {&(0x7f00000039c0)=""/4095, 0xfff}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0x200000000000000}], 0x9, 0x0) r2 = fork() ptrace(0x10, r2) ptrace$getsig(0x4202, r2, 0xa23, &(0x7f0000004ac0)) process_vm_readv(0x0, &(0x7f0000000200)=[{&(0x7f0000000080)=""/184, 0x7ffff000}, {&(0x7f0000000440)=""/178, 0xb2}], 0x2, &(0x7f0000000380)=[{0x0}, {0x0}, {0xfffffffffffffffc}, {&(0x7f0000001ac0)=""/4095, 0xfff}, {0x0}, {0x0, 0xfffffffffffffc4b}, {0x0}, {0x0}, {0x0, 0x200000000000000}], 0x9, 0x0) r3 = fork() r4 = signalfd(0xffffffffffffffff, &(0x7f0000000100), 0x8) io_setup(0x4, &(0x7f0000000040)=0x0) io_submit(r5, 0x1, &(0x7f0000001a80)=[&(0x7f0000000080)={0x0, 0x0, 0x8, 0x0, 0x0, r4, &(0x7f0000000200)="8a918fa171f2207bbe774e1841237201d86669d99203f6baf170857d7d95dfd6a8db2db27d89f939347ce541ddcd8396c04cf394ef48190ae1d08f81274b5e6d5e3abe3ce71cd86fc013374b66fa5e00c40c211c64b9fcf1f4ca5410ec2dd7bff608d2b242646f5de0183d764eee8a7ce9c3e51b6503913d025377f64b2b3ae7", 0x80}]) syz_io_uring_setup(0x729a, &(0x7f0000000240)={0x0, 0x88d, 0x2, 0x2, 0x1e8, 0x0, r4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) ptrace(0x10, r3) ptrace$getsig(0x4202, r3, 0xa23, &(0x7f0000004ac0)) fork() kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f00000000c0)) ptrace$setregs(0xf, r2, 0x9, &(0x7f0000000b40)="2e6be30b6a84dc") 14:56:47 executing program 3: poll(&(0x7f00000000c0), 0x54, 0x0) [ 95.789180] audit: type=1400 audit(1768575407.357:7): avc: denied { execmem } for pid=271 comm="syz-executor.7" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 14:56:47 executing program 4: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000000)=""/4096, 0x1000}], 0x1, 0x0, 0x0) 14:56:47 executing program 5: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f00000002c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) dup(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') dup2(r0, r1) 14:56:47 executing program 6: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/cgroup\x00') ioctl$NS_GET_USERNS(r0, 0x40086602, 0x7ffffffff000) [ 97.004837] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 97.012996] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 97.015990] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 97.019434] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 97.023036] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 97.026985] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 97.036776] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 97.042625] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 97.047012] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 97.053249] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 97.076100] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 97.078631] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 97.080535] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 97.087058] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 97.092154] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 97.093892] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 97.096387] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 97.102886] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 97.107857] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 97.119859] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 97.143779] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 97.158229] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 97.164707] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 97.168529] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 97.171444] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 97.188215] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 97.193839] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 97.200501] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 97.214939] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 97.221674] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 97.226460] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 97.230365] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 97.240681] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 97.241727] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 97.250848] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 97.252040] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 97.265467] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 97.267304] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 97.279806] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 97.304620] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 99.094986] Bluetooth: hci1: command tx timeout [ 99.095089] Bluetooth: hci0: command tx timeout [ 99.158642] Bluetooth: hci3: command tx timeout [ 99.159534] Bluetooth: hci2: command tx timeout [ 99.223606] Bluetooth: hci4: command tx timeout [ 99.285777] Bluetooth: hci6: command tx timeout [ 99.351630] Bluetooth: hci7: command tx timeout [ 99.414680] Bluetooth: hci5: command tx timeout [ 101.142587] Bluetooth: hci0: command tx timeout [ 101.142707] Bluetooth: hci1: command tx timeout [ 101.206029] Bluetooth: hci2: command tx timeout [ 101.206191] Bluetooth: hci3: command tx timeout [ 101.269625] Bluetooth: hci4: command tx timeout [ 101.333771] Bluetooth: hci6: command tx timeout [ 101.397618] Bluetooth: hci7: command tx timeout [ 101.462021] Bluetooth: hci5: command tx timeout [ 103.189649] Bluetooth: hci0: command tx timeout [ 103.190611] Bluetooth: hci1: command tx timeout [ 103.253885] Bluetooth: hci3: command tx timeout [ 103.255024] Bluetooth: hci2: command tx timeout [ 103.318795] Bluetooth: hci4: command tx timeout [ 103.381627] Bluetooth: hci6: command tx timeout [ 103.446606] Bluetooth: hci7: command tx timeout [ 103.509629] Bluetooth: hci5: command tx timeout [ 105.237712] Bluetooth: hci0: command tx timeout [ 105.238655] Bluetooth: hci1: command tx timeout [ 105.302591] Bluetooth: hci3: command tx timeout [ 105.302629] Bluetooth: hci2: command tx timeout [ 105.365681] Bluetooth: hci4: command tx timeout [ 105.429951] Bluetooth: hci6: command tx timeout [ 105.493598] Bluetooth: hci7: command tx timeout [ 105.558619] Bluetooth: hci5: command tx timeout [ 131.379035] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.379721] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.624749] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.625343] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 14:57:23 executing program 5: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f00000002c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) dup(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') dup2(r0, r1) 14:57:24 executing program 5: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f00000002c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) dup(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') dup2(r0, r1) 14:57:24 executing program 5: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f00000002c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) dup(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') dup2(r0, r1) 14:57:24 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) [ 132.814333] audit: type=1400 audit(1768575444.382:8): avc: denied { open } for pid=3715 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 132.827122] audit: type=1400 audit(1768575444.382:9): avc: denied { kernel } for pid=3715 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 132.952956] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.953537] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 14:57:24 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) [ 133.087485] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.089169] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 14:57:24 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) 14:57:24 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) 14:57:25 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) [ 134.010746] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.011346] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.102933] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.103505] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.212020] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.212625] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.261586] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.262139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.519540] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.520176] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.589085] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.589732] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.706689] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.707327] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.759972] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.760621] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.800949] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.801580] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.844649] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.845223] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.894902] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.895537] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.939177] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.939824] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 14:57:26 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000180)) 14:57:26 executing program 4: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000000)=""/4096, 0x1000}], 0x1, 0x0, 0x0) 14:57:26 executing program 1: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f0000000140)=' ', 0x1, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000001400)=[{&(0x7f0000000180)="a6", 0x1}], 0x1, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000000c0)={0x0, r2, 0x100000000000000}) 14:57:26 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8921, &(0x7f0000000740)={'wpan1\x00'}) 14:57:26 executing program 6: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/cgroup\x00') ioctl$NS_GET_USERNS(r0, 0x40086602, 0x7ffffffff000) 14:57:26 executing program 3: poll(&(0x7f00000000c0), 0x54, 0x0) 14:57:26 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r0, 0x2, &(0x7f0000000040)) r1 = getpid() process_vm_readv(r1, &(0x7f0000000200)=[{&(0x7f0000000080)=""/184, 0x7ffff000}, {&(0x7f0000000140)=""/178, 0xb2}], 0x2, &(0x7f0000000380)=[{0x0}, {0x0}, {0xfffffffffffffffc}, {&(0x7f00000039c0)=""/4095, 0xfff}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0x200000000000000}], 0x9, 0x0) r2 = fork() ptrace(0x10, r2) ptrace$getsig(0x4202, r2, 0xa23, &(0x7f0000004ac0)) process_vm_readv(0x0, &(0x7f0000000200)=[{&(0x7f0000000080)=""/184, 0x7ffff000}, {&(0x7f0000000440)=""/178, 0xb2}], 0x2, &(0x7f0000000380)=[{0x0}, {0x0}, {0xfffffffffffffffc}, {&(0x7f0000001ac0)=""/4095, 0xfff}, {0x0}, {0x0, 0xfffffffffffffc4b}, {0x0}, {0x0}, {0x0, 0x200000000000000}], 0x9, 0x0) r3 = fork() r4 = signalfd(0xffffffffffffffff, &(0x7f0000000100), 0x8) io_setup(0x4, &(0x7f0000000040)=0x0) io_submit(r5, 0x1, &(0x7f0000001a80)=[&(0x7f0000000080)={0x0, 0x0, 0x8, 0x0, 0x0, r4, &(0x7f0000000200)="8a918fa171f2207bbe774e1841237201d86669d99203f6baf170857d7d95dfd6a8db2db27d89f939347ce541ddcd8396c04cf394ef48190ae1d08f81274b5e6d5e3abe3ce71cd86fc013374b66fa5e00c40c211c64b9fcf1f4ca5410ec2dd7bff608d2b242646f5de0183d764eee8a7ce9c3e51b6503913d025377f64b2b3ae7", 0x80}]) syz_io_uring_setup(0x729a, &(0x7f0000000240)={0x0, 0x88d, 0x2, 0x2, 0x1e8, 0x0, r4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) ptrace(0x10, r3) ptrace$getsig(0x4202, r3, 0xa23, &(0x7f0000004ac0)) fork() kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f00000000c0)) ptrace$setregs(0xf, r2, 0x9, &(0x7f0000000b40)="2e6be30b6a84dc") 14:57:26 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) 14:57:26 executing program 4: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000000)=""/4096, 0x1000}], 0x1, 0x0, 0x0) 14:57:26 executing program 3: poll(&(0x7f00000000c0), 0x54, 0x0) 14:57:26 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000180)) 14:57:26 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8921, &(0x7f0000000740)={'wpan1\x00'}) 14:57:26 executing program 1: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f0000000140)=' ', 0x1, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000001400)=[{&(0x7f0000000180)="a6", 0x1}], 0x1, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000000c0)={0x0, r2, 0x100000000000000}) 14:57:26 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r0, 0x2, &(0x7f0000000040)) r1 = getpid() process_vm_readv(r1, &(0x7f0000000200)=[{&(0x7f0000000080)=""/184, 0x7ffff000}, {&(0x7f0000000140)=""/178, 0xb2}], 0x2, &(0x7f0000000380)=[{0x0}, {0x0}, {0xfffffffffffffffc}, {&(0x7f00000039c0)=""/4095, 0xfff}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0x200000000000000}], 0x9, 0x0) r2 = fork() ptrace(0x10, r2) ptrace$getsig(0x4202, r2, 0xa23, &(0x7f0000004ac0)) process_vm_readv(0x0, &(0x7f0000000200)=[{&(0x7f0000000080)=""/184, 0x7ffff000}, {&(0x7f0000000440)=""/178, 0xb2}], 0x2, &(0x7f0000000380)=[{0x0}, {0x0}, {0xfffffffffffffffc}, {&(0x7f0000001ac0)=""/4095, 0xfff}, {0x0}, {0x0, 0xfffffffffffffc4b}, {0x0}, {0x0}, {0x0, 0x200000000000000}], 0x9, 0x0) r3 = fork() r4 = signalfd(0xffffffffffffffff, &(0x7f0000000100), 0x8) io_setup(0x4, &(0x7f0000000040)=0x0) io_submit(r5, 0x1, &(0x7f0000001a80)=[&(0x7f0000000080)={0x0, 0x0, 0x8, 0x0, 0x0, r4, &(0x7f0000000200)="8a918fa171f2207bbe774e1841237201d86669d99203f6baf170857d7d95dfd6a8db2db27d89f939347ce541ddcd8396c04cf394ef48190ae1d08f81274b5e6d5e3abe3ce71cd86fc013374b66fa5e00c40c211c64b9fcf1f4ca5410ec2dd7bff608d2b242646f5de0183d764eee8a7ce9c3e51b6503913d025377f64b2b3ae7", 0x80}]) syz_io_uring_setup(0x729a, &(0x7f0000000240)={0x0, 0x88d, 0x2, 0x2, 0x1e8, 0x0, r4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) ptrace(0x10, r3) ptrace$getsig(0x4202, r3, 0xa23, &(0x7f0000004ac0)) fork() kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f00000000c0)) ptrace$setregs(0xf, r2, 0x9, &(0x7f0000000b40)="2e6be30b6a84dc") 14:57:26 executing program 6: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/cgroup\x00') ioctl$NS_GET_USERNS(r0, 0x40086602, 0x7ffffffff000) 14:57:26 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) 14:57:26 executing program 3: poll(&(0x7f00000000c0), 0x54, 0x0) 14:57:26 executing program 4: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000000)=""/4096, 0x1000}], 0x1, 0x0, 0x0) 14:57:26 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000180)) 14:57:26 executing program 1: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f0000000140)=' ', 0x1, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000001400)=[{&(0x7f0000000180)="a6", 0x1}], 0x1, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000000c0)={0x0, r2, 0x100000000000000}) 14:57:26 executing program 6: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/cgroup\x00') ioctl$NS_GET_USERNS(r0, 0x40086602, 0x7ffffffff000) 14:57:27 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000480)=ANY=[@ANYBLOB="280000001e000109"], 0x28}], 0x1}, 0x0) readv(r0, &(0x7f0000001180)=[{&(0x7f0000000080)=""/239, 0xef}, {0x0, 0x2}], 0x2) 14:57:27 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') pread64(r0, &(0x7f0000000040)=""/156, 0x9c, 0x0) 14:57:27 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r0, 0x2, &(0x7f0000000040)) r1 = getpid() process_vm_readv(r1, &(0x7f0000000200)=[{&(0x7f0000000080)=""/184, 0x7ffff000}, {&(0x7f0000000140)=""/178, 0xb2}], 0x2, &(0x7f0000000380)=[{0x0}, {0x0}, {0xfffffffffffffffc}, {&(0x7f00000039c0)=""/4095, 0xfff}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0x200000000000000}], 0x9, 0x0) r2 = fork() ptrace(0x10, r2) ptrace$getsig(0x4202, r2, 0xa23, &(0x7f0000004ac0)) process_vm_readv(0x0, &(0x7f0000000200)=[{&(0x7f0000000080)=""/184, 0x7ffff000}, {&(0x7f0000000440)=""/178, 0xb2}], 0x2, &(0x7f0000000380)=[{0x0}, {0x0}, {0xfffffffffffffffc}, {&(0x7f0000001ac0)=""/4095, 0xfff}, {0x0}, {0x0, 0xfffffffffffffc4b}, {0x0}, {0x0}, {0x0, 0x200000000000000}], 0x9, 0x0) r3 = fork() r4 = signalfd(0xffffffffffffffff, &(0x7f0000000100), 0x8) io_setup(0x4, &(0x7f0000000040)=0x0) io_submit(r5, 0x1, &(0x7f0000001a80)=[&(0x7f0000000080)={0x0, 0x0, 0x8, 0x0, 0x0, r4, &(0x7f0000000200)="8a918fa171f2207bbe774e1841237201d86669d99203f6baf170857d7d95dfd6a8db2db27d89f939347ce541ddcd8396c04cf394ef48190ae1d08f81274b5e6d5e3abe3ce71cd86fc013374b66fa5e00c40c211c64b9fcf1f4ca5410ec2dd7bff608d2b242646f5de0183d764eee8a7ce9c3e51b6503913d025377f64b2b3ae7", 0x80}]) syz_io_uring_setup(0x729a, &(0x7f0000000240)={0x0, 0x88d, 0x2, 0x2, 0x1e8, 0x0, r4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) ptrace(0x10, r3) ptrace$getsig(0x4202, r3, 0xa23, &(0x7f0000004ac0)) fork() kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f00000000c0)) ptrace$setregs(0xf, r2, 0x9, &(0x7f0000000b40)="2e6be30b6a84dc") 14:57:27 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r0, 0x2, &(0x7f0000000040)) r1 = getpid() process_vm_readv(r1, &(0x7f0000000200)=[{&(0x7f0000000080)=""/184, 0x7ffff000}, {&(0x7f0000000140)=""/178, 0xb2}], 0x2, &(0x7f0000000380)=[{0x0}, {0x0}, {0xfffffffffffffffc}, {&(0x7f00000039c0)=""/4095, 0xfff}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0x200000000000000}], 0x9, 0x0) r2 = fork() ptrace(0x10, r2) ptrace$getsig(0x4202, r2, 0xa23, &(0x7f0000004ac0)) process_vm_readv(0x0, &(0x7f0000000200)=[{&(0x7f0000000080)=""/184, 0x7ffff000}, {&(0x7f0000000440)=""/178, 0xb2}], 0x2, &(0x7f0000000380)=[{0x0}, {0x0}, {0xfffffffffffffffc}, {&(0x7f0000001ac0)=""/4095, 0xfff}, {0x0}, {0x0, 0xfffffffffffffc4b}, {0x0}, {0x0}, {0x0, 0x200000000000000}], 0x9, 0x0) r3 = fork() r4 = signalfd(0xffffffffffffffff, &(0x7f0000000100), 0x8) io_setup(0x4, &(0x7f0000000040)=0x0) io_submit(r5, 0x1, &(0x7f0000001a80)=[&(0x7f0000000080)={0x0, 0x0, 0x8, 0x0, 0x0, r4, &(0x7f0000000200)="8a918fa171f2207bbe774e1841237201d86669d99203f6baf170857d7d95dfd6a8db2db27d89f939347ce541ddcd8396c04cf394ef48190ae1d08f81274b5e6d5e3abe3ce71cd86fc013374b66fa5e00c40c211c64b9fcf1f4ca5410ec2dd7bff608d2b242646f5de0183d764eee8a7ce9c3e51b6503913d025377f64b2b3ae7", 0x80}]) syz_io_uring_setup(0x729a, &(0x7f0000000240)={0x0, 0x88d, 0x2, 0x2, 0x1e8, 0x0, r4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) ptrace(0x10, r3) ptrace$getsig(0x4202, r3, 0xa23, &(0x7f0000004ac0)) fork() kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f00000000c0)) ptrace$setregs(0xf, r2, 0x9, &(0x7f0000000b40)="2e6be30b6a84dc") 14:57:27 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8921, &(0x7f0000000740)={'wpan1\x00'}) 14:57:27 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r0, 0x2, &(0x7f0000000040)) r1 = getpid() process_vm_readv(r1, &(0x7f0000000200)=[{&(0x7f0000000080)=""/184, 0x7ffff000}, {&(0x7f0000000140)=""/178, 0xb2}], 0x2, &(0x7f0000000380)=[{0x0}, {0x0}, {0xfffffffffffffffc}, {&(0x7f00000039c0)=""/4095, 0xfff}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0x200000000000000}], 0x9, 0x0) r2 = fork() ptrace(0x10, r2) ptrace$getsig(0x4202, r2, 0xa23, &(0x7f0000004ac0)) process_vm_readv(0x0, &(0x7f0000000200)=[{&(0x7f0000000080)=""/184, 0x7ffff000}, {&(0x7f0000000440)=""/178, 0xb2}], 0x2, &(0x7f0000000380)=[{0x0}, {0x0}, {0xfffffffffffffffc}, {&(0x7f0000001ac0)=""/4095, 0xfff}, {0x0}, {0x0, 0xfffffffffffffc4b}, {0x0}, {0x0}, {0x0, 0x200000000000000}], 0x9, 0x0) r3 = fork() r4 = signalfd(0xffffffffffffffff, &(0x7f0000000100), 0x8) io_setup(0x4, &(0x7f0000000040)=0x0) io_submit(r5, 0x1, &(0x7f0000001a80)=[&(0x7f0000000080)={0x0, 0x0, 0x8, 0x0, 0x0, r4, &(0x7f0000000200)="8a918fa171f2207bbe774e1841237201d86669d99203f6baf170857d7d95dfd6a8db2db27d89f939347ce541ddcd8396c04cf394ef48190ae1d08f81274b5e6d5e3abe3ce71cd86fc013374b66fa5e00c40c211c64b9fcf1f4ca5410ec2dd7bff608d2b242646f5de0183d764eee8a7ce9c3e51b6503913d025377f64b2b3ae7", 0x80}]) syz_io_uring_setup(0x729a, &(0x7f0000000240)={0x0, 0x88d, 0x2, 0x2, 0x1e8, 0x0, r4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) ptrace(0x10, r3) ptrace$getsig(0x4202, r3, 0xa23, &(0x7f0000004ac0)) fork() kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f00000000c0)) ptrace$setregs(0xf, r2, 0x9, &(0x7f0000000b40)="2e6be30b6a84dc") 14:57:27 executing program 7: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x2, &(0x7f0000000040)=[{0x28, 0x0, 0x0, 0xfffff028}, {0x6}]}, 0x10) 14:57:27 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x8, &(0x7f0000000280), 0x4) [ 135.618964] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 135.631509] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 14:57:27 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x8, &(0x7f0000000280), 0x4) 14:57:27 executing program 7: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x2, &(0x7f0000000040)=[{0x28, 0x0, 0x0, 0xfffff028}, {0x6}]}, 0x10) 14:57:27 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) fstat(r0, &(0x7f0000000080)) 14:57:27 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000480)=ANY=[@ANYBLOB="280000001e000109"], 0x28}], 0x1}, 0x0) readv(r0, &(0x7f0000001180)=[{&(0x7f0000000080)=""/239, 0xef}, {0x0, 0x2}], 0x2) 14:57:27 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x8, &(0x7f0000000280), 0x4) 14:57:27 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') pread64(r0, &(0x7f0000000040)=""/156, 0x9c, 0x0) 14:57:27 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x8, &(0x7f0000000280), 0x4) [ 135.818477] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 14:57:27 executing program 7: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x2, &(0x7f0000000040)=[{0x28, 0x0, 0x0, 0xfffff028}, {0x6}]}, 0x10) 14:57:27 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r0, 0x2, &(0x7f0000000040)) r1 = getpid() process_vm_readv(r1, &(0x7f0000000200)=[{&(0x7f0000000080)=""/184, 0x7ffff000}, {&(0x7f0000000140)=""/178, 0xb2}], 0x2, &(0x7f0000000380)=[{0x0}, {0x0}, {0xfffffffffffffffc}, {&(0x7f00000039c0)=""/4095, 0xfff}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0x200000000000000}], 0x9, 0x0) r2 = fork() ptrace(0x10, r2) ptrace$getsig(0x4202, r2, 0xa23, &(0x7f0000004ac0)) process_vm_readv(0x0, &(0x7f0000000200)=[{&(0x7f0000000080)=""/184, 0x7ffff000}, {&(0x7f0000000440)=""/178, 0xb2}], 0x2, &(0x7f0000000380)=[{0x0}, {0x0}, {0xfffffffffffffffc}, {&(0x7f0000001ac0)=""/4095, 0xfff}, {0x0}, {0x0, 0xfffffffffffffc4b}, {0x0}, {0x0}, {0x0, 0x200000000000000}], 0x9, 0x0) r3 = fork() r4 = signalfd(0xffffffffffffffff, &(0x7f0000000100), 0x8) io_setup(0x4, &(0x7f0000000040)=0x0) io_submit(r5, 0x1, &(0x7f0000001a80)=[&(0x7f0000000080)={0x0, 0x0, 0x8, 0x0, 0x0, r4, &(0x7f0000000200)="8a918fa171f2207bbe774e1841237201d86669d99203f6baf170857d7d95dfd6a8db2db27d89f939347ce541ddcd8396c04cf394ef48190ae1d08f81274b5e6d5e3abe3ce71cd86fc013374b66fa5e00c40c211c64b9fcf1f4ca5410ec2dd7bff608d2b242646f5de0183d764eee8a7ce9c3e51b6503913d025377f64b2b3ae7", 0x80}]) syz_io_uring_setup(0x729a, &(0x7f0000000240)={0x0, 0x88d, 0x2, 0x2, 0x1e8, 0x0, r4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) ptrace(0x10, r3) ptrace$getsig(0x4202, r3, 0xa23, &(0x7f0000004ac0)) fork() kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f00000000c0)) ptrace$setregs(0xf, r2, 0x9, &(0x7f0000000b40)="2e6be30b6a84dc") 14:57:27 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502103, &(0x7f0000001180)) 14:57:27 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000480)=ANY=[@ANYBLOB="280000001e000109"], 0x28}], 0x1}, 0x0) readv(r0, &(0x7f0000001180)=[{&(0x7f0000000080)=""/239, 0xef}, {0x0, 0x2}], 0x2) 14:57:27 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') pread64(r0, &(0x7f0000000040)=""/156, 0x9c, 0x0) 14:57:27 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SG_SCSI_RESET(0xffffffffffffffff, 0x2284, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0) setresuid(0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNGETVNETHDRSZ(r0, 0x800454cf, &(0x7f0000001600)) 14:57:27 executing program 7: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x2, &(0x7f0000000040)=[{0x28, 0x0, 0x0, 0xfffff028}, {0x6}]}, 0x10) 14:57:27 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502103, &(0x7f0000001180)) 14:57:27 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = pidfd_open(r0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4442, 0x0) pidfd_getfd(r1, r2, 0x0) 14:57:27 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r0, 0x2, &(0x7f0000000040)) r1 = getpid() process_vm_readv(r1, &(0x7f0000000200)=[{&(0x7f0000000080)=""/184, 0x7ffff000}, {&(0x7f0000000140)=""/178, 0xb2}], 0x2, &(0x7f0000000380)=[{0x0}, {0x0}, {0xfffffffffffffffc}, {&(0x7f00000039c0)=""/4095, 0xfff}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0x200000000000000}], 0x9, 0x0) r2 = fork() ptrace(0x10, r2) ptrace$getsig(0x4202, r2, 0xa23, &(0x7f0000004ac0)) process_vm_readv(0x0, &(0x7f0000000200)=[{&(0x7f0000000080)=""/184, 0x7ffff000}, {&(0x7f0000000440)=""/178, 0xb2}], 0x2, &(0x7f0000000380)=[{0x0}, {0x0}, {0xfffffffffffffffc}, {&(0x7f0000001ac0)=""/4095, 0xfff}, {0x0}, {0x0, 0xfffffffffffffc4b}, {0x0}, {0x0}, {0x0, 0x200000000000000}], 0x9, 0x0) r3 = fork() r4 = signalfd(0xffffffffffffffff, &(0x7f0000000100), 0x8) io_setup(0x4, &(0x7f0000000040)=0x0) io_submit(r5, 0x1, &(0x7f0000001a80)=[&(0x7f0000000080)={0x0, 0x0, 0x8, 0x0, 0x0, r4, &(0x7f0000000200)="8a918fa171f2207bbe774e1841237201d86669d99203f6baf170857d7d95dfd6a8db2db27d89f939347ce541ddcd8396c04cf394ef48190ae1d08f81274b5e6d5e3abe3ce71cd86fc013374b66fa5e00c40c211c64b9fcf1f4ca5410ec2dd7bff608d2b242646f5de0183d764eee8a7ce9c3e51b6503913d025377f64b2b3ae7", 0x80}]) syz_io_uring_setup(0x729a, &(0x7f0000000240)={0x0, 0x88d, 0x2, 0x2, 0x1e8, 0x0, r4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) ptrace(0x10, r3) ptrace$getsig(0x4202, r3, 0xa23, &(0x7f0000004ac0)) fork() kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f00000000c0)) ptrace$setregs(0xf, r2, 0x9, &(0x7f0000000b40)="2e6be30b6a84dc") 14:57:27 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r0, 0x2, &(0x7f0000000040)) r1 = getpid() process_vm_readv(r1, &(0x7f0000000200)=[{&(0x7f0000000080)=""/184, 0x7ffff000}, {&(0x7f0000000140)=""/178, 0xb2}], 0x2, &(0x7f0000000380)=[{0x0}, {0x0}, {0xfffffffffffffffc}, {&(0x7f00000039c0)=""/4095, 0xfff}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0x200000000000000}], 0x9, 0x0) r2 = fork() ptrace(0x10, r2) ptrace$getsig(0x4202, r2, 0xa23, &(0x7f0000004ac0)) process_vm_readv(0x0, &(0x7f0000000200)=[{&(0x7f0000000080)=""/184, 0x7ffff000}, {&(0x7f0000000440)=""/178, 0xb2}], 0x2, &(0x7f0000000380)=[{0x0}, {0x0}, {0xfffffffffffffffc}, {&(0x7f0000001ac0)=""/4095, 0xfff}, {0x0}, {0x0, 0xfffffffffffffc4b}, {0x0}, {0x0}, {0x0, 0x200000000000000}], 0x9, 0x0) r3 = fork() r4 = signalfd(0xffffffffffffffff, &(0x7f0000000100), 0x8) io_setup(0x4, &(0x7f0000000040)=0x0) io_submit(r5, 0x1, &(0x7f0000001a80)=[&(0x7f0000000080)={0x0, 0x0, 0x8, 0x0, 0x0, r4, &(0x7f0000000200)="8a918fa171f2207bbe774e1841237201d86669d99203f6baf170857d7d95dfd6a8db2db27d89f939347ce541ddcd8396c04cf394ef48190ae1d08f81274b5e6d5e3abe3ce71cd86fc013374b66fa5e00c40c211c64b9fcf1f4ca5410ec2dd7bff608d2b242646f5de0183d764eee8a7ce9c3e51b6503913d025377f64b2b3ae7", 0x80}]) syz_io_uring_setup(0x729a, &(0x7f0000000240)={0x0, 0x88d, 0x2, 0x2, 0x1e8, 0x0, r4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) ptrace(0x10, r3) ptrace$getsig(0x4202, r3, 0xa23, &(0x7f0000004ac0)) fork() kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f00000000c0)) ptrace$setregs(0xf, r2, 0x9, &(0x7f0000000b40)="2e6be30b6a84dc") 14:57:27 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502103, &(0x7f0000001180)) [ 136.161508] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 14:57:27 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = pidfd_open(r0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4442, 0x0) pidfd_getfd(r1, r2, 0x0) 14:57:27 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000480)=ANY=[@ANYBLOB="280000001e000109"], 0x28}], 0x1}, 0x0) readv(r0, &(0x7f0000001180)=[{&(0x7f0000000080)=""/239, 0xef}, {0x0, 0x2}], 0x2) 14:57:27 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502103, &(0x7f0000001180)) 14:57:27 executing program 7: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000), 0x6) close_range(r0, 0xffffffffffffffff, 0x0) 14:57:27 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SG_SCSI_RESET(0xffffffffffffffff, 0x2284, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0) setresuid(0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNGETVNETHDRSZ(r0, 0x800454cf, &(0x7f0000001600)) 14:57:27 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') pread64(r0, &(0x7f0000000040)=""/156, 0x9c, 0x0) 14:57:27 executing program 2: syz_mount_image$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', 0x0) [ 136.355744] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 14:57:27 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r0, 0x2, &(0x7f0000000040)) r1 = getpid() process_vm_readv(r1, &(0x7f0000000200)=[{&(0x7f0000000080)=""/184, 0x7ffff000}, {&(0x7f0000000140)=""/178, 0xb2}], 0x2, &(0x7f0000000380)=[{0x0}, {0x0}, {0xfffffffffffffffc}, {&(0x7f00000039c0)=""/4095, 0xfff}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0x200000000000000}], 0x9, 0x0) r2 = fork() ptrace(0x10, r2) ptrace$getsig(0x4202, r2, 0xa23, &(0x7f0000004ac0)) process_vm_readv(0x0, &(0x7f0000000200)=[{&(0x7f0000000080)=""/184, 0x7ffff000}, {&(0x7f0000000440)=""/178, 0xb2}], 0x2, &(0x7f0000000380)=[{0x0}, {0x0}, {0xfffffffffffffffc}, {&(0x7f0000001ac0)=""/4095, 0xfff}, {0x0}, {0x0, 0xfffffffffffffc4b}, {0x0}, {0x0}, {0x0, 0x200000000000000}], 0x9, 0x0) r3 = fork() r4 = signalfd(0xffffffffffffffff, &(0x7f0000000100), 0x8) io_setup(0x4, &(0x7f0000000040)=0x0) io_submit(r5, 0x1, &(0x7f0000001a80)=[&(0x7f0000000080)={0x0, 0x0, 0x8, 0x0, 0x0, r4, &(0x7f0000000200)="8a918fa171f2207bbe774e1841237201d86669d99203f6baf170857d7d95dfd6a8db2db27d89f939347ce541ddcd8396c04cf394ef48190ae1d08f81274b5e6d5e3abe3ce71cd86fc013374b66fa5e00c40c211c64b9fcf1f4ca5410ec2dd7bff608d2b242646f5de0183d764eee8a7ce9c3e51b6503913d025377f64b2b3ae7", 0x80}]) syz_io_uring_setup(0x729a, &(0x7f0000000240)={0x0, 0x88d, 0x2, 0x2, 0x1e8, 0x0, r4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) ptrace(0x10, r3) ptrace$getsig(0x4202, r3, 0xa23, &(0x7f0000004ac0)) fork() kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f00000000c0)) ptrace$setregs(0xf, r2, 0x9, &(0x7f0000000b40)="2e6be30b6a84dc") 14:57:27 executing program 1: r0 = mq_open(&(0x7f00000001c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3y\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98\xe6`k9D\xca\xd5\xd0s\xb5!.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\x00'/124, 0x41, 0x0, 0x0) mq_timedreceive(r0, 0x0, 0x0, 0x0, 0x0) [ 136.414622] [ 136.414804] ===================================== [ 136.415191] WARNING: bad unlock balance detected! [ 136.415574] 6.19.0-rc5-next-20260116 #1 Not tainted [ 136.416016] ------------------------------------- [ 136.416466] syz-executor.4/4067 is trying to release lock (rcu_read_lock) at: [ 136.417780] [] __wait_on_freeing_inode+0x105/0x350 [ 136.419288] but there are no more locks to release! [ 136.420311] [ 136.420311] other info that might help us debug this: [ 136.421987] 4 locks held by syz-executor.4/4067: [ 136.422949] #0: ffff88800f63c3f8 (sb_writers#3){.+.+}-{0:0}, at: filename_create+0xf7/0x400 [ 136.425018] #1: ffff88804ac4aa00 (&type->i_mutex_dir_key#3/1){+.+.}-{4:4}, at: filename_create+0x1b1/0x400 [ 136.425846] #2: ffff88800f690950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xe32/0x12d0 [ 136.426580] #3: ffffffff85c16898 (inode_hash_lock){+.+.}-{3:3}, at: insert_inode_locked+0xf9/0x890 [ 136.427347] [ 136.427347] stack backtrace: [ 136.427737] CPU: 1 UID: 0 PID: 4067 Comm: syz-executor.4 Not tainted 6.19.0-rc5-next-20260116 #1 PREEMPT(lazy) [ 136.427752] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 136.427760] Call Trace: [ 136.427764] [ 136.427770] dump_stack_lvl+0xca/0x120 [ 136.427804] ? __wait_on_freeing_inode+0x105/0x350 [ 136.427818] print_unlock_imbalance_bug+0x118/0x130 [ 136.427835] ? __wait_on_freeing_inode+0x105/0x350 [ 136.427850] lock_release+0x1ee/0x270 [ 136.427868] __wait_on_freeing_inode+0x10a/0x350 [ 136.427884] ? __pfx___wait_on_freeing_inode+0x10/0x10 [ 136.427902] ? __pfx_var_wake_function+0x10/0x10 [ 136.427922] ? lock_is_held_type+0x9e/0x120 [ 136.427937] insert_inode_locked+0x25f/0x890 [ 136.427958] __ext4_new_inode+0x223d/0x4cd0 [ 136.427984] ? __pfx___ext4_new_inode+0x10/0x10 [ 136.428001] ? __pfx___dquot_initialize+0x10/0x10 [ 136.428021] ? __pfx_avc_has_perm+0x10/0x10 [ 136.428042] ext4_symlink+0x623/0xb40 [ 136.428069] ? __pfx_ext4_symlink+0x10/0x10 [ 136.428087] ? security_inode_permission+0x72/0xe0 [ 136.428105] vfs_symlink+0x44b/0x840 [ 136.428124] filename_symlinkat+0x158/0x440 [ 136.428142] ? __pfx_filename_symlinkat+0x10/0x10 [ 136.428157] ? strncpy_from_user+0x21b/0x2f0 [ 136.428179] __x64_sys_symlink+0x82/0x110 [ 136.428194] do_syscall_64+0xbf/0x420 [ 136.428209] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.428223] RIP: 0033:0x7f0e139c0427 [ 136.428233] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 58 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 136.428244] RSP: 002b:00007fff1f7c5e68 EFLAGS: 00000202 ORIG_RAX: 0000000000000058 [ 136.428255] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f0e139c0427 [ 136.428263] RDX: 00007fff1f7c5f47 RSI: 00007f0e13a1b019 RDI: 00007fff1f7c5f30 [ 136.428270] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007fff1f7c5d00 [ 136.428277] R10: 00007fff1f7c5bb7 R11: 0000000000000202 R12: 0000000000000001 [ 136.428284] R13: 0000000000000000 R14: 0000000000000001 R15: 00007fff1f7c5f30 [ 136.428302] [ 136.445748] ------------[ cut here ]------------ [ 136.446168] WARNING: kernel/rcu/tree_plugin.h:443 at __rcu_read_unlock+0x25f/0x5c0, CPU#1: syz-executor.4/4067 [ 136.447187] Modules linked in: [ 136.447518] CPU: 1 UID: 0 PID: 4067 Comm: syz-executor.4 Not tainted 6.19.0-rc5-next-20260116 #1 PREEMPT(lazy) [ 136.448460] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 136.449239] RIP: 0010:__rcu_read_unlock+0x25f/0x5c0 [ 136.449801] Code: f2 02 00 00 c7 43 58 01 00 00 00 bf 09 00 00 00 e8 d6 b7 de ff 4d 85 f6 0f 84 73 fe ff ff e8 38 8a 20 00 fb e9 68 fe ff ff 90 <0f> 0b 90 5b 5d 41 5c 41 5d 41 5e e9 81 4d 74 03 e8 2c 5d 56 00 e9 [ 136.451465] RSP: 0018:ffff88804ca0f9a0 EFLAGS: 00010286 [ 136.451995] RAX: 00000000ffffffff RBX: ffff8880183cb700 RCX: ffffffff815660f7 [ 136.452686] RDX: 0000000000000000 RSI: ffffffff81566100 RDI: ffff8880183cbafc [ 136.453319] RBP: ffff8880183cb700 R08: 0000000000000000 R09: fffffbfff0ba7040 [ 136.454008] R10: 0000000000000000 R11: 0000000000000001 R12: ffff8880183cb700 [ 136.454700] R13: 0000000000000001 R14: ffffffff85c0fb30 R15: ffff88804ac2cf58 [ 136.455345] FS: 0000555591068400(0000) GS:ffff8880e5442000(0000) knlGS:0000000000000000 [ 136.456113] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 136.456683] CR2: 0000555591068708 CR3: 000000004c09f000 CR4: 0000000000350ef0 [ 136.457316] Call Trace: [ 136.457637] [ 136.458345] __wait_on_freeing_inode+0x10f/0x350 [ 136.459130] ? __pfx___wait_on_freeing_inode+0x10/0x10 [ 136.460267] ? __pfx_var_wake_function+0x10/0x10 [ 136.461585] ? lock_is_held_type+0x9e/0x120 [ 136.462721] insert_inode_locked+0x25f/0x890 [ 136.466933] __ext4_new_inode+0x223d/0x4cd0 [ 136.473300] ? __pfx___ext4_new_inode+0x10/0x10 [ 136.475940] ? __pfx___dquot_initialize+0x10/0x10 [ 136.477483] ? __pfx_avc_has_perm+0x10/0x10 [ 136.481198] ext4_symlink+0x623/0xb40 [ 136.485903] ? __pfx_ext4_symlink+0x10/0x10 [ 136.488004] ? security_inode_permission+0x72/0xe0 [ 136.491360] vfs_symlink+0x44b/0x840 [ 136.494060] filename_symlinkat+0x158/0x440 [ 136.504527] ? __pfx_filename_symlinkat+0x10/0x10 [ 136.506177] ? strncpy_from_user+0x21b/0x2f0 [ 136.510097] __x64_sys_symlink+0x82/0x110 [ 136.511677] do_syscall_64+0xbf/0x420 [ 136.513301] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.514387] RIP: 0033:0x7f0e139c0427 [ 136.515207] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 58 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 136.518160] RSP: 002b:00007fff1f7c5e68 EFLAGS: 00000202 ORIG_RAX: 0000000000000058 [ 136.519463] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f0e139c0427 [ 136.520689] RDX: 00007fff1f7c5f47 RSI: 00007f0e13a1b019 RDI: 00007fff1f7c5f30 [ 136.521914] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007fff1f7c5d00 [ 136.523145] R10: 00007fff1f7c5bb7 R11: 0000000000000202 R12: 0000000000000001 [ 136.524366] R13: 0000000000000000 R14: 0000000000000001 R15: 00007fff1f7c5f30 [ 136.529830] [ 136.530222] irq event stamp: 189 [ 136.530857] hardirqs last enabled at (189): [] _raw_spin_unlock_irqrestore+0x2c/0x50 [ 136.532652] hardirqs last disabled at (188): [] _raw_spin_lock_irqsave+0x53/0x60 [ 136.534420] softirqs last enabled at (184): [] kernel_fpu_end+0x59/0x70 [ 136.536130] softirqs last disabled at (182): [] kernel_fpu_begin_mask+0x1bb/0x300 [ 136.537786] ---[ end trace 0000000000000000 ]--- 14:57:28 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = pidfd_open(r0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4442, 0x0) pidfd_getfd(r1, r2, 0x0) 14:57:28 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SG_SCSI_RESET(0xffffffffffffffff, 0x2284, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0) setresuid(0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNGETVNETHDRSZ(r0, 0x800454cf, &(0x7f0000001600)) 14:57:28 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000980)='io\x00') perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000500)=[{&(0x7f0000000100)=""/53, 0x35}], 0x1, 0x0, 0x0) 14:57:28 executing program 5: r0 = socket$inet(0x2, 0x3, 0x26) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f00000001c0)=0x5, 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x2, 0x0, @dev}, 0x10) 14:57:28 executing program 1: r0 = mq_open(&(0x7f00000001c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3y\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98\xe6`k9D\xca\xd5\xd0s\xb5!.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\x00'/124, 0x41, 0x0, 0x0) mq_timedreceive(r0, 0x0, 0x0, 0x0, 0x0) 14:57:28 executing program 4: r0 = gettid() getpriority(0x0, r0) 14:57:28 executing program 7: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000), 0x6) close_range(r0, 0xffffffffffffffff, 0x0) 14:57:28 executing program 2: syz_mount_image$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', 0x0) 14:57:28 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SG_SCSI_RESET(0xffffffffffffffff, 0x2284, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0) setresuid(0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNGETVNETHDRSZ(r0, 0x800454cf, &(0x7f0000001600)) 14:57:28 executing program 1: r0 = mq_open(&(0x7f00000001c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3y\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98\xe6`k9D\xca\xd5\xd0s\xb5!.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\x00'/124, 0x41, 0x0, 0x0) mq_timedreceive(r0, 0x0, 0x0, 0x0, 0x0) 14:57:28 executing program 2: syz_mount_image$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', 0x0) 14:57:28 executing program 7: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000), 0x6) close_range(r0, 0xffffffffffffffff, 0x0) 14:57:28 executing program 5: r0 = socket$inet(0x2, 0x3, 0x26) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f00000001c0)=0x5, 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x2, 0x0, @dev}, 0x10) 14:57:28 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000980)='io\x00') perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000500)=[{&(0x7f0000000100)=""/53, 0x35}], 0x1, 0x0, 0x0) 14:57:28 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = pidfd_open(r0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4442, 0x0) pidfd_getfd(r1, r2, 0x0) 14:57:28 executing program 4: r0 = gettid() getpriority(0x0, r0) 14:57:28 executing program 1: r0 = mq_open(&(0x7f00000001c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3y\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98\xe6`k9D\xca\xd5\xd0s\xb5!.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\x00'/124, 0x41, 0x0, 0x0) mq_timedreceive(r0, 0x0, 0x0, 0x0, 0x0) 14:57:28 executing program 0: r0 = socket$inet(0x2, 0x3, 0x26) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f00000001c0)=0x5, 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x2, 0x0, @dev}, 0x10) 14:57:28 executing program 2: syz_mount_image$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', 0x0) 14:57:28 executing program 1: r0 = socket$inet(0x2, 0x3, 0x26) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f00000001c0)=0x5, 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x2, 0x0, @dev}, 0x10) 14:57:28 executing program 5: r0 = socket$inet(0x2, 0x3, 0x26) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f00000001c0)=0x5, 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x2, 0x0, @dev}, 0x10) 14:57:28 executing program 3: io_submit(0x0, 0x1, &(0x7f0000000300)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040)="5399593869b613a522b989d472a0e52a11", 0x11}]) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x400454da, 0x0) 14:57:28 executing program 7: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000), 0x6) close_range(r0, 0xffffffffffffffff, 0x0) 14:57:28 executing program 4: r0 = gettid() getpriority(0x0, r0) 14:57:28 executing program 0: r0 = socket$inet(0x2, 0x3, 0x26) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f00000001c0)=0x5, 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x2, 0x0, @dev}, 0x10) 14:57:28 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000980)='io\x00') perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000500)=[{&(0x7f0000000100)=""/53, 0x35}], 0x1, 0x0, 0x0) 14:57:28 executing program 1: r0 = socket$inet(0x2, 0x3, 0x26) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f00000001c0)=0x5, 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x2, 0x0, @dev}, 0x10) 14:57:28 executing program 0: r0 = socket$inet(0x2, 0x3, 0x26) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f00000001c0)=0x5, 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x2, 0x0, @dev}, 0x10) 14:57:28 executing program 2: syz_emit_ethernet(0x46, &(0x7f0000000140)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "409d26", 0x10, 0x88, 0x0, @private0, @local, {[@fragment={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68}], {0x0, 0x0, 0x8}}}}}}, 0x0) 14:57:28 executing program 1: r0 = socket$inet(0x2, 0x3, 0x26) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f00000001c0)=0x5, 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x2, 0x0, @dev}, 0x10) 14:57:28 executing program 4: r0 = gettid() getpriority(0x0, r0) 14:57:28 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000980)='io\x00') perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000500)=[{&(0x7f0000000100)=""/53, 0x35}], 0x1, 0x0, 0x0) 14:57:28 executing program 5: r0 = socket$inet(0x2, 0x3, 0x26) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f00000001c0)=0x5, 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x2, 0x0, @dev}, 0x10) 14:57:28 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) io_setup(0xfff, &(0x7f0000000040)) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x49, &(0x7f0000000080)=0x68bbd9b0592ebacf, 0x4) 14:57:28 executing program 3: io_submit(0x0, 0x1, &(0x7f0000000300)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040)="5399593869b613a522b989d472a0e52a11", 0x11}]) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x400454da, 0x0) 14:57:28 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000000)=0x1f, 0x4) 14:57:28 executing program 2: syz_emit_ethernet(0x46, &(0x7f0000000140)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "409d26", 0x10, 0x88, 0x0, @private0, @local, {[@fragment={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68}], {0x0, 0x0, 0x8}}}}}}, 0x0) 14:57:28 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@getspdinfo={0x14, 0x24, 0x1}, 0x14}}, 0x0) 14:57:28 executing program 2: syz_emit_ethernet(0x46, &(0x7f0000000140)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "409d26", 0x10, 0x88, 0x0, @private0, @local, {[@fragment={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68}], {0x0, 0x0, 0x8}}}}}}, 0x0) 14:57:29 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@getspdinfo={0x14, 0x24, 0x1}, 0x14}}, 0x0) 14:57:29 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000000)=0x1f, 0x4) 14:57:29 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth0_to_batadv\x00'}) kexec_load(0x0, 0x1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x10000}], 0x0) 14:57:29 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@getspdinfo={0x14, 0x24, 0x1}, 0x14}}, 0x0) 14:57:29 executing program 4: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xb) 14:57:29 executing program 3: io_submit(0x0, 0x1, &(0x7f0000000300)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040)="5399593869b613a522b989d472a0e52a11", 0x11}]) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x400454da, 0x0) 14:57:29 executing program 2: syz_emit_ethernet(0x46, &(0x7f0000000140)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "409d26", 0x10, 0x88, 0x0, @private0, @local, {[@fragment={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68}], {0x0, 0x0, 0x8}}}}}}, 0x0) 14:57:29 executing program 6: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x0) keyctl$get_security(0x11, r0, 0x0, 0x0) 14:57:29 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000000)=0x1f, 0x4) 14:57:29 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth0_to_batadv\x00'}) kexec_load(0x0, 0x1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x10000}], 0x0) 14:57:29 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) io_setup(0xfff, &(0x7f0000000040)) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x49, &(0x7f0000000080)=0x68bbd9b0592ebacf, 0x4) [ 137.674524] audit: type=1400 audit(1768575449.242:10): avc: denied { read } for pid=4172 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 14:57:29 executing program 6: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x0) keyctl$get_security(0x11, r0, 0x0, 0x0) 14:57:29 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth0_to_batadv\x00'}) kexec_load(0x0, 0x1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x10000}], 0x0) 14:57:29 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) io_setup(0xfff, &(0x7f0000000040)) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x49, &(0x7f0000000080)=0x68bbd9b0592ebacf, 0x4) 14:57:29 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@getspdinfo={0x14, 0x24, 0x1}, 0x14}}, 0x0) [ 137.772296] ------------[ cut here ]------------ [ 137.773027] WARNING: kernel/rcu/tree_exp.h:803 at rcu_exp_handler+0x12b/0x570, CPU#1: syz-executor.6/4185 [ 137.774509] Modules linked in: [ 137.775060] CPU: 1 UID: 0 PID: 4185 Comm: syz-executor.6 Tainted: G W 6.19.0-rc5-next-20260116 #1 PREEMPT(lazy) [ 137.776704] Tainted: [W]=WARN [ 137.777152] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 137.778315] RIP: 0010:rcu_exp_handler+0x12b/0x570 [ 137.779149] Code: 03 0f b6 04 02 4c 89 e2 83 e2 07 38 d0 7f 08 84 c0 0f 85 cb 03 00 00 0f b6 43 11 84 c0 75 b6 85 c9 74 1d 0f 8f bf 00 00 00 90 <0f> 0b 90 48 83 c4 10 5b 5d 41 5c 41 5d 41 5e 41 5f e9 6f d7 74 03 [ 137.781707] RSP: 0018:ffff88806cf08f50 EFLAGS: 00010086 [ 137.782468] RAX: 0000000000000000 RBX: ffff88806cf38800 RCX: 00000000ffffffff [ 137.783489] RDX: 0000000000000001 RSI: ffff888049690000 RDI: ffff8880496903fc [ 137.784496] RBP: ffffffff85e31300 R08: 0000000000000000 R09: fffffbfff0ccdd0a [ 137.785508] R10: 0000000000000001 R11: ffff88806cf08ff8 R12: ffff88806cf38811 [ 137.786516] R13: ffff88806cf38828 R14: ffffffff85e31378 R15: ffff88806cf38820 [ 137.787546] FS: 000055557c5d7400(0000) GS:ffff8880e5442000(0000) knlGS:0000000000000000 [ 137.788691] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 137.789528] CR2: 00007efc9f7b7546 CR3: 000000000bbf6000 CR4: 0000000000350ef0 [ 137.790542] Call Trace: [ 137.790982] [ 137.792787] __flush_smp_call_function_queue+0x47e/0xef0 [ 137.793943] ? __pfx_rcu_exp_handler+0x10/0x10 [ 137.796032] __sysvec_call_function_single+0x6d/0x310 [ 137.797153] sysvec_call_function_single+0xa1/0xc0 [ 137.798257] [ 137.798589] [ 137.799481] asm_sysvec_call_function_single+0x1a/0x20 [ 137.800423] RIP: 0010:finish_task_switch.isra.0+0x204/0x840 [ 137.801355] Code: e7 48 c7 03 00 00 00 00 e8 19 dc 89 03 4d 85 f6 75 ba 49 8d 7c 24 48 e8 9a be 89 03 e8 85 23 36 00 fb 65 48 8b 1d 34 05 66 06 <48> 8d bb b8 14 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 [ 137.803925] RSP: 0018:ffff88804cb17850 EFLAGS: 00000246 [ 137.804690] RAX: 0000000000000001 RBX: ffff888049690000 RCX: ffffffff817dfeab [ 137.805702] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff8147dadb [ 137.806725] RBP: ffff88804cb17898 R08: 0000000000000000 R09: 0000000000000000 [ 137.807754] R10: ffffffff8666e857 R11: 0000000000000000 R12: ffff88806cf379c0 [ 137.808763] R13: ffff88801c1f9b80 R14: ffff88806cf37a20 R15: 0000000000000000 [ 137.811812] ? trace_hardirqs_on+0x4b/0x110 [ 137.812933] ? finish_task_switch.isra.0+0x1fb/0x840 [ 137.816618] __schedule+0xfb9/0x4680 [ 137.820135] ? __pfx___schedule+0x10/0x10 [ 137.820868] ? lock_acquire+0x18c/0x2d0 [ 137.822499] ? lock_release+0x1c7/0x270 [ 137.824685] schedule+0xdb/0x390 [ 137.826114] __wait_on_freeing_inode+0x2e7/0x350 [ 137.827370] ? __pfx___wait_on_freeing_inode+0x10/0x10 [ 137.829352] ? __pfx_var_wake_function+0x10/0x10 [ 137.830914] ? __pfx_inode_set_ctime_current+0x10/0x10 [ 137.833841] insert_inode_locked+0x25f/0x890 [ 137.836891] __ext4_new_inode+0x223d/0x4cd0 [ 137.841558] ? __pfx___ext4_new_inode+0x10/0x10 [ 137.843816] ? __pfx___dquot_initialize+0x10/0x10 [ 137.845185] ? __pfx_avc_has_perm+0x10/0x10 [ 137.848494] ext4_symlink+0x623/0xb40 [ 137.852708] ? __pfx_ext4_symlink+0x10/0x10 [ 137.854544] ? security_inode_permission+0x72/0xe0 [ 137.857538] vfs_symlink+0x44b/0x840 [ 137.859897] filename_symlinkat+0x158/0x440 [ 137.861955] ? __pfx_filename_symlinkat+0x10/0x10 [ 137.863309] ? strncpy_from_user+0x21b/0x2f0 [ 137.866791] __x64_sys_symlink+0x82/0x110 [ 137.868102] do_syscall_64+0xbf/0x420 [ 137.869561] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.870455] RIP: 0033:0x7efc9f737427 [ 137.871109] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 58 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 137.873564] RSP: 002b:00007ffe817023b8 EFLAGS: 00000206 ORIG_RAX: 0000000000000058 [ 137.874599] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007efc9f737427 [ 137.875577] RDX: 00007ffe81702493 RSI: 00007efc9f792022 RDI: 00007ffe81702480 [ 137.876542] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007ffe81702250 [ 137.877503] R10: 00007ffe81702107 R11: 0000000000000206 R12: 0000000000000001 [ 137.878467] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffe81702480 [ 137.883267] [ 137.883597] irq event stamp: 0 [ 137.884039] hardirqs last enabled at (0): [<0000000000000000>] 0x0 [ 137.885025] hardirqs last disabled at (0): [] copy_process+0x1ced/0x7150 [ 137.886262] softirqs last enabled at (0): [] copy_process+0x1d3d/0x7150 [ 137.887500] softirqs last disabled at (0): [<0000000000000000>] 0x0 [ 137.888471] ---[ end trace 0000000000000000 ]--- 14:57:29 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000000)=0x1f, 0x4) 14:57:29 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth0_to_batadv\x00'}) kexec_load(0x0, 0x1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x10000}], 0x0) 14:57:29 executing program 3: io_submit(0x0, 0x1, &(0x7f0000000300)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040)="5399593869b613a522b989d472a0e52a11", 0x11}]) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x400454da, 0x0) 14:57:29 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) io_setup(0xfff, &(0x7f0000000040)) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x49, &(0x7f0000000080)=0x68bbd9b0592ebacf, 0x4) 14:57:29 executing program 1: r0 = socket$nl_audit(0x10, 0x3, 0x9) getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0x3c, 0x0, &(0x7f0000000440)) VM DIAGNOSIS: 14:57:28 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=ffff88806cf3d280 RCX=ffffffff8169dc2a RDX=ffff88801691b700 RSI=ffffffff8169dc04 RDI=0000000000000005 RBP=0000000000000003 RSP=ffff888016397988 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=ffffed100d9e7a51 R13=ffff88806cf3d288 R14=0000000000000001 R15=dffffc0000000000 RIP=ffffffff8169dc06 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 000055557f453400 00000000 00000000 GS =0000 ffff8880e5342000 00000000 00000000 LDT=0000 fffffe6d00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000001b2cd25000 CR3=000000000c046000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ffffffff812d0accffffffff812d0ac0 XMM01=ffffffff812d0b41ffffffff812d0b18 XMM02=ffffffff8136b6b0ffffffff81369480 XMM03=ffffffff81368645ffffffff812d0b41 XMM04=ffffffff81404b11ffffffff8140493a XMM05=ffffffff8140491effffffff81404887 XMM06=ffffffff812d0b41ffffffff812d0b18 XMM07=ffffffff812d0accffffffff812d0ac0 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000030 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff82975135 RDI=ffffffff889c19e0 RBP=ffffffff889c19a0 RSP=ffff88804ca0f488 R8 =0000000000000000 R9 =ffffed1001767046 R10=0000000000000030 R11=666666203a302320 R12=0000000000000030 R13=0000000000000010 R14=ffffffff889c19a0 R15=ffffffff82975120 RIP=ffffffff8297518d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000555591068400 00000000 00000000 GS =0000 ffff8880e5442000 00000000 00000000 LDT=0000 fffffe4f00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000555591068708 CR3=000000004c09f000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000a60ce07b00000000cec3662e XMM01=000000000000000003515b82db34ca11 XMM02=0000000000000000333bebdfd0a6a21d XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000