Warning: Permanently added '[localhost]:48980' (ECDSA) to the list of known hosts. 2026/01/16 15:34:26 fuzzer started 2026/01/16 15:34:27 dialing manager at localhost:42157 syzkaller login: [ 50.762900] cgroup: Unknown subsys name 'net' [ 50.824515] cgroup: Unknown subsys name 'cpuset' [ 50.839692] cgroup: Unknown subsys name 'rlimit' 2026/01/16 15:34:37 syscalls: 2214 2026/01/16 15:34:37 code coverage: enabled 2026/01/16 15:34:37 comparison tracing: enabled 2026/01/16 15:34:37 extra coverage: enabled 2026/01/16 15:34:37 setuid sandbox: enabled 2026/01/16 15:34:37 namespace sandbox: enabled 2026/01/16 15:34:37 Android sandbox: enabled 2026/01/16 15:34:37 fault injection: enabled 2026/01/16 15:34:37 leak checking: enabled 2026/01/16 15:34:37 net packet injection: enabled 2026/01/16 15:34:37 net device setup: enabled 2026/01/16 15:34:37 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2026/01/16 15:34:37 devlink PCI setup: PCI device 0000:00:10.0 is not available 2026/01/16 15:34:37 USB emulation: enabled 2026/01/16 15:34:37 hci packet injection: enabled 2026/01/16 15:34:37 wifi device emulation: enabled 2026/01/16 15:34:37 802.15.4 emulation: enabled 2026/01/16 15:34:37 fetching corpus: 0, signal 0/2000 (executing program) 2026/01/16 15:34:37 fetching corpus: 50, signal 21931/25585 (executing program) 2026/01/16 15:34:37 fetching corpus: 100, signal 33835/39017 (executing program) 2026/01/16 15:34:37 fetching corpus: 150, signal 45893/52348 (executing program) 2026/01/16 15:34:37 fetching corpus: 200, signal 53021/60798 (executing program) 2026/01/16 15:34:38 fetching corpus: 249, signal 60264/69220 (executing program) 2026/01/16 15:34:38 fetching corpus: 299, signal 64688/74899 (executing program) 2026/01/16 15:34:38 fetching corpus: 349, signal 67987/79434 (executing program) 2026/01/16 15:34:38 fetching corpus: 398, signal 73263/85723 (executing program) 2026/01/16 15:34:38 fetching corpus: 448, signal 77025/90539 (executing program) 2026/01/16 15:34:38 fetching corpus: 498, signal 79295/93995 (executing program) 2026/01/16 15:34:38 fetching corpus: 548, signal 82640/98349 (executing program) 2026/01/16 15:34:38 fetching corpus: 598, signal 86598/103190 (executing program) 2026/01/16 15:34:38 fetching corpus: 648, signal 89755/107260 (executing program) 2026/01/16 15:34:39 fetching corpus: 698, signal 92404/110849 (executing program) 2026/01/16 15:34:39 fetching corpus: 748, signal 95358/114644 (executing program) 2026/01/16 15:34:39 fetching corpus: 798, signal 98398/118442 (executing program) 2026/01/16 15:34:39 fetching corpus: 848, signal 101119/121990 (executing program) 2026/01/16 15:34:39 fetching corpus: 898, signal 103440/125102 (executing program) 2026/01/16 15:34:39 fetching corpus: 948, signal 104735/127344 (executing program) 2026/01/16 15:34:39 fetching corpus: 997, signal 106224/129685 (executing program) 2026/01/16 15:34:40 fetching corpus: 1047, signal 107688/131973 (executing program) 2026/01/16 15:34:40 fetching corpus: 1097, signal 110826/135640 (executing program) 2026/01/16 15:34:40 fetching corpus: 1147, signal 112496/138064 (executing program) 2026/01/16 15:34:40 fetching corpus: 1197, signal 114957/141054 (executing program) 2026/01/16 15:34:40 fetching corpus: 1246, signal 117326/144018 (executing program) 2026/01/16 15:34:40 fetching corpus: 1296, signal 118869/146178 (executing program) 2026/01/16 15:34:40 fetching corpus: 1345, signal 120626/148555 (executing program) 2026/01/16 15:34:40 fetching corpus: 1395, signal 122152/150687 (executing program) 2026/01/16 15:34:40 fetching corpus: 1445, signal 123233/152472 (executing program) 2026/01/16 15:34:41 fetching corpus: 1495, signal 124816/154628 (executing program) 2026/01/16 15:34:41 fetching corpus: 1545, signal 126595/156933 (executing program) 2026/01/16 15:34:41 fetching corpus: 1595, signal 127539/158587 (executing program) 2026/01/16 15:34:41 fetching corpus: 1645, signal 128609/160298 (executing program) 2026/01/16 15:34:41 fetching corpus: 1695, signal 129680/161972 (executing program) 2026/01/16 15:34:41 fetching corpus: 1745, signal 130881/163710 (executing program) 2026/01/16 15:34:41 fetching corpus: 1795, signal 131599/165120 (executing program) 2026/01/16 15:34:41 fetching corpus: 1845, signal 132441/166621 (executing program) 2026/01/16 15:34:41 fetching corpus: 1895, signal 133639/168303 (executing program) 2026/01/16 15:34:42 fetching corpus: 1945, signal 135196/170220 (executing program) 2026/01/16 15:34:42 fetching corpus: 1995, signal 135865/171548 (executing program) 2026/01/16 15:34:42 fetching corpus: 2045, signal 136913/173131 (executing program) 2026/01/16 15:34:42 fetching corpus: 2095, signal 137999/174625 (executing program) 2026/01/16 15:34:42 fetching corpus: 2145, signal 138834/175972 (executing program) 2026/01/16 15:34:42 fetching corpus: 2195, signal 139930/177535 (executing program) 2026/01/16 15:34:42 fetching corpus: 2245, signal 140974/179025 (executing program) 2026/01/16 15:34:42 fetching corpus: 2295, signal 141532/180189 (executing program) 2026/01/16 15:34:42 fetching corpus: 2345, signal 142348/181572 (executing program) 2026/01/16 15:34:42 fetching corpus: 2395, signal 143627/183117 (executing program) 2026/01/16 15:34:43 fetching corpus: 2445, signal 144827/184601 (executing program) 2026/01/16 15:34:43 fetching corpus: 2495, signal 145547/185803 (executing program) 2026/01/16 15:34:43 fetching corpus: 2545, signal 147895/187938 (executing program) 2026/01/16 15:34:43 fetching corpus: 2595, signal 150130/189916 (executing program) 2026/01/16 15:34:43 fetching corpus: 2644, signal 150746/190991 (executing program) 2026/01/16 15:34:43 fetching corpus: 2694, signal 151475/192091 (executing program) 2026/01/16 15:34:43 fetching corpus: 2744, signal 152041/193129 (executing program) 2026/01/16 15:34:43 fetching corpus: 2794, signal 152794/194219 (executing program) 2026/01/16 15:34:43 fetching corpus: 2842, signal 153441/195261 (executing program) 2026/01/16 15:34:43 fetching corpus: 2892, signal 154209/196399 (executing program) 2026/01/16 15:34:43 fetching corpus: 2942, signal 154967/197490 (executing program) 2026/01/16 15:34:44 fetching corpus: 2992, signal 155870/198671 (executing program) 2026/01/16 15:34:44 fetching corpus: 3042, signal 156613/199734 (executing program) 2026/01/16 15:34:44 fetching corpus: 3091, signal 157114/200629 (executing program) 2026/01/16 15:34:44 fetching corpus: 3140, signal 157784/201658 (executing program) 2026/01/16 15:34:44 fetching corpus: 3189, signal 158405/202617 (executing program) 2026/01/16 15:34:44 fetching corpus: 3239, signal 159134/203649 (executing program) 2026/01/16 15:34:44 fetching corpus: 3289, signal 159859/204686 (executing program) 2026/01/16 15:34:44 fetching corpus: 3338, signal 160420/205578 (executing program) 2026/01/16 15:34:45 fetching corpus: 3388, signal 160949/206437 (executing program) 2026/01/16 15:34:45 fetching corpus: 3438, signal 161515/207288 (executing program) 2026/01/16 15:34:45 fetching corpus: 3488, signal 162057/208101 (executing program) 2026/01/16 15:34:45 fetching corpus: 3538, signal 162917/209071 (executing program) 2026/01/16 15:34:45 fetching corpus: 3588, signal 163943/210090 (executing program) 2026/01/16 15:34:45 fetching corpus: 3637, signal 164591/211023 (executing program) 2026/01/16 15:34:45 fetching corpus: 3687, signal 165040/211837 (executing program) 2026/01/16 15:34:45 fetching corpus: 3737, signal 165934/212819 (executing program) 2026/01/16 15:34:45 fetching corpus: 3787, signal 166671/213739 (executing program) 2026/01/16 15:34:46 fetching corpus: 3837, signal 167361/214555 (executing program) 2026/01/16 15:34:46 fetching corpus: 3887, signal 167876/215342 (executing program) 2026/01/16 15:34:46 fetching corpus: 3937, signal 168487/216147 (executing program) 2026/01/16 15:34:46 fetching corpus: 3987, signal 169199/217004 (executing program) 2026/01/16 15:34:46 fetching corpus: 4037, signal 169990/217861 (executing program) 2026/01/16 15:34:46 fetching corpus: 4087, signal 170502/218649 (executing program) 2026/01/16 15:34:46 fetching corpus: 4137, signal 171127/219392 (executing program) 2026/01/16 15:34:46 fetching corpus: 4186, signal 171633/220125 (executing program) 2026/01/16 15:34:46 fetching corpus: 4236, signal 172341/220857 (executing program) 2026/01/16 15:34:47 fetching corpus: 4286, signal 172978/221629 (executing program) 2026/01/16 15:34:47 fetching corpus: 4335, signal 173528/222355 (executing program) 2026/01/16 15:34:47 fetching corpus: 4385, signal 173916/222974 (executing program) 2026/01/16 15:34:47 fetching corpus: 4434, signal 174272/223613 (executing program) 2026/01/16 15:34:47 fetching corpus: 4484, signal 174841/224290 (executing program) 2026/01/16 15:34:47 fetching corpus: 4534, signal 175397/224943 (executing program) 2026/01/16 15:34:47 fetching corpus: 4583, signal 175998/225611 (executing program) 2026/01/16 15:34:47 fetching corpus: 4633, signal 176507/226248 (executing program) 2026/01/16 15:34:48 fetching corpus: 4683, signal 177099/226887 (executing program) 2026/01/16 15:34:48 fetching corpus: 4732, signal 177817/227553 (executing program) 2026/01/16 15:34:48 fetching corpus: 4782, signal 178599/228230 (executing program) 2026/01/16 15:34:48 fetching corpus: 4831, signal 179076/228831 (executing program) 2026/01/16 15:34:48 fetching corpus: 4881, signal 179665/229416 (executing program) 2026/01/16 15:34:48 fetching corpus: 4931, signal 180101/230001 (executing program) 2026/01/16 15:34:48 fetching corpus: 4981, signal 180575/230587 (executing program) 2026/01/16 15:34:49 fetching corpus: 5031, signal 181019/231143 (executing program) 2026/01/16 15:34:49 fetching corpus: 5081, signal 181424/231697 (executing program) 2026/01/16 15:34:49 fetching corpus: 5131, signal 182027/232283 (executing program) 2026/01/16 15:34:49 fetching corpus: 5181, signal 182538/232827 (executing program) 2026/01/16 15:34:49 fetching corpus: 5231, signal 183196/233357 (executing program) 2026/01/16 15:34:49 fetching corpus: 5280, signal 183645/233879 (executing program) 2026/01/16 15:34:49 fetching corpus: 5330, signal 184318/234426 (executing program) 2026/01/16 15:34:50 fetching corpus: 5380, signal 184715/234926 (executing program) 2026/01/16 15:34:50 fetching corpus: 5430, signal 185156/235403 (executing program) 2026/01/16 15:34:50 fetching corpus: 5480, signal 185566/235893 (executing program) 2026/01/16 15:34:50 fetching corpus: 5530, signal 186559/236395 (executing program) 2026/01/16 15:34:50 fetching corpus: 5580, signal 186943/236866 (executing program) 2026/01/16 15:34:50 fetching corpus: 5630, signal 187371/237355 (executing program) 2026/01/16 15:34:50 fetching corpus: 5680, signal 187796/237840 (executing program) 2026/01/16 15:34:50 fetching corpus: 5730, signal 188270/238305 (executing program) 2026/01/16 15:34:50 fetching corpus: 5780, signal 188661/238746 (executing program) 2026/01/16 15:34:51 fetching corpus: 5830, signal 189113/239183 (executing program) 2026/01/16 15:34:51 fetching corpus: 5880, signal 189662/239444 (executing program) 2026/01/16 15:34:51 fetching corpus: 5930, signal 190205/239461 (executing program) 2026/01/16 15:34:51 fetching corpus: 5980, signal 190557/239462 (executing program) 2026/01/16 15:34:51 fetching corpus: 6029, signal 191032/239468 (executing program) 2026/01/16 15:34:51 fetching corpus: 6079, signal 191594/239506 (executing program) 2026/01/16 15:34:51 fetching corpus: 6128, signal 191950/239524 (executing program) 2026/01/16 15:34:51 fetching corpus: 6178, signal 192429/239524 (executing program) 2026/01/16 15:34:51 fetching corpus: 6228, signal 193039/239524 (executing program) 2026/01/16 15:34:52 fetching corpus: 6278, signal 193710/239524 (executing program) 2026/01/16 15:34:52 fetching corpus: 6327, signal 194039/239524 (executing program) 2026/01/16 15:34:52 fetching corpus: 6376, signal 194549/239538 (executing program) 2026/01/16 15:34:52 fetching corpus: 6426, signal 194979/239538 (executing program) 2026/01/16 15:34:52 fetching corpus: 6476, signal 195554/239538 (executing program) 2026/01/16 15:34:52 fetching corpus: 6526, signal 195905/239538 (executing program) 2026/01/16 15:34:52 fetching corpus: 6576, signal 196334/239540 (executing program) 2026/01/16 15:34:52 fetching corpus: 6625, signal 196661/239543 (executing program) 2026/01/16 15:34:53 fetching corpus: 6675, signal 196970/239543 (executing program) 2026/01/16 15:34:53 fetching corpus: 6725, signal 197515/239543 (executing program) 2026/01/16 15:34:53 fetching corpus: 6775, signal 198049/239543 (executing program) 2026/01/16 15:34:53 fetching corpus: 6825, signal 198442/239557 (executing program) 2026/01/16 15:34:53 fetching corpus: 6875, signal 198715/239557 (executing program) 2026/01/16 15:34:53 fetching corpus: 6925, signal 199068/239562 (executing program) 2026/01/16 15:34:53 fetching corpus: 6973, signal 199340/239568 (executing program) 2026/01/16 15:34:53 fetching corpus: 7023, signal 199663/239568 (executing program) 2026/01/16 15:34:53 fetching corpus: 7073, signal 200146/239568 (executing program) 2026/01/16 15:34:53 fetching corpus: 7122, signal 200476/239568 (executing program) 2026/01/16 15:34:54 fetching corpus: 7172, signal 200841/239591 (executing program) 2026/01/16 15:34:54 fetching corpus: 7222, signal 201178/239592 (executing program) 2026/01/16 15:34:54 fetching corpus: 7271, signal 201440/239596 (executing program) 2026/01/16 15:34:54 fetching corpus: 7320, signal 202013/239612 (executing program) 2026/01/16 15:34:54 fetching corpus: 7370, signal 202399/239612 (executing program) 2026/01/16 15:34:54 fetching corpus: 7419, signal 202726/239613 (executing program) 2026/01/16 15:34:54 fetching corpus: 7468, signal 203224/239621 (executing program) 2026/01/16 15:34:54 fetching corpus: 7517, signal 203483/239622 (executing program) 2026/01/16 15:34:55 fetching corpus: 7567, signal 203937/239622 (executing program) 2026/01/16 15:34:55 fetching corpus: 7616, signal 204297/239629 (executing program) 2026/01/16 15:34:55 fetching corpus: 7665, signal 204567/239629 (executing program) 2026/01/16 15:34:55 fetching corpus: 7713, signal 204869/239631 (executing program) 2026/01/16 15:34:55 fetching corpus: 7762, signal 205139/239651 (executing program) 2026/01/16 15:34:55 fetching corpus: 7812, signal 205483/239651 (executing program) 2026/01/16 15:34:55 fetching corpus: 7862, signal 206019/239658 (executing program) 2026/01/16 15:34:55 fetching corpus: 7912, signal 206307/239668 (executing program) 2026/01/16 15:34:56 fetching corpus: 7962, signal 206753/239669 (executing program) 2026/01/16 15:34:56 fetching corpus: 8012, signal 207057/239677 (executing program) 2026/01/16 15:34:56 fetching corpus: 8062, signal 207386/239684 (executing program) 2026/01/16 15:34:56 fetching corpus: 8112, signal 207710/239684 (executing program) 2026/01/16 15:34:56 fetching corpus: 8161, signal 208009/239690 (executing program) 2026/01/16 15:34:56 fetching corpus: 8210, signal 208243/239697 (executing program) 2026/01/16 15:34:56 fetching corpus: 8259, signal 208635/239704 (executing program) 2026/01/16 15:34:56 fetching corpus: 8307, signal 208947/239704 (executing program) 2026/01/16 15:34:56 fetching corpus: 8356, signal 209254/239714 (executing program) 2026/01/16 15:34:56 fetching corpus: 8406, signal 209608/239715 (executing program) 2026/01/16 15:34:57 fetching corpus: 8456, signal 210080/239715 (executing program) 2026/01/16 15:34:57 fetching corpus: 8506, signal 210432/239722 (executing program) 2026/01/16 15:34:57 fetching corpus: 8555, signal 210714/239724 (executing program) 2026/01/16 15:34:57 fetching corpus: 8605, signal 210992/239755 (executing program) 2026/01/16 15:34:57 fetching corpus: 8655, signal 211204/239755 (executing program) 2026/01/16 15:34:57 fetching corpus: 8705, signal 211661/239758 (executing program) 2026/01/16 15:34:57 fetching corpus: 8755, signal 211958/239758 (executing program) 2026/01/16 15:34:57 fetching corpus: 8803, signal 212404/239758 (executing program) 2026/01/16 15:34:58 fetching corpus: 8852, signal 212831/239765 (executing program) 2026/01/16 15:34:58 fetching corpus: 8902, signal 213049/239765 (executing program) 2026/01/16 15:34:58 fetching corpus: 8952, signal 213318/239765 (executing program) 2026/01/16 15:34:58 fetching corpus: 9001, signal 213598/239767 (executing program) 2026/01/16 15:34:58 fetching corpus: 9050, signal 213836/239767 (executing program) 2026/01/16 15:34:58 fetching corpus: 9100, signal 214084/239767 (executing program) 2026/01/16 15:34:58 fetching corpus: 9149, signal 214538/239769 (executing program) 2026/01/16 15:34:58 fetching corpus: 9199, signal 214737/239773 (executing program) 2026/01/16 15:34:58 fetching corpus: 9249, signal 215033/239775 (executing program) 2026/01/16 15:34:59 fetching corpus: 9299, signal 215306/239775 (executing program) 2026/01/16 15:34:59 fetching corpus: 9349, signal 215503/239775 (executing program) 2026/01/16 15:34:59 fetching corpus: 9399, signal 215737/239775 (executing program) 2026/01/16 15:34:59 fetching corpus: 9449, signal 215963/239775 (executing program) 2026/01/16 15:34:59 fetching corpus: 9498, signal 216268/239775 (executing program) 2026/01/16 15:34:59 fetching corpus: 9547, signal 216541/239775 (executing program) 2026/01/16 15:34:59 fetching corpus: 9597, signal 217020/239775 (executing program) 2026/01/16 15:34:59 fetching corpus: 9647, signal 217242/239777 (executing program) 2026/01/16 15:34:59 fetching corpus: 9697, signal 217499/239777 (executing program) 2026/01/16 15:35:00 fetching corpus: 9747, signal 217757/239778 (executing program) 2026/01/16 15:35:00 fetching corpus: 9795, signal 217965/239779 (executing program) 2026/01/16 15:35:00 fetching corpus: 9845, signal 218274/239779 (executing program) 2026/01/16 15:35:00 fetching corpus: 9894, signal 218520/239781 (executing program) 2026/01/16 15:35:00 fetching corpus: 9943, signal 218781/239782 (executing program) 2026/01/16 15:35:00 fetching corpus: 9993, signal 219030/239782 (executing program) 2026/01/16 15:35:00 fetching corpus: 10043, signal 219327/239782 (executing program) 2026/01/16 15:35:00 fetching corpus: 10093, signal 219694/239782 (executing program) 2026/01/16 15:35:00 fetching corpus: 10143, signal 219899/239782 (executing program) 2026/01/16 15:35:01 fetching corpus: 10193, signal 220155/239783 (executing program) 2026/01/16 15:35:01 fetching corpus: 10243, signal 220399/239783 (executing program) 2026/01/16 15:35:01 fetching corpus: 10293, signal 220617/239784 (executing program) 2026/01/16 15:35:01 fetching corpus: 10343, signal 220891/239790 (executing program) 2026/01/16 15:35:01 fetching corpus: 10393, signal 221135/239790 (executing program) 2026/01/16 15:35:01 fetching corpus: 10443, signal 221383/239790 (executing program) 2026/01/16 15:35:01 fetching corpus: 10493, signal 221580/239813 (executing program) 2026/01/16 15:35:01 fetching corpus: 10543, signal 221779/239813 (executing program) 2026/01/16 15:35:01 fetching corpus: 10593, signal 221979/239813 (executing program) 2026/01/16 15:35:01 fetching corpus: 10643, signal 222212/239815 (executing program) 2026/01/16 15:35:02 fetching corpus: 10693, signal 222501/239815 (executing program) 2026/01/16 15:35:02 fetching corpus: 10743, signal 222660/239815 (executing program) 2026/01/16 15:35:02 fetching corpus: 10792, signal 222863/239815 (executing program) 2026/01/16 15:35:02 fetching corpus: 10841, signal 223061/239819 (executing program) 2026/01/16 15:35:02 fetching corpus: 10891, signal 223315/239819 (executing program) 2026/01/16 15:35:02 fetching corpus: 10941, signal 223544/239819 (executing program) 2026/01/16 15:35:02 fetching corpus: 10989, signal 223735/239819 (executing program) 2026/01/16 15:35:02 fetching corpus: 11039, signal 223976/239820 (executing program) 2026/01/16 15:35:02 fetching corpus: 11089, signal 224217/239820 (executing program) 2026/01/16 15:35:03 fetching corpus: 11139, signal 224430/239820 (executing program) 2026/01/16 15:35:03 fetching corpus: 11188, signal 224658/239823 (executing program) 2026/01/16 15:35:03 fetching corpus: 11238, signal 224846/239824 (executing program) 2026/01/16 15:35:03 fetching corpus: 11288, signal 225217/239824 (executing program) 2026/01/16 15:35:03 fetching corpus: 11338, signal 225432/239824 (executing program) 2026/01/16 15:35:03 fetching corpus: 11388, signal 225680/239824 (executing program) 2026/01/16 15:35:03 fetching corpus: 11438, signal 225930/239824 (executing program) 2026/01/16 15:35:03 fetching corpus: 11488, signal 226102/239826 (executing program) 2026/01/16 15:35:03 fetching corpus: 11538, signal 226353/239826 (executing program) 2026/01/16 15:35:04 fetching corpus: 11588, signal 226640/239827 (executing program) 2026/01/16 15:35:04 fetching corpus: 11638, signal 226868/239843 (executing program) 2026/01/16 15:35:04 fetching corpus: 11688, signal 227028/239843 (executing program) 2026/01/16 15:35:04 fetching corpus: 11738, signal 227470/239843 (executing program) 2026/01/16 15:35:04 fetching corpus: 11788, signal 227644/239843 (executing program) 2026/01/16 15:35:04 fetching corpus: 11838, signal 227874/239843 (executing program) 2026/01/16 15:35:04 fetching corpus: 11887, signal 228062/239844 (executing program) 2026/01/16 15:35:04 fetching corpus: 11936, signal 228264/239844 (executing program) 2026/01/16 15:35:05 fetching corpus: 11985, signal 228456/239844 (executing program) 2026/01/16 15:35:05 fetching corpus: 12035, signal 228652/239844 (executing program) 2026/01/16 15:35:05 fetching corpus: 12084, signal 228893/239844 (executing program) 2026/01/16 15:35:05 fetching corpus: 12134, signal 229119/239844 (executing program) 2026/01/16 15:35:05 fetching corpus: 12184, signal 229372/239848 (executing program) 2026/01/16 15:35:05 fetching corpus: 12234, signal 229559/239848 (executing program) 2026/01/16 15:35:05 fetching corpus: 12284, signal 229730/239848 (executing program) 2026/01/16 15:35:05 fetching corpus: 12334, signal 229932/239848 (executing program) 2026/01/16 15:35:05 fetching corpus: 12384, signal 230134/239848 (executing program) 2026/01/16 15:35:05 fetching corpus: 12434, signal 230276/239850 (executing program) 2026/01/16 15:35:06 fetching corpus: 12484, signal 230488/239850 (executing program) 2026/01/16 15:35:06 fetching corpus: 12534, signal 230733/239850 (executing program) 2026/01/16 15:35:06 fetching corpus: 12583, signal 230979/239852 (executing program) 2026/01/16 15:35:06 fetching corpus: 12633, signal 231153/239852 (executing program) 2026/01/16 15:35:06 fetching corpus: 12683, signal 231353/239853 (executing program) 2026/01/16 15:35:06 fetching corpus: 12733, signal 231502/239853 (executing program) 2026/01/16 15:35:06 fetching corpus: 12781, signal 231660/239853 (executing program) 2026/01/16 15:35:06 fetching corpus: 12831, signal 231918/239853 (executing program) 2026/01/16 15:35:07 fetching corpus: 12880, signal 232249/239853 (executing program) 2026/01/16 15:35:07 fetching corpus: 12930, signal 232542/239856 (executing program) 2026/01/16 15:35:07 fetching corpus: 12980, signal 232773/239860 (executing program) 2026/01/16 15:35:07 fetching corpus: 13030, signal 232972/239874 (executing program) 2026/01/16 15:35:07 fetching corpus: 13080, signal 233198/239874 (executing program) 2026/01/16 15:35:07 fetching corpus: 13130, signal 233450/239874 (executing program) 2026/01/16 15:35:07 fetching corpus: 13180, signal 233641/239874 (executing program) 2026/01/16 15:35:07 fetching corpus: 13230, signal 233851/239880 (executing program) 2026/01/16 15:35:08 fetching corpus: 13279, signal 234002/239881 (executing program) 2026/01/16 15:35:08 fetching corpus: 13329, signal 234159/239881 (executing program) 2026/01/16 15:35:08 fetching corpus: 13379, signal 234444/239882 (executing program) 2026/01/16 15:35:08 fetching corpus: 13427, signal 234694/239882 (executing program) 2026/01/16 15:35:08 fetching corpus: 13477, signal 234849/239882 (executing program) 2026/01/16 15:35:08 fetching corpus: 13527, signal 235082/239882 (executing program) 2026/01/16 15:35:08 fetching corpus: 13577, signal 235314/239882 (executing program) 2026/01/16 15:35:08 fetching corpus: 13627, signal 235883/239882 (executing program) 2026/01/16 15:35:08 fetching corpus: 13677, signal 236080/239882 (executing program) 2026/01/16 15:35:08 fetching corpus: 13727, signal 236292/239885 (executing program) 2026/01/16 15:35:08 fetching corpus: 13777, signal 236484/239885 (executing program) 2026/01/16 15:35:09 fetching corpus: 13827, signal 236675/239889 (executing program) 2026/01/16 15:35:09 fetching corpus: 13877, signal 236846/239889 (executing program) 2026/01/16 15:35:09 fetching corpus: 13927, signal 237023/239895 (executing program) 2026/01/16 15:35:09 fetching corpus: 13977, signal 237276/239896 (executing program) 2026/01/16 15:35:09 fetching corpus: 14027, signal 237400/239896 (executing program) 2026/01/16 15:35:09 fetching corpus: 14077, signal 237644/239896 (executing program) 2026/01/16 15:35:09 fetching corpus: 14127, signal 237871/239902 (executing program) 2026/01/16 15:35:09 fetching corpus: 14176, signal 238077/239917 (executing program) 2026/01/16 15:35:09 fetching corpus: 14176, signal 238077/239917 (executing program) 2026/01/16 15:35:12 starting 8 fuzzer processes 15:35:12 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) dup2(r0, r1) 15:35:12 executing program 1: r0 = semget$private(0x0, 0x3, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semtimedop(r0, &(0x7f0000000100)=[{}], 0x1, 0x0) 15:35:12 executing program 2: syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340), 0xffffffffffffffff) 15:35:12 executing program 6: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) r0 = socket$nl_route(0x10, 0x3, 0x0) getsockname(r0, 0x0, &(0x7f00000002c0)) 15:35:12 executing program 3: pipe(&(0x7f0000000880)={0xffffffffffffffff}) fcntl$setstatus(r0, 0x407, 0x44000) 15:35:12 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)={0x14, r1, 0xb341daa0822653b3, 0x0, 0x0, {0x11}}, 0x14}}, 0x0) 15:35:12 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_RESIZE(r0, 0x4b32, &(0x7f0000000600)) 15:35:12 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x1, 0x400, 0x4}, 0x1c) poll(&(0x7f00000002c0)=[{r0}], 0x1, 0x0) [ 95.965644] audit: type=1400 audit(1768577712.518:7): avc: denied { execmem } for pid=270 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 97.214991] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 97.217116] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 97.219538] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 97.221510] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 97.223686] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 97.227466] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 97.232919] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 97.234814] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 97.237508] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 97.239481] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 97.279828] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 97.282484] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 97.289603] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 97.293954] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 97.301483] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 97.302986] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 97.305537] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 97.307412] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 97.313049] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 97.315609] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 97.325533] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 97.326786] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 97.328813] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 97.331644] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 97.333199] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 97.335048] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 97.336573] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 97.338071] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 97.339977] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 97.345081] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 97.352625] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 97.353825] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 97.355726] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 97.357895] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 97.359710] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 97.360911] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 97.362631] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 97.364585] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 97.372593] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 97.378871] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 99.306683] Bluetooth: hci1: command tx timeout [ 99.307586] Bluetooth: hci0: command tx timeout [ 99.372026] Bluetooth: hci2: command tx timeout [ 99.373018] Bluetooth: hci3: command tx timeout [ 99.433587] Bluetooth: hci4: command tx timeout [ 99.434500] Bluetooth: hci6: command tx timeout [ 99.435448] Bluetooth: hci5: command tx timeout [ 99.436169] Bluetooth: hci7: command tx timeout [ 101.353344] Bluetooth: hci1: command tx timeout [ 101.353769] Bluetooth: hci0: command tx timeout [ 101.417689] Bluetooth: hci2: command tx timeout [ 101.418085] Bluetooth: hci3: command tx timeout [ 101.481977] Bluetooth: hci6: command tx timeout [ 101.482405] Bluetooth: hci4: command tx timeout [ 101.482786] Bluetooth: hci7: command tx timeout [ 101.483168] Bluetooth: hci5: command tx timeout [ 103.402233] Bluetooth: hci0: command tx timeout [ 103.402323] Bluetooth: hci1: command tx timeout [ 103.465708] Bluetooth: hci3: command tx timeout [ 103.466146] Bluetooth: hci2: command tx timeout [ 103.529312] Bluetooth: hci6: command tx timeout [ 103.529734] Bluetooth: hci5: command tx timeout [ 103.530119] Bluetooth: hci7: command tx timeout [ 103.530609] Bluetooth: hci4: command tx timeout [ 105.450186] Bluetooth: hci0: command tx timeout [ 105.450278] Bluetooth: hci1: command tx timeout [ 105.513741] Bluetooth: hci2: command tx timeout [ 105.514138] Bluetooth: hci3: command tx timeout [ 105.577269] Bluetooth: hci7: command tx timeout [ 105.577726] Bluetooth: hci5: command tx timeout [ 105.578030] Bluetooth: hci6: command tx timeout [ 105.578519] Bluetooth: hci4: command tx timeout [ 131.204570] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.205287] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.383175] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.383834] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.550611] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.554500] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.690991] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.691771] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.753306] audit: type=1400 audit(1768577748.306:8): avc: denied { open } for pid=3820 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 131.754960] audit: type=1400 audit(1768577748.306:9): avc: denied { kernel } for pid=3820 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 131.862500] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.863098] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.984645] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.985287] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.155887] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.157013] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.262245] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.262869] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.378353] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.378983] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.424307] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.425413] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.608893] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.609830] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.672514] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.673096] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.939082] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.940861] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.964093] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.964793] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.099132] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.099825] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.119363] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.119942] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 15:35:49 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x44, r1, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_SECCTX={0x25, 0x7, 'system_u:object_r:sshd_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0x44}}, 0x0) 15:35:49 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000600)=@getpolicy={0x5c, 0x15, 0x1, 0x0, 0x0, {{@in6=@private2, @in=@multicast1}}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0x5c}}, 0x0) 15:35:49 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x1, 0x400, 0x4}, 0x1c) poll(&(0x7f00000002c0)=[{r0}], 0x1, 0x0) 15:35:49 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_RESIZE(r0, 0x4b32, &(0x7f0000000600)) 15:35:49 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)={0x14, r1, 0xb341daa0822653b3, 0x0, 0x0, {0x11}}, 0x14}}, 0x0) 15:35:49 executing program 3: pipe(&(0x7f0000000880)={0xffffffffffffffff}) fcntl$setstatus(r0, 0x407, 0x44000) 15:35:49 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) dup2(r0, r1) 15:35:49 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdab39eac554c6bee, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x10000002}) 15:35:49 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_RESIZE(r0, 0x4b32, &(0x7f0000000600)) 15:35:49 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)={0x14, r1, 0xb341daa0822653b3, 0x0, 0x0, {0x11}}, 0x14}}, 0x0) 15:35:49 executing program 3: pipe(&(0x7f0000000880)={0xffffffffffffffff}) fcntl$setstatus(r0, 0x407, 0x44000) 15:35:49 executing program 2: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = timerfd_create(0x0, 0x0) poll(&(0x7f0000000040)=[{r1}, {r0}], 0x2, 0x800) 15:35:49 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init() close(r0) 15:35:49 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) dup2(r0, r1) 15:35:50 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_RESIZE(r0, 0x4b32, &(0x7f0000000600)) 15:35:50 executing program 6: r0 = io_uring_setup(0x5053, &(0x7f0000000140)) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x1b, &(0x7f00000002c0)=[0xffffffffffffffff], 0x1) 15:35:50 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)={0x14, r1, 0xb341daa0822653b3, 0x0, 0x0, {0x11}}, 0x14}}, 0x0) 15:35:50 executing program 3: pipe(&(0x7f0000000880)={0xffffffffffffffff}) fcntl$setstatus(r0, 0x407, 0x44000) 15:35:50 executing program 2: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = timerfd_create(0x0, 0x0) poll(&(0x7f0000000040)=[{r1}, {r0}], 0x2, 0x800) 15:35:50 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) dup2(r0, r1) 15:35:50 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x1, 0x400, 0x4}, 0x1c) poll(&(0x7f00000002c0)=[{r0}], 0x1, 0x0) 15:35:50 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdab39eac554c6bee, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x10000002}) 15:35:50 executing program 3: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) openat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={0x40}, 0x18) 15:35:50 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x20, r1, 0x1, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}}, 0x0) 15:35:50 executing program 2: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = timerfd_create(0x0, 0x0) poll(&(0x7f0000000040)=[{r1}, {r0}], 0x2, 0x800) 15:35:50 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000280)={'syz_tun\x00', &(0x7f0000000200)=@ethtool_link_settings={0x4c}}) 15:35:50 executing program 6: r0 = io_uring_setup(0x5053, &(0x7f0000000140)) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x1b, &(0x7f00000002c0)=[0xffffffffffffffff], 0x1) 15:35:50 executing program 0: r0 = syz_open_dev$rtc(&(0x7f0000000800), 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x0) 15:35:50 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) recvmmsg$unix(r0, &(0x7f0000001700)=[{{0x0, 0xfffffffffffffe1c, 0x0, 0x0, 0x0, 0x57}}], 0x572, 0x0, 0x0) pipe(0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r2, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) open$dir(0x0, 0x0, 0x0) [ 133.829046] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list 15:35:50 executing program 2: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = timerfd_create(0x0, 0x0) poll(&(0x7f0000000040)=[{r1}, {r0}], 0x2, 0x800) 15:35:50 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000280)=@req3={0x1000, 0x1, 0x400, 0x4}, 0x1c) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000000), 0x4) 15:35:50 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000280)={'syz_tun\x00', &(0x7f0000000200)=@ethtool_link_settings={0x4c}}) 15:35:50 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdab39eac554c6bee, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x10000002}) 15:35:50 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x1, 0x400, 0x4}, 0x1c) poll(&(0x7f00000002c0)=[{r0}], 0x1, 0x0) 15:35:50 executing program 6: r0 = io_uring_setup(0x5053, &(0x7f0000000140)) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x1b, &(0x7f00000002c0)=[0xffffffffffffffff], 0x1) 15:35:50 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) recvmmsg$unix(r0, &(0x7f0000001700)=[{{0x0, 0xfffffffffffffe1c, 0x0, 0x0, 0x0, 0x57}}], 0x572, 0x0, 0x0) pipe(0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r2, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) open$dir(0x0, 0x0, 0x0) 15:35:50 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x20, r1, 0x1, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}}, 0x0) 15:35:50 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000280)={'syz_tun\x00', &(0x7f0000000200)=@ethtool_link_settings={0x4c}}) 15:35:50 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000280)={'syz_tun\x00', &(0x7f0000000200)=@ethtool_link_settings={0x4c}}) 15:35:50 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r1) setgid(0x0) 15:35:50 executing program 6: r0 = io_uring_setup(0x5053, &(0x7f0000000140)) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x1b, &(0x7f00000002c0)=[0xffffffffffffffff], 0x1) [ 134.112846] [ 134.113152] ===================================== [ 134.113862] WARNING: bad unlock balance detected! [ 134.114551] 6.19.0-rc5-next-20260116 #1 Not tainted [ 134.115280] ------------------------------------- [ 134.120685] syz-executor.6/3997 is trying to release lock (rcu_read_lock) at: [ 134.121910] [] __wait_on_freeing_inode+0x105/0x350 [ 134.122887] but there are no more locks to release! [ 134.123658] [ 134.123658] other info that might help us debug this: [ 134.124623] 4 locks held by syz-executor.6/3997: [ 134.125328] #0: ffff88800f6f43f8 (sb_writers#3){.+.+}-{0:0}, at: filename_create+0xf7/0x400 [ 134.126639] #1: ffff88804a973388 (&type->i_mutex_dir_key#3/1){+.+.}-{4:4}, at: filename_create+0x1b1/0x400 [ 134.128167] #2: ffff88800f640950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xe32/0x12d0 [ 134.129510] #3: ffffffff85c16898 (inode_hash_lock){+.+.}-{3:3}, at: insert_inode_locked+0xf9/0x890 [ 134.130888] [ 134.130888] stack backtrace: [ 134.131563] CPU: 0 UID: 0 PID: 3997 Comm: syz-executor.6 Not tainted 6.19.0-rc5-next-20260116 #1 PREEMPT(lazy) [ 134.131590] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 134.131602] Call Trace: [ 134.131609] [ 134.131617] dump_stack_lvl+0xca/0x120 [ 134.131659] ? __wait_on_freeing_inode+0x105/0x350 [ 134.131686] print_unlock_imbalance_bug+0x118/0x130 [ 134.131712] ? __wait_on_freeing_inode+0x105/0x350 [ 134.131738] lock_release+0x1ee/0x270 [ 134.131765] __wait_on_freeing_inode+0x10a/0x350 [ 134.131791] ? __pfx___wait_on_freeing_inode+0x10/0x10 [ 134.131820] ? __pfx_var_wake_function+0x10/0x10 [ 134.131851] ? lock_is_held_type+0x9e/0x120 [ 134.131872] insert_inode_locked+0x25f/0x890 [ 134.131903] __ext4_new_inode+0x223d/0x4cd0 [ 134.131934] ? __pfx___ext4_new_inode+0x10/0x10 [ 134.131960] ? __pfx___dquot_initialize+0x10/0x10 [ 134.131993] ? __pfx_avc_has_perm+0x10/0x10 [ 134.132021] ext4_symlink+0x623/0xb40 [ 134.132054] ? __pfx_ext4_symlink+0x10/0x10 [ 134.132083] ? security_inode_permission+0x72/0xe0 [ 134.132107] vfs_symlink+0x44b/0x840 [ 134.132136] filename_symlinkat+0x158/0x440 [ 134.132162] ? __pfx_filename_symlinkat+0x10/0x10 [ 134.132187] ? strncpy_from_user+0x21b/0x2f0 [ 134.132217] __x64_sys_symlink+0x82/0x110 [ 134.132242] do_syscall_64+0xbf/0x420 [ 134.132265] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.132287] RIP: 0033:0x7f99c299a427 [ 134.132303] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 58 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 134.132323] RSP: 002b:00007ffe67ff34f8 EFLAGS: 00000202 ORIG_RAX: 0000000000000058 [ 134.132343] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f99c299a427 [ 134.132356] RDX: 00007ffe67ff35d7 RSI: 00007f99c29f5019 RDI: 00007ffe67ff35c0 [ 134.132370] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007ffe67ff3390 [ 134.132383] R10: 00007ffe67ff3247 R11: 0000000000000202 R12: 0000000000000001 [ 134.132396] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffe67ff35c0 [ 134.132415] [ 134.161657] ------------[ cut here ]------------ [ 134.162449] WARNING: kernel/rcu/tree_plugin.h:443 at __rcu_read_unlock+0x25f/0x5c0, CPU#0: syz-executor.6/3997 [ 134.164175] Modules linked in: [ 134.164751] CPU: 0 UID: 0 PID: 3997 Comm: syz-executor.6 Not tainted 6.19.0-rc5-next-20260116 #1 PREEMPT(lazy) [ 134.166323] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 134.167666] RIP: 0010:__rcu_read_unlock+0x25f/0x5c0 [ 134.168660] Code: f2 02 00 00 c7 43 58 01 00 00 00 bf 09 00 00 00 e8 d6 b7 de ff 4d 85 f6 0f 84 73 fe ff ff e8 38 8a 20 00 fb e9 68 fe ff ff 90 <0f> 0b 90 5b 5d 41 5c 41 5d 41 5e e9 81 4d 74 03 e8 2c 5d 56 00 e9 [ 134.171609] RSP: 0018:ffff88801676f9a0 EFLAGS: 00010286 [ 134.172520] RAX: 00000000ffffffff RBX: ffff88801db19b80 RCX: ffffffff815660f7 [ 134.173720] RDX: 0000000000000000 RSI: ffffffff81566100 RDI: ffff88801db19f7c [ 134.174921] RBP: ffff88801db19b80 R08: 0000000000000000 R09: fffffbfff0ba7040 [ 134.176139] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88801db19b80 [ 134.180008] R13: 0000000000000001 R14: ffffffff85c0f180 R15: ffff88804a94bc48 [ 134.183648] FS: 000055558add7400(0000) GS:ffff8880e5342000(0000) knlGS:0000000000000000 [ 134.185010] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 134.186005] CR2: 00007f99c2a1a546 CR3: 000000001ddb5000 CR4: 0000000000350ef0 [ 134.187276] Call Trace: [ 134.187777] [ 134.189137] __wait_on_freeing_inode+0x10f/0x350 [ 134.190598] ? __pfx___wait_on_freeing_inode+0x10/0x10 [ 134.192861] ? __pfx_var_wake_function+0x10/0x10 [ 134.195346] ? lock_is_held_type+0x9e/0x120 [ 134.197500] insert_inode_locked+0x25f/0x890 [ 134.200715] __ext4_new_inode+0x223d/0x4cd0 [ 134.205512] ? __pfx___ext4_new_inode+0x10/0x10 [ 134.207909] ? __pfx___dquot_initialize+0x10/0x10 [ 134.209457] ? __pfx_avc_has_perm+0x10/0x10 [ 134.212884] ext4_symlink+0x623/0xb40 [ 134.217299] ? __pfx_ext4_symlink+0x10/0x10 [ 134.219271] ? security_inode_permission+0x72/0xe0 [ 134.222450] vfs_symlink+0x44b/0x840 [ 134.224918] filename_symlinkat+0x158/0x440 [ 134.227115] ? __pfx_filename_symlinkat+0x10/0x10 [ 134.228684] ? strncpy_from_user+0x21b/0x2f0 [ 134.232354] __x64_sys_symlink+0x82/0x110 [ 134.233772] do_syscall_64+0xbf/0x420 [ 134.235414] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.236483] RIP: 0033:0x7f99c299a427 [ 134.237194] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 58 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 134.240306] RSP: 002b:00007ffe67ff34f8 EFLAGS: 00000202 ORIG_RAX: 0000000000000058 [ 134.241588] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f99c299a427 [ 134.242792] RDX: 00007ffe67ff35d7 RSI: 00007f99c29f5019 RDI: 00007ffe67ff35c0 [ 134.244019] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007ffe67ff3390 [ 134.245282] R10: 00007ffe67ff3247 R11: 0000000000000202 R12: 0000000000000001 [ 134.246494] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffe67ff35c0 [ 134.251712] [ 134.252092] irq event stamp: 197 [ 134.252699] hardirqs last enabled at (197): [] _raw_spin_unlock_irqrestore+0x2c/0x50 [ 134.254359] hardirqs last disabled at (196): [] _raw_spin_lock_irqsave+0x53/0x60 [ 134.256095] softirqs last enabled at (192): [] kernel_fpu_end+0x59/0x70 [ 134.257654] softirqs last disabled at (190): [] kernel_fpu_begin_mask+0x1bb/0x300 [ 134.259340] ---[ end trace 0000000000000000 ]--- 15:35:50 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdab39eac554c6bee, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x10000002}) 15:35:50 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r1) setgid(0x0) 15:35:50 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) recvmmsg$unix(r0, &(0x7f0000001700)=[{{0x0, 0xfffffffffffffe1c, 0x0, 0x0, 0x0, 0x57}}], 0x572, 0x0, 0x0) pipe(0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r2, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) open$dir(0x0, 0x0, 0x0) 15:35:50 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f0000000040)='binfmt_misc\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) openat(r1, &(0x7f0000000240)='./file1\x00', 0x0, 0x0) 15:35:50 executing program 7: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x49, 0x0, 0x40, 0x0, 0x0, 0x14, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xffffc52a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(r0, &(0x7f0000000a00)="506cbe107bf1cd4a237540a62b7d4311ed8c0a97faca6cc5e3a00525abf0e62875da9e7d0633cb5f4e2a9bf652b87af75c966cc769cfffabafb2a9ca2306827dd41d0001b60ed3d1a84c0a59a8dc491fb2dc9e1ca150a27f084646ecffd7f35838e3ea0e9683d2039490587119462c00d7d36fd30610422eed34bed7ed30cfa45bbad42ef7a3a1fb635bbeaf13123ebdd67d2ce47b20a6cc6c28aeec23a29a628d5b7bce35aeb391fca65916d1afadcef315e1de514c9c4ac2483a4e17ec69ad80e7be15393f560f35cf93b2d7750901277b", 0xd2) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x204080, &(0x7f0000000b00)=ANY=[]) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x1000283, r0, 0x0) dup(0xffffffffffffffff) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x800c3e429c4f1bd1) r2 = socket$netlink(0x10, 0x3, 0x4) close_range(0xffffffffffffffff, r2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x8}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$cgroup2(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000400), 0x18, 0x244480) setsockopt$WPAN_SECURITY(r3, 0x0, 0x1, &(0x7f0000000440)=0x1, 0x4) r4 = fork() ptrace(0x10, r4) ptrace(0x8, r4) mknodat$loop(r1, &(0x7f0000000000)='./file0\x00', 0x0, 0x1) futimesat(r1, 0x0, 0x0) [ 134.407760] loop7: detected capacity change from 0 to 64 [ 134.414640] FAT-fs (loop7): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 15:35:51 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) recvmmsg$unix(r0, &(0x7f0000001700)=[{{0x0, 0xfffffffffffffe1c, 0x0, 0x0, 0x0, 0x57}}], 0x572, 0x0, 0x0) pipe(0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r2, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) open$dir(0x0, 0x0, 0x0) 15:35:51 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') lchown(&(0x7f0000000100)='./file0\x00', 0xee00, 0xffffffffffffffff) 15:35:51 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448d4, &(0x7f0000000040)={0x8, 0x200}) 15:35:51 executing program 1: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind(r0, &(0x7f0000000140)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x2}}, 0x80) 15:35:51 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) connect$netlink(r0, &(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x400000}, 0xc) 15:35:51 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x20, r1, 0x1, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}}, 0x0) 15:35:51 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r1) setgid(0x0) 15:35:51 executing program 1: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind(r0, &(0x7f0000000140)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x2}}, 0x80) 15:35:51 executing program 6: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x12, &(0x7f0000001200)={@private1}, 0x22) 15:35:51 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0xf, 0x0, 0x0) 15:35:51 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r1) setgid(0x0) 15:35:51 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) flistxattr(r0, &(0x7f0000000180)=""/119, 0x10) 15:35:51 executing program 1: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind(r0, &(0x7f0000000140)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x2}}, 0x80) 15:35:51 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getcwd(&(0x7f00000003c0)=""/4096, 0x1000) 15:35:51 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x20, r1, 0x1, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}}, 0x0) 15:35:51 executing program 6: io_setup(0x572, &(0x7f00000002c0)=0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) write$P9_RSTATu(r2, &(0x7f0000000480)=ANY=[], 0xfffffdef) 15:35:52 executing program 6: io_setup(0x572, &(0x7f00000002c0)=0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) write$P9_RSTATu(r2, &(0x7f0000000480)=ANY=[], 0xfffffdef) 15:35:52 executing program 1: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind(r0, &(0x7f0000000140)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x2}}, 0x80) 15:35:52 executing program 7: prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ffc000/0x4000)=nil) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffc000/0x4000)=nil) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x4, 0xffffffffffffffff) 15:35:52 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='$', 0x1, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000100)) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, r1, 0x0) 15:35:52 executing program 5: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000580)) time(&(0x7f0000000000)) 15:35:52 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) copy_file_range(r0, 0x0, r1, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, 0x0) pidfd_getfd(r2, r2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fcntl$setlease(r3, 0x400, 0x0) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fcntl$setlease(r4, 0x400, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f00000002c0), 0x80200, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000300)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x24}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 15:35:52 executing program 2: r0 = getpid() perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = pidfd_open(r0, 0x0) process_madvise(r1, &(0x7f00000016c0)=[{}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0, 0x0) 15:35:52 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/212, 0xd4}, {&(0x7f0000000280)=""/242, 0xf2}], 0x2) write$binfmt_elf64(r1, &(0x7f0000000200)=ANY=[], 0x78) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000080)={0x0, r1, 0x2962, 0x3852, 0xff, 0xff80}) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000005c0)={&(0x7f0000ff3000/0x4000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fed000/0x13000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fef000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000500)="df8183af2a9d30d5462788ceb5fcea9e7c03af245fc874010c156ce3b6afb6286cb8bf27c8090f90a8585b2876657807309dc27fbf867358cba4791fa1045da2a18ccfd12831a730e0523bf2af284b1a57d75f22d7cfaed837cbbd215b8a692b2336a8d817d4ae9d80009ae8c1e207f7da5bf41247fa697a14f6e1cc5bc663188fc3439c0875670bc976c71860b21f44023311c18d61e4b611434840", 0x9c, r0}, 0x68) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) mlock2(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x0) 15:35:52 executing program 5: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000140)) io_setup(0x8, &(0x7f0000000000)=0x0) io_getevents(r0, 0x0, 0x0, 0x0, 0x0) 15:35:52 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x52, &(0x7f0000000200)={0x9}, 0x4) 15:35:52 executing program 7: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x10}) 15:35:52 executing program 3: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000042c0)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pwrite64(r0, 0x0, 0x0, 0x9) 15:35:52 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000000)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c, 0x0}}], 0x1, 0x20000850) [ 135.994264] EXT4-fs warning (device sda): verify_group_input:161: Bad blocks count 0 15:35:53 executing program 7: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) copy_file_range(r0, 0x0, r1, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, 0x0) pidfd_getfd(r2, r2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fcntl$setlease(r3, 0x400, 0x0) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fcntl$setlease(r4, 0x400, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f00000002c0), 0x80200, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000300)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x24}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 15:35:53 executing program 6: io_setup(0x572, &(0x7f00000002c0)=0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) write$P9_RSTATu(r2, &(0x7f0000000480)=ANY=[], 0xfffffdef) 15:35:53 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/212, 0xd4}, {&(0x7f0000000280)=""/242, 0xf2}], 0x2) write$binfmt_elf64(r1, &(0x7f0000000200)=ANY=[], 0x78) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000080)={0x0, r1, 0x2962, 0x3852, 0xff, 0xff80}) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000005c0)={&(0x7f0000ff3000/0x4000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fed000/0x13000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fef000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000500)="df8183af2a9d30d5462788ceb5fcea9e7c03af245fc874010c156ce3b6afb6286cb8bf27c8090f90a8585b2876657807309dc27fbf867358cba4791fa1045da2a18ccfd12831a730e0523bf2af284b1a57d75f22d7cfaed837cbbd215b8a692b2336a8d817d4ae9d80009ae8c1e207f7da5bf41247fa697a14f6e1cc5bc663188fc3439c0875670bc976c71860b21f44023311c18d61e4b611434840", 0x9c, r0}, 0x68) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) mlock2(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x0) 15:35:53 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x16b000) close_range(r0, 0xffffffffffffffff, 0x0) 15:35:53 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448d2, 0x0) 15:35:53 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/212, 0xd4}, {&(0x7f0000000280)=""/242, 0xf2}], 0x2) write$binfmt_elf64(r1, &(0x7f0000000200)=ANY=[], 0x78) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000080)={0x0, r1, 0x2962, 0x3852, 0xff, 0xff80}) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000005c0)={&(0x7f0000ff3000/0x4000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fed000/0x13000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fef000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000500)="df8183af2a9d30d5462788ceb5fcea9e7c03af245fc874010c156ce3b6afb6286cb8bf27c8090f90a8585b2876657807309dc27fbf867358cba4791fa1045da2a18ccfd12831a730e0523bf2af284b1a57d75f22d7cfaed837cbbd215b8a692b2336a8d817d4ae9d80009ae8c1e207f7da5bf41247fa697a14f6e1cc5bc663188fc3439c0875670bc976c71860b21f44023311c18d61e4b611434840", 0x9c, r0}, 0x68) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) mlock2(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x0) 15:35:53 executing program 3: syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x9c, 0x0, @wg}}}}}, 0x0) syz_emit_ethernet(0x9e, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x7c, 0x0, @wg=@data={0x4, 0x0, 0x0, '\x00'/100}}}}}}, 0x0) 15:35:53 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) copy_file_range(r0, 0x0, r1, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, 0x0) pidfd_getfd(r2, r2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fcntl$setlease(r3, 0x400, 0x0) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fcntl$setlease(r4, 0x400, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f00000002c0), 0x80200, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000300)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x24}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 15:35:53 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) setxattr$trusted_overlay_redirect(&(0x7f00000016c0)='./file0\x00', &(0x7f0000001c00), 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setresuid(0x0, r0, 0x0) llistxattr(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) 15:35:53 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000140)={0x24, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x8, 0x11d, 0x0, 0x1, [{0x2}]}]}, 0x24}}, 0x0) 15:35:53 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, 0x0, 0x0) 15:35:53 executing program 5: syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x31006, 0x0) mount$9p_tcp(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x103434, 0x0) 15:35:53 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/212, 0xd4}, {&(0x7f0000000280)=""/242, 0xf2}], 0x2) write$binfmt_elf64(r1, &(0x7f0000000200)=ANY=[], 0x78) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000080)={0x0, r1, 0x2962, 0x3852, 0xff, 0xff80}) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000005c0)={&(0x7f0000ff3000/0x4000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fed000/0x13000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fef000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000500)="df8183af2a9d30d5462788ceb5fcea9e7c03af245fc874010c156ce3b6afb6286cb8bf27c8090f90a8585b2876657807309dc27fbf867358cba4791fa1045da2a18ccfd12831a730e0523bf2af284b1a57d75f22d7cfaed837cbbd215b8a692b2336a8d817d4ae9d80009ae8c1e207f7da5bf41247fa697a14f6e1cc5bc663188fc3439c0875670bc976c71860b21f44023311c18d61e4b611434840", 0x9c, r0}, 0x68) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) mlock2(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x0) 15:35:53 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/212, 0xd4}, {&(0x7f0000000280)=""/242, 0xf2}], 0x2) write$binfmt_elf64(r1, &(0x7f0000000200)=ANY=[], 0x78) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000080)={0x0, r1, 0x2962, 0x3852, 0xff, 0xff80}) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000005c0)={&(0x7f0000ff3000/0x4000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fed000/0x13000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fef000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000500)="df8183af2a9d30d5462788ceb5fcea9e7c03af245fc874010c156ce3b6afb6286cb8bf27c8090f90a8585b2876657807309dc27fbf867358cba4791fa1045da2a18ccfd12831a730e0523bf2af284b1a57d75f22d7cfaed837cbbd215b8a692b2336a8d817d4ae9d80009ae8c1e207f7da5bf41247fa697a14f6e1cc5bc663188fc3439c0875670bc976c71860b21f44023311c18d61e4b611434840", 0x9c, r0}, 0x68) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) mlock2(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x0) 15:35:53 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) creat(0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x8800000) 15:35:53 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000140)={0x24, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x8, 0x11d, 0x0, 0x1, [{0x2}]}]}, 0x24}}, 0x0) 15:35:53 executing program 7: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) copy_file_range(r0, 0x0, r1, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, 0x0) pidfd_getfd(r2, r2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fcntl$setlease(r3, 0x400, 0x0) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fcntl$setlease(r4, 0x400, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f00000002c0), 0x80200, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000300)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x24}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 15:35:54 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/212, 0xd4}, {&(0x7f0000000280)=""/242, 0xf2}], 0x2) write$binfmt_elf64(r1, &(0x7f0000000200)=ANY=[], 0x78) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000080)={0x0, r1, 0x2962, 0x3852, 0xff, 0xff80}) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000005c0)={&(0x7f0000ff3000/0x4000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fed000/0x13000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fef000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000500)="df8183af2a9d30d5462788ceb5fcea9e7c03af245fc874010c156ce3b6afb6286cb8bf27c8090f90a8585b2876657807309dc27fbf867358cba4791fa1045da2a18ccfd12831a730e0523bf2af284b1a57d75f22d7cfaed837cbbd215b8a692b2336a8d817d4ae9d80009ae8c1e207f7da5bf41247fa697a14f6e1cc5bc663188fc3439c0875670bc976c71860b21f44023311c18d61e4b611434840", 0x9c, r0}, 0x68) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) mlock2(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x0) 15:35:54 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/212, 0xd4}, {&(0x7f0000000280)=""/242, 0xf2}], 0x2) write$binfmt_elf64(r1, &(0x7f0000000200)=ANY=[], 0x78) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000080)={0x0, r1, 0x2962, 0x3852, 0xff, 0xff80}) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000005c0)={&(0x7f0000ff3000/0x4000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fed000/0x13000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fef000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000500)="df8183af2a9d30d5462788ceb5fcea9e7c03af245fc874010c156ce3b6afb6286cb8bf27c8090f90a8585b2876657807309dc27fbf867358cba4791fa1045da2a18ccfd12831a730e0523bf2af284b1a57d75f22d7cfaed837cbbd215b8a692b2336a8d817d4ae9d80009ae8c1e207f7da5bf41247fa697a14f6e1cc5bc663188fc3439c0875670bc976c71860b21f44023311c18d61e4b611434840", 0x9c, r0}, 0x68) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) mlock2(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x0) 15:35:54 executing program 5: syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x31006, 0x0) mount$9p_tcp(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x103434, 0x0) 15:35:54 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) copy_file_range(r0, 0x0, r1, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, 0x0) pidfd_getfd(r2, r2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fcntl$setlease(r3, 0x400, 0x0) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fcntl$setlease(r4, 0x400, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f00000002c0), 0x80200, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000300)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x24}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 15:35:54 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000140)={0x24, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x8, 0x11d, 0x0, 0x1, [{0x2}]}]}, 0x24}}, 0x0) 15:35:54 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) creat(0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x8800000) 15:35:54 executing program 6: io_setup(0x572, &(0x7f00000002c0)=0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) write$P9_RSTATu(r2, &(0x7f0000000480)=ANY=[], 0xfffffdef) 15:35:54 executing program 7: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) copy_file_range(r0, 0x0, r1, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, 0x0) pidfd_getfd(r2, r2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fcntl$setlease(r3, 0x400, 0x0) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fcntl$setlease(r4, 0x400, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f00000002c0), 0x80200, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000300)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x24}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 15:35:54 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000140)={0x24, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x8, 0x11d, 0x0, 0x1, [{0x2}]}]}, 0x24}}, 0x0) 15:35:54 executing program 5: syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x31006, 0x0) mount$9p_tcp(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x103434, 0x0) 15:35:54 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) creat(0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x8800000) 15:35:54 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000200), 0x8) 15:35:54 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r2 = dup2(r1, r0) write$binfmt_aout(r2, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x318}, "", ['\x00']}, 0x120) 15:35:54 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) copy_file_range(r0, 0x0, r1, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, 0x0) pidfd_getfd(r2, r2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fcntl$setlease(r3, 0x400, 0x0) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fcntl$setlease(r4, 0x400, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f00000002c0), 0x80200, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000300)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x24}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 15:35:54 executing program 5: syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x31006, 0x0) mount$9p_tcp(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x103434, 0x0) 15:35:54 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@updpolicy={0xb8, 0x15, 0x441, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}}, {0x8}}}, 0xb8}}, 0x0) 15:35:54 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x19, &(0x7f0000000080)=0x68bbd9b0592ebacf, 0x4) 15:35:54 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x42, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x4000) [ 138.034129] sg_write: data in/out 756/246 bytes for SCSI command 0x0-- guessing data in; [ 138.034129] program syz-executor.4 not setting count and/or reply_len properly [ 138.066623] sg_write: data in/out 756/246 bytes for SCSI command 0x0-- guessing data in; [ 138.066623] program syz-executor.4 not setting count and/or reply_len properly [ 138.093490] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.1'. 15:35:54 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x19, &(0x7f0000000080)=0x68bbd9b0592ebacf, 0x4) 15:35:54 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) creat(0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x8800000) [ 138.674175] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.1'. 15:35:55 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/cgroup\x00') ioctl$NS_GET_USERNS(r0, 0x8008b70d, 0x7ffffffff000) 15:35:55 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x19, &(0x7f0000000080)=0x68bbd9b0592ebacf, 0x4) 15:35:55 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@updpolicy={0xb8, 0x15, 0x441, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}}, {0x8}}}, 0xb8}}, 0x0) 15:35:55 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000005400)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)) 15:35:55 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x19, &(0x7f0000000080)=0x68bbd9b0592ebacf, 0x4) 15:35:55 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="7f454c460000000000000000db0000010010"], 0x78) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, 0x0) 15:35:55 executing program 7: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000100)=[{r0}], 0x1, &(0x7f0000000140)={0x0, 0x989680}, 0x0, 0x0) 15:35:55 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x50, 0x1, 0x2, 0x201, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x50}}, 0x0) 15:35:55 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@updpolicy={0xb8, 0x15, 0x441, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}}, {0x8}}}, 0xb8}}, 0x0) 15:35:55 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x19, &(0x7f0000000080)=0x68bbd9b0592ebacf, 0x4) 15:35:55 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x19, &(0x7f0000000080)=0x68bbd9b0592ebacf, 0x4) [ 138.792162] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.1'. 15:35:55 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000700100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000def4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000efdd79b7c3654313ac0cec53e79dcbaf010040", 0x1f, 0x4e0}, {&(0x7f0000000140)="03000000040000000000000000000000006518c3ca4bb86bfe0df8651836675e612e0babc8f939b25c7437700042ef5672bee73a4cbeadc585", 0x39, 0x640}, {&(0x7f0000010400)="03000000040000000500000017000f000300040000000000000000000f008551", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000def4655fdef4655fdef4655f000000000000040020", 0x1d, 0x1800}, {&(0x7f0000011000)="8081000000180000def4655fdef4655fdef4655f00000000000001002000000010000800000000000af30200040000000000000000000000020000005000000002000000040000005200000000000000000000000000570a00000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000def465", 0x89, 0x1c00}], 0x0, &(0x7f0000013800)) 15:35:55 executing program 2: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setresuid(0x0, r0, 0x0) umount2(&(0x7f0000000240)='./file0\x00', 0x0) [ 138.881354] loop4: detected capacity change from 0 to 1024 15:35:55 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x19, &(0x7f0000000080)=0x68bbd9b0592ebacf, 0x4) 15:35:55 executing program 6: r0 = syz_open_dev$evdev(&(0x7f0000000e80), 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000280)={0x0, 0x1, &(0x7f00000001c0)="aa"}) [ 138.922353] EXT4-fs error (device loop4): ext4_quota_enable:7184: inode #3: comm syz-executor.4: iget: bad extended attribute block 137438953472 [ 138.924433] EXT4-fs error (device loop4): ext4_quota_enable:7186: comm syz-executor.4: Bad quota inode: 3, type: 0 [ 138.926760] EXT4-fs warning (device loop4): ext4_enable_quotas:7224: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 138.928836] EXT4-fs (loop4): mount failed 15:35:55 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/cgroup\x00') ioctl$NS_GET_USERNS(r0, 0x8008b70d, 0x7ffffffff000) 15:35:55 executing program 7: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000100)=[{r0}], 0x1, &(0x7f0000000140)={0x0, 0x989680}, 0x0, 0x0) [ 138.937933] loop4: detected capacity change from 0 to 1024 [ 138.944402] EXT4-fs error (device loop4): ext4_quota_enable:7184: inode #3: comm syz-executor.4: iget: bad extended attribute block 137438953472 [ 138.947465] EXT4-fs error (device loop4): ext4_quota_enable:7186: comm syz-executor.4: Bad quota inode: 3, type: 0 [ 138.950581] EXT4-fs warning (device loop4): ext4_enable_quotas:7224: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 138.952377] EXT4-fs (loop4): mount failed 15:35:55 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@updpolicy={0xb8, 0x15, 0x441, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}}, {0x8}}}, 0xb8}}, 0x0) 15:35:55 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000005400)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)) 15:35:55 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f00000002c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) getuid() 15:35:55 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_mtu(r0, 0x88, 0xa, 0x0, &(0x7f0000000680)) 15:35:55 executing program 7: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000100)=[{r0}], 0x1, &(0x7f0000000140)={0x0, 0x989680}, 0x0, 0x0) 15:35:55 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000440)={0x0, 0xfb, 0xfbd, 0x0, 0xff, "b6d900e17f0f75773527a67f8ce92353", "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"}, 0xfbd, 0x0) 15:35:55 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/cgroup\x00') ioctl$NS_GET_USERNS(r0, 0x8008b70d, 0x7ffffffff000) 15:35:55 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900)="5ed0b2", 0x3) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0xfdef) [ 139.125105] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 139.142717] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.1'. 15:35:55 executing program 6: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_OPENQRY(r0, 0x5609, &(0x7f0000000080)) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5609, 0x0) setuid(0x0) 15:35:55 executing program 4: mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0x1) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r1) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000)=@random={'security.', 'trusted.overlay.origin\x00'}) 15:35:55 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@flushpolicy={0x10, 0x1d, 0x1}, 0x10}}, 0x0) 15:35:55 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000005400)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)) 15:35:55 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r2, r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) 15:35:55 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/cgroup\x00') ioctl$NS_GET_USERNS(r0, 0x8008b70d, 0x7ffffffff000) 15:35:55 executing program 7: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000100)=[{r0}], 0x1, &(0x7f0000000140)={0x0, 0x989680}, 0x0, 0x0) 15:35:55 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x44, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syslog(0x2, &(0x7f0000000280)=""/220, 0xdc) 15:35:55 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x1, 0x4, 0x3, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}, @NFULA_CFG_MODE={0xa, 0x2, {0x2, 0x2}}]}, 0x28}, 0x1, 0x0, 0x0, 0x2004034}, 0x4810) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000100)={0x0, 0x1, [@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}]}) 15:35:55 executing program 2: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)={0x34, r0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_MASK={0x4}]}]}, 0x34}}, 0x0) 15:35:55 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000005400)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)) 15:35:55 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r2, r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) 15:35:55 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000940)=@updsa={0x140, 0x1a, 0x1, 0x0, 0x0, {{@in6=@private0, @in6=@loopback}, {@in, 0x0, 0x33}, @in6=@mcast2, {}, {}, {}, 0x0, 0x0, 0xa}, [@tfcpad={0x8}, @algo_auth={0x48, 0x1, {{'sha224-ni\x00'}}}]}, 0x140}}, 0x0) 15:35:56 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r2, r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) 15:35:56 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) fcntl$lock(r0, 0x6, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) fcntl$lock(r0, 0x24, &(0x7f0000000000)={0x1}) 15:35:56 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x44, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syslog(0x2, &(0x7f0000000280)=""/220, 0xdc) 15:35:56 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r2, r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) 15:35:56 executing program 3: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) setresuid(0x0, r1, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) 15:35:56 executing program 4: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x141802, 0x0) ioctl$CDROM_SEND_PACKET(r0, 0x5304, &(0x7f0000000100)={"bef0f22386d28900048226bb", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:35:56 executing program 0: r0 = eventfd(0x0) ppoll(&(0x7f0000000180)=[{r0}], 0x1, 0x0, 0x0, 0x0) write$eventfd(r0, &(0x7f0000000400), 0x8) 15:35:56 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x31006, 0x0) mount$bind(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x2008864, 0x0) 15:35:56 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900)="5ed0b2", 0x3) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0xfdef) 15:35:56 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'wlan0\x00', &(0x7f0000000000)=@ethtool_gfeatures={0xc}}) [ 140.244662] ======================================================= [ 140.244662] WARNING: The mand mount option has been deprecated and [ 140.244662] and is ignored by this kernel. Remove the mand [ 140.244662] option from the mount to silence this warning. [ 140.244662] ======================================================= [ 140.292110] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. [ 140.318528] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. 15:35:57 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x44, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syslog(0x2, &(0x7f0000000280)=""/220, 0xdc) 15:35:57 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) 15:35:57 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x5ad2, &(0x7f0000003a00), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) dup2(r0, r1) 15:35:57 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_score_adj\x00') r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2000) dup2(r0, r1) 15:35:57 executing program 4: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RNDGETENTCNT(r0, 0x40045201, &(0x7f00000012c0)) 15:35:57 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x30, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}, [@NL80211_ATTR_WDEV={0xc}]}, 0x30}}, 0x0) 15:35:57 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900)="5ed0b2", 0x3) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0xfdef) 15:35:57 executing program 0: r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0xd4000a8b) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) dup2(r0, r1) [ 141.189704] audit: type=1400 audit(1768577757.744:10): avc: denied { watch_reads } for pid=4317 comm="syz-executor.0" path="/syzkaller-testdir246104572/syzkaller.ThEAXU/18" dev="sda" ino=15970 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 15:35:57 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='#! //'], 0xc) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0) 15:35:57 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000003c0)={0x14, r1, 0xb341daa0822653b3, 0x0, 0x0, {0x19}}, 0x14}}, 0x0) 15:35:57 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x44, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syslog(0x2, &(0x7f0000000280)=""/220, 0xdc) 15:35:57 executing program 7: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r0, 0x5419, 0x0) [ 141.301631] perf: interrupt took too long (5101 > 5075), lowering kernel.perf_event_max_sample_rate to 39000 [ 141.304056] perf: interrupt took too long (6388 > 6376), lowering kernel.perf_event_max_sample_rate to 31000 [ 141.326593] process 'syz-executor.4' launched './file1' with NULL argv: empty string added 15:35:57 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x43, &(0x7f0000000080)={0x3, {{0xa, 0x0, 0x0, @empty}}}, 0x90) [ 141.361392] perf: interrupt took too long (8004 > 7985), lowering kernel.perf_event_max_sample_rate to 24000 [ 141.378731] perf: interrupt took too long (10050 > 10005), lowering kernel.perf_event_max_sample_rate to 19000 15:35:57 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_score_adj\x00') r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2000) dup2(r0, r1) [ 141.773141] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 141.777298] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 141.778854] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 141.779699] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 141.798275] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 141.799196] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x804800 phys_seg 127 prio class 2 [ 141.800615] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 141.801767] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 141.802908] Buffer I/O error on dev sr0, logical block 2, lost async page write [ 141.804062] Buffer I/O error on dev sr0, logical block 3, lost async page write [ 141.805228] Buffer I/O error on dev sr0, logical block 4, lost async page write [ 141.806364] Buffer I/O error on dev sr0, logical block 5, lost async page write [ 141.807525] Buffer I/O error on dev sr0, logical block 6, lost async page write [ 141.808661] Buffer I/O error on dev sr0, logical block 7, lost async page write [ 141.809807] Buffer I/O error on dev sr0, logical block 8, lost async page write [ 141.810963] Buffer I/O error on dev sr0, logical block 9, lost async page write [ 141.812476] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 141.813364] I/O error, dev sr0, sector 127 op 0x1:(WRITE) flags 0x804800 phys_seg 127 prio class 2 [ 141.825045] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 141.825963] I/O error, dev sr0, sector 254 op 0x1:(WRITE) flags 0x804800 phys_seg 127 prio class 2 [ 141.827727] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 141.828593] I/O error, dev sr0, sector 381 op 0x1:(WRITE) flags 0x804800 phys_seg 127 prio class 2 [ 141.832945] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 141.834370] I/O error, dev sr0, sector 508 op 0x1:(WRITE) flags 0x804800 phys_seg 127 prio class 2 [ 141.836569] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 141.837446] I/O error, dev sr0, sector 635 op 0x1:(WRITE) flags 0x804800 phys_seg 127 prio class 2 [ 141.843616] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 141.844607] I/O error, dev sr0, sector 762 op 0x1:(WRITE) flags 0x804800 phys_seg 127 prio class 2 [ 141.846748] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 141.847985] I/O error, dev sr0, sector 889 op 0x1:(WRITE) flags 0x804800 phys_seg 127 prio class 2 [ 141.851945] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 141.853626] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 141.859170] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 141.860788] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 141.862894] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 141.866200] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 141.867898] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 141.870800] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 141.901807] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 141.903669] sr 1:0:0:0: [sr0] tag#0 Sense Key : Illegal Request [current] [ 141.907294] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Invalid command operation code [ 141.908835] sr 1:0:0:0: [sr0] tag#0 CDB: Write(10) 2a 00 00 00 01 fc 00 00 0c 00 15:35:58 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) 15:35:58 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_score_adj\x00') r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2000) dup2(r0, r1) 15:35:58 executing program 2: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) init_module(0x0, 0xfffc2, 0x0) 15:35:58 executing program 1: perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x14f804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/1, 0x0}, 0x58) 15:35:58 executing program 7: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r0, 0x5419, 0x0) 15:35:58 executing program 0: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTACK(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)) 15:35:58 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900)="5ed0b2", 0x3) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0xfdef) 15:35:58 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) [ 142.127352] perf: interrupt took too long (12595 > 12562), lowering kernel.perf_event_max_sample_rate to 15000 15:35:58 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_score_adj\x00') r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x2000) dup2(r0, r1) 15:35:58 executing program 0: keyctl$KEYCTL_PKEY_DECRYPT(0x1a, 0x0, 0x0, &(0x7f00000000c0)="90", 0x0) modify_ldt$read_default(0x2, 0x0, 0x0) 15:35:58 executing program 7: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r0, 0x5419, 0x0) 15:35:58 executing program 2: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) init_module(0x0, 0xfffc2, 0x0) 15:35:58 executing program 1: perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x14f804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/1, 0x0}, 0x58) 15:35:58 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x77bc, &(0x7f0000000080), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000001240)) r1 = fcntl$dupfd(r0, 0x0, r0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x15, &(0x7f0000000380)=[{0x0}], 0x1) 15:35:58 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mounts\x00') connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendfile(r1, r2, 0x0, 0xffd0) close_range(r0, 0xffffffffffffffff, 0x0) [ 142.589739] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 142.592899] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 142.595672] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 142.596974] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 142.643455] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 142.649763] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 142.650570] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 142.655607] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 142.656402] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 142.659327] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 142.660082] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 142.661431] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 142.663221] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 142.663969] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 142.667170] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 142.667993] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 142.669808] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 142.670760] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 142.672684] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 142.673441] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 142.689343] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 142.690839] sr 1:0:0:0: [sr0] tag#0 Sense Key : Illegal Request [current] [ 142.695287] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Invalid command operation code [ 142.700321] sr 1:0:0:0: [sr0] tag#0 CDB: Write(10) 2a 00 00 00 01 fc 00 00 0c 00 15:35:59 executing program 7: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r0, 0x5419, 0x0) 15:35:59 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) 15:35:59 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x26, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e38333031383839323800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000187916524213481db3505d4e06406e21010000000c00000000000000d0f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="01000000000005000c0000000000000000000000040000004b00000000000000", 0x20, 0x560}, {&(0x7f0000010300)="030000000400"/32, 0x20, 0x640}, {&(0x7f0000010400)="02000000120000002200000060000f0003000400"/32, 0x20, 0x800}, {&(0x7f0000010500)="ffff0f00ff0f00000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531000000100000001000050166696c6532000000100000001000050166696c6533000000110000009407090166696c652e636f6c64000000", 0x880, 0x1000}, {&(0x7f0000010e00)="0b0000000c0001022e00000002000000f40702022e2e00"/32, 0x20, 0x2000}, {&(0x7f0000010f00)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x2800}, {&(0x7f0000011000)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x3000}, {&(0x7f0000011100)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x3800}, {&(0x7f0000011200)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x4000}, {&(0x7f0000011300)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x4800}, {&(0x7f0000011400)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x5000}, {&(0x7f0000011500)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x5800}, {&(0x7f0000011600)="504d4d00504d4dffd2f4655f00000000647679756b6f762d676c6170746f70320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006c6f6f7033320075782f746573742f73797a5f6d6f756e745f696d6167655f650500"/128, 0x80, 0x6000}, {&(0x7f0000011700)="111fc0d901000000803a0900803a090000000000060000000000000005000000", 0x20, 0x6800}, {&(0x7f0000011800)="0200"/32, 0x20, 0x6c00}, {&(0x7f0000011900)="0300"/32, 0x20, 0x7000}, {&(0x7f0000011a00)="0400"/32, 0x20, 0x7400}, {&(0x7f0000011b00)="0500"/32, 0x20, 0x7800}, {&(0x7f0000011c00)="00000000000000000100000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000009800"/96, 0x60, 0x7c00}, {&(0x7f0000011d00)="2719c0d901000000803a0900803a090000000000060000000000000005000000", 0x20, 0x8000}, {&(0x7f0000011e00)="0200"/32, 0x20, 0x8400}, {&(0x7f0000011f00)="0300"/32, 0x20, 0x8800}, {&(0x7f0000012000)="0400"/32, 0x20, 0x8c00}, {&(0x7f0000012100)="ffff0100ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0500"/2080, 0x820, 0x9000}, {&(0x7f0000012a00)="00000000000000000100000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000009800"/96, 0x60, 0x9c00}, {&(0x7f0000012b00)="0c0000000c0001022e000000020000000c0002022e2e00000d0000001000050166696c65300000000e000000d807050766696c653100"/64, 0x40, 0x10000}, {&(0x7f0000012c00)="000002ea0100000001000000270f240c000000000000000000000000000000000601f8070000000006000000779b539778617474723100000601f00700000000060000007498539778617474723200"/96, 0x60, 0x10800}, {&(0x7f0000012d00)="00000000000000000000000000000000786174747232000078617474723100000000000000000000d0f4655fd0f4655fd0f4655f00"/64, 0x40, 0x10fe0}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f00000000000004000400000000000800050000000af301000400000000000000000000000100000003000000", 0x40, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d000000", 0x40, 0x11100}, {&(0x7f0000013000)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30200040000000000000000000000020000001000000002000000010000001300"/96, 0x60, 0x11180}, {&(0x7f0000013100)="c041000000400000d0f4655fd0f4655fd0f4655f00000000000002002000000000000800000000000af301000400000000000000000000000800000004000000", 0x40, 0x11500}, {&(0x7f0000013200)="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"/768, 0x300, 0x11580}, {&(0x7f0000013500)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x12000}, {&(0x7f0000013a00)='syzkallers\x00'/32, 0x20, 0x12800}, {&(0x7f0000013b00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x15800}], 0x0, &(0x7f0000013c00)) 15:35:59 executing program 1: perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x14f804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/1, 0x0}, 0x58) 15:35:59 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) 15:35:59 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0xf, 0x0, 0x1, 0x0, 0x0, 0x0, {}, [@CTA_ZONE={0x6}]}, 0x1c}}, 0x0) 15:35:59 executing program 2: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) init_module(0x0, 0xfffc2, 0x0) 15:35:59 executing program 5: write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c4690bca329e"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) ioctl$TUNGETFILTER(r0, 0x800454e0, &(0x7f0000000280)=""/193) 15:35:59 executing program 2: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0 VM DIAGNOSIS: 15:35:50 Registers: info registers vcpu 0 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff829750a0 RDI=ffffffff889c19e0 RBP=ffffffff889c19a0 RSP=ffff88801676f450 R8 =0000000000000000 R9 =ffffed1001766046 R10=00000000000fe503 R11=000000002d2d2d2d R12=0000000000000823 R13=0000000000000020 R14=fffffbfff113838e R15=dffffc0000000000 RIP=ffffffff829750f5 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 000055558add7400 00000000 00000000 GS =0000 ffff8880e5342000 00000000 00000000 LDT=0000 fffffe2c00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f99c2a1a546 CR3=000000001ddb5000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000a60ce07b00000000cec3662e XMM01=000000000000000003515b82db34ca11 XMM02=0000000000000000333bebdfd0a6a21d XMM03=00000000000000000000000000000000 XMM04=000000ff0000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000001 RBX=0000000000000001 RCX=ffffffff84d1a2ce RDX=fffffbfff0b82d11 RSI=0000000000000004 RDI=ffffffff85c16880 RBP=ffffffff85c16880 RSP=ffff8880170f7b40 R8 =0000000000000000 R9 =fffffbfff0b82d10 R10=ffffffff85c16883 R11=0000000000000000 R12=1ffff11002e1ef69 R13=0000000000000003 R14=fffffbfff0b82d10 R15=ffff8880170f7b78 RIP=ffffffff84d1a460 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 000055555a438400 00000000 00000000 GS =0000 ffff8880e5442000 00000000 00000000 LDT=0000 fffffe4400000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055555a441c58 CR3=000000001f49f000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000a60ce07b00000000cec3662e XMM01=000000000000000003515b82db34ca11 XMM02=0000000000000000333bebdfd0a6a21d XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000