Warning: Permanently added '[localhost]:62900' (ECDSA) to the list of known hosts. 2026/01/17 22:50:16 fuzzer started 2026/01/17 22:50:17 dialing manager at localhost:42157 syzkaller login: [ 43.232286] cgroup: Unknown subsys name 'net' [ 43.343031] cgroup: Unknown subsys name 'cpuset' [ 43.358638] cgroup: Unknown subsys name 'rlimit' 2026/01/17 22:50:27 syscalls: 2214 2026/01/17 22:50:27 code coverage: enabled 2026/01/17 22:50:27 comparison tracing: enabled 2026/01/17 22:50:27 extra coverage: enabled 2026/01/17 22:50:27 setuid sandbox: enabled 2026/01/17 22:50:27 namespace sandbox: enabled 2026/01/17 22:50:27 Android sandbox: enabled 2026/01/17 22:50:27 fault injection: enabled 2026/01/17 22:50:27 leak checking: enabled 2026/01/17 22:50:27 net packet injection: enabled 2026/01/17 22:50:27 net device setup: enabled 2026/01/17 22:50:27 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2026/01/17 22:50:27 devlink PCI setup: PCI device 0000:00:10.0 is not available 2026/01/17 22:50:27 USB emulation: enabled 2026/01/17 22:50:27 hci packet injection: enabled 2026/01/17 22:50:27 wifi device emulation: enabled 2026/01/17 22:50:27 802.15.4 emulation: enabled 2026/01/17 22:50:27 fetching corpus: 50, signal 28017/29850 (executing program) 2026/01/17 22:50:27 fetching corpus: 100, signal 42093/45582 (executing program) 2026/01/17 22:50:27 fetching corpus: 150, signal 47521/52646 (executing program) 2026/01/17 22:50:27 fetching corpus: 200, signal 54423/61087 (executing program) 2026/01/17 22:50:27 fetching corpus: 250, signal 60501/68624 (executing program) 2026/01/17 22:50:27 fetching corpus: 300, signal 65377/74943 (executing program) 2026/01/17 22:50:27 fetching corpus: 350, signal 69414/80392 (executing program) 2026/01/17 22:50:28 fetching corpus: 400, signal 75921/88189 (executing program) 2026/01/17 22:50:28 fetching corpus: 450, signal 80897/94417 (executing program) 2026/01/17 22:50:28 fetching corpus: 500, signal 84089/98953 (executing program) 2026/01/17 22:50:28 fetching corpus: 550, signal 86363/102556 (executing program) 2026/01/17 22:50:28 fetching corpus: 600, signal 88259/105754 (executing program) 2026/01/17 22:50:28 fetching corpus: 650, signal 90485/109298 (executing program) 2026/01/17 22:50:28 fetching corpus: 700, signal 92598/112691 (executing program) 2026/01/17 22:50:28 fetching corpus: 750, signal 95171/116465 (executing program) 2026/01/17 22:50:29 fetching corpus: 800, signal 97738/120231 (executing program) 2026/01/17 22:50:29 fetching corpus: 850, signal 99379/123105 (executing program) 2026/01/17 22:50:29 fetching corpus: 900, signal 100992/125907 (executing program) 2026/01/17 22:50:29 fetching corpus: 950, signal 102522/128681 (executing program) 2026/01/17 22:50:29 fetching corpus: 1000, signal 104828/132094 (executing program) 2026/01/17 22:50:29 fetching corpus: 1050, signal 107738/135984 (executing program) 2026/01/17 22:50:29 fetching corpus: 1100, signal 109937/139232 (executing program) 2026/01/17 22:50:29 fetching corpus: 1150, signal 111946/142347 (executing program) 2026/01/17 22:50:30 fetching corpus: 1200, signal 113534/145045 (executing program) 2026/01/17 22:50:30 fetching corpus: 1250, signal 114417/147114 (executing program) 2026/01/17 22:50:30 fetching corpus: 1300, signal 116833/150407 (executing program) 2026/01/17 22:50:30 fetching corpus: 1350, signal 118084/152719 (executing program) 2026/01/17 22:50:30 fetching corpus: 1400, signal 120962/156336 (executing program) 2026/01/17 22:50:30 fetching corpus: 1450, signal 122825/159073 (executing program) 2026/01/17 22:50:30 fetching corpus: 1500, signal 124500/161683 (executing program) 2026/01/17 22:50:30 fetching corpus: 1550, signal 125864/163981 (executing program) 2026/01/17 22:50:31 fetching corpus: 1600, signal 126727/165934 (executing program) 2026/01/17 22:50:31 fetching corpus: 1650, signal 127929/168112 (executing program) 2026/01/17 22:50:31 fetching corpus: 1700, signal 129386/170422 (executing program) 2026/01/17 22:50:31 fetching corpus: 1750, signal 130638/172643 (executing program) 2026/01/17 22:50:31 fetching corpus: 1800, signal 132047/174946 (executing program) 2026/01/17 22:50:31 fetching corpus: 1850, signal 132974/176852 (executing program) 2026/01/17 22:50:31 fetching corpus: 1900, signal 133897/178750 (executing program) 2026/01/17 22:50:31 fetching corpus: 1950, signal 135435/181113 (executing program) 2026/01/17 22:50:32 fetching corpus: 2000, signal 136573/183155 (executing program) 2026/01/17 22:50:32 fetching corpus: 2050, signal 137913/185345 (executing program) 2026/01/17 22:50:32 fetching corpus: 2100, signal 138912/187290 (executing program) 2026/01/17 22:50:32 fetching corpus: 2150, signal 139979/189269 (executing program) 2026/01/17 22:50:32 fetching corpus: 2200, signal 140976/191172 (executing program) 2026/01/17 22:50:32 fetching corpus: 2250, signal 141750/192870 (executing program) 2026/01/17 22:50:32 fetching corpus: 2300, signal 142966/194882 (executing program) 2026/01/17 22:50:32 fetching corpus: 2350, signal 143851/196663 (executing program) 2026/01/17 22:50:32 fetching corpus: 2400, signal 144640/198325 (executing program) 2026/01/17 22:50:33 fetching corpus: 2450, signal 145469/200043 (executing program) 2026/01/17 22:50:33 fetching corpus: 2500, signal 146710/202026 (executing program) 2026/01/17 22:50:33 fetching corpus: 2550, signal 147618/203777 (executing program) 2026/01/17 22:50:33 fetching corpus: 2600, signal 148227/205266 (executing program) 2026/01/17 22:50:33 fetching corpus: 2650, signal 148867/206783 (executing program) 2026/01/17 22:50:33 fetching corpus: 2700, signal 149715/208450 (executing program) 2026/01/17 22:50:33 fetching corpus: 2750, signal 150504/210090 (executing program) 2026/01/17 22:50:33 fetching corpus: 2800, signal 151185/211604 (executing program) 2026/01/17 22:50:33 fetching corpus: 2849, signal 151900/213177 (executing program) 2026/01/17 22:50:34 fetching corpus: 2899, signal 152578/214719 (executing program) 2026/01/17 22:50:34 fetching corpus: 2949, signal 154629/217070 (executing program) 2026/01/17 22:50:34 fetching corpus: 2999, signal 155376/218585 (executing program) 2026/01/17 22:50:34 fetching corpus: 3049, signal 156081/220083 (executing program) 2026/01/17 22:50:34 fetching corpus: 3099, signal 156747/221574 (executing program) 2026/01/17 22:50:34 fetching corpus: 3149, signal 157606/223151 (executing program) 2026/01/17 22:50:34 fetching corpus: 3199, signal 158397/224600 (executing program) 2026/01/17 22:50:34 fetching corpus: 3249, signal 158997/226012 (executing program) 2026/01/17 22:50:35 fetching corpus: 3299, signal 159812/227492 (executing program) 2026/01/17 22:50:35 fetching corpus: 3349, signal 160858/229142 (executing program) 2026/01/17 22:50:35 fetching corpus: 3399, signal 162336/230996 (executing program) 2026/01/17 22:50:35 fetching corpus: 3449, signal 163428/232633 (executing program) 2026/01/17 22:50:35 fetching corpus: 3499, signal 164129/233983 (executing program) 2026/01/17 22:50:35 fetching corpus: 3549, signal 164785/235357 (executing program) 2026/01/17 22:50:35 fetching corpus: 3599, signal 165648/236847 (executing program) 2026/01/17 22:50:35 fetching corpus: 3649, signal 166205/238130 (executing program) 2026/01/17 22:50:35 fetching corpus: 3699, signal 167208/239682 (executing program) 2026/01/17 22:50:36 fetching corpus: 3749, signal 168120/241193 (executing program) 2026/01/17 22:50:36 fetching corpus: 3799, signal 168823/242599 (executing program) 2026/01/17 22:50:36 fetching corpus: 3849, signal 169515/243963 (executing program) 2026/01/17 22:50:36 fetching corpus: 3899, signal 170300/245328 (executing program) 2026/01/17 22:50:36 fetching corpus: 3949, signal 170771/246540 (executing program) 2026/01/17 22:50:36 fetching corpus: 3999, signal 171578/248042 (executing program) 2026/01/17 22:50:36 fetching corpus: 4049, signal 172032/249241 (executing program) 2026/01/17 22:50:36 fetching corpus: 4099, signal 172595/250442 (executing program) 2026/01/17 22:50:36 fetching corpus: 4149, signal 173254/251719 (executing program) 2026/01/17 22:50:37 fetching corpus: 4199, signal 173807/252986 (executing program) 2026/01/17 22:50:37 fetching corpus: 4249, signal 174588/254372 (executing program) 2026/01/17 22:50:37 fetching corpus: 4299, signal 175064/255526 (executing program) 2026/01/17 22:50:37 fetching corpus: 4349, signal 175454/256656 (executing program) 2026/01/17 22:50:37 fetching corpus: 4399, signal 175915/257826 (executing program) 2026/01/17 22:50:37 fetching corpus: 4449, signal 176555/259061 (executing program) 2026/01/17 22:50:37 fetching corpus: 4499, signal 177480/260339 (executing program) 2026/01/17 22:50:37 fetching corpus: 4549, signal 178125/261578 (executing program) 2026/01/17 22:50:37 fetching corpus: 4599, signal 178625/262736 (executing program) 2026/01/17 22:50:37 fetching corpus: 4649, signal 179278/263901 (executing program) 2026/01/17 22:50:38 fetching corpus: 4699, signal 179749/265018 (executing program) 2026/01/17 22:50:38 fetching corpus: 4749, signal 180315/266145 (executing program) 2026/01/17 22:50:38 fetching corpus: 4799, signal 180903/267258 (executing program) 2026/01/17 22:50:38 fetching corpus: 4849, signal 181567/268440 (executing program) 2026/01/17 22:50:38 fetching corpus: 4899, signal 182125/269598 (executing program) 2026/01/17 22:50:38 fetching corpus: 4949, signal 182423/270615 (executing program) 2026/01/17 22:50:38 fetching corpus: 4999, signal 182891/271691 (executing program) 2026/01/17 22:50:38 fetching corpus: 5049, signal 183291/272747 (executing program) 2026/01/17 22:50:38 fetching corpus: 5099, signal 183810/273796 (executing program) 2026/01/17 22:50:38 fetching corpus: 5149, signal 184286/274864 (executing program) 2026/01/17 22:50:39 fetching corpus: 5199, signal 184781/275922 (executing program) 2026/01/17 22:50:39 fetching corpus: 5249, signal 185335/276989 (executing program) 2026/01/17 22:50:39 fetching corpus: 5299, signal 185791/278042 (executing program) 2026/01/17 22:50:39 fetching corpus: 5349, signal 186390/279150 (executing program) 2026/01/17 22:50:39 fetching corpus: 5399, signal 186799/280177 (executing program) 2026/01/17 22:50:39 fetching corpus: 5449, signal 187378/281225 (executing program) 2026/01/17 22:50:39 fetching corpus: 5499, signal 187753/282246 (executing program) 2026/01/17 22:50:39 fetching corpus: 5549, signal 188080/283242 (executing program) 2026/01/17 22:50:39 fetching corpus: 5599, signal 188477/284261 (executing program) 2026/01/17 22:50:39 fetching corpus: 5649, signal 188917/285252 (executing program) 2026/01/17 22:50:40 fetching corpus: 5699, signal 189263/286221 (executing program) 2026/01/17 22:50:40 fetching corpus: 5749, signal 189586/287197 (executing program) 2026/01/17 22:50:40 fetching corpus: 5799, signal 190023/288172 (executing program) 2026/01/17 22:50:40 fetching corpus: 5849, signal 190631/289240 (executing program) 2026/01/17 22:50:40 fetching corpus: 5899, signal 190998/290182 (executing program) 2026/01/17 22:50:40 fetching corpus: 5949, signal 191325/291116 (executing program) 2026/01/17 22:50:40 fetching corpus: 5999, signal 191769/292078 (executing program) 2026/01/17 22:50:40 fetching corpus: 6049, signal 192054/292982 (executing program) 2026/01/17 22:50:40 fetching corpus: 6099, signal 192485/293953 (executing program) 2026/01/17 22:50:40 fetching corpus: 6149, signal 192965/294912 (executing program) 2026/01/17 22:50:41 fetching corpus: 6199, signal 193472/295829 (executing program) 2026/01/17 22:50:41 fetching corpus: 6249, signal 193972/296779 (executing program) 2026/01/17 22:50:41 fetching corpus: 6299, signal 194271/297657 (executing program) 2026/01/17 22:50:41 fetching corpus: 6349, signal 194692/298575 (executing program) 2026/01/17 22:50:41 fetching corpus: 6399, signal 195028/299494 (executing program) 2026/01/17 22:50:41 fetching corpus: 6449, signal 195422/300362 (executing program) 2026/01/17 22:50:41 fetching corpus: 6499, signal 195855/301294 (executing program) 2026/01/17 22:50:41 fetching corpus: 6549, signal 196256/302142 (executing program) 2026/01/17 22:50:41 fetching corpus: 6599, signal 196696/302999 (executing program) 2026/01/17 22:50:42 fetching corpus: 6649, signal 197106/303903 (executing program) 2026/01/17 22:50:42 fetching corpus: 6699, signal 197617/304812 (executing program) 2026/01/17 22:50:42 fetching corpus: 6749, signal 197868/305592 (executing program) 2026/01/17 22:50:42 fetching corpus: 6799, signal 198175/306412 (executing program) 2026/01/17 22:50:42 fetching corpus: 6849, signal 198514/307236 (executing program) 2026/01/17 22:50:42 fetching corpus: 6899, signal 198823/308082 (executing program) 2026/01/17 22:50:42 fetching corpus: 6949, signal 199125/308917 (executing program) 2026/01/17 22:50:42 fetching corpus: 6999, signal 199480/309764 (executing program) 2026/01/17 22:50:42 fetching corpus: 7049, signal 199960/310610 (executing program) 2026/01/17 22:50:43 fetching corpus: 7099, signal 200347/311493 (executing program) 2026/01/17 22:50:43 fetching corpus: 7149, signal 200806/312352 (executing program) 2026/01/17 22:50:43 fetching corpus: 7199, signal 201175/313196 (executing program) 2026/01/17 22:50:43 fetching corpus: 7249, signal 201501/313999 (executing program) 2026/01/17 22:50:43 fetching corpus: 7299, signal 201819/314834 (executing program) 2026/01/17 22:50:43 fetching corpus: 7349, signal 202204/315675 (executing program) 2026/01/17 22:50:43 fetching corpus: 7399, signal 202494/316486 (executing program) 2026/01/17 22:50:43 fetching corpus: 7449, signal 202815/317314 (executing program) 2026/01/17 22:50:43 fetching corpus: 7499, signal 203147/318129 (executing program) 2026/01/17 22:50:44 fetching corpus: 7549, signal 203562/318917 (executing program) 2026/01/17 22:50:44 fetching corpus: 7599, signal 203989/319732 (executing program) 2026/01/17 22:50:44 fetching corpus: 7649, signal 204244/320508 (executing program) 2026/01/17 22:50:44 fetching corpus: 7699, signal 204692/321301 (executing program) 2026/01/17 22:50:44 fetching corpus: 7749, signal 205042/322033 (executing program) 2026/01/17 22:50:44 fetching corpus: 7799, signal 205316/322803 (executing program) 2026/01/17 22:50:44 fetching corpus: 7849, signal 205655/323565 (executing program) 2026/01/17 22:50:44 fetching corpus: 7899, signal 206023/324328 (executing program) 2026/01/17 22:50:44 fetching corpus: 7949, signal 206315/325079 (executing program) 2026/01/17 22:50:45 fetching corpus: 7999, signal 206878/325827 (executing program) 2026/01/17 22:50:45 fetching corpus: 8049, signal 207243/326590 (executing program) 2026/01/17 22:50:45 fetching corpus: 8099, signal 207622/327312 (executing program) 2026/01/17 22:50:45 fetching corpus: 8149, signal 207902/328037 (executing program) 2026/01/17 22:50:45 fetching corpus: 8199, signal 208277/328348 (executing program) 2026/01/17 22:50:45 fetching corpus: 8249, signal 208695/328348 (executing program) 2026/01/17 22:50:45 fetching corpus: 8299, signal 208867/328348 (executing program) 2026/01/17 22:50:45 fetching corpus: 8349, signal 209085/328348 (executing program) 2026/01/17 22:50:45 fetching corpus: 8399, signal 209287/328351 (executing program) 2026/01/17 22:50:45 fetching corpus: 8449, signal 209539/328351 (executing program) 2026/01/17 22:50:46 fetching corpus: 8499, signal 209901/328351 (executing program) 2026/01/17 22:50:46 fetching corpus: 8549, signal 210156/328351 (executing program) 2026/01/17 22:50:46 fetching corpus: 8599, signal 210447/328351 (executing program) 2026/01/17 22:50:46 fetching corpus: 8649, signal 210698/328351 (executing program) 2026/01/17 22:50:46 fetching corpus: 8699, signal 211036/328351 (executing program) 2026/01/17 22:50:46 fetching corpus: 8749, signal 211324/328355 (executing program) 2026/01/17 22:50:46 fetching corpus: 8799, signal 211751/328360 (executing program) 2026/01/17 22:50:46 fetching corpus: 8849, signal 212018/328360 (executing program) 2026/01/17 22:50:46 fetching corpus: 8899, signal 212329/328377 (executing program) 2026/01/17 22:50:47 fetching corpus: 8949, signal 212580/328378 (executing program) 2026/01/17 22:50:47 fetching corpus: 8999, signal 212890/328378 (executing program) 2026/01/17 22:50:47 fetching corpus: 9049, signal 213120/328382 (executing program) 2026/01/17 22:50:47 fetching corpus: 9099, signal 213394/328382 (executing program) 2026/01/17 22:50:47 fetching corpus: 9149, signal 213719/328393 (executing program) 2026/01/17 22:50:47 fetching corpus: 9199, signal 214006/328397 (executing program) 2026/01/17 22:50:47 fetching corpus: 9249, signal 214273/328397 (executing program) 2026/01/17 22:50:47 fetching corpus: 9299, signal 214597/328397 (executing program) 2026/01/17 22:50:47 fetching corpus: 9349, signal 214830/328401 (executing program) 2026/01/17 22:50:48 fetching corpus: 9399, signal 215154/328401 (executing program) 2026/01/17 22:50:48 fetching corpus: 9449, signal 215437/328401 (executing program) 2026/01/17 22:50:48 fetching corpus: 9499, signal 215782/328401 (executing program) 2026/01/17 22:50:48 fetching corpus: 9549, signal 216068/328401 (executing program) 2026/01/17 22:50:48 fetching corpus: 9599, signal 216467/328401 (executing program) 2026/01/17 22:50:48 fetching corpus: 9649, signal 216731/328401 (executing program) 2026/01/17 22:50:48 fetching corpus: 9699, signal 216949/328401 (executing program) 2026/01/17 22:50:49 fetching corpus: 9749, signal 217238/328401 (executing program) 2026/01/17 22:50:49 fetching corpus: 9799, signal 217516/328401 (executing program) 2026/01/17 22:50:49 fetching corpus: 9849, signal 217757/328401 (executing program) 2026/01/17 22:50:49 fetching corpus: 9899, signal 218115/328402 (executing program) 2026/01/17 22:50:49 fetching corpus: 9949, signal 218315/328402 (executing program) 2026/01/17 22:50:49 fetching corpus: 9999, signal 218612/328405 (executing program) 2026/01/17 22:50:49 fetching corpus: 10049, signal 218837/328405 (executing program) 2026/01/17 22:50:49 fetching corpus: 10099, signal 219167/328408 (executing program) 2026/01/17 22:50:49 fetching corpus: 10149, signal 219371/328408 (executing program) 2026/01/17 22:50:49 fetching corpus: 10199, signal 219592/328408 (executing program) 2026/01/17 22:50:50 fetching corpus: 10249, signal 219824/328411 (executing program) 2026/01/17 22:50:50 fetching corpus: 10299, signal 220086/328411 (executing program) 2026/01/17 22:50:50 fetching corpus: 10349, signal 220306/328412 (executing program) 2026/01/17 22:50:50 fetching corpus: 10399, signal 220555/328412 (executing program) 2026/01/17 22:50:50 fetching corpus: 10449, signal 220789/328414 (executing program) 2026/01/17 22:50:50 fetching corpus: 10499, signal 221133/328414 (executing program) 2026/01/17 22:50:50 fetching corpus: 10549, signal 221348/328414 (executing program) 2026/01/17 22:50:50 fetching corpus: 10599, signal 221655/328414 (executing program) 2026/01/17 22:50:50 fetching corpus: 10649, signal 221839/328414 (executing program) 2026/01/17 22:50:51 fetching corpus: 10699, signal 222164/328414 (executing program) 2026/01/17 22:50:51 fetching corpus: 10749, signal 222361/328416 (executing program) 2026/01/17 22:50:51 fetching corpus: 10799, signal 222546/328420 (executing program) 2026/01/17 22:50:51 fetching corpus: 10849, signal 222868/328420 (executing program) 2026/01/17 22:50:51 fetching corpus: 10899, signal 223100/328426 (executing program) 2026/01/17 22:50:51 fetching corpus: 10949, signal 223453/328426 (executing program) 2026/01/17 22:50:51 fetching corpus: 10999, signal 223764/328426 (executing program) 2026/01/17 22:50:51 fetching corpus: 11049, signal 224010/328426 (executing program) 2026/01/17 22:50:51 fetching corpus: 11099, signal 224156/328426 (executing program) 2026/01/17 22:50:52 fetching corpus: 11149, signal 224439/328426 (executing program) 2026/01/17 22:50:52 fetching corpus: 11199, signal 224693/328432 (executing program) 2026/01/17 22:50:52 fetching corpus: 11249, signal 224908/328432 (executing program) 2026/01/17 22:50:52 fetching corpus: 11299, signal 225199/328437 (executing program) 2026/01/17 22:50:52 fetching corpus: 11349, signal 225404/328438 (executing program) 2026/01/17 22:50:52 fetching corpus: 11399, signal 225615/328451 (executing program) 2026/01/17 22:50:52 fetching corpus: 11449, signal 225870/328454 (executing program) 2026/01/17 22:50:52 fetching corpus: 11499, signal 226161/328454 (executing program) 2026/01/17 22:50:52 fetching corpus: 11549, signal 226592/328455 (executing program) 2026/01/17 22:50:53 fetching corpus: 11599, signal 226884/328455 (executing program) 2026/01/17 22:50:53 fetching corpus: 11649, signal 227065/328455 (executing program) 2026/01/17 22:50:53 fetching corpus: 11699, signal 227347/328455 (executing program) 2026/01/17 22:50:53 fetching corpus: 11749, signal 227523/328456 (executing program) 2026/01/17 22:50:53 fetching corpus: 11799, signal 227807/328456 (executing program) 2026/01/17 22:50:53 fetching corpus: 11849, signal 228010/328457 (executing program) 2026/01/17 22:50:53 fetching corpus: 11899, signal 228259/328458 (executing program) 2026/01/17 22:50:53 fetching corpus: 11949, signal 228536/328470 (executing program) 2026/01/17 22:50:53 fetching corpus: 11999, signal 228770/328470 (executing program) 2026/01/17 22:50:54 fetching corpus: 12049, signal 228981/328470 (executing program) 2026/01/17 22:50:54 fetching corpus: 12099, signal 229195/328472 (executing program) 2026/01/17 22:50:54 fetching corpus: 12149, signal 229393/328472 (executing program) 2026/01/17 22:50:54 fetching corpus: 12199, signal 229627/328474 (executing program) 2026/01/17 22:50:54 fetching corpus: 12249, signal 229848/328477 (executing program) 2026/01/17 22:50:54 fetching corpus: 12299, signal 230089/328477 (executing program) 2026/01/17 22:50:54 fetching corpus: 12349, signal 230344/328477 (executing program) 2026/01/17 22:50:54 fetching corpus: 12399, signal 230502/328477 (executing program) 2026/01/17 22:50:54 fetching corpus: 12449, signal 230648/328478 (executing program) 2026/01/17 22:50:54 fetching corpus: 12499, signal 230923/328478 (executing program) 2026/01/17 22:50:55 fetching corpus: 12549, signal 231161/328480 (executing program) 2026/01/17 22:50:55 fetching corpus: 12599, signal 231454/328480 (executing program) 2026/01/17 22:50:55 fetching corpus: 12649, signal 231633/328480 (executing program) 2026/01/17 22:50:55 fetching corpus: 12699, signal 231875/328480 (executing program) 2026/01/17 22:50:55 fetching corpus: 12749, signal 232148/328480 (executing program) 2026/01/17 22:50:55 fetching corpus: 12799, signal 232316/328480 (executing program) 2026/01/17 22:50:55 fetching corpus: 12849, signal 232494/328480 (executing program) 2026/01/17 22:50:55 fetching corpus: 12899, signal 232697/328480 (executing program) 2026/01/17 22:50:55 fetching corpus: 12949, signal 232900/328480 (executing program) 2026/01/17 22:50:55 fetching corpus: 12999, signal 233088/328486 (executing program) 2026/01/17 22:50:56 fetching corpus: 13049, signal 233248/328486 (executing program) 2026/01/17 22:50:56 fetching corpus: 13099, signal 233486/328486 (executing program) 2026/01/17 22:50:56 fetching corpus: 13149, signal 233682/328486 (executing program) 2026/01/17 22:50:56 fetching corpus: 13199, signal 233853/328486 (executing program) 2026/01/17 22:50:56 fetching corpus: 13249, signal 234121/328486 (executing program) 2026/01/17 22:50:56 fetching corpus: 13299, signal 234293/328491 (executing program) 2026/01/17 22:50:56 fetching corpus: 13349, signal 234519/328491 (executing program) 2026/01/17 22:50:56 fetching corpus: 13399, signal 234701/328491 (executing program) 2026/01/17 22:50:56 fetching corpus: 13449, signal 234858/328491 (executing program) 2026/01/17 22:50:57 fetching corpus: 13499, signal 235065/328491 (executing program) 2026/01/17 22:50:57 fetching corpus: 13549, signal 235242/328491 (executing program) 2026/01/17 22:50:57 fetching corpus: 13599, signal 235423/328491 (executing program) 2026/01/17 22:50:57 fetching corpus: 13649, signal 235628/328491 (executing program) 2026/01/17 22:50:57 fetching corpus: 13699, signal 235835/328491 (executing program) 2026/01/17 22:50:57 fetching corpus: 13749, signal 236081/328493 (executing program) 2026/01/17 22:50:57 fetching corpus: 13799, signal 236228/328493 (executing program) 2026/01/17 22:50:57 fetching corpus: 13849, signal 236452/328493 (executing program) 2026/01/17 22:50:57 fetching corpus: 13899, signal 236663/328496 (executing program) 2026/01/17 22:50:57 fetching corpus: 13949, signal 236859/328496 (executing program) 2026/01/17 22:50:57 fetching corpus: 13999, signal 237125/328496 (executing program) 2026/01/17 22:50:58 fetching corpus: 14049, signal 237349/328496 (executing program) 2026/01/17 22:50:58 fetching corpus: 14099, signal 237544/328496 (executing program) 2026/01/17 22:50:58 fetching corpus: 14149, signal 237969/328496 (executing program) 2026/01/17 22:50:58 fetching corpus: 14199, signal 238131/328496 (executing program) 2026/01/17 22:50:58 fetching corpus: 14249, signal 238559/328496 (executing program) 2026/01/17 22:50:58 fetching corpus: 14299, signal 238764/328496 (executing program) 2026/01/17 22:50:58 fetching corpus: 14349, signal 238954/328496 (executing program) 2026/01/17 22:50:58 fetching corpus: 14399, signal 239189/328499 (executing program) 2026/01/17 22:50:58 fetching corpus: 14449, signal 239436/328500 (executing program) 2026/01/17 22:50:59 fetching corpus: 14499, signal 239638/328500 (executing program) 2026/01/17 22:50:59 fetching corpus: 14549, signal 239831/328500 (executing program) 2026/01/17 22:50:59 fetching corpus: 14599, signal 240040/328501 (executing program) 2026/01/17 22:50:59 fetching corpus: 14649, signal 240243/328501 (executing program) 2026/01/17 22:50:59 fetching corpus: 14699, signal 240386/328501 (executing program) 2026/01/17 22:50:59 fetching corpus: 14749, signal 240551/328501 (executing program) 2026/01/17 22:50:59 fetching corpus: 14799, signal 240736/328501 (executing program) 2026/01/17 22:50:59 fetching corpus: 14849, signal 240935/328505 (executing program) 2026/01/17 22:50:59 fetching corpus: 14899, signal 241162/328505 (executing program) 2026/01/17 22:50:59 fetching corpus: 14949, signal 241316/328505 (executing program) 2026/01/17 22:50:59 fetching corpus: 14999, signal 241535/328505 (executing program) 2026/01/17 22:51:00 fetching corpus: 15049, signal 241700/328505 (executing program) 2026/01/17 22:51:00 fetching corpus: 15099, signal 241870/328505 (executing program) 2026/01/17 22:51:00 fetching corpus: 15149, signal 242118/328506 (executing program) 2026/01/17 22:51:00 fetching corpus: 15199, signal 242327/328510 (executing program) 2026/01/17 22:51:00 fetching corpus: 15249, signal 242518/328510 (executing program) 2026/01/17 22:51:00 fetching corpus: 15299, signal 242673/328510 (executing program) 2026/01/17 22:51:00 fetching corpus: 15349, signal 242892/328511 (executing program) 2026/01/17 22:51:00 fetching corpus: 15399, signal 243093/328511 (executing program) 2026/01/17 22:51:01 fetching corpus: 15449, signal 243296/328511 (executing program) 2026/01/17 22:51:01 fetching corpus: 15499, signal 243510/328511 (executing program) 2026/01/17 22:51:01 fetching corpus: 15549, signal 243719/328511 (executing program) 2026/01/17 22:51:01 fetching corpus: 15599, signal 243924/328511 (executing program) 2026/01/17 22:51:01 fetching corpus: 15621, signal 243992/328511 (executing program) 2026/01/17 22:51:01 fetching corpus: 15621, signal 243992/328511 (executing program) 2026/01/17 22:51:03 starting 8 fuzzer processes 22:51:03 executing program 0: io_setup(0x1, &(0x7f0000000000)=0x0) io_submit(r0, 0x1, &(0x7f0000000140)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x2, 0x1, 0xffffffffffffffff, &(0x7f0000000040)="2a3037c3e1e2195c46940740e6642d9d674b930ed9c41802c57d6103c5b1a96f06b48ce05d7f3f5f23f3d38fc248462f62ca58cc69f62953e05f18f17bf9e55d26e35fbbc3f1daa5d49fd6a41cd369b50a24827ea170d3e1cda7ca7b3ab74d72f312eb7d13f2444e97791637c106dfb5871ad108eebb191f9b7953d18296c5ea25dc78dadd781050af67", 0x8a, 0x11bd7590, 0x0, 0x3}]) r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) r2 = dup2(r1, r1) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2, {0x1ff}}, './file0\x00'}) r4 = syz_open_dev$hidraw(&(0x7f00000001c0), 0xffffffffffffff5e, 0x40) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r3, 0x50009418, &(0x7f0000000280)={{r4}, 0x0, 0x4, @inherit={0x58, &(0x7f0000000200)={0x1, 0x2, 0x7, 0x1ff, {0x2, 0xef8, 0x2, 0x2, 0x2}, [0x134f, 0x7]}}, @devid}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000001280)={{0x1, 0x1, 0x18, r3, {r4}}, './file0\x00'}) ioctl$FS_IOC_SETVERSION(r3, 0x40087602, &(0x7f00000012c0)=0x3) r7 = openat2$dir(0xffffffffffffff9c, &(0x7f0000001300)='./file0\x00', &(0x7f0000001340)={0x600002, 0x30}, 0x18) r8 = syz_open_dev$tty1(0xc, 0x4, 0x2) ppoll(&(0x7f0000001380)=[{r7, 0x14}, {r3, 0x84}, {r8, 0xa08a}, {r2}, {r5, 0x140}, {r2, 0x20a1}, {r2, 0x1000}, {r2, 0x40}, {r3, 0x163}, {r3, 0x4010}], 0xa, &(0x7f0000001400), &(0x7f0000001440)={[0xb6e]}, 0x8) r9 = ioctl$TUNGETDEVNETNS(r3, 0x54e3, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000001580)={{0x1, 0x1, 0x18, r6, {0x2}}, './file0/file0\x00'}) io_submit(0x0, 0x2, &(0x7f0000001600)=[&(0x7f0000001500)={0x0, 0x0, 0x0, 0x6, 0x0, r9, &(0x7f0000001480)="247a838357bf697d492560be5ee3f16cd2ad069c413004e0f3fe9c9055fd86ec36b1da860269d693d656d9278dc97842f5c8534681ec58ed5a5362946a4c0c0f2e11ba3c7f12d1b361e0bb7f4045df6279498c22", 0x54, 0xfffffffffffffff8, 0x0, 0x2}, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x5, 0x100, r6, &(0x7f0000001540)="a41b794da7bcbdf69de40d2b1c1ca57691260863ad3be13c1e9406f4dee1630799acb5a2f89679830dfc09d86a", 0x2d, 0x401, 0x0, 0x0, r10}]) io_pgetevents(r0, 0x4, 0x1, &(0x7f0000001640)=[{}], 0x0, &(0x7f00000016c0)={&(0x7f0000001680)={[0x6]}, 0x8}) r11 = openat$full(0xffffffffffffff9c, &(0x7f0000001700), 0x404400, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r11, 0xc038943b, &(0x7f0000001780)={0x10000, 0x40, '\x00', 0x1, &(0x7f0000001740)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r12 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r12, 0x82307202, &(0x7f00000017c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 22:51:03 executing program 1: r0 = syz_open_dev$hidraw(&(0x7f0000000000), 0x6, 0x745080) ioctl$INCFS_IOC_PERMIT_FILL(r0, 0x40046721, &(0x7f0000000040)) r1 = open(&(0x7f0000000080)='./file0\x00', 0x501000, 0x40) ioctl$PERF_EVENT_IOC_ID(r1, 0x80082407, &(0x7f00000000c0)) move_mount(r0, &(0x7f0000000100)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x32) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000180)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$TIOCL_PASTESEL(r1, 0x541c, 0xfffffffffffffffe) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x9) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) copy_file_range(r2, 0x0, r0, &(0x7f0000000400), 0x8000, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000440)={{0x1, 0x1, 0x18, r3, {0x96b}}, './file0\x00'}) setsockopt$inet_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000000480)={0x6}, 0x4) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r3, 0xf503, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r4, 0x40189429, &(0x7f00000004c0)={0x1, 0x4, 0x3}) connect$inet6(r1, &(0x7f0000000500)={0xa, 0x4e23, 0x5, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x5c8}, 0x1c) read(r4, &(0x7f0000000540)=""/107, 0x6b) perf_event_open(&(0x7f00000005c0)={0xb948aa096a476030, 0x80, 0x7f, 0x3f, 0x40, 0x7f, 0x0, 0x5, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x20, 0x2, @perf_config_ext={0x8, 0xb20}, 0x2, 0xfc00000000000000, 0x1, 0x9, 0x0, 0xfffffffa, 0x2, 0x0, 0x10001, 0x0, 0x41}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r5 = dup3(r0, r3, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f0000000640)='^({\x00') ioctl$TCGETS(r1, 0x5401, &(0x7f0000000680)) 22:51:03 executing program 2: sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x118, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x33}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffc01}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1c}, @IPVS_SVC_ATTR_FWMARK={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x6c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010102}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_batadv\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_macvtap\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}]}, 0x118}, 0x1, 0x0, 0x0, 0x2000c800}, 0x10) sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x10, 0x3f8, 0x300, 0x70bd2c, 0x25dfdbff, "", ["", ""]}, 0x10}}, 0x24008040) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x1, 0x70bd27, 0x25dfdbfe, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x40040) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {}, {0x14, 0x19, {0xffff, 0x5, 0x3f, 0x7}}}, ["", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x40) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000500)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x40, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040805}, 0x24004004) pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80820100}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x28, 0x0, 0x320, 0x70bd2a, 0x25dfdbff, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x20008040) sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x68, 0x0, 0x300, 0x70bd2b, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x3, @link='broadcast-link\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x44040}, 0x4000) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x2c, 0x5, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x2c}}, 0x8841) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000009c0)='./file0\x00', 0x2, 0x28) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000a00), 0x8202, 0x0) sendmsg$NL80211_CMD_SET_PMK(r3, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x28, 0x0, 0x2, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "fd5ebcd5330eb3081607d044eb448a3a"}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x20040000) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000f00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000b80)={0x330, 0x0, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x98, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7f, @private2, 0x101}}, {0x14, 0x2, @in={0x2, 0x4e22, @broadcast}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x200, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80}}, {0x14, 0x2, @in={0x2, 0x4e20, @private=0xa010100}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6e34}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_SOCK={0x88, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x800}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x80000001}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7ff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffff801}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffffffc1}]}, @TIPC_NLA_BEARER={0x4}, @TIPC_NLA_MEDIA={0x124, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x73}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x64a6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x57dc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa3}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf9e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}]}, @TIPC_NLA_BEARER={0xbc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x6d63, @private2, 0xda}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'ib', 0x3a, 'veth1_to_team\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @multicast1}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}]}, @TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'ib', 0x3a, 'veth0_to_batadv\x00'}}]}]}, 0x330}, 0x1, 0x0, 0x0, 0x1}, 0x88d0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000001000)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x34, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {{}, {}, {0x18, 0x17, {0x9, 0x4, @udp='udp:syz1\x00'}}}, ["", "", "", ""]}, 0x34}}, 0x40) r4 = socket$inet_udp(0x2, 0x2, 0x0) tee(r2, r4, 0x1ff, 0x1) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r1, &(0x7f0000001140)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001100)={&(0x7f0000001080)={0x7c, 0x0, 0x800, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0x37}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x6e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x18}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xb}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x22}]}, 0x7c}, 0x1, 0x0, 0x0, 0xd4}, 0x40000) close_range(0xffffffffffffffff, r2, 0x2) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000011c0)={@loopback, @local}, 0xc) 22:51:03 executing program 3: ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(0xffffffffffffffff, 0xc0605345, &(0x7f0000000000)={0x7e3, 0x0, {0x0, 0x2, 0x5, 0x1, 0x4975}, 0x4fe}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xdc5, 0x1}}, './file0\x00'}) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x8000, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@cachetag}, {@access_client}, {@dfltgid={'dfltgid', 0x3d, 0xee00}}, {@noextend}, {@access_client}, {@afid={'afid', 0x3d, 0x1}}], [{@fowner_gt={'fowner>', r1}}]}}) newfstatat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) write(r0, &(0x7f0000000380)="d0af3b7a9c56a68094fbe35b9487067ea137ba813d8f23637343bddd5d219b7a1a224037f8f08b8e164206a66dec8a8a3d5af17ffdc7c8cbb047c0d029dc7447061ab40f51aed7f0828baa62cc65cf714b907c50558e2c56d1841e0d035f0dc9ce3bd5224b60919d9ba2b6fd99704fd54e57476955d8657241ff44a64db5b24b3468908f8cb203e2eae93e631740fdad73ad96afd5d6346c1ae644dc7bb63f87ea0c0f3debf7950ef88b1562814f9d45453f8a6c71b801885c4b330551ac97ae237ce54a1fe1622755f81da23d13fc", 0xcf) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000480)={'caif0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, &(0x7f0000000500)={{0x1, 0x1, 0x18, r0, @in_args={0x1}}, './file0\x00'}) r5 = syz_mount_image$iso9660(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0xf3, 0x4, &(0x7f0000000800)=[{&(0x7f00000005c0)="6d55be3c5a9ac8ecdf9cba7a039759ca7265ea135ede03d4af4724c59b09c11f72c8c03127337a746e3312f5e4604f1d61dc9143f76eab5fefc4b8cd0cae65893f3d2e9bd5c394caa4e822b3d20c5b70af22245810a2706089817f9c54c6c80f8c317647b4a8f5d0dbaf8466dfdcb4e0e7454d58856371e0a2efaf1dea52806b706141e8177bd3047423b289d94ac375dd9064137a25d42b4c4d0641c7a19200c6e31186971607b1ad0943f516eb41b12a0fa310fb0bda5a78498bbf564578", 0xbf, 0x6}, {&(0x7f0000000680)="3f9350492af07bc061d6a4212dedfa48ffa586de5eba84720998485b862278937e16c6bd325f4ead039f7163554065225325370738a28d2a5d7797863fe3b4f6f658d32cccd800370f4c95d2b9251acf8b0f6bb89b4d15f5ce2c0c0168f7f8baa870b8ed1c32472bde5f95c9276d17fa7b8d4fcffe01ae6093b3ed318bccbd93c451df83c09c28a0366c08e174e91d1253b82e182be091302ef7ebc94565900993fbefa0c48642c1b2539ac98b68c7b26fbe9c8bf74436", 0xb7, 0x5}, {&(0x7f0000000740)='h', 0x1, 0x2}, {&(0x7f0000000780)="80b6b84fdcbcf2bd386c09ff5a46a8d197ddaad03eabcc3a36c58665c8e7efbc3e6011e2d5143b58f0edef6c23ee08879b64a0f3fd5e77339f88bddd3c6232ca236d857564df357efe2d8d74ff6b2f6ecdf777a15d8f2d3c2a", 0x59, 0x4}], 0x1000001, &(0x7f0000000880)={[{@nojoliet}, {@map_normal}], [{@obj_user={'obj_user', 0x3d, '@'}}]}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, &(0x7f00000008c0)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) execveat(r3, &(0x7f0000000900)='./file0\x00', &(0x7f0000000b00)=[&(0x7f0000000940)='&,**-,{^^-\'[{.\'\xbb.\x00', &(0x7f0000000980)='{#:},\xc7%).*]\'\x00', &(0x7f00000009c0)='9p\x00', &(0x7f0000000a00)='\x00', &(0x7f0000000a40)='$\x00', &(0x7f0000000a80)='$,&\x00', &(0x7f0000000ac0)='\x00'], &(0x7f0000000bc0)=[&(0x7f0000000b40)='wfdno', &(0x7f0000000b80)=']#\x00'], 0x400) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000002300)={{{@in=@multicast1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@mcast2}}, &(0x7f0000002400)=0xe8) fstat(r5, &(0x7f0000002440)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$ext4(&(0x7f0000000c00)='ext2\x00', &(0x7f0000000c40)='./file1\x00', 0x5, 0x4, &(0x7f0000001040)=[{&(0x7f0000000c80)="4884448207709e134c5cef01e5bdca1ca755e864504488394ab7fd96106860cceb801c1ca4d8f5d7a5c84cf9d1320298b1f409b9906c5431c2a3a762fe118ce1bac03115b0078789ef143227969bf88ae1171f51a65184aaf1a5da4664df7cfed74c569abd83aae19dda9533d558a953dbc04d3e0ab334036b4b13498a0b5192e7b1f532d422c9e11bea0a8255d2d19819fc9c335fd39d33237f1894e084bd07f3361c0631509c1cadaa3ad765b04ee825199332ed8ef5767bec389e0ff56bebf035a824461707a2c5ced55deb04962f5f45ad8a6d6477ee43c813ad17ce75adf0b02f3d3839", 0xe6, 0x55df}, {&(0x7f0000000d80)="261b283e5248d902f474dad58565c6145d8aab0ce9392338c893e670a214b0aacec706355b0a689fb423a270a35a5614ec8cf11e796c76994b20d4a8593a84474500d3d4f4b4b2ca6301b803d18d4840838be66360abfffefcd96de963d973d177ff922692dc9cc447041f1603bfe79269b383f19a4ee32224456204411bde31a270c42033e78a171cd8c3c1495714824a8e44b5ab11c431a876f9891ebecffc5bcefbf37a00577c2c7af5ced570f3a17f613c8dfa2132125e0a9d9895d04a07497ae8448b062759283f002f6f", 0xcd, 0x7}, {&(0x7f0000000e80)="cfcd538f7b779e69c37f625cb00133a4ccaccf35b4a49168c6eb327de5a1e1b63d31b7a2b5557232178a093ccc840843cea7d9d371f54766f1bd5717c8045d88e2140ff6d0775bda08da4d5943d575a6ad461000db0b27c4b2e528160a5ecbe75a786563525065c84e9509d8f1911217397e25a7f0bb330ca965c477ce4de614cc81bf0992e5ceefb0ba0a42bb617e34bd530f03dbd98093f94a21f815fa0702c5a629f9b449eadde120673c7bce03c87ad3989b1fbb56cb640e075e4ebe149d160a", 0xc2, 0x2c53}, {&(0x7f0000000f80)="041eb109ddd368d80b740a150079902d717f027b04ef6cae531090c75f510bc0d0088e12a512d7eda56e7c1494a8975de4386bee6da402ef5c1558d9c23ddf08e1cd25f7d3389fa2c501a9ba55661351e2d5556dadc7ba3f37fa63395e052e1a1801b554715437bb4935f6f01e7e4059d3b659dfea54840d495af7b4dae271abfbf1ec7d588ffc2f6f8750", 0x8b, 0xfffffffffffffffe}], 0x240013, &(0x7f00000024c0)={[{@grpid}, {@journal_dev={'journal_dev', 0x3d, 0xffff}}, {@block_validity}, {@noinit_itable}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5}}], [{@dont_hash}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@obj_role={'obj_role', 0x3d, 'dfltgid'}}, {@mask={'mask', 0x3d, '^MAY_READ'}}, {@uid_lt={'uid<', r7}}, {@subj_type={'subj_type', 0x3d, '*$['}}, {@fowner_gt={'fowner>', r2}}, {@euid_gt={'euid>', r8}}, {@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}]}) r9 = syz_io_uring_complete(0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r9, &(0x7f0000002d80)={&(0x7f0000002600)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002d40)={&(0x7f0000002640)={0x6f0, 0x0, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x340, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xb8, 0x3, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1f}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '^MAY_READ'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3f}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3f0}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x20}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xff}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '@'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '!/*#\x10)\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'caif0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x725}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffff}]}]}, @ETHTOOL_A_BITSET_VALUE={0xc6, 0x4, "5db808117d805bab4c34b7ec6d8ac10c3d777590e6f3731c0ebfa05114091cbf1a76e1cbe8d785a9e140b9f7d18d8cffa0560923ddec8aa66420e11a8033614f51544531d84745c5cd2f2538c05699e5b8a1e95e7159b0d5f55f6fd283acf3ad07af030a33d9d966528d97b39e680142b595f2718bd0747792a036bca15e598b79960038c4f67dcbda1c1cbb7b43105ba07ab64da6bbb9df229e3c889226f5695182488868cbfcd5f6bb39ecf0f6e1dcfcc7dc69ccc4b22a8eb6fa25d3785acfba69"}, @ETHTOOL_A_BITSET_VALUE={0xee, 0x4, "e0de4d3e83951abb63d2969f079896b65e05abfc1854ae27adae0b052e399087233a48b5f21a267f93060ec550d59076614104f71a435b7c14055e43a478f3e4809619f640041af9cf8affe62ed33aeae485690ab5da773d402de45a4cdb582322f715edb1369c2511e34cd21f05f0022ded63458d43f50b5caa31d96523e0628aedf2d2aa40cc732f6a1d7da2a6b159157d22e1f705183cc2ae69217bc103616ee825b9d9a5b05e008033c4e5e7f7381640d32021ecff7978709ad386271e94df1cf3f99eee34aae13ec0f36df9fc4d9f071ca14bd2e90c3226fe6a8fff9c85a55cc40443d43f36c959"}, @ETHTOOL_A_BITSET_VALUE={0xca, 0x4, "2fca50bf200db4a396ceafe7dc999cfdf9370675aa0984430838ee79df1e4198016d3e774d28e0231d79be0723f0ca1675a63ffe3b29c6461bb1088da60c7b71dd9e7f43a5e39994cd00a363f02a1d52a5031216355d50762a93e6c52762feefec51561944cc08a4d4401b9814b1f3430e26958eef905d9e399ac542fb3adb6538ec573988f76cfdb023b5b4a84111bb38bc3b4033a0e91adec8b6e88327fccd85906edabd4203292c377c9afefd52fe8ecd69906bb81256b3383e5015efde11200f3a39c2f6"}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xac, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xa3, 0x5, "d0829478bf10ce82b4c137732d003d86fe276f993ab3beca7dc540ddf7e5b8a1ae1c846fc33fd492e4142e47b0378146e5cd63fa9f25dc9654c77def28214f6938883f3ab750112e9e30f3a7d40494feda0870b2705cea1bb51e28b9bb5e83809ed3c765c2ddcfedb4b12fd225309318c963397059a2e2722d178a6f3987c0965ba9696f27a354ac099f29e68e8f2d0bdfe4ef9d65024ddecd398fd9ae5e87"}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x2f0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xbd, 0x5, "22aee39eb70b4d459ff37b8bc2ffa081a24a53ae770003bee8058939b873fc3db356848f1dfe203d0c5b60760b7d649f86afded73bd2b32c1dab6e38e73683f7d81e6ae3f6528398938b2b6d13000835fdeb6f5f1b76ae21b46b218c6cbec5dc15c5e7a3b94749015bf99ca0735870a694e1b4f9746cf01ca4123fec0dd4479fa637e210217b4f173d0031c6a0437b09ce08ec619582c6199149e1965ef2d727e89edb279bc8dad35bc662d6e5f14b9129919608ae763d9afc"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xfffffff7}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x400}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8000}, @ETHTOOL_A_BITSET_MASK={0xa1, 0x5, "69113c7ed7ab7dee2a56640b914609c3a14ee30f15d3f013d23543cd5ecfbca69b4e4c0cb1dd028e82a4e535720413fbc1dcf788b85dd7a9e5d3bc55d24500f7fda09d1fc4482ded424400a622d830a78b5d760f53e8b3d5054791070234bd5f65f8cebbb8ca7ce77b1013cec4325c617cf65c1986c7aec88230ed48da8ec507d24bed5f6e85e3db5ccc9963d55dad3247a57a001d4966d1be981000ea"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1}, @ETHTOOL_A_BITSET_BITS={0x13c, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'func'}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\',::/\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1ff}]}, {0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '*$['}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x16, 0x2, '&,**-,{^^-\'[{.\'\xbb.\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '(@)#\\/-/[\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xb1ae}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'uid<'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x200}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '&*@\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000001}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3ff}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\\\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '/\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}]}, @ETHTOOL_A_BITSET_MASK={0x2a, 0x5, "689432373a6aa81f7c0c3ed1a8684df286fa4f473a922b3cd530e6222cea5211a63bb7beb503"}]}]}, 0x6f0}, 0x1, 0x0, 0x0, 0x10}, 0x20040001) pwritev(r9, &(0x7f0000003340)=[{&(0x7f0000002dc0)="0ed2598a40e33b96f5aba83928edf805f19fa1ab4e68dc9f134b39902548d23c4d1728a49391d8d8b0769edc06ac5a990622c31c5437170b76ddcb60e6d75019a9bb25e58d50390b47a4709da592f4758757ee268818417d637717343248d5df9a", 0x61}, {&(0x7f0000002e40)="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", 0xfe}, {&(0x7f0000002f40)="5082a8e437478cc16f9eef68a0051c8eea2909df69ab72e2a8c00d922f45a8da8c74fabe54d7743b6da2dab797fcdce03722c1e7fb4975a606a5bfc7cf7ecc5bff91fd74cd1ac0bb3f2a22205f80ef20c545d99cc6d1362a04f2a1f210039751ef6492ac1dfe42840a6a128c60425606248f4f016101fdd9bcef95c3d5f3c274e761adc058eeef1d100b7fd1b5f4db3b2d5d7583d560a7ab273687322709f390b95eb4096d", 0xa5}, {&(0x7f0000003000)="f797e8c5463e2dfa77a9efd366573e8e6b5f965137b645f3e959621c58bb8bd6eac2b61d400d05756caa895ed10939cf03993e0c125deb6fa12f7da30b1bbd0cf93c03f4f1935bd4313110d9027a768232ec4e597e722e3c7fb9ab0eb6d4bf", 0x5f}, {&(0x7f0000003080)="7971dbe56c0781f095f31dc86cd494abec07914599ae67c2d97f7e46b11e3d41c730554c99dff197ead889b5be4c8c874b95dd7d892c1a426a665898ee079a7b2c17b5f507e59d7df5758c014d08911ec4b5705dc055f64ad32583271097a1317ca2b8bc3869722ae98b4b3c0f990995eb3bd0d2eb199fac01c2a946ee7dbd8bf5a5fdb624b87b74e7dd12cd1386802d5a1fc985186e25ae5c6a2de6", 0x9c}, {&(0x7f0000003140)="fa155614a024a4e85f6ca1de4c1818b5396f61dc06fe04f972ca7007fe54ba008ff50a4db60115d82ef1badb659f578d84fa3da823b9b521afd4779fc21202f72b0a3b1ae0be00fd4108c1012fa8add54277035143a1b7d07e9c18d15652a9ddaef31e7c4571358cf5d5b0dbd7ba83fa648454870bb7154eebfa6aed8e4f58494fc9a3497112bc3e0f880d940b8ece15145f22", 0x93}, {&(0x7f0000003200)="e4f98083419b8097498b", 0xa}, {&(0x7f0000003240)="8335c0ace37d5105fd432a858f6cb56735549a576745612cbc18c3bca7818765bb8cecaa7eff2a3dd0f50ab858afc3ace76197", 0x33}, {&(0x7f0000003280)="e93d63bf777c3be34c8237acb2223b6094fc0c1fedf5237d53c423ca11244a79e8b4f7d28852b0a34eba9fb9a5deb4fe4a223c6410e93535ed2659abf114087b0b89a020d12282c7c5d0a4330c239449742c7104d710a99653cafe0f2ae87786ee4aa9cb83af620c56af3183", 0x6c}, {&(0x7f0000003300)="9733aad7466d3a397f5d32450e70785eb24b76", 0x13}], 0xa, 0xffffff60, 0x68e) preadv(r6, &(0x7f0000004680)=[{&(0x7f0000003400)=""/143, 0x8f}, {&(0x7f00000034c0)=""/45, 0x2d}, {&(0x7f0000003500)=""/173, 0xad}, {&(0x7f00000035c0)=""/4096, 0x1000}, {&(0x7f00000045c0)=""/97, 0x61}, {&(0x7f0000004640)=""/35, 0x23}], 0x6, 0x9, 0x2) preadv2(0xffffffffffffffff, &(0x7f00000048c0)=[{&(0x7f0000004740)=""/201, 0xc9}, {&(0x7f0000004840)=""/110, 0x6e}], 0x2, 0x4, 0x2, 0x10) [ 89.357274] audit: type=1400 audit(1768690263.423:7): avc: denied { execmem } for pid=272 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 22:51:03 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff9) r1 = add_key(&(0x7f0000000080)='.request_key_auth\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000100)="aa726a8b74dbf4688ec7", 0xa, r0) r2 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, r0) add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, r0) r3 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x3}, 0x0, 0x0, r0) r4 = request_key(&(0x7f0000000340)='big_key\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)='syz', r3) add_key(&(0x7f00000002c0)='cifs.idmap\x00', &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r4) r5 = add_key$keyring(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x3}, 0x0, 0x0, r1) add_key$keyring(&(0x7f0000000400), &(0x7f0000000440)={'syz', 0x0}, 0x0, 0x0, r5) add_key(&(0x7f0000000500)='cifs.spnego\x00', &(0x7f0000000540)={'syz', 0x3}, &(0x7f0000000580)="17d25c6353c73d940232a1b0c2ac2df12beecbf20564a0aa042430e58900f1a412bb8c4d5a8276b94dc30c4e670358ace35fb800f164872184133ccacb16d8aa168d47aadc968807e2a5817b9828c8e57f41cfc437af75d899a89a853e263444ad1e0d93ccf1a66165402c71b8848c17df88a4a95e125e18313b08e79c823cb07a8b93094bbfd0066b78a4e7f4ea0f0db262a3ed5c6053e2b23162c1b2363f09ffe800efd580aef3ef58f0ca9602918600e9331a24b40d1f9a9ef8f1de31d788623555d7fcef9df77716989cc56342c3700d8658898fc540bf7b99a2e557170265cc999e7508400889d44f3c", 0xec, r0) r6 = request_key(&(0x7f0000000680)='id_legacy\x00', &(0x7f00000006c0)={'syz', 0x1}, &(0x7f0000000700)='-.*\'\xd7\x00', r1) r7 = add_key(&(0x7f0000000740)='trusted\x00', &(0x7f0000000780)={'syz', 0x0}, &(0x7f00000007c0)="90904b1d7707c113571c7bf530c0f6d5deccbc843a27735478ba4daaafed1e8f1aa02f211b12fc6e35478554748d69c7c1e68912df80379ee9f85344cf8390eb113c40156be6421b17627485701d4f4a873d7ea140323fa4509356468c7db189c2bebaa164159558ffb73ca34da0ca8ad4ff3db858093e7a6be9f73ceaf4ee6baff4d4b1f03959a6186a79a4aeb488038c99fc926fa6c572f0e00e36b96b363112d7b49c533a5192cead6e38", 0xac, r1) keyctl$KEYCTL_MOVE(0x1e, r4, r6, r7, 0x1) r8 = add_key$fscrypt_v1(&(0x7f0000000880), &(0x7f00000008c0)={'fscrypt:', @desc4}, &(0x7f0000000900)={0x0, "6cea411e07fdcbd9ccac8ad64310e094b4e37d3dde04fd606163c0c52afbe19905ca9a4ea28146b6bccb4ef2619cabd8fd6d0b20091200261f10c493e07678e6", 0x13}, 0x48, r6) r9 = add_key$keyring(&(0x7f0000000980), &(0x7f00000009c0)={'syz', 0x2}, 0x0, 0x0, r7) keyctl$reject(0x13, r8, 0x3f, 0x84c, r9) keyctl$KEYCTL_MOVE(0x1e, r0, r5, r2, 0x1) add_key$keyring(&(0x7f0000000a00), &(0x7f0000000a40)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff8) add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f0000000b00)='big_key\x00', &(0x7f0000000b40)={'syz', 0x3}, &(0x7f0000000b80)='keyring\x00', r3) 22:51:03 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x1) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x3, 0x7b27, 0x100000000}) ioctl$KDENABIO(0xffffffffffffffff, 0x4b36) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000080)={0x0, 0x200, 0x9, 0x2, 0x5, 0x401}) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f00000000c0)) ioctl$KIOCSOUND(r0, 0x4b2f, 0x7) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x20000, 0x0) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000000140), 0x5, 0x20000) sendfile(r2, r3, 0x0, 0x4) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$EXT4_IOC_GROUP_ADD(r4, 0x40286608, &(0x7f0000000180)={0x1, 0x2, 0x6, 0xffffffff, 0x7ff, 0x8}) setsockopt$SO_BINDTODEVICE_wg(r3, 0x1, 0x19, &(0x7f00000001c0)='wg2\x00', 0x4) readv(r1, &(0x7f0000000240)=[{&(0x7f0000000200)=""/2, 0x2}], 0x1) dup(r4) ioctl$TIOCSBRK(r1, 0x5427) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x420000, 0x0) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r5, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, 0x0, 0x2, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x3a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x15}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000080}, 0x4040011) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1) ioctl$PIO_FONTX(r3, 0x4b6c, &(0x7f00000007c0)={0x17b, 0x15, &(0x7f00000003c0)="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"}) 22:51:03 executing program 7: prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) 22:51:03 executing program 5: ioctl$AUTOFS_IOC_FAIL(0xffffffffffffffff, 0x9361, 0x5) flistxattr(0xffffffffffffffff, &(0x7f0000000000)=""/236, 0xec) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x8002, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x5c, 0x0, &(0x7f0000000200)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000140)={@flat=@binder={0x73622a85, 0x330a}, @fda={0x66646185, 0x4, 0x2, 0x3}, @fd}, &(0x7f00000001c0)={0x0, 0x18, 0x38}}}, @free_buffer, @increfs={0x40046304, 0x1}, @exit_looper], 0x51, 0x0, &(0x7f0000000280)="88aae3cc2381c461b3787f03d112bbc1d32e8d9983343846f4a5cee86c56266671abed3a53e0df0b442977b20e6f61a0e22b4eb2b0dc6df304b00c5bcc524940733f1a9d91654951179db4cbed7fa11141"}) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$AUTOFS_IOC_PROTOVER(r1, 0x80049363, &(0x7f0000000340)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000380)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) r3 = fork() fcntl$setown(r2, 0x8, r3) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f00000003c0)={0x0, 0x0}) r5 = accept4$packet(r2, 0x0, &(0x7f0000000440), 0x800) kcmp(r3, r4, 0x6, r1, r5) r6 = syz_open_dev$vcsu(&(0x7f0000000480), 0x5, 0x400080) r7 = syz_open_dev$usbmon(&(0x7f00000004c0), 0xffffffffffff0000, 0x28800) ioctl$AUTOFS_DEV_IOCTL_FAIL(r6, 0xc0189377, &(0x7f0000000500)={{0x1, 0x1, 0x18, r7, {0x7, 0x81}}, './file0\x00'}) process_mrelease(0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r8, 0x40049366, &(0x7f0000000540)=0x4) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000580)={0x400, 0x93, 0x7, 0x100}) ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, &(0x7f00000005c0)={0x0, 0x7, 0x0, [0x0, 0x9, 0x7, 0x1f, 0x1], [0x9, 0x10000, 0x3, 0x3, 0x1, 0x3f, 0x9, 0xfffffffffffff2f4, 0x800, 0xfaa, 0x3, 0x4, 0x19, 0x7, 0x944, 0xfff, 0x8001, 0x80, 0x4, 0x10000, 0x8, 0xbb4, 0x400, 0x1000, 0x1c, 0x100, 0xfffffffffffffffb, 0x156ab16b, 0x80000001, 0xed, 0x9, 0xb5ee, 0x3, 0x1000, 0x81, 0x6, 0x5, 0x3, 0x5, 0x101, 0x2, 0xfffffffffffff800, 0x1, 0x71, 0x9, 0x5, 0x7ff, 0x81, 0x1, 0xc9, 0x80000000, 0x9, 0xff, 0x1781, 0x800, 0x4, 0xa7, 0xc6dd, 0x1, 0x1, 0x0, 0x8, 0x14, 0x9, 0x6, 0xce, 0x7, 0x2, 0xffffffff, 0x4, 0x100000001, 0x0, 0x0, 0x90c, 0x2, 0x80, 0x9, 0xff, 0xff, 0x6, 0x5, 0xc376, 0x2, 0x3, 0x91, 0x7ff, 0x4, 0x5f69, 0x6, 0x7ff, 0x5, 0x8, 0x2, 0x20, 0x3, 0x8, 0x7, 0x7fff, 0x5, 0x5, 0x1, 0xfffffffffffffff7, 0x1, 0x400, 0x401, 0x33, 0x20d, 0x3, 0xd9aa, 0x8, 0x200, 0x5, 0x2, 0x7, 0xb6, 0xfffffffffffffc01, 0x0, 0x0, 0x2, 0x3, 0x800]}) getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000a00)={{{@in6=@remote, @in6=@private1}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000b00)=0xe8) [ 90.551734] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 90.555709] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 90.557316] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 90.563318] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 90.566317] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 90.613186] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 90.614522] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 90.617190] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 90.619318] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 90.620187] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 90.621595] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 90.621748] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 90.624139] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 90.625906] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 90.627312] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 90.630305] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 90.632540] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 90.637782] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 90.664011] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 90.665758] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 90.671343] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 90.705158] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 90.709408] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 90.715819] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 90.722262] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 90.736099] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 90.738226] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 90.740049] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 90.746146] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 90.751980] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 90.781183] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 90.785901] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 90.800073] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 90.834252] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 90.836264] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 90.838379] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 90.838645] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 90.841144] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 90.849420] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 90.851712] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 92.638007] Bluetooth: hci0: command tx timeout [ 92.700995] Bluetooth: hci2: command tx timeout [ 92.701440] Bluetooth: hci1: command tx timeout [ 92.765033] Bluetooth: hci3: command tx timeout [ 92.766022] Bluetooth: hci4: command tx timeout [ 92.893024] Bluetooth: hci7: command tx timeout [ 92.893103] Bluetooth: hci5: command tx timeout [ 92.893663] Bluetooth: hci6: command tx timeout [ 94.687034] Bluetooth: hci0: command tx timeout [ 94.751815] Bluetooth: hci1: command tx timeout [ 94.752586] Bluetooth: hci2: command tx timeout [ 94.813032] Bluetooth: hci4: command tx timeout [ 94.813753] Bluetooth: hci3: command tx timeout [ 94.941051] Bluetooth: hci6: command tx timeout [ 94.941793] Bluetooth: hci5: command tx timeout [ 94.943226] Bluetooth: hci7: command tx timeout [ 96.733958] Bluetooth: hci0: command tx timeout [ 96.796990] Bluetooth: hci1: command tx timeout [ 96.797389] Bluetooth: hci2: command tx timeout [ 96.861383] Bluetooth: hci3: command tx timeout [ 96.861410] Bluetooth: hci4: command tx timeout [ 96.989955] Bluetooth: hci5: command tx timeout [ 96.990001] Bluetooth: hci6: command tx timeout [ 96.990358] Bluetooth: hci7: command tx timeout [ 98.782949] Bluetooth: hci0: command tx timeout [ 98.845980] Bluetooth: hci2: command tx timeout [ 98.846099] Bluetooth: hci1: command tx timeout [ 98.908968] Bluetooth: hci3: command tx timeout [ 98.909999] Bluetooth: hci4: command tx timeout [ 99.037071] Bluetooth: hci7: command tx timeout [ 99.037095] Bluetooth: hci6: command tx timeout [ 99.037492] Bluetooth: hci5: command tx timeout [ 123.175507] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.176763] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.381300] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.381962] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 22:51:37 executing program 4: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000010c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x9, 0x1000, &(0x7f0000000000)=""/4096}, &(0x7f0000001000)="93a0cb4eef85", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x4840, 0x0) sendfile(r2, r3, &(0x7f0000000100)=0x100000000, 0x7) ioctl$SG_GET_VERSION_NUM(r3, 0x2282, &(0x7f0000001040)) [ 123.814601] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.815229] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.857025] audit: type=1400 audit(1768690297.923:8): avc: denied { open } for pid=3826 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 123.871758] audit: type=1400 audit(1768690297.934:9): avc: denied { kernel } for pid=3826 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 123.991323] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.991914] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 22:51:38 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000340)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000e1f4655fe1f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010300)="02000000030000000400000032000f000300040000000000000000000f002f7c", 0x20, 0x1000}, {&(0x7f0000012500)="ed41000000100000e0f4655fe1f4655fe1f4655f000000000000040008000000000000000500000006", 0x29, 0x4100}, {&(0x7f0000012900)="ed", 0x1, 0x4b00}, {&(0x7f0000012f00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x6002}, {&(0x7f0000000040)="4475540dfbe9cfe08804e3addb0e692340f533e0312c", 0x16, 0x8}, {&(0x7f0000000280)="d2a99c92029bab28f6abf8f676bc34c19c22c100cda4f99e722260922d79bfe1d4cfe1af69b402b0926e4a72fb740da1131aec7031ba5360c7cafa4b20c8675c51c46f22b194c0e490f7bdbf3a0af7380bcbd48fb5648cdf7f5aaf7cdf3e90b213fa92c7a090a5b0d97149b91f8a2c41913da394318be80e7d92f304dd92f444967bb89adbf38adfce2373a50792ab58849af44422b5466cc3c1bc5f", 0x9c, 0x5}], 0x0, &(0x7f0000000080)=ANY=[@ANYRESDEC]) openat(r0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) [ 124.068056] loop4: detected capacity change from 0 to 512 [ 124.082832] ext4: Unknown parameter '18446744073709551615' 22:51:38 executing program 4: r0 = socket$inet(0x2, 0x80003, 0xff) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x9a0, 0x4) sendto$inet(r0, &(0x7f00000000c0)="f9ef228853802bdb858bff046848ec6b1fd74b8ca5173303669c19f29e0c1c37a1ecb808", 0x24, 0x0, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10) recvfrom(r0, 0x0, 0x0, 0x32062, &(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80) r1 = memfd_secret(0x80000) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x5, 0x2, &(0x7f0000000580)=[{&(0x7f0000000500)="80363140d69f784858021a9df5a5f36da589b009465cd38c1b94161923505e58ed362f3647910058db413efe0aa85ccd4ac3c8bdd892a938c0d9e0b6d2be13f676bb0147a1677e56de2f4b48bf285b346653181f18bda37eabc6", 0x5a, 0x3}, {&(0x7f0000000140)="fb57", 0x2, 0x1}], 0x1000000, &(0x7f00000005c0)={[{@min_batch_time}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xb}}, {@mblk_io_submit}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@auto_da_alloc}, {@init_itable}, {@commit={'commit', 0x3d, 0x100000000}}], [{@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}]}) accept4(r1, 0x0, &(0x7f0000000240), 0x100000) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000008c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x4840, 0x0) sendfile(r4, r5, &(0x7f0000000100)=0x100000000, 0x7) sendmsg$nl_netfilter(r1, &(0x7f0000000300)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000840}, 0xc, &(0x7f00000002c0)={&(0x7f0000000ac0)={0x2e4, 0x11, 0xa, 0x301, 0x70bd2d, 0x25dfdbfe, {0x5}, [@typed={0x8, 0x45, 0x0, 0x0, @uid=0xee00}, @nested={0x4, 0x26}, @nested={0xf6, 0x31, 0x0, 0x1, [@typed={0x8, 0x3f, 0x0, 0x0, @pid}, @typed={0xc, 0x2f, 0x0, 0x0, @u64=0x3}, @generic="0d18774fd42c9d7908fe21ccbe707af00a9aff78e464db594896c21d172a25168eb6d29484176e76e61fffa4a7679a51ce74c1d4c5578a14fe0d871e3c8e262788c97fe081a7bbd4e0b0cfef8d4766bd4806ca31ebeb59efdfad7b0e5107eded4ed298fe3a77aeaeb5dca56312916270bcb08add37a33362492293737976769843d5eda497ed3e1501d1362a9b61575cf092918c5cb91e2d562b3e1840249a34c34577a2e15b82dcbbcf06821d0c436d484159542df061fbf3fb62becdbf254d186e5a75b69fd937a8f18fa1443375a16140b4d7e28872d73867dbc8aa5d"]}, @generic="d73eaf59c3bc01436cceb5c1d7d989ecc015d2bd56f4254279d015a4a132773328e5c68ae4d395609a2e1dc7828bc43ed2ca8caefb1a011c231a78acd7c1008772cdac874254277d39fbc3badb252935a1397754ec", @generic="f53760799cb5af97d4004c24590e0b1fdae5fe9a1eb6176030c637d06e7f30a4835529a3eae9ee1fa1fc2dc0a2f0975970fa5d7f29bc18f6f57e35b17393e44e0db6d49dd8d5b5a2a12673d855521816870cf3472bcec93ea04f6b87a5e5c09b2a0c1fbc47057935686867ab0f2dcdb6fe7cdc8727fa22525b290bfe5c6362f27cd04c82e2fe3556da472984830e151dfff53907b8664667dc5d1c4d374bdb146a85efcff8c79471fc9e526f99e079e88907d55bac341f4a22ff4b3895148e299929d024cf39ac24ba2baa739fdd90a49026703aa614cd7817bb9a4974fd", @generic="dfbdd260c558328e5aa39b9c8c95285970aa510feb5a402c23349b3ec2f8385968296384ee058734a17c75047219af52325a3c12a0924c9e3689eb5266901b24e4c40bb29506eb8dcd4040cf904bee15fd45333dea62d2847c567557640eaf849610ec36fb509d0e64f51cd173388bb6a707a2119aa97af92b3b71e5dc7055a5ae347b11abae4ae65b244c3874d54e", @typed={0x8, 0x6a, 0x0, 0x0, @fd=r4}]}, 0x2e4}, 0x1, 0x0, 0x0, 0x4000080}, 0x5) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000400)={"4a4c3479ea872d3e9be728295cd3d8fc", r3, 0x0, {0x8, 0x7}, {0x1, 0x10000}, 0xfffffffffffffffa, [0x100, 0x1, 0x8, 0xffffffffffffffff, 0xff, 0x5a0, 0x8, 0x9, 0x6, 0xff, 0x7, 0x71af02c2, 0x100000000, 0x362bf3d, 0x6, 0x6]}) [ 124.236046] EXT4-fs: Ignoring removed mblk_io_submit option [ 124.236582] ext2: Bad value for 'commit' [ 124.240217] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.240815] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.313516] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.314564] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.331610] EXT4-fs: Ignoring removed mblk_io_submit option [ 124.332377] ext2: Bad value for 'commit' 22:51:38 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x9, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$sock_buf(r0, 0x1, 0x3b, 0x0, &(0x7f00000000c0)) [ 124.440950] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.441535] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.442852] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.443469] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 22:51:38 executing program 4: r0 = syz_io_uring_complete(0x0) ioctl$TCSBRKP(r0, 0x5425, 0x7) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/mnt\x00') perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open_by_handle_at(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1c000000f10000a53c7652a68bcf740000000000000000000100"/36], 0x0) [ 124.543285] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.543894] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.641973] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.642568] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.693219] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.693805] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.713292] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.713856] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.735770] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.736388] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.776757] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.777367] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.837048] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.837642] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.856075] iso9660: Unknown parameter 'obj_user' [ 124.874439] loop3: detected capacity change from 0 to 16383 [ 124.880251] 9p: Bad value for 'rfdno' [ 124.881725] iso9660: Unknown parameter 'obj_user' [ 124.887101] loop3: detected capacity change from 0 to 16383 [ 124.892236] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.892852] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 22:51:48 executing program 7: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$CDROM_SEND_PACKET(r0, 0x6, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x80, 0x8, 0x9, 0x3, 0xce, 0x0, 0xfffffffffffffffc, 0x21040, 0x6, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x7fff, 0x1, @perf_config_ext={0x8, 0x8000}, 0x800, 0x100, 0xff, 0x1, 0x7fffffff, 0xc06b, 0x100, 0x0, 0x9, 0x0, 0x28}, 0x0, 0x1, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f00000004c0)=ANY=[@ANYBLOB="0100010000000000010001000000000005000000000000000600000000000000050000000000000001000000000000000500000000000000000000000000000000000000000000000609000000000000000000000000000081000000000000001f0000000000000002000000000000000000000000000000000000000000000000180000000000000000000000000000ff0300000000000003000000000000003f0000000000000000000000000000000000000000000000000100000000000000000000000000001973ffffffffffff6300000000000000080000000000000000000000000000000000000000000000022100000000000000000000000000000000000000000000ff7f000000000000060000000000000000000000000000000000000000000000000200000000000000000000000000ff0100000000000000020000000000000000000000000000000000000000000000803e00"/360]) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) copy_file_range(r1, 0x0, r3, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, 0x0) pidfd_getfd(r4, r4, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x1ff) r5 = creat(&(0x7f0000000080)='./file1\x00', 0x4c) open_by_handle_at(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="0000e9e9de8c000000"], 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000140)) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 22:51:48 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f0000000180)='bdev\x00', 0x0) readv(r0, &(0x7f0000000b40)=[{0x0}, {&(0x7f0000000480)=""/48, 0x30}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000800)=""/75, 0x4b}, {&(0x7f0000000880)=""/172, 0xac}, {0x0}], 0x9) creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086607, 0x0) fsopen(0x0, 0x0) 22:51:48 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f00000002c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r0, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) write(r0, 0x0, 0x0) eventfd(0x3) recvmsg$unix(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) 22:51:48 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x4840, 0x0) sendfile(r1, r2, &(0x7f0000000100)=0x100000000, 0x7) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000040)={0xba8d, 0x327f, 0x7, 0x7, 0x2, [{0x200, 0x4, 0xfffffffffffffffc, '\x00', 0x81}, {0xffffffffffffffff, 0x1, 0x9ff, '\x00', 0x4}]}) ioctl$EXT4_IOC_CHECKPOINT(r0, 0xc020660b, &(0x7f0000000000)) 22:51:48 executing program 2: io_setup(0x6a02, &(0x7f0000000000)=0x0) accept4(0xffffffffffffffff, &(0x7f00000001c0)=@pppoe={0x18, 0x0, {0x0, @link_local}}, &(0x7f00000000c0)=0x80, 0x80000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='blkio.bfq.dequeue\x00', 0x0, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x4840, 0x0) sendfile(r1, r2, &(0x7f0000000100)=0x100000000, 0x7) socket$nl_sock_diag(0x10, 0x3, 0x4) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x4840, 0x0) sendfile(r3, r3, &(0x7f0000000100)=0x100000000, 0x7) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000180), 0x100200, 0x0) sendfile(r4, r5, &(0x7f0000000100)=0x100000000, 0x7) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x448201, 0x0) syz_open_dev$vcsn(&(0x7f00000003c0), 0x5, 0x8000) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) r7 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x4840, 0x0) sendfile(r6, r7, &(0x7f0000000100)=0x100000000, 0x7) fspick(r7, &(0x7f0000000540)='./file0\x00', 0x1) io_submit(r0, 0x4, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x8, 0xffffffffffffffff, &(0x7f0000000600)="e76dc33a500cd6c51da8c96a0f501b5f336a374da38134f5fed00216a76c8e82118d26743ed5798b4638ec79e4d3056b51541bd6a10746342ade536a45fa05fbc79f81eb9a77afd53626bd880958715c26ef63ce2d841c608353a8ecf39dcb598cf1776da9196f952b7ce9e92757268f5a6fd47f0c6ef67f376fae43500c53b84155b540da18bd50d3d9c77825eced52", 0x90, 0x8, 0x0, 0x0, r2}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x3229, 0xffffffffffffffff, &(0x7f0000000380)="df172079501266716f0fc23c7295e09076d96cf4006c6ad4a3802d97b12bb3", 0x1f, 0xfffffffffffffffd, 0x0, 0x3}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x7, 0xe26a, 0xffffffffffffffff, &(0x7f0000000480)="28c6e5a1f2a118e5c7f15d8225c7951f1c68aa0a4604facebe6c4a14d10fd6fef0542c066a4bdb69497b9b4562", 0x2d, 0xb1, 0x0, 0x2}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x3, 0x7, r1, &(0x7f0000000500)="1ce2d39438131031d603d84258092dfb781dd845e5e925af00"/39, 0x27, 0x9, 0x0, 0x1}]) io_destroy(r0) 22:51:48 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x63, &(0x7f0000000340)={'TPROXY\x00'}, &(0x7f0000000380)=0x1e) fcntl$setstatus(r1, 0x4, 0x44000) io_setup(0xfff, &(0x7f0000000040)) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000100)={0x0, r2, 0x0, 0x80, 0x0, 0x5}) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x8b) lstat(&(0x7f0000001400)='./file0\x00', &(0x7f0000001440)) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r3) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x0, 0x8, 0x0, 0x0, 0x0, 0xa3, 0x27888, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x101, 0x0, @perf_config_ext={0x10000, 0x7}, 0xa401, 0x4, 0x5, 0x6, 0x101, 0x0, 0x8, 0x0, 0x9}, 0x0, 0xd, r0, 0x3) io_submit(0x0, 0x1, &(0x7f0000000300)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x2, 0x40, 0xffffffffffffffff, &(0x7f0000000400)="a7f91d89cb41e9520dbacaa0adba8177ffeb8f2be876522ea7addd8ac154c2720ec759c23328bdaddc3a1ba3036e2c9f0e342854637d34ad8d1fc903df6e7312b7f149a024b21daefb78e20f0a1b99dc73a0256aa0ce96c63b67cfe4bafcf5b2ab4c027237871060e46a2d07f99648f8cdb6059f5c09", 0x0, 0x200, 0x0, 0x3}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x2}]) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00032bbd7000fbdbdf255c00571c4700000008006b000a00000008006b001400000008006b006801000008006b000a00000008006b006801000008006b005a00000008006b006801000008006b003700000008006b00e0010000000000000000000086c89a6bbff21d287682510edc4e6b9674bd010d38066b71fc34158a8d65cb9a5d4263abf80a1a407b456466c6f1f653a17086db60afd200d24bd5be85824c74a0be"], 0x68}}, 0x20040014) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000600)=ANY=[@ANYBLOB="0100000001000000180000004ae25d64f35be56587157f06834bf1e273e946cc0ed3fcef404929ae2800e9cdd2968df9f69e0d620708b434b174eb3f81dca2b1451758d64ff9b4a59adc78df85429018b9bf8c36", @ANYBLOB="6dbc4ab6abc430bf7fb5f426b7ca5d548217f4036cab8d7901819bf8da134b040a8d9b53c5f4de5fbf077b57f3d1282f6a163d2cf5be04f13a4255b2870c6592183d5f55a412f0635e1b9247131f45135bd2a00f02a72c76cbd9da29a683df923ec5a1a7c0362176301dc47ebbd5e355f3499374310b9a85c517d16417810157a25dd8d6737ba0c87d5c0cc04f9777ca53b917bb204780ef20ad49015639063e2730fbc063d5da2f08842d389491416ab64a526f44acd2415ed8d2", @ANYBLOB="0d0000000000cc1ba2f230000000009ab43ee99efb56f11f00e643cf0082046b34a254b153eba553f12fc091c4b7955e5d746be02d561e6e28ae2a0dd6772126556463670ee47a43602ec2455f3454280200f05768000000004dfd7e4ce1d7d7118980a907000000000000002ae91b43a2d3944fe98e8629557dfdc275bcc035dff5f47db4c3d0ffedc9821c599457fabbbab2232bdc0fbbe07729f8ea7017e8ff353a3f66df94401618a65d659c04b6aa074268270d438236a63137d18abd107963f66513b31251295b5a"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x80000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000014c0)}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffc00}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 22:51:48 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_dev$vcsa(&(0x7f0000000000), 0xffff, 0x4000) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)={0x38, r7, 0x1, 0x0, 0x0, {{0x39}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0xbb8]}}]}]}]}, 0x38}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x200, r0, 0x0, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x8, 0x57}}}}, [@NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x40, {0x0, 0xe018, 0x7, 0x4}}}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x3, 0x1, 0x0, {0x3, 0x80, 0x0, 0x4, 0x0, 0x1, 0x1, 0x3}, 0x1, 0x7ff, 0x3}}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0xac4e}, @NL80211_ATTR_KEYS={0x1a0, 0x51, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_DEFAULT_TYPES={0x14, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "a26efb655a05f641118d4e5577"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_DEFAULT={0x4}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "3a8256093dfe1b4c8abcc0cfe0"}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "2a841b7d705e3d53d117f1cf4a"}, @NL80211_KEY_SEQ={0x12, 0x4, "c841f0845cbf1c5b8783a7473abe"}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "044fd5aa31"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "1e963d242dbaaeb20411928638"}, @NL80211_KEY_SEQ={0x12, 0x4, "902740daf57bdc1d4e3806c27f5d"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, {0x70, 0x0, 0x0, 0x1, [@NL80211_KEY_SEQ={0xd, 0x4, "eeb372401d7e2619ff"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "66fc87a31e"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_DEFAULT_TYPES={0x18, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_SEQ={0x9, 0x4, "3b8005e0dc"}, @NL80211_KEY_DEFAULT_TYPES={0x8, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "4cd99795d35aba3636de7214e3"}]}]}]}, 0x200}, 0x1, 0x0, 0x0, 0x20000804}, 0x4048084) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r2, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1080}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x3c, r7, 0x100, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x9}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x4}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xfffc}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x5}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x7ff}]}, 0x3c}, 0x1, 0x0, 0x0, 0x840}, 0x20000090) sendmsg$NL80211_CMD_ADD_TX_TS(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x1c, r0, 0x1, 0x0, 0x0, {{0x12}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}}, 0x0) r9 = openat$null(0xffffffffffffff9c, &(0x7f0000000540), 0x8000, 0x0) r10 = syz_genetlink_get_family_id$tipc(&(0x7f00000005c0), r1) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r9, &(0x7f0000000700)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x68, r10, 0x10, 0x70bd2b, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0x2, @media='ib\x00'}}}, ["", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) 22:51:48 executing program 4: r0 = io_uring_setup(0x7820, &(0x7f0000000000)) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x4840, 0x0) sendfile(r1, r2, &(0x7f0000000100)=0x100000000, 0x7) pipe2(&(0x7f0000000240)={0xffffffffffffffff}, 0x800) fcntl$setstatus(r3, 0x4, 0x60c00) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x4840, 0x0) sendfile(r4, r5, &(0x7f0000000100)=0x100000000, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100)=0x100000000, 0x7) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000280)=0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, r6}) io_uring_setup(0x74fe, &(0x7f00000001c0)={0x0, 0x2784, 0x4, 0x3, 0x65, 0x0, r5}) r7 = socket$unix(0x1, 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000180)=[r7], 0x1) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r8, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [""]}, 0x1c}}, 0x14000800) bind$netlink(r8, &(0x7f0000000640)={0x10, 0x0, 0x0, 0x1}, 0xc) close_range(r0, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 22:51:48 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x80000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000080), 0xc}, 0x400, 0x0, 0x0, 0x1, 0x0, 0x8, 0x8001}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) uname(&(0x7f0000000180)=""/49) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x4, 0x0, 0x0, 0x1ff}}) uname(&(0x7f00000004c0)=""/4096) sendfile(r2, r1, &(0x7f0000000100)=0x8001, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) dup(r0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) [ 134.518337] audit: type=1400 audit(1768690308.584:10): avc: denied { write } for pid=3924 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 134.523596] program syz-executor.7 is using a deprecated SCSI ioctl, please convert it to SG_IO 22:51:48 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x40000, 0xb, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366ee578400080820000200008000f80000200040000000000000000000010000000000000002000000010006000000000000000000000000008000"/96, 0x60}, {&(0x7f0000010100)='RRaA\x00'/32, 0x20, 0x800}, {&(0x7f0000010200)="00000000727241610500000007000000000000000000000000000000000055aa", 0x20, 0x9e0}, {&(0x7f0000010300)="601c6d6b646f7366ee578400080820000200008000f80000200040000000000000000000010000000000000002000000010006000000000000000000000000008000"/96, 0x60, 0x3000}, {&(0x7f0000010400)="f8ffff0fffffff0fffffff0fffffff0fffffff0fffffff0fffffff0fffffff0f", 0x20, 0x10000}, {&(0x7f0000010500)="f8ffff0fffffff0fffffff0fffffff0fffffff0fffffff0fffffff0fffffff0f", 0x20, 0x10800}, {&(0x7f0000010600)="53595a4b414c4c45522020080000ea80325132510000ea80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100057ea70325132510000ea70325103000000000041660069006c00650031000f00100000ffffffffffffffffffff0000ffffffff46494c4531202020202020200057ea70325132510000ea70325105000a00000041660069006c00650032000f00140000ffffffffffffffffffff0000ffffffff46494c4532202020202020200057ea70325132510000ea70325106002823000041660069006c0065002e000f00d263006f006c0064000000ffff0000ffffffff46494c457e312020434f4c200057ea70325132510000ea703251070064000000", 0x120, 0x11000}, {&(0x7f0000010800)="2e20202020202020202020100057ea70325132510000ea7032510300000000002e2e202020202020202020100057ea70325132510000ea70325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020200057ea70325132510000ea70325104001a040000", 0x80, 0x15000}, {&(0x7f0000010900)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x19000}, {&(0x7f0000010e00)='syzkallers\x00'/32, 0x20, 0x1d000}, {&(0x7f0000010f00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x25000}], 0x0, &(0x7f0000011000)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xc) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000940)=[{{&(0x7f0000000180), 0x6e, &(0x7f0000000840)=[{&(0x7f0000000340)=""/215, 0xd7}, {&(0x7f0000000440)=""/221, 0xdd}, {&(0x7f0000000540)=""/13, 0xd}, {&(0x7f0000000580)=""/35, 0x23}, {&(0x7f00000005c0)=""/169, 0xa9}, {&(0x7f0000000680)=""/56, 0x38}, {&(0x7f00000006c0)=""/146, 0x92}, {&(0x7f0000000780)=""/33, 0x21}, {&(0x7f00000007c0)=""/91, 0x5b}], 0x9, &(0x7f0000000900)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x30}}], 0x1, 0x45c30bbe7224aaab, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x3f, 0x7f, 0x6, 0x0, 0x0, 0x1000, 0x2544, 0xb, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x2, @perf_config_ext={0xba, 0x7}, 0x1000, 0x2, 0x80, 0x4, 0x7, 0x2, 0x9, 0x0, 0x20, 0x0, 0x400}, r0, 0x10, r1, 0x8) 22:51:48 executing program 6: r0 = syz_io_uring_setup(0x2260, &(0x7f0000000240), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000003ac0)) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r1 = syz_io_uring_setup(0x2264, &(0x7f0000003a00)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) dup2(r0, r1) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x100000000, 0x5, &(0x7f00000004c0)=[{&(0x7f00000002c0)="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", 0xfb, 0x30c5}, {&(0x7f0000000140)="75dca9ece5ff2eaca89a1183196f814e5a996dde20d16907845f1c11a6e55f2444e46a54af53dc0c1c4a9b51c3a77b8ba7926646a604fddc1cc9bc387ba621f35b3766880d7856bc4ae81b0510a523dad7aaa9da0535569b405e942d2544da4a5e34d9a998c8444a5afcec399594a0889753e28bebfa1dde7ae5130014a4b62b908dd98e2dc504ccda5a5ee2dca110e0bf0670bc54e492fe73aa927771d78a6c6784", 0xa2, 0x7}, {&(0x7f00000003c0)="d669c8e0331690b9717a616330ac067dee02f745fbcfb2cc986f02c2cae0bfd520b8ac6dd2ad8635387c909b3969b674b2cc490ad5f6ac82ab4e4b388e42f2de60424b4f4033b10388fc9afaecf17e485b2227fde09a1e95a7ceb4bd2d20a8e0c92d9ac0a63dd5b3a3a0b111f30b5b917eb797c9c9dfbe823ff7a0e710c67b90dc721cd69aacbe3b1551b146c52bb84c8219105b0069af25", 0x98, 0x400}, {&(0x7f00000000c0)="a9bdcdb25844d1f591c4ae1e2a3ab83e9a36c46c", 0x14, 0x7fff}, {&(0x7f0000000480)="189ffc2596f9b66db82ffdb325fbd79de46d52a0239a4cc2ae0c13d0e61f56ab9c165dddf492d7e1feba042a86da64d589", 0x31, 0x100000000}], 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="6e6f92436c6b5f696f5f7375626d69742c636f6e746578743d737532652c636f6e746578743d73745866663d3078303030303030303030303030213030362c00"]) unlinkat(r2, &(0x7f00000005c0)='./file0\x00', 0x200) [ 134.684001] [ 134.684340] ===================================== [ 134.685139] WARNING: bad unlock balance detected! [ 134.685936] 6.19.0-rc5-next-20260116 #1 Not tainted [ 134.686738] ------------------------------------- [ 134.693299] syz-executor.4/3951 is trying to release lock (rcu_read_lock) at: [ 134.694489] [] __wait_on_freeing_inode+0x105/0x350 [ 134.695576] but there are no more locks to release! [ 134.696385] [ 134.696385] other info that might help us debug this: [ 134.697449] 4 locks held by syz-executor.4/3951: [ 134.698226] #0: ffff88800faa03f8 (sb_writers#3){.+.+}-{0:0}, at: filename_create+0xf7/0x400 [ 134.699676] #1: ffff888049d0a078 (&type->i_mutex_dir_key#3/1){+.+.}-{4:4}, at: filename_create+0x1b1/0x400 [ 134.701312] #2: ffff88800faa4950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xe32/0x12d0 [ 134.702780] #3: ffffffff85c16898 (inode_hash_lock){+.+.}-{3:3}, at: insert_inode_locked+0xf9/0x890 [ 134.704300] [ 134.704300] stack backtrace: [ 134.705033] CPU: 0 UID: 0 PID: 3951 Comm: syz-executor.4 Not tainted 6.19.0-rc5-next-20260116 #1 PREEMPT(lazy) [ 134.705062] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 134.705075] Call Trace: [ 134.705083] [ 134.705091] dump_stack_lvl+0xca/0x120 [ 134.705135] ? __wait_on_freeing_inode+0x105/0x350 [ 134.705165] print_unlock_imbalance_bug+0x118/0x130 [ 134.705194] ? __wait_on_freeing_inode+0x105/0x350 [ 134.705225] lock_release+0x1ee/0x270 [ 134.705255] __wait_on_freeing_inode+0x10a/0x350 [ 134.705286] ? __pfx___wait_on_freeing_inode+0x10/0x10 [ 134.705318] ? __pfx_var_wake_function+0x10/0x10 [ 134.705354] ? lock_is_held_type+0x9e/0x120 [ 134.705377] insert_inode_locked+0x25f/0x890 [ 134.705413] __ext4_new_inode+0x223d/0x4cd0 [ 134.705447] ? __pfx___ext4_new_inode+0x10/0x10 [ 134.705477] ? __pfx___dquot_initialize+0x10/0x10 [ 134.705515] ? __pfx_avc_has_perm+0x10/0x10 [ 134.705546] ext4_symlink+0x623/0xb40 [ 134.705585] ? __pfx_ext4_symlink+0x10/0x10 [ 134.705618] ? security_inode_permission+0x72/0xe0 [ 134.705645] vfs_symlink+0x44b/0x840 [ 134.705679] filename_symlinkat+0x158/0x440 [ 134.705709] ? __pfx_filename_symlinkat+0x10/0x10 [ 134.705737] ? strncpy_from_user+0x21b/0x2f0 [ 134.705771] __x64_sys_symlink+0x82/0x110 [ 134.705799] do_syscall_64+0xbf/0x420 [ 134.705826] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.705851] RIP: 0033:0x7f6c49bb8427 [ 134.705869] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 58 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 134.705890] RSP: 002b:00007ffeda0b6808 EFLAGS: 00000202 ORIG_RAX: 0000000000000058 [ 134.705912] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f6c49bb8427 [ 134.705927] RDX: 00007ffeda0b68e3 RSI: 00007f6c49c13022 RDI: 00007ffeda0b68d0 [ 134.705942] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007ffeda0b66a0 [ 134.705957] R10: 00007ffeda0b6557 R11: 0000000000000202 R12: 0000000000000001 [ 134.705971] R13: 0000000000000001 R14: 0000000000000001 R15: 00007ffeda0b68d0 [ 134.705992] [ 134.736895] ------------[ cut here ]------------ [ 134.737702] WARNING: kernel/rcu/tree_plugin.h:443 at __rcu_read_unlock+0x25f/0x5c0, CPU#0: syz-executor.4/3951 [ 134.739480] Modules linked in: [ 134.740077] CPU: 0 UID: 0 PID: 3951 Comm: syz-executor.4 Not tainted 6.19.0-rc5-next-20260116 #1 PREEMPT(lazy) [ 134.741706] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 134.743058] RIP: 0010:__rcu_read_unlock+0x25f/0x5c0 [ 134.744088] Code: f2 02 00 00 c7 43 58 01 00 00 00 bf 09 00 00 00 e8 d6 b7 de ff 4d 85 f6 0f 84 73 fe ff ff e8 38 8a 20 00 fb e9 68 fe ff ff 90 <0f> 0b 90 5b 5d 41 5c 41 5d 41 5e e9 81 4d 74 03 e8 2c 5d 56 00 e9 [ 134.748827] RSP: 0018:ffff888009e479a0 EFLAGS: 00010286 [ 134.751281] RAX: 00000000ffffffff RBX: ffff888015d95280 RCX: ffffffff815660f7 [ 134.752470] RDX: 0000000000000000 RSI: ffffffff81566100 RDI: ffff888015d9567c [ 134.753639] RBP: ffff888015d95280 R08: 0000000000000000 R09: fffffbfff0ba7040 [ 134.754813] R10: 0000000000000000 R11: 0000000000000001 R12: ffff888015d95280 [ 134.756057] R13: 0000000000000001 R14: ffffffff85c10e40 R15: ffff888049c3f578 [ 134.757231] FS: 0000555576ce9400(0000) GS:ffff8880e5342000(0000) knlGS:0000000000000000 [ 134.758534] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 134.759517] CR2: 00007f0ab3712e25 CR3: 000000001e285000 CR4: 0000000000350ef0 [ 134.760687] Call Trace: [ 134.761235] [ 134.762590] __wait_on_freeing_inode+0x10f/0x350 [ 134.764068] ? __pfx___wait_on_freeing_inode+0x10/0x10 [ 134.766338] ? __pfx_var_wake_function+0x10/0x10 [ 134.768807] ? lock_is_held_type+0x9e/0x120 [ 134.771071] insert_inode_locked+0x25f/0x890 [ 134.774323] __ext4_new_inode+0x223d/0x4cd0 [ 134.779307] ? __pfx___ext4_new_inode+0x10/0x10 [ 134.781731] ? __pfx___dquot_initialize+0x10/0x10 [ 134.783296] ? __pfx_avc_has_perm+0x10/0x10 [ 134.786781] ext4_symlink+0x623/0xb40 [ 134.791316] ? __pfx_ext4_symlink+0x10/0x10 [ 134.793306] ? security_inode_permission+0x72/0xe0 [ 134.796500] vfs_symlink+0x44b/0x840 [ 134.799153] filename_symlinkat+0x158/0x440 [ 134.801374] ? __pfx_filename_symlinkat+0x10/0x10 [ 134.802869] ? strncpy_from_user+0x21b/0x2f0 [ 134.806577] __x64_sys_symlink+0x82/0x110 [ 134.808067] do_syscall_64+0xbf/0x420 [ 134.809592] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.810620] RIP: 0033:0x7f6c49bb8427 [ 134.811388] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 58 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 134.814155] RSP: 002b:00007ffeda0b6808 EFLAGS: 00000202 ORIG_RAX: 0000000000000058 [ 134.815357] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f6c49bb8427 [ 134.816486] RDX: 00007ffeda0b68e3 RSI: 00007f6c49c13022 RDI: 00007ffeda0b68d0 [ 134.817616] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007ffeda0b66a0 [ 134.818739] R10: 00007ffeda0b6557 R11: 0000000000000202 R12: 0000000000000001 [ 134.819876] R13: 0000000000000001 R14: 0000000000000001 R15: 00007ffeda0b68d0 [ 134.824870] [ 134.825311] irq event stamp: 689 [ 134.825812] hardirqs last enabled at (689): [] irqentry_exit+0x17b/0x650 [ 134.827314] hardirqs last disabled at (688): [] sysvec_apic_timer_interrupt+0xf/0x80 [ 134.828906] softirqs last enabled at (682): [] kernel_fpu_end+0x59/0x70 [ 134.830419] softirqs last disabled at (680): [] kernel_fpu_begin_mask+0x1bb/0x300 [ 134.832031] ---[ end trace 0000000000000000 ]--- [ 134.850842] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 134.851791] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 134.859144] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 134.867087] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 134.868183] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 134.868281] loop4: detected capacity change from 0 to 592 [ 134.877396] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 134.889194] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 134.889687] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 134.899484] loop6: detected capacity change from 0 to 264192 [ 134.900624] SELinux: security_context_str_to_sid (su2e) failed with errno=-22 [ 134.922683] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 134.935992] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 134.936473] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 134.941671] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 134.946470] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 134.948440] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 134.959669] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 134.963196] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 134.963866] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 134.970618] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 134.974523] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 134.977253] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 134.981648] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 134.988389] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 134.988867] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 134.996184] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 135.025459] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 135.026036] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 135.026536] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 135.030031] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 135.030555] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 135.031108] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 135.031624] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 135.036395] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 135.041004] loop6: detected capacity change from 0 to 264192 [ 137.054235] Bluetooth: hci7: command 0x0c1a tx timeout [ 137.054782] Bluetooth: hci5: command 0x0c1a tx timeout [ 137.055019] Bluetooth: hci6: command 0x0c1a tx timeout [ 137.055301] Bluetooth: hci4: command 0x0c1a tx timeout [ 137.056235] Bluetooth: hci3: command 0x0c1a tx timeout [ 137.056603] Bluetooth: hci2: command 0x0c1a tx timeout [ 137.057536] Bluetooth: hci1: command 0x0c1a tx timeout [ 137.057939] Bluetooth: hci0: command 0x0c1a tx timeout [ 139.102067] Bluetooth: hci6: command 0x0c1a tx timeout [ 139.102284] Bluetooth: hci3: command 0x0c1a tx timeout [ 139.103090] Bluetooth: hci1: command 0x0c1a tx timeout [ 139.104044] Bluetooth: hci2: command 0x0c1a tx timeout [ 139.104980] Bluetooth: hci0: command 0x0c1a tx timeout [ 139.105850] Bluetooth: hci4: command 0x0c1a tx timeout [ 139.106772] Bluetooth: hci5: command 0x0c1a tx timeout [ 139.107726] Bluetooth: hci7: command 0x0c1a tx timeout [ 141.149678] Bluetooth: hci5: command 0x0c1a tx timeout [ 141.150017] Bluetooth: hci7: command 0x0c1a tx timeout [ 141.150516] Bluetooth: hci6: command 0x0c1a tx timeout [ 141.151337] Bluetooth: hci2: command 0x0c1a tx timeout [ 141.152134] Bluetooth: hci3: command 0x0c1a tx timeout [ 141.152850] Bluetooth: hci4: command 0x0c1a tx timeout [ 141.153597] Bluetooth: hci0: command 0x0c1a tx timeout [ 141.154375] Bluetooth: hci1: command 0x0c1a tx timeout 22:51:57 executing program 7: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$CDROM_SEND_PACKET(r0, 0x6, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x80, 0x8, 0x9, 0x3, 0xce, 0x0, 0xfffffffffffffffc, 0x21040, 0x6, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x7fff, 0x1, @perf_config_ext={0x8, 0x8000}, 0x800, 0x100, 0xff, 0x1, 0x7fffffff, 0xc06b, 0x100, 0x0, 0x9, 0x0, 0x28}, 0x0, 0x1, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f00000004c0)=ANY=[@ANYBLOB="0100010000000000010001000000000005000000000000000600000000000000050000000000000001000000000000000500000000000000000000000000000000000000000000000609000000000000000000000000000081000000000000001f0000000000000002000000000000000000000000000000000000000000000000180000000000000000000000000000ff0300000000000003000000000000003f0000000000000000000000000000000000000000000000000100000000000000000000000000001973ffffffffffff6300000000000000080000000000000000000000000000000000000000000000022100000000000000000000000000000000000000000000ff7f000000000000060000000000000000000000000000000000000000000000000200000000000000000000000000ff0100000000000000020000000000000000000000000000000000000000000000803e00"/360]) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) copy_file_range(r1, 0x0, r3, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, 0x0) pidfd_getfd(r4, r4, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x1ff) r5 = creat(&(0x7f0000000080)='./file1\x00', 0x4c) open_by_handle_at(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="0000e9e9de8c000000"], 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000140)) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 22:51:57 executing program 1: r0 = clone3(&(0x7f0000000400)={0x140000300, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000180), {0x23}, &(0x7f0000000240)=""/219, 0xdb, &(0x7f00000001c0)=""/62, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x5}, 0x58) sched_setscheduler(r0, 0x0, &(0x7f0000000480)=0x40) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d0020002000200020002000200020002000200020002000000000000000002900000000000029252f", 0x5a, 0x8800}], 0x0, &(0x7f0000012200)=ANY=[@ANYBLOB='\x00']) umount2(&(0x7f0000000040)='./file0/../file0\x00', 0x0) 22:51:57 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='attr/fscreate\x00') writev(r0, &(0x7f0000001440)=[{&(0x7f0000001400)="94f99d81cb4bce9da40a", 0xa}], 0x1) getdents64(r0, &(0x7f0000000000)=""/89, 0x59) 22:51:57 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) syz_open_procfs(0x0, &(0x7f00000003c0)='net/udplite\x00') perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x86, 0x1, 0x9, 0x0, 0x100000000000001f, 0x80, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x10002, 0x2, @perf_bp={&(0x7f0000000400), 0x2}, 0xc040, 0x102, 0x7, 0x5, 0x80000000, 0x102, 0x101, 0x0, 0x7, 0x0, 0xc000000000000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0xe7, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8) bind$inet6(r0, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003040)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="db4d31d6805ecdac87307b14c169d9d9", 0x7ffff000}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000a00)='m', 0x1}], 0x1}}], 0x3, 0x44894) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e24, 0x400, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7f}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e25, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c) shutdown(r0, 0x1) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x20, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, 0x15aa}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz0\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 22:51:57 executing program 5: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) accept4$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000500)=0x14, 0x800) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0xac, r1, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000005400)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r3 = creat(&(0x7f0000000000)='./file0/file0\x00', 0x0) mount$9p_unix(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x200001, &(0x7f00000003c0)={'trans=unix,', {[{@version_u}, {@cache_mmap}, {@cache_loose}, {@fscache}, {@noextend}, {@mmap}, {@msize={'msize', 0x3d, 0xfb8}}, {@debug={'debug', 0x3d, 0x7f4}}, {@cache_loose}, {@fscache}], [{@smackfstransmute={'smackfstransmute', 0x3d, '9p\x00'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\xd6\\{}!\xc8^'}}, {@smackfsroot={'smackfsroot', 0x3d, '9p\x00'}}, {@pcr={'pcr', 0x3d, 0x11}}, {@fscontext={'fscontext', 0x3d, 'system_u'}}, {@obj_role={'obj_role', 0x3d, '%))-'}}, {@obj_user={'obj_user', 0x3d, '($-{'}}, {@dont_measure}]}}) mount$9p_fd(0x20000000, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) ioctl$EVIOCGSW(r3, 0x8040451b, &(0x7f00000001c0)=""/199) 22:51:57 executing program 2: io_setup(0x6a02, &(0x7f0000000000)=0x0) accept4(0xffffffffffffffff, &(0x7f00000001c0)=@pppoe={0x18, 0x0, {0x0, @link_local}}, &(0x7f00000000c0)=0x80, 0x80000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='blkio.bfq.dequeue\x00', 0x0, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x4840, 0x0) sendfile(r1, r2, &(0x7f0000000100)=0x100000000, 0x7) socket$nl_sock_diag(0x10, 0x3, 0x4) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x4840, 0x0) sendfile(r3, r3, &(0x7f0000000100)=0x100000000, 0x7) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000180), 0x100200, 0x0) sendfile(r4, r5, &(0x7f0000000100)=0x100000000, 0x7) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x448201, 0x0) syz_open_dev$vcsn(&(0x7f00000003c0), 0x5, 0x8000) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) r7 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x4840, 0x0) sendfile(r6, r7, &(0x7f0000000100)=0x100000000, 0x7) fspick(r7, &(0x7f0000000540)='./file0\x00', 0x1) io_submit(r0, 0x4, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x8, 0xffffffffffffffff, &(0x7f0000000600)="e76dc33a500cd6c51da8c96a0f501b5f336a374da38134f5fed00216a76c8e82118d26743ed5798b4638ec79e4d3056b51541bd6a10746342ade536a45fa05fbc79f81eb9a77afd53626bd880958715c26ef63ce2d841c608353a8ecf39dcb598cf1776da9196f952b7ce9e92757268f5a6fd47f0c6ef67f376fae43500c53b84155b540da18bd50d3d9c77825eced52", 0x90, 0x8, 0x0, 0x0, r2}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x3229, 0xffffffffffffffff, &(0x7f0000000380)="df172079501266716f0fc23c7295e09076d96cf4006c6ad4a3802d97b12bb3", 0x1f, 0xfffffffffffffffd, 0x0, 0x3}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x7, 0xe26a, 0xffffffffffffffff, &(0x7f0000000480)="28c6e5a1f2a118e5c7f15d8225c7951f1c68aa0a4604facebe6c4a14d10fd6fef0542c066a4bdb69497b9b4562", 0x2d, 0xb1, 0x0, 0x2}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x3, 0x7, r1, &(0x7f0000000500)="1ce2d39438131031d603d84258092dfb781dd845e5e925af00"/39, 0x27, 0x9, 0x0, 0x1}]) io_destroy(r0) 22:51:57 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x63, &(0x7f0000000340)={'TPROXY\x00'}, &(0x7f0000000380)=0x1e) fcntl$setstatus(r1, 0x4, 0x44000) io_setup(0xfff, &(0x7f0000000040)) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000100)={0x0, r2, 0x0, 0x80, 0x0, 0x5}) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x8b) lstat(&(0x7f0000001400)='./file0\x00', &(0x7f0000001440)) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r3) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x0, 0x8, 0x0, 0x0, 0x0, 0xa3, 0x27888, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x101, 0x0, @perf_config_ext={0x10000, 0x7}, 0xa401, 0x4, 0x5, 0x6, 0x101, 0x0, 0x8, 0x0, 0x9}, 0x0, 0xd, r0, 0x3) io_submit(0x0, 0x1, &(0x7f0000000300)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x2, 0x40, 0xffffffffffffffff, &(0x7f0000000400)="a7f91d89cb41e9520dbacaa0adba8177ffeb8f2be876522ea7addd8ac154c2720ec759c23328bdaddc3a1ba3036e2c9f0e342854637d34ad8d1fc903df6e7312b7f149a024b21daefb78e20f0a1b99dc73a0256aa0ce96c63b67cfe4bafcf5b2ab4c027237871060e46a2d07f99648f8cdb6059f5c09", 0x0, 0x200, 0x0, 0x3}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x2}]) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00032bbd7000fbdbdf255c00571c4700000008006b000a00000008006b001400000008006b006801000008006b000a00000008006b006801000008006b005a00000008006b006801000008006b003700000008006b00e0010000000000000000000086c89a6bbff21d287682510edc4e6b9674bd010d38066b71fc34158a8d65cb9a5d4263abf80a1a407b456466c6f1f653a17086db60afd200d24bd5be85824c74a0be"], 0x68}}, 0x20040014) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000600)=ANY=[@ANYBLOB="0100000001000000180000004ae25d64f35be56587157f06834bf1e273e946cc0ed3fcef404929ae2800e9cdd2968df9f69e0d620708b434b174eb3f81dca2b1451758d64ff9b4a59adc78df85429018b9bf8c36", @ANYBLOB="6dbc4ab6abc430bf7fb5f426b7ca5d548217f4036cab8d7901819bf8da134b040a8d9b53c5f4de5fbf077b57f3d1282f6a163d2cf5be04f13a4255b2870c6592183d5f55a412f0635e1b9247131f45135bd2a00f02a72c76cbd9da29a683df923ec5a1a7c0362176301dc47ebbd5e355f3499374310b9a85c517d16417810157a25dd8d6737ba0c87d5c0cc04f9777ca53b917bb204780ef20ad49015639063e2730fbc063d5da2f08842d389491416ab64a526f44acd2415ed8d2", @ANYBLOB="0d0000000000cc1ba2f230000000009ab43ee99efb56f11f00e643cf0082046b34a254b153eba553f12fc091c4b7955e5d746be02d561e6e28ae2a0dd6772126556463670ee47a43602ec2455f3454280200f05768000000004dfd7e4ce1d7d7118980a907000000000000002ae91b43a2d3944fe98e8629557dfdc275bcc035dff5f47db4c3d0ffedc9821c599457fabbbab2232bdc0fbbe07729f8ea7017e8ff353a3f66df94401618a65d659c04b6aa074268270d438236a63137d18abd107963f66513b31251295b5a"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x80000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000014c0)}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffc00}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 22:51:57 executing program 6: r0 = syz_io_uring_setup(0x2260, &(0x7f0000000240), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000003ac0)) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r1 = syz_io_uring_setup(0x2264, &(0x7f0000003a00)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) dup2(r0, r1) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x100000000, 0x5, &(0x7f00000004c0)=[{&(0x7f00000002c0)="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", 0xfb, 0x30c5}, {&(0x7f0000000140)="75dca9ece5ff2eaca89a1183196f814e5a996dde20d16907845f1c11a6e55f2444e46a54af53dc0c1c4a9b51c3a77b8ba7926646a604fddc1cc9bc387ba621f35b3766880d7856bc4ae81b0510a523dad7aaa9da0535569b405e942d2544da4a5e34d9a998c8444a5afcec399594a0889753e28bebfa1dde7ae5130014a4b62b908dd98e2dc504ccda5a5ee2dca110e0bf0670bc54e492fe73aa927771d78a6c6784", 0xa2, 0x7}, {&(0x7f00000003c0)="d669c8e0331690b9717a616330ac067dee02f745fbcfb2cc986f02c2cae0bfd520b8ac6dd2ad8635387c909b3969b674b2cc490ad5f6ac82ab4e4b388e42f2de60424b4f4033b10388fc9afaecf17e485b2227fde09a1e95a7ceb4bd2d20a8e0c92d9ac0a63dd5b3a3a0b111f30b5b917eb797c9c9dfbe823ff7a0e710c67b90dc721cd69aacbe3b1551b146c52bb84c8219105b0069af25", 0x98, 0x400}, {&(0x7f00000000c0)="a9bdcdb25844d1f591c4ae1e2a3ab83e9a36c46c", 0x14, 0x7fff}, {&(0x7f0000000480)="189ffc2596f9b66db82ffdb325fbd79de46d52a0239a4cc2ae0c13d0e61f56ab9c165dddf492d7e1feba042a86da64d589", 0x31, 0x100000000}], 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="6e6f92436c6b5f696f5f7375626d69742c636f6e746578743d737532652c636f6e746578743d73745866663d3078303030303030303030303030213030362c00"]) unlinkat(r2, &(0x7f00000005c0)='./file0\x00', 0x200) [ 143.139913] SELinux: Context KΝ is not valid (left unmapped). [ 143.167576] 9pnet_virtio: no channels available for device ./file0/file0 22:51:57 executing program 0: r0 = fsmount(0xffffffffffffffff, 0x0, 0x79) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000100)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x2103, 0x0) r1 = gettid() process_vm_readv(r1, &(0x7f00000002c0)=[{&(0x7f0000000200)=""/132, 0x84}], 0x1000000000000092, &(0x7f0000000680)=[{&(0x7f0000000800)=""/102400, 0x19000}], 0x1, 0x0) syz_open_procfs(r1, &(0x7f0000000000)='net/igmp6\x00') [ 143.184593] program syz-executor.7 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 143.187670] loop6: detected capacity change from 0 to 264192 [ 143.196013] SELinux: security_context_str_to_sid (su2e) failed with errno=-22 [ 143.201300] 9pnet_virtio: no channels available for device ./file0/file0 [ 143.218099] loop1: detected capacity change from 0 to 136 [ 143.232738] ISO 9660 Extensions: Microsoft Joliet Level 0 22:51:57 executing program 5: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x4840, 0x0) sendfile(r1, r2, &(0x7f0000000100)=0x100000000, 0x7) flistxattr(r1, &(0x7f00000002c0)=""/103, 0x67) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000280)={&(0x7f0000000000), 0xc, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="a8000000", @ANYRES16=0x0, @ANYBLOB="00012dbd7000fbdbc1253b00000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099008700000065000000040087007c00330010a400000802110000000802110000015050505050500508080044c0004c5b000100010184dd51b127bc883973bdf4b3aa1afa8631d1a36554d0cb333f389ffc527577216a37e1817b62223da1555d82d441d0e82449c20b5a8ef1e7170037bd586147608b3b14d1502d00a3cc1b94603c145281dcc578f7"], 0xa8}, 0x1, 0x0, 0x0, 0x20000000}, 0x4088800) clone(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) [ 143.355827] loop1: detected capacity change from 0 to 136 [ 143.361196] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x880700 phys_seg 1 prio class 2 [ 143.371066] ISO 9660 Extensions: Microsoft Joliet Level 0 [ 143.945211] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 143.946644] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 143.948068] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 143.949439] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 143.950813] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 143.952313] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 143.953697] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 143.955141] Bluetooth: hci7: Opcode 0x0c1a failed: -4 VM DIAGNOSIS: 22:51:48 Registers: info registers vcpu 0 RAX=000000000000002d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff82975135 RDI=ffffffff889c19e0 RBP=ffffffff889c19a0 RSP=ffff888009e474a8 R8 =0000000000000000 R9 =ffffed1001561046 R10=000000000000002d R11=000000002d2d2d2d R12=000000000000002d R13=0000000000000010 R14=ffffffff889c19a0 R15=ffffffff82975120 RIP=ffffffff8297518d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000555576ce9400 00000000 00000000 GS =0000 ffff8880e5342000 00000000 00000000 LDT=0000 fffffe5100000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f0ab3712e25 CR3=000000001e285000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000a60ce07b00000000cec3662e XMM01=000000000000000003515b82db34ca11 XMM02=0000000000000000333bebdfd0a6a21d XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000001 RBX=0000000000000001 RCX=ffffffff84d1a2ce RDX=fffffbfff0b82d11 RSI=0000000000000004 RDI=ffffffff85c16880 RBP=ffffffff85c16880 RSP=ffff88801b49fb10 R8 =0000000000000000 R9 =fffffbfff0b82d10 R10=ffffffff85c16883 R11=0000000000000000 R12=1ffff11003693f63 R13=0000000000000003 R14=fffffbfff0b82d10 R15=ffff88801b49fb48 RIP=ffffffff84d1a460 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 000055556a323400 00000000 00000000 GS =0000 ffff8880e5442000 00000000 00000000 LDT=0000 fffffe4300000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00005619aa40e000 CR3=000000000cee7000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ff00000000ff000000000000000000ff XMM01=25252525252525252525252525252525 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000