Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:62868' (ECDSA) to the list of known hosts. 2026/01/16 15:24:38 fuzzer started 2026/01/16 15:24:39 dialing manager at localhost:42157 syzkaller login: [ 52.148385] cgroup: Unknown subsys name 'net' [ 52.229255] cgroup: Unknown subsys name 'cpuset' [ 52.249187] cgroup: Unknown subsys name 'rlimit' 2026/01/16 15:24:48 syscalls: 2214 2026/01/16 15:24:48 code coverage: enabled 2026/01/16 15:24:48 comparison tracing: enabled 2026/01/16 15:24:48 extra coverage: enabled 2026/01/16 15:24:48 setuid sandbox: enabled 2026/01/16 15:24:48 namespace sandbox: enabled 2026/01/16 15:24:48 Android sandbox: enabled 2026/01/16 15:24:48 fault injection: enabled 2026/01/16 15:24:48 leak checking: enabled 2026/01/16 15:24:48 net packet injection: enabled 2026/01/16 15:24:48 net device setup: enabled 2026/01/16 15:24:48 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2026/01/16 15:24:48 devlink PCI setup: PCI device 0000:00:10.0 is not available 2026/01/16 15:24:48 USB emulation: enabled 2026/01/16 15:24:48 hci packet injection: enabled 2026/01/16 15:24:48 wifi device emulation: enabled 2026/01/16 15:24:48 802.15.4 emulation: enabled 2026/01/16 15:24:48 fetching corpus: 0, signal 0/2000 (executing program) 2026/01/16 15:24:48 fetching corpus: 46, signal 26689/30251 (executing program) 2026/01/16 15:24:49 fetching corpus: 94, signal 42488/47397 (executing program) 2026/01/16 15:24:49 fetching corpus: 144, signal 50760/57008 (executing program) 2026/01/16 15:24:49 fetching corpus: 194, signal 56694/64275 (executing program) 2026/01/16 15:24:49 fetching corpus: 244, signal 61402/70274 (executing program) 2026/01/16 15:24:49 fetching corpus: 294, signal 66900/76937 (executing program) 2026/01/16 15:24:49 fetching corpus: 344, signal 69870/81121 (executing program) 2026/01/16 15:24:49 fetching corpus: 394, signal 73921/86265 (executing program) 2026/01/16 15:24:49 fetching corpus: 443, signal 76945/90443 (executing program) 2026/01/16 15:24:49 fetching corpus: 493, signal 80185/94763 (executing program) 2026/01/16 15:24:49 fetching corpus: 543, signal 83748/99354 (executing program) 2026/01/16 15:24:49 fetching corpus: 593, signal 85626/102304 (executing program) 2026/01/16 15:24:50 fetching corpus: 643, signal 87364/105121 (executing program) 2026/01/16 15:24:50 fetching corpus: 693, signal 90061/108735 (executing program) 2026/01/16 15:24:50 fetching corpus: 743, signal 91647/111349 (executing program) 2026/01/16 15:24:50 fetching corpus: 793, signal 94340/114898 (executing program) 2026/01/16 15:24:50 fetching corpus: 843, signal 96506/117932 (executing program) 2026/01/16 15:24:50 fetching corpus: 893, signal 98411/120727 (executing program) 2026/01/16 15:24:50 fetching corpus: 943, signal 101372/124352 (executing program) 2026/01/16 15:24:50 fetching corpus: 993, signal 102851/126708 (executing program) 2026/01/16 15:24:50 fetching corpus: 1042, signal 104986/129591 (executing program) 2026/01/16 15:24:51 fetching corpus: 1092, signal 106294/131784 (executing program) 2026/01/16 15:24:51 fetching corpus: 1142, signal 108753/134834 (executing program) 2026/01/16 15:24:51 fetching corpus: 1192, signal 110907/137585 (executing program) 2026/01/16 15:24:51 fetching corpus: 1242, signal 111830/139375 (executing program) 2026/01/16 15:24:51 fetching corpus: 1292, signal 113322/141597 (executing program) 2026/01/16 15:24:51 fetching corpus: 1342, signal 114752/143730 (executing program) 2026/01/16 15:24:51 fetching corpus: 1392, signal 116536/146077 (executing program) 2026/01/16 15:24:51 fetching corpus: 1442, signal 117978/148156 (executing program) 2026/01/16 15:24:51 fetching corpus: 1490, signal 119900/150596 (executing program) 2026/01/16 15:24:52 fetching corpus: 1540, signal 121373/152672 (executing program) 2026/01/16 15:24:52 fetching corpus: 1590, signal 122358/154382 (executing program) 2026/01/16 15:24:52 fetching corpus: 1639, signal 124957/157200 (executing program) 2026/01/16 15:24:52 fetching corpus: 1689, signal 126653/159347 (executing program) 2026/01/16 15:24:52 fetching corpus: 1738, signal 128182/161397 (executing program) 2026/01/16 15:24:52 fetching corpus: 1787, signal 129678/163372 (executing program) 2026/01/16 15:24:52 fetching corpus: 1837, signal 131778/165707 (executing program) 2026/01/16 15:24:52 fetching corpus: 1886, signal 133013/167421 (executing program) 2026/01/16 15:24:52 fetching corpus: 1936, signal 134263/169147 (executing program) 2026/01/16 15:24:53 fetching corpus: 1986, signal 135417/170749 (executing program) 2026/01/16 15:24:53 fetching corpus: 2036, signal 136616/172381 (executing program) 2026/01/16 15:24:53 fetching corpus: 2085, signal 137283/173625 (executing program) 2026/01/16 15:24:53 fetching corpus: 2135, signal 138113/174941 (executing program) 2026/01/16 15:24:53 fetching corpus: 2185, signal 138990/176318 (executing program) 2026/01/16 15:24:53 fetching corpus: 2235, signal 140287/177952 (executing program) 2026/01/16 15:24:53 fetching corpus: 2284, signal 141390/179372 (executing program) 2026/01/16 15:24:53 fetching corpus: 2334, signal 142566/180886 (executing program) 2026/01/16 15:24:54 fetching corpus: 2384, signal 143587/182298 (executing program) 2026/01/16 15:24:54 fetching corpus: 2434, signal 144522/183564 (executing program) 2026/01/16 15:24:54 fetching corpus: 2484, signal 145567/184978 (executing program) 2026/01/16 15:24:54 fetching corpus: 2533, signal 146827/186470 (executing program) 2026/01/16 15:24:54 fetching corpus: 2583, signal 147623/187649 (executing program) 2026/01/16 15:24:54 fetching corpus: 2632, signal 148579/188911 (executing program) 2026/01/16 15:24:54 fetching corpus: 2682, signal 149601/190170 (executing program) 2026/01/16 15:24:54 fetching corpus: 2731, signal 150372/191316 (executing program) 2026/01/16 15:24:55 fetching corpus: 2781, signal 151378/192594 (executing program) 2026/01/16 15:24:55 fetching corpus: 2831, signal 152140/193721 (executing program) 2026/01/16 15:24:55 fetching corpus: 2881, signal 152695/194668 (executing program) 2026/01/16 15:24:55 fetching corpus: 2931, signal 153858/195956 (executing program) 2026/01/16 15:24:55 fetching corpus: 2981, signal 154951/197165 (executing program) 2026/01/16 15:24:55 fetching corpus: 3031, signal 155921/198339 (executing program) 2026/01/16 15:24:55 fetching corpus: 3081, signal 156729/199477 (executing program) 2026/01/16 15:24:56 fetching corpus: 3131, signal 157426/200499 (executing program) 2026/01/16 15:24:56 fetching corpus: 3181, signal 158419/201609 (executing program) 2026/01/16 15:24:56 fetching corpus: 3231, signal 159158/202567 (executing program) 2026/01/16 15:24:56 fetching corpus: 3281, signal 160385/203759 (executing program) 2026/01/16 15:24:56 fetching corpus: 3330, signal 161408/204776 (executing program) 2026/01/16 15:24:56 fetching corpus: 3380, signal 162333/205782 (executing program) 2026/01/16 15:24:56 fetching corpus: 3430, signal 162834/206623 (executing program) 2026/01/16 15:24:56 fetching corpus: 3480, signal 163443/207452 (executing program) 2026/01/16 15:24:56 fetching corpus: 3530, signal 164058/208322 (executing program) 2026/01/16 15:24:57 fetching corpus: 3580, signal 164745/209221 (executing program) 2026/01/16 15:24:57 fetching corpus: 3630, signal 165303/210033 (executing program) 2026/01/16 15:24:57 fetching corpus: 3680, signal 165889/210875 (executing program) 2026/01/16 15:24:57 fetching corpus: 3729, signal 166570/211692 (executing program) 2026/01/16 15:24:57 fetching corpus: 3779, signal 167250/212524 (executing program) 2026/01/16 15:24:57 fetching corpus: 3829, signal 167893/213316 (executing program) 2026/01/16 15:24:57 fetching corpus: 3878, signal 168512/214112 (executing program) 2026/01/16 15:24:57 fetching corpus: 3928, signal 169196/214925 (executing program) 2026/01/16 15:24:57 fetching corpus: 3978, signal 169648/215631 (executing program) 2026/01/16 15:24:58 fetching corpus: 4028, signal 170236/216441 (executing program) 2026/01/16 15:24:58 fetching corpus: 4077, signal 170887/217220 (executing program) 2026/01/16 15:24:58 fetching corpus: 4126, signal 171536/217941 (executing program) 2026/01/16 15:24:58 fetching corpus: 4176, signal 172053/218640 (executing program) 2026/01/16 15:24:58 fetching corpus: 4225, signal 172694/219335 (executing program) 2026/01/16 15:24:58 fetching corpus: 4275, signal 173264/219992 (executing program) 2026/01/16 15:24:58 fetching corpus: 4325, signal 173829/220653 (executing program) 2026/01/16 15:24:58 fetching corpus: 4375, signal 174329/221293 (executing program) 2026/01/16 15:24:58 fetching corpus: 4425, signal 174913/221942 (executing program) 2026/01/16 15:24:59 fetching corpus: 4475, signal 175351/222590 (executing program) 2026/01/16 15:24:59 fetching corpus: 4525, signal 175861/223213 (executing program) 2026/01/16 15:24:59 fetching corpus: 4575, signal 176365/223821 (executing program) 2026/01/16 15:24:59 fetching corpus: 4625, signal 176775/224410 (executing program) 2026/01/16 15:24:59 fetching corpus: 4675, signal 177291/224997 (executing program) 2026/01/16 15:24:59 fetching corpus: 4725, signal 177811/225602 (executing program) 2026/01/16 15:24:59 fetching corpus: 4775, signal 178349/226191 (executing program) 2026/01/16 15:24:59 fetching corpus: 4825, signal 178802/226754 (executing program) 2026/01/16 15:24:59 fetching corpus: 4875, signal 179281/227336 (executing program) 2026/01/16 15:25:00 fetching corpus: 4924, signal 179795/227891 (executing program) 2026/01/16 15:25:00 fetching corpus: 4973, signal 180279/228491 (executing program) 2026/01/16 15:25:00 fetching corpus: 5021, signal 180569/229031 (executing program) 2026/01/16 15:25:00 fetching corpus: 5071, signal 181437/229624 (executing program) 2026/01/16 15:25:00 fetching corpus: 5121, signal 182030/230170 (executing program) 2026/01/16 15:25:00 fetching corpus: 5169, signal 182523/230692 (executing program) 2026/01/16 15:25:00 fetching corpus: 5218, signal 182880/231213 (executing program) 2026/01/16 15:25:00 fetching corpus: 5268, signal 183472/231726 (executing program) 2026/01/16 15:25:01 fetching corpus: 5318, signal 184021/232233 (executing program) 2026/01/16 15:25:01 fetching corpus: 5368, signal 184549/232682 (executing program) 2026/01/16 15:25:01 fetching corpus: 5418, signal 185035/233152 (executing program) 2026/01/16 15:25:01 fetching corpus: 5467, signal 185527/233628 (executing program) 2026/01/16 15:25:01 fetching corpus: 5517, signal 186065/234112 (executing program) 2026/01/16 15:25:01 fetching corpus: 5567, signal 186527/234556 (executing program) 2026/01/16 15:25:01 fetching corpus: 5617, signal 186842/234975 (executing program) 2026/01/16 15:25:01 fetching corpus: 5667, signal 187164/235436 (executing program) 2026/01/16 15:25:01 fetching corpus: 5715, signal 187415/235883 (executing program) 2026/01/16 15:25:02 fetching corpus: 5765, signal 187736/236270 (executing program) 2026/01/16 15:25:02 fetching corpus: 5815, signal 188108/236271 (executing program) 2026/01/16 15:25:02 fetching corpus: 5865, signal 188568/236271 (executing program) 2026/01/16 15:25:02 fetching corpus: 5915, signal 188935/236272 (executing program) 2026/01/16 15:25:02 fetching corpus: 5965, signal 189253/236272 (executing program) 2026/01/16 15:25:02 fetching corpus: 6015, signal 189646/236274 (executing program) 2026/01/16 15:25:02 fetching corpus: 6065, signal 189969/236274 (executing program) 2026/01/16 15:25:02 fetching corpus: 6115, signal 190248/236283 (executing program) 2026/01/16 15:25:02 fetching corpus: 6165, signal 190769/236284 (executing program) 2026/01/16 15:25:02 fetching corpus: 6215, signal 191082/236286 (executing program) 2026/01/16 15:25:03 fetching corpus: 6265, signal 191505/236286 (executing program) 2026/01/16 15:25:03 fetching corpus: 6315, signal 191887/236286 (executing program) 2026/01/16 15:25:03 fetching corpus: 6364, signal 192232/236286 (executing program) 2026/01/16 15:25:03 fetching corpus: 6414, signal 192567/236286 (executing program) 2026/01/16 15:25:03 fetching corpus: 6463, signal 192834/236291 (executing program) 2026/01/16 15:25:03 fetching corpus: 6513, signal 193532/236291 (executing program) 2026/01/16 15:25:03 fetching corpus: 6562, signal 193848/236291 (executing program) 2026/01/16 15:25:03 fetching corpus: 6611, signal 194366/236303 (executing program) 2026/01/16 15:25:03 fetching corpus: 6661, signal 194768/236303 (executing program) 2026/01/16 15:25:03 fetching corpus: 6710, signal 195082/236303 (executing program) 2026/01/16 15:25:03 fetching corpus: 6760, signal 195416/236303 (executing program) 2026/01/16 15:25:04 fetching corpus: 6809, signal 195929/236303 (executing program) 2026/01/16 15:25:04 fetching corpus: 6859, signal 196268/236305 (executing program) 2026/01/16 15:25:04 fetching corpus: 6908, signal 196867/236335 (executing program) 2026/01/16 15:25:04 fetching corpus: 6958, signal 197143/236335 (executing program) 2026/01/16 15:25:04 fetching corpus: 7008, signal 197602/236337 (executing program) 2026/01/16 15:25:04 fetching corpus: 7058, signal 197932/236337 (executing program) 2026/01/16 15:25:04 fetching corpus: 7108, signal 198325/236337 (executing program) 2026/01/16 15:25:04 fetching corpus: 7158, signal 198857/236338 (executing program) 2026/01/16 15:25:04 fetching corpus: 7207, signal 199233/236340 (executing program) 2026/01/16 15:25:04 fetching corpus: 7256, signal 199583/236342 (executing program) 2026/01/16 15:25:04 fetching corpus: 7306, signal 199967/236352 (executing program) 2026/01/16 15:25:05 fetching corpus: 7356, signal 200268/236352 (executing program) 2026/01/16 15:25:05 fetching corpus: 7406, signal 200582/236352 (executing program) 2026/01/16 15:25:05 fetching corpus: 7456, signal 200895/236362 (executing program) 2026/01/16 15:25:05 fetching corpus: 7505, signal 201244/236393 (executing program) 2026/01/16 15:25:05 fetching corpus: 7555, signal 201548/236393 (executing program) 2026/01/16 15:25:05 fetching corpus: 7605, signal 201807/236393 (executing program) 2026/01/16 15:25:05 fetching corpus: 7655, signal 202090/236406 (executing program) 2026/01/16 15:25:05 fetching corpus: 7705, signal 202325/236410 (executing program) 2026/01/16 15:25:05 fetching corpus: 7755, signal 202785/236410 (executing program) 2026/01/16 15:25:05 fetching corpus: 7805, signal 203116/236410 (executing program) 2026/01/16 15:25:05 fetching corpus: 7855, signal 203520/236442 (executing program) 2026/01/16 15:25:06 fetching corpus: 7905, signal 203898/236443 (executing program) 2026/01/16 15:25:06 fetching corpus: 7954, signal 204195/236443 (executing program) 2026/01/16 15:25:06 fetching corpus: 8004, signal 204491/236443 (executing program) 2026/01/16 15:25:06 fetching corpus: 8054, signal 204841/236443 (executing program) 2026/01/16 15:25:06 fetching corpus: 8104, signal 205160/236443 (executing program) 2026/01/16 15:25:06 fetching corpus: 8153, signal 205471/236445 (executing program) 2026/01/16 15:25:06 fetching corpus: 8203, signal 205838/236447 (executing program) 2026/01/16 15:25:06 fetching corpus: 8250, signal 206169/236454 (executing program) 2026/01/16 15:25:06 fetching corpus: 8300, signal 206789/236455 (executing program) 2026/01/16 15:25:06 fetching corpus: 8350, signal 207087/236466 (executing program) 2026/01/16 15:25:06 fetching corpus: 8399, signal 207479/236467 (executing program) 2026/01/16 15:25:07 fetching corpus: 8449, signal 207907/236480 (executing program) 2026/01/16 15:25:07 fetching corpus: 8498, signal 208219/236480 (executing program) 2026/01/16 15:25:07 fetching corpus: 8547, signal 208552/236480 (executing program) 2026/01/16 15:25:07 fetching corpus: 8597, signal 208835/236482 (executing program) 2026/01/16 15:25:07 fetching corpus: 8647, signal 209059/236482 (executing program) 2026/01/16 15:25:07 fetching corpus: 8693, signal 209405/236486 (executing program) 2026/01/16 15:25:07 fetching corpus: 8743, signal 209701/236501 (executing program) 2026/01/16 15:25:07 fetching corpus: 8793, signal 210143/236508 (executing program) 2026/01/16 15:25:07 fetching corpus: 8843, signal 210386/236508 (executing program) 2026/01/16 15:25:07 fetching corpus: 8893, signal 210589/236508 (executing program) 2026/01/16 15:25:07 fetching corpus: 8942, signal 210840/236508 (executing program) 2026/01/16 15:25:08 fetching corpus: 8992, signal 211222/236515 (executing program) 2026/01/16 15:25:08 fetching corpus: 9040, signal 211497/236515 (executing program) 2026/01/16 15:25:08 fetching corpus: 9087, signal 211856/236531 (executing program) 2026/01/16 15:25:08 fetching corpus: 9136, signal 212103/236539 (executing program) 2026/01/16 15:25:08 fetching corpus: 9186, signal 212520/236539 (executing program) 2026/01/16 15:25:08 fetching corpus: 9235, signal 212831/236539 (executing program) 2026/01/16 15:25:08 fetching corpus: 9285, signal 213172/236542 (executing program) 2026/01/16 15:25:08 fetching corpus: 9335, signal 213449/236542 (executing program) 2026/01/16 15:25:09 fetching corpus: 9384, signal 213686/236545 (executing program) 2026/01/16 15:25:09 fetching corpus: 9432, signal 213930/236552 (executing program) 2026/01/16 15:25:09 fetching corpus: 9480, signal 214119/236557 (executing program) 2026/01/16 15:25:09 fetching corpus: 9529, signal 214386/236557 (executing program) 2026/01/16 15:25:09 fetching corpus: 9579, signal 214654/236560 (executing program) 2026/01/16 15:25:09 fetching corpus: 9629, signal 214979/236560 (executing program) 2026/01/16 15:25:09 fetching corpus: 9679, signal 215250/236560 (executing program) 2026/01/16 15:25:09 fetching corpus: 9728, signal 215549/236560 (executing program) 2026/01/16 15:25:09 fetching corpus: 9775, signal 215836/236573 (executing program) 2026/01/16 15:25:10 fetching corpus: 9825, signal 216077/236573 (executing program) 2026/01/16 15:25:10 fetching corpus: 9874, signal 216381/236574 (executing program) 2026/01/16 15:25:10 fetching corpus: 9924, signal 216702/236586 (executing program) 2026/01/16 15:25:10 fetching corpus: 9973, signal 216954/236588 (executing program) 2026/01/16 15:25:10 fetching corpus: 10023, signal 217162/236592 (executing program) 2026/01/16 15:25:10 fetching corpus: 10073, signal 217627/236592 (executing program) 2026/01/16 15:25:10 fetching corpus: 10122, signal 217899/236596 (executing program) 2026/01/16 15:25:10 fetching corpus: 10172, signal 218152/236596 (executing program) 2026/01/16 15:25:10 fetching corpus: 10221, signal 218375/236596 (executing program) 2026/01/16 15:25:11 fetching corpus: 10271, signal 218641/236598 (executing program) 2026/01/16 15:25:11 fetching corpus: 10321, signal 218921/236598 (executing program) 2026/01/16 15:25:11 fetching corpus: 10371, signal 219210/236598 (executing program) 2026/01/16 15:25:11 fetching corpus: 10421, signal 219416/236600 (executing program) 2026/01/16 15:25:11 fetching corpus: 10471, signal 219662/236601 (executing program) 2026/01/16 15:25:11 fetching corpus: 10520, signal 219924/236604 (executing program) 2026/01/16 15:25:11 fetching corpus: 10570, signal 220252/236612 (executing program) 2026/01/16 15:25:11 fetching corpus: 10620, signal 220520/236613 (executing program) 2026/01/16 15:25:12 fetching corpus: 10670, signal 220814/236614 (executing program) 2026/01/16 15:25:12 fetching corpus: 10720, signal 221159/236614 (executing program) 2026/01/16 15:25:12 fetching corpus: 10770, signal 221425/236614 (executing program) 2026/01/16 15:25:12 fetching corpus: 10820, signal 221692/236614 (executing program) 2026/01/16 15:25:12 fetching corpus: 10870, signal 221902/236614 (executing program) 2026/01/16 15:25:12 fetching corpus: 10920, signal 222091/236614 (executing program) 2026/01/16 15:25:12 fetching corpus: 10970, signal 222285/236614 (executing program) 2026/01/16 15:25:12 fetching corpus: 11020, signal 222456/236615 (executing program) 2026/01/16 15:25:12 fetching corpus: 11069, signal 222678/236615 (executing program) 2026/01/16 15:25:13 fetching corpus: 11118, signal 223100/236616 (executing program) 2026/01/16 15:25:13 fetching corpus: 11168, signal 223312/236616 (executing program) 2026/01/16 15:25:13 fetching corpus: 11217, signal 223623/236616 (executing program) 2026/01/16 15:25:13 fetching corpus: 11266, signal 223822/236616 (executing program) 2026/01/16 15:25:13 fetching corpus: 11316, signal 224047/236617 (executing program) 2026/01/16 15:25:13 fetching corpus: 11366, signal 224282/236617 (executing program) 2026/01/16 15:25:13 fetching corpus: 11416, signal 224520/236636 (executing program) 2026/01/16 15:25:13 fetching corpus: 11466, signal 224762/236636 (executing program) 2026/01/16 15:25:13 fetching corpus: 11516, signal 225043/236636 (executing program) 2026/01/16 15:25:13 fetching corpus: 11565, signal 225238/236636 (executing program) 2026/01/16 15:25:14 fetching corpus: 11615, signal 225458/236637 (executing program) 2026/01/16 15:25:14 fetching corpus: 11665, signal 225702/236637 (executing program) 2026/01/16 15:25:14 fetching corpus: 11715, signal 226013/236637 (executing program) 2026/01/16 15:25:14 fetching corpus: 11765, signal 226425/236637 (executing program) 2026/01/16 15:25:14 fetching corpus: 11815, signal 226660/236638 (executing program) 2026/01/16 15:25:14 fetching corpus: 11864, signal 226879/236638 (executing program) 2026/01/16 15:25:14 fetching corpus: 11914, signal 227075/236638 (executing program) 2026/01/16 15:25:14 fetching corpus: 11963, signal 227263/236639 (executing program) 2026/01/16 15:25:14 fetching corpus: 12013, signal 227482/236639 (executing program) 2026/01/16 15:25:15 fetching corpus: 12063, signal 227669/236639 (executing program) 2026/01/16 15:25:15 fetching corpus: 12112, signal 227921/236641 (executing program) 2026/01/16 15:25:15 fetching corpus: 12162, signal 228106/236641 (executing program) 2026/01/16 15:25:15 fetching corpus: 12212, signal 228293/236642 (executing program) 2026/01/16 15:25:15 fetching corpus: 12262, signal 228497/236649 (executing program) 2026/01/16 15:25:15 fetching corpus: 12312, signal 228731/236649 (executing program) 2026/01/16 15:25:15 fetching corpus: 12362, signal 228914/236649 (executing program) 2026/01/16 15:25:15 fetching corpus: 12412, signal 229115/236649 (executing program) 2026/01/16 15:25:15 fetching corpus: 12462, signal 229381/236677 (executing program) 2026/01/16 15:25:16 fetching corpus: 12511, signal 229604/236677 (executing program) 2026/01/16 15:25:16 fetching corpus: 12561, signal 229910/236734 (executing program) 2026/01/16 15:25:16 fetching corpus: 12611, signal 230141/236734 (executing program) 2026/01/16 15:25:16 fetching corpus: 12661, signal 230391/236734 (executing program) 2026/01/16 15:25:16 fetching corpus: 12711, signal 230645/236735 (executing program) 2026/01/16 15:25:16 fetching corpus: 12761, signal 230794/236735 (executing program) 2026/01/16 15:25:16 fetching corpus: 12811, signal 230976/236735 (executing program) 2026/01/16 15:25:16 fetching corpus: 12861, signal 231246/236735 (executing program) 2026/01/16 15:25:16 fetching corpus: 12911, signal 231405/236739 (executing program) 2026/01/16 15:25:16 fetching corpus: 12960, signal 231624/236740 (executing program) 2026/01/16 15:25:17 fetching corpus: 13010, signal 231800/236740 (executing program) 2026/01/16 15:25:17 fetching corpus: 13060, signal 231979/236744 (executing program) 2026/01/16 15:25:17 fetching corpus: 13110, signal 232205/236744 (executing program) 2026/01/16 15:25:17 fetching corpus: 13159, signal 232526/236744 (executing program) 2026/01/16 15:25:17 fetching corpus: 13209, signal 232731/236744 (executing program) 2026/01/16 15:25:17 fetching corpus: 13259, signal 232944/236744 (executing program) 2026/01/16 15:25:17 fetching corpus: 13309, signal 233169/236745 (executing program) 2026/01/16 15:25:17 fetching corpus: 13359, signal 233302/236745 (executing program) 2026/01/16 15:25:18 fetching corpus: 13409, signal 233512/236745 (executing program) 2026/01/16 15:25:18 fetching corpus: 13459, signal 233751/236747 (executing program) 2026/01/16 15:25:18 fetching corpus: 13509, signal 233930/236747 (executing program) 2026/01/16 15:25:18 fetching corpus: 13559, signal 234079/236748 (executing program) 2026/01/16 15:25:18 fetching corpus: 13608, signal 234267/236748 (executing program) 2026/01/16 15:25:18 fetching corpus: 13658, signal 234535/236749 (executing program) 2026/01/16 15:25:18 fetching corpus: 13708, signal 234734/236751 (executing program) 2026/01/16 15:25:18 fetching corpus: 13757, signal 234888/236751 (executing program) 2026/01/16 15:25:18 fetching corpus: 13766, signal 234930/236751 (executing program) 2026/01/16 15:25:18 fetching corpus: 13766, signal 234930/236751 (executing program) 2026/01/16 15:25:20 starting 8 fuzzer processes 15:25:20 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r0, &(0x7f00000067c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) sendmmsg$inet6(r0, &(0x7f0000003040)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="db4d31d6805ecdac87307b14c169d9d9", 0x7ffff000}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000a00)='m', 0x1}], 0x1}}], 0x3, 0x44894) 15:25:20 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r1, 0x4, 0x2800) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000001080)="c3", 0x1}], 0x1, 0x0) splice(r0, 0x0, r2, 0x0, 0x802, 0x0) 15:25:20 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000180)={0x34, r3, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]]}, 0x34}}, 0x0) 15:25:20 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000002c0)={0x20, 0x19, 0x1, 0x0, 0x0, "", [@generic="02", @nested={0xc, 0x0, 0x0, 0x0, [@typed={0x8, 0x0, 0x0, 0x0, @u32}]}]}, 0x20}], 0x1}, 0x0) 15:25:21 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x82100, 0x0) fcntl$setstatus(r0, 0x4, 0x0) [ 93.903294] audit: type=1400 audit(1768577121.014:7): avc: denied { execmem } for pid=277 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 15:25:21 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000002c0)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000080)={[{@data_ordered}]}) 15:25:21 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x3, 0x0, 0x0) 15:25:21 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000100)=0xd) [ 95.085878] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 95.092477] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 95.094606] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 95.101492] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 95.104551] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 95.153823] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 95.159470] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 95.161400] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 95.163701] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 95.165230] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 95.168202] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 95.173415] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 95.175525] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 95.177523] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 95.183370] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 95.192550] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 95.201245] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 95.204281] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 95.207012] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 95.211517] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 95.245285] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 95.248923] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 95.250942] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 95.264475] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 95.266438] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 95.291673] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 95.299149] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 95.303933] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 95.307098] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 95.320347] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 95.321841] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 95.325874] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 95.327685] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 95.334609] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 95.337722] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 95.339027] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 95.342041] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 95.343893] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 95.349508] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 95.356327] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 97.181867] Bluetooth: hci0: command tx timeout [ 97.246875] Bluetooth: hci2: command tx timeout [ 97.246951] Bluetooth: hci3: command tx timeout [ 97.247756] Bluetooth: hci1: command tx timeout [ 97.373805] Bluetooth: hci5: command tx timeout [ 97.374153] Bluetooth: hci7: command tx timeout [ 97.375618] Bluetooth: hci4: command tx timeout [ 97.437961] Bluetooth: hci6: command tx timeout [ 99.231236] Bluetooth: hci0: command tx timeout [ 99.293435] Bluetooth: hci1: command tx timeout [ 99.294567] Bluetooth: hci3: command tx timeout [ 99.294946] Bluetooth: hci2: command tx timeout [ 99.422219] Bluetooth: hci4: command tx timeout [ 99.422603] Bluetooth: hci7: command tx timeout [ 99.422975] Bluetooth: hci5: command tx timeout [ 99.486439] Bluetooth: hci6: command tx timeout [ 101.277149] Bluetooth: hci0: command tx timeout [ 101.341192] Bluetooth: hci2: command tx timeout [ 101.341559] Bluetooth: hci3: command tx timeout [ 101.341619] Bluetooth: hci1: command tx timeout [ 101.469246] Bluetooth: hci5: command tx timeout [ 101.469647] Bluetooth: hci4: command tx timeout [ 101.470146] Bluetooth: hci7: command tx timeout [ 101.533156] Bluetooth: hci6: command tx timeout [ 103.325888] Bluetooth: hci0: command tx timeout [ 103.389681] Bluetooth: hci1: command tx timeout [ 103.390083] Bluetooth: hci3: command tx timeout [ 103.390497] Bluetooth: hci2: command tx timeout [ 103.517230] Bluetooth: hci7: command tx timeout [ 103.517636] Bluetooth: hci4: command tx timeout [ 103.518010] Bluetooth: hci5: command tx timeout [ 103.581156] Bluetooth: hci6: command tx timeout [ 127.607882] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.608526] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.718413] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.718983] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.017741] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.018402] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.067356] audit: type=1400 audit(1768577155.178:8): avc: denied { open } for pid=3869 comm="syz-executor.7" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 128.068902] audit: type=1400 audit(1768577155.178:9): avc: denied { kernel } for pid=3869 comm="syz-executor.7" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 128.076264] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.076882] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.090761] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.090790] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 15:25:55 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000100)=0xd) [ 128.158448] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.159034] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.208939] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.210244] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 15:25:55 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000100)=0xd) 15:25:55 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000100)=0xd) [ 128.293138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.293753] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.304905] loop5: detected capacity change from 0 to 4 [ 128.315246] EXT4-fs (loop5): bad geometry: block count 256 exceeds size of device (2 blocks) [ 128.321553] loop5: detected capacity change from 0 to 4 [ 128.323032] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 128.327751] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 128.329147] EXT4-fs (loop5): bad geometry: block count 256 exceeds size of device (2 blocks) 15:25:55 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000002c0)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000080)={[{@data_ordered}]}) 15:25:55 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000002c0)={0x20, 0x19, 0x1, 0x0, 0x0, "", [@generic="02", @nested={0xc, 0x0, 0x0, 0x0, [@typed={0x8, 0x0, 0x0, 0x0, @u32}]}]}, 0x20}], 0x1}, 0x0) [ 128.385845] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.386979] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.396559] loop5: detected capacity change from 0 to 4 [ 128.400664] EXT4-fs (loop5): bad geometry: block count 256 exceeds size of device (2 blocks) [ 128.406175] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 128.429234] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.429802] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 15:25:55 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000002c0)={0x20, 0x19, 0x1, 0x0, 0x0, "", [@generic="02", @nested={0xc, 0x0, 0x0, 0x0, [@typed={0x8, 0x0, 0x0, 0x0, @u32}]}]}, 0x20}], 0x1}, 0x0) 15:25:55 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)={0x14, 0x76, 0xffffffffffffffff, 0x0, 0x0, "", [@generic="02"]}, 0x14}], 0x1}, 0x0) 15:25:55 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000002c0)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000080)={[{@data_ordered}]}) [ 128.445143] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 128.456271] loop5: detected capacity change from 0 to 4 [ 128.458313] EXT4-fs (loop5): bad geometry: block count 256 exceeds size of device (2 blocks) [ 128.519634] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.520282] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.541872] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.542555] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.569791] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.570559] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.613236] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.613847] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.636213] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.636781] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.649631] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.650428] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 15:25:56 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000002c0)={0x20, 0x19, 0x1, 0x0, 0x0, "", [@generic="02", @nested={0xc, 0x0, 0x0, 0x0, [@typed={0x8, 0x0, 0x0, 0x0, @u32}]}]}, 0x20}], 0x1}, 0x0) 15:25:56 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000002c0)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000080)={[{@data_ordered}]}) 15:25:56 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r0, &(0x7f00000067c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) sendmmsg$inet6(r0, &(0x7f0000003040)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="db4d31d6805ecdac87307b14c169d9d9", 0x7ffff000}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000a00)='m', 0x1}], 0x1}}], 0x3, 0x44894) 15:25:56 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)={0x14, 0x76, 0xffffffffffffffff, 0x0, 0x0, "", [@generic="02"]}, 0x14}], 0x1}, 0x0) 15:25:56 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f0000001500)=[{{&(0x7f0000000a80)={0x2, 0x4e25, @empty}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=[@ip_retopts={{0x34, 0x0, 0x7, {[@timestamp_addr={0x44, 0x24, 0x1d, 0x1, 0x0, [{@local}, {}, {@remote}, {@multicast1}]}]}}}], 0x38}}], 0x1, 0x0) 15:25:56 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x11000)=nil, 0x11000, 0x0, 0x44032, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0) 15:25:56 executing program 1: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "5eff720600"}) sigaltstack(&(0x7f0000000000/0x1000)=nil, 0x0) 15:25:56 executing program 6: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSTAT(r2, &(0x7f00000000c0)=ANY=[], 0x43) tee(r1, r3, 0x20000000a, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) [ 129.533834] loop5: detected capacity change from 0 to 4 [ 129.540755] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 129.541226] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 129.555726] EXT4-fs (loop5): bad geometry: block count 256 exceeds size of device (2 blocks) 15:25:56 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r0, &(0x7f00000067c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) sendmmsg$inet6(r0, &(0x7f0000003040)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="db4d31d6805ecdac87307b14c169d9d9", 0x7ffff000}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000a00)='m', 0x1}], 0x1}}], 0x3, 0x44894) 15:25:56 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)={0x14, 0x76, 0xffffffffffffffff, 0x0, 0x0, "", [@generic="02"]}, 0x14}], 0x1}, 0x0) 15:25:56 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) clone3(&(0x7f00000003c0)={0x70012000, 0x0, &(0x7f00000000c0), 0x0, {}, &(0x7f0000000140)=""/58, 0x3a, 0x0, &(0x7f00000002c0)=[0xffffffffffffffff, 0x0], 0x2}, 0x58) sendmmsg$inet6(r0, &(0x7f00000056c0)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x0, @empty}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=[@pktinfo={{0x24, 0x29, 0x32, {@loopback}}}], 0x28}}], 0x1, 0x0) 15:25:57 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r0, &(0x7f00000067c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) sendmmsg$inet6(r0, &(0x7f0000003040)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="db4d31d6805ecdac87307b14c169d9d9", 0x7ffff000}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000a00)='m', 0x1}], 0x1}}], 0x3, 0x44894) 15:25:57 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r0, &(0x7f00000067c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) sendmmsg$inet6(r0, &(0x7f0000003040)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="db4d31d6805ecdac87307b14c169d9d9", 0x7ffff000}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000a00)='m', 0x1}], 0x1}}], 0x3, 0x44894) 15:25:57 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x141802, 0x0) ioctl$CDROM_SEND_PACKET(r0, 0x5393, &(0x7f0000000340)={"9aa04bb5181700d0f7d4c0ae", &(0x7f0000000240)='`', 0x20000, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0}) 15:25:57 executing program 6: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSTAT(r2, &(0x7f00000000c0)=ANY=[], 0x43) tee(r1, r3, 0x20000000a, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 15:25:57 executing program 2: r0 = memfd_create(&(0x7f0000001b80)='(\xc8\xf5\x82j\xca', 0x3) ftruncate(r0, 0x10000) fcntl$addseals(r0, 0x409, 0x4) pwrite64(r0, &(0x7f0000000100)="8a", 0x1, 0x0) 15:25:57 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)={0x14, 0x76, 0xffffffffffffffff, 0x0, 0x0, "", [@generic="02"]}, 0x14}], 0x1}, 0x0) 15:25:57 executing program 4: r0 = epoll_create(0x6) r1 = syz_open_dev$rtc(&(0x7f0000000000), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)) 15:25:57 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCXONC(r0, 0x541b, 0x8000000000000) 15:25:57 executing program 3: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='hugetlbfs\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0x4) 15:25:58 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r0, &(0x7f00000067c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) sendmmsg$inet6(r0, &(0x7f0000003040)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="db4d31d6805ecdac87307b14c169d9d9", 0x7ffff000}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000a00)='m', 0x1}], 0x1}}], 0x3, 0x44894) 15:25:58 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x5, 0x0, &(0x7f0000000040)) 15:25:58 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000000c0), 0x1, 0x20982) writev(r0, &(0x7f0000000140)=[{&(0x7f00000001c0)="7811b4162400000000000000925a9eed92a8c20c450000000000000200ffffffff462af69d1bfa35606d117738a70fb2940a545960", 0x35}], 0x1) readv(r0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/69, 0x23}], 0x1) 15:25:58 executing program 5: r0 = fsopen(&(0x7f0000000040)='devpts\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x8, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0xa1) 15:25:58 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r0, &(0x7f00000067c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) sendmmsg$inet6(r0, &(0x7f0000003040)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="db4d31d6805ecdac87307b14c169d9d9", 0x7ffff000}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000a00)='m', 0x1}], 0x1}}], 0x3, 0x44894) 15:25:58 executing program 6: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSTAT(r2, &(0x7f00000000c0)=ANY=[], 0x43) tee(r1, r3, 0x20000000a, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 15:25:58 executing program 4: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) chroot(&(0x7f00000000c0)='./file0\x00') mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000000180)='./file0/../file0\x00', 0x0) 15:25:58 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x28}}, 0x0) 15:25:58 executing program 4: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) chroot(&(0x7f00000000c0)='./file0\x00') mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000000180)='./file0/../file0\x00', 0x0) 15:25:58 executing program 2: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) chroot(&(0x7f00000000c0)='./file0\x00') mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000000180)='./file0/../file0\x00', 0x0) 15:25:58 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000000c0), 0x1, 0x20982) writev(r0, &(0x7f0000000140)=[{&(0x7f00000001c0)="7811b4162400000000000000925a9eed92a8c20c450000000000000200ffffffff462af69d1bfa35606d117738a70fb2940a545960", 0x35}], 0x1) readv(r0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/69, 0x23}], 0x1) 15:25:58 executing program 5: r0 = fsopen(&(0x7f0000000040)='devpts\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x8, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0xa1) 15:25:58 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x28}}, 0x0) 15:25:58 executing program 6: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSTAT(r2, &(0x7f00000000c0)=ANY=[], 0x43) tee(r1, r3, 0x20000000a, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 15:25:58 executing program 4: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) chroot(&(0x7f00000000c0)='./file0\x00') mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000000180)='./file0/../file0\x00', 0x0) 15:25:59 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x28}}, 0x0) 15:25:59 executing program 2: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) chroot(&(0x7f00000000c0)='./file0\x00') mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000000180)='./file0/../file0\x00', 0x0) 15:25:59 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000000c0), 0x1, 0x20982) writev(r0, &(0x7f0000000140)=[{&(0x7f00000001c0)="7811b4162400000000000000925a9eed92a8c20c450000000000000200ffffffff462af69d1bfa35606d117738a70fb2940a545960", 0x35}], 0x1) readv(r0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/69, 0x23}], 0x1) 15:25:59 executing program 4: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) chroot(&(0x7f00000000c0)='./file0\x00') mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000000180)='./file0/../file0\x00', 0x0) 15:25:59 executing program 5: r0 = fsopen(&(0x7f0000000040)='devpts\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x8, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0xa1) 15:25:59 executing program 6: r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) creat(0x0, 0x0) lseek(r0, 0x0, 0x3) 15:25:59 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000001740)={0x1, &(0x7f0000001700)=[{}]}, 0x10) 15:25:59 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) 15:25:59 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x28}}, 0x0) 15:25:59 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[]) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f00000001c0)={0x0, 0x70}, 0x20) 15:25:59 executing program 2: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) chroot(&(0x7f00000000c0)='./file0\x00') mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000000180)='./file0/../file0\x00', 0x0) 15:25:59 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000000c0), 0x1, 0x20982) writev(r0, &(0x7f0000000140)=[{&(0x7f00000001c0)="7811b4162400000000000000925a9eed92a8c20c450000000000000200ffffffff462af69d1bfa35606d117738a70fb2940a545960", 0x35}], 0x1) readv(r0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/69, 0x23}], 0x1) 15:25:59 executing program 0: perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 15:25:59 executing program 5: r0 = fsopen(&(0x7f0000000040)='devpts\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x8, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0xa1) 15:25:59 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, 0x0, &(0x7f0000000040)) 15:25:59 executing program 0: perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 15:25:59 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)={0x14, 0x1a, 0xffffffffffffffff, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) 15:25:59 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[]) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f00000001c0)={0x0, 0x70}, 0x20) 15:26:00 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)={0x14, 0x1a, 0xffffffffffffffff, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) 15:26:00 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[]) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f00000001c0)={0x0, 0x70}, 0x20) 15:26:00 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0x21, &(0x7f0000000000), 0x4) 15:26:00 executing program 0: perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 15:26:00 executing program 7: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private}, {0x8, 0x2, @dev}}}]}]}, 0x38}}, 0x0) 15:26:00 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r0, 0x29, 0x50, 0x0, &(0x7f0000000040)) 15:26:00 executing program 3: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000001200), 0x0, 0x0) ioctl$PTP_SYS_OFFSET_EXTENDED(r0, 0xc4c03d09, 0x0) 15:26:00 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, 0x0, 0x1, 0x5}, 0x14}}, 0x0) recvfrom(r0, 0x0, 0x0, 0x0, &(0x7f0000001280)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x80) 15:26:00 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[]) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f00000001c0)={0x0, 0x70}, 0x20) 15:26:00 executing program 0: perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 15:26:00 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000100)=[@window={0x3, 0xeab}, @timestamp, @sack_perm, @timestamp, @sack_perm, @sack_perm, @sack_perm, @timestamp], 0x8) 15:26:00 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x5ffe, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000340)=[0xffffffffffffffff], 0xd2) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fstat(0xffffffffffffffff, 0x0) 15:26:00 executing program 7: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x101081, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x3e80) 15:26:00 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)={0x14, 0x1a, 0xffffffffffffffff, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) 15:26:00 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r0, 0x29, 0x50, 0x0, &(0x7f0000000040)) 15:26:00 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]}) 15:26:00 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0x40181, 0x0) write$tun(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="000000004500005c0000000000119078ac080001ffffffff000000000048907803000000000000005d8ece3528206be90677dfe0cb83b694c684d4ff50261add031adca3455228d5184c59a3452c36b7422640b598153d98f4c38b829127a9b3593c2dadfc7bc33326efbbe84e9d9c8e7b15843683019edd9b71bf78e2cfe6158e72c96572f981ccd6aeb7894192fcb4b4d769a7c3cdeebce31cb736569de5f6b535844a97a38c5f6806a27e86da3ee78f86460b7a597f1c31eb34260765000aa2b487f51d56ee3091c29e58de0f2645b4e17212ff05bee009272cc5bb3b9282e603856cceed9bea39441d9613e37a95"], 0x60) writev(r0, &(0x7f0000001400)=[{&(0x7f0000000180)="9304dad1608f524e1507f046a5736f62df79fe3234a0428ec481dd35e038220e3a9814cf81d3ed5ac5f40ccc04a9fce1cf8c0f8edceb81b89b2943ccdb5986b72cb670a210355776d1a18917add436db288c32260e1a251b7dfd11ce7cabfc643596174e7988b888a1f46902cf582a5b4ed5ed9e88ba4cd89e2012054ba3d670c0eab0c26d7d8633951abe0204a6", 0x8e}, {&(0x7f0000000240)="6417693f8a025c91df459411d8322a4e0b0cf028855542b56ff4b85df1a8fc39bdc9bef8394cb30f1519d63d81b8c676818f770f1059614f19b428eb9cb20fb37fe3449c95ff92c5d42e234f010e57e7bcec28164ce11ae7bf5ee47424fb03a932049a81778006afd8b437fcbc0fc397441bdf2ed74df33b0c7910703faeb3b426778288d99049f5fe2e0470eacd24469b5e2896cb1759bda0680b4e0cc73907b7194f75219607e24e07d4f3626ccfe6a8a5254b5e80a8cd", 0xb8}, {&(0x7f0000000300)="d8ce4d976a3c3a6201be718ef6690ae28ea2de93fd80fd74148d65f4f923c8095254efd48a0a2267dcda2fe2035db6507a6fd937134e61b58a6f595ab9b88623cfd385a701c35da4950c613d18a6252ff6e2a46499004a1dd413bf6933054dd155862d395b8299457cab177cec68c830e5", 0x71}, {&(0x7f0000000380)="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", 0x1000}, {&(0x7f0000001380)="3ff980fb158428e08fe6962923d42c76d78bf297bf0ccb2efba27b7bb6fdb9de4490cacf87272eff52e47e3797910a78f443022c80721d1cc1e3e698d63bc78a50ceb8e834275e04dbf21dda44fd8a85365a5e5ead4449a0ec8b0901e30ec56f9dee13bf6789dcb3c43b71", 0x6b}], 0x5) 15:26:00 executing program 0: syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x8, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], @echo_reply}}}}}, 0x0) [ 133.315809] [ 133.315822] ===================================== [ 133.315827] WARNING: bad unlock balance detected! [ 133.315834] 6.19.0-rc5-next-20260116 #1 Not tainted [ 133.315843] ------------------------------------- [ 133.315848] syz-executor.2/4070 is trying to release lock (rcu_read_lock) at: [ 133.315866] [] __wait_on_freeing_inode+0x105/0x350 [ 133.315899] but there are no more locks to release! [ 133.315904] [ 133.315904] other info that might help us debug this: [ 133.315909] 4 locks held by syz-executor.2/4070: [ 133.315918] #0: ffff88800f8fe3f8 (sb_writers#3){.+.+}-{0:0}, at: filename_create+0xf7/0x400 [ 133.315968] #1: ffff88804851bd10 (&type->i_mutex_dir_key#3/1){+.+.}-{4:4}, at: filename_create+0x1b1/0x400 [ 133.316020] #2: ffff88800f9da950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xe32/0x12d0 [ 133.316066] #3: ffffffff85c16898 (inode_hash_lock){+.+.}-{3:3}, at: insert_inode_locked+0xf9/0x890 [ 133.316117] [ 133.316117] stack backtrace: [ 133.316126] CPU: 0 UID: 0 PID: 4070 Comm: syz-executor.2 Not tainted 6.19.0-rc5-next-20260116 #1 PREEMPT(lazy) [ 133.316144] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 133.316154] Call Trace: [ 133.316160] [ 133.316166] dump_stack_lvl+0xca/0x120 [ 133.316201] ? __wait_on_freeing_inode+0x105/0x350 [ 133.316221] print_unlock_imbalance_bug+0x118/0x130 [ 133.316241] ? __wait_on_freeing_inode+0x105/0x350 [ 133.316260] lock_release+0x1ee/0x270 [ 133.316281] __wait_on_freeing_inode+0x10a/0x350 [ 133.316301] ? __pfx___wait_on_freeing_inode+0x10/0x10 [ 133.316322] ? __pfx_var_wake_function+0x10/0x10 [ 133.316346] ? lock_is_held_type+0x9e/0x120 [ 133.316362] insert_inode_locked+0x25f/0x890 [ 133.316385] __ext4_new_inode+0x223d/0x4cd0 [ 133.316409] ? __pfx___ext4_new_inode+0x10/0x10 [ 133.316428] ? __pfx___dquot_initialize+0x10/0x10 [ 133.316454] ? __pfx_avc_has_perm+0x10/0x10 [ 133.316476] ext4_symlink+0x623/0xb40 [ 133.316502] ? __pfx_ext4_symlink+0x10/0x10 [ 133.316523] ? security_inode_permission+0x72/0xe0 [ 133.316541] vfs_symlink+0x44b/0x840 [ 133.316563] filename_symlinkat+0x158/0x440 [ 133.316583] ? __pfx_filename_symlinkat+0x10/0x10 [ 133.316601] ? strncpy_from_user+0x21b/0x2f0 [ 133.316624] __x64_sys_symlink+0x82/0x110 [ 133.316642] do_syscall_64+0xbf/0x420 [ 133.316660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.316677] RIP: 0033:0x7f93de321427 [ 133.316689] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 58 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 133.316703] RSP: 002b:00007fff6a0a59c8 EFLAGS: 00000202 ORIG_RAX: 0000000000000058 [ 133.316717] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f93de321427 [ 133.316727] RDX: 00007fff6a0a5aa7 RSI: 00007f93de37c019 RDI: 00007fff6a0a5a90 [ 133.316737] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007fff6a0a5860 [ 133.316747] R10: 00007fff6a0a5717 R11: 0000000000000202 R12: 0000000000000001 [ 133.316756] R13: 0000000000000000 R14: 0000000000000001 R15: 00007fff6a0a5a90 [ 133.316770] [ 133.316867] ------------[ cut here ]------------ [ 133.316873] WARNING: kernel/rcu/tree_plugin.h:443 at __rcu_read_unlock+0x25f/0x5c0, CPU#0: syz-executor.2/4070 [ 133.316983] Modules linked in: [ 133.317034] CPU: 0 UID: 0 PID: 4070 Comm: syz-executor.2 Not tainted 6.19.0-rc5-next-20260116 #1 PREEMPT(lazy) [ 133.317052] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 133.317061] RIP: 0010:__rcu_read_unlock+0x25f/0x5c0 [ 133.317223] Code: f2 02 00 00 c7 43 58 01 00 00 00 bf 09 00 00 00 e8 d6 b7 de ff 4d 85 f6 0f 84 73 fe ff ff e8 38 8a 20 00 fb e9 68 fe ff ff 90 <0f> 0b 90 5b 5d 41 5c 41 5d 41 5e e9 81 4d 74 03 e8 2c 5d 56 00 e9 [ 133.317238] RSP: 0018:ffff8880498779a0 EFLAGS: 00010286 [ 133.317251] RAX: 00000000ffffffff RBX: ffff88801b188000 RCX: ffffffff815660f7 [ 133.317262] RDX: 0000000000000000 RSI: ffffffff81566100 RDI: ffff88801b1883fc [ 133.317274] RBP: ffff88801b188000 R08: 0000000000000000 R09: fffffbfff0ba7040 [ 133.317286] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88801b188000 [ 133.317309] R13: 0000000000000001 R14: ffffffff85c0d830 R15: ffff888048560318 [ 133.317322] FS: 0000555581d3f400(0000) GS:ffff8880e5342000(0000) knlGS:0000000000000000 [ 133.317337] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 133.317348] CR2: 00007f93de3a1542 CR3: 000000001e3d0000 CR4: 0000000000350ef0 [ 133.317358] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 133.317368] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 133.317378] Call Trace: [ 133.317425] [ 133.318039] __wait_on_freeing_inode+0x10f/0x350 [ 133.318490] ? __pfx___wait_on_freeing_inode+0x10/0x10 [ 133.319392] ? __pfx_var_wake_function+0x10/0x10 [ 133.320586] ? lock_is_held_type+0x9e/0x120 [ 133.321581] insert_inode_locked+0x25f/0x890 [ 133.323287] __ext4_new_inode+0x223d/0x4cd0 [ 133.326065] ? __pfx___ext4_new_inode+0x10/0x10 [ 133.327250] ? __pfx___dquot_initialize+0x10/0x10 [ 133.327717] ? __pfx_avc_has_perm+0x10/0x10 [ 133.329607] ext4_symlink+0x623/0xb40 [ 133.332209] ? __pfx_ext4_symlink+0x10/0x10 [ 133.333035] ? security_inode_permission+0x72/0xe0 [ 133.334675] vfs_symlink+0x44b/0x840 [ 133.335951] filename_symlinkat+0x158/0x440 [ 133.336977] ? __pfx_filename_symlinkat+0x10/0x10 [ 133.337486] ? strncpy_from_user+0x21b/0x2f0 [ 133.339486] __x64_sys_symlink+0x82/0x110 [ 133.339983] do_syscall_64+0xbf/0x420 [ 133.340649] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.340785] RIP: 0033:0x7f93de321427 [ 133.340876] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 58 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 133.340891] RSP: 002b:00007fff6a0a59c8 EFLAGS: 00000202 ORIG_RAX: 0000000000000058 [ 133.340906] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f93de321427 [ 133.340916] RDX: 00007fff6a0a5aa7 RSI: 00007f93de37c019 RDI: 00007fff6a0a5a90 [ 133.340926] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007fff6a0a5860 [ 133.340936] R10: 00007fff6a0a5717 R11: 0000000000000202 R12: 0000000000000001 [ 133.340945] R13: 0000000000000000 R14: 0000000000000001 R15: 00007fff6a0a5a90 [ 133.343631] [ 133.343638] irq event stamp: 169 [ 133.343644] hardirqs last enabled at (169): [] _raw_spin_unlock_irqrestore+0x2c/0x50 [ 133.343753] hardirqs last disabled at (168): [] _raw_spin_lock_irqsave+0x53/0x60 [ 133.343857] softirqs last enabled at (164): [] kernel_fpu_end+0x59/0x70 [ 133.343959] softirqs last disabled at (162): [] kernel_fpu_begin_mask+0x1bb/0x300 [ 133.344063] ---[ end trace 0000000000000000 ]--- [ 133.461506] audit: type=1326 audit(1768577160.573:10): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4074 comm="syz-executor.3" exe="/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fea6f2b5b19 code=0x0 [ 133.464253] audit: type=1326 audit(1768577160.573:11): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4074 comm="syz-executor.3" exe="/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fea6f2b5b19 code=0x0 15:26:00 executing program 5: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000000000/0x2000)=nil, 0x2000) 15:26:00 executing program 7: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x101081, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x3e80) 15:26:00 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x5ffe, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000340)=[0xffffffffffffffff], 0xd2) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fstat(0xffffffffffffffff, 0x0) 15:26:00 executing program 6: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x141802, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x401870c8, 0x0) 15:26:00 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r0, 0x29, 0x50, 0x0, &(0x7f0000000040)) 15:26:00 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]}) 15:26:00 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)={0x14, 0x1a, 0xffffffffffffffff, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) 15:26:00 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x33ba, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000003a80), &(0x7f0000000040)) r1 = dup(r0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x13, &(0x7f00000001c0), 0x2) 15:26:00 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r0, 0x29, 0x50, 0x0, &(0x7f0000000040)) 15:26:00 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]}) 15:26:00 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x5ffe, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000340)=[0xffffffffffffffff], 0xd2) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fstat(0xffffffffffffffff, 0x0) 15:26:00 executing program 4: r0 = msgget$private(0x0, 0x0) msgrcv(r0, 0x0, 0x0, 0x0, 0x0) msgrcv(r0, 0x0, 0x86, 0x0, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000200)={{0x1, 0xee01, 0xee01, 0xffffffffffffffff}}) 15:26:00 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000200)=0x1, 0x4) sendmmsg$inet6(r0, &(0x7f0000003000)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c, 0x0}}], 0x1, 0x20000000) 15:26:00 executing program 5: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000000000/0x2000)=nil, 0x2000) 15:26:01 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="05000000000001dcdf257e"], 0x1c}}, 0x0) 15:26:01 executing program 7: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x101081, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x3e80) 15:26:01 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x5ffe, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000340)=[0xffffffffffffffff], 0xd2) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fstat(0xffffffffffffffff, 0x0) 15:26:01 executing program 5: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000000000/0x2000)=nil, 0x2000) 15:26:01 executing program 4: r0 = msgget$private(0x0, 0x0) msgrcv(r0, 0x0, 0x0, 0x0, 0x0) msgrcv(r0, 0x0, 0x86, 0x0, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000200)={{0x1, 0xee01, 0xee01, 0xffffffffffffffff}}) 15:26:01 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@loopback, 0x0, 0x1, 0x0, 0x4}, 0x20) 15:26:01 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]}) 15:26:01 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x12, 0xfffffffffffffffe, 0x0) [ 134.873019] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 134.886048] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2 15:26:02 executing program 6: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000059c0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000040)='c', 0x1}], 0x1}}], 0x1, 0x0) recvfrom$unix(r1, 0x0, 0xf0ffffff7f0000, 0x0, 0x0, 0x0) 15:26:02 executing program 2: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000480)=[&(0x7f0000000180)={0x0, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0x3000}]) io_pgetevents(r1, 0x0, 0xffffff7b, 0x0, 0x0, 0x0) 15:26:02 executing program 5: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000000000/0x2000)=nil, 0x2000) 15:26:02 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="05000000000001dcdf257e"], 0x1c}}, 0x0) [ 134.899788] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 134.900742] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2 [ 134.907601] syz-executor.0 (4129) used greatest stack depth: 23464 bytes left 15:26:02 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000001180)=[{&(0x7f0000000000)="a20e73f1b1812c8df6967520cdbfb383417a9437ee7abadfd3289b310746", 0x1e}], 0x1) 15:26:02 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) write$binfmt_elf64(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="7f454c4600000000000000000000000003003e000000000000000000000000004000000000000000000000000000000000000000000038000200000000000000030000000000000000000000000000000000000000000077ac27ad7020268818c7"], 0xb0) close(r2) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) [ 135.060285] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 135.082401] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2 [ 135.195321] process 'syz-executor.6' launched './file1' with NULL argv: empty string added 15:26:02 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="05000000000001dcdf257e"], 0x1c}}, 0x0) 15:26:02 executing program 2: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000040)={0x14, 0x16, 0xffffffffffffffff, 0x0, 0x0, "", [@generic='\n']}, 0x14}], 0x1}, 0x0) 15:26:02 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syncfs(r0) 15:26:02 executing program 4: r0 = msgget$private(0x0, 0x0) msgrcv(r0, 0x0, 0x0, 0x0, 0x0) msgrcv(r0, 0x0, 0x86, 0x0, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000200)={{0x1, 0xee01, 0xee01, 0xffffffffffffffff}}) 15:26:02 executing program 7: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x101081, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x3e80) 15:26:02 executing program 5: r0 = memfd_create(&(0x7f0000000080)='/proc/thread-self/attr/fscreate\x00\x14~\xfe\x9a!\xb2\xb73h\xd2oR\arV(C\xe7\xbb\xd3\x83\xd4\x9b\xb7\xc8t_X\xf0\xcb\xba_\x82qgk\xcbW\xe7\xcd\x87\xf9\xb2\x89\xb94\x06s\xa1B\x96\xc4\x17\x11\xba\xae\xba/N~%\xaf\xcbw\xa4\xd99\xab)\x8f\x1b2\x1bJ\x86\xb1\xee\x8d;\x12\xd4\x7fT\x06\xaakm^\x85\xd1\xd1\xcd\x98L2\xe3\x14\xb7v\xbb\x94x\x82\xab\xc1dK(\x99/9\xc6\xbe\xcd?\xd6-%\x8b\xbeiSA\xdc\xaa\xec\xban3\xbf\x8ew\xee\x91SB\xb0\xb5\xc4,f\xf0\xca\xb3\xb0\xa5\x02\x1f\xd4\xf8\xe7_A\xf0b\xa4\xec\xe8\xeed\xaf\xdf\xdf-w]_\xe4\xb8\x9850\xcd\x8f*\xb5\x98>Y\xef.5\xfd\xcbC\xf0(=\'\xaa^kD\xf5\x81f\xd0 i\x84\xb2\xc5\x1d\x96\xa5\v\xaf\x18w|J\xdbE\x80\x97\xe9U\xd8\x01[A\xaa\xc1%\xa95^X\xea\x17\x1f&]K\xc4\xe6\x17\x00\x04\xfe\x12o\xf0\xad\xfa\xa8\x81\xdd\xe8\t\xa12P\xfc@\x1a\xea\x92|\x04W\xd6-\xb22S`[oUAY\xa8\x93\xc5H\xbe\xc4\x95\x87\x9b\x05\x80\xfc\xec1\xcd\xe4\x8e\xb8\xb0\xdf\xfd\xd2\x19\xf0\x0e\x98{\x9f\f\xd3\xc3\x8e\xdb\xdf\x86$\x8a\xf1\t\x8a\xa8}\xf27\x9c6\xe5\x05\xe5\t\xb8', 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000006, 0x400e012, r0, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x0, 0x0, 0x0) writev(r0, &(0x7f0000001480)=[{&(0x7f0000000200)="e1", 0x1}], 0x1) mlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) 15:26:02 executing program 3: r0 = gettid() r1 = getpid() rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000000)) 15:26:02 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) write$binfmt_elf64(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="7f454c4600000000000000000000000003003e000000000000000000000000004000000000000000000000000000000000000000000038000200000000000000030000000000000000000000000000000000000000000077ac27ad7020268818c7"], 0xb0) close(r2) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) [ 135.746780] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 135.753159] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2 15:26:02 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="05000000000001dcdf257e"], 0x1c}}, 0x0) 15:26:02 executing program 5: syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) chmod(&(0x7f0000000180)='./file0\x00', 0x10) chown(&(0x7f0000000000)='./file0\x00', 0xee01, 0xee00) chdir(&(0x7f00000001c0)='./file0\x00') creat(&(0x7f0000000100)='./file0\x00', 0x0) 15:26:02 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, 0x12, r1, 0x0) sigaltstack(&(0x7f0000ffc000/0x3000)=nil, 0x0) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2) 15:26:02 executing program 5: setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000400)={0x3, {{0xa, 0x4e20, 0xd6c, @loopback, 0x7}}, 0x0, 0x2, [{{0xa, 0x4e21, 0x9, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}}, {{0xa, 0x4e20, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}}}]}, 0x190) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = fork() ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x10001, &(0x7f0000000280)="2ca38c19885510e699dd29f1bbed5378c75e9bbd2bb11e4a3df4d414b91d67c1f34e5044213437a22c217eb38bc4723a874867a7747d06ddab210000c613c7705e52a6bf14d3346ee7ead308f7fa26a2e30722b5c3d3b78b23f4df3309f80ff15adb59127c5877ca639e243699d23c4442866980f3c6fb380a3f84e1ff305f7bbcfbd54dda2af618cbb32e368e9133ddb0ab2b7e2b7dd4976841927c5409fa8610c427c00a08d2a424fe3cbf7a027219") 15:26:03 executing program 1: pkey_free(0xffffffffffffffff) 15:26:03 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) write$binfmt_elf64(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="7f454c4600000000000000000000000003003e000000000000000000000000004000000000000000000000000000000000000000000038000200000000000000030000000000000000000000000000000000000000000077ac27ad7020268818c7"], 0xb0) close(r2) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) 15:26:03 executing program 2: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000040)={0x14, 0x16, 0xffffffffffffffff, 0x0, 0x0, "", [@generic='\n']}, 0x14}], 0x1}, 0x0) 15:26:03 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000840), 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000000)={{}, {0x1}}) [ 135.915295] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 135.916386] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2 15:26:03 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) 15:26:03 executing program 5: setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000400)={0x3, {{0xa, 0x4e20, 0xd6c, @loopback, 0x7}}, 0x0, 0x2, [{{0xa, 0x4e21, 0x9, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}}, {{0xa, 0x4e20, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}}}]}, 0x190) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = fork() ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x10001, &(0x7f0000000280)="2ca38c19885510e699dd29f1bbed5378c75e9bbd2bb11e4a3df4d414b91d67c1f34e5044213437a22c217eb38bc4723a874867a7747d06ddab210000c613c7705e52a6bf14d3346ee7ead308f7fa26a2e30722b5c3d3b78b23f4df3309f80ff15adb59127c5877ca639e243699d23c4442866980f3c6fb380a3f84e1ff305f7bbcfbd54dda2af618cbb32e368e9133ddb0ab2b7e2b7dd4976841927c5409fa8610c427c00a08d2a424fe3cbf7a027219") 15:26:03 executing program 3: setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000400)={0x3, {{0xa, 0x4e20, 0xd6c, @loopback, 0x7}}, 0x0, 0x2, [{{0xa, 0x4e21, 0x9, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}}, {{0xa, 0x4e20, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}}}]}, 0x190) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = fork() ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x10001, &(0x7f0000000280)="2ca38c19885510e699dd29f1bbed5378c75e9bbd2bb11e4a3df4d414b91d67c1f34e5044213437a22c217eb38bc4723a874867a7747d06ddab210000c613c7705e52a6bf14d3346ee7ead308f7fa26a2e30722b5c3d3b78b23f4df3309f80ff15adb59127c5877ca639e243699d23c4442866980f3c6fb380a3f84e1ff305f7bbcfbd54dda2af618cbb32e368e9133ddb0ab2b7e2b7dd4976841927c5409fa8610c427c00a08d2a424fe3cbf7a027219") 15:26:03 executing program 3: setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000400)={0x3, {{0xa, 0x4e20, 0xd6c, @loopback, 0x7}}, 0x0, 0x2, [{{0xa, 0x4e21, 0x9, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}}, {{0xa, 0x4e20, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}}}]}, 0x190) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = fork() ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x10001, &(0x7f0000000280)="2ca38c19885510e699dd29f1bbed5378c75e9bbd2bb11e4a3df4d414b91d67c1f34e5044213437a22c217eb38bc4723a874867a7747d06ddab210000c613c7705e52a6bf14d3346ee7ead308f7fa26a2e30722b5c3d3b78b23f4df3309f80ff15adb59127c5877ca639e243699d23c4442866980f3c6fb380a3f84e1ff305f7bbcfbd54dda2af618cbb32e368e9133ddb0ab2b7e2b7dd4976841927c5409fa8610c427c00a08d2a424fe3cbf7a027219") 15:26:03 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x74, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x5, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_HE_BSS_COLOR={0x0, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR, @NL80211_HE_BSS_COLOR_ATTR_DISABLED, @NL80211_HE_BSS_COLOR_ATTR_COLOR, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL]}]}, 0x74}}, 0x0) 15:26:03 executing program 2: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000040)={0x14, 0x16, 0xffffffffffffffff, 0x0, 0x0, "", [@generic='\n']}, 0x14}], 0x1}, 0x0) 15:26:03 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x20100000) 15:26:03 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) flock(r0, 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 15:26:03 executing program 4: r0 = msgget$private(0x0, 0x0) msgrcv(r0, 0x0, 0x0, 0x0, 0x0) msgrcv(r0, 0x0, 0x86, 0x0, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000200)={{0x1, 0xee01, 0xee01, 0xffffffffffffffff}}) 15:26:03 executing program 5: setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000400)={0x3, {{0xa, 0x4e20, 0xd6c, @loopback, 0x7}}, 0x0, 0x2, [{{0xa, 0x4e21, 0x9, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}}, {{0xa, 0x4e20, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}}}]}, 0x190) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = fork() ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x10001, &(0x7f0000000280)="2ca38c19885510e699dd29f1bbed5378c75e9bbd2bb11e4a3df4d414b91d67c1f34e5044213437a22c217eb38bc4723a874867a7747d06ddab210000c613c7705e52a6bf14d3346ee7ead308f7fa26a2e30722b5c3d3b78b23f4df3309f80ff15adb59127c5877ca639e243699d23c4442866980f3c6fb380a3f84e1ff305f7bbcfbd54dda2af618cbb32e368e9133ddb0ab2b7e2b7dd4976841927c5409fa8610c427c00a08d2a424fe3cbf7a027219") 15:26:03 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) write$binfmt_elf64(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="7f454c4600000000000000000000000003003e000000000000000000000000004000000000000000000000000000000000000000000038000200000000000000030000000000000000000000000000000000000000000077ac27ad7020268818c7"], 0xb0) close(r2) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) 15:26:03 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x0, 0x0, &(0x7f0000fea000/0x14000)=nil, &(0x7f0000fef000/0x2000)=nil, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000500), 0x0) 15:26:03 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x74, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x5, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_HE_BSS_COLOR={0x0, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR, @NL80211_HE_BSS_COLOR_ATTR_DISABLED, @NL80211_HE_BSS_COLOR_ATTR_COLOR, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL]}]}, 0x74}}, 0x0) 15:26:03 executing program 2: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000040)={0x14, 0x16, 0xffffffffffffffff, 0x0, 0x0, "", [@generic='\n']}, 0x14}], 0x1}, 0x0) 15:26:03 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000004f40)=0x3, 0x4) poll(&(0x7f0000006800)=[{r0, 0xaab2b75b90f47ff8}], 0x1, 0x0) 15:26:03 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fd/4\x00') 15:26:04 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x74, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x5, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_HE_BSS_COLOR={0x0, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR, @NL80211_HE_BSS_COLOR_ATTR_DISABLED, @NL80211_HE_BSS_COLOR_ATTR_COLOR, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL]}]}, 0x74}}, 0x0) 15:26:04 executing program 5: setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000400)={0x3, {{0xa, 0x4e20, 0xd6c, @loopback, 0x7}}, 0x0, 0x2, [{{0xa, 0x4e21, 0x9, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}}, {{0xa, 0x4e20, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}}}]}, 0x190) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = fork() ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x10001, &(0x7f0000000280)="2ca38c19885510e699dd29f1bbed5378c75e9bbd2bb11e4a3df4d414b91d67c1f34e5044213437a22c217eb38bc4723a874867a7747d06ddab210000c613c7705e52a6bf14d3346ee7ead308f7fa26a2e30722b5c3d3b78b23f4df3309f80ff15adb59127c5877ca639e243699d23c4442866980f3c6fb380a3f84e1ff305f7bbcfbd54dda2af618cbb32e368e9133ddb0ab2b7e2b7dd4976841927c5409fa8610c427c00a08d2a424fe3cbf7a027219") 15:26:04 executing program 3: setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000400)={0x3, {{0xa, 0x4e20, 0xd6c, @loopback, 0x7}}, 0x0, 0x2, [{{0xa, 0x4e21, 0x9, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}}, {{0xa, 0x4e20, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}}}]}, 0x190) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = fork() ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x10001, &(0x7f0000000280)="2ca38c19885510e699dd29f1bbed5378c75e9bbd2bb11e4a3df4d414b91d67c1f34e5044213437a22c217eb38bc4723a874867a7747d06ddab210000c613c7705e52a6bf14d3346ee7ead308f7fa26a2e30722b5c3d3b78b23f4df3309f80ff15adb59127c5877ca639e243699d23c4442866980f3c6fb380a3f84e1ff305f7bbcfbd54dda2af618cbb32e368e9133ddb0ab2b7e2b7dd4976841927c5409fa8610c427c00a08d2a424fe3cbf7a027219") 15:26:04 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setresuid(0x0, r0, 0x0) utime(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)) 15:26:04 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) dup3(r0, r1, 0x0) 15:26:04 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="2400000018000105000080000000000002"], 0x24}], 0x1}, 0x0) 15:26:04 executing program 1: futex(&(0x7f0000000040), 0x4, 0x0, 0x0, &(0x7f00000000c0), 0x1) 15:26:04 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {{0x5e}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 15:26:04 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x74, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x5, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_HE_BSS_COLOR={0x0, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR, @NL80211_HE_BSS_COLOR_ATTR_DISABLED, @NL80211_HE_BSS_COLOR_ATTR_COLOR, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL]}]}, 0x74}}, 0x0) 15:26:04 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000300)) 15:26:04 executing program 2: mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x1) 15:26:04 executing program 4: syz_emit_ethernet(0x82, &(0x7f0000000000)={@local, @multicast, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @source_quench={0xb, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @loopback, {[@cipso={0x86, 0x3d, 0x0, [{0x0, 0xc, "ba4906dca0ac3f21ee4d"}, {0x0, 0xa, "0b1bb9011e61db13"}, {0x0, 0xe, "9fb8dedc4ea32f0be3c4157e"}, {0x0, 0xa, "7686fc256818ce19"}, {0x0, 0x9, "20126d234d2862"}]}]}}}}}}}, 0x0) [ 137.605746] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. [ 137.637885] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. 15:26:04 executing program 1: io_setup(0x8, &(0x7f0000000080)=0x0) r1 = timerfd_create(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r0, 0x1, &(0x7f00000004c0)=[&(0x7f0000000180)={0x0, 0x0, 0x8, 0x0, 0x0, r1, &(0x7f0000000040)="2b1f5502758f83a4", 0x8}]) 15:26:04 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x19, 0x0, &(0x7f0000000680)) 15:26:04 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x6227, &(0x7f0000000080)=0x0) io_submit(r0, 0x0, 0x0) getpid() ptrace(0x10, 0x0) waitid(0x0, 0x0, 0x0, 0x8, 0x0) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='hugetlbfs\x00', 0x0, 0x0) umount2(&(0x7f0000000240)='./file0\x00', 0x4) fork() umount2(&(0x7f0000000040)='./file0\x00', 0x4) 15:26:04 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001880)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x196}]]}, 0x2c}}, 0x0) 15:26:04 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x2}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x30}}, 0x0) [ 137.752399] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 137.759612] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 137.772458] netlink: 'syz-executor.4': attribute type 2 has an invalid length. 15:26:05 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x3a, 0x0, &(0x7f0000001180)) 15:26:05 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) dup3(r1, r0, 0x0) 15:26:05 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="2400000018000105000080000000000002"], 0x24}], 0x1}, 0x0) 15:26:05 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000700)=[{{&(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c, 0x0}}], 0x1, 0x0) 15:26:05 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x0, 0x0, &(0x7f0000000040)) 15:26:05 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_SETSEL(r0, 0x5410, 0x0) 15:26:05 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, 0x0) 15:26:05 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x6227, &(0x7f0000000080)=0x0) io_submit(r0, 0x0, 0x0) getpid() ptrace(0x10, 0x0) waitid(0x0, 0x0, 0x0, 0x8, 0x0) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='hugetlbfs\x00', 0x0, 0x0) umount2(&(0x7f0000000240)='./file0\x00', 0x4) fork() umount2(&(0x7f0000000040)='./file0\x00', 0x4) [ 138.000253] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. 15:26:05 executing program 2: umount2(0x0, 0xc447f1e113303b7b) 15:26:05 executing program 5: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000002c0)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000200)}, 0x68) r0 = syz_io_uring_setup(0x22c3, &(0x7f0000000480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000300)=[{&(0x7f00000002c0)=""/56, 0x38}], 0x5) 15:26:05 executing program 4: io_setup(0xfff, &(0x7f0000000040)=0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/disk', 0x140a41, 0x0) io_submit(r0, 0x1, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000002c0)="33f0301e00d900c0a5a89e33a34303961466bd6f4669f26cf28ea2f2dbfc97179f3adfabe763e9a7e32150126a3b631a9d8fe4ff966d1cd74bd770184dc245850333b131a011dac71484024fc6a512299a34eae0469142799542653756850455e0d5cbccdefd92eb2187f4c00f64d11358c6cb4e86b481a4bb0d6af30980a33df187130510a5ed45318bcb4f5f1b34cd15f72680131797d00d914d8d513d5d4244fe16a448d50f4b667cf58686ef03b29e896f52fadf9d165d800e3eafed0f422e3d0a", 0xc3}]) 15:26:05 executing program 0: r0 = io_uring_setup(0x5ffd, &(0x7f0000000140)) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xb}) io_uring_register$IORING_REGISTER_FILES(r0, 0x18, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) 15:26:05 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="2400000018000105000080000000000002"], 0x24}], 0x1}, 0x0) 15:26:05 executing program 2: umount2(0x0, 0xc447f1e113303b7b) 15:26:05 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000001600)={0x2, 0x4e20, @multicast1}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x5e20, @dev}, 0x10) [ 138.178960] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. 15:26:05 executing program 4: io_setup(0xfff, &(0x7f0000000040)=0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/disk', 0x140a41, 0x0) io_submit(r0, 0x1, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000002c0)="33f0301e00d900c0a5a89e33a34303961466bd6f4669f26cf28ea2f2dbfc97179f3adfabe763e9a7e32150126a3b631a9d8fe4ff966d1cd74bd770184dc245850333b131a011dac71484024fc6a512299a34eae0469142799542653756850455e0d5cbccdefd92eb2187f4c00f64d11358c6cb4e86b481a4bb0d6af30980a33df187130510a5ed45318bcb4f5f1b34cd15f72680131797d00d914d8d513d5d4244fe16a448d50f4b667cf58686ef03b29e896f52fadf9d165d800e3eafed0f422e3d0a", 0xc3}]) 15:26:05 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f00000005c0), 0x200, 0x200) 15:26:05 executing program 0: rt_sigprocmask(0x0, &(0x7f00000001c0)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) write$binfmt_elf64(r0, 0x0, 0x7d) r1 = syz_open_procfs$userns(0x0, &(0x7f00000003c0)) r2 = dup(r1) ppoll(&(0x7f0000000280)=[{r2, 0xc081}], 0x1, 0x0, &(0x7f0000000300), 0x8) 15:26:05 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x6227, &(0x7f0000000080)=0x0) io_submit(r0, 0x0, 0x0) getpid() ptrace(0x10, 0x0) waitid(0x0, 0x0, 0x0, 0x8, 0x0) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='hugetlbfs\x00', 0x0, 0x0) umount2(&(0x7f0000000240)='./file0\x00', 0x4) fork() umount2(&(0x7f0000000040)='./file0\x00', 0x4) 15:26:05 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x10, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 15:26:05 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x6227, &(0x7f0000000080)=0x0) io_submit(r0, 0x0, 0x0) getpid() ptrace(0x10, 0x0) waitid(0x0, 0x0, 0x0, 0x8, 0x0) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='hugetlbfs\x00', 0x0, 0x0) umount2(&(0x7f0000000240)='./file0\x00', 0x4) fork() umount2(&(0x7f0000000040)='./file0\x00', 0x4) 15:26:05 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) read$rfkill(r0, 0x0, 0x0) 15:26:05 executing program 4: io_setup(0xfff, &(0x7f0000000040)=0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/disk', 0x140a41, 0x0) io_submit(r0, 0x1, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000002c0)="33f0301e00d900c0a5a89e33a34303961466bd6f4669f26cf28ea2f2dbfc97179f3adfabe763e9a7e32150126a3b631a9d8fe4ff966d1cd74bd770184dc245850333b131a011dac71484024fc6a512299a34eae0469142799542653756850455e0d5cbccdefd92eb2187f4c00f64d11358c6cb4e86b481a4bb0d6af30980a33df187130510a5ed45318bcb4f5f1b34cd15f72680131797d00d914d8d513d5d4244fe16a448d50f4b667cf58686ef03b29e896f52fadf9d165d800e3eafed0f422e3d0a", 0xc3}]) 15:26:05 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f00000005c0), 0x200, 0x200) 15:26:05 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x10, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 15:26:05 executing program 2: umount2(0x0, 0xc447f1e113303b7b) 15:26:05 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="2400000018000105000080000000000002"], 0x24}], 0x1}, 0x0) 15:26:05 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shutdown(r0, 0x1) [ 138.485512] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. 15:26:05 executing program 2: umount2(0x0, 0xc447f1e113303b7b) 15:26:05 executing program 7: io_setup(0xfff, &(0x7f0000000040)=0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000002940)=[&(0x7f0000002500)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 15:26:05 executing program 4: io_setup(0xfff, &(0x7f0000000040)=0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/disk', 0x140a41, 0x0) io_submit(r0, 0x1, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000002c0)="33f0301e00d900c0a5a89e33a34303961466bd6f4669f26cf28ea2f2dbfc97179f3adfabe763e9a7e32150126a3b631a9d8fe4ff966d1cd74bd770184dc245850333b131a011dac71484024fc6a512299a34eae0469142799542653756850455e0d5cbccdefd92eb2187f4c00f64d11358c6cb4e86b481a4bb0d6af30980a33df187130510a5ed45318bcb4f5f1b34cd15f72680131797d00d914d8d513d5d4244fe16a448d50f4b667cf58686ef03b29e896f52fadf9d165d800e3eafed0f422e3d0a", 0xc3}]) 15:26:05 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f00000005c0), 0x200, 0x200) 15:26:05 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x10, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 15:26:05 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$lock(r0, 0x24, &(0x7f0000000080)={0x1, 0x2}) 15:26:05 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f00000005c0), 0x200, 0x200) 15:26:05 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) read$rfkill(r0, 0x0, 0x0) 15:26:05 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900)="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", 0x200) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x44000) sendfile(r0, r1, 0x0, 0xfdef) 15:26:05 executing program 4: syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lchown(&(0x7f0000000180)='./file0\x00', 0xee00, 0x0) 15:26:05 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) migrate_pages(0xffffffffffffffff, 0x1, 0x0, 0x0) 15:26:05 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x10, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 15:26:05 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x29, 0x0, &(0x7f0000000280)) 15:26:05 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) r1 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) [ 138.829067] audit: type=1400 audit(1768577165.939:12): avc: denied { read } for pid=4392 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 138.841039] audit: type=1400 audit(1768577165.952:13): avc: denied { write } for pid=4392 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 15:26:05 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) migrate_pages(0xffffffffffffffff, 0x1, 0x0, 0x0) 15:26:05 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) read$rfkill(r0, 0x0, 0x0) 15:26:05 executing program 4: syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lchown(&(0x7f0000000180)='./file0\x00', 0xee00, 0x0) 15:26:05 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x29, 0x0, &(0x7f0000000280)) 15:26:05 executing program 5: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = timerfd_create(0x0, 0x0) timerfd_gettime(r0, &(0x7f0000000040)) 15:26:06 executing program 6: prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) fsopen(&(0x7f0000000040)='cgroup\x00', 0x0) 15:26:06 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) migrate_pages(0xffffffffffffffff, 0x1, 0x0, 0x0) 15:26:06 executing program 5: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = timerfd_create(0x0, 0x0) timerfd_gettime(r0, &(0x7f0000000040)) 15:26:06 executing program 6: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = timerfd_create(0x0, 0x0) timerfd_gettime(r0, &(0x7f0000000040)) 15:26:06 executing program 4: syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lchown(&(0x7f0000000180)='./file0\x00', 0xee00, 0x0) 15:26:06 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x29, 0x0, &(0x7f0000000280)) 15:26:06 executing program 5: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = timerfd_create(0x0, 0x0) timerfd_gettime(r0, &(0x7f0000000040)) 15:26:06 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) migrate_pages(0xffffffffffffffff, 0x1, 0x0, 0x0) 15:26:06 executing program 6: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = timerfd_create(0x0, 0x0) timerfd_gettime(r0, &(0x7f0000000040)) 15:26:06 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) r1 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) 15:26:06 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) read$rfkill(r0, 0x0, 0x0) 15:26:06 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900)="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", 0x200) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x44000) sendfile(r0, r1, 0x0, 0xfdef) 15:26:06 executing program 6: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = timerfd_create(0x0, 0x0) timerfd_gettime(r0, &(0x7f0000000040)) 15:26:06 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x29, 0x0, &(0x7f0000000280)) 15:26:06 executing program 5: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = timerfd_create(0x0, 0x0) timerfd_gettime(r0, &(0x7f0000000040)) 15:26:06 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r0, 0x29, 0x24, 0x0, &(0x7f0000000040)) 15:26:06 executing program 4: syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lchown(&(0x7f0000000180)='./file0\x00', 0xee00, 0x0) 15:26:06 executing program 4: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000040)) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/class/hwmon', 0x0, 0x0) getdents(r0, &(0x7f00000000c0)=""/145, 0x91) 15:26:06 executing program 0: syz_mount_image$tmpfs(&(0x7f0000002700), &(0x7f0000002740)='./file0\x00', 0x0, 0x1, &(0x7f0000004b40)=[{&(0x7f0000002780)="a0", 0x1}], 0x0, &(0x7f0000004c40)) 15:26:06 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000040)=@FILEID_INO32_GEN={0x8, 0xfe, {0x8}}, 0x10040) 15:26:06 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) r1 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) 15:26:06 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900)="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", 0x200) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x44000) sendfile(r0, r1, 0x0, 0xfdef) 15:26:06 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) 15:26:06 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)={0xe8, 0x1e, 0xffffffffffffffff}, 0xe8}], 0x1}, 0x0) 15:26:06 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) setuid(0x0) socket$nl_xfrm(0x10, 0x3, 0x6) setuid(0x0) close_range(r0, 0xffffffffffffffff, 0x0) [ 139.540020] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.544620] misc raw-gadget: fail, usb_gadget_register_driver returned -16 15:26:06 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000340), 0x0, 0x0) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000040)) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f00000001c0)) 15:26:06 executing program 0: syz_mount_image$tmpfs(&(0x7f0000002700), &(0x7f0000002740)='./file0\x00', 0x0, 0x1, &(0x7f0000004b40)=[{&(0x7f0000002780)="a0", 0x1}], 0x0, &(0x7f0000004c40)) 15:26:06 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) 15:26:06 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) r1 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) 15:26:06 executing program 6: r0 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$search(0xa, 0x0, &(0x7f0000000000)='keyring\x00', 0x0, 0x0) r1 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000340)={'syz', 0x1}, 0x0, 0x0, r0) keyctl$read(0x1d, r1, &(0x7f0000000000)=""/246, 0xf6) 15:26:06 executing program 0: syz_mount_image$tmpfs(&(0x7f0000002700), &(0x7f0000002740)='./file0\x00', 0x0, 0x1, &(0x7f0000004b40)=[{&(0x7f0000002780)="a0", 0x1}], 0x0, &(0x7f0000004c40)) [ 140.067453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.071453] misc raw-gadget: fail, usb_gadget_register_driver returned -16 15:26:07 executing program 4: ioperm(0x0, 0x3, 0x20) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) 15:26:07 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) 15:26:07 executing program 6: r0 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$search(0xa, 0x0, &(0x7f0000000000)='keyring\x00', 0x0, 0x0) r1 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000340)={'syz', 0x1}, 0x0, 0x0, r0) keyctl$read(0x1d, r1, &(0x7f0000000000)=""/246, 0xf6) 15:26:07 executing program 3: r0 = socket$inet(0x2, 0xa, 0x8) r1 = perf_event_open(&(0x7f0000000600)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r1, r0, 0x0) 15:26:07 executing program 0: syz_mount_image$tmpfs(&(0x7f0000002700), &(0x7f0000002740)='./file0\x00', 0x0, 0x1, &(0x7f0000004b40)=[{&(0x7f0000002780)="a0", 0x1}], 0x0, &(0x7f0000004c40)) 15:26:07 executing program 2: setresuid(0x0, 0xee01, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x4) 15:26:07 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900)="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", 0x200) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x44000) sendfile(r0, r1, 0x0, 0xfdef) 15:26:07 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) [ 140.130685] syz-executor.3 uses obsolete (PF_INET,SOCK_PACKET) [ 140.147802] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.148829] misc raw-gadget: fail, usb_gadget_register_driver returned -16 15:26:07 executing program 6: r0 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$search(0xa, 0x0, &(0x7f0000000000)='keyring\x00', 0x0, 0x0) r1 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000340)={'syz', 0x1}, 0x0, 0x0, r0) keyctl$read(0x1d, r1, &(0x7f0000000000)=""/246, 0xf6) 15:26:07 executing program 4: r0 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$search(0xa, 0x0, &(0x7f0000000000)='keyring\x00', 0x0, 0x0) r1 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000340)={'syz', 0x1}, 0x0, 0x0, r0) keyctl$read(0x1d, r1, &(0x7f0000000000)=""/246, 0xf6) 15:26:07 executing program 2: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r1, &(0x7f0000000280)=[{&(0x7f0000000080)="8c", 0x1}], 0x1, 0x400000, 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x10c00) pwritev2(r0, &(0x7f0000000000)=[{&(0x7f00000005c0)="a4", 0x1}, {&(0x7f0000000140)="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", 0x11c}, {&(0x7f0000000600)="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", 0x2e4}], 0x3, 0x0, 0x0, 0x10) 15:26:07 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) 15:26:07 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0x13, &(0x7f0000001100), &(0x7f0000001140)=0x4) 15:26:07 executing program 0: r0 = syz_io_uring_setup(0x6133, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = dup(r0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000240)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x6, &(0x7f00000001c0), 0x2) 15:26:07 executing program 6: r0 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$search(0xa, 0x0, &(0x7f0000000000)='keyring\x00', 0x0, 0x0) r1 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000340)={'syz', 0x1}, 0x0, 0x0, r0) keyctl$read(0x1d, r1, &(0x7f0000000000)=""/246, 0xf6) 15:26:07 executing program 4: r0 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$search(0xa, 0x0, &(0x7f0000000000)='keyring\x00', 0x0, 0x0) r1 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000340)={'syz', 0x1}, 0x0, 0x0, r0) keyctl$read(0x1d, r1, &(0x7f0000000000)=""/246, 0xf6) 15:26:07 executing program 2: mq_unlink(&(0x7f00000002c0)='/dev/nvram\x00') 15:26:07 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x20, r0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x4}]]}, 0x20}}, 0x0) 15:26:07 executing program 0: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$CDROM_SEND_PACKET(r0, 0x5312, 0x0) 15:26:07 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) 15:26:07 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) 15:26:07 executing program 4: r0 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$search(0xa, 0x0, &(0x7f0000000000)='keyring\x00', 0x0, 0x0) r1 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000340)={'syz', 0x1}, 0x0, 0x0, r0) keyctl$read(0x1d, r1, &(0x7f0000000000)=""/246, 0xf6) 15:26:07 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000040)='./file0\x00', 0xd400080b) unlink(&(0x7f0000000240)='./file0\x00') write(r0, &(0x7f0000000140)="c1", 0x1) 15:26:07 executing program 2: openat2(0xffffffffffffff9c, 0x0, &(0x7f00000000c0)={0x651203}, 0x18) 15:26:07 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$IP_SET_OP_GET_FNAME(r0, 0x1, 0x30, 0x0, &(0x7f00000007c0)) 15:26:07 executing program 1: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000100)) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 15:26:07 executing program 6: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0xa40024, &(0x7f0000001cc0)={[{}]}) [ 140.747229] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.750215] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.771230] audit: type=1400 audit(1768577167.882:14): avc: denied { watch_reads } for pid=4521 comm="syz-executor.3" path="/syzkaller-testdir499496528/syzkaller.7P7RYS/35/file0" dev="sda" ino=16013 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 15:26:07 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000180)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000002c0)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, 0x1}, 0x20000) 15:26:07 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r0, 0x4b32, &(0x7f00000002c0)) 15:26:07 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000007fc0)={0x5, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @broadcast}}}, 0x108) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000000)={0x5, {{0x2, 0x0, @multicast1}}}, 0x90) 15:26:07 executing program 1: get_mempolicy(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000/0x4000)=nil, 0x4) 15:26:07 executing program 3: r0 = inotify_init1(0x0) inotify_rm_watch(r0, 0x0) 15:26:07 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r0, &(0x7f00000000c0), 0x12) 15:26:07 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdab39eac554c6bee, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x208, &(0x7f0000000080)=0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) io_submit(r0, 0x1, &(0x7f0000000240)=[0x0]) io_destroy(0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r2, &(0x7f0000000900)="5ed0b2ff68d76fb346352b602a2a1295cbe01cb3f64fbed9e7f9bc9be0f300cb97f6a204cc586e45dfb949002f61f8fb969dd435dd0c37c5077e5b10cfeafd75205e215b167323a3b971b0ec98e6c3d4d825cae01271cb35cdd091e4872367f354e0dc81a7e4ac79775bc1dcaafe2f5079da79d1989f1ddce6722fc438a7217526cfe75d53471624d6f091e19a7fb699ea27efa9e0fd1914e7c35f297afd9b9b85ff0ce7a982f4fa0c172ea5f06479eec302f30e5df66273717e028f4ca7d4c5b6bc8a3c3c67f688195f22488a15d9e1f7e5fed3a6c2aba7bc308b0e2c5657f4538f4a3bf9b975bb887a901ab3c85261be3e331b741313e78b5ad63b7b1b378e9c79dc4a95b2b4d15cd1d1b808844378f882a72af1e5b0eefd356e0247246e60643204c3b46183dbe4e066c55cb1dcdaa7b70ef43ab2fa4d2b8c4c1a89cb0e325fd9716874d3856cf368efd1f92d21214e55e4de647c37c71887d11f74f9afe1616e3054ceae601e4b3555e243c1882ad42c7730caeb309e7714ad87c55e9fba308cfc4161e562abde3ac4f3d7e0a3584d4928100197f102307c05c0b4b4898b0591bc1433af443478979f28e6136ffb21aaeac2be5490475a08e96bb94fd9d9d3aa2f8a1e147a80ba9bfd04dac3f476ff128476c693ea71f7be47a508c98eddc479eb703d6f17cc5be2182f7c39b0a47eb23e0808b5d87dd2a9ce88eb48a601", 0x200) fcntl$setstatus(r2, 0x4, 0x44000) sendfile(r2, 0xffffffffffffffff, 0x0, 0xfdef) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x10000002}) 15:26:08 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000180)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000002c0)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, 0x1}, 0x20000) 15:26:08 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000800), 0x1) 15:26:08 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r0, 0x4b32, &(0x7f00000002c0)) 15:26:08 executing program 6: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0xa40024, &(0x7f0000001cc0)={[{}]}) 15:26:08 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000180)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000002c0)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, 0x1}, 0x20000) 15:26:08 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0xa40024, &(0x7f0000001cc0)={[{}]}) 15:26:08 executing program 7: syz_mount_image$iso9660(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000200)=@sr0, &(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000280)='vfat\x00', 0x0, 0x0) 15:26:08 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdab39eac554c6bee, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x208, &(0x7f0000000080)=0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) io_submit(r0, 0x1, &(0x7f0000000240)=[0x0]) io_destroy(0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r2, &(0x7f0000000900)="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", 0x200) fcntl$setstatus(r2, 0x4, 0x44000) sendfile(r2, 0xffffffffffffffff, 0x0, 0xfdef) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x10000002}) 15:26:08 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) [ 141.356859] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.365877] misc raw-gadget: fail, usb_gadget_register_driver returned -16 15:26:08 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000180)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000002c0)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, 0x1}, 0x20000) 15:26:08 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r0, 0x4b32, &(0x7f00000002c0)) 15:26:08 executing program 6: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0xa40024, &(0x7f0000001cc0)={[{}]}) [ 141.445349] /dev/sr0: Can't open blockdev 15:26:08 executing program 7: syz_mount_image$iso9660(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000200)=@sr0, &(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000280)='vfat\x00', 0x0, 0x0) 15:26:08 executing program 1: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='ramfs\x00', 0x0, 0x0) r0 = syz_mount_image$tmpfs(&(0x7f0000000380), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x2080030, &(0x7f0000000040)=ANY=[]) symlinkat(&(0x7f0000000040)='.\x00', r0, &(0x7f0000000200)='./file0\x00') umount2(&(0x7f0000000080)='./file0/file0\x00', 0x2) 15:26:08 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0xa40024, &(0x7f0000001cc0)={[{}]}) 15:26:08 executing program 1: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='ramfs\x00', 0x0, 0x0) r0 = syz_mount_image$tmpfs(&(0x7f0000000380), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x2080030, &(0x7f0000000040)=ANY=[]) symlinkat(&(0x7f0000000040)='.\x00', r0, &(0x7f0000000200)='./file0\x00') umount2(&(0x7f0000000080)='./file0/file0\x00', 0x2) 15:26:08 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFTYPE={0x8}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x30}}, 0x0) [ 141.547283] /dev/sr0: Can't open blockdev 15:26:09 executing program 7: syz_mount_image$iso9660(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000200)=@sr0, &(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000280)='vfat\x00', 0x0, 0x0) 15:26:09 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r0, 0x4b32, &(0x7f00000002c0)) 15:26:09 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdab39eac554c6bee, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x208, &(0x7f0000000080)=0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) io_submit(r0, 0x1, &(0x7f0000000240)=[0x0]) io_destroy(0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r2, &(0x7f0000000900)="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", 0x200) fcntl$setstatus(r2, 0x4, 0x44000) sendfile(r2, 0xffffffffffffffff, 0x0, 0xfdef) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x10000002}) 15:26:09 executing program 1: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='ramfs\x00', 0x0, 0x0) r0 = syz_mount_image$tmpfs(&(0x7f0000000380), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x2080030, &(0x7f0000000040)=ANY=[]) symlinkat(&(0x7f0000000040)='.\x00', r0, &(0x7f0000000200)='./file0\x00') umount2(&(0x7f0000000080)='./file0/file0\x00', 0x2) 15:26:09 executing program 6: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0xa40024, &(0x7f0000001cc0)={[{}]}) 15:26:09 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0xa40024, &(0x7f0000001cc0)={[{}]}) 15:26:09 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) keyctl$KEYCTL_RESTRICT_KEYRING(0xb, r0, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000400)=@secondary) 15:26:09 executing program 5: rseq(&(0x7f0000000040), 0x59, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) 15:26:09 executing program 1: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='ramfs\x00', 0x0, 0x0) r0 = syz_mount_image$tmpfs(&(0x7f0000000380), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x2080030, &(0x7f0000000040)=ANY=[]) symlinkat(&(0x7f0000000040)='.\x00', r0, &(0x7f0000000200)='./file0\x00') umount2(&(0x7f0000000080)='./file0/file0\x00', 0x2) [ 142.018023] /dev/sr0: Can't open blockdev 15:26:09 executing program 7: syz_mount_image$iso9660(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000200)=@sr0, &(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000280)='vfat\x00', 0x0, 0x0) 15:26:09 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) keyctl$KEYCTL_RESTRICT_KEYRING(0xb, r0, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000400)=@secondary) 15:26:09 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_VOICE(r0, 0x112, 0xf, 0x0, &(0x7f0000000600)) 15:26:09 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_setup(0x32ef, &(0x7f0000000000)={0x0, 0x0, 0x1}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = mq_open(&(0x7f00000001c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\x00'/124, 0x41, 0x0, 0x0) mq_timedsend(r1, &(0x7f0000000080)="e3034c2e07fd00af5397ce1b689718ce2761f5d41b80083b7ab421488b8f4c68459f", 0x22, 0x6, &(0x7f00000003c0)={0x0, 0x3938700}) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='stack\x00') readv(r2, &(0x7f0000000100)=[{&(0x7f0000000140)=""/232, 0xe8}], 0x1) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000001880)={0x0, 0x0, "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", "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 VM DIAGNOSIS: 15:26:00 Registers: info registers vcpu 0 RAX=dffffc0000000000 RBX=ffff88806ce08740 RCX=0000000000000005 RDX=1ffff1100d9c10f3 RSI=ffffffff85e25fc0 RDI=ffff88806ce08740 RBP=ffff88806ce08798 RSP=ffff88806ce08728 R8 =ffffffff86a80ab8 R9 =ffffffff84e98ac0 R10=000000000003d20b R11=0000000000012bf1 R12=ffff88806ce08808 R13=0000000000000000 R14=ffff88800f903700 R15=ffff888009b09b40 RIP=ffffffff8135f2ce RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fc0aede88c0 00000000 00000000 GS =0000 ffff8880e5342000 00000000 00000000 LDT=0000 fffffe6000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fab2c48c6a0 CR3=000000000e2af000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000600 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=2c2c2c2c2c2c2c2c2c2c2c2c2c2c2c2c XMM01=00000000ff0000000000000000000000 XMM02=00000000ff0000000000000000000000 XMM03=7269762f736563697665642f7379732f XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00005566c042ead000000000ffffffff XMM07=00000000000000000000000000000000 XMM08=703e2d73004c414954494e495f544e45 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000009 RBX=ffff88801d924093 RCX=ffffffff847aab72 RDX=ffff88800f969b80 RSI=ffffffff847aab84 RDI=0000000000000006 RBP=0000000000000009 RSP=ffff888013bbf448 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000009 R11=0000000000000000 R12=ffff88801d924094 R13=0000000000000007 R14=0000000000000007 R15=0000000000000047 RIP=ffffffff81758270 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e5442000 00000000 00000000 LDT=0000 fffffe4c00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffccbcbdda8 CR3=000000001eb78000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000600 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ff00000000ff000000000000000000ff XMM01=25252525252525252525252525252525 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000