Warning: Permanently added '[localhost]:40876' (ECDSA) to the list of known hosts. 2026/01/13 08:34:10 fuzzer started 2026/01/13 08:34:11 dialing manager at localhost:38155 syzkaller login: [ 51.362012] cgroup: Unknown subsys name 'net' [ 51.431757] cgroup: Unknown subsys name 'cpuset' [ 51.445075] cgroup: Unknown subsys name 'rlimit' 2026/01/13 08:34:20 syscalls: 2214 2026/01/13 08:34:20 code coverage: enabled 2026/01/13 08:34:20 comparison tracing: enabled 2026/01/13 08:34:20 extra coverage: enabled 2026/01/13 08:34:20 setuid sandbox: enabled 2026/01/13 08:34:20 namespace sandbox: enabled 2026/01/13 08:34:20 Android sandbox: enabled 2026/01/13 08:34:20 fault injection: enabled 2026/01/13 08:34:20 leak checking: enabled 2026/01/13 08:34:20 net packet injection: enabled 2026/01/13 08:34:20 net device setup: enabled 2026/01/13 08:34:20 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2026/01/13 08:34:20 devlink PCI setup: PCI device 0000:00:10.0 is not available 2026/01/13 08:34:20 USB emulation: enabled 2026/01/13 08:34:20 hci packet injection: enabled 2026/01/13 08:34:20 wifi device emulation: enabled 2026/01/13 08:34:20 802.15.4 emulation: enabled 2026/01/13 08:34:20 fetching corpus: 0, signal 0/2000 (executing program) 2026/01/13 08:34:20 fetching corpus: 42, signal 29200/32559 (executing program) 2026/01/13 08:34:21 fetching corpus: 92, signal 37408/42179 (executing program) 2026/01/13 08:34:21 fetching corpus: 142, signal 45124/51122 (executing program) 2026/01/13 08:34:21 fetching corpus: 192, signal 50218/57458 (executing program) 2026/01/13 08:34:21 fetching corpus: 242, signal 59045/67162 (executing program) 2026/01/13 08:34:21 fetching corpus: 292, signal 65047/74103 (executing program) 2026/01/13 08:34:21 fetching corpus: 342, signal 70234/80109 (executing program) 2026/01/13 08:34:21 fetching corpus: 392, signal 74572/85236 (executing program) 2026/01/13 08:34:21 fetching corpus: 442, signal 77288/88833 (executing program) 2026/01/13 08:34:22 fetching corpus: 492, signal 81053/93288 (executing program) 2026/01/13 08:34:22 fetching corpus: 542, signal 83453/96489 (executing program) 2026/01/13 08:34:22 fetching corpus: 592, signal 86238/99976 (executing program) 2026/01/13 08:34:22 fetching corpus: 642, signal 88989/103358 (executing program) 2026/01/13 08:34:22 fetching corpus: 692, signal 92181/107069 (executing program) 2026/01/13 08:34:22 fetching corpus: 742, signal 95441/110732 (executing program) 2026/01/13 08:34:22 fetching corpus: 792, signal 97386/113255 (executing program) 2026/01/13 08:34:23 fetching corpus: 842, signal 99828/116175 (executing program) 2026/01/13 08:34:23 fetching corpus: 892, signal 101307/118250 (executing program) 2026/01/13 08:34:23 fetching corpus: 942, signal 103820/121113 (executing program) 2026/01/13 08:34:23 fetching corpus: 992, signal 105308/123146 (executing program) 2026/01/13 08:34:23 fetching corpus: 1042, signal 108075/126102 (executing program) 2026/01/13 08:34:23 fetching corpus: 1092, signal 110707/128833 (executing program) 2026/01/13 08:34:23 fetching corpus: 1142, signal 112438/130911 (executing program) 2026/01/13 08:34:23 fetching corpus: 1192, signal 113606/132505 (executing program) 2026/01/13 08:34:24 fetching corpus: 1242, signal 115250/134407 (executing program) 2026/01/13 08:34:24 fetching corpus: 1292, signal 116235/135860 (executing program) 2026/01/13 08:34:24 fetching corpus: 1342, signal 117734/137686 (executing program) 2026/01/13 08:34:24 fetching corpus: 1392, signal 119182/139387 (executing program) 2026/01/13 08:34:24 fetching corpus: 1442, signal 120780/141176 (executing program) 2026/01/13 08:34:24 fetching corpus: 1492, signal 121779/142508 (executing program) 2026/01/13 08:34:24 fetching corpus: 1542, signal 122761/143794 (executing program) 2026/01/13 08:34:24 fetching corpus: 1592, signal 123956/145234 (executing program) 2026/01/13 08:34:24 fetching corpus: 1642, signal 125039/146570 (executing program) 2026/01/13 08:34:25 fetching corpus: 1692, signal 126334/147959 (executing program) 2026/01/13 08:34:25 fetching corpus: 1742, signal 127263/149179 (executing program) 2026/01/13 08:34:25 fetching corpus: 1792, signal 127864/150158 (executing program) 2026/01/13 08:34:25 fetching corpus: 1842, signal 129020/151415 (executing program) 2026/01/13 08:34:25 fetching corpus: 1892, signal 129870/152458 (executing program) 2026/01/13 08:34:25 fetching corpus: 1942, signal 131116/153714 (executing program) 2026/01/13 08:34:25 fetching corpus: 1992, signal 132037/154800 (executing program) 2026/01/13 08:34:25 fetching corpus: 2042, signal 133273/156021 (executing program) 2026/01/13 08:34:26 fetching corpus: 2092, signal 133967/156898 (executing program) 2026/01/13 08:34:26 fetching corpus: 2142, signal 134780/157797 (executing program) 2026/01/13 08:34:26 fetching corpus: 2192, signal 136030/158944 (executing program) 2026/01/13 08:34:26 fetching corpus: 2242, signal 137600/160262 (executing program) 2026/01/13 08:34:26 fetching corpus: 2292, signal 138843/161378 (executing program) 2026/01/13 08:34:26 fetching corpus: 2342, signal 139943/162374 (executing program) 2026/01/13 08:34:26 fetching corpus: 2392, signal 140783/163224 (executing program) 2026/01/13 08:34:26 fetching corpus: 2442, signal 141268/163917 (executing program) 2026/01/13 08:34:27 fetching corpus: 2492, signal 142081/164728 (executing program) 2026/01/13 08:34:27 fetching corpus: 2542, signal 143252/165673 (executing program) 2026/01/13 08:34:27 fetching corpus: 2592, signal 144865/166758 (executing program) 2026/01/13 08:34:27 fetching corpus: 2642, signal 145847/167564 (executing program) 2026/01/13 08:34:27 fetching corpus: 2692, signal 146843/168389 (executing program) 2026/01/13 08:34:27 fetching corpus: 2742, signal 147634/169105 (executing program) 2026/01/13 08:34:27 fetching corpus: 2792, signal 148170/169684 (executing program) 2026/01/13 08:34:27 fetching corpus: 2842, signal 149115/170387 (executing program) 2026/01/13 08:34:28 fetching corpus: 2892, signal 149806/171013 (executing program) 2026/01/13 08:34:28 fetching corpus: 2942, signal 150928/171755 (executing program) 2026/01/13 08:34:28 fetching corpus: 2992, signal 151668/172334 (executing program) 2026/01/13 08:34:28 fetching corpus: 3042, signal 152281/172840 (executing program) 2026/01/13 08:34:28 fetching corpus: 3092, signal 154302/173781 (executing program) 2026/01/13 08:34:28 fetching corpus: 3142, signal 155139/174335 (executing program) 2026/01/13 08:34:28 fetching corpus: 3192, signal 155635/174803 (executing program) 2026/01/13 08:34:29 fetching corpus: 3242, signal 156334/175293 (executing program) 2026/01/13 08:34:29 fetching corpus: 3292, signal 157198/175812 (executing program) 2026/01/13 08:34:29 fetching corpus: 3342, signal 157794/176236 (executing program) 2026/01/13 08:34:29 fetching corpus: 3392, signal 158405/176673 (executing program) 2026/01/13 08:34:29 fetching corpus: 3442, signal 159279/177124 (executing program) 2026/01/13 08:34:29 fetching corpus: 3492, signal 159810/177483 (executing program) 2026/01/13 08:34:29 fetching corpus: 3542, signal 160328/177828 (executing program) 2026/01/13 08:34:30 fetching corpus: 3592, signal 160992/178236 (executing program) 2026/01/13 08:34:30 fetching corpus: 3642, signal 161674/178610 (executing program) 2026/01/13 08:34:30 fetching corpus: 3692, signal 162089/178914 (executing program) 2026/01/13 08:34:30 fetching corpus: 3742, signal 163263/179331 (executing program) 2026/01/13 08:34:30 fetching corpus: 3792, signal 163994/179646 (executing program) 2026/01/13 08:34:30 fetching corpus: 3842, signal 164477/179918 (executing program) 2026/01/13 08:34:30 fetching corpus: 3892, signal 165056/180183 (executing program) 2026/01/13 08:34:30 fetching corpus: 3942, signal 165565/180453 (executing program) 2026/01/13 08:34:31 fetching corpus: 3992, signal 165900/180657 (executing program) 2026/01/13 08:34:31 fetching corpus: 4042, signal 166542/180913 (executing program) 2026/01/13 08:34:31 fetching corpus: 4092, signal 167057/181143 (executing program) 2026/01/13 08:34:31 fetching corpus: 4142, signal 167572/181340 (executing program) 2026/01/13 08:34:31 fetching corpus: 4192, signal 168031/181541 (executing program) 2026/01/13 08:34:31 fetching corpus: 4242, signal 168692/181753 (executing program) 2026/01/13 08:34:31 fetching corpus: 4292, signal 169200/181921 (executing program) 2026/01/13 08:34:31 fetching corpus: 4342, signal 169642/182083 (executing program) 2026/01/13 08:34:32 fetching corpus: 4392, signal 170449/182239 (executing program) 2026/01/13 08:34:32 fetching corpus: 4442, signal 170829/182379 (executing program) 2026/01/13 08:34:32 fetching corpus: 4492, signal 171516/182459 (executing program) 2026/01/13 08:34:32 fetching corpus: 4542, signal 172065/182461 (executing program) 2026/01/13 08:34:32 fetching corpus: 4592, signal 172555/182464 (executing program) 2026/01/13 08:34:32 fetching corpus: 4642, signal 173150/182477 (executing program) 2026/01/13 08:34:32 fetching corpus: 4692, signal 173618/182477 (executing program) 2026/01/13 08:34:32 fetching corpus: 4742, signal 174180/182482 (executing program) 2026/01/13 08:34:33 fetching corpus: 4792, signal 174549/182484 (executing program) 2026/01/13 08:34:33 fetching corpus: 4842, signal 175314/182837 (executing program) 2026/01/13 08:34:33 fetching corpus: 4892, signal 175987/182837 (executing program) 2026/01/13 08:34:33 fetching corpus: 4942, signal 176554/182872 (executing program) 2026/01/13 08:34:33 fetching corpus: 4992, signal 176908/182872 (executing program) 2026/01/13 08:34:33 fetching corpus: 5042, signal 177715/182872 (executing program) 2026/01/13 08:34:33 fetching corpus: 5092, signal 178190/182873 (executing program) 2026/01/13 08:34:33 fetching corpus: 5142, signal 178694/182873 (executing program) 2026/01/13 08:34:34 fetching corpus: 5192, signal 179153/182874 (executing program) 2026/01/13 08:34:34 fetching corpus: 5242, signal 179698/182874 (executing program) 2026/01/13 08:34:34 fetching corpus: 5292, signal 180074/182874 (executing program) 2026/01/13 08:34:34 fetching corpus: 5342, signal 180568/182874 (executing program) 2026/01/13 08:34:34 fetching corpus: 5392, signal 181015/182874 (executing program) 2026/01/13 08:34:34 fetching corpus: 5442, signal 181441/182874 (executing program) 2026/01/13 08:34:34 fetching corpus: 5448, signal 181509/182874 (executing program) 2026/01/13 08:34:34 fetching corpus: 5448, signal 181509/182874 (executing program) 2026/01/13 08:34:36 starting 8 fuzzer processes 08:34:36 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000280)={0x14, r1, 0x1, 0x0, 0x0, {0x1a}}, 0x14}}, 0x0) 08:34:37 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x1c, r1, 0x5, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 08:34:37 executing program 2: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$PTP_PEROUT_REQUEST2(r0, 0x40383d0c, &(0x7f0000000280)={{}, {0x4}, 0x0, 0x7}) 08:34:37 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448cb, 0x0) [ 77.055503] audit: type=1400 audit(1768293277.101:7): avc: denied { execmem } for pid=273 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 08:34:37 executing program 4: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x145802, 0x0) write(r0, 0x0, 0x0) 08:34:37 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)={0x14, 0x2e, 0xee01, 0x0, 0x0, "", [@generic="12"]}, 0x14}], 0x1}, 0x0) 08:34:37 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffff81202ff0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 08:34:37 executing program 7: r0 = semget(0x0, 0x3, 0x284) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000000)=""/131) semctl$GETZCNT(r0, 0x3, 0xf, &(0x7f00000000c0)=""/187) semop(r0, &(0x7f0000000180), 0x0) semop(r0, &(0x7f00000001c0)=[{0x0, 0x2, 0x1000}, {0x2, 0xd4, 0x1800}], 0x2) r1 = semget(0x3, 0x1, 0x30) semctl$GETNCNT(r1, 0x3, 0xe, &(0x7f0000019440)=""/102384) r2 = semget(0x2, 0x1, 0x402) semop(r2, &(0x7f0000000180)=[{0x4, 0x6}, {0x0, 0x4}, {0x1, 0x3633}, {0x4, 0x5, 0x1800}, {0x1, 0xf892, 0x800}, {0x1}, {0x3, 0x449, 0x3800}, {0x4, 0x58a4, 0x1800}, {0x2, 0x1527, 0x1000}, {0x2, 0x8, 0x1800}], 0xa) semctl$SETALL(r0, 0x0, 0x11, &(0x7f00000000c0)=[0xff, 0x862a, 0x9, 0x4, 0x0]) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000380), 0x1, 0x0) splice(r4, 0x0, r3, &(0x7f0000000400), 0x5246, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000380), 0x1, 0x0) splice(r6, 0x0, r5, &(0x7f0000000400), 0x5246, 0x0) sendmsg$SOCK_DESTROY(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x2b4}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000040) mlockall(0x0) semctl$GETNCNT(0x0, 0x0, 0xe, &(0x7f0000000200)=""/1) semctl$IPC_RMID(0x0, 0x0, 0x0) [ 78.263819] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 78.266012] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 78.268809] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 78.270428] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 78.272371] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 78.274214] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 78.278046] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 78.279941] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 78.283494] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 78.285435] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 78.322357] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 78.325261] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 78.329832] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 78.334945] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 78.337648] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 78.463609] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 78.468558] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 78.479165] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 78.483646] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 78.486044] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 78.487474] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 78.490174] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 78.492783] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 78.501638] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 78.513094] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 78.513604] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 78.518883] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 78.521672] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 78.525389] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 78.528160] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 78.536808] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 78.541172] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 78.550548] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 78.556392] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 78.568920] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 78.591630] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 78.624851] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 78.626749] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 78.636366] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 78.638450] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 80.352451] Bluetooth: hci2: command tx timeout [ 80.353313] Bluetooth: hci0: command tx timeout [ 80.354505] Bluetooth: hci1: command tx timeout [ 80.543374] Bluetooth: hci4: command tx timeout [ 80.607366] Bluetooth: hci5: command tx timeout [ 80.670866] Bluetooth: hci3: command tx timeout [ 80.671778] Bluetooth: hci6: command tx timeout [ 80.800042] Bluetooth: hci7: command tx timeout [ 82.398968] Bluetooth: hci1: command tx timeout [ 82.399614] Bluetooth: hci0: command tx timeout [ 82.400176] Bluetooth: hci2: command tx timeout [ 82.590325] Bluetooth: hci4: command tx timeout [ 82.654431] Bluetooth: hci5: command tx timeout [ 82.718391] Bluetooth: hci3: command tx timeout [ 82.718819] Bluetooth: hci6: command tx timeout [ 82.846335] Bluetooth: hci7: command tx timeout [ 84.446364] Bluetooth: hci0: command tx timeout [ 84.446820] Bluetooth: hci1: command tx timeout [ 84.447193] Bluetooth: hci2: command tx timeout [ 84.638329] Bluetooth: hci4: command tx timeout [ 84.702341] Bluetooth: hci5: command tx timeout [ 84.766392] Bluetooth: hci6: command tx timeout [ 84.766436] Bluetooth: hci3: command tx timeout [ 84.895293] Bluetooth: hci7: command tx timeout [ 86.494382] Bluetooth: hci2: command tx timeout [ 86.494539] Bluetooth: hci1: command tx timeout [ 86.494846] Bluetooth: hci0: command tx timeout [ 86.686377] Bluetooth: hci4: command tx timeout [ 86.750416] Bluetooth: hci5: command tx timeout [ 86.814438] Bluetooth: hci3: command tx timeout [ 86.814461] Bluetooth: hci6: command tx timeout [ 86.942386] Bluetooth: hci7: command tx timeout [ 115.004091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.004728] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.129555] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.130182] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.305004] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.306426] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.414457] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.415068] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.468589] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.469204] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.588384] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.588986] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 08:35:15 executing program 7: r0 = semget(0x0, 0x3, 0x284) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000000)=""/131) semctl$GETZCNT(r0, 0x3, 0xf, &(0x7f00000000c0)=""/187) semop(r0, &(0x7f0000000180), 0x0) semop(r0, &(0x7f00000001c0)=[{0x0, 0x2, 0x1000}, {0x2, 0xd4, 0x1800}], 0x2) r1 = semget(0x3, 0x1, 0x30) semctl$GETNCNT(r1, 0x3, 0xe, &(0x7f0000019440)=""/102384) r2 = semget(0x2, 0x1, 0x402) semop(r2, &(0x7f0000000180)=[{0x4, 0x6}, {0x0, 0x4}, {0x1, 0x3633}, {0x4, 0x5, 0x1800}, {0x1, 0xf892, 0x800}, {0x1}, {0x3, 0x449, 0x3800}, {0x4, 0x58a4, 0x1800}, {0x2, 0x1527, 0x1000}, {0x2, 0x8, 0x1800}], 0xa) semctl$SETALL(r0, 0x0, 0x11, &(0x7f00000000c0)=[0xff, 0x862a, 0x9, 0x4, 0x0]) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000380), 0x1, 0x0) splice(r4, 0x0, r3, &(0x7f0000000400), 0x5246, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000380), 0x1, 0x0) splice(r6, 0x0, r5, &(0x7f0000000400), 0x5246, 0x0) sendmsg$SOCK_DESTROY(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x2b4}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000040) mlockall(0x0) semctl$GETNCNT(0x0, 0x0, 0xe, &(0x7f0000000200)=""/1) semctl$IPC_RMID(0x0, 0x0, 0x0) 08:35:15 executing program 7: r0 = semget(0x0, 0x3, 0x284) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000000)=""/131) semctl$GETZCNT(r0, 0x3, 0xf, &(0x7f00000000c0)=""/187) semop(r0, &(0x7f0000000180), 0x0) semop(r0, &(0x7f00000001c0)=[{0x0, 0x2, 0x1000}, {0x2, 0xd4, 0x1800}], 0x2) r1 = semget(0x3, 0x1, 0x30) semctl$GETNCNT(r1, 0x3, 0xe, &(0x7f0000019440)=""/102384) r2 = semget(0x2, 0x1, 0x402) semop(r2, &(0x7f0000000180)=[{0x4, 0x6}, {0x0, 0x4}, {0x1, 0x3633}, {0x4, 0x5, 0x1800}, {0x1, 0xf892, 0x800}, {0x1}, {0x3, 0x449, 0x3800}, {0x4, 0x58a4, 0x1800}, {0x2, 0x1527, 0x1000}, {0x2, 0x8, 0x1800}], 0xa) semctl$SETALL(r0, 0x0, 0x11, &(0x7f00000000c0)=[0xff, 0x862a, 0x9, 0x4, 0x0]) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000380), 0x1, 0x0) splice(r4, 0x0, r3, &(0x7f0000000400), 0x5246, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000380), 0x1, 0x0) splice(r6, 0x0, r5, &(0x7f0000000400), 0x5246, 0x0) sendmsg$SOCK_DESTROY(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x2b4}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000040) mlockall(0x0) semctl$GETNCNT(0x0, 0x0, 0xe, &(0x7f0000000200)=""/1) semctl$IPC_RMID(0x0, 0x0, 0x0) [ 115.790544] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.791733] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.862679] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.863325] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 08:35:15 executing program 7: r0 = semget(0x0, 0x3, 0x284) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000000)=""/131) semctl$GETZCNT(r0, 0x3, 0xf, &(0x7f00000000c0)=""/187) semop(r0, &(0x7f0000000180), 0x0) semop(r0, &(0x7f00000001c0)=[{0x0, 0x2, 0x1000}, {0x2, 0xd4, 0x1800}], 0x2) r1 = semget(0x3, 0x1, 0x30) semctl$GETNCNT(r1, 0x3, 0xe, &(0x7f0000019440)=""/102384) r2 = semget(0x2, 0x1, 0x402) semop(r2, &(0x7f0000000180)=[{0x4, 0x6}, {0x0, 0x4}, {0x1, 0x3633}, {0x4, 0x5, 0x1800}, {0x1, 0xf892, 0x800}, {0x1}, {0x3, 0x449, 0x3800}, {0x4, 0x58a4, 0x1800}, {0x2, 0x1527, 0x1000}, {0x2, 0x8, 0x1800}], 0xa) semctl$SETALL(r0, 0x0, 0x11, &(0x7f00000000c0)=[0xff, 0x862a, 0x9, 0x4, 0x0]) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000380), 0x1, 0x0) splice(r4, 0x0, r3, &(0x7f0000000400), 0x5246, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000380), 0x1, 0x0) splice(r6, 0x0, r5, &(0x7f0000000400), 0x5246, 0x0) sendmsg$SOCK_DESTROY(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x2b4}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000040) mlockall(0x0) semctl$GETNCNT(0x0, 0x0, 0xe, &(0x7f0000000200)=""/1) semctl$IPC_RMID(0x0, 0x0, 0x0) 08:35:16 executing program 2: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$PTP_PEROUT_REQUEST2(r0, 0x40383d0c, &(0x7f0000000280)={{}, {0x4}, 0x0, 0x7}) 08:35:16 executing program 7: r0 = semget(0x0, 0x3, 0x284) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000000)=""/131) semctl$GETZCNT(r0, 0x3, 0xf, &(0x7f00000000c0)=""/187) semop(r0, &(0x7f0000000180), 0x0) semop(r0, &(0x7f00000001c0)=[{0x0, 0x2, 0x1000}, {0x2, 0xd4, 0x1800}], 0x2) r1 = semget(0x3, 0x1, 0x30) semctl$GETNCNT(r1, 0x3, 0xe, &(0x7f0000019440)=""/102384) r2 = semget(0x2, 0x1, 0x402) semop(r2, &(0x7f0000000180)=[{0x4, 0x6}, {0x0, 0x4}, {0x1, 0x3633}, {0x4, 0x5, 0x1800}, {0x1, 0xf892, 0x800}, {0x1}, {0x3, 0x449, 0x3800}, {0x4, 0x58a4, 0x1800}, {0x2, 0x1527, 0x1000}, {0x2, 0x8, 0x1800}], 0xa) semctl$SETALL(r0, 0x0, 0x11, &(0x7f00000000c0)=[0xff, 0x862a, 0x9, 0x4, 0x0]) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000380), 0x1, 0x0) splice(r4, 0x0, r3, &(0x7f0000000400), 0x5246, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000380), 0x1, 0x0) splice(r6, 0x0, r5, &(0x7f0000000400), 0x5246, 0x0) sendmsg$SOCK_DESTROY(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x2b4}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000040) mlockall(0x0) semctl$GETNCNT(0x0, 0x0, 0xe, &(0x7f0000000200)=""/1) semctl$IPC_RMID(0x0, 0x0, 0x0) 08:35:16 executing program 2: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$PTP_PEROUT_REQUEST2(r0, 0x40383d0c, &(0x7f0000000280)={{}, {0x4}, 0x0, 0x7}) [ 116.014252] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.014866] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 08:35:16 executing program 7: r0 = semget(0x0, 0x3, 0x284) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000000)=""/131) semctl$GETZCNT(r0, 0x3, 0xf, &(0x7f00000000c0)=""/187) semop(r0, &(0x7f0000000180), 0x0) semop(r0, &(0x7f00000001c0)=[{0x0, 0x2, 0x1000}, {0x2, 0xd4, 0x1800}], 0x2) r1 = semget(0x3, 0x1, 0x30) semctl$GETNCNT(r1, 0x3, 0xe, &(0x7f0000019440)=""/102384) r2 = semget(0x2, 0x1, 0x402) semop(r2, &(0x7f0000000180)=[{0x4, 0x6}, {0x0, 0x4}, {0x1, 0x3633}, {0x4, 0x5, 0x1800}, {0x1, 0xf892, 0x800}, {0x1}, {0x3, 0x449, 0x3800}, {0x4, 0x58a4, 0x1800}, {0x2, 0x1527, 0x1000}, {0x2, 0x8, 0x1800}], 0xa) semctl$SETALL(r0, 0x0, 0x11, &(0x7f00000000c0)=[0xff, 0x862a, 0x9, 0x4, 0x0]) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000380), 0x1, 0x0) splice(r4, 0x0, r3, &(0x7f0000000400), 0x5246, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000380), 0x1, 0x0) splice(r6, 0x0, r5, &(0x7f0000000400), 0x5246, 0x0) sendmsg$SOCK_DESTROY(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x2b4}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000040) mlockall(0x0) semctl$GETNCNT(0x0, 0x0, 0xe, &(0x7f0000000200)=""/1) semctl$IPC_RMID(0x0, 0x0, 0x0) 08:35:16 executing program 2: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$PTP_PEROUT_REQUEST2(r0, 0x40383d0c, &(0x7f0000000280)={{}, {0x4}, 0x0, 0x7}) [ 116.174696] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.179454] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.183458] audit: type=1400 audit(1768293316.225:8): avc: denied { open } for pid=3892 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 116.201695] audit: type=1400 audit(1768293316.235:9): avc: denied { kernel } for pid=3892 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 116.202884] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.205453] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.329939] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.331190] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.384614] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.387802] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.492996] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.494194] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.524863] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.525559] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.544462] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.545037] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.527459] Bluetooth: hci0: Opcode 0x0c03 failed: -4 08:35:17 executing program 7: r0 = semget(0x0, 0x3, 0x284) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000000)=""/131) semctl$GETZCNT(r0, 0x3, 0xf, &(0x7f00000000c0)=""/187) semop(r0, &(0x7f0000000180), 0x0) semop(r0, &(0x7f00000001c0)=[{0x0, 0x2, 0x1000}, {0x2, 0xd4, 0x1800}], 0x2) r1 = semget(0x3, 0x1, 0x30) semctl$GETNCNT(r1, 0x3, 0xe, &(0x7f0000019440)=""/102384) r2 = semget(0x2, 0x1, 0x402) semop(r2, &(0x7f0000000180)=[{0x4, 0x6}, {0x0, 0x4}, {0x1, 0x3633}, {0x4, 0x5, 0x1800}, {0x1, 0xf892, 0x800}, {0x1}, {0x3, 0x449, 0x3800}, {0x4, 0x58a4, 0x1800}, {0x2, 0x1527, 0x1000}, {0x2, 0x8, 0x1800}], 0xa) semctl$SETALL(r0, 0x0, 0x11, &(0x7f00000000c0)=[0xff, 0x862a, 0x9, 0x4, 0x0]) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000380), 0x1, 0x0) splice(r4, 0x0, r3, &(0x7f0000000400), 0x5246, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000380), 0x1, 0x0) splice(r6, 0x0, r5, &(0x7f0000000400), 0x5246, 0x0) sendmsg$SOCK_DESTROY(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x2b4}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000040) mlockall(0x0) semctl$GETNCNT(0x0, 0x0, 0xe, &(0x7f0000000200)=""/1) semctl$IPC_RMID(0x0, 0x0, 0x0) 08:35:17 executing program 2: r0 = semget(0x0, 0x3, 0x284) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000000)=""/131) semctl$GETZCNT(r0, 0x3, 0xf, &(0x7f00000000c0)=""/187) semop(r0, &(0x7f0000000180), 0x0) semop(r0, &(0x7f00000001c0)=[{0x0, 0x2, 0x1000}, {0x2, 0xd4, 0x1800}], 0x2) r1 = semget(0x3, 0x1, 0x30) semctl$GETNCNT(r1, 0x3, 0xe, &(0x7f0000019440)=""/102384) r2 = semget(0x2, 0x1, 0x402) semop(r2, &(0x7f0000000180)=[{0x4, 0x6}, {0x0, 0x4}, {0x1, 0x3633}, {0x4, 0x5, 0x1800}, {0x1, 0xf892, 0x800}, {0x1}, {0x3, 0x449, 0x3800}, {0x4, 0x58a4, 0x1800}, {0x2, 0x1527, 0x1000}, {0x2, 0x8, 0x1800}], 0xa) semctl$SETALL(r0, 0x0, 0x11, &(0x7f00000000c0)=[0xff, 0x862a, 0x9, 0x4, 0x0]) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000380), 0x1, 0x0) splice(r4, 0x0, r3, &(0x7f0000000400), 0x5246, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000380), 0x1, 0x0) splice(r6, 0x0, r5, &(0x7f0000000400), 0x5246, 0x0) sendmsg$SOCK_DESTROY(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x2b4}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000040) mlockall(0x0) semctl$GETNCNT(0x0, 0x0, 0xe, &(0x7f0000000200)=""/1) semctl$IPC_RMID(0x0, 0x0, 0x0) 08:35:17 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000280)={0x14, r1, 0x1, 0x0, 0x0, {0x1a}}, 0x14}}, 0x0) 08:35:17 executing program 4: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x145802, 0x0) write(r0, 0x0, 0x0) 08:35:17 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffff81202ff0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 08:35:17 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x1c, r1, 0x5, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 08:35:17 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448cb, 0x0) 08:35:17 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)={0x14, 0x2e, 0xee01, 0x0, 0x0, "", [@generic="12"]}, 0x14}], 0x1}, 0x0) 08:35:17 executing program 2: r0 = semget(0x0, 0x3, 0x284) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000000)=""/131) semctl$GETZCNT(r0, 0x3, 0xf, &(0x7f00000000c0)=""/187) semop(r0, &(0x7f0000000180), 0x0) semop(r0, &(0x7f00000001c0)=[{0x0, 0x2, 0x1000}, {0x2, 0xd4, 0x1800}], 0x2) r1 = semget(0x3, 0x1, 0x30) semctl$GETNCNT(r1, 0x3, 0xe, &(0x7f0000019440)=""/102384) r2 = semget(0x2, 0x1, 0x402) semop(r2, &(0x7f0000000180)=[{0x4, 0x6}, {0x0, 0x4}, {0x1, 0x3633}, {0x4, 0x5, 0x1800}, {0x1, 0xf892, 0x800}, {0x1}, {0x3, 0x449, 0x3800}, {0x4, 0x58a4, 0x1800}, {0x2, 0x1527, 0x1000}, {0x2, 0x8, 0x1800}], 0xa) semctl$SETALL(r0, 0x0, 0x11, &(0x7f00000000c0)=[0xff, 0x862a, 0x9, 0x4, 0x0]) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000380), 0x1, 0x0) splice(r4, 0x0, r3, &(0x7f0000000400), 0x5246, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000380), 0x1, 0x0) splice(r6, 0x0, r5, &(0x7f0000000400), 0x5246, 0x0) sendmsg$SOCK_DESTROY(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x2b4}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000040) mlockall(0x0) semctl$GETNCNT(0x0, 0x0, 0xe, &(0x7f0000000200)=""/1) semctl$IPC_RMID(0x0, 0x0, 0x0) [ 118.514747] Bluetooth: hci0: Opcode 0x0c03 failed: -4 08:35:18 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)={0x14, 0x2e, 0xee01, 0x0, 0x0, "", [@generic="12"]}, 0x14}], 0x1}, 0x0) 08:35:18 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448cb, 0x0) 08:35:18 executing program 2: r0 = semget(0x0, 0x3, 0x284) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000000)=""/131) semctl$GETZCNT(r0, 0x3, 0xf, &(0x7f00000000c0)=""/187) semop(r0, &(0x7f0000000180), 0x0) semop(r0, &(0x7f00000001c0)=[{0x0, 0x2, 0x1000}, {0x2, 0xd4, 0x1800}], 0x2) r1 = semget(0x3, 0x1, 0x30) semctl$GETNCNT(r1, 0x3, 0xe, &(0x7f0000019440)=""/102384) r2 = semget(0x2, 0x1, 0x402) semop(r2, &(0x7f0000000180)=[{0x4, 0x6}, {0x0, 0x4}, {0x1, 0x3633}, {0x4, 0x5, 0x1800}, {0x1, 0xf892, 0x800}, {0x1}, {0x3, 0x449, 0x3800}, {0x4, 0x58a4, 0x1800}, {0x2, 0x1527, 0x1000}, {0x2, 0x8, 0x1800}], 0xa) semctl$SETALL(r0, 0x0, 0x11, &(0x7f00000000c0)=[0xff, 0x862a, 0x9, 0x4, 0x0]) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000380), 0x1, 0x0) splice(r4, 0x0, r3, &(0x7f0000000400), 0x5246, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000380), 0x1, 0x0) splice(r6, 0x0, r5, &(0x7f0000000400), 0x5246, 0x0) sendmsg$SOCK_DESTROY(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x2b4}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000040) mlockall(0x0) semctl$GETNCNT(0x0, 0x0, 0xe, &(0x7f0000000200)=""/1) semctl$IPC_RMID(0x0, 0x0, 0x0) 08:35:18 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x1c, r1, 0x5, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 08:35:18 executing program 4: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x145802, 0x0) write(r0, 0x0, 0x0) 08:35:18 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000280)={0x14, r1, 0x1, 0x0, 0x0, {0x1a}}, 0x14}}, 0x0) 08:35:18 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffff81202ff0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 08:35:18 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffff81202ff0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 08:35:18 executing program 4: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x145802, 0x0) write(r0, 0x0, 0x0) 08:35:18 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000280)={0x14, r1, 0x1, 0x0, 0x0, {0x1a}}, 0x14}}, 0x0) 08:35:18 executing program 2: r0 = semget(0x0, 0x3, 0x284) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000000)=""/131) semctl$GETZCNT(r0, 0x3, 0xf, &(0x7f00000000c0)=""/187) semop(r0, &(0x7f0000000180), 0x0) semop(r0, &(0x7f00000001c0)=[{0x0, 0x2, 0x1000}, {0x2, 0xd4, 0x1800}], 0x2) r1 = semget(0x3, 0x1, 0x30) semctl$GETNCNT(r1, 0x3, 0xe, &(0x7f0000019440)=""/102384) r2 = semget(0x2, 0x1, 0x402) semop(r2, &(0x7f0000000180)=[{0x4, 0x6}, {0x0, 0x4}, {0x1, 0x3633}, {0x4, 0x5, 0x1800}, {0x1, 0xf892, 0x800}, {0x1}, {0x3, 0x449, 0x3800}, {0x4, 0x58a4, 0x1800}, {0x2, 0x1527, 0x1000}, {0x2, 0x8, 0x1800}], 0xa) semctl$SETALL(r0, 0x0, 0x11, &(0x7f00000000c0)=[0xff, 0x862a, 0x9, 0x4, 0x0]) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000380), 0x1, 0x0) splice(r4, 0x0, r3, &(0x7f0000000400), 0x5246, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000380), 0x1, 0x0) splice(r6, 0x0, r5, &(0x7f0000000400), 0x5246, 0x0) sendmsg$SOCK_DESTROY(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x2b4}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000040) mlockall(0x0) semctl$GETNCNT(0x0, 0x0, 0xe, &(0x7f0000000200)=""/1) semctl$IPC_RMID(0x0, 0x0, 0x0) [ 118.739683] [ 118.740086] ===================================== [ 118.740990] WARNING: bad unlock balance detected! [ 118.741910] 6.19.0-rc5-next-20260113 #1 Not tainted [ 118.742823] ------------------------------------- [ 118.748246] syz-executor.4/3958 is trying to release lock (rcu_read_lock) at: [ 118.749342] [] __wait_on_freeing_inode+0x105/0x350 [ 118.750286] but there are no more locks to release! [ 118.751010] [ 118.751010] other info that might help us debug this: [ 118.751961] 4 locks held by syz-executor.4/3958: [ 118.752656] #0: ffff88800f8b03f8 (sb_writers#3){.+.+}-{0:0}, at: filename_create+0xf7/0x400 [ 118.753960] #1: ffff88804c0a59a8 (&type->i_mutex_dir_key#3/1){+.+.}-{4:4}, at: filename_create+0x1b1/0x400 [ 118.755437] #2: ffff88800f8b4950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xe32/0x12d0 [ 118.756826] #3: ffffffff85c16898 (inode_hash_lock){+.+.}-{3:3}, at: insert_inode_locked+0xf9/0x890 [ 118.758186] [ 118.758186] stack backtrace: [ 118.758849] CPU: 1 UID: 0 PID: 3958 Comm: syz-executor.4 Not tainted 6.19.0-rc5-next-20260113 #1 PREEMPT(lazy) [ 118.758876] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 118.758888] Call Trace: [ 118.758896] [ 118.758904] dump_stack_lvl+0xca/0x120 [ 118.758949] ? __wait_on_freeing_inode+0x105/0x350 [ 118.758977] print_unlock_imbalance_bug+0x118/0x130 [ 118.759004] ? __wait_on_freeing_inode+0x105/0x350 [ 118.759032] lock_release+0x1ee/0x270 [ 118.759062] __wait_on_freeing_inode+0x10a/0x350 [ 118.759091] ? __pfx___wait_on_freeing_inode+0x10/0x10 [ 118.759123] ? __pfx_var_wake_function+0x10/0x10 [ 118.759158] ? lock_is_held_type+0x9e/0x120 [ 118.759182] insert_inode_locked+0x25f/0x890 [ 118.759218] __ext4_new_inode+0x223d/0x4cd0 [ 118.759257] ? __pfx___ext4_new_inode+0x10/0x10 [ 118.759297] ? __pfx___dquot_initialize+0x10/0x10 [ 118.759342] ? __pfx_avc_has_perm+0x10/0x10 [ 118.759375] ext4_symlink+0x406/0xb40 [ 118.759417] ? __pfx_ext4_symlink+0x10/0x10 [ 118.759449] ? security_inode_permission+0x72/0xe0 [ 118.759477] vfs_symlink+0x44b/0x840 [ 118.759512] do_symlinkat+0x153/0x440 [ 118.759540] ? __pfx_do_symlinkat+0x10/0x10 [ 118.759566] ? strncpy_from_user+0x21b/0x2f0 [ 118.759603] __x64_sys_symlink+0x79/0xa0 [ 118.759630] do_syscall_64+0xbf/0x420 [ 118.759655] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.759677] RIP: 0033:0x7fdff3f58427 [ 118.759693] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 58 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 118.759714] RSP: 002b:00007ffc4a399df8 EFLAGS: 00000202 ORIG_RAX: 0000000000000058 [ 118.759734] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fdff3f58427 [ 118.759748] RDX: 00007ffc4a399ed3 RSI: 00007fdff3fb3022 RDI: 00007ffc4a399ec0 [ 118.759761] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007ffc4a399c90 [ 118.759773] R10: 00007ffc4a399b47 R11: 0000000000000202 R12: 0000000000000001 [ 118.759786] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffc4a399ec0 [ 118.759812] [ 118.788071] ------------[ cut here ]------------ [ 118.788865] WARNING: kernel/rcu/tree_plugin.h:443 at __rcu_read_unlock+0x25f/0x5c0, CPU#1: syz-executor.4/3958 [ 118.790555] Modules linked in: [ 118.791093] CPU: 1 UID: 0 PID: 3958 Comm: syz-executor.4 Not tainted 6.19.0-rc5-next-20260113 #1 PREEMPT(lazy) [ 118.792653] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 118.793957] RIP: 0010:__rcu_read_unlock+0x25f/0x5c0 [ 118.794897] Code: f2 02 00 00 c7 43 58 01 00 00 00 bf 09 00 00 00 e8 a6 bb de ff 4d 85 f6 0f 84 73 fe ff ff e8 38 89 20 00 fb e9 68 fe ff ff 90 <0f> 0b 90 5b 5d 41 5c 41 5d 41 5e e9 61 f9 73 03 e8 0c 88 56 00 e9 [ 118.797665] RSP: 0018:ffff88804ef9f9a0 EFLAGS: 00010286 [ 118.798543] RAX: 00000000ffffffff RBX: ffff8880178d3700 RCX: ffffffff815664c7 [ 118.799688] RDX: 0000000000000000 RSI: ffffffff815664d0 RDI: ffff8880178d3afc [ 118.800836] RBP: ffff8880178d3700 R08: 0000000000000000 R09: fffffbfff0ba6ff4 [ 118.801997] R10: 0000000000000000 R11: 0000000000000001 R12: ffff8880178d3700 [ 118.803138] R13: 0000000000000001 R14: ffffffff85c110c0 R15: ffff88804c091fb0 [ 118.804342] FS: 00005555644f2400(0000) GS:ffff8880e5442000(0000) knlGS:0000000000000000 [ 118.805640] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 118.806598] CR2: 00007fdff3fd8544 CR3: 000000004cea8000 CR4: 0000000000350ef0 [ 118.807744] Call Trace: [ 118.808193] [ 118.809509] __wait_on_freeing_inode+0x10f/0x350 [ 118.810788] ? __pfx___wait_on_freeing_inode+0x10/0x10 [ 118.812811] ? __pfx_var_wake_function+0x10/0x10 [ 118.820728] ? lock_is_held_type+0x9e/0x120 [ 118.822785] insert_inode_locked+0x25f/0x890 [ 118.825767] __ext4_new_inode+0x223d/0x4cd0 [ 118.830184] ? __pfx___ext4_new_inode+0x10/0x10 [ 118.832510] ? __pfx___dquot_initialize+0x10/0x10 [ 118.833907] ? __pfx_avc_has_perm+0x10/0x10 [ 118.837143] ext4_symlink+0x406/0xb40 [ 118.841250] ? __pfx_ext4_symlink+0x10/0x10 [ 118.843136] ? security_inode_permission+0x72/0xe0 [ 118.846128] vfs_symlink+0x44b/0x840 [ 118.848548] do_symlinkat+0x153/0x440 [ 118.850672] ? __pfx_do_symlinkat+0x10/0x10 [ 118.851996] ? strncpy_from_user+0x21b/0x2f0 [ 118.855500] __x64_sys_symlink+0x79/0xa0 [ 118.856825] do_syscall_64+0xbf/0x420 [ 118.858370] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.859386] RIP: 0033:0x7fdff3f58427 [ 118.860056] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 58 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 118.862811] RSP: 002b:00007ffc4a399df8 EFLAGS: 00000202 ORIG_RAX: 0000000000000058 [ 118.864009] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fdff3f58427 [ 118.865130] RDX: 00007ffc4a399ed3 RSI: 00007fdff3fb3022 RDI: 00007ffc4a399ec0 [ 118.866336] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007ffc4a399c90 [ 118.867484] R10: 00007ffc4a399b47 R11: 0000000000000202 R12: 0000000000000001 [ 118.868610] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffc4a399ec0 [ 118.873399] [ 118.873766] irq event stamp: 321 [ 118.874349] hardirqs last enabled at (321): [] irqentry_exit+0x17b/0x650 [ 118.875765] hardirqs last disabled at (320): [] sysvec_apic_timer_interrupt+0xf/0x80 [ 118.877405] softirqs last enabled at (314): [] kernel_fpu_end+0x59/0x70 [ 118.878888] softirqs last disabled at (312): [] kernel_fpu_begin_mask+0x1bb/0x300 [ 118.880408] ---[ end trace 0000000000000000 ]--- 08:35:18 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffff81202ff0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 08:35:19 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x1c, r1, 0x5, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 08:35:19 executing program 2: r0 = semget(0x0, 0x3, 0x284) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000000)=""/131) semctl$GETZCNT(r0, 0x3, 0xf, &(0x7f00000000c0)=""/187) semop(r0, &(0x7f0000000180), 0x0) semop(r0, &(0x7f00000001c0)=[{0x0, 0x2, 0x1000}, {0x2, 0xd4, 0x1800}], 0x2) r1 = semget(0x3, 0x1, 0x30) semctl$GETNCNT(r1, 0x3, 0xe, &(0x7f0000019440)=""/102384) r2 = semget(0x2, 0x1, 0x402) semop(r2, &(0x7f0000000180)=[{0x4, 0x6}, {0x0, 0x4}, {0x1, 0x3633}, {0x4, 0x5, 0x1800}, {0x1, 0xf892, 0x800}, {0x1}, {0x3, 0x449, 0x3800}, {0x4, 0x58a4, 0x1800}, {0x2, 0x1527, 0x1000}, {0x2, 0x8, 0x1800}], 0xa) semctl$SETALL(r0, 0x0, 0x11, &(0x7f00000000c0)=[0xff, 0x862a, 0x9, 0x4, 0x0]) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000380), 0x1, 0x0) splice(r4, 0x0, r3, &(0x7f0000000400), 0x5246, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000380), 0x1, 0x0) splice(r6, 0x0, r5, &(0x7f0000000400), 0x5246, 0x0) sendmsg$SOCK_DESTROY(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x2b4}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000040) mlockall(0x0) semctl$GETNCNT(0x0, 0x0, 0xe, &(0x7f0000000200)=""/1) semctl$IPC_RMID(0x0, 0x0, 0x0) 08:35:19 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)={0x14, 0x2e, 0xee01, 0x0, 0x0, "", [@generic="12"]}, 0x14}], 0x1}, 0x0) 08:35:19 executing program 2: r0 = semget(0x0, 0x3, 0x284) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000000)=""/131) semctl$GETZCNT(r0, 0x3, 0xf, &(0x7f00000000c0)=""/187) semop(r0, &(0x7f0000000180), 0x0) semop(r0, &(0x7f00000001c0)=[{0x0, 0x2, 0x1000}, {0x2, 0xd4, 0x1800}], 0x2) r1 = semget(0x3, 0x1, 0x30) semctl$GETNCNT(r1, 0x3, 0xe, &(0x7f0000019440)=""/102384) r2 = semget(0x2, 0x1, 0x402) semop(r2, &(0x7f0000000180)=[{0x4, 0x6}, {0x0, 0x4}, {0x1, 0x3633}, {0x4, 0x5, 0x1800}, {0x1, 0xf892, 0x800}, {0x1}, {0x3, 0x449, 0x3800}, {0x4, 0x58a4, 0x1800}, {0x2, 0x1527, 0x1000}, {0x2, 0x8, 0x1800}], 0xa) semctl$SETALL(r0, 0x0, 0x11, &(0x7f00000000c0)=[0xff, 0x862a, 0x9, 0x4, 0x0]) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000380), 0x1, 0x0) splice(r4, 0x0, r3, &(0x7f0000000400), 0x5246, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000380), 0x1, 0x0) splice(r6, 0x0, r5, &(0x7f0000000400), 0x5246, 0x0) sendmsg$SOCK_DESTROY(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x2b4}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000040) mlockall(0x0) semctl$GETNCNT(0x0, 0x0, 0xe, &(0x7f0000000200)=""/1) semctl$IPC_RMID(0x0, 0x0, 0x0) [ 119.458649] Bluetooth: hci0: Opcode 0x0c03 failed: -4 08:35:19 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448cb, 0x0) 08:35:19 executing program 6: r0 = semget(0x0, 0x3, 0x284) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000000)=""/131) semctl$GETZCNT(r0, 0x3, 0xf, &(0x7f00000000c0)=""/187) semop(r0, &(0x7f0000000180), 0x0) semop(r0, &(0x7f00000001c0)=[{0x0, 0x2, 0x1000}, {0x2, 0xd4, 0x1800}], 0x2) r1 = semget(0x3, 0x1, 0x30) semctl$GETNCNT(r1, 0x3, 0xe, &(0x7f0000019440)=""/102384) r2 = semget(0x2, 0x1, 0x402) semop(r2, &(0x7f0000000180)=[{0x4, 0x6}, {0x0, 0x4}, {0x1, 0x3633}, {0x4, 0x5, 0x1800}, {0x1, 0xf892, 0x800}, {0x1}, {0x3, 0x449, 0x3800}, {0x4, 0x58a4, 0x1800}, {0x2, 0x1527, 0x1000}, {0x2, 0x8, 0x1800}], 0xa) semctl$SETALL(r0, 0x0, 0x11, &(0x7f00000000c0)=[0xff, 0x862a, 0x9, 0x4, 0x0]) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000380), 0x1, 0x0) splice(r4, 0x0, r3, &(0x7f0000000400), 0x5246, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000380), 0x1, 0x0) splice(r6, 0x0, r5, &(0x7f0000000400), 0x5246, 0x0) sendmsg$SOCK_DESTROY(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x2b4}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000040) mlockall(0x0) semctl$GETNCNT(0x0, 0x0, 0xe, &(0x7f0000000200)=""/1) semctl$IPC_RMID(0x0, 0x0, 0x0) 08:35:19 executing program 0: r0 = semget(0x0, 0x3, 0x284) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000000)=""/131) semctl$GETZCNT(r0, 0x3, 0xf, &(0x7f00000000c0)=""/187) semop(r0, &(0x7f0000000180), 0x0) semop(r0, &(0x7f00000001c0)=[{0x0, 0x2, 0x1000}, {0x2, 0xd4, 0x1800}], 0x2) r1 = semget(0x3, 0x1, 0x30) semctl$GETNCNT(r1, 0x3, 0xe, &(0x7f0000019440)=""/102384) r2 = semget(0x2, 0x1, 0x402) semop(r2, &(0x7f0000000180)=[{0x4, 0x6}, {0x0, 0x4}, {0x1, 0x3633}, {0x4, 0x5, 0x1800}, {0x1, 0xf892, 0x800}, {0x1}, {0x3, 0x449, 0x3800}, {0x4, 0x58a4, 0x1800}, {0x2, 0x1527, 0x1000}, {0x2, 0x8, 0x1800}], 0xa) semctl$SETALL(r0, 0x0, 0x11, &(0x7f00000000c0)=[0xff, 0x862a, 0x9, 0x4, 0x0]) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000380), 0x1, 0x0) splice(r4, 0x0, r3, &(0x7f0000000400), 0x5246, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000380), 0x1, 0x0) splice(r6, 0x0, r5, &(0x7f0000000400), 0x5246, 0x0) sendmsg$SOCK_DESTROY(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x2b4}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000040) mlockall(0x0) semctl$GETNCNT(0x0, 0x0, 0xe, &(0x7f0000000200)=""/1) semctl$IPC_RMID(0x0, 0x0, 0x0) 08:35:19 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x28, r2, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x5}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x28}}, 0x0) 08:35:19 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f0000000040)="0c6896f7441c1a790e167b1f1c8b287263d9e350aa16ee23e7ac778803496162176bd61cca4b7cb2f1a513c981749b44", 0x30) 08:35:19 executing program 5: r0 = semget(0x0, 0x3, 0x284) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000000)=""/131) semctl$GETZCNT(r0, 0x3, 0xf, &(0x7f00000000c0)=""/187) semop(r0, &(0x7f0000000180), 0x0) semop(r0, &(0x7f00000001c0)=[{0x0, 0x2, 0x1000}, {0x2, 0xd4, 0x1800}], 0x2) r1 = semget(0x3, 0x1, 0x30) semctl$GETNCNT(r1, 0x3, 0xe, &(0x7f0000019440)=""/102384) r2 = semget(0x2, 0x1, 0x402) semop(r2, &(0x7f0000000180)=[{0x4, 0x6}, {0x0, 0x4}, {0x1, 0x3633}, {0x4, 0x5, 0x1800}, {0x1, 0xf892, 0x800}, {0x1}, {0x3, 0x449, 0x3800}, {0x4, 0x58a4, 0x1800}, {0x2, 0x1527, 0x1000}, {0x2, 0x8, 0x1800}], 0xa) semctl$SETALL(r0, 0x0, 0x11, &(0x7f00000000c0)=[0xff, 0x862a, 0x9, 0x4, 0x0]) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000380), 0x1, 0x0) splice(r4, 0x0, r3, &(0x7f0000000400), 0x5246, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000380), 0x1, 0x0) splice(r6, 0x0, r5, &(0x7f0000000400), 0x5246, 0x0) sendmsg$SOCK_DESTROY(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x2b4}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000040) mlockall(0x0) semctl$GETNCNT(0x0, 0x0, 0xe, &(0x7f0000000200)=""/1) semctl$IPC_RMID(0x0, 0x0, 0x0) 08:35:19 executing program 1: r0 = semget(0x0, 0x3, 0x284) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000000)=""/131) semctl$GETZCNT(r0, 0x3, 0xf, &(0x7f00000000c0)=""/187) semop(r0, &(0x7f0000000180), 0x0) semop(r0, &(0x7f00000001c0)=[{0x0, 0x2, 0x1000}, {0x2, 0xd4, 0x1800}], 0x2) r1 = semget(0x3, 0x1, 0x30) semctl$GETNCNT(r1, 0x3, 0xe, &(0x7f0000019440)=""/102384) r2 = semget(0x2, 0x1, 0x402) semop(r2, &(0x7f0000000180)=[{0x4, 0x6}, {0x0, 0x4}, {0x1, 0x3633}, {0x4, 0x5, 0x1800}, {0x1, 0xf892, 0x800}, {0x1}, {0x3, 0x449, 0x3800}, {0x4, 0x58a4, 0x1800}, {0x2, 0x1527, 0x1000}, {0x2, 0x8, 0x1800}], 0xa) semctl$SETALL(r0, 0x0, 0x11, &(0x7f00000000c0)=[0xff, 0x862a, 0x9, 0x4, 0x0]) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000380), 0x1, 0x0) splice(r4, 0x0, r3, &(0x7f0000000400), 0x5246, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000380), 0x1, 0x0) splice(r6, 0x0, r5, &(0x7f0000000400), 0x5246, 0x0) sendmsg$SOCK_DESTROY(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x2b4}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000040) mlockall(0x0) semctl$GETNCNT(0x0, 0x0, 0xe, &(0x7f0000000200)=""/1) semctl$IPC_RMID(0x0, 0x0, 0x0) 08:35:19 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffff81202ff0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 08:35:19 executing program 1: r0 = semget(0x0, 0x3, 0x284) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000000)=""/131) semctl$GETZCNT(r0, 0x3, 0xf, &(0x7f00000000c0)=""/187) semop(r0, &(0x7f0000000180), 0x0) semop(r0, &(0x7f00000001c0)=[{0x0, 0x2, 0x1000}, {0x2, 0xd4, 0x1800}], 0x2) r1 = semget(0x3, 0x1, 0x30) semctl$GETNCNT(r1, 0x3, 0xe, &(0x7f0000019440)=""/102384) r2 = semget(0x2, 0x1, 0x402) semop(r2, &(0x7f0000000180)=[{0x4, 0x6}, {0x0, 0x4}, {0x1, 0x3633}, {0x4, 0x5, 0x1800}, {0x1, 0xf892, 0x800}, {0x1}, {0x3, 0x449, 0x3800}, {0x4, 0x58a4, 0x1800}, {0x2, 0x1527, 0x1000}, {0x2, 0x8, 0x1800}], 0xa) semctl$SETALL(r0, 0x0, 0x11, &(0x7f00000000c0)=[0xff, 0x862a, 0x9, 0x4, 0x0]) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000380), 0x1, 0x0) splice(r4, 0x0, r3, &(0x7f0000000400), 0x5246, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000380), 0x1, 0x0) splice(r6, 0x0, r5, &(0x7f0000000400), 0x5246, 0x0) sendmsg$SOCK_DESTROY(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x2b4}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000040) mlockall(0x0) semctl$GETNCNT(0x0, 0x0, 0xe, &(0x7f0000000200)=""/1) semctl$IPC_RMID(0x0, 0x0, 0x0) 08:35:19 executing program 6: r0 = semget(0x0, 0x3, 0x284) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000000)=""/131) semctl$GETZCNT(r0, 0x3, 0xf, &(0x7f00000000c0)=""/187) semop(r0, &(0x7f0000000180), 0x0) semop(r0, &(0x7f00000001c0)=[{0x0, 0x2, 0x1000}, {0x2, 0xd4, 0x1800}], 0x2) r1 = semget(0x3, 0x1, 0x30) semctl$GETNCNT(r1, 0x3, 0xe, &(0x7f0000019440)=""/102384) r2 = semget(0x2, 0x1, 0x402) semop(r2, &(0x7f0000000180)=[{0x4, 0x6}, {0x0, 0x4}, {0x1, 0x3633}, {0x4, 0x5, 0x1800}, {0x1, 0xf892, 0x800}, {0x1}, {0x3, 0x449, 0x3800}, {0x4, 0x58a4, 0x1800}, {0x2, 0x1527, 0x1000}, {0x2, 0x8, 0x1800}], 0xa) semctl$SETALL(r0, 0x0, 0x11, &(0x7f00000000c0)=[0xff, 0x862a, 0x9, 0x4, 0x0]) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000380), 0x1, 0x0) splice(r4, 0x0, r3, &(0x7f0000000400), 0x5246, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000380), 0x1, 0x0) splice(r6, 0x0, r5, &(0x7f0000000400), 0x5246, 0x0) sendmsg$SOCK_DESTROY(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x2b4}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000040) mlockall(0x0) semctl$GETNCNT(0x0, 0x0, 0xe, &(0x7f0000000200)=""/1) semctl$IPC_RMID(0x0, 0x0, 0x0) 08:35:19 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f0000000040)="0c6896f7441c1a790e167b1f1c8b287263d9e350aa16ee23e7ac778803496162176bd61cca4b7cb2f1a513c981749b44", 0x30) 08:35:19 executing program 5: r0 = semget(0x0, 0x3, 0x284) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000000)=""/131) semctl$GETZCNT(r0, 0x3, 0xf, &(0x7f00000000c0)=""/187) semop(r0, &(0x7f0000000180), 0x0) semop(r0, &(0x7f00000001c0)=[{0x0, 0x2, 0x1000}, {0x2, 0xd4, 0x1800}], 0x2) r1 = semget(0x3, 0x1, 0x30) semctl$GETNCNT(r1, 0x3, 0xe, &(0x7f0000019440)=""/102384) r2 = semget(0x2, 0x1, 0x402) semop(r2, &(0x7f0000000180)=[{0x4, 0x6}, {0x0, 0x4}, {0x1, 0x3633}, {0x4, 0x5, 0x1800}, {0x1, 0xf892, 0x800}, {0x1}, {0x3, 0x449, 0x3800}, {0x4, 0x58a4, 0x1800}, {0x2, 0x1527, 0x1000}, {0x2, 0x8, 0x1800}], 0xa) semctl$SETALL(r0, 0x0, 0x11, &(0x7f00000000c0)=[0xff, 0x862a, 0x9, 0x4, 0x0]) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000380), 0x1, 0x0) splice(r4, 0x0, r3, &(0x7f0000000400), 0x5246, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000380), 0x1, 0x0) splice(r6, 0x0, r5, &(0x7f0000000400), 0x5246, 0x0) sendmsg$SOCK_DESTROY(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x2b4}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000040) mlockall(0x0) semctl$GETNCNT(0x0, 0x0, 0xe, &(0x7f0000000200)=""/1) semctl$IPC_RMID(0x0, 0x0, 0x0) 08:35:19 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x28, r2, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x5}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x28}}, 0x0) 08:35:19 executing program 0: r0 = semget(0x0, 0x3, 0x284) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000000)=""/131) semctl$GETZCNT(r0, 0x3, 0xf, &(0x7f00000000c0)=""/187) semop(r0, &(0x7f0000000180), 0x0) semop(r0, &(0x7f00000001c0)=[{0x0, 0x2, 0x1000}, {0x2, 0xd4, 0x1800}], 0x2) r1 = semget(0x3, 0x1, 0x30) semctl$GETNCNT(r1, 0x3, 0xe, &(0x7f0000019440)=""/102384) r2 = semget(0x2, 0x1, 0x402) semop(r2, &(0x7f0000000180)=[{0x4, 0x6}, {0x0, 0x4}, {0x1, 0x3633}, {0x4, 0x5, 0x1800}, {0x1, 0xf892, 0x800}, {0x1}, {0x3, 0x449, 0x3800}, {0x4, 0x58a4, 0x1800}, {0x2, 0x1527, 0x1000}, {0x2, 0x8, 0x1800}], 0xa) semctl$SETALL(r0, 0x0, 0x11, &(0x7f00000000c0)=[0xff, 0x862a, 0x9, 0x4, 0x0]) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000380), 0x1, 0x0) splice(r4, 0x0, r3, &(0x7f0000000400), 0x5246, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000380), 0x1, 0x0) splice(r6, 0x0, r5, &(0x7f0000000400), 0x5246, 0x0) sendmsg$SOCK_DESTROY(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x2b4}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000040) mlockall(0x0) semctl$GETNCNT(0x0, 0x0, 0xe, &(0x7f0000000200)=""/1) semctl$IPC_RMID(0x0, 0x0, 0x0) 08:35:19 executing program 1: r0 = semget(0x0, 0x3, 0x284) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000000)=""/131) semctl$GETZCNT(r0, 0x3, 0xf, &(0x7f00000000c0)=""/187) semop(r0, &(0x7f0000000180), 0x0) semop(r0, &(0x7f00000001c0)=[{0x0, 0x2, 0x1000}, {0x2, 0xd4, 0x1800}], 0x2) r1 = semget(0x3, 0x1, 0x30) semctl$GETNCNT(r1, 0x3, 0xe, &(0x7f0000019440)=""/102384) r2 = semget(0x2, 0x1, 0x402) semop(r2, &(0x7f0000000180)=[{0x4, 0x6}, {0x0, 0x4}, {0x1, 0x3633}, {0x4, 0x5, 0x1800}, {0x1, 0xf892, 0x800}, {0x1}, {0x3, 0x449, 0x3800}, {0x4, 0x58a4, 0x1800}, {0x2, 0x1527, 0x1000}, {0x2, 0x8, 0x1800}], 0xa) semctl$SETALL(r0, 0x0, 0x11, &(0x7f00000000c0)=[0xff, 0x862a, 0x9, 0x4, 0x0]) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000380), 0x1, 0x0) splice(r4, 0x0, r3, &(0x7f0000000400), 0x5246, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000380), 0x1, 0x0) splice(r6, 0x0, r5, &(0x7f0000000400), 0x5246, 0x0) sendmsg$SOCK_DESTROY(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x2b4}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000040) mlockall(0x0) semctl$GETNCNT(0x0, 0x0, 0xe, &(0x7f0000000200)=""/1) semctl$IPC_RMID(0x0, 0x0, 0x0) 08:35:19 executing program 6: r0 = semget(0x0, 0x3, 0x284) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000000)=""/131) semctl$GETZCNT(r0, 0x3, 0xf, &(0x7f00000000c0)=""/187) semop(r0, &(0x7f0000000180), 0x0) semop(r0, &(0x7f00000001c0)=[{0x0, 0x2, 0x1000}, {0x2, 0xd4, 0x1800}], 0x2) r1 = semget(0x3, 0x1, 0x30) semctl$GETNCNT(r1, 0x3, 0xe, &(0x7f0000019440)=""/102384) r2 = semget(0x2, 0x1, 0x402) semop(r2, &(0x7f0000000180)=[{0x4, 0x6}, {0x0, 0x4}, {0x1, 0x3633}, {0x4, 0x5, 0x1800}, {0x1, 0xf892, 0x800}, {0x1}, {0x3, 0x449, 0x3800}, {0x4, 0x58a4, 0x1800}, {0x2, 0x1527, 0x1000}, {0x2, 0x8, 0x1800}], 0xa) semctl$SETALL(r0, 0x0, 0x11, &(0x7f00000000c0)=[0xff, 0x862a, 0x9, 0x4, 0x0]) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000380), 0x1, 0x0) splice(r4, 0x0, r3, &(0x7f0000000400), 0x5246, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000380), 0x1, 0x0) splice(r6, 0x0, r5, &(0x7f0000000400), 0x5246, 0x0) sendmsg$SOCK_DESTROY(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x2b4}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000040) mlockall(0x0) semctl$GETNCNT(0x0, 0x0, 0xe, &(0x7f0000000200)=""/1) semctl$IPC_RMID(0x0, 0x0, 0x0) [ 120.365706] Bluetooth: hci0: Opcode 0x0c03 failed: -4 08:35:20 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffff81202ff0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 08:35:20 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f0000000040)="0c6896f7441c1a790e167b1f1c8b287263d9e350aa16ee23e7ac778803496162176bd61cca4b7cb2f1a513c981749b44", 0x30) 08:35:20 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x28, r2, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x5}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x28}}, 0x0) 08:35:20 executing program 0: r0 = semget(0x0, 0x3, 0x284) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000000)=""/131) semctl$GETZCNT(r0, 0x3, 0xf, &(0x7f00000000c0)=""/187) semop(r0, &(0x7f0000000180), 0x0) semop(r0, &(0x7f00000001c0)=[{0x0, 0x2, 0x1000}, {0x2, 0xd4, 0x1800}], 0x2) r1 = semget(0x3, 0x1, 0x30) semctl$GETNCNT(r1, 0x3, 0xe, &(0x7f0000019440)=""/102384) r2 = semget(0x2, 0x1, 0x402) semop(r2, &(0x7f0000000180)=[{0x4, 0x6}, {0x0, 0x4}, {0x1, 0x3633}, {0x4, 0x5, 0x1800}, {0x1, 0xf892, 0x800}, {0x1}, {0x3, 0x449, 0x3800}, {0x4, 0x58a4, 0x1800}, {0x2, 0x1527, 0x1000}, {0x2, 0x8, 0x1800}], 0xa) semctl$SETALL(r0, 0x0, 0x11, &(0x7f00000000c0)=[0xff, 0x862a, 0x9, 0x4, 0x0]) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000380), 0x1, 0x0) splice(r4, 0x0, r3, &(0x7f0000000400), 0x5246, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000380), 0x1, 0x0) splice(r6, 0x0, r5, &(0x7f0000000400), 0x5246, 0x0) sendmsg$SOCK_DESTROY(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x2b4}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000040) mlockall(0x0) semctl$GETNCNT(0x0, 0x0, 0xe, &(0x7f0000000200)=""/1) semctl$IPC_RMID(0x0, 0x0, 0x0) 08:35:20 executing program 5: r0 = semget(0x0, 0x3, 0x284) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000000)=""/131) semctl$GETZCNT(r0, 0x3, 0xf, &(0x7f00000000c0)=""/187) semop(r0, &(0x7f0000000180), 0x0) semop(r0, &(0x7f00000001c0)=[{0x0, 0x2, 0x1000}, {0x2, 0xd4, 0x1800}], 0x2) r1 = semget(0x3, 0x1, 0x30) semctl$GETNCNT(r1, 0x3, 0xe, &(0x7f0000019440)=""/102384) r2 = semget(0x2, 0x1, 0x402) semop(r2, &(0x7f0000000180)=[{0x4, 0x6}, {0x0, 0x4}, {0x1, 0x3633}, {0x4, 0x5, 0x1800}, {0x1, 0xf892, 0x800}, {0x1}, {0x3, 0x449, 0x3800}, {0x4, 0x58a4, 0x1800}, {0x2, 0x1527, 0x1000}, {0x2, 0x8, 0x1800}], 0xa) semctl$SETALL(r0, 0x0, 0x11, &(0x7f00000000c0)=[0xff, 0x862a, 0x9, 0x4, 0x0]) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000380), 0x1, 0x0) splice(r4, 0x0, r3, &(0x7f0000000400), 0x5246, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000380), 0x1, 0x0) splice(r6, 0x0, r5, &(0x7f0000000400), 0x5246, 0x0) sendmsg$SOCK_DESTROY(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x2b4}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000040) mlockall(0x0) semctl$GETNCNT(0x0, 0x0, 0xe, &(0x7f0000000200)=""/1) semctl$IPC_RMID(0x0, 0x0, 0x0) 08:35:20 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x34, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_CQM={0x18, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x0, 0x0]}]}]}, 0x34}}, 0x0) 08:35:20 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdab39eac554c6bee, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x208, &(0x7f0000000080)=0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) io_submit(r0, 0x1, &(0x7f0000000240)=[0x0]) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r2, &(0x7f0000000900)="5ed0b2ff68d76fb346352b602a2a1295cbe01cb3f64fbed9e7f9bc9be0f300cb97f6a204cc586e45dfb949002f61f8fb969dd435dd0c37c5077e5b10cfeafd75205e215b167323a3b971b0ec98e6c3d4d825cae01271cb35cdd091e4872367f354e0dc81a7e4ac79775bc1dcaafe2f5079da79d1989f1ddce6722fc438a7217526cfe75d53471624d6f091e19a7fb699ea27efa9e0fd1914e7c35f297afd9b9b85ff0ce7a982f4fa0c172ea5f06479eec302f30e5df66273717e028f4ca7d4c5b6bc8a3c3c67f688195f22488a15d9e1f7e5fed3a6c2aba7bc308b0e2c5657f4538f4a3bf9b975bb887a901ab3c85261be3e331b741313e78b5ad63b7b1b378e9c79dc4a95b2b4d15cd1d1b808844378f882a72af1e5b0eefd356e0247246e60643204c3b46183dbe4e066c55cb1dcdaa7b70ef43ab2fa4d2b8c4c1a89cb0e325fd9716874d3856cf368efd1f92d21214e55e4de647c37c71887d11f74f9afe1616e3054ceae601e4b3555e243c1882ad42c7730caeb309e7714ad87c55e9fba308cfc4161e562abde3ac4f3d7e0a3584d4928100197f102307c05c0b4b4898b0591bc1433af443478979f28e6136ffb21aaeac2be5490475a08e96bb94fd9d9d3aa2f8a1e147a80ba9bfd04dac3f476ff128476c693ea71f7be47a508c98eddc479eb703d6f17cc5be2182f7c39b0a47eb23e0808b5d87dd2a9ce88eb48a601", 0x200) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0xfdef) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x10000002}) 08:35:20 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f0000000040)="0c6896f7441c1a790e167b1f1c8b287263d9e350aa16ee23e7ac778803496162176bd61cca4b7cb2f1a513c981749b44", 0x30) 08:35:20 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x28, r2, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x5}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x28}}, 0x0) 08:35:20 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x34, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_CQM={0x18, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x0, 0x0]}]}]}, 0x34}}, 0x0) 08:35:20 executing program 0: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) 08:35:20 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x34, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_CQM={0x18, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x0, 0x0]}]}]}, 0x34}}, 0x0) 08:35:20 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x20080) unshare(0x24020280) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 08:35:20 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdab39eac554c6bee, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x208, &(0x7f0000000080)=0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) io_submit(r0, 0x1, &(0x7f0000000240)=[0x0]) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r2, &(0x7f0000000900)="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", 0x200) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0xfdef) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x10000002}) 08:35:20 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x34, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_CQM={0x18, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x0, 0x0]}]}]}, 0x34}}, 0x0) 08:35:20 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key(&(0x7f0000000300)='user\x00', &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000380)="f9", 0x1, r0) keyctl$revoke(0x3, r1) 08:35:20 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = gettid() r3 = syz_open_procfs(0x0, &(0x7f0000001380)='wchan\x00') r4 = timerfd_create(0xa, 0x0) close_range(r4, r0, 0x0) pread64(r3, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x83020, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x7fa, 0x9, 0x0, 0x6, 0x0, 0x1}, r2, 0x2, r3, 0x2) r5 = getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r3, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) process_vm_writev(r5, &(0x7f0000000080)=[{&(0x7f0000000000)=""/39, 0x27}], 0x1, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) sched_getaffinity(r5, 0x8, &(0x7f0000000300)) r6 = fork() r7 = fork() r8 = getpid() kcmp(r5, r8, 0x2, 0xffffffffffffffff, r1) kcmp(r6, r7, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) 08:35:20 executing program 7: r0 = io_uring_setup(0x5fff, &(0x7f0000000140)) io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffd}) io_uring_register$IORING_REGISTER_FILES(r0, 0x1b, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) 08:35:20 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x20080) unshare(0x24020280) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 08:35:20 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x34, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_CQM={0x18, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x0, 0x0]}]}]}, 0x34}}, 0x0) [ 120.764351] audit: type=1400 audit(1768293320.810:10): avc: denied { tracepoint } for pid=4040 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 08:35:20 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdab39eac554c6bee, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x208, &(0x7f0000000080)=0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) io_submit(r0, 0x1, &(0x7f0000000240)=[0x0]) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r2, &(0x7f0000000900)="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", 0x200) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0xfdef) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x10000002}) 08:35:20 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x34, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_CQM={0x18, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x0, 0x0]}]}]}, 0x34}}, 0x0) 08:35:20 executing program 7: r0 = io_uring_setup(0x5fff, &(0x7f0000000140)) io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffd}) io_uring_register$IORING_REGISTER_FILES(r0, 0x1b, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) 08:35:20 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key(&(0x7f0000000300)='user\x00', &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000380)="f9", 0x1, r0) keyctl$revoke(0x3, r1) 08:35:20 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x34, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_CQM={0x18, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x0, 0x0]}]}]}, 0x34}}, 0x0) 08:35:20 executing program 7: r0 = io_uring_setup(0x5fff, &(0x7f0000000140)) io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffd}) io_uring_register$IORING_REGISTER_FILES(r0, 0x1b, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) 08:35:21 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x20080) unshare(0x24020280) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 08:35:21 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdab39eac554c6bee, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x208, &(0x7f0000000080)=0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) io_submit(r0, 0x1, &(0x7f0000000240)=[0x0]) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r2, &(0x7f0000000900)="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", 0x200) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0xfdef) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x10000002}) 08:35:21 executing program 7: r0 = io_uring_setup(0x5fff, &(0x7f0000000140)) io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffd}) io_uring_register$IORING_REGISTER_FILES(r0, 0x1b, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) 08:35:21 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key(&(0x7f0000000300)='user\x00', &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000380)="f9", 0x1, r0) keyctl$revoke(0x3, r1) 08:35:21 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = gettid() r3 = syz_open_procfs(0x0, &(0x7f0000001380)='wchan\x00') r4 = timerfd_create(0xa, 0x0) close_range(r4, r0, 0x0) pread64(r3, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x83020, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x7fa, 0x9, 0x0, 0x6, 0x0, 0x1}, r2, 0x2, r3, 0x2) r5 = getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r3, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) process_vm_writev(r5, &(0x7f0000000080)=[{&(0x7f0000000000)=""/39, 0x27}], 0x1, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) sched_getaffinity(r5, 0x8, &(0x7f0000000300)) r6 = fork() r7 = fork() r8 = getpid() kcmp(r5, r8, 0x2, 0xffffffffffffffff, r1) kcmp(r6, r7, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) 08:35:21 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdab39eac554c6bee, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x208, &(0x7f0000000080)=0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) io_submit(r0, 0x1, &(0x7f0000000240)=[0x0]) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r2, &(0x7f0000000900)="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", 0x200) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0xfdef) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x10000002}) 08:35:21 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key(&(0x7f0000000300)='user\x00', &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000380)="f9", 0x1, r0) keyctl$revoke(0x3, r1) 08:35:21 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x20080) unshare(0x24020280) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 08:35:21 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x4c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x26}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xa996}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7fffffff}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x41}, 0x20004014) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x1ff) write(r0, &(0x7f0000000900)="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", 0x200) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = accept4(r0, &(0x7f0000000140)=@ethernet={0x0, @random}, &(0x7f00000001c0)=0x94c8b5d3cc1913e5, 0x800) fcntl$setstatus(r2, 0x4, 0x44000) sendfile(r0, r1, 0x0, 0xfdef) 08:35:21 executing program 7: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0xc80) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000400)=""/35, 0x23}], 0x1) 08:35:21 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdab39eac554c6bee, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x208, &(0x7f0000000080)=0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) io_submit(r0, 0x1, &(0x7f0000000240)=[0x0]) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r2, &(0x7f0000000900)="5ed0b2ff68d76fb346352b602a2a1295cbe01cb3f64fbed9e7f9bc9be0f300cb97f6a204cc586e45dfb949002f61f8fb969dd435dd0c37c5077e5b10cfeafd75205e215b167323a3b971b0ec98e6c3d4d825cae01271cb35cdd091e4872367f354e0dc81a7e4ac79775bc1dcaafe2f5079da79d1989f1ddce6722fc438a7217526cfe75d53471624d6f091e19a7fb699ea27efa9e0fd1914e7c35f297afd9b9b85ff0ce7a982f4fa0c172ea5f06479eec302f30e5df66273717e028f4ca7d4c5b6bc8a3c3c67f688195f22488a15d9e1f7e5fed3a6c2aba7bc308b0e2c5657f4538f4a3bf9b975bb887a901ab3c85261be3e331b741313e78b5ad63b7b1b378e9c79dc4a95b2b4d15cd1d1b808844378f882a72af1e5b0eefd356e0247246e60643204c3b46183dbe4e066c55cb1dcdaa7b70ef43ab2fa4d2b8c4c1a89cb0e325fd9716874d3856cf368efd1f92d21214e55e4de647c37c71887d11f74f9afe1616e3054ceae601e4b3555e243c1882ad42c7730caeb309e7714ad87c55e9fba308cfc4161e562abde3ac4f3d7e0a3584d4928100197f102307c05c0b4b4898b0591bc1433af443478979f28e6136ffb21aaeac2be5490475a08e96bb94fd9d9d3aa2f8a1e147a80ba9bfd04dac3f476ff128476c693ea71f7be47a508c98eddc479eb703d6f17cc5be2182f7c39b0a47eb23e0808b5d87dd2a9ce88eb48a601", 0x200) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0xfdef) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x10000002}) 08:35:21 executing program 7: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0xc80) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000400)=""/35, 0x23}], 0x1) 08:35:21 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key(&(0x7f0000000300)='user\x00', &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000380)="f9", 0x1, r0) keyctl$revoke(0x3, r1) 08:35:21 executing program 7: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0xc80) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000400)=""/35, 0x23}], 0x1) 08:35:21 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key(&(0x7f0000000300)='user\x00', &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000380)="f9", 0x1, r0) keyctl$revoke(0x3, r1) 08:35:21 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = gettid() r3 = syz_open_procfs(0x0, &(0x7f0000001380)='wchan\x00') r4 = timerfd_create(0xa, 0x0) close_range(r4, r0, 0x0) pread64(r3, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x83020, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x7fa, 0x9, 0x0, 0x6, 0x0, 0x1}, r2, 0x2, r3, 0x2) r5 = getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r3, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) process_vm_writev(r5, &(0x7f0000000080)=[{&(0x7f0000000000)=""/39, 0x27}], 0x1, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) sched_getaffinity(r5, 0x8, &(0x7f0000000300)) r6 = fork() r7 = fork() r8 = getpid() kcmp(r5, r8, 0x2, 0xffffffffffffffff, r1) kcmp(r6, r7, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) 08:35:21 executing program 7: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0xc80) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000400)=""/35, 0x23}], 0x1) 08:35:21 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = gettid() r3 = syz_open_procfs(0x0, &(0x7f0000001380)='wchan\x00') r4 = timerfd_create(0xa, 0x0) close_range(r4, r0, 0x0) pread64(r3, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x83020, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x7fa, 0x9, 0x0, 0x6, 0x0, 0x1}, r2, 0x2, r3, 0x2) r5 = getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r3, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) process_vm_writev(r5, &(0x7f0000000080)=[{&(0x7f0000000000)=""/39, 0x27}], 0x1, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) sched_getaffinity(r5, 0x8, &(0x7f0000000300)) r6 = fork() r7 = fork() r8 = getpid() kcmp(r5, r8, 0x2, 0xffffffffffffffff, r1) kcmp(r6, r7, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) 08:35:21 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x4c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x26}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xa996}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7fffffff}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x41}, 0x20004014) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x1ff) write(r0, &(0x7f0000000900)="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", 0x200) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = accept4(r0, &(0x7f0000000140)=@ethernet={0x0, @random}, &(0x7f00000001c0)=0x94c8b5d3cc1913e5, 0x800) fcntl$setstatus(r2, 0x4, 0x44000) sendfile(r0, r1, 0x0, 0xfdef) 08:35:21 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key(&(0x7f0000000300)='user\x00', &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000380)="f9", 0x1, r0) keyctl$revoke(0x3, r1) 08:35:21 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = gettid() r3 = syz_open_procfs(0x0, &(0x7f0000001380)='wchan\x00') r4 = timerfd_create(0xa, 0x0) close_range(r4, r0, 0x0) pread64(r3, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x83020, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x7fa, 0x9, 0x0, 0x6, 0x0, 0x1}, r2, 0x2, r3, 0x2) r5 = getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r3, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) process_vm_writev(r5, &(0x7f0000000080)=[{&(0x7f0000000000)=""/39, 0x27}], 0x1, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) sched_getaffinity(r5, 0x8, &(0x7f0000000300)) r6 = fork() r7 = fork() r8 = getpid() kcmp(r5, r8, 0x2, 0xffffffffffffffff, r1) kcmp(r6, r7, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) 08:35:21 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdab39eac554c6bee, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x208, &(0x7f0000000080)=0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) io_submit(r0, 0x1, &(0x7f0000000240)=[0x0]) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r2, &(0x7f0000000900)="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", 0x200) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0xfdef) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x10000002}) 08:35:21 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = gettid() r3 = syz_open_procfs(0x0, &(0x7f0000001380)='wchan\x00') r4 = timerfd_create(0xa, 0x0) close_range(r4, r0, 0x0) pread64(r3, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x83020, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x7fa, 0x9, 0x0, 0x6, 0x0, 0x1}, r2, 0x2, r3, 0x2) r5 = getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r3, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) process_vm_writev(r5, &(0x7f0000000080)=[{&(0x7f0000000000)=""/39, 0x27}], 0x1, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) sched_getaffinity(r5, 0x8, &(0x7f0000000300)) r6 = fork() r7 = fork() r8 = getpid() kcmp(r5, r8, 0x2, 0xffffffffffffffff, r1) kcmp(r6, r7, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) 08:35:21 executing program 6: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = gettid() r3 = syz_open_procfs(0x0, &(0x7f0000001380)='wchan\x00') r4 = timerfd_create(0xa, 0x0) close_range(r4, r0, 0x0) pread64(r3, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x83020, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x7fa, 0x9, 0x0, 0x6, 0x0, 0x1}, r2, 0x2, r3, 0x2) r5 = getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r3, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) process_vm_writev(r5, &(0x7f0000000080)=[{&(0x7f0000000000)=""/39, 0x27}], 0x1, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) sched_getaffinity(r5, 0x8, &(0x7f0000000300)) r6 = fork() r7 = fork() r8 = getpid() kcmp(r5, r8, 0x2, 0xffffffffffffffff, r1) kcmp(r6, r7, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) 08:35:21 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x4c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x26}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xa996}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7fffffff}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x41}, 0x20004014) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x1ff) write(r0, &(0x7f0000000900)="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", 0x200) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = accept4(r0, &(0x7f0000000140)=@ethernet={0x0, @random}, &(0x7f00000001c0)=0x94c8b5d3cc1913e5, 0x800) fcntl$setstatus(r2, 0x4, 0x44000) sendfile(r0, r1, 0x0, 0xfdef) 08:35:21 executing program 1: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = gettid() r3 = syz_open_procfs(0x0, &(0x7f0000001380)='wchan\x00') r4 = timerfd_create(0xa, 0x0) close_range(r4, r0, 0x0) pread64(r3, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x83020, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x7fa, 0x9, 0x0, 0x6, 0x0, 0x1}, r2, 0x2, r3, 0x2) r5 = getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r3, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) process_vm_writev(r5, &(0x7f0000000080)=[{&(0x7f0000000000)=""/39, 0x27}], 0x1, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) sched_getaffinity(r5, 0x8, &(0x7f0000000300)) r6 = fork() r7 = fork() r8 = getpid() kcmp(r5, r8, 0x2, 0xffffffffffffffff, r1) kcmp(r6, r7, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) 08:35:21 executing program 7: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = gettid() r3 = syz_open_procfs(0x0, &(0x7f0000001380)='wchan\x00') r4 = timerfd_create(0xa, 0x0) close_range(r4, r0, 0x0) pread64(r3, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x83020, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x7fa, 0x9, 0x0, 0x6, 0x0, 0x1}, r2, 0x2, r3, 0x2) r5 = getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r3, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) process_vm_writev(r5, &(0x7f0000000080)=[{&(0x7f0000000000)=""/39, 0x27}], 0x1, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) sched_getaffinity(r5, 0x8, &(0x7f0000000300)) r6 = fork() r7 = fork() r8 = getpid() kcmp(r5, r8, 0x2, 0xffffffffffffffff, r1) kcmp(r6, r7, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) 08:35:21 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = gettid() r3 = syz_open_procfs(0x0, &(0x7f0000001380)='wchan\x00') r4 = timerfd_create(0xa, 0x0) close_range(r4, r0, 0x0) pread64(r3, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x83020, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x7fa, 0x9, 0x0, 0x6, 0x0, 0x1}, r2, 0x2, r3, 0x2) r5 = getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r3, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) process_vm_writev(r5, &(0x7f0000000080)=[{&(0x7f0000000000)=""/39, 0x27}], 0x1, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) sched_getaffinity(r5, 0x8, &(0x7f0000000300)) r6 = fork() r7 = fork() r8 = getpid() kcmp(r5, r8, 0x2, 0xffffffffffffffff, r1) kcmp(r6, r7, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) 08:35:21 executing program 6: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = gettid() r3 = syz_open_procfs(0x0, &(0x7f0000001380)='wchan\x00') r4 = timerfd_create(0xa, 0x0) close_range(r4, r0, 0x0) pread64(r3, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x83020, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x7fa, 0x9, 0x0, 0x6, 0x0, 0x1}, r2, 0x2, r3, 0x2) r5 = getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r3, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) process_vm_writev(r5, &(0x7f0000000080)=[{&(0x7f0000000000)=""/39, 0x27}], 0x1, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) sched_getaffinity(r5, 0x8, &(0x7f0000000300)) r6 = fork() r7 = fork() r8 = getpid() kcmp(r5, r8, 0x2, 0xffffffffffffffff, r1) kcmp(r6, r7, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) 08:35:22 executing program 7: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = gettid() r3 = syz_open_procfs(0x0, &(0x7f0000001380)='wchan\x00') r4 = timerfd_create(0xa, 0x0) close_range(r4, r0, 0x0) pread64(r3, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x83020, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x7fa, 0x9, 0x0, 0x6, 0x0, 0x1}, r2, 0x2, r3, 0x2) r5 = getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r3, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) process_vm_writev(r5, &(0x7f0000000080)=[{&(0x7f0000000000)=""/39, 0x27}], 0x1, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) sched_getaffinity(r5, 0x8, &(0x7f0000000300)) r6 = fork() r7 = fork() r8 = getpid() kcmp(r5, r8, 0x2, 0xffffffffffffffff, r1) kcmp(r6, r7, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) 08:35:22 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = gettid() r3 = syz_open_procfs(0x0, &(0x7f0000001380)='wchan\x00') r4 = timerfd_create(0xa, 0x0) close_range(r4, r0, 0x0) pread64(r3, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x83020, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x7fa, 0x9, 0x0, 0x6, 0x0, 0x1}, r2, 0x2, r3, 0x2) r5 = getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r3, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) process_vm_writev(r5, &(0x7f0000000080)=[{&(0x7f0000000000)=""/39, 0x27}], 0x1, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) sched_getaffinity(r5, 0x8, &(0x7f0000000300)) r6 = fork() r7 = fork() r8 = getpid() kcmp(r5, r8, 0x2, 0xffffffffffffffff, r1) kcmp(r6, r7, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) 08:35:22 executing program 2: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = gettid() r3 = syz_open_procfs(0x0, &(0x7f0000001380)='wchan\x00') r4 = timerfd_create(0xa, 0x0) close_range(r4, r0, 0x0) pread64(r3, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x83020, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x7fa, 0x9, 0x0, 0x6, 0x0, 0x1}, r2, 0x2, r3, 0x2) r5 = getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r3, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) process_vm_writev(r5, &(0x7f0000000080)=[{&(0x7f0000000000)=""/39, 0x27}], 0x1, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) sched_getaffinity(r5, 0x8, &(0x7f0000000300)) r6 = fork() r7 = fork() r8 = getpid() kcmp(r5, r8, 0x2, 0xffffffffffffffff, r1) kcmp(r6, r7, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) 08:35:22 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x4c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x26}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xa996}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7fffffff}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x41}, 0x20004014) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x1ff) write(r0, &(0x7f0000000900)="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", 0x200) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = accept4(r0, &(0x7f0000000140)=@ethernet={0x0, @random}, &(0x7f00000001c0)=0x94c8b5d3cc1913e5, 0x800) fcntl$setstatus(r2, 0x4, 0x44000) sendfile(r0, r1, 0x0, 0xfdef) 08:35:22 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = gettid() r3 = syz_open_procfs(0x0, &(0x7f0000001380)='wchan\x00') r4 = timerfd_create(0xa, 0x0) close_range(r4, r0, 0x0) pread64(r3, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x83020, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x7fa, 0x9, 0x0, 0x6, 0x0, 0x1}, r2, 0x2, r3, 0x2) r5 = getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r3, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) process_vm_writev(r5, &(0x7f0000000080)=[{&(0x7f0000000000)=""/39, 0x27}], 0x1, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) sched_getaffinity(r5, 0x8, &(0x7f0000000300)) r6 = fork() r7 = fork() r8 = getpid() kcmp(r5, r8, 0x2, 0xffffffffffffffff, r1) kcmp(r6, r7, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) 08:35:22 executing program 4: syz_mount_image$iso9660(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={[{@check_strict}, {@iocharset={'iocharset', 0x3d, 'cp863'}}, {@nocompress}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'cp865'}}, {@map_acorn}, {@session}], [{@fsname={'fsname', 0x3d, ':[!'}}]}) [ 122.175618] iso9660: Unknown parameter 'fsname' [ 122.180819] iso9660: Unknown parameter 'fsname' 08:35:22 executing program 4: syz_mount_image$iso9660(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={[{@check_strict}, {@iocharset={'iocharset', 0x3d, 'cp863'}}, {@nocompress}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'cp865'}}, {@map_acorn}, {@session}], [{@fsname={'fsname', 0x3d, ':[!'}}]}) 08:35:22 executing program 1: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = gettid() r3 = syz_open_procfs(0x0, &(0x7f0000001380)='wchan\x00') r4 = timerfd_create(0xa, 0x0) close_range(r4, r0, 0x0) pread64(r3, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x83020, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x7fa, 0x9, 0x0, 0x6, 0x0, 0x1}, r2, 0x2, r3, 0x2) r5 = getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r3, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) process_vm_writev(r5, &(0x7f0000000080)=[{&(0x7f0000000000)=""/39, 0x27}], 0x1, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) sched_getaffinity(r5, 0x8, &(0x7f0000000300)) r6 = fork() r7 = fork() r8 = getpid() kcmp(r5, r8, 0x2, 0xffffffffffffffff, r1) kcmp(r6, r7, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) [ 122.255869] iso9660: Unknown parameter 'fsname' 08:35:22 executing program 7: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = gettid() r3 = syz_open_procfs(0x0, &(0x7f0000001380)='wchan\x00') r4 = timerfd_create(0xa, 0x0) close_range(r4, r0, 0x0) pread64(r3, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x83020, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x7fa, 0x9, 0x0, 0x6, 0x0, 0x1}, r2, 0x2, r3, 0x2) r5 = getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r3, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) process_vm_writev(r5, &(0x7f0000000080)=[{&(0x7f0000000000)=""/39, 0x27}], 0x1, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) sched_getaffinity(r5, 0x8, &(0x7f0000000300)) r6 = fork() r7 = fork() r8 = getpid() kcmp(r5, r8, 0x2, 0xffffffffffffffff, r1) kcmp(r6, r7, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) 08:35:22 executing program 2: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = gettid() r3 = syz_open_procfs(0x0, &(0x7f0000001380)='wchan\x00') r4 = timerfd_create(0xa, 0x0) close_range(r4, r0, 0x0) pread64(r3, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x83020, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x7fa, 0x9, 0x0, 0x6, 0x0, 0x1}, r2, 0x2, r3, 0x2) r5 = getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r3, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) process_vm_writev(r5, &(0x7f0000000080)=[{&(0x7f0000000000)=""/39, 0x27}], 0x1, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) sched_getaffinity(r5, 0x8, &(0x7f0000000300)) r6 = fork() r7 = fork() r8 = getpid() kcmp(r5, r8, 0x2, 0xffffffffffffffff, r1) kcmp(r6, r7, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) 08:35:22 executing program 3: creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000140)={0x9, 0x80}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x9, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 08:35:22 executing program 4: syz_mount_image$iso9660(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={[{@check_strict}, {@iocharset={'iocharset', 0x3d, 'cp863'}}, {@nocompress}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'cp865'}}, {@map_acorn}, {@session}], [{@fsname={'fsname', 0x3d, ':[!'}}]}) 08:35:22 executing program 1: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = gettid() r3 = syz_open_procfs(0x0, &(0x7f0000001380)='wchan\x00') r4 = timerfd_create(0xa, 0x0) close_range(r4, r0, 0x0) pread64(r3, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x83020, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x7fa, 0x9, 0x0, 0x6, 0x0, 0x1}, r2, 0x2, r3, 0x2) r5 = getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r3, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) process_vm_writev(r5, &(0x7f0000000080)=[{&(0x7f0000000000)=""/39, 0x27}], 0x1, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) sched_getaffinity(r5, 0x8, &(0x7f0000000300)) r6 = fork() r7 = fork() r8 = getpid() kcmp(r5, r8, 0x2, 0xffffffffffffffff, r1) kcmp(r6, r7, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) 08:35:22 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = gettid() r3 = syz_open_procfs(0x0, &(0x7f0000001380)='wchan\x00') r4 = timerfd_create(0xa, 0x0) close_range(r4, r0, 0x0) pread64(r3, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x83020, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x7fa, 0x9, 0x0, 0x6, 0x0, 0x1}, r2, 0x2, r3, 0x2) r5 = getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r3, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) process_vm_writev(r5, &(0x7f0000000080)=[{&(0x7f0000000000)=""/39, 0x27}], 0x1, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) sched_getaffinity(r5, 0x8, &(0x7f0000000300)) r6 = fork() r7 = fork() r8 = getpid() kcmp(r5, r8, 0x2, 0xffffffffffffffff, r1) kcmp(r6, r7, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) 08:35:22 executing program 0: prlimit64(0x0, 0x7, &(0x7f0000000040)={0x4, 0x8004}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) 08:35:22 executing program 6: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = gettid() r3 = syz_open_procfs(0x0, &(0x7f0000001380)='wchan\x00') r4 = timerfd_create(0xa, 0x0) close_range(r4, r0, 0x0) pread64(r3, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x83020, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x7fa, 0x9, 0x0, 0x6, 0x0, 0x1}, r2, 0x2, r3, 0x2) r5 = getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r3, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) process_vm_writev(r5, &(0x7f0000000080)=[{&(0x7f0000000000)=""/39, 0x27}], 0x1, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) sched_getaffinity(r5, 0x8, &(0x7f0000000300)) r6 = fork() r7 = fork() r8 = getpid() kcmp(r5, r8, 0x2, 0xffffffffffffffff, r1) kcmp(r6, r7, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) [ 122.495844] iso9660: Unknown parameter 'fsname' [ 122.512485] ref_ctr_offset mismatch. inode: 0x3e8c offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x4 08:35:22 executing program 4: syz_mount_image$iso9660(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={[{@check_strict}, {@iocharset={'iocharset', 0x3d, 'cp863'}}, {@nocompress}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'cp865'}}, {@map_acorn}, {@session}], [{@fsname={'fsname', 0x3d, ':[!'}}]}) 08:35:22 executing program 0: prlimit64(0x0, 0x7, &(0x7f0000000040)={0x4, 0x8004}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) [ 122.554115] iso9660: Unknown parameter 'fsname' 08:35:22 executing program 2: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = gettid() r3 = syz_open_procfs(0x0, &(0x7f0000001380)='wchan\x00') r4 = timerfd_create(0xa, 0x0) close_range(r4, r0, 0x0) pread64(r3, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x83020, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x7fa, 0x9, 0x0, 0x6, 0x0, 0x1}, r2, 0x2, r3, 0x2) r5 = getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r3, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) process_vm_writev(r5, &(0x7f0000000080)=[{&(0x7f0000000000)=""/39, 0x27}], 0x1, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) sched_getaffinity(r5, 0x8, &(0x7f0000000300)) r6 = fork() r7 = fork() r8 = getpid() kcmp(r5, r8, 0x2, 0xffffffffffffffff, r1) kcmp(r6, r7, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) 08:35:22 executing program 7: creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000140)={0x9, 0x80}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x9, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 08:35:22 executing program 5: prlimit64(0x0, 0x4, &(0x7f0000000780), &(0x7f00000007c0)) 08:35:22 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mlockall(0x7) 08:35:22 executing program 6: setresuid(0xffffffffffffffff, 0x0, 0xee01) setresuid(0x0, 0x0, 0x0) 08:35:22 executing program 0: prlimit64(0x0, 0x7, &(0x7f0000000040)={0x4, 0x8004}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) 08:35:22 executing program 3: creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000140)={0x9, 0x80}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x9, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 122.849916] ref_ctr_offset mismatch. inode: 0x3e98 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x4 [ 122.851646] ref_ctr_offset mismatch. inode: 0x3e97 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x4 08:35:22 executing program 6: setresuid(0xffffffffffffffff, 0x0, 0xee01) setresuid(0x0, 0x0, 0x0) 08:35:22 executing program 0: prlimit64(0x0, 0x7, &(0x7f0000000040)={0x4, 0x8004}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) 08:35:22 executing program 5: prlimit64(0x0, 0x4, &(0x7f0000000780), &(0x7f00000007c0)) 08:35:22 executing program 6: setresuid(0xffffffffffffffff, 0x0, 0xee01) setresuid(0x0, 0x0, 0x0) 08:35:22 executing program 4: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = gettid() kcmp(r1, r1, 0x0, r0, 0xffffffffffffffff) 08:35:22 executing program 6: setresuid(0xffffffffffffffff, 0x0, 0xee01) setresuid(0x0, 0x0, 0x0) 08:35:23 executing program 5: prlimit64(0x0, 0x4, &(0x7f0000000780), &(0x7f00000007c0)) 08:35:23 executing program 6: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x40282, 0x0) writev(r0, &(0x7f0000001840)=[{&(0x7f0000000200)="13", 0x1}], 0x1) 08:35:23 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/locks\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000000)=""/108, 0x6c, 0x0) 08:35:23 executing program 3: creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000140)={0x9, 0x80}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x9, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 123.124815] ref_ctr_offset mismatch. inode: 0x3e82 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x4 08:35:23 executing program 6: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x40282, 0x0) writev(r0, &(0x7f0000001840)=[{&(0x7f0000000200)="13", 0x1}], 0x1) 08:35:23 executing program 7: creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000140)={0x9, 0x80}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x9, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 08:35:23 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mlockall(0x7) 08:35:23 executing program 3: creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000140)={0x9, 0x80}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x9, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 08:35:23 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) 08:35:23 executing program 2: setreuid(0xffffffffffffffff, 0x0) 08:35:23 executing program 5: prlimit64(0x0, 0x4, &(0x7f0000000780), &(0x7f00000007c0)) 08:35:23 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/locks\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000000)=""/108, 0x6c, 0x0) 08:35:23 executing program 2: setreuid(0xffffffffffffffff, 0x0) 08:35:23 executing program 6: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x40282, 0x0) writev(r0, &(0x7f0000001840)=[{&(0x7f0000000200)="13", 0x1}], 0x1) 08:35:23 executing program 2: setreuid(0xffffffffffffffff, 0x0) 08:35:23 executing program 6: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x40282, 0x0) writev(r0, &(0x7f0000001840)=[{&(0x7f0000000200)="13", 0x1}], 0x1) 08:35:23 executing program 2: setreuid(0xffffffffffffffff, 0x0) 08:35:23 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/locks\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000000)=""/108, 0x6c, 0x0) 08:35:23 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_FLUSHABLE(r0, 0x6, 0x8, 0x0, &(0x7f0000000040)) 08:35:23 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='-&&&#\x00') 08:35:23 executing program 2: r0 = mq_open(&(0x7f00000001c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\x00'/124, 0x0, 0x0, 0x0) mq_timedreceive(r0, &(0x7f0000000340)=""/198, 0xffffffffffffffdf, 0x5, &(0x7f00000000c0)) [ 123.378719] ref_ctr_offset mismatch. inode: 0x3e80 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x4 [ 123.402841] audit: type=1400 audit(1768293323.449:11): avc: denied { write } for pid=4290 comm="syz-executor.6" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 123.472550] ref_ctr_offset mismatch. inode: 0x3e88 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x4 08:35:23 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/locks\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000000)=""/108, 0x6c, 0x0) 08:35:23 executing program 4: syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "f05760", 0x8, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {[@srh={0x89}]}}}}}, 0x0) 08:35:23 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mlockall(0x7) 08:35:23 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_FLUSHABLE(r0, 0x6, 0x8, 0x0, &(0x7f0000000040)) 08:35:23 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='-&&&#\x00') 08:35:23 executing program 2: memfd_create(0x0, 0x7b8c9cfa8892f6fc) 08:35:23 executing program 7: creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000140)={0x9, 0x80}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x9, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 08:35:23 executing program 4: syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "f05760", 0x8, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {[@srh={0x89}]}}}}}, 0x0) 08:35:23 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_FLUSHABLE(r0, 0x6, 0x8, 0x0, &(0x7f0000000040)) 08:35:23 executing program 2: memfd_create(0x0, 0x7b8c9cfa8892f6fc) 08:35:23 executing program 4: syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "f05760", 0x8, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {[@srh={0x89}]}}}}}, 0x0) 08:35:23 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_FLUSHABLE(r0, 0x6, 0x8, 0x0, &(0x7f0000000040)) 08:35:23 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=@newsa={0xf0, 0x10, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b}, {@in6=@private2}, @in=@loopback, {}, {}, {}, 0x0, 0x0, 0x2}}, 0xf0}}, 0x0) 08:35:23 executing program 2: memfd_create(0x0, 0x7b8c9cfa8892f6fc) 08:35:23 executing program 4: syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "f05760", 0x8, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {[@srh={0x89}]}}}}}, 0x0) 08:35:23 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='-&&&#\x00') 08:35:23 executing program 0: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x40032, 0xffffffffffffffff, 0x0) mount_setattr(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000000080), 0x20) [ 123.840880] ref_ctr_offset mismatch. inode: 0x3e9c offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x4 08:35:23 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=@newsa={0xf0, 0x10, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b}, {@in6=@private2}, @in=@loopback, {}, {}, {}, 0x0, 0x0, 0x2}}, 0xf0}}, 0x0) 08:35:23 executing program 5: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = eventfd(0x0) dup2(r0, r1) 08:35:23 executing program 2: memfd_create(0x0, 0x7b8c9cfa8892f6fc) 08:35:23 executing program 0: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x40032, 0xffffffffffffffff, 0x0) mount_setattr(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000000080), 0x20) 08:35:23 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mlockall(0x7) 08:35:23 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0x4}) 08:35:23 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='-&&&#\x00') 08:35:24 executing program 0: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x40032, 0xffffffffffffffff, 0x0) mount_setattr(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000000080), 0x20) 08:35:24 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=@newsa={0xf0, 0x10, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b}, {@in6=@private2}, @in=@loopback, {}, {}, {}, 0x0, 0x0, 0x2}}, 0xf0}}, 0x0) 08:35:24 executing program 0: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x40032, 0xffffffffffffffff, 0x0) mount_setattr(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000000080), 0x20) 08:35:24 executing program 5: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = eventfd(0x0) dup2(r0, r1) 08:35:24 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=@newsa={0xf0, 0x10, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b}, {@in6=@private2}, @in=@loopback, {}, {}, {}, 0x0, 0x0, 0x2}}, 0xf0}}, 0x0) 08:35:24 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0x4}) 08:35:24 executing program 7: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x9a3800, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) [ 124.171368] loop2: detecte VM DIAGNOSIS: 08:35:18 Registers: info registers vcpu 0 RAX=0000000000000001 RBX=0000000000000001 RCX=ffffffff84d1527e RDX=fffffbfff0b82d11 RSI=0000000000000004 RDI=ffffffff85c16880 RBP=ffffffff85c16880 RSP=ffff88801b89fb50 R8 =0000000000000000 R9 =fffffbfff0b82d10 R10=ffffffff85c16883 R11=0000000000000000 R12=1ffff11003713f6b R13=0000000000000003 R14=fffffbfff0b82d10 R15=ffff88801b89fb88 RIP=ffffffff84d15410 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000555563eea400 00000000 00000000 GS =0000 ffff8880e5342000 00000000 00000000 LDT=0000 fffffe2300000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000555563ef3c58 CR3=000000000de46000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000a60ce07b00000000cec3662e XMM01=000000000000000003515b82db34ca11 XMM02=0000000000000000333bebdfd0a6a21d XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=000000000000002d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff82977f45 RDI=ffffffff889c1a00 RBP=ffffffff889c19c0 RSP=ffff88804ef9f4a8 R8 =0000000000000000 R9 =ffffed1001568046 R10=000000000000002d R11=000000002d2d2d2d R12=000000000000002d R13=0000000000000010 R14=ffffffff889c19c0 R15=ffffffff82977f30 RIP=ffffffff82977f9d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00005555644f2400 00000000 00000000 GS =0000 ffff8880e5442000 00000000 00000000 LDT=0000 fffffe4900000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fdff3fd8544 CR3=000000004cea8000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000a60ce07b00000000cec3662e XMM01=000000000000000003515b82db34ca11 XMM02=0000000000000000333bebdfd0a6a21d XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000