Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:15956' (ECDSA) to the list of known hosts. 2026/01/16 17:21:57 fuzzer started 2026/01/16 17:21:57 dialing manager at localhost:42157 syzkaller login: [ 43.886489] cgroup: Unknown subsys name 'net' [ 43.961002] cgroup: Unknown subsys name 'cpuset' [ 43.976165] cgroup: Unknown subsys name 'rlimit' 2026/01/16 17:22:07 syscalls: 2214 2026/01/16 17:22:07 code coverage: enabled 2026/01/16 17:22:07 comparison tracing: enabled 2026/01/16 17:22:07 extra coverage: enabled 2026/01/16 17:22:07 setuid sandbox: enabled 2026/01/16 17:22:07 namespace sandbox: enabled 2026/01/16 17:22:07 Android sandbox: enabled 2026/01/16 17:22:07 fault injection: enabled 2026/01/16 17:22:07 leak checking: enabled 2026/01/16 17:22:07 net packet injection: enabled 2026/01/16 17:22:07 net device setup: enabled 2026/01/16 17:22:07 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2026/01/16 17:22:07 devlink PCI setup: PCI device 0000:00:10.0 is not available 2026/01/16 17:22:07 USB emulation: enabled 2026/01/16 17:22:07 hci packet injection: enabled 2026/01/16 17:22:07 wifi device emulation: enabled 2026/01/16 17:22:07 802.15.4 emulation: enabled 2026/01/16 17:22:07 fetching corpus: 50, signal 13077/14965 (executing program) 2026/01/16 17:22:08 fetching corpus: 100, signal 33827/37263 (executing program) 2026/01/16 17:22:08 fetching corpus: 150, signal 49028/53837 (executing program) 2026/01/16 17:22:08 fetching corpus: 200, signal 54495/60739 (executing program) 2026/01/16 17:22:08 fetching corpus: 250, signal 59490/67102 (executing program) 2026/01/16 17:22:08 fetching corpus: 300, signal 61675/70687 (executing program) 2026/01/16 17:22:08 fetching corpus: 350, signal 69651/79739 (executing program) 2026/01/16 17:22:08 fetching corpus: 400, signal 73695/84966 (executing program) 2026/01/16 17:22:08 fetching corpus: 450, signal 77237/89659 (executing program) 2026/01/16 17:22:09 fetching corpus: 500, signal 81123/94600 (executing program) 2026/01/16 17:22:09 fetching corpus: 550, signal 83867/98442 (executing program) 2026/01/16 17:22:09 fetching corpus: 600, signal 86228/101870 (executing program) 2026/01/16 17:22:09 fetching corpus: 650, signal 88866/105524 (executing program) 2026/01/16 17:22:09 fetching corpus: 700, signal 91884/109482 (executing program) 2026/01/16 17:22:09 fetching corpus: 750, signal 95430/113858 (executing program) 2026/01/16 17:22:09 fetching corpus: 800, signal 97598/116962 (executing program) 2026/01/16 17:22:09 fetching corpus: 850, signal 99661/119922 (executing program) 2026/01/16 17:22:10 fetching corpus: 900, signal 102204/123283 (executing program) 2026/01/16 17:22:10 fetching corpus: 950, signal 104338/126259 (executing program) 2026/01/16 17:22:10 fetching corpus: 1000, signal 106107/128917 (executing program) 2026/01/16 17:22:10 fetching corpus: 1050, signal 108812/132274 (executing program) 2026/01/16 17:22:10 fetching corpus: 1100, signal 111219/135375 (executing program) 2026/01/16 17:22:10 fetching corpus: 1150, signal 113563/138445 (executing program) 2026/01/16 17:22:10 fetching corpus: 1200, signal 115138/140841 (executing program) 2026/01/16 17:22:10 fetching corpus: 1250, signal 116624/143108 (executing program) 2026/01/16 17:22:11 fetching corpus: 1300, signal 118045/145356 (executing program) 2026/01/16 17:22:11 fetching corpus: 1350, signal 119513/147581 (executing program) 2026/01/16 17:22:11 fetching corpus: 1400, signal 120764/149569 (executing program) 2026/01/16 17:22:11 fetching corpus: 1450, signal 122030/151607 (executing program) 2026/01/16 17:22:11 fetching corpus: 1500, signal 123780/154000 (executing program) 2026/01/16 17:22:11 fetching corpus: 1550, signal 125183/156050 (executing program) 2026/01/16 17:22:11 fetching corpus: 1600, signal 126371/157901 (executing program) 2026/01/16 17:22:11 fetching corpus: 1650, signal 128991/160829 (executing program) 2026/01/16 17:22:11 fetching corpus: 1700, signal 130685/163110 (executing program) 2026/01/16 17:22:12 fetching corpus: 1750, signal 132093/165070 (executing program) 2026/01/16 17:22:12 fetching corpus: 1800, signal 133364/166914 (executing program) 2026/01/16 17:22:12 fetching corpus: 1850, signal 134566/168701 (executing program) 2026/01/16 17:22:12 fetching corpus: 1900, signal 136155/170778 (executing program) 2026/01/16 17:22:12 fetching corpus: 1950, signal 137463/172590 (executing program) 2026/01/16 17:22:12 fetching corpus: 2000, signal 138446/174198 (executing program) 2026/01/16 17:22:12 fetching corpus: 2050, signal 139579/175842 (executing program) 2026/01/16 17:22:12 fetching corpus: 2100, signal 140921/177667 (executing program) 2026/01/16 17:22:13 fetching corpus: 2150, signal 141863/179166 (executing program) 2026/01/16 17:22:13 fetching corpus: 2200, signal 143209/180955 (executing program) 2026/01/16 17:22:13 fetching corpus: 2250, signal 144031/182318 (executing program) 2026/01/16 17:22:13 fetching corpus: 2300, signal 144981/183788 (executing program) 2026/01/16 17:22:13 fetching corpus: 2350, signal 146238/185428 (executing program) 2026/01/16 17:22:13 fetching corpus: 2400, signal 147647/187126 (executing program) 2026/01/16 17:22:13 fetching corpus: 2450, signal 148569/188520 (executing program) 2026/01/16 17:22:13 fetching corpus: 2500, signal 149304/189798 (executing program) 2026/01/16 17:22:13 fetching corpus: 2550, signal 150173/191134 (executing program) 2026/01/16 17:22:14 fetching corpus: 2600, signal 150833/192350 (executing program) 2026/01/16 17:22:14 fetching corpus: 2650, signal 151521/193544 (executing program) 2026/01/16 17:22:14 fetching corpus: 2700, signal 152367/194831 (executing program) 2026/01/16 17:22:14 fetching corpus: 2750, signal 153460/196272 (executing program) 2026/01/16 17:22:14 fetching corpus: 2800, signal 154261/197499 (executing program) 2026/01/16 17:22:14 fetching corpus: 2850, signal 154821/198531 (executing program) 2026/01/16 17:22:14 fetching corpus: 2900, signal 155786/199838 (executing program) 2026/01/16 17:22:14 fetching corpus: 2950, signal 156670/201025 (executing program) 2026/01/16 17:22:15 fetching corpus: 3000, signal 158422/202761 (executing program) 2026/01/16 17:22:15 fetching corpus: 3050, signal 159135/203818 (executing program) 2026/01/16 17:22:15 fetching corpus: 3100, signal 159989/204987 (executing program) 2026/01/16 17:22:15 fetching corpus: 3150, signal 160752/206111 (executing program) 2026/01/16 17:22:15 fetching corpus: 3200, signal 161388/207164 (executing program) 2026/01/16 17:22:15 fetching corpus: 3250, signal 162138/208227 (executing program) 2026/01/16 17:22:15 fetching corpus: 3300, signal 162665/209180 (executing program) 2026/01/16 17:22:15 fetching corpus: 3350, signal 163544/210356 (executing program) 2026/01/16 17:22:15 fetching corpus: 3400, signal 164354/211432 (executing program) 2026/01/16 17:22:15 fetching corpus: 3450, signal 164994/212386 (executing program) 2026/01/16 17:22:16 fetching corpus: 3500, signal 165587/213344 (executing program) 2026/01/16 17:22:16 fetching corpus: 3550, signal 166248/214261 (executing program) 2026/01/16 17:22:16 fetching corpus: 3600, signal 166871/215167 (executing program) 2026/01/16 17:22:16 fetching corpus: 3650, signal 167683/216215 (executing program) 2026/01/16 17:22:16 fetching corpus: 3700, signal 168291/217108 (executing program) 2026/01/16 17:22:16 fetching corpus: 3750, signal 168665/217897 (executing program) 2026/01/16 17:22:16 fetching corpus: 3800, signal 169131/218741 (executing program) 2026/01/16 17:22:16 fetching corpus: 3850, signal 169550/219540 (executing program) 2026/01/16 17:22:17 fetching corpus: 3900, signal 170133/220418 (executing program) 2026/01/16 17:22:17 fetching corpus: 3950, signal 170719/221257 (executing program) 2026/01/16 17:22:17 fetching corpus: 4000, signal 171416/222156 (executing program) 2026/01/16 17:22:17 fetching corpus: 4050, signal 171997/222955 (executing program) 2026/01/16 17:22:17 fetching corpus: 4100, signal 173009/223914 (executing program) 2026/01/16 17:22:17 fetching corpus: 4150, signal 173630/224768 (executing program) 2026/01/16 17:22:17 fetching corpus: 4200, signal 174133/225523 (executing program) 2026/01/16 17:22:17 fetching corpus: 4250, signal 174776/226366 (executing program) 2026/01/16 17:22:18 fetching corpus: 4300, signal 175592/227243 (executing program) 2026/01/16 17:22:18 fetching corpus: 4350, signal 176178/228054 (executing program) 2026/01/16 17:22:18 fetching corpus: 4400, signal 177287/229014 (executing program) 2026/01/16 17:22:18 fetching corpus: 4450, signal 177666/229682 (executing program) 2026/01/16 17:22:18 fetching corpus: 4500, signal 178331/230452 (executing program) 2026/01/16 17:22:18 fetching corpus: 4550, signal 178816/231129 (executing program) 2026/01/16 17:22:18 fetching corpus: 4600, signal 179240/231830 (executing program) 2026/01/16 17:22:18 fetching corpus: 4650, signal 179783/232519 (executing program) 2026/01/16 17:22:18 fetching corpus: 4700, signal 180232/233196 (executing program) 2026/01/16 17:22:18 fetching corpus: 4750, signal 180659/233871 (executing program) 2026/01/16 17:22:19 fetching corpus: 4800, signal 181137/234589 (executing program) 2026/01/16 17:22:19 fetching corpus: 4850, signal 181774/235296 (executing program) 2026/01/16 17:22:19 fetching corpus: 4900, signal 182528/236022 (executing program) 2026/01/16 17:22:19 fetching corpus: 4950, signal 182899/236644 (executing program) 2026/01/16 17:22:19 fetching corpus: 5000, signal 183295/237247 (executing program) 2026/01/16 17:22:19 fetching corpus: 5050, signal 183930/237952 (executing program) 2026/01/16 17:22:19 fetching corpus: 5100, signal 184303/238560 (executing program) 2026/01/16 17:22:19 fetching corpus: 5150, signal 184664/239190 (executing program) 2026/01/16 17:22:20 fetching corpus: 5200, signal 184956/239823 (executing program) 2026/01/16 17:22:20 fetching corpus: 5250, signal 185512/240411 (executing program) 2026/01/16 17:22:20 fetching corpus: 5300, signal 186055/240990 (executing program) 2026/01/16 17:22:20 fetching corpus: 5350, signal 186420/241564 (executing program) 2026/01/16 17:22:20 fetching corpus: 5400, signal 187007/242174 (executing program) 2026/01/16 17:22:20 fetching corpus: 5450, signal 187381/242688 (executing program) 2026/01/16 17:22:20 fetching corpus: 5500, signal 187814/243252 (executing program) 2026/01/16 17:22:20 fetching corpus: 5550, signal 188375/243849 (executing program) 2026/01/16 17:22:20 fetching corpus: 5600, signal 188720/244366 (executing program) 2026/01/16 17:22:21 fetching corpus: 5650, signal 189039/244876 (executing program) 2026/01/16 17:22:21 fetching corpus: 5700, signal 189401/245392 (executing program) 2026/01/16 17:22:21 fetching corpus: 5750, signal 189957/245916 (executing program) 2026/01/16 17:22:21 fetching corpus: 5800, signal 190734/246454 (executing program) 2026/01/16 17:22:21 fetching corpus: 5850, signal 191216/246919 (executing program) 2026/01/16 17:22:21 fetching corpus: 5900, signal 191568/247406 (executing program) 2026/01/16 17:22:21 fetching corpus: 5950, signal 191900/247866 (executing program) 2026/01/16 17:22:21 fetching corpus: 6000, signal 192423/248345 (executing program) 2026/01/16 17:22:21 fetching corpus: 6050, signal 192950/248842 (executing program) 2026/01/16 17:22:21 fetching corpus: 6100, signal 193304/249341 (executing program) 2026/01/16 17:22:22 fetching corpus: 6150, signal 193741/249832 (executing program) 2026/01/16 17:22:22 fetching corpus: 6200, signal 194101/250291 (executing program) 2026/01/16 17:22:22 fetching corpus: 6250, signal 194561/250393 (executing program) 2026/01/16 17:22:22 fetching corpus: 6300, signal 194851/250395 (executing program) 2026/01/16 17:22:22 fetching corpus: 6350, signal 195529/250400 (executing program) 2026/01/16 17:22:22 fetching corpus: 6400, signal 195889/250400 (executing program) 2026/01/16 17:22:22 fetching corpus: 6450, signal 196134/250400 (executing program) 2026/01/16 17:22:22 fetching corpus: 6500, signal 196472/250407 (executing program) 2026/01/16 17:22:22 fetching corpus: 6550, signal 196779/250414 (executing program) 2026/01/16 17:22:23 fetching corpus: 6600, signal 197144/250415 (executing program) 2026/01/16 17:22:23 fetching corpus: 6650, signal 197602/250415 (executing program) 2026/01/16 17:22:23 fetching corpus: 6700, signal 198011/250416 (executing program) 2026/01/16 17:22:23 fetching corpus: 6750, signal 198412/250424 (executing program) 2026/01/16 17:22:23 fetching corpus: 6800, signal 198770/250424 (executing program) 2026/01/16 17:22:23 fetching corpus: 6850, signal 199133/250424 (executing program) 2026/01/16 17:22:23 fetching corpus: 6900, signal 199471/250424 (executing program) 2026/01/16 17:22:23 fetching corpus: 6950, signal 199878/250424 (executing program) 2026/01/16 17:22:23 fetching corpus: 7000, signal 200261/250424 (executing program) 2026/01/16 17:22:23 fetching corpus: 7050, signal 200613/250426 (executing program) 2026/01/16 17:22:24 fetching corpus: 7100, signal 200928/250431 (executing program) 2026/01/16 17:22:24 fetching corpus: 7150, signal 201346/250431 (executing program) 2026/01/16 17:22:24 fetching corpus: 7200, signal 201616/250443 (executing program) 2026/01/16 17:22:24 fetching corpus: 7250, signal 202034/250443 (executing program) 2026/01/16 17:22:24 fetching corpus: 7300, signal 202349/250443 (executing program) 2026/01/16 17:22:24 fetching corpus: 7350, signal 202723/250448 (executing program) 2026/01/16 17:22:24 fetching corpus: 7400, signal 203067/250448 (executing program) 2026/01/16 17:22:24 fetching corpus: 7450, signal 203427/250490 (executing program) 2026/01/16 17:22:24 fetching corpus: 7500, signal 203677/250494 (executing program) 2026/01/16 17:22:25 fetching corpus: 7550, signal 203997/250494 (executing program) 2026/01/16 17:22:25 fetching corpus: 7600, signal 204465/250495 (executing program) 2026/01/16 17:22:25 fetching corpus: 7650, signal 204886/250495 (executing program) 2026/01/16 17:22:25 fetching corpus: 7700, signal 205229/250495 (executing program) 2026/01/16 17:22:25 fetching corpus: 7750, signal 205476/250499 (executing program) 2026/01/16 17:22:25 fetching corpus: 7800, signal 205836/250499 (executing program) 2026/01/16 17:22:25 fetching corpus: 7850, signal 206211/250499 (executing program) 2026/01/16 17:22:25 fetching corpus: 7900, signal 206446/250499 (executing program) 2026/01/16 17:22:25 fetching corpus: 7950, signal 206803/250499 (executing program) 2026/01/16 17:22:25 fetching corpus: 8000, signal 207073/250502 (executing program) 2026/01/16 17:22:25 fetching corpus: 8050, signal 207331/250502 (executing program) 2026/01/16 17:22:26 fetching corpus: 8100, signal 207587/250502 (executing program) 2026/01/16 17:22:26 fetching corpus: 8150, signal 207944/250507 (executing program) 2026/01/16 17:22:26 fetching corpus: 8200, signal 208426/250507 (executing program) 2026/01/16 17:22:26 fetching corpus: 8250, signal 208672/250507 (executing program) 2026/01/16 17:22:26 fetching corpus: 8300, signal 209091/250507 (executing program) 2026/01/16 17:22:26 fetching corpus: 8350, signal 209370/250508 (executing program) 2026/01/16 17:22:26 fetching corpus: 8400, signal 209643/250510 (executing program) 2026/01/16 17:22:26 fetching corpus: 8450, signal 210028/250510 (executing program) 2026/01/16 17:22:26 fetching corpus: 8500, signal 210307/250510 (executing program) 2026/01/16 17:22:27 fetching corpus: 8550, signal 210713/250510 (executing program) 2026/01/16 17:22:27 fetching corpus: 8600, signal 210955/250510 (executing program) 2026/01/16 17:22:27 fetching corpus: 8650, signal 211458/250515 (executing program) 2026/01/16 17:22:27 fetching corpus: 8700, signal 211737/250517 (executing program) 2026/01/16 17:22:27 fetching corpus: 8750, signal 212027/250517 (executing program) 2026/01/16 17:22:27 fetching corpus: 8800, signal 212433/250517 (executing program) 2026/01/16 17:22:27 fetching corpus: 8850, signal 212618/250517 (executing program) 2026/01/16 17:22:27 fetching corpus: 8900, signal 212869/250517 (executing program) 2026/01/16 17:22:27 fetching corpus: 8950, signal 213177/250523 (executing program) 2026/01/16 17:22:27 fetching corpus: 9000, signal 213449/250525 (executing program) 2026/01/16 17:22:28 fetching corpus: 9050, signal 213738/250526 (executing program) 2026/01/16 17:22:28 fetching corpus: 9100, signal 213982/250526 (executing program) 2026/01/16 17:22:28 fetching corpus: 9150, signal 214442/250527 (executing program) 2026/01/16 17:22:28 fetching corpus: 9200, signal 214875/250534 (executing program) 2026/01/16 17:22:28 fetching corpus: 9250, signal 215148/250552 (executing program) 2026/01/16 17:22:28 fetching corpus: 9300, signal 215297/250552 (executing program) 2026/01/16 17:22:28 fetching corpus: 9350, signal 215577/250552 (executing program) 2026/01/16 17:22:28 fetching corpus: 9400, signal 215837/250552 (executing program) 2026/01/16 17:22:28 fetching corpus: 9450, signal 216194/250569 (executing program) 2026/01/16 17:22:28 fetching corpus: 9500, signal 216456/250570 (executing program) 2026/01/16 17:22:28 fetching corpus: 9550, signal 216730/250570 (executing program) 2026/01/16 17:22:29 fetching corpus: 9600, signal 217023/250570 (executing program) 2026/01/16 17:22:29 fetching corpus: 9650, signal 217202/250570 (executing program) 2026/01/16 17:22:29 fetching corpus: 9700, signal 217605/250574 (executing program) 2026/01/16 17:22:29 fetching corpus: 9750, signal 217829/250574 (executing program) 2026/01/16 17:22:29 fetching corpus: 9800, signal 218131/250575 (executing program) 2026/01/16 17:22:29 fetching corpus: 9850, signal 218346/250575 (executing program) 2026/01/16 17:22:29 fetching corpus: 9900, signal 218649/250578 (executing program) 2026/01/16 17:22:29 fetching corpus: 9950, signal 218966/250585 (executing program) 2026/01/16 17:22:29 fetching corpus: 10000, signal 219230/250585 (executing program) 2026/01/16 17:22:29 fetching corpus: 10050, signal 219414/250585 (executing program) 2026/01/16 17:22:30 fetching corpus: 10100, signal 219634/250585 (executing program) 2026/01/16 17:22:30 fetching corpus: 10150, signal 219997/250586 (executing program) 2026/01/16 17:22:30 fetching corpus: 10200, signal 220272/250586 (executing program) 2026/01/16 17:22:30 fetching corpus: 10250, signal 220443/250586 (executing program) 2026/01/16 17:22:30 fetching corpus: 10300, signal 220781/250587 (executing program) 2026/01/16 17:22:30 fetching corpus: 10350, signal 221049/250587 (executing program) 2026/01/16 17:22:30 fetching corpus: 10400, signal 221271/250593 (executing program) 2026/01/16 17:22:30 fetching corpus: 10450, signal 221577/250593 (executing program) 2026/01/16 17:22:31 fetching corpus: 10500, signal 221775/250593 (executing program) 2026/01/16 17:22:31 fetching corpus: 10550, signal 222074/250595 (executing program) 2026/01/16 17:22:31 fetching corpus: 10600, signal 222301/250595 (executing program) 2026/01/16 17:22:31 fetching corpus: 10650, signal 222548/250595 (executing program) 2026/01/16 17:22:31 fetching corpus: 10700, signal 222871/250595 (executing program) 2026/01/16 17:22:31 fetching corpus: 10750, signal 223089/250596 (executing program) 2026/01/16 17:22:31 fetching corpus: 10800, signal 223412/250596 (executing program) 2026/01/16 17:22:31 fetching corpus: 10850, signal 223657/250596 (executing program) 2026/01/16 17:22:31 fetching corpus: 10900, signal 223875/250596 (executing program) 2026/01/16 17:22:32 fetching corpus: 10950, signal 224205/250600 (executing program) 2026/01/16 17:22:32 fetching corpus: 11000, signal 224508/250606 (executing program) 2026/01/16 17:22:32 fetching corpus: 11050, signal 224723/250606 (executing program) 2026/01/16 17:22:32 fetching corpus: 11100, signal 224924/250606 (executing program) 2026/01/16 17:22:32 fetching corpus: 11150, signal 225137/250607 (executing program) 2026/01/16 17:22:32 fetching corpus: 11200, signal 225346/250607 (executing program) 2026/01/16 17:22:32 fetching corpus: 11250, signal 225624/250607 (executing program) 2026/01/16 17:22:32 fetching corpus: 11300, signal 225839/250607 (executing program) 2026/01/16 17:22:33 fetching corpus: 11350, signal 226094/250608 (executing program) 2026/01/16 17:22:33 fetching corpus: 11400, signal 226343/250608 (executing program) 2026/01/16 17:22:33 fetching corpus: 11450, signal 226615/250613 (executing program) 2026/01/16 17:22:33 fetching corpus: 11500, signal 226802/250613 (executing program) 2026/01/16 17:22:33 fetching corpus: 11550, signal 227045/250613 (executing program) 2026/01/16 17:22:33 fetching corpus: 11600, signal 227297/250613 (executing program) 2026/01/16 17:22:33 fetching corpus: 11650, signal 227621/250613 (executing program) 2026/01/16 17:22:33 fetching corpus: 11700, signal 227806/250613 (executing program) 2026/01/16 17:22:34 fetching corpus: 11750, signal 227990/250613 (executing program) 2026/01/16 17:22:34 fetching corpus: 11800, signal 228179/250614 (executing program) 2026/01/16 17:22:34 fetching corpus: 11850, signal 228433/250614 (executing program) 2026/01/16 17:22:34 fetching corpus: 11900, signal 228777/250617 (executing program) 2026/01/16 17:22:34 fetching corpus: 11950, signal 229029/250617 (executing program) 2026/01/16 17:22:34 fetching corpus: 12000, signal 229271/250617 (executing program) 2026/01/16 17:22:34 fetching corpus: 12050, signal 229552/250617 (executing program) 2026/01/16 17:22:34 fetching corpus: 12100, signal 229870/250617 (executing program) 2026/01/16 17:22:34 fetching corpus: 12150, signal 230093/250617 (executing program) 2026/01/16 17:22:34 fetching corpus: 12200, signal 230309/250617 (executing program) 2026/01/16 17:22:35 fetching corpus: 12250, signal 230485/250617 (executing program) 2026/01/16 17:22:35 fetching corpus: 12300, signal 230709/250617 (executing program) 2026/01/16 17:22:35 fetching corpus: 12350, signal 230963/250619 (executing program) 2026/01/16 17:22:35 fetching corpus: 12400, signal 231169/250619 (executing program) 2026/01/16 17:22:35 fetching corpus: 12450, signal 231412/250626 (executing program) 2026/01/16 17:22:35 fetching corpus: 12500, signal 231587/250626 (executing program) 2026/01/16 17:22:35 fetching corpus: 12550, signal 231826/250626 (executing program) 2026/01/16 17:22:35 fetching corpus: 12600, signal 232105/250626 (executing program) 2026/01/16 17:22:35 fetching corpus: 12650, signal 232287/250640 (executing program) 2026/01/16 17:22:36 fetching corpus: 12700, signal 232466/250643 (executing program) 2026/01/16 17:22:36 fetching corpus: 12750, signal 232620/250643 (executing program) 2026/01/16 17:22:36 fetching corpus: 12800, signal 232850/250644 (executing program) 2026/01/16 17:22:36 fetching corpus: 12850, signal 233087/250646 (executing program) 2026/01/16 17:22:36 fetching corpus: 12900, signal 233242/250646 (executing program) 2026/01/16 17:22:36 fetching corpus: 12950, signal 233449/250646 (executing program) 2026/01/16 17:22:36 fetching corpus: 13000, signal 233613/250646 (executing program) 2026/01/16 17:22:36 fetching corpus: 13050, signal 233768/250646 (executing program) 2026/01/16 17:22:36 fetching corpus: 13100, signal 233969/250646 (executing program) 2026/01/16 17:22:37 fetching corpus: 13150, signal 234106/250647 (executing program) 2026/01/16 17:22:37 fetching corpus: 13200, signal 234358/250647 (executing program) 2026/01/16 17:22:37 fetching corpus: 13250, signal 234500/250649 (executing program) 2026/01/16 17:22:37 fetching corpus: 13300, signal 234732/250652 (executing program) 2026/01/16 17:22:37 fetching corpus: 13350, signal 234992/250652 (executing program) 2026/01/16 17:22:37 fetching corpus: 13400, signal 235228/250652 (executing program) 2026/01/16 17:22:37 fetching corpus: 13450, signal 235388/250652 (executing program) 2026/01/16 17:22:37 fetching corpus: 13500, signal 235600/250652 (executing program) 2026/01/16 17:22:37 fetching corpus: 13550, signal 235851/250652 (executing program) 2026/01/16 17:22:38 fetching corpus: 13600, signal 236143/250652 (executing program) 2026/01/16 17:22:38 fetching corpus: 13650, signal 236329/250654 (executing program) 2026/01/16 17:22:38 fetching corpus: 13700, signal 236494/250655 (executing program) 2026/01/16 17:22:38 fetching corpus: 13750, signal 236691/250655 (executing program) 2026/01/16 17:22:38 fetching corpus: 13800, signal 236925/250655 (executing program) 2026/01/16 17:22:38 fetching corpus: 13850, signal 237155/250655 (executing program) 2026/01/16 17:22:38 fetching corpus: 13900, signal 237464/250655 (executing program) 2026/01/16 17:22:38 fetching corpus: 13950, signal 237651/250655 (executing program) 2026/01/16 17:22:38 fetching corpus: 14000, signal 237853/250655 (executing program) 2026/01/16 17:22:38 fetching corpus: 14050, signal 238000/250659 (executing program) 2026/01/16 17:22:39 fetching corpus: 14100, signal 238193/250668 (executing program) 2026/01/16 17:22:39 fetching corpus: 14150, signal 238363/250668 (executing program) 2026/01/16 17:22:39 fetching corpus: 14200, signal 238520/250668 (executing program) 2026/01/16 17:22:39 fetching corpus: 14250, signal 238745/250668 (executing program) 2026/01/16 17:22:39 fetching corpus: 14300, signal 239071/250670 (executing program) 2026/01/16 17:22:39 fetching corpus: 14350, signal 239290/250670 (executing program) 2026/01/16 17:22:39 fetching corpus: 14400, signal 239425/250670 (executing program) 2026/01/16 17:22:39 fetching corpus: 14450, signal 239647/250670 (executing program) 2026/01/16 17:22:39 fetching corpus: 14500, signal 239835/250670 (executing program) 2026/01/16 17:22:39 fetching corpus: 14550, signal 239993/250672 (executing program) 2026/01/16 17:22:39 fetching corpus: 14559, signal 240033/250672 (executing program) 2026/01/16 17:22:39 fetching corpus: 14559, signal 240033/250672 (executing program) 2026/01/16 17:22:41 starting 8 fuzzer processes 17:22:41 executing program 0: r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_SET_MACPARAMS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r0, 0x300, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x40}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000000) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x58, r1, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x800}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5, 0x29, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x2c}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x3c, r2, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x2}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0xd}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0102}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x11}, 0x0) sendmsg$IEEE802154_LLSEC_LIST_DEV(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x14, r2, 0x400, 0x70bd2d, 0x25dfdbff, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40800}, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000000580)={0x1218, r3, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x106c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x101}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "47b5120da6e47c85341fc94d0966875220a36822beceb865d86f0e318bc700cb5e"}}]}, @TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffc01}]}]}, @TIPC_NLA_BEARER={0xa0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0xffff6052, @mcast2, 0xfffffc01}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4306}]}, @TIPC_NLA_LINK={0x38, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}]}, @TIPC_NLA_SOCK={0x5c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3ff}]}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffbf}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xb58}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7ff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7ff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x37}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7fff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x800}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xffffffc1}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x1218}, 0x1, 0x0, 0x0, 0x805}, 0xc0) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000001940)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001900)={&(0x7f0000001880)={0x54, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x7}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x2}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x1f}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x9}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x7}]}, 0x54}, 0x1, 0x0, 0x0, 0x20004010}, 0x4008010) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000019c0), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000001a80)={'syztnl2\x00', &(0x7f0000001a00)={'ip6_vti0\x00', 0x0, 0x4, 0x3f, 0xff, 0xfe, 0x8, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7, 0x8, 0x6, 0x6}}) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000001b80)={&(0x7f0000001980), 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x58, r4, 0x200, 0x70bd27, 0x25dfdbff, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x94}, 0x4008005) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001c00), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000001d00)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001c40)={0x44, r6, 0x200, 0x70bd26, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @loopback}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x4000041) r7 = syz_open_dev$vcsn(&(0x7f0000001d40), 0x3, 0x200000) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000001dc0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(r7, &(0x7f0000001e80)={&(0x7f0000001d80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001e40)={&(0x7f0000001e00)={0x24, r8, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x2000000}, 0x4008000) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001f00), r7) sendmsg$TIPC_NL_MEDIA_SET(r7, &(0x7f0000002000)={&(0x7f0000001ec0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001fc0)={&(0x7f0000001f40)={0x70, r9, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x10001}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xddb}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3ff}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x44) 17:22:41 executing program 1: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'ip6_vti0\x00', 0x0, 0x4, 0x84, 0x9, 0x93c, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1, 0x7800, 0x75}}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000140)={{{@in6=@remote, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@dev}}, &(0x7f0000000240)=0xe8) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000300)={'syztnl0\x00', &(0x7f0000000280)={'syztnl2\x00', 0x0, 0x29, 0x80, 0xf8, 0x5, 0x30, @ipv4={'\x00', '\xff\xff', @multicast2}, @dev={0xfe, 0x80, '\x00', 0x34}, 0x20, 0x10, 0xd77, 0xffffffff}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000043c0)={'ip6_vti0\x00', &(0x7f0000004340)={'syztnl0\x00', 0x0, 0x4, 0xf8, 0x7, 0xd40d, 0x20, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x80, 0x10, 0x2f, 0xfffff000}}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000044c0)={{{@in6, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@multicast2}}, &(0x7f00000045c0)=0xe8) sendmsg$ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000004880)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000004840)={&(0x7f0000004600)={0x21c, r0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_WOL_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}]}, @ETHTOOL_A_WOL_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_WOL_SOPASS={0x5d, 0x3, "fdca37ac3fea097993233a60430064264dcb99430956a1a80f7d35061e61abcad2c836b1d99fc512a50e3dc7f6a7892ea7422bc4f7f6bc3af20ac1759de0bcb7c69d5ad458ba50cc59e4b4e6f4fbbfe95c45126bc703704ed9"}, @ETHTOOL_A_WOL_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_WOL_SOPASS={0x2d, 0x3, "f67c97296af26bdecb48f331ca5667d75adbff77820fa9630e23eed3e369173b2e9771626d99b7a00c"}, @ETHTOOL_A_WOL_MODES={0xb4, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7}, @ETHTOOL_A_BITSET_MASK={0x3a, 0x5, "fa6d86124c8ab060bea2355503e4055643c7fa0c155e16ae3a6bb473283e5d283f9ca120ff3ba491342958be6238eb3c3fdee1bcd235"}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_MASK={0x42, 0x5, "e3fa2b55257d0fbebca47b5ed57545df1134dc66d5da27cf1f7201c27f33110bade36ff7bdcfbe28fc478efeffec10d03a5fbf02c466cdd0544340afe9c4"}, @ETHTOOL_A_BITSET_VALUE={0x1e, 0x4, "4eeffef1305f6d4936c880d956534177de894a9b25a921b52153"}]}, @ETHTOOL_A_WOL_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}, @ETHTOOL_A_WOL_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x21c}, 0x1, 0x0, 0x0, 0xcc006}, 0xc5) r6 = syz_io_uring_complete(0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r6, &(0x7f0000004a40)={&(0x7f00000048c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000004a00)={&(0x7f0000004900)={0xc4, r0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}]}, @HEADER={0x4}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4000001}, 0x800) close(r6) r7 = dup2(r6, r6) clock_gettime(0x0, &(0x7f0000006e40)={0x0, 0x0}) recvmmsg(r7, &(0x7f0000006dc0)=[{{&(0x7f0000004a80)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @initdev}}, 0x80, &(0x7f0000004b40)=[{&(0x7f0000004b00)=""/59, 0x3b}], 0x1, &(0x7f0000004b80)=""/4096, 0x1000}, 0x8001}, {{&(0x7f0000005b80)=@caif=@dgm, 0x80, &(0x7f0000006cc0)=[{&(0x7f0000005c00)=""/155, 0x9b}, {&(0x7f0000005cc0)=""/4096, 0x1000}], 0x2, &(0x7f0000006d00)=""/151, 0x97}, 0x7f}], 0x2, 0x2021, &(0x7f0000006e80)={r8, r9+60000000}) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2, 0x10, r7, 0x900cf000) clock_gettime(0x0, &(0x7f0000006ec0)) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r6, &(0x7f0000006fc0)={&(0x7f0000006f00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000006f80)={&(0x7f0000006f40)={0x40, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x40004) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r6, 0x40605346, &(0x7f0000007000)={0x3f, 0x2, {0xffffffffffffffff, 0x0, 0x0, 0x3, 0xbd86}, 0xf3}) ioctl$TIOCSPGRP(r6, 0x5410, &(0x7f0000007080)=0xffffffffffffffff) pread64(r6, &(0x7f00000070c0)=""/123, 0x7b, 0x6) ioctl$sock_netdev_private(0xffffffffffffffff, 0x89f9, &(0x7f0000007180)="9148f31892e0a5856afa21002bfdd1436d705d28d72a3bcaaa735dbe959065da3cac09681d8db3da1785177142103a32560f0bd48e65feca5db7a7b473d4f7a6d09c7e6bff6870746e785422579b28a7aaec6145234915db5dc66d605797282e40aff622a0b8d8c1314ef6f37cfd339b06128a3b2fe8eb5976dd41c3413e9a2927d4cd1d24dcdc9434e65c11ba82d4c492b2c2a692565e46e2f3ad15ac0291e7dbb1e9b581785ff29ff402fde8674f80c055b5a5d4") 17:22:41 executing program 2: semctl$GETPID(0xffffffffffffffff, 0x1, 0xb, &(0x7f0000000000)=""/110) r0 = semget(0x3, 0x1, 0x270) semctl$GETZCNT(r0, 0x0, 0xf, &(0x7f0000000080)=""/4096) r1 = semget(0x3, 0x0, 0x75e) semctl$IPC_RMID(r1, 0x0, 0x0) semctl$IPC_RMID(r1, 0x0, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000001080)=[0xf800, 0x100, 0x8000, 0x5, 0x7b3a, 0x3ff, 0xf066]) semctl$IPC_RMID(r1, 0x0, 0x0) semctl$GETPID(r0, 0x0, 0xb, &(0x7f00000010c0)=""/34) semtimedop(r1, &(0x7f0000001100)=[{0x3, 0x40, 0x1800}], 0x1, &(0x7f0000001140)={0x77359400}) semctl$IPC_INFO(r1, 0x3, 0x3, &(0x7f0000001180)=""/249) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000001280)=""/190) r2 = semget(0x1, 0x6, 0x410) semtimedop(r2, &(0x7f0000001340)=[{0x3, 0x2707, 0x1000}], 0x1, &(0x7f0000001380)={0x0, 0x989680}) semctl$SETALL(r1, 0x0, 0x11, &(0x7f00000013c0)=[0x1ff, 0x8, 0x3, 0xfff]) r3 = semget(0x2, 0x1, 0x8) semctl$SEM_STAT(r3, 0x4, 0x12, &(0x7f0000001400)=""/130) semctl$IPC_RMID(r3, 0x0, 0x0) semctl$GETZCNT(r2, 0x608039f3ce70f4bd, 0xf, &(0x7f00000014c0)=""/230) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f00000015c0)=""/96) 17:22:41 executing program 3: getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast2, @broadcast, 0x0}, &(0x7f0000000040)=0xc) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x600000, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x120030}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x58, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_FLOW={0x6}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_VERSION={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @local}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x28}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008004) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000200)={r0, @broadcast, @multicast2}, 0xc) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r1, &(0x7f0000000300)={&(0x7f0000000240), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x20, 0x0, 0x4, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xe0, 0x2f}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40081}, 0x4) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000600)={&(0x7f0000000380)={0x244, 0x0, 0x800, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0xdc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @private=0xa010101}}, {0x14, 0x2, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}, @TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'ip6erspan0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x1, @dev={0xfe, 0x80, '\x00', 0xb}, 0xfffffffe}}, {0x14, 0x2, @in={0x2, 0x4e20, @empty}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x7f, @local, 0x800}}, {0x14, 0x2, @in={0x2, 0x4e23, @multicast1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_NODE={0x114, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8e}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xfb, 0x3, "551ffe7399a442613c700c6f2a36f941f056048392c93d047ee3245a7fa82ee1b88fda998cb18ebbb01e21528b6ab2817830dc9d2177d1609529616b9947aaf53b7fb6964c4017edd6d058294dc432d555c81b90332145ea67df40d5b991da88f438eaa43bda63484e8766977fb0676017c348b04cc74b73534422157bed5644c32963769ce878d592777026e719b778bf16f9fd1ca412c651bd4e18a0a06e17a5fa44f00af3fa7d7964bf8bc9f20fae5d4700ffd9ec376bde22129ae1cf7882c34843b618bdee53d67be2b9a74aa094d8386b05f2e4c72d38f87e825461c7cae4b68ace4a2f1291246cd825e185bce79d5a454c404e09"}]}, @TIPC_NLA_LINK={0x40, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb2e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}]}]}]}, 0x244}, 0x1, 0x0, 0x0, 0x800}, 0x1) r2 = socket$inet_icmp(0x2, 0x2, 0x1) recvfrom(r2, &(0x7f0000000680)=""/36, 0x24, 0x10041, &(0x7f00000006c0)=@pptp={0x18, 0x2, {0x3, @empty}}, 0x80) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000740)={{0x1, 0x1, 0x18, r2, {0x8, 0x3}}, './file0\x00'}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), r1) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, r4, 0x100, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x14) sendmsg$NL80211_CMD_ABORT_SCAN(r3, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x14, r4, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8840}, 0x20040005) sendmsg$AUDIT_DEL_RULE(r3, &(0x7f0000000e40)={0xffffffffffffffff, 0x0, &(0x7f0000000e00)={&(0x7f00000009c0)={0x428, 0x3f4, 0x0, 0x70bd25, 0x25dfdbfd, {0x6, 0x2, 0x3f, [0x0, 0x7, 0x5, 0x0, 0xffffffff, 0x1, 0x8, 0x94, 0x2, 0x818, 0x2, 0x3, 0x91b, 0x9, 0x3, 0x5, 0x7, 0xf65e, 0x8001, 0x0, 0x5, 0x4, 0x7f, 0x0, 0x10001, 0x0, 0x1, 0xff, 0x3f, 0x200, 0x800, 0x8, 0x40, 0x8000, 0x3, 0x0, 0x0, 0x6, 0xffff, 0x86, 0xffffffff, 0x3, 0x8, 0x0, 0xc1, 0x0, 0xd83, 0x75f7a5ef, 0x2, 0x9, 0x200, 0xdea6, 0x1, 0x6, 0x9b, 0xffff8001, 0x503f, 0xe4, 0x6, 0x0, 0x0, 0xeb4, 0x5, 0x1], [0xfffffffd, 0xffffffc1, 0xfffffff8, 0x7, 0x3a9, 0xffff, 0x4, 0x3ff, 0x400, 0xfffff800, 0x3, 0x8, 0x1, 0x401, 0x4, 0x2, 0x9, 0x74bf83ec, 0x58c2, 0x7, 0x1, 0xff, 0x6, 0x3, 0x1, 0x3, 0x2, 0x90bf, 0x7f38, 0x3, 0x10000, 0xfff, 0x9, 0x4, 0x3, 0x1bb7f842, 0x3f, 0x44e, 0xa6, 0x9dfd, 0x6, 0x80, 0x4633, 0xf2d0, 0x10001, 0x76f8114f, 0x3, 0x2, 0x40, 0x3, 0x0, 0xc751, 0x1, 0x6, 0x6, 0x3, 0x7fff, 0x8, 0xffffffc0, 0x71, 0x3, 0x8, 0x40, 0x7c9e], [0xef10, 0x4554, 0xffff, 0xfffffffc, 0x5, 0x0, 0x7fff, 0xa2d7, 0x5, 0xb400, 0x6, 0x2, 0x2, 0x401, 0x80000001, 0x10000, 0x1, 0x8e, 0xf3, 0x9, 0x400, 0x40000, 0x7, 0x99, 0x7, 0x3, 0x1, 0xa5, 0x1, 0x2, 0x6, 0x2, 0x6, 0x1, 0x5, 0x4, 0x4, 0x8, 0xfffffeff, 0x7324, 0xffff, 0x3, 0x1f, 0x0, 0x3, 0x8, 0x2, 0x258e, 0x5, 0x1ff, 0x9, 0x0, 0xfff, 0x1, 0x8ad, 0xffffffff, 0x0, 0x1, 0x716, 0x1, 0x2151, 0x81, 0x7, 0x1], [0x401, 0x2, 0xfda, 0x2, 0x3, 0x8001, 0x8, 0x3, 0x3, 0x6, 0x6, 0x80000001, 0xffff, 0x4, 0x800, 0x0, 0xe4, 0x7ff, 0x1, 0x101, 0x6, 0x2, 0x10001, 0x5, 0x6839, 0x3f, 0x0, 0x4c20, 0x7, 0x2e82, 0x7fffffff, 0x10001, 0x4, 0xa97f, 0x1000, 0x1, 0xffff, 0x80000001, 0x1000, 0x6, 0xfffffffb, 0x33, 0x9, 0x9, 0x1, 0x0, 0x81, 0xb07, 0x5, 0x7, 0xfb79, 0x2, 0x100, 0x2, 0x13, 0x1000, 0x4, 0x900, 0x1, 0x1, 0x9, 0x200, 0x1ff, 0x42f], 0x8, ['nl80211\x00']}, ["", "", "", ""]}, 0x428}, 0x1, 0x0, 0x0, 0x40}, 0x8004) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, &(0x7f0000000e80)={{0x1, 0x1, 0x18, r1, @out_args}, './file0\x00'}) accept$packet(r5, &(0x7f0000000ec0), &(0x7f0000000f00)=0x14) syz_mount_image$vfat(&(0x7f0000000f40), &(0x7f0000000f80)='./file0\x00', 0x3, 0x4, &(0x7f0000002140)=[{&(0x7f0000000fc0)="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", 0x1000, 0x4}, {&(0x7f0000001fc0)="a06815c3a619fe443c769eedb502024b30383811eec6d44758a91f95f9cd8de8a04eca74823121c1f04c992610ee06a88d77172f5229a848764ad420cc01a92325", 0x41, 0x5}, {&(0x7f0000002040)="73c55a845da9555f0c107d194f5644c990970b0e8870eb75b572053c87012695c95c31da0cf06456524e0e3eed3b139f2ba79f3213b3b338ed6500022cee40f644f1f32ed49883de3b3b1de22efdddace6f4fb2554c4ab3b0aeb7128dc83704cc04f4b336cb1f2c3e0fa6644d0a637913f622e1c4a316b94ba746e1f37e2fa2becb1", 0x82, 0x3}, {&(0x7f0000002100)="a95958a9969c5e594e14d33df7c99f", 0xf}], 0x3020210, &(0x7f00000021c0)={[{@nonumtail}, {@iocharset={'iocharset', 0x3d, 'macceltic'}}, {@numtail}, {@utf8}, {@nonumtail}, {@shortname_mixed}, {@shortname_win95}, {@shortname_winnt}, {@shortname_winnt}], [{@pcr={'pcr', 0x3d, 0x1c}}, {@appraise}]}) sendmsg$NL80211_CMD_LEAVE_OCB(r3, &(0x7f0000002340)={&(0x7f0000002280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002300)={&(0x7f00000022c0)={0x14, r4, 0x2, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x4) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000002380)={@broadcast, @multicast2}, &(0x7f00000023c0)=0xc) r6 = epoll_create1(0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(r6, 0x40309410, &(0x7f0000002400)={0x95, 0x7fffffff, 0x1, 0xffda, 0x2, [0x0, 0x1, 0x6, 0x9]}) [ 88.103732] audit: type=1400 audit(1768584161.998:7): avc: denied { execmem } for pid=273 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 17:22:42 executing program 4: ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000002780)={0x0, 0xfffffffffffffffb, 0xe5, 0x6, @scatter={0x9, 0x0, &(0x7f0000002480)=[{&(0x7f0000000000)=""/4096, 0x1000}, {&(0x7f0000001000)=""/83, 0x53}, {&(0x7f0000001080)=""/110, 0x6e}, {&(0x7f0000001100)=""/12, 0xc}, {&(0x7f0000001140)=""/194, 0xc2}, {&(0x7f0000001240)=""/167, 0xa7}, {&(0x7f0000001300)=""/4096, 0x1000}, {&(0x7f0000002300)=""/206, 0xce}, {&(0x7f0000002400)=""/71, 0x47}]}, &(0x7f0000002540)="feee00f2065bc68b569bcd355c8e6ccd466558bc0d29250d35dd2c527eeb644b4fde756f3bef35ccb4d691969c10c640f7e8c041092a09dd02538496c837fe331d57e182d48644794ba773549e339764df066da8639fdd68d4d0a18b1c104d75b206980d4e414ed40b6dfddd921607a349b8e78c60925ce7998d3af2dae46112614231eda28b1524b0e245963ee075c738ddccad08576c4f3cf77cee9d6c6da0371801c074ae3ac29051cfd9e1295230c8b5b4ef3c60a6fd7dc72613b7fcedc0b5cdde5ccb33fa9ba3988ec1b208f0b7717b0c65fb32515aec0ef531ffa9d9a8d2917c3306", &(0x7f0000002640)=""/250, 0x892, 0x4, 0xffffffffffffffff, &(0x7f0000002740)}) writev(0xffffffffffffffff, &(0x7f00000028c0)=[{&(0x7f0000002800)="d422fcc140405b507fb7f361cec47410b99c1f583b856f6aa9cf333c500aac18bf8430130cffcbf769707561a379fefc9c57f91528cf6abf885db4c7e2672b754b28b7f77249ea3fd2ec37254f523a0403209da09c9a4ad0df0ca9f3eddc16716d6097ef6cfde129", 0x68}, {&(0x7f0000002880)}], 0x2) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, &(0x7f0000002900)={0x5, 0x9ad, 0x0, 0x7, 0x4, [{0xffffffff80000000, 0x1, 0xfff}, {0x100000001, 0xffffffff, 0xffffffff80000000, '\x00', 0x88}, {0x179c000000000, 0x7ff, 0x1ff}, {0x2, 0x4, 0xfde, '\x00', 0x1}]}) ioctl$TIOCGDEV(0xffffffffffffffff, 0x80045432, &(0x7f0000002a00)) r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000002e40)={0x1, 0x0, 0xf, 0x15, 0x1c, &(0x7f0000002a40)}) pread64(r0, &(0x7f0000002e80)=""/4096, 0x1000, 0x8) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCL_SELLOADLUT(r0, 0x541c, &(0x7f0000003e80)={0x5, 0x10001, 0x1, 0xfffffffffffffffd, 0x8}) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, &(0x7f0000003ec0)) r2 = dup2(r1, r1) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000003f00)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003f80), r2) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r3, &(0x7f0000004040)={&(0x7f0000003f40)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000004000)={&(0x7f0000003fc0)={0x14, r4, 0x800, 0x70bd25, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4) r5 = syz_open_dev$vcsa(&(0x7f0000004080), 0x6, 0x80) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r3, 0x5386, &(0x7f00000040c0)) ioctl$FS_IOC_GETFLAGS(r5, 0x80086601, &(0x7f0000004100)) ioctl$SG_GET_ACCESS_COUNT(r5, 0x2289, &(0x7f0000004140)) ioctl$SCSI_IOCTL_SYNC(r3, 0x4) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f00000041c0)) 17:22:42 executing program 6: ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000000000)={0x0, 0x8, 0xfbb7}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0xa9, 0x2, 0x9, 0x400, 0x10}}) fdatasync(0xffffffffffffffff) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) ioctl$GIO_FONT(r0, 0x4b60, &(0x7f00000000c0)=""/195) r1 = syz_open_dev$mouse(&(0x7f00000001c0), 0x4, 0x90dc2) getdents64(r1, &(0x7f0000000200)=""/226, 0xe2) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000300), 0x400080, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000340)={0x0, 0x0, 0x23a, 0x4}) ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f0000000400)={0x100, 0x48, '\x00', 0x0, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) mount_setattr(r1, &(0x7f0000000440)='./file0\x00', 0x100, &(0x7f0000000480)={0x80, 0x100008, 0x20000, {r1}}, 0x20) sendfile(r1, r2, &(0x7f00000004c0)=0x3, 0x80) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x20000, 0x0) getsockopt$inet6_mreq(r3, 0x29, 0x14, &(0x7f0000000540)={@dev, 0x0}, &(0x7f0000000580)=0x14) fstatfs(r0, &(0x7f00000005c0)=""/121) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f0000000640)={{0x1, 0x1, 0x18, r2, {0x7ff}}, './file0\x00'}) ioctl$NS_GET_OWNER_UID(r5, 0xb704, &(0x7f0000000680)) r6 = timerfd_create(0x9, 0x40000) fgetxattr(r6, &(0x7f00000006c0)=@known='security.selinux\x00', &(0x7f0000000700)=""/145, 0x91) sendmsg$ETHTOOL_MSG_FEATURES_GET(r5, &(0x7f000000bec0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f000000be80)={&(0x7f000000bb80)={0x2ec, 0x0, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x2ec}, 0x1, 0x0, 0x0, 0x4c800}, 0x4004050) 17:22:42 executing program 5: sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x50922110}, 0xc, &(0x7f00000003c0)={&(0x7f0000000040)={0x348, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x90, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ae}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x690}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x180, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "da90b48417d483b099f69377353fe08fba1beb78859a80354fa8178cf6b6"}}, @TIPC_NLA_NODE_ID={0x28, 0x3, "b05baed61582922c072052709e8e723f9f09d8282fb730851a98a134ad59daf20b8ebb28"}, @TIPC_NLA_NODE_ID={0x100, 0x3, "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"}]}, @TIPC_NLA_SOCK={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x77aa}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3ff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}]}]}, @TIPC_NLA_NODE={0xd8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xa9, 0x3, "72ac6a761842f9dd431d4b202410720516b44bc49febf9d0b0f60538d547e1b7f756b96ae96f4da5351dc97fbcbdf21f7e3e94957cb3134a4b9c244e24600dee46bef364de83eb697cc3573ee9d44202b5f9c7315d1f44a81bc2b9183cebabb15ab31a3b41160acd872119c3e2c5e94e7db143ca05932e545f9594dac254ff1c72ae6ccccea4590d49323800f0e5108c10bf50ca762f95485e2f46c8b45c91c77270a42e5b"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xf4c}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x11, 0x3, "7eb3db7638da2de5f743487608"}]}]}, 0x348}}, 0x40810) r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0x88, r0, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}]}, 0x88}, 0x1, 0x0, 0x0, 0x24040000}, 0x8004) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, 0x0, 0x0, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x40400c0}, 0x800) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000700)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3}}, './file0\x00'}) sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x420c2}, 0xc, &(0x7f0000000900)={&(0x7f0000000780)={0x174, 0x0, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@NL80211_ATTR_REG_RULES={0x128, 0x22, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x63d}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7ff}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x9}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x3b}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x1}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x2}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x80000001}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x3}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x9f}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x101}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x599}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x81}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x4}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xc6}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x3800}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x287f}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x3}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7ff}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x1ff}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x3e3}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x4}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x101}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x2}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x2}]}]}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x9}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x40}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}]}, 0x174}, 0x1, 0x0, 0x0, 0x30}, 0x4004000) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x6c, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20010000}, 0x51) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) sendmsg$ETHTOOL_MSG_RINGS_GET(r1, &(0x7f0000000b80)={&(0x7f0000000ac0), 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x14, 0x0, 0x4, 0x70bd2b, 0x25dfdbfe}, 0x14}}, 0x0) r3 = dup2(r2, r1) sendmsg$NL80211_CMD_STOP_AP(r3, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x48000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x20, 0x0, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x4, 0x72}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) r4 = socket$inet6(0xa, 0x4, 0x6) bind(r4, &(0x7f0000000cc0)=@nl=@kern={0x10, 0x0, 0x0, 0x20}, 0x80) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x5c, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x12a}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9}, @BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3977}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}]}, 0x5c}}, 0x1) sendmsg$NL80211_CMD_LEAVE_IBSS(r1, &(0x7f0000000f40)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x20, 0x0, 0x4, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x9, 0x51}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0xe0a133fc9e8ee277}, 0x4000) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r3, &(0x7f0000001140)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x10008267}, 0xc, &(0x7f0000001100)={&(0x7f0000000fc0)={0x120, r0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x51621670}, {0x6, 0x11, 0x1000}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x11d}, {0x6, 0x11, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x100}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x1ff}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x3f}}]}, 0x120}, 0x1, 0x0, 0x0, 0x40000}, 0x80) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000011c0), 0xffffffffffffffff) sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000001180), 0xc, &(0x7f0000001280)={&(0x7f0000001200)={0x44, r5, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x20008004}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 17:22:42 executing program 7: ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2f}}, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e23, @rand_addr=0x64010101}, 0xa, 0x0, 0x0, 0x0, 0x40, &(0x7f0000000000)='rose0\x00', 0x4, 0x0, 0x5}) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x21, &(0x7f00000000c0)=0xffff, 0x4) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000100)={@initdev, @loopback}, &(0x7f0000000140)=0x8) r0 = accept4(0xffffffffffffffff, &(0x7f0000000180)=@xdp, &(0x7f0000000200)=0x80, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000000240)={0x7e73868a, {{0x2, 0x4e21, @empty}}}, 0x88) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000300), 0x210081, 0x0) sendto$inet(r1, &(0x7f0000000340)="e0a880e78431d160e2e53d451b44448142f0a8989111993c3682654574465103009ce80eba13f875949628a1286255c94f1d38eb0410b975667ad3cb58da24366b89fa43e4e960b3504d8337de9653ba98c0b1d0bcf9d28b3ec355ab2193fd2dbf7b67f6d35b348062fec1838b53cc3a07b2fbeb9e315179cb6b4c650dfde0dd3a", 0x81, 0x8000, 0x0, 0x0) recvfrom(r1, &(0x7f0000000400)=""/251, 0xfb, 0x100, &(0x7f0000000500)=@ieee802154={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0102}}}, 0x80) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x80049367, &(0x7f0000000580)) keyctl$join(0x1, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f00000005c0)={0x8, 'ipvlan0\x00', {'team_slave_1\x00'}, 0x1}) r2 = open_tree(0xffffffffffffffff, &(0x7f0000000600)='./file0\x00', 0x0) mq_timedsend(r2, &(0x7f0000000640)="812b68a24cfa657737d6f9bf9b654d1553f0a77c485e2412eadfa572da93c4badebd", 0x22, 0x8, &(0x7f0000000680)) open_tree(0xffffffffffffffff, &(0x7f00000006c0)='./file0\x00', 0x8801) pipe2$9p(&(0x7f0000000700)={0xffffffffffffffff}, 0x4000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000740)={0x0}) ioctl$BTRFS_IOC_INO_LOOKUP(r3, 0xd0009412, &(0x7f0000000940)={r4, 0xab}) pipe(&(0x7f0000001940)={0xffffffffffffffff}) fsconfig$FSCONFIG_SET_PATH_EMPTY(r5, 0x4, &(0x7f0000001980)='rose0\x00', &(0x7f00000019c0)='./file0\x00', r2) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f0000001a00)={'raw\x00', 0x14, "dfb7e5937b3713282a6a5ddcf91a0ef44d1fe748"}, &(0x7f0000001a40)=0x38) [ 89.275896] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 89.278239] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 89.279884] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 89.282581] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 89.285458] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 89.289213] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 89.289246] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 89.291589] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 89.309894] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 89.319982] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 89.323005] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 89.329913] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 89.332196] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 89.334735] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 89.341175] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 89.350856] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 89.352842] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 89.355516] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 89.364707] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 89.368464] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 89.409188] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 89.420410] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 89.446030] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 89.460291] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 89.461840] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 89.463230] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 89.470822] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 89.473354] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 89.474291] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 89.477107] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 89.478100] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 89.480477] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 89.481601] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 89.535708] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 89.568710] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 89.575808] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 89.650440] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 89.652031] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 89.657922] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 89.667863] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 91.362732] Bluetooth: hci0: command tx timeout [ 91.362740] Bluetooth: hci1: command tx timeout [ 91.426912] Bluetooth: hci2: command tx timeout [ 91.427659] Bluetooth: hci3: command tx timeout [ 91.490681] Bluetooth: hci6: command tx timeout [ 91.554677] Bluetooth: hci4: command tx timeout [ 91.681708] Bluetooth: hci5: command tx timeout [ 91.746785] Bluetooth: hci7: command tx timeout [ 93.409681] Bluetooth: hci0: command tx timeout [ 93.409710] Bluetooth: hci1: command tx timeout [ 93.473669] Bluetooth: hci2: command tx timeout [ 93.475041] Bluetooth: hci3: command tx timeout [ 93.538720] Bluetooth: hci6: command tx timeout [ 93.601671] Bluetooth: hci4: command tx timeout [ 93.731695] Bluetooth: hci5: command tx timeout [ 93.795709] Bluetooth: hci7: command tx timeout [ 95.457667] Bluetooth: hci1: command tx timeout [ 95.459094] Bluetooth: hci0: command tx timeout [ 95.522644] Bluetooth: hci3: command tx timeout [ 95.522684] Bluetooth: hci2: command tx timeout [ 95.586709] Bluetooth: hci6: command tx timeout [ 95.649836] Bluetooth: hci4: command tx timeout [ 95.778019] Bluetooth: hci5: command tx timeout [ 95.842297] Bluetooth: hci7: command tx timeout [ 97.506667] Bluetooth: hci0: command tx timeout [ 97.507150] Bluetooth: hci1: command tx timeout [ 97.570698] Bluetooth: hci2: command tx timeout [ 97.571115] Bluetooth: hci3: command tx timeout [ 97.634674] Bluetooth: hci6: command tx timeout [ 97.699749] Bluetooth: hci4: command tx timeout [ 97.825680] Bluetooth: hci5: command tx timeout [ 97.890972] Bluetooth: hci7: command tx timeout [ 126.201236] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.201882] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.346433] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.347080] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.862812] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.863387] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 17:23:20 executing program 2: semctl$GETPID(0xffffffffffffffff, 0x1, 0xb, &(0x7f0000000000)=""/110) r0 = semget(0x3, 0x1, 0x270) semctl$GETZCNT(r0, 0x0, 0xf, &(0x7f0000000080)=""/4096) r1 = semget(0x3, 0x0, 0x75e) semctl$IPC_RMID(r1, 0x0, 0x0) semctl$IPC_RMID(r1, 0x0, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000001080)=[0xf800, 0x100, 0x8000, 0x5, 0x7b3a, 0x3ff, 0xf066]) semctl$IPC_RMID(r1, 0x0, 0x0) semctl$GETPID(r0, 0x0, 0xb, &(0x7f00000010c0)=""/34) semtimedop(r1, &(0x7f0000001100)=[{0x3, 0x40, 0x1800}], 0x1, &(0x7f0000001140)={0x77359400}) semctl$IPC_INFO(r1, 0x3, 0x3, &(0x7f0000001180)=""/249) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000001280)=""/190) r2 = semget(0x1, 0x6, 0x410) semtimedop(r2, &(0x7f0000001340)=[{0x3, 0x2707, 0x1000}], 0x1, &(0x7f0000001380)={0x0, 0x989680}) semctl$SETALL(r1, 0x0, 0x11, &(0x7f00000013c0)=[0x1ff, 0x8, 0x3, 0xfff]) r3 = semget(0x2, 0x1, 0x8) semctl$SEM_STAT(r3, 0x4, 0x12, &(0x7f0000001400)=""/130) semctl$IPC_RMID(r3, 0x0, 0x0) semctl$GETZCNT(r2, 0x608039f3ce70f4bd, 0xf, &(0x7f00000014c0)=""/230) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f00000015c0)=""/96) 17:23:20 executing program 2: semctl$GETPID(0xffffffffffffffff, 0x1, 0xb, &(0x7f0000000000)=""/110) r0 = semget(0x3, 0x1, 0x270) semctl$GETZCNT(r0, 0x0, 0xf, &(0x7f0000000080)=""/4096) r1 = semget(0x3, 0x0, 0x75e) semctl$IPC_RMID(r1, 0x0, 0x0) semctl$IPC_RMID(r1, 0x0, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000001080)=[0xf800, 0x100, 0x8000, 0x5, 0x7b3a, 0x3ff, 0xf066]) semctl$IPC_RMID(r1, 0x0, 0x0) semctl$GETPID(r0, 0x0, 0xb, &(0x7f00000010c0)=""/34) semtimedop(r1, &(0x7f0000001100)=[{0x3, 0x40, 0x1800}], 0x1, &(0x7f0000001140)={0x77359400}) semctl$IPC_INFO(r1, 0x3, 0x3, &(0x7f0000001180)=""/249) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000001280)=""/190) r2 = semget(0x1, 0x6, 0x410) semtimedop(r2, &(0x7f0000001340)=[{0x3, 0x2707, 0x1000}], 0x1, &(0x7f0000001380)={0x0, 0x989680}) semctl$SETALL(r1, 0x0, 0x11, &(0x7f00000013c0)=[0x1ff, 0x8, 0x3, 0xfff]) r3 = semget(0x2, 0x1, 0x8) semctl$SEM_STAT(r3, 0x4, 0x12, &(0x7f0000001400)=""/130) semctl$IPC_RMID(r3, 0x0, 0x0) semctl$GETZCNT(r2, 0x608039f3ce70f4bd, 0xf, &(0x7f00000014c0)=""/230) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f00000015c0)=""/96) [ 127.128364] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.129065] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 17:23:21 executing program 2: semctl$GETPID(0xffffffffffffffff, 0x1, 0xb, &(0x7f0000000000)=""/110) r0 = semget(0x3, 0x1, 0x270) semctl$GETZCNT(r0, 0x0, 0xf, &(0x7f0000000080)=""/4096) r1 = semget(0x3, 0x0, 0x75e) semctl$IPC_RMID(r1, 0x0, 0x0) semctl$IPC_RMID(r1, 0x0, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000001080)=[0xf800, 0x100, 0x8000, 0x5, 0x7b3a, 0x3ff, 0xf066]) semctl$IPC_RMID(r1, 0x0, 0x0) semctl$GETPID(r0, 0x0, 0xb, &(0x7f00000010c0)=""/34) semtimedop(r1, &(0x7f0000001100)=[{0x3, 0x40, 0x1800}], 0x1, &(0x7f0000001140)={0x77359400}) semctl$IPC_INFO(r1, 0x3, 0x3, &(0x7f0000001180)=""/249) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000001280)=""/190) r2 = semget(0x1, 0x6, 0x410) semtimedop(r2, &(0x7f0000001340)=[{0x3, 0x2707, 0x1000}], 0x1, &(0x7f0000001380)={0x0, 0x989680}) semctl$SETALL(r1, 0x0, 0x11, &(0x7f00000013c0)=[0x1ff, 0x8, 0x3, 0xfff]) r3 = semget(0x2, 0x1, 0x8) semctl$SEM_STAT(r3, 0x4, 0x12, &(0x7f0000001400)=""/130) semctl$IPC_RMID(r3, 0x0, 0x0) semctl$GETZCNT(r2, 0x608039f3ce70f4bd, 0xf, &(0x7f00000014c0)=""/230) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f00000015c0)=""/96) 17:23:21 executing program 2: semctl$GETPID(0xffffffffffffffff, 0x1, 0xb, &(0x7f0000000000)=""/110) r0 = semget(0x3, 0x1, 0x270) semctl$GETZCNT(r0, 0x0, 0xf, &(0x7f0000000080)=""/4096) r1 = semget(0x3, 0x0, 0x75e) semctl$IPC_RMID(r1, 0x0, 0x0) semctl$IPC_RMID(r1, 0x0, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000001080)=[0xf800, 0x100, 0x8000, 0x5, 0x7b3a, 0x3ff, 0xf066]) semctl$IPC_RMID(r1, 0x0, 0x0) semctl$GETPID(r0, 0x0, 0xb, &(0x7f00000010c0)=""/34) semtimedop(r1, &(0x7f0000001100)=[{0x3, 0x40, 0x1800}], 0x1, &(0x7f0000001140)={0x77359400}) semctl$IPC_INFO(r1, 0x3, 0x3, &(0x7f0000001180)=""/249) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000001280)=""/190) r2 = semget(0x1, 0x6, 0x410) semtimedop(r2, &(0x7f0000001340)=[{0x3, 0x2707, 0x1000}], 0x1, &(0x7f0000001380)={0x0, 0x989680}) semctl$SETALL(r1, 0x0, 0x11, &(0x7f00000013c0)=[0x1ff, 0x8, 0x3, 0xfff]) r3 = semget(0x2, 0x1, 0x8) semctl$SEM_STAT(r3, 0x4, 0x12, &(0x7f0000001400)=""/130) semctl$IPC_RMID(r3, 0x0, 0x0) semctl$GETZCNT(r2, 0x608039f3ce70f4bd, 0xf, &(0x7f00000014c0)=""/230) 17:23:21 executing program 2: semctl$GETPID(0xffffffffffffffff, 0x1, 0xb, &(0x7f0000000000)=""/110) r0 = semget(0x3, 0x1, 0x270) semctl$GETZCNT(r0, 0x0, 0xf, &(0x7f0000000080)=""/4096) r1 = semget(0x3, 0x0, 0x75e) semctl$IPC_RMID(r1, 0x0, 0x0) semctl$IPC_RMID(r1, 0x0, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000001080)=[0xf800, 0x100, 0x8000, 0x5, 0x7b3a, 0x3ff, 0xf066]) semctl$IPC_RMID(r1, 0x0, 0x0) semctl$GETPID(r0, 0x0, 0xb, &(0x7f00000010c0)=""/34) semtimedop(r1, &(0x7f0000001100)=[{0x3, 0x40, 0x1800}], 0x1, &(0x7f0000001140)={0x77359400}) semctl$IPC_INFO(r1, 0x3, 0x3, &(0x7f0000001180)=""/249) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000001280)=""/190) r2 = semget(0x1, 0x6, 0x410) semtimedop(r2, &(0x7f0000001340)=[{0x3, 0x2707, 0x1000}], 0x1, &(0x7f0000001380)={0x0, 0x989680}) semctl$SETALL(r1, 0x0, 0x11, &(0x7f00000013c0)=[0x1ff, 0x8, 0x3, 0xfff]) r3 = semget(0x2, 0x1, 0x8) semctl$SEM_STAT(r3, 0x4, 0x12, &(0x7f0000001400)=""/130) semctl$IPC_RMID(r3, 0x0, 0x0) 17:23:21 executing program 2: semctl$GETPID(0xffffffffffffffff, 0x1, 0xb, &(0x7f0000000000)=""/110) r0 = semget(0x3, 0x1, 0x270) semctl$GETZCNT(r0, 0x0, 0xf, &(0x7f0000000080)=""/4096) r1 = semget(0x3, 0x0, 0x75e) semctl$IPC_RMID(r1, 0x0, 0x0) semctl$IPC_RMID(r1, 0x0, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000001080)=[0xf800, 0x100, 0x8000, 0x5, 0x7b3a, 0x3ff, 0xf066]) semctl$IPC_RMID(r1, 0x0, 0x0) semctl$GETPID(r0, 0x0, 0xb, &(0x7f00000010c0)=""/34) semtimedop(r1, &(0x7f0000001100)=[{0x3, 0x40, 0x1800}], 0x1, &(0x7f0000001140)={0x77359400}) semctl$IPC_INFO(r1, 0x3, 0x3, &(0x7f0000001180)=""/249) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000001280)=""/190) r2 = semget(0x1, 0x6, 0x410) semtimedop(r2, &(0x7f0000001340)=[{0x3, 0x2707, 0x1000}], 0x1, &(0x7f0000001380)={0x0, 0x989680}) semctl$SETALL(r1, 0x0, 0x11, &(0x7f00000013c0)=[0x1ff, 0x8, 0x3, 0xfff]) r3 = semget(0x2, 0x1, 0x8) semctl$SEM_STAT(r3, 0x4, 0x12, &(0x7f0000001400)=""/130) 17:23:21 executing program 2: semctl$GETPID(0xffffffffffffffff, 0x1, 0xb, &(0x7f0000000000)=""/110) r0 = semget(0x3, 0x1, 0x270) semctl$GETZCNT(r0, 0x0, 0xf, &(0x7f0000000080)=""/4096) r1 = semget(0x3, 0x0, 0x75e) semctl$IPC_RMID(r1, 0x0, 0x0) semctl$IPC_RMID(r1, 0x0, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000001080)=[0xf800, 0x100, 0x8000, 0x5, 0x7b3a, 0x3ff, 0xf066]) semctl$IPC_RMID(r1, 0x0, 0x0) semctl$GETPID(r0, 0x0, 0xb, &(0x7f00000010c0)=""/34) semtimedop(r1, &(0x7f0000001100)=[{0x3, 0x40, 0x1800}], 0x1, &(0x7f0000001140)={0x77359400}) semctl$IPC_INFO(r1, 0x3, 0x3, &(0x7f0000001180)=""/249) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000001280)=""/190) r2 = semget(0x1, 0x6, 0x410) semtimedop(r2, &(0x7f0000001340)=[{0x3, 0x2707, 0x1000}], 0x1, &(0x7f0000001380)={0x0, 0x989680}) semctl$SETALL(r1, 0x0, 0x11, &(0x7f00000013c0)=[0x1ff, 0x8, 0x3, 0xfff]) semget(0x2, 0x1, 0x8) 17:23:21 executing program 1: semctl$GETPID(0xffffffffffffffff, 0x1, 0xb, &(0x7f0000000000)=""/110) r0 = semget(0x3, 0x1, 0x270) semctl$GETZCNT(r0, 0x0, 0xf, &(0x7f0000000080)=""/4096) r1 = semget(0x3, 0x0, 0x75e) semctl$IPC_RMID(r1, 0x0, 0x0) semctl$IPC_RMID(r1, 0x0, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000001080)=[0xf800, 0x100, 0x8000, 0x5, 0x7b3a, 0x3ff, 0xf066]) semctl$IPC_RMID(r1, 0x0, 0x0) semctl$GETPID(r0, 0x0, 0xb, &(0x7f00000010c0)=""/34) semtimedop(r1, &(0x7f0000001100)=[{0x3, 0x40, 0x1800}], 0x1, &(0x7f0000001140)={0x77359400}) semctl$IPC_INFO(r1, 0x3, 0x3, &(0x7f0000001180)=""/249) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000001280)=""/190) r2 = semget(0x1, 0x6, 0x410) semtimedop(r2, &(0x7f0000001340)=[{0x3, 0x2707, 0x1000}], 0x1, &(0x7f0000001380)={0x0, 0x989680}) semctl$SETALL(r1, 0x0, 0x11, &(0x7f00000013c0)=[0x1ff, 0x8, 0x3, 0xfff]) r3 = semget(0x2, 0x1, 0x8) semctl$SEM_STAT(r3, 0x4, 0x12, &(0x7f0000001400)=""/130) semctl$IPC_RMID(r3, 0x0, 0x0) semctl$GETZCNT(r2, 0x608039f3ce70f4bd, 0xf, &(0x7f00000014c0)=""/230) [ 127.839918] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.840557] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.923228] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.923868] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.222357] loop3: detected capacity change from 0 to 8 [ 128.258830] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.259451] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.271371] loop3: detected capacity change from 0 to 8 [ 128.401871] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.402982] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.488059] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.488709] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.637270] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.638390] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.865768] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.868770] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.007783] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.008401] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.385521] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.387523] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.470832] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.471471] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.593814] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.595141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.601519] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.602177] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 17:23:35 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup(r0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) llistxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 17:23:35 executing program 0: r0 = syz_mount_image$iso9660(0x0, &(0x7f0000000440)='./cgroup.cpu/cgroup.procs\x00', 0x4, 0x0, 0x0, 0x3923400, 0x0) mount(&(0x7f0000000040)=ANY=[@ANYRES64=r0, @ANYRES64=r0], &(0x7f0000000080)='./file0\x00', 0x0, 0x104bc1c, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x801, 0x0) write(r1, 0x0, 0x0) execveat(r1, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)=[&(0x7f00000000c0)='\x00', &(0x7f0000000140)='+\x00', &(0x7f0000000180)='\x00', &(0x7f00000001c0)=':.\x00'], &(0x7f0000000400)=[&(0x7f0000000240)=',:{@\xc2.\x00', &(0x7f0000000280)='&@\x00', &(0x7f00000002c0)='\x00', &(0x7f0000000300)='\xbbnp-)$+-:\xcf[-{\'].:\x00', &(0x7f0000000340)='%\x00', &(0x7f0000000380)='(\x00', &(0x7f00000003c0)='\\:\x00'], 0x400) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000000)={0x0, 0xfd, 0x0, 0x0, "07000021b069f9b400000025599bcfacaa41b000000000000200"}) fadvise64(r2, 0x5, 0x2, 0x0) 17:23:35 executing program 2: semctl$GETPID(0xffffffffffffffff, 0x1, 0xb, &(0x7f0000000000)=""/110) r0 = semget(0x3, 0x1, 0x270) semctl$GETZCNT(r0, 0x0, 0xf, &(0x7f0000000080)=""/4096) r1 = semget(0x3, 0x0, 0x75e) semctl$IPC_RMID(r1, 0x0, 0x0) semctl$IPC_RMID(r1, 0x0, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000001080)=[0xf800, 0x100, 0x8000, 0x5, 0x7b3a, 0x3ff, 0xf066]) semctl$IPC_RMID(r1, 0x0, 0x0) semctl$GETPID(r0, 0x0, 0xb, &(0x7f00000010c0)=""/34) semtimedop(r1, &(0x7f0000001100)=[{0x3, 0x40, 0x1800}], 0x1, &(0x7f0000001140)={0x77359400}) semctl$IPC_INFO(r1, 0x3, 0x3, &(0x7f0000001180)=""/249) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000001280)=""/190) r2 = semget(0x1, 0x6, 0x410) semtimedop(r2, &(0x7f0000001340)=[{0x3, 0x2707, 0x1000}], 0x1, &(0x7f0000001380)={0x0, 0x989680}) semctl$SETALL(r1, 0x0, 0x11, &(0x7f00000013c0)=[0x1ff, 0x8, 0x3, 0xfff]) 17:23:35 executing program 1: io_pgetevents(0x0, 0x100, 0x2, &(0x7f0000000040)=[{}, {}], &(0x7f0000000080), &(0x7f0000000140)={&(0x7f00000000c0)={[0x54]}, 0x8}) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000340)="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", 0x102, 0x400}], 0x0, &(0x7f0000014100)) 17:23:35 executing program 4: r0 = syz_io_uring_setup(0xffffffff, &(0x7f0000000040)={0x0, 0x0, 0x2}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000000), 0x1) 17:23:35 executing program 7: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) r1 = syz_io_uring_setup(0x225f, &(0x7f0000000300)={0x0, 0xfffffffd}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f00000002c0), &(0x7f0000003ac0)) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x6000001, 0x11, r0, 0x8000000) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x1000004, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r3, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0x15, 0x0, r2) 17:23:35 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8983, &(0x7f00000002c0)={0x8, 'xfrm0\x00', {'batadv0\x00'}, 0x6}) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000480)={0xa, 0x4e21, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000440)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x31, 0x0, "80bd72b42e6ded96a16ab8fc3ad8525d7010c4f4d3c4750600000079b1f72d505c4bb1fd3d1359f11556fd59aaa84584a46505a15c4e5ffcebba06967d5488fb9f8e815a370659a315e8550fbbee00bf"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x0, 0x3e, 0x0, "2b8bdd7c4ddf64e573fb90df56398a1720f4258b059e1284a5e036e5b36663a4bb5f524aaa3cddc9979de0ac95be0cfe5d2da5789a5f0a9f69873c1d89b4a5c44047b1d152345682dc9509f6718ca65d"}, 0xd8) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4e22, 0xf96, @mcast2, 0x81}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000080)={@in6={{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x0, 0x0, 0x0, "9e2550c22db3e71843aef7ed344e875f82ad11808b6f453b40abf8c2a09fbef9396c024d7e16ef99b6002dc647a600e4c072cbb15053db46562576eaffe309a49cae78a40c3b228860c5c66f4283c102"}, 0xd8) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0xfff, @empty, 0x1000}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000080)=0x7, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000400)={0x9, 0x5, 0x5, 0x3000000, 0xec}, 0x14) close(r0) 17:23:35 executing program 6: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x4, @perf_config_ext={0x800, 0x1f}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x20003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x6, 0x3, 0x9, 0x0, 0x23, 0x2a08c, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x4, @perf_bp={&(0x7f00000002c0), 0x5}, 0x4d049, 0xbaf, 0x7, 0x3, 0x6, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0xe7, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000003c0)="0774ab99a781e3ec6073783e60c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x2d, r0}, 0x68) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e23, 0x400, @local, 0x13f}, 0x1c) r2 = signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x74) sendmmsg$inet6(r1, &(0x7f0000003040)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="db4d31d6805ecdac87307b14c169d9d9", 0x7ffff000}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000a00)='m', 0x1}], 0x1}}], 0x400000000000102, 0x44894) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffff9}, 0xfd1a) shutdown(r1, 0x1) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x20, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, 0x15aa}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58) 17:23:35 executing program 4: syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x6}, @HCI_OP_LE_CLEAR_RESOLV_LIST}}, 0x16) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="02b9ca0168c5209845fa35b89e000000000000000500000100", @ANYRES16], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x6a}, {0x7, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x5, 0x6d, "9a0edb", 0x100, 0x8}, {@any, 0x8, 0x2f, 0x5, "d960ea", 0x90ff, 0x7}, {@none, 0x5, 0xb1, 0x6c, "c5f224", 0x8001, 0x6b}, {@any, 0x47, 0x8, 0x4, "0587e0", 0x8000, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5, 0x80, 0x7, "db71b7", 0x1, 0x7f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x1f, 0x1, "70dfc4", 0x3, 0x8}, {@none, 0xf9, 0x8, 0x0, '(](', 0x0, 0x9}]}}}, 0x6d) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="cf5fb29327c3f6cc7b825a804ff58b2ce07b37a0721e012f4624c285f812bbed0d70f8649edc990e4187e6776aa2127add02485983d8c997fa67a867bb2e06bee305b1015805ab1eb6bd5c247f5b8736d9099055e77abdb8ac49402e7909aae702b379b1de6bd86e236327358db0b768740b9fdecb2ee4f79151abba", @ANYRES64=r1, @ANYRESHEX]) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000d00)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x1}, ' '}, 0x5) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYRESHEX=r1, @ANYRESDEC=r0], 0x90) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) [ 141.303984] loop1: detected capacity change from 0 to 4 [ 141.316539] EXT4-fs (loop1): unsupported inode size: 46591 [ 141.320794] Bluetooth: hci2: unexpected cc 0x2029 length: 16 > 1 [ 141.322207] Bluetooth: hci2: ACL packet for unknown connection handle 2745 [ 141.322565] EXT4-fs (loop1): blocksize: 2048 [ 141.327095] Bluetooth: hci2: ISO packet for unknown connection handle 1618 [ 141.330742] audit: type=1400 audit(1768584215.226:8): avc: denied { open } for pid=3943 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 141.338728] audit: type=1400 audit(1768584215.226:9): avc: denied { kernel } for pid=3943 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 17:23:35 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x2, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x6, 0x3, 0x9, 0x0, 0x1f, 0x2a08c, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_config_ext={0x800003, 0x9}, 0x4d049, 0xbaf, 0x7, 0x3, 0x80000000, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0xe7, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000003c0)="0774ab99a781e3ec6073783e60c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x2d, r0}, 0x68) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e24, 0x400, @remote, 0x3f}, 0x1c) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = epoll_create1(0x0) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r2}}) r5 = signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003040)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="db4d31d6805ecdac87307b14c169d9d9", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000a00)='m', 0x1}], 0x1}}], 0x3, 0x44894) connect$inet6(r5, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x1c) 17:23:35 executing program 2: semctl$GETPID(0xffffffffffffffff, 0x1, 0xb, &(0x7f0000000000)=""/110) r0 = semget(0x3, 0x1, 0x270) semctl$GETZCNT(r0, 0x0, 0xf, &(0x7f0000000080)=""/4096) r1 = semget(0x3, 0x0, 0x75e) semctl$IPC_RMID(r1, 0x0, 0x0) semctl$IPC_RMID(r1, 0x0, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000001080)=[0xf800, 0x100, 0x8000, 0x5, 0x7b3a, 0x3ff, 0xf066]) semctl$IPC_RMID(r1, 0x0, 0x0) semctl$GETPID(r0, 0x0, 0xb, &(0x7f00000010c0)=""/34) semtimedop(r1, &(0x7f0000001100)=[{0x3, 0x40, 0x1800}], 0x1, &(0x7f0000001140)={0x77359400}) semctl$IPC_INFO(r1, 0x3, 0x3, &(0x7f0000001180)=""/249) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000001280)=""/190) r2 = semget(0x1, 0x6, 0x410) semtimedop(r2, &(0x7f0000001340)=[{0x3, 0x2707, 0x1000}], 0x1, &(0x7f0000001380)={0x0, 0x989680}) 17:23:35 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x7}, 0x10a, 0x0, 0x0, 0x9, 0x100, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x17, &(0x7f0000001480)=[{0x0, 0x200000000000000}], 0x1) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) write$P9_RWRITE(r0, &(0x7f00000000c0)={0xb, 0x77, 0x2, 0x7}, 0xb) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) 17:23:35 executing program 2: semctl$GETPID(0xffffffffffffffff, 0x1, 0xb, &(0x7f0000000000)=""/110) r0 = semget(0x3, 0x1, 0x270) semctl$GETZCNT(r0, 0x0, 0xf, &(0x7f0000000080)=""/4096) r1 = semget(0x3, 0x0, 0x75e) semctl$IPC_RMID(r1, 0x0, 0x0) semctl$IPC_RMID(r1, 0x0, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000001080)=[0xf800, 0x100, 0x8000, 0x5, 0x7b3a, 0x3ff, 0xf066]) semctl$IPC_RMID(r1, 0x0, 0x0) semctl$GETPID(r0, 0x0, 0xb, &(0x7f00000010c0)=""/34) semtimedop(r1, &(0x7f0000001100)=[{0x3, 0x40, 0x1800}], 0x1, &(0x7f0000001140)={0x77359400}) semctl$IPC_INFO(r1, 0x3, 0x3, &(0x7f0000001180)=""/249) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000001280)=""/190) semget(0x1, 0x6, 0x410) 17:23:35 executing program 2: semctl$GETPID(0xffffffffffffffff, 0x1, 0xb, &(0x7f0000000000)=""/110) r0 = semget(0x3, 0x1, 0x270) semctl$GETZCNT(r0, 0x0, 0xf, &(0x7f0000000080)=""/4096) r1 = semget(0x3, 0x0, 0x75e) semctl$IPC_RMID(r1, 0x0, 0x0) semctl$IPC_RMID(r1, 0x0, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000001080)=[0xf800, 0x100, 0x8000, 0x5, 0x7b3a, 0x3ff, 0xf066]) semctl$IPC_RMID(r1, 0x0, 0x0) semctl$GETPID(r0, 0x0, 0xb, &(0x7f00000010c0)=""/34) semtimedop(r1, &(0x7f0000001100)=[{0x3, 0x40, 0x1800}], 0x1, &(0x7f0000001140)={0x77359400}) semctl$IPC_INFO(r1, 0x3, 0x3, &(0x7f0000001180)=""/249) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000001280)=""/190) [ 141.484895] Bluetooth: hci2: unexpected cc 0x2029 length: 16 > 1 [ 141.490337] Bluetooth: hci2: ACL packet for unknown connection handle 2745 [ 141.499569] Bluetooth: hci2: ISO packet for unknown connection handle 1618 17:23:35 executing program 2: semctl$GETPID(0xffffffffffffffff, 0x1, 0xb, &(0x7f0000000000)=""/110) r0 = semget(0x3, 0x1, 0x270) semctl$GETZCNT(r0, 0x0, 0xf, &(0x7f0000000080)=""/4096) r1 = semget(0x3, 0x0, 0x75e) semctl$IPC_RMID(r1, 0x0, 0x0) semctl$IPC_RMID(r1, 0x0, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000001080)=[0xf800, 0x100, 0x8000, 0x5, 0x7b3a, 0x3ff, 0xf066]) semctl$IPC_RMID(r1, 0x0, 0x0) semctl$GETPID(r0, 0x0, 0xb, &(0x7f00000010c0)=""/34) semtimedop(r1, &(0x7f0000001100)=[{0x3, 0x40, 0x1800}], 0x1, &(0x7f0000001140)={0x77359400}) semctl$IPC_INFO(r1, 0x3, 0x3, &(0x7f0000001180)=""/249) 17:23:35 executing program 7: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) r1 = syz_io_uring_setup(0x225f, &(0x7f0000000300)={0x0, 0xfffffffd}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f00000002c0), &(0x7f0000003ac0)) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x6000001, 0x11, r0, 0x8000000) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x1000004, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r3, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0x15, 0x0, r2) [ 141.634809] [ 141.635128] ===================================== [ 141.635793] WARNING: bad unlock balance detected! [ 141.636443] 6.19.0-rc5-next-20260116 #1 Not tainted [ 141.637125] ------------------------------------- [ 141.637780] syz-executor.7/3988 is trying to release lock (rcu_read_lock) at: [ 141.640758] [] __wait_on_freeing_inode+0x105/0x350 [ 141.642176] but there are no more locks to release! [ 141.643865] [ 141.643865] other info that might help us debug this: [ 141.645311] 4 locks held by syz-executor.7/3988: [ 141.646448] #0: ffff88800f9343f8 (sb_writers#3){.+.+}-{0:0}, at: filename_create+0xf7/0x400 [ 141.648786] #1: ffff888049c53388 (&type->i_mutex_dir_key#3/1){+.+.}-{4:4}, at: filename_create+0x1b1/0x400 [ 141.650167] #2: ffff88800f940950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xe32/0x12d0 [ 141.651413] #3: ffffffff85c16898 (inode_hash_lock){+.+.}-{3:3}, at: insert_inode_locked+0xf9/0x890 [ 141.652679] [ 141.652679] stack backtrace: [ 141.653300] CPU: 0 UID: 0 PID: 3988 Comm: syz-executor.7 Not tainted 6.19.0-rc5-next-20260116 #1 PREEMPT(lazy) [ 141.653326] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 141.653339] Call Trace: [ 141.653346] [ 141.653354] dump_stack_lvl+0xca/0x120 [ 141.653396] ? __wait_on_freeing_inode+0x105/0x350 [ 141.653422] print_unlock_imbalance_bug+0x118/0x130 [ 141.653448] ? __wait_on_freeing_inode+0x105/0x350 [ 141.653474] lock_release+0x1ee/0x270 [ 141.653501] __wait_on_freeing_inode+0x10a/0x350 [ 141.653528] ? __pfx___wait_on_freeing_inode+0x10/0x10 [ 141.653556] ? __pfx_var_wake_function+0x10/0x10 [ 141.653588] ? lock_is_held_type+0x9e/0x120 [ 141.653609] insert_inode_locked+0x25f/0x890 [ 141.653640] __ext4_new_inode+0x223d/0x4cd0 [ 141.653672] ? __pfx___ext4_new_inode+0x10/0x10 [ 141.653698] ? __pfx___dquot_initialize+0x10/0x10 [ 141.653731] ? __pfx_avc_has_perm+0x10/0x10 [ 141.653759] ext4_symlink+0x623/0xb40 [ 141.653792] ? __pfx_ext4_symlink+0x10/0x10 [ 141.653821] ? security_inode_permission+0x72/0xe0 [ 141.653844] vfs_symlink+0x44b/0x840 [ 141.653874] filename_symlinkat+0x158/0x440 [ 141.653900] ? __pfx_filename_symlinkat+0x10/0x10 [ 141.653925] ? strncpy_from_user+0x21b/0x2f0 [ 141.653955] __x64_sys_symlink+0x82/0x110 [ 141.653979] do_syscall_64+0xbf/0x420 [ 141.654002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.654025] RIP: 0033:0x7f65f0293427 [ 141.654041] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 58 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 141.654061] RSP: 002b:00007fffe338d9b8 EFLAGS: 00000202 ORIG_RAX: 0000000000000058 [ 141.654080] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f65f0293427 [ 141.654094] RDX: ffffffffffffffbc RSI: 00007f65f02ee00e RDI: 00007f65f02ed1dd [ 141.654108] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007fffe338d430 [ 141.654121] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 141.654133] R13: 0000000000000000 R14: 0000000000000001 R15: 00007fffe338da80 [ 141.654153] [ 141.682590] ------------[ cut here ]------------ [ 141.685489] WARNING: kernel/rcu/tree_plugin.h:443 at __rcu_read_unlock+0x25f/0x5c0, CPU#0: syz-executor.7/3988 [ 141.687170] Modules linked in: [ 141.687706] CPU: 0 UID: 0 PID: 3988 Comm: syz-executor.7 Not tainted 6.19.0-rc5-next-20260116 #1 PREEMPT(lazy) [ 141.689157] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 141.690373] RIP: 0010:__rcu_read_unlock+0x25f/0x5c0 [ 141.691278] Code: f2 02 00 00 c7 43 58 01 00 00 00 bf 09 00 00 00 e8 d6 b7 de ff 4d 85 f6 0f 84 73 fe ff ff e8 38 8a 20 00 fb e9 68 fe ff ff 90 <0f> 0b 90 5b 5d 41 5c 41 5d 41 5e e9 81 4d 74 03 e8 2c 5d 56 00 e9 [ 141.693838] RSP: 0018:ffff88804ae179a0 EFLAGS: 00010286 [ 141.694590] RAX: 00000000ffffffff RBX: ffff88800d1c1b80 RCX: ffffffff815660f7 [ 141.695720] RDX: 0000000000000000 RSI: ffffffff81566100 RDI: ffff88800d1c1f7c [ 141.696783] RBP: ffff88800d1c1b80 R08: 0000000000000000 R09: fffffbfff0ba7040 [ 141.697855] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88800d1c1b80 [ 141.698928] R13: 0000000000000001 R14: ffffffff85c0fef0 R15: ffff888049c52938 [ 141.700002] FS: 0000555594ee0400(0000) GS:ffff8880e5342000(0000) knlGS:0000000000000000 [ 141.701190] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 141.702074] CR2: 00007fffe338ce58 CR3: 000000001e558000 CR4: 0000000000350ef0 [ 141.703143] Call Trace: [ 141.703565] [ 141.704880] __wait_on_freeing_inode+0x10f/0x350 [ 141.706145] ? __pfx___wait_on_freeing_inode+0x10/0x10 [ 141.708167] ? __pfx_var_wake_function+0x10/0x10 [ 141.710453] ? lock_is_held_type+0x9e/0x120 [ 141.712510] insert_inode_locked+0x25f/0x890 [ 141.715563] __ext4_new_inode+0x223d/0x4cd0 [ 141.720261] ? __pfx___ext4_new_inode+0x10/0x10 [ 141.722587] ? __pfx___dquot_initialize+0x10/0x10 [ 141.724051] ? __pfx_avc_has_perm+0x10/0x10 [ 141.727367] ext4_symlink+0x623/0xb40 [ 141.731585] ? __pfx_ext4_symlink+0x10/0x10 [ 141.733475] ? security_inode_permission+0x72/0xe0 [ 141.736522] vfs_symlink+0x44b/0x840 [ 141.738977] filename_symlinkat+0x158/0x440 [ 141.741095] ? __pfx_filename_symlinkat+0x10/0x10 [ 141.742475] ? strncpy_from_user+0x21b/0x2f0 [ 141.746178] __x64_sys_symlink+0x82/0x110 [ 141.747541] do_syscall_64+0xbf/0x420 [ 141.749078] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.750038] RIP: 0033:0x7f65f0293427 [ 141.750753] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 58 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 141.753328] RSP: 002b:00007fffe338d9b8 EFLAGS: 00000202 ORIG_RAX: 0000000000000058 [ 141.754461] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f65f0293427 [ 141.755528] RDX: ffffffffffffffbc RSI: 00007f65f02ee00e RDI: 00007f65f02ed1dd [ 141.756584] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007fffe338d430 [ 141.759961] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 141.762715] R13: 0000000000000000 R14: 0000000000000001 R15: 00007fffe338da80 [ 141.767557] [ 141.767982] irq event stamp: 1557 [ 141.768468] hardirqs last enabled at (1557): [] _raw_spin_unlock_irqrestore+0x2c/0x50 [ 141.770056] hardirqs last disabled at (1556): [] _raw_spin_lock_irqsave+0x53/0x60 [ 141.771540] softirqs last enabled at (1552): [] kernel_fpu_end+0x59/0x70 [ 141.772972] softirqs last disabled at (1550): [] kernel_fpu_begin_mask+0x1bb/0x300 [ 141.774426] ---[ end trace 0000000000000000 ]--- [ 145.377739] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 145.379210] Bluetooth: hci2: Injecting HCI hardware error event [ 145.381397] Bluetooth: hci2: hardware error 0x00 [ 147.443952] Bluetooth: hci2: Opcode 0x0c03 failed: -110 17:23:43 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8983, &(0x7f00000002c0)={0x8, 'xfrm0\x00', {'batadv0\x00'}, 0x6}) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000480)={0xa, 0x4e21, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000440)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x31, 0x0, "80bd72b42e6ded96a16ab8fc3ad8525d7010c4f4d3c4750600000079b1f72d505c4bb1fd3d1359f11556fd59aaa84584a46505a15c4e5ffcebba06967d5488fb9f8e815a370659a315e8550fbbee00bf"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x0, 0x3e, 0x0, "2b8bdd7c4ddf64e573fb90df56398a1720f4258b059e1284a5e036e5b36663a4bb5f524aaa3cddc9979de0ac95be0cfe5d2da5789a5f0a9f69873c1d89b4a5c44047b1d152345682dc9509f6718ca65d"}, 0xd8) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4e22, 0xf96, @mcast2, 0x81}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000080)={@in6={{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x0, 0x0, 0x0, "9e2550c22db3e71843aef7ed344e875f82ad11808b6f453b40abf8c2a09fbef9396c024d7e16ef99b6002dc647a600e4c072cbb15053db46562576eaffe309a49cae78a40c3b228860c5c66f4283c102"}, 0xd8) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0xfff, @empty, 0x1000}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000080)=0x7, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000400)={0x9, 0x5, 0x5, 0x3000000, 0xec}, 0x14) close(r0) 17:23:43 executing program 2: semctl$GETPID(0xffffffffffffffff, 0x1, 0xb, &(0x7f0000000000)=""/110) r0 = semget(0x3, 0x1, 0x270) semctl$GETZCNT(r0, 0x0, 0xf, &(0x7f0000000080)=""/4096) r1 = semget(0x3, 0x0, 0x75e) semctl$IPC_RMID(r1, 0x0, 0x0) semctl$IPC_RMID(r1, 0x0, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000001080)=[0xf800, 0x100, 0x8000, 0x5, 0x7b3a, 0x3ff, 0xf066]) semctl$IPC_RMID(r1, 0x0, 0x0) semctl$GETPID(r0, 0x0, 0xb, &(0x7f00000010c0)=""/34) semtimedop(r1, &(0x7f0000001100)=[{0x3, 0x40, 0x1800}], 0x1, &(0x7f0000001140)={0x77359400}) 17:23:43 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x7}, 0x10a, 0x0, 0x0, 0x9, 0x100, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x17, &(0x7f0000001480)=[{0x0, 0x200000000000000}], 0x1) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) write$P9_RWRITE(r0, &(0x7f00000000c0)={0xb, 0x77, 0x2, 0x7}, 0xb) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) 17:23:43 executing program 4: syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x6}, @HCI_OP_LE_CLEAR_RESOLV_LIST}}, 0x16) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="02b9ca0168c5209845fa35b89e000000000000000500000100", @ANYRES16], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES32], 0x54) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x8}}}, 0x8) syz_emit_vhci(&(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x1f9, 0x614900) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x6a}, {0x7, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x5, 0x6d, "9a0edb", 0x100, 0x8}, {@any, 0x8, 0x2f, 0x5, "d960ea", 0x90ff, 0x7}, {@none, 0x5, 0xb1, 0x6c, "c5f224", 0x8001, 0x6b}, {@any, 0x47, 0x8, 0x4, "0587e0", 0x8000, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5, 0x80, 0x7, "db71b7", 0x1, 0x7f}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x1f, 0x1, "70dfc4", 0x3, 0x8}, {@none, 0xf9, 0x8, 0x0, '(](', 0x0, 0x9}]}}}, 0x6d) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="cf5fb29327c3f6cc7b825a804ff58b2ce07b37a0721e012f4624c285f812bbed0d70f8649edc990e4187e6776aa2127add02485983d8c997fa67a867bb2e06bee305b1015805ab1eb6bd5c247f5b8736d9099055e77abdb8ac49402e7909aae702b379b1de6bd86e236327358db0b768740b9fdecb2ee4f79151abba", @ANYRES64=r1, @ANYRESHEX]) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000d00)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x1}, ' '}, 0x5) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYRESHEX=r1, @ANYRESDEC=r0], 0x90) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 17:23:43 executing program 7: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x4, @perf_config_ext={0x800, 0x1f}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x20003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x6, 0x3, 0x9, 0x0, 0x23, 0x2a08c, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x4, @perf_bp={&(0x7f00000002c0), 0x5}, 0x4d049, 0xbaf, 0x7, 0x3, 0x6, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0xe7, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000003c0)="0774ab99a781e3ec6073783e60c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x2d, r0}, 0x68) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e23, 0x400, @local, 0x13f}, 0x1c) r2 = signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x74) sendmmsg$inet6(r1, &(0x7f0000003040)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="db4d31d6805ecdac87307b14c169d9d9", 0x7ffff000}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000a00)='m', 0x1}], 0x1}}], 0x400000000000102, 0x44894) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffff9}, 0xfd1a) shutdown(r1, 0x1) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x20, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, 0x15aa}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58) 17:23:43 executing program 6: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x4, @perf_config_ext={0x800, 0x1f}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x20003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x6, 0x3, 0x9, 0x0, 0x23, 0x2a08c, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x4, @perf_bp={&(0x7f00000002c0), 0x5}, 0x4d049, 0xbaf, 0x7, 0x3, 0x6, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0xe7, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000003c0)="0774ab99a781e3ec6073783e60c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x2d, r0}, 0x68) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e23, 0x400, @local, 0x13f}, 0x1c) r2 = signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x74) sendmmsg$inet6(r1, &(0x7f0000003040)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="db4d31d6805ecdac87307b14c169d9d9", 0x7ffff000}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000a00)='m', 0x1}], 0x1}}], 0x400000000000102, 0x44894) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffff9}, 0xfd1a) shutdown(r1, 0x1) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x20, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, 0x15aa}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58) 17:23:43 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x4, @perf_config_ext={0x800, 0x1f}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x20003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x6, 0x3, 0x9, 0x0, 0x23, 0x2a08c, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x4, @perf_bp={&(0x7f00000002c0), 0x5}, 0x4d049, 0xbaf, 0x7, 0x3, 0x6, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0xe7, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000003c0)="0774ab99a781e3ec6073783e60c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x2d, r0}, 0x68) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e23, 0x400, @local, 0x13f}, 0x1c) r2 = signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x74) sendmmsg$inet6(r1, &(0x7f0000003040)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="db4d31d6805ecdac87307b14c169d9d9", 0x7ffff000}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000a00)='m', 0x1}], 0x1}}], 0x400000000000102, 0x44894) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffff9}, 0xfd1a) shutdown(r1, 0x1) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x20, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, 0x15aa}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58) 17:23:43 executing program 3: syz_usb_connect$cdc_ecm(0x3, 0x56, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x3, 0x40, 0x1f, [{{0x9, 0x4, 0x0, 0x3f, 0x2, 0x2, 0x6, 0x0, 0xcf, {{0x5}, {0x5, 0x24, 0x0, 0x101}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x7ff, 0xffff, 0x4}}, {[{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x9, 0x40}}], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x4, 0x1f, 0x17}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x9, 0x5, 0x9}}}}}]}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0x9, 0x40, 0x80, 0x8, 0x7f}, 0x10, &(0x7f0000000100)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x2, 0x20, 0x1, 0x0, 0x1ff, 0x3}]}, 0x7, [{0x4, &(0x7f0000000140)=@lang_id={0x4}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x43e}}, {0xd0, &(0x7f0000000540)=ANY=[@ANYBLOB="d003de59d7b2abebb3ff673eb0295728e5c9b24baf8c92ec9497b169dd95142c617536fd71d0e583ed3abb8da3480e68a7659a8a7739f7782c7955b69db8dd5d21840f8e44e197f3f22c305d153029dbd8e6390fd7d816c9dc80f02bed1d2459d567aea9b3fe94d710617a4fa19a238b282dc1e33a893b226747361a3fee960572b2b14625da845542a0c37be92205c7d1c3050020dde8e8889dde2c8af1d0c77ef1ad26be8c9f17b55f0cd493632d5d1775ce6ca74b04135527086408496c1e7e5bf6c5257bc8d333032438a85776b3"]}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x42b}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x500a}}, {0xdc, &(0x7f00000003c0)=@string={0xdc, 0x3, "b0199755aa131b1953079cf470bf5fc5789280e1e61575fbe2455eee37a6f5226a902900f47f43f78f9f0474ecd6f820cae749ab59286e54ac93e6704d686438fbc782b137636e1d69c19bea94b451dcdba61b5d304e75c631e16a40677ef923f47cd5ce79c80882e84f63517292af9443ca82d701784d29c5479f41cef6bbac2a6bd9f07fbc5d3d54e07696c126f0fa367a253f2119919bd365726bea20997270e06123ac6cb58fba8baecce017ee523f0e5a1a731a77423f25e980a2e9bb459ea60c32e5d21f721a685ec4c56a8b1200da9957a853211e5c3e"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x412}}]}) clone3(&(0x7f0000005880)={0x14f824100, 0x0, &(0x7f0000000280), 0x0, {0x1f}, 0x0, 0x0, &(0x7f00000000c0)=""/1, 0x0}, 0x58) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 149.515485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.536373] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.142899] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.145724] misc raw-gadget: fail, usb_gadget_register_driver returned -16 VM DIAGNOSIS: 17:23:35 Registers: info registers vcpu 0 RAX=000000000000005b RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff82975135 RDI=ffffffff889c19e0 RBP=ffffffff889c19a0 RSP=ffff88804ae174a8 R8 =0000000000000000 R9 =ffffed10013c5046 R10=000000000000005b R11=0000000020747562 R12=000000000000005b R13=0000000000000010 R14=ffffffff889c19a0 R15=ffffffff82975120 RIP=ffffffff8297518d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000555594ee0400 00000000 00000000 GS =0000 ffff8880e5342000 00000000 00000000 LDT=0000 fffffe3d00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fffe338ce58 CR3=000000001e558000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000a60ce07b00000000cec3662e XMM01=000000000000000003515b82db34ca11 XMM02=0000000000000000333bebdfd0a6a21d XMM03=00000000000000000000000000000000 XMM04=ffffffff0000ff00000000ff00000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000001 RBX=0000000000000001 RCX=ffffffff84d1a2ce RDX=fffffbfff0b82d11 RSI=0000000000000004 RDI=ffffffff85c16880 RBP=ffffffff85c16880 RSP=ffff888014e07680 R8 =0000000000000000 R9 =fffffbfff0b82d10 R10=ffffffff85c16883 R11=ffffffff81b3ce69 R12=1ffff110029c0ed1 R13=0000000000000003 R14=fffffbfff0b82d10 R15=ffff888014e076b8 RIP=ffffffff84d1a460 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f18d85a38c0 00000000 00000000 GS =0000 ffff8880e5442000 00000000 00000000 LDT=0000 fffffe5300000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055ad87aa6b00 CR3=000000000e135000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=000000000000002f002f2e2e2f002e2e XMM01=0000000000000000696c61766e49002f XMM02=ffffffffffffff0f0e0d0c0b0a090807 XMM03=000000000000003100007f006c00303a XMM04=0000000300000000000055ad87a8f600 XMM05=000055ad87a8a6e0000055ad87aa1550 XMM06=000000000000000000000000ffffffff XMM07=00000000000000000000000000000000 XMM08=6e753c007325732575253a5d73255b00 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000