Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:35466' (ECDSA) to the list of known hosts. 2026/01/13 08:39:42 fuzzer started 2026/01/13 08:39:42 dialing manager at localhost:38155 syzkaller login: [ 44.742374] cgroup: Unknown subsys name 'net' [ 44.802209] cgroup: Unknown subsys name 'cpuset' [ 44.816304] cgroup: Unknown subsys name 'rlimit' 2026/01/13 08:39:54 syscalls: 2214 2026/01/13 08:39:54 code coverage: enabled 2026/01/13 08:39:54 comparison tracing: enabled 2026/01/13 08:39:54 extra coverage: enabled 2026/01/13 08:39:54 setuid sandbox: enabled 2026/01/13 08:39:54 namespace sandbox: enabled 2026/01/13 08:39:54 Android sandbox: enabled 2026/01/13 08:39:54 fault injection: enabled 2026/01/13 08:39:54 leak checking: enabled 2026/01/13 08:39:54 net packet injection: enabled 2026/01/13 08:39:54 net device setup: enabled 2026/01/13 08:39:54 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2026/01/13 08:39:54 devlink PCI setup: PCI device 0000:00:10.0 is not available 2026/01/13 08:39:54 USB emulation: enabled 2026/01/13 08:39:54 hci packet injection: enabled 2026/01/13 08:39:54 wifi device emulation: enabled 2026/01/13 08:39:54 802.15.4 emulation: enabled 2026/01/13 08:39:54 fetching corpus: 0, signal 0/2000 (executing program) 2026/01/13 08:39:54 fetching corpus: 42, signal 24808/28294 (executing program) 2026/01/13 08:39:54 fetching corpus: 88, signal 36074/40966 (executing program) 2026/01/13 08:39:54 fetching corpus: 138, signal 44426/50616 (executing program) 2026/01/13 08:39:55 fetching corpus: 188, signal 51771/59148 (executing program) 2026/01/13 08:39:55 fetching corpus: 238, signal 57398/65917 (executing program) 2026/01/13 08:39:55 fetching corpus: 288, signal 64599/73951 (executing program) 2026/01/13 08:39:55 fetching corpus: 338, signal 71199/81320 (executing program) 2026/01/13 08:39:55 fetching corpus: 388, signal 74980/86021 (executing program) 2026/01/13 08:39:55 fetching corpus: 438, signal 79831/91571 (executing program) 2026/01/13 08:39:55 fetching corpus: 488, signal 83588/96052 (executing program) 2026/01/13 08:39:56 fetching corpus: 538, signal 85491/98858 (executing program) 2026/01/13 08:39:56 fetching corpus: 588, signal 88459/102566 (executing program) 2026/01/13 08:39:56 fetching corpus: 638, signal 91248/106066 (executing program) 2026/01/13 08:39:56 fetching corpus: 688, signal 93796/109270 (executing program) 2026/01/13 08:39:56 fetching corpus: 738, signal 95771/111922 (executing program) 2026/01/13 08:39:56 fetching corpus: 788, signal 98251/114948 (executing program) 2026/01/13 08:39:56 fetching corpus: 838, signal 100057/117426 (executing program) 2026/01/13 08:39:56 fetching corpus: 888, signal 102866/120680 (executing program) 2026/01/13 08:39:56 fetching corpus: 938, signal 104457/122865 (executing program) 2026/01/13 08:39:57 fetching corpus: 988, signal 105978/124975 (executing program) 2026/01/13 08:39:57 fetching corpus: 1038, signal 107537/127099 (executing program) 2026/01/13 08:39:57 fetching corpus: 1088, signal 109031/129108 (executing program) 2026/01/13 08:39:57 fetching corpus: 1138, signal 112508/132607 (executing program) 2026/01/13 08:39:57 fetching corpus: 1188, signal 114126/134648 (executing program) 2026/01/13 08:39:57 fetching corpus: 1238, signal 115179/136228 (executing program) 2026/01/13 08:39:57 fetching corpus: 1288, signal 116953/138324 (executing program) 2026/01/13 08:39:57 fetching corpus: 1338, signal 118481/140142 (executing program) 2026/01/13 08:39:58 fetching corpus: 1388, signal 120251/142172 (executing program) 2026/01/13 08:39:58 fetching corpus: 1438, signal 121592/143879 (executing program) 2026/01/13 08:39:58 fetching corpus: 1488, signal 122845/145434 (executing program) 2026/01/13 08:39:58 fetching corpus: 1538, signal 124253/147099 (executing program) 2026/01/13 08:39:58 fetching corpus: 1588, signal 125427/148566 (executing program) 2026/01/13 08:39:58 fetching corpus: 1638, signal 126663/150079 (executing program) 2026/01/13 08:39:58 fetching corpus: 1688, signal 127817/151511 (executing program) 2026/01/13 08:39:58 fetching corpus: 1738, signal 129278/153093 (executing program) 2026/01/13 08:39:58 fetching corpus: 1788, signal 130184/154294 (executing program) 2026/01/13 08:39:59 fetching corpus: 1838, signal 131638/155810 (executing program) 2026/01/13 08:39:59 fetching corpus: 1888, signal 132850/157126 (executing program) 2026/01/13 08:39:59 fetching corpus: 1938, signal 134283/158617 (executing program) 2026/01/13 08:39:59 fetching corpus: 1988, signal 135374/159827 (executing program) 2026/01/13 08:39:59 fetching corpus: 2038, signal 136502/161063 (executing program) 2026/01/13 08:39:59 fetching corpus: 2088, signal 137742/162343 (executing program) 2026/01/13 08:40:00 fetching corpus: 2138, signal 138698/163429 (executing program) 2026/01/13 08:40:00 fetching corpus: 2188, signal 139558/164457 (executing program) 2026/01/13 08:40:00 fetching corpus: 2238, signal 140406/165442 (executing program) 2026/01/13 08:40:00 fetching corpus: 2288, signal 141185/166404 (executing program) 2026/01/13 08:40:00 fetching corpus: 2338, signal 142139/167405 (executing program) 2026/01/13 08:40:00 fetching corpus: 2388, signal 143147/168421 (executing program) 2026/01/13 08:40:00 fetching corpus: 2438, signal 143826/169272 (executing program) 2026/01/13 08:40:00 fetching corpus: 2488, signal 144460/170040 (executing program) 2026/01/13 08:40:00 fetching corpus: 2538, signal 145968/171209 (executing program) 2026/01/13 08:40:01 fetching corpus: 2588, signal 146961/172146 (executing program) 2026/01/13 08:40:01 fetching corpus: 2638, signal 147681/172922 (executing program) 2026/01/13 08:40:01 fetching corpus: 2688, signal 148900/173926 (executing program) 2026/01/13 08:40:01 fetching corpus: 2738, signal 149559/174687 (executing program) 2026/01/13 08:40:01 fetching corpus: 2788, signal 150530/175511 (executing program) 2026/01/13 08:40:01 fetching corpus: 2838, signal 151059/176171 (executing program) 2026/01/13 08:40:01 fetching corpus: 2888, signal 151940/176917 (executing program) 2026/01/13 08:40:01 fetching corpus: 2938, signal 152835/177687 (executing program) 2026/01/13 08:40:02 fetching corpus: 2988, signal 153693/178390 (executing program) 2026/01/13 08:40:02 fetching corpus: 3038, signal 154355/179050 (executing program) 2026/01/13 08:40:02 fetching corpus: 3088, signal 155233/179758 (executing program) 2026/01/13 08:40:02 fetching corpus: 3138, signal 155916/180358 (executing program) 2026/01/13 08:40:02 fetching corpus: 3188, signal 156734/181035 (executing program) 2026/01/13 08:40:02 fetching corpus: 3238, signal 157372/181620 (executing program) 2026/01/13 08:40:02 fetching corpus: 3286, signal 157821/182151 (executing program) 2026/01/13 08:40:02 fetching corpus: 3336, signal 158649/182740 (executing program) 2026/01/13 08:40:02 fetching corpus: 3386, signal 159136/183256 (executing program) 2026/01/13 08:40:03 fetching corpus: 3436, signal 160098/183845 (executing program) 2026/01/13 08:40:03 fetching corpus: 3486, signal 160807/184360 (executing program) 2026/01/13 08:40:03 fetching corpus: 3536, signal 162143/184985 (executing program) 2026/01/13 08:40:03 fetching corpus: 3585, signal 162568/185386 (executing program) 2026/01/13 08:40:03 fetching corpus: 3635, signal 163054/185819 (executing program) 2026/01/13 08:40:03 fetching corpus: 3685, signal 163711/186313 (executing program) 2026/01/13 08:40:03 fetching corpus: 3735, signal 164414/186771 (executing program) 2026/01/13 08:40:03 fetching corpus: 3785, signal 165129/187197 (executing program) 2026/01/13 08:40:03 fetching corpus: 3835, signal 166025/187660 (executing program) 2026/01/13 08:40:03 fetching corpus: 3885, signal 166460/188014 (executing program) 2026/01/13 08:40:04 fetching corpus: 3935, signal 167095/188356 (executing program) 2026/01/13 08:40:04 fetching corpus: 3985, signal 167583/188688 (executing program) 2026/01/13 08:40:04 fetching corpus: 4035, signal 168322/189053 (executing program) 2026/01/13 08:40:04 fetching corpus: 4085, signal 168736/189357 (executing program) 2026/01/13 08:40:04 fetching corpus: 4135, signal 169231/189665 (executing program) 2026/01/13 08:40:04 fetching corpus: 4185, signal 169789/189950 (executing program) 2026/01/13 08:40:04 fetching corpus: 4235, signal 170205/190235 (executing program) 2026/01/13 08:40:04 fetching corpus: 4285, signal 170757/190514 (executing program) 2026/01/13 08:40:05 fetching corpus: 4335, signal 171347/190815 (executing program) 2026/01/13 08:40:05 fetching corpus: 4385, signal 171789/191079 (executing program) 2026/01/13 08:40:05 fetching corpus: 4435, signal 172410/191344 (executing program) 2026/01/13 08:40:05 fetching corpus: 4485, signal 173113/191554 (executing program) 2026/01/13 08:40:05 fetching corpus: 4535, signal 173517/191783 (executing program) 2026/01/13 08:40:05 fetching corpus: 4585, signal 174038/191989 (executing program) 2026/01/13 08:40:05 fetching corpus: 4635, signal 174432/192199 (executing program) 2026/01/13 08:40:05 fetching corpus: 4685, signal 174915/192393 (executing program) 2026/01/13 08:40:05 fetching corpus: 4735, signal 175768/192476 (executing program) 2026/01/13 08:40:06 fetching corpus: 4785, signal 176439/192480 (executing program) 2026/01/13 08:40:06 fetching corpus: 4835, signal 176772/192494 (executing program) 2026/01/13 08:40:06 fetching corpus: 4885, signal 177112/192506 (executing program) 2026/01/13 08:40:06 fetching corpus: 4935, signal 177504/192511 (executing program) 2026/01/13 08:40:06 fetching corpus: 4985, signal 177917/192511 (executing program) 2026/01/13 08:40:06 fetching corpus: 5035, signal 178463/192514 (executing program) 2026/01/13 08:40:06 fetching corpus: 5085, signal 178975/192514 (executing program) 2026/01/13 08:40:06 fetching corpus: 5135, signal 179277/192514 (executing program) 2026/01/13 08:40:06 fetching corpus: 5185, signal 179612/192514 (executing program) 2026/01/13 08:40:07 fetching corpus: 5235, signal 180349/192514 (executing program) 2026/01/13 08:40:07 fetching corpus: 5285, signal 180779/192514 (executing program) 2026/01/13 08:40:07 fetching corpus: 5335, signal 181229/192515 (executing program) 2026/01/13 08:40:07 fetching corpus: 5385, signal 181590/192515 (executing program) 2026/01/13 08:40:07 fetching corpus: 5435, signal 182011/192535 (executing program) 2026/01/13 08:40:07 fetching corpus: 5485, signal 182441/192536 (executing program) 2026/01/13 08:40:07 fetching corpus: 5535, signal 182731/192536 (executing program) 2026/01/13 08:40:07 fetching corpus: 5585, signal 183189/192546 (executing program) 2026/01/13 08:40:07 fetching corpus: 5635, signal 183786/192546 (executing program) 2026/01/13 08:40:08 fetching corpus: 5685, signal 184285/192546 (executing program) 2026/01/13 08:40:08 fetching corpus: 5735, signal 184790/192547 (executing program) 2026/01/13 08:40:08 fetching corpus: 5785, signal 185257/192548 (executing program) 2026/01/13 08:40:08 fetching corpus: 5835, signal 185666/192548 (executing program) 2026/01/13 08:40:08 fetching corpus: 5885, signal 186364/192553 (executing program) 2026/01/13 08:40:08 fetching corpus: 5935, signal 186833/192554 (executing program) 2026/01/13 08:40:08 fetching corpus: 5985, signal 187109/192555 (executing program) 2026/01/13 08:40:08 fetching corpus: 6035, signal 187494/192556 (executing program) 2026/01/13 08:40:08 fetching corpus: 6085, signal 187811/192559 (executing program) 2026/01/13 08:40:08 fetching corpus: 6135, signal 188130/192559 (executing program) 2026/01/13 08:40:09 fetching corpus: 6185, signal 188453/192561 (executing program) 2026/01/13 08:40:09 fetching corpus: 6235, signal 188777/192561 (executing program) 2026/01/13 08:40:09 fetching corpus: 6285, signal 189300/192561 (executing program) 2026/01/13 08:40:09 fetching corpus: 6335, signal 189581/192573 (executing program) 2026/01/13 08:40:09 fetching corpus: 6385, signal 189989/192573 (executing program) 2026/01/13 08:40:09 fetching corpus: 6435, signal 190239/192582 (executing program) 2026/01/13 08:40:09 fetching corpus: 6485, signal 190494/192582 (executing program) 2026/01/13 08:40:09 fetching corpus: 6535, signal 190754/192582 (executing program) 2026/01/13 08:40:10 fetching corpus: 6585, signal 190997/192587 (executing program) 2026/01/13 08:40:10 fetching corpus: 6610, signal 191140/192587 (executing program) 2026/01/13 08:40:10 fetching corpus: 6610, signal 191140/192587 (executing program) 2026/01/13 08:40:12 starting 8 fuzzer processes 08:40:12 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file1', [{}]}, 0xc) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) 08:40:12 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x2, 0x1, 0x3, 0x0, 0x0, {}, [@CTA_STATUS={0x8}]}, 0x1c}}, 0x0) 08:40:12 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)={0x1c, 0x16, 0x1, 0x0, 0x0, "", [@typed={0xa, 0x0, 0x0, 0x0, @str='wlan1\x00'}]}, 0x1c}], 0x1}, 0x0) 08:40:12 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)={0x28, 0x13, 0x1, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x1c, 0x0, 0x0, @ipv4=@empty}]}]}, 0x28}], 0x1}, 0x0) 08:40:12 executing program 3: ioctl$F2FS_IOC_GARBAGE_COLLECT(0xffffffffffffffff, 0x4004f506, &(0x7f0000000040)=0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) listen(r3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00') pread64(r4, &(0x7f0000000100)=""/168, 0xa8, 0x500000000000003) 08:40:12 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setpriority(0x2, 0x0, 0x0) [ 72.596045] audit: type=1400 audit(1768293612.334:7): avc: denied { execmem } for pid=274 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 08:40:12 executing program 5: syz_emit_ethernet(0x22, &(0x7f0000000140)={@local, @multicast, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @empty, @broadcast}}}}}, 0x0) 08:40:12 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) migrate_pages(0x0, 0x5, 0x0, &(0x7f0000000100)=0x4) [ 73.776475] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 73.779061] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 73.781521] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 73.784010] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 73.788536] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 73.790635] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 73.796215] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 73.805731] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 73.816920] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 73.820613] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 73.849588] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 73.851454] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 73.855160] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 73.857959] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 73.865332] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 73.915830] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 73.922457] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 73.931154] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 73.964995] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 73.968675] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 73.969948] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 73.982703] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 74.010517] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 74.015375] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 74.027732] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 74.029197] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 74.030518] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 74.030564] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 74.033473] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 74.036435] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 74.038821] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 74.040304] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 74.043130] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 74.048652] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 74.054351] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 74.064190] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 74.065550] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 74.067389] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 74.136146] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 74.160122] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 75.863380] Bluetooth: hci1: command tx timeout [ 75.863925] Bluetooth: hci0: command tx timeout [ 75.927452] Bluetooth: hci2: command tx timeout [ 76.054979] Bluetooth: hci3: command tx timeout [ 76.118929] Bluetooth: hci5: command tx timeout [ 76.182960] Bluetooth: hci4: command tx timeout [ 76.183070] Bluetooth: hci7: command tx timeout [ 76.247005] Bluetooth: hci6: command tx timeout [ 77.911249] Bluetooth: hci1: command tx timeout [ 77.912046] Bluetooth: hci0: command tx timeout [ 77.975434] Bluetooth: hci2: command tx timeout [ 78.102961] Bluetooth: hci3: command tx timeout [ 78.167066] Bluetooth: hci5: command tx timeout [ 78.231551] Bluetooth: hci4: command tx timeout [ 78.231828] Bluetooth: hci7: command tx timeout [ 78.295606] Bluetooth: hci6: command tx timeout [ 79.959565] Bluetooth: hci0: command tx timeout [ 79.959957] Bluetooth: hci1: command tx timeout [ 80.022990] Bluetooth: hci2: command tx timeout [ 80.151901] Bluetooth: hci3: command tx timeout [ 80.215907] Bluetooth: hci5: command tx timeout [ 80.278957] Bluetooth: hci4: command tx timeout [ 80.279004] Bluetooth: hci7: command tx timeout [ 80.343863] Bluetooth: hci6: command tx timeout [ 82.007056] Bluetooth: hci0: command tx timeout [ 82.007097] Bluetooth: hci1: command tx timeout [ 82.070921] Bluetooth: hci2: command tx timeout [ 82.199727] Bluetooth: hci3: command tx timeout [ 82.264628] Bluetooth: hci5: command tx timeout [ 82.326937] Bluetooth: hci4: command tx timeout [ 82.326950] Bluetooth: hci7: command tx timeout [ 82.391961] Bluetooth: hci6: command tx timeout [ 109.980470] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.981119] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.150939] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.151532] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.518535] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.519165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.584519] process 'syz-executor.0' launched './file1' with NULL argv: empty string added [ 110.738418] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.740466] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.897920] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.898511] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.936350] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.936935] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.961799] audit: type=1400 audit(1768293650.697:8): avc: denied { open } for pid=3849 comm="syz-executor.6" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 110.965025] audit: type=1400 audit(1768293650.698:9): avc: denied { kernel } for pid=3849 comm="syz-executor.6" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 111.147915] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.149013] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.190742] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.194913] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.287250] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.287828] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.389047] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.389634] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.441346] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.442549] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.522395] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.523006] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.558249] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.558856] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.593628] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 111.595928] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 111.643013] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.643629] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.673208] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.674029] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.715716] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.717213] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 08:40:51 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)={0x28, 0x13, 0x1, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x1c, 0x0, 0x0, @ipv4=@empty}]}]}, 0x28}], 0x1}, 0x0) 08:40:51 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file1', [{}]}, 0xc) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) 08:40:51 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setpriority(0x2, 0x0, 0x0) 08:40:51 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)={0x1c, 0x16, 0x1, 0x0, 0x0, "", [@typed={0xa, 0x0, 0x0, 0x0, @str='wlan1\x00'}]}, 0x1c}], 0x1}, 0x0) 08:40:51 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x2, 0x1, 0x3, 0x0, 0x0, {}, [@CTA_STATUS={0x8}]}, 0x1c}}, 0x0) 08:40:51 executing program 5: syz_emit_ethernet(0x22, &(0x7f0000000140)={@local, @multicast, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @empty, @broadcast}}}}}, 0x0) 08:40:51 executing program 3: ioctl$F2FS_IOC_GARBAGE_COLLECT(0xffffffffffffffff, 0x4004f506, &(0x7f0000000040)=0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) listen(r3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00') pread64(r4, &(0x7f0000000100)=""/168, 0xa8, 0x500000000000003) 08:40:51 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) migrate_pages(0x0, 0x5, 0x0, &(0x7f0000000100)=0x4) [ 111.934429] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 08:40:51 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file1', [{}]}, 0xc) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) 08:40:51 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)={0x28, 0x13, 0x1, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x1c, 0x0, 0x0, @ipv4=@empty}]}]}, 0x28}], 0x1}, 0x0) 08:40:51 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)={0x1c, 0x16, 0x1, 0x0, 0x0, "", [@typed={0xa, 0x0, 0x0, 0x0, @str='wlan1\x00'}]}, 0x1c}], 0x1}, 0x0) 08:40:51 executing program 5: syz_emit_ethernet(0x22, &(0x7f0000000140)={@local, @multicast, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @empty, @broadcast}}}}}, 0x0) 08:40:51 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x2, 0x1, 0x3, 0x0, 0x0, {}, [@CTA_STATUS={0x8}]}, 0x1c}}, 0x0) [ 112.028033] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 08:40:51 executing program 3: ioctl$F2FS_IOC_GARBAGE_COLLECT(0xffffffffffffffff, 0x4004f506, &(0x7f0000000040)=0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) listen(r3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00') pread64(r4, &(0x7f0000000100)=""/168, 0xa8, 0x500000000000003) 08:40:51 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)={0x28, 0x13, 0x1, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x1c, 0x0, 0x0, @ipv4=@empty}]}]}, 0x28}], 0x1}, 0x0) 08:40:51 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setpriority(0x2, 0x0, 0x0) 08:40:51 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)={0x1c, 0x16, 0x1, 0x0, 0x0, "", [@typed={0xa, 0x0, 0x0, 0x0, @str='wlan1\x00'}]}, 0x1c}], 0x1}, 0x0) [ 112.101688] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 08:40:51 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file1', [{}]}, 0xc) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) 08:40:51 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x2, 0x1, 0x3, 0x0, 0x0, {}, [@CTA_STATUS={0x8}]}, 0x1c}}, 0x0) 08:40:51 executing program 5: syz_emit_ethernet(0x22, &(0x7f0000000140)={@local, @multicast, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @empty, @broadcast}}}}}, 0x0) 08:40:51 executing program 3: ioctl$F2FS_IOC_GARBAGE_COLLECT(0xffffffffffffffff, 0x4004f506, &(0x7f0000000040)=0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) listen(r3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00') pread64(r4, &(0x7f0000000100)=""/168, 0xa8, 0x500000000000003) 08:40:51 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setpriority(0x2, 0x0, 0x0) 08:40:51 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) migrate_pages(0x0, 0x5, 0x0, &(0x7f0000000100)=0x4) 08:40:52 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) migrate_pages(0x0, 0x5, 0x0, &(0x7f0000000100)=0x4) 08:40:52 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) migrate_pages(0x0, 0x5, 0x0, &(0x7f0000000100)=0x4) 08:40:52 executing program 1: keyctl$chown(0x4, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) 08:40:52 executing program 7: openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) creat(&(0x7f00000005c0)='./file0\x00', 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x9, 0x80}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 08:40:52 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f0000000100)) 08:40:52 executing program 1: keyctl$chown(0x4, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) 08:40:52 executing program 3: r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) 08:40:52 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f0000000100)) 08:40:52 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) migrate_pages(0x0, 0x5, 0x0, &(0x7f0000000100)=0x4) 08:40:52 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f0000000100)) 08:40:52 executing program 1: keyctl$chown(0x4, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) 08:40:52 executing program 1: keyctl$chown(0x4, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) [ 112.472645] [ 112.472829] ===================================== [ 112.473230] WARNING: bad unlock balance detected! [ 112.473626] 6.19.0-rc5-next-20260113 #1 Not tainted [ 112.474028] ------------------------------------- [ 112.474415] syz-executor.4/3965 is trying to release lock (rcu_read_lock) at: [ 112.475902] [] __wait_on_freeing_inode+0x105/0x350 [ 112.477444] but there are no more locks to release! [ 112.478599] [ 112.478599] other info that might help us debug this: [ 112.480583] 4 locks held by syz-executor.4/3965: [ 112.481735] #0: ffff88800fe783f8 (sb_writers#3){.+.+}-{0:0}, at: filename_create+0xf7/0x400 [ 112.484134] #1: ffff88804c8e16f0 (&type->i_mutex_dir_key#3/1){+.+.}-{4:4}, at: filename_create+0x1b1/0x400 [ 112.484952] #2: ffff88800fe7c950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xe32/0x12d0 [ 112.485682] #3: ffffffff85c16898 (inode_hash_lock){+.+.}-{3:3}, at: insert_inode_locked+0xf9/0x890 [ 112.486449] [ 112.486449] stack backtrace: [ 112.486824] CPU: 1 UID: 0 PID: 3965 Comm: syz-executor.4 Not tainted 6.19.0-rc5-next-20260113 #1 PREEMPT(lazy) [ 112.486839] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 112.486846] Call Trace: [ 112.486850] [ 112.486855] dump_stack_lvl+0xca/0x120 [ 112.486885] ? __wait_on_freeing_inode+0x105/0x350 [ 112.486900] print_unlock_imbalance_bug+0x118/0x130 [ 112.486916] ? __wait_on_freeing_inode+0x105/0x350 [ 112.486931] lock_release+0x1ee/0x270 [ 112.486945] __wait_on_freeing_inode+0x10a/0x350 [ 112.486961] ? __pfx___wait_on_freeing_inode+0x10/0x10 [ 112.486976] ? __pfx_var_wake_function+0x10/0x10 [ 112.486994] ? lock_is_held_type+0x9e/0x120 [ 112.487006] insert_inode_locked+0x25f/0x890 [ 112.487023] __ext4_new_inode+0x223d/0x4cd0 [ 112.487041] ? __pfx___ext4_new_inode+0x10/0x10 [ 112.487055] ? __pfx___dquot_initialize+0x10/0x10 [ 112.487074] ? __pfx_avc_has_perm+0x10/0x10 [ 112.487091] ext4_symlink+0x406/0xb40 [ 112.487110] ? __pfx_ext4_symlink+0x10/0x10 [ 112.487125] ? security_inode_permission+0x72/0xe0 [ 112.487139] vfs_symlink+0x44b/0x840 [ 112.487155] do_symlinkat+0x153/0x440 [ 112.487169] ? __pfx_do_symlinkat+0x10/0x10 [ 112.487182] ? strncpy_from_user+0x21b/0x2f0 [ 112.487200] __x64_sys_symlink+0x79/0xa0 [ 112.487214] do_syscall_64+0xbf/0x420 [ 112.487227] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.487240] RIP: 0033:0x7fd19b406427 [ 112.487249] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 58 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 112.487260] RSP: 002b:00007ffc1595d4a8 EFLAGS: 00000202 ORIG_RAX: 0000000000000058 [ 112.487271] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fd19b406427 [ 112.487278] RDX: 00007ffc1595d587 RSI: 00007fd19b461019 RDI: 00007ffc1595d570 [ 112.487285] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007ffc1595d340 [ 112.487292] R10: 00007ffc1595d1f7 R11: 0000000000000202 R12: 0000000000000001 [ 112.487299] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffc1595d570 [ 112.487309] [ 112.502603] ------------[ cut here ]------------ [ 112.503033] WARNING: kernel/rcu/tree_plugin.h:443 at __rcu_read_unlock+0x25f/0x5c0, CPU#1: syz-executor.4/3965 [ 112.503967] Modules linked in: [ 112.504274] CPU: 1 UID: 0 PID: 3965 Comm: syz-executor.4 Not tainted 6.19.0-rc5-next-20260113 #1 PREEMPT(lazy) [ 112.505128] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 112.505799] RIP: 0010:__rcu_read_unlock+0x25f/0x5c0 [ 112.506318] Code: f2 02 00 00 c7 43 58 01 00 00 00 bf 09 00 00 00 e8 a6 bb de ff 4d 85 f6 0f 84 73 fe ff ff e8 38 89 20 00 fb e9 68 fe ff ff 90 <0f> 0b 90 5b 5d 41 5c 41 5d 41 5e e9 61 f9 73 03 e8 0c 88 56 00 e9 [ 112.507844] RSP: 0018:ffff8880518079a0 EFLAGS: 00010286 [ 112.508329] RAX: 00000000ffffffff RBX: ffff88801b495280 RCX: ffffffff815664c7 [ 112.508958] RDX: 0000000000000000 RSI: ffffffff815664d0 RDI: ffff88801b49567c [ 112.509533] RBP: ffff88801b495280 R08: 0000000000000000 R09: fffffbfff0ba6ff4 [ 112.510158] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88801b495280 [ 112.510736] R13: 0000000000000001 R14: ffffffff85c0fdb0 R15: ffff88804c8e1fb0 [ 112.511366] FS: 0000555560528400(0000) GS:ffff8880e5442000(0000) knlGS:0000000000000000 [ 112.512081] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 112.512559] CR2: 00007fd19b486544 CR3: 0000000048f7b000 CR4: 0000000000350ef0 [ 112.513193] Call Trace: [ 112.513442] [ 112.514115] __wait_on_freeing_inode+0x10f/0x350 [ 112.514770] ? __pfx___wait_on_freeing_inode+0x10/0x10 [ 112.515850] ? __pfx_var_wake_function+0x10/0x10 [ 112.517093] ? lock_is_held_type+0x9e/0x120 [ 112.518154] insert_inode_locked+0x25f/0x890 [ 112.519705] __ext4_new_inode+0x223d/0x4cd0 [ 112.522077] ? __pfx___ext4_new_inode+0x10/0x10 [ 112.523249] ? __pfx___dquot_initialize+0x10/0x10 [ 112.524023] ? __pfx_avc_has_perm+0x10/0x10 [ 112.525673] ext4_symlink+0x406/0xb40 [ 112.527821] ? __pfx_ext4_symlink+0x10/0x10 [ 112.528800] ? security_inode_permission+0x72/0xe0 [ 112.530382] vfs_symlink+0x44b/0x840 [ 112.531604] do_symlinkat+0x153/0x440 [ 112.532680] ? __pfx_do_symlinkat+0x10/0x10 [ 112.533441] ? strncpy_from_user+0x21b/0x2f0 [ 112.538234] __x64_sys_symlink+0x79/0xa0 [ 112.539100] do_syscall_64+0xbf/0x420 [ 112.539930] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.540442] RIP: 0033:0x7fd19b406427 [ 112.540808] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 58 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 112.542337] RSP: 002b:00007ffc1595d4a8 EFLAGS: 00000202 ORIG_RAX: 0000000000000058 [ 112.543027] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fd19b406427 [ 112.543628] RDX: 00007ffc1595d587 RSI: 00007fd19b461019 RDI: 00007ffc1595d570 [ 112.544254] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007ffc1595d340 [ 112.544818] R10: 00007ffc1595d1f7 R11: 0000000000000202 R12: 0000000000000001 [ 112.545428] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffc1595d570 [ 112.547949] [ 112.548149] irq event stamp: 1001 [ 112.548428] hardirqs last enabled at (1001): [] _raw_spin_unlock_irqrestore+0x2c/0x50 [ 112.549298] hardirqs last disabled at (1000): [] _raw_spin_lock_irqsave+0x53/0x60 [ 112.550139] softirqs last enabled at (996): [] do_softirq+0x48/0x80 [ 112.550839] softirqs last disabled at (709): [] do_softirq+0x48/0x80 [ 112.551590] ---[ end trace 0000000000000000 ]--- 08:40:52 executing program 3: r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) 08:40:52 executing program 7: openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) creat(&(0x7f00000005c0)='./file0\x00', 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x9, 0x80}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 08:40:52 executing program 3: r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) 08:40:52 executing program 0: openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) creat(&(0x7f00000005c0)='./file0\x00', 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x9, 0x80}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 08:40:52 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) migrate_pages(0x0, 0x5, 0x0, &(0x7f0000000100)=0x4) 08:40:52 executing program 3: r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) 08:40:52 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_SETSEL(r0, 0x4b4b, &(0x7f0000000000)) 08:40:52 executing program 1: r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) 08:40:52 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f0000000100)) 08:40:52 executing program 7: openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) creat(&(0x7f00000005c0)='./file0\x00', 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x9, 0x80}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 08:40:52 executing program 6: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r0, &(0x7f0000000900)="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", 0x200) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x44000) sendfile(r0, r1, 0x0, 0xfdef) 08:40:52 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_SETSEL(r0, 0x4b4b, &(0x7f0000000000)) 08:40:52 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x28}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000280)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYRES16, @ANYRES32=0x0, @ANYBLOB="0008061001"], 0x30}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), r2) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0), r2) 08:40:52 executing program 1: r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) 08:40:52 executing program 0: openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) creat(&(0x7f00000005c0)='./file0\x00', 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x9, 0x80}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 08:40:52 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_SETSEL(r0, 0x4b4b, &(0x7f0000000000)) 08:40:52 executing program 7: openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) creat(&(0x7f00000005c0)='./file0\x00', 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x9, 0x80}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 08:40:52 executing program 2: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='attr/exec\x00') r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) r3 = dup2(r2, r2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001340)=@IORING_OP_CLOSE={0x13, 0x5}, 0x7) write$snapshot(r3, 0x0, 0x0) io_setup(0x1, &(0x7f0000000140)=0x0) r5 = syz_open_dev$vcsu(&(0x7f0000000180), 0x20, 0x420842) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) r7 = dup2(r6, r6) write$snapshot(r7, 0x0, 0x0) read(r0, &(0x7f00000013c0)=""/48, 0x30) r8 = syz_open_dev$vcsu(&(0x7f0000001380), 0xffffffffffffffff, 0x200a40) ioctl$SNAPSHOT_S2RAM(r8, 0x330b) io_cancel(r4, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x2, 0x0, r5, &(0x7f00000011c0)="ade8be2efd67fe4094ddc439a79f75e806b4f4cf7387a1d37d699c9c3d66f0b29c3d1c170af210ba5d5278757fbf3b992d884f3a722e4d5e079ac4fc62cee7add32af5c126a1ec7e5444b02b4771e684fa6eaffb3635f7cc2fe309dc8e3d5e8716da8e6b6de3dd972aa2fc94c6ac90cd9ec957e7e0acf93e996ab110d33a35f1cb9f3367a21f292acf16f4ebbd044c27c491ef6ab4e0815d7bec00ba944a3dfbbb80544cd6fd014f8bb2a64d59ac21ec24a47949798cb396b3cc9d7df12aeb8a3a35a66e9fd8c69a1225d3215fc16315d6a15b538ca3e9127c9f8c4d7b782e6cf5", 0xe1, 0x2, 0x0, 0x1, r7}, &(0x7f0000001300)) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x1, 0x27, 0x81, 0xc0, 0x0, 0x7fff, 0x2120, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x5, 0x800}, 0x2801, 0x1, 0x3, 0x2, 0x7fffffff, 0x3f, 0x9, 0x0, 0xe43, 0x0, 0x6}, 0xffffffffffffffff, 0x5, r3, 0x1) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r9, 0x29, 0x48, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000001400)=ANY=[@ANYBLOB="0100000001bbe4a173000000", @ANYRES32=r1, @ANYRES32=r9, @ANYBLOB='\x00\x00\x00\x00./file0\x00']) pread64(r1, &(0x7f00000001c0)=""/4096, 0x1000, 0x0) 08:40:52 executing program 6: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r0, &(0x7f0000000900)="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", 0x200) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x44000) sendfile(r0, r1, 0x0, 0xfdef) 08:40:52 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r0, &(0x7f0000000900)="5ed0b2ff68d76fb346352b602a2a1295cbe01cb3f64fbed9e7f9bc9be0f300cb97f6a204cc586e45dfb949002f61f8fb969dd435dd0c37c5077e5b10cfeafd75205e215b167323a3b971b0ec98e6c3d4d825cae01271cb35cdd091e4872367f354e0dc81a7e4ac79775bc1dcaafe2f5079da79d1989f1ddce6722fc438a7217526cfe75d53471624d6f091e19a7fb699ea27efa9e0fd1914e7c35f297afd9b9b85ff0ce7a982f4fa0c172ea5f06479eec302f30e5df66273717e028f4ca7d4c5b6bc8a3c3c67f688195f22488a15d9e1f7e5fed3a6c2aba7bc308b0e2c5657f4538f4a3bf9b975bb887a901ab3c85261be3e331b741313e78b5ad63b7b1b378e9c79dc4a95b2b4d15cd1d1b808844378f882a72af1e5b0eefd356e0247246e60643204c3b46183dbe4e066c55cb1dcdaa7b70ef43ab2fa4d2b8c4c1a89cb0e325fd9716874d3856cf368efd1f92d21214e55e4de647c37c71887d11f74f9afe1616e3054ceae601e4b3555e243c1882ad42c7730caeb309e7714ad87c55e9fba308cfc4161e562abde3ac4f3d7e0a3584d4928100197f102307c05c0b4b4898b0591bc1433af443478979f28e6136ffb21aaeac2be5490475a08e96bb94fd9d9d3aa2f8a1e147a80ba9bfd04dac3f476ff128476c693ea71f7be47a508c98eddc479eb703d6f17cc5be2182f7c39b0a47eb23e0808b5d87dd2a9ce88eb48a601", 0x200) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x44000) sendfile(r0, r1, 0x0, 0xfdef) [ 113.322504] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 113.327183] random: crng reseeded on system resumption [ 113.339046] audit: type=1400 audit(1768293653.077:10): avc: denied { read } for pid=3998 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 08:40:53 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_SETSEL(r0, 0x4b4b, &(0x7f0000000000)) 08:40:53 executing program 1: r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) 08:40:53 executing program 0: openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) creat(&(0x7f00000005c0)='./file0\x00', 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x9, 0x80}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 08:40:53 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x28}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000280)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYRES16, @ANYRES32=0x0, @ANYBLOB="0008061001"], 0x30}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), r2) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0), r2) [ 113.454365] random: crng reseeded on system resumption 08:40:53 executing program 5: newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setuid(r0) setreuid(0x0, 0x0) [ 113.550012] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. 08:40:53 executing program 6: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r0, &(0x7f0000000900)="5ed0b2ff68d76fb346352b602a2a1295cbe01cb3f64fbed9e7f9bc9be0f300cb97f6a204cc586e45dfb949002f61f8fb969dd435dd0c37c5077e5b10cfeafd75205e215b167323a3b971b0ec98e6c3d4d825cae01271cb35cdd091e4872367f354e0dc81a7e4ac79775bc1dcaafe2f5079da79d1989f1ddce6722fc438a7217526cfe75d53471624d6f091e19a7fb699ea27efa9e0fd1914e7c35f297afd9b9b85ff0ce7a982f4fa0c172ea5f06479eec302f30e5df66273717e028f4ca7d4c5b6bc8a3c3c67f688195f22488a15d9e1f7e5fed3a6c2aba7bc308b0e2c5657f4538f4a3bf9b975bb887a901ab3c85261be3e331b741313e78b5ad63b7b1b378e9c79dc4a95b2b4d15cd1d1b808844378f882a72af1e5b0eefd356e0247246e60643204c3b46183dbe4e066c55cb1dcdaa7b70ef43ab2fa4d2b8c4c1a89cb0e325fd9716874d3856cf368efd1f92d21214e55e4de647c37c71887d11f74f9afe1616e3054ceae601e4b3555e243c1882ad42c7730caeb309e7714ad87c55e9fba308cfc4161e562abde3ac4f3d7e0a3584d4928100197f102307c05c0b4b4898b0591bc1433af443478979f28e6136ffb21aaeac2be5490475a08e96bb94fd9d9d3aa2f8a1e147a80ba9bfd04dac3f476ff128476c693ea71f7be47a508c98eddc479eb703d6f17cc5be2182f7c39b0a47eb23e0808b5d87dd2a9ce88eb48a601", 0x200) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x44000) sendfile(r0, r1, 0x0, 0xfdef) 08:40:53 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x28}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000280)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYRES16, @ANYRES32=0x0, @ANYBLOB="0008061001"], 0x30}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), r2) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0), r2) 08:40:53 executing program 2: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='attr/exec\x00') r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) r3 = dup2(r2, r2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001340)=@IORING_OP_CLOSE={0x13, 0x5}, 0x7) write$snapshot(r3, 0x0, 0x0) io_setup(0x1, &(0x7f0000000140)=0x0) r5 = syz_open_dev$vcsu(&(0x7f0000000180), 0x20, 0x420842) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) r7 = dup2(r6, r6) write$snapshot(r7, 0x0, 0x0) read(r0, &(0x7f00000013c0)=""/48, 0x30) r8 = syz_open_dev$vcsu(&(0x7f0000001380), 0xffffffffffffffff, 0x200a40) ioctl$SNAPSHOT_S2RAM(r8, 0x330b) io_cancel(r4, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x2, 0x0, r5, &(0x7f00000011c0)="ade8be2efd67fe4094ddc439a79f75e806b4f4cf7387a1d37d699c9c3d66f0b29c3d1c170af210ba5d5278757fbf3b992d884f3a722e4d5e079ac4fc62cee7add32af5c126a1ec7e5444b02b4771e684fa6eaffb3635f7cc2fe309dc8e3d5e8716da8e6b6de3dd972aa2fc94c6ac90cd9ec957e7e0acf93e996ab110d33a35f1cb9f3367a21f292acf16f4ebbd044c27c491ef6ab4e0815d7bec00ba944a3dfbbb80544cd6fd014f8bb2a64d59ac21ec24a47949798cb396b3cc9d7df12aeb8a3a35a66e9fd8c69a1225d3215fc16315d6a15b538ca3e9127c9f8c4d7b782e6cf5", 0xe1, 0x2, 0x0, 0x1, r7}, &(0x7f0000001300)) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x1, 0x27, 0x81, 0xc0, 0x0, 0x7fff, 0x2120, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x5, 0x800}, 0x2801, 0x1, 0x3, 0x2, 0x7fffffff, 0x3f, 0x9, 0x0, 0xe43, 0x0, 0x6}, 0xffffffffffffffff, 0x5, r3, 0x1) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r9, 0x29, 0x48, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000001400)=ANY=[@ANYBLOB="0100000001bbe4a173000000", @ANYRES32=r1, @ANYRES32=r9, @ANYBLOB='\x00\x00\x00\x00./file0\x00']) pread64(r1, &(0x7f00000001c0)=""/4096, 0x1000, 0x0) 08:40:53 executing program 7: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='attr/exec\x00') r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) r3 = dup2(r2, r2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001340)=@IORING_OP_CLOSE={0x13, 0x5}, 0x7) write$snapshot(r3, 0x0, 0x0) io_setup(0x1, &(0x7f0000000140)=0x0) r5 = syz_open_dev$vcsu(&(0x7f0000000180), 0x20, 0x420842) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) r7 = dup2(r6, r6) write$snapshot(r7, 0x0, 0x0) read(r0, &(0x7f00000013c0)=""/48, 0x30) r8 = syz_open_dev$vcsu(&(0x7f0000001380), 0xffffffffffffffff, 0x200a40) ioctl$SNAPSHOT_S2RAM(r8, 0x330b) io_cancel(r4, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x2, 0x0, r5, &(0x7f00000011c0)="ade8be2efd67fe4094ddc439a79f75e806b4f4cf7387a1d37d699c9c3d66f0b29c3d1c170af210ba5d5278757fbf3b992d884f3a722e4d5e079ac4fc62cee7add32af5c126a1ec7e5444b02b4771e684fa6eaffb3635f7cc2fe309dc8e3d5e8716da8e6b6de3dd972aa2fc94c6ac90cd9ec957e7e0acf93e996ab110d33a35f1cb9f3367a21f292acf16f4ebbd044c27c491ef6ab4e0815d7bec00ba944a3dfbbb80544cd6fd014f8bb2a64d59ac21ec24a47949798cb396b3cc9d7df12aeb8a3a35a66e9fd8c69a1225d3215fc16315d6a15b538ca3e9127c9f8c4d7b782e6cf5", 0xe1, 0x2, 0x0, 0x1, r7}, &(0x7f0000001300)) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x1, 0x27, 0x81, 0xc0, 0x0, 0x7fff, 0x2120, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x5, 0x800}, 0x2801, 0x1, 0x3, 0x2, 0x7fffffff, 0x3f, 0x9, 0x0, 0xe43, 0x0, 0x6}, 0xffffffffffffffff, 0x5, r3, 0x1) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r9, 0x29, 0x48, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000001400)=ANY=[@ANYBLOB="0100000001bbe4a173000000", @ANYRES32=r1, @ANYRES32=r9, @ANYBLOB='\x00\x00\x00\x00./file0\x00']) pread64(r1, &(0x7f00000001c0)=""/4096, 0x1000, 0x0) 08:40:53 executing program 5: newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setuid(r0) setreuid(0x0, 0x0) 08:40:53 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='attr/exec\x00') r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) r3 = dup2(r2, r2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001340)=@IORING_OP_CLOSE={0x13, 0x5}, 0x7) write$snapshot(r3, 0x0, 0x0) io_setup(0x1, &(0x7f0000000140)=0x0) r5 = syz_open_dev$vcsu(&(0x7f0000000180), 0x20, 0x420842) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) r7 = dup2(r6, r6) write$snapshot(r7, 0x0, 0x0) read(r0, &(0x7f00000013c0)=""/48, 0x30) r8 = syz_open_dev$vcsu(&(0x7f0000001380), 0xffffffffffffffff, 0x200a40) ioctl$SNAPSHOT_S2RAM(r8, 0x330b) io_cancel(r4, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x2, 0x0, r5, &(0x7f00000011c0)="ade8be2efd67fe4094ddc439a79f75e806b4f4cf7387a1d37d699c9c3d66f0b29c3d1c170af210ba5d5278757fbf3b992d884f3a722e4d5e079ac4fc62cee7add32af5c126a1ec7e5444b02b4771e684fa6eaffb3635f7cc2fe309dc8e3d5e8716da8e6b6de3dd972aa2fc94c6ac90cd9ec957e7e0acf93e996ab110d33a35f1cb9f3367a21f292acf16f4ebbd044c27c491ef6ab4e0815d7bec00ba944a3dfbbb80544cd6fd014f8bb2a64d59ac21ec24a47949798cb396b3cc9d7df12aeb8a3a35a66e9fd8c69a1225d3215fc16315d6a15b538ca3e9127c9f8c4d7b782e6cf5", 0xe1, 0x2, 0x0, 0x1, r7}, &(0x7f0000001300)) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x1, 0x27, 0x81, 0xc0, 0x0, 0x7fff, 0x2120, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x5, 0x800}, 0x2801, 0x1, 0x3, 0x2, 0x7fffffff, 0x3f, 0x9, 0x0, 0xe43, 0x0, 0x6}, 0xffffffffffffffff, 0x5, r3, 0x1) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r9, 0x29, 0x48, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000001400)=ANY=[@ANYBLOB="0100000001bbe4a173000000", @ANYRES32=r1, @ANYRES32=r9, @ANYBLOB='\x00\x00\x00\x00./file0\x00']) pread64(r1, &(0x7f00000001c0)=""/4096, 0x1000, 0x0) 08:40:53 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r0, &(0x7f0000000900)="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", 0x200) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x44000) sendfile(r0, r1, 0x0, 0xfdef) 08:40:53 executing program 1: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='attr/exec\x00') r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) r3 = dup2(r2, r2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001340)=@IORING_OP_CLOSE={0x13, 0x5}, 0x7) write$snapshot(r3, 0x0, 0x0) io_setup(0x1, &(0x7f0000000140)=0x0) r5 = syz_open_dev$vcsu(&(0x7f0000000180), 0x20, 0x420842) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) r7 = dup2(r6, r6) write$snapshot(r7, 0x0, 0x0) read(r0, &(0x7f00000013c0)=""/48, 0x30) r8 = syz_open_dev$vcsu(&(0x7f0000001380), 0xffffffffffffffff, 0x200a40) ioctl$SNAPSHOT_S2RAM(r8, 0x330b) io_cancel(r4, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x2, 0x0, r5, &(0x7f00000011c0)="ade8be2efd67fe4094ddc439a79f75e806b4f4cf7387a1d37d699c9c3d66f0b29c3d1c170af210ba5d5278757fbf3b992d884f3a722e4d5e079ac4fc62cee7add32af5c126a1ec7e5444b02b4771e684fa6eaffb3635f7cc2fe309dc8e3d5e8716da8e6b6de3dd972aa2fc94c6ac90cd9ec957e7e0acf93e996ab110d33a35f1cb9f3367a21f292acf16f4ebbd044c27c491ef6ab4e0815d7bec00ba944a3dfbbb80544cd6fd014f8bb2a64d59ac21ec24a47949798cb396b3cc9d7df12aeb8a3a35a66e9fd8c69a1225d3215fc16315d6a15b538ca3e9127c9f8c4d7b782e6cf5", 0xe1, 0x2, 0x0, 0x1, r7}, &(0x7f0000001300)) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x1, 0x27, 0x81, 0xc0, 0x0, 0x7fff, 0x2120, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x5, 0x800}, 0x2801, 0x1, 0x3, 0x2, 0x7fffffff, 0x3f, 0x9, 0x0, 0xe43, 0x0, 0x6}, 0xffffffffffffffff, 0x5, r3, 0x1) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r9, 0x29, 0x48, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000001400)=ANY=[@ANYBLOB="0100000001bbe4a173000000", @ANYRES32=r1, @ANYRES32=r9, @ANYBLOB='\x00\x00\x00\x00./file0\x00']) pread64(r1, &(0x7f00000001c0)=""/4096, 0x1000, 0x0) [ 113.893207] random: crng reseeded on system resumption [ 113.897099] random: crng reseeded on system resumption 08:40:53 executing program 5: newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setuid(r0) setreuid(0x0, 0x0) [ 113.907410] random: crng reseeded on system resumption [ 113.917361] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. 08:40:53 executing program 2: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='attr/exec\x00') r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) r3 = dup2(r2, r2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001340)=@IORING_OP_CLOSE={0x13, 0x5}, 0x7) write$snapshot(r3, 0x0, 0x0) io_setup(0x1, &(0x7f0000000140)=0x0) r5 = syz_open_dev$vcsu(&(0x7f0000000180), 0x20, 0x420842) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) r7 = dup2(r6, r6) write$snapshot(r7, 0x0, 0x0) read(r0, &(0x7f00000013c0)=""/48, 0x30) r8 = syz_open_dev$vcsu(&(0x7f0000001380), 0xffffffffffffffff, 0x200a40) ioctl$SNAPSHOT_S2RAM(r8, 0x330b) io_cancel(r4, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x2, 0x0, r5, &(0x7f00000011c0)="ade8be2efd67fe4094ddc439a79f75e806b4f4cf7387a1d37d699c9c3d66f0b29c3d1c170af210ba5d5278757fbf3b992d884f3a722e4d5e079ac4fc62cee7add32af5c126a1ec7e5444b02b4771e684fa6eaffb3635f7cc2fe309dc8e3d5e8716da8e6b6de3dd972aa2fc94c6ac90cd9ec957e7e0acf93e996ab110d33a35f1cb9f3367a21f292acf16f4ebbd044c27c491ef6ab4e0815d7bec00ba944a3dfbbb80544cd6fd014f8bb2a64d59ac21ec24a47949798cb396b3cc9d7df12aeb8a3a35a66e9fd8c69a1225d3215fc16315d6a15b538ca3e9127c9f8c4d7b782e6cf5", 0xe1, 0x2, 0x0, 0x1, r7}, &(0x7f0000001300)) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x1, 0x27, 0x81, 0xc0, 0x0, 0x7fff, 0x2120, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x5, 0x800}, 0x2801, 0x1, 0x3, 0x2, 0x7fffffff, 0x3f, 0x9, 0x0, 0xe43, 0x0, 0x6}, 0xffffffffffffffff, 0x5, r3, 0x1) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r9, 0x29, 0x48, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000001400)=ANY=[@ANYBLOB="0100000001bbe4a173000000", @ANYRES32=r1, @ANYRES32=r9, @ANYBLOB='\x00\x00\x00\x00./file0\x00']) pread64(r1, &(0x7f00000001c0)=""/4096, 0x1000, 0x0) 08:40:53 executing program 7: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='attr/exec\x00') r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) r3 = dup2(r2, r2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001340)=@IORING_OP_CLOSE={0x13, 0x5}, 0x7) write$snapshot(r3, 0x0, 0x0) io_setup(0x1, &(0x7f0000000140)=0x0) r5 = syz_open_dev$vcsu(&(0x7f0000000180), 0x20, 0x420842) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) r7 = dup2(r6, r6) write$snapshot(r7, 0x0, 0x0) read(r0, &(0x7f00000013c0)=""/48, 0x30) r8 = syz_open_dev$vcsu(&(0x7f0000001380), 0xffffffffffffffff, 0x200a40) ioctl$SNAPSHOT_S2RAM(r8, 0x330b) io_cancel(r4, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x2, 0x0, r5, &(0x7f00000011c0)="ade8be2efd67fe4094ddc439a79f75e806b4f4cf7387a1d37d699c9c3d66f0b29c3d1c170af210ba5d5278757fbf3b992d884f3a722e4d5e079ac4fc62cee7add32af5c126a1ec7e5444b02b4771e684fa6eaffb3635f7cc2fe309dc8e3d5e8716da8e6b6de3dd972aa2fc94c6ac90cd9ec957e7e0acf93e996ab110d33a35f1cb9f3367a21f292acf16f4ebbd044c27c491ef6ab4e0815d7bec00ba944a3dfbbb80544cd6fd014f8bb2a64d59ac21ec24a47949798cb396b3cc9d7df12aeb8a3a35a66e9fd8c69a1225d3215fc16315d6a15b538ca3e9127c9f8c4d7b782e6cf5", 0xe1, 0x2, 0x0, 0x1, r7}, &(0x7f0000001300)) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x1, 0x27, 0x81, 0xc0, 0x0, 0x7fff, 0x2120, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x5, 0x800}, 0x2801, 0x1, 0x3, 0x2, 0x7fffffff, 0x3f, 0x9, 0x0, 0xe43, 0x0, 0x6}, 0xffffffffffffffff, 0x5, r3, 0x1) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r9, 0x29, 0x48, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000001400)=ANY=[@ANYBLOB="0100000001bbe4a173000000", @ANYRES32=r1, @ANYRES32=r9, @ANYBLOB='\x00\x00\x00\x00./file0\x00']) pread64(r1, &(0x7f00000001c0)=""/4096, 0x1000, 0x0) [ 113.968369] random: crng reseeded on system resumption 08:40:53 executing program 1: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='attr/exec\x00') r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) r3 = dup2(r2, r2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001340)=@IORING_OP_CLOSE={0x13, 0x5}, 0x7) write$snapshot(r3, 0x0, 0x0) io_setup(0x1, &(0x7f0000000140)=0x0) r5 = syz_open_dev$vcsu(&(0x7f0000000180), 0x20, 0x420842) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) r7 = dup2(r6, r6) write$snapshot(r7, 0x0, 0x0) read(r0, &(0x7f00000013c0)=""/48, 0x30) r8 = syz_open_dev$vcsu(&(0x7f0000001380), 0xffffffffffffffff, 0x200a40) ioctl$SNAPSHOT_S2RAM(r8, 0x330b) io_cancel(r4, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x2, 0x0, r5, &(0x7f00000011c0)="ade8be2efd67fe4094ddc439a79f75e806b4f4cf7387a1d37d699c9c3d66f0b29c3d1c170af210ba5d5278757fbf3b992d884f3a722e4d5e079ac4fc62cee7add32af5c126a1ec7e5444b02b4771e684fa6eaffb3635f7cc2fe309dc8e3d5e8716da8e6b6de3dd972aa2fc94c6ac90cd9ec957e7e0acf93e996ab110d33a35f1cb9f3367a21f292acf16f4ebbd044c27c491ef6ab4e0815d7bec00ba944a3dfbbb80544cd6fd014f8bb2a64d59ac21ec24a47949798cb396b3cc9d7df12aeb8a3a35a66e9fd8c69a1225d3215fc16315d6a15b538ca3e9127c9f8c4d7b782e6cf5", 0xe1, 0x2, 0x0, 0x1, r7}, &(0x7f0000001300)) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x1, 0x27, 0x81, 0xc0, 0x0, 0x7fff, 0x2120, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x5, 0x800}, 0x2801, 0x1, 0x3, 0x2, 0x7fffffff, 0x3f, 0x9, 0x0, 0xe43, 0x0, 0x6}, 0xffffffffffffffff, 0x5, r3, 0x1) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r9, 0x29, 0x48, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000001400)=ANY=[@ANYBLOB="0100000001bbe4a173000000", @ANYRES32=r1, @ANYRES32=r9, @ANYBLOB='\x00\x00\x00\x00./file0\x00']) pread64(r1, &(0x7f00000001c0)=""/4096, 0x1000, 0x0) 08:40:53 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x28}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000280)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYRES16, @ANYRES32=0x0, @ANYBLOB="0008061001"], 0x30}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), r2) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0), r2) 08:40:53 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='attr/exec\x00') r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) r3 = dup2(r2, r2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001340)=@IORING_OP_CLOSE={0x13, 0x5}, 0x7) write$snapshot(r3, 0x0, 0x0) io_setup(0x1, &(0x7f0000000140)=0x0) r5 = syz_open_dev$vcsu(&(0x7f0000000180), 0x20, 0x420842) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) r7 = dup2(r6, r6) write$snapshot(r7, 0x0, 0x0) read(r0, &(0x7f00000013c0)=""/48, 0x30) r8 = syz_open_dev$vcsu(&(0x7f0000001380), 0xffffffffffffffff, 0x200a40) ioctl$SNAPSHOT_S2RAM(r8, 0x330b) io_cancel(r4, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x2, 0x0, r5, &(0x7f00000011c0)="ade8be2efd67fe4094ddc439a79f75e806b4f4cf7387a1d37d699c9c3d66f0b29c3d1c170af210ba5d5278757fbf3b992d884f3a722e4d5e079ac4fc62cee7add32af5c126a1ec7e5444b02b4771e684fa6eaffb3635f7cc2fe309dc8e3d5e8716da8e6b6de3dd972aa2fc94c6ac90cd9ec957e7e0acf93e996ab110d33a35f1cb9f3367a21f292acf16f4ebbd044c27c491ef6ab4e0815d7bec00ba944a3dfbbb80544cd6fd014f8bb2a64d59ac21ec24a47949798cb396b3cc9d7df12aeb8a3a35a66e9fd8c69a1225d3215fc16315d6a15b538ca3e9127c9f8c4d7b782e6cf5", 0xe1, 0x2, 0x0, 0x1, r7}, &(0x7f0000001300)) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x1, 0x27, 0x81, 0xc0, 0x0, 0x7fff, 0x2120, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x5, 0x800}, 0x2801, 0x1, 0x3, 0x2, 0x7fffffff, 0x3f, 0x9, 0x0, 0xe43, 0x0, 0x6}, 0xffffffffffffffff, 0x5, r3, 0x1) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r9, 0x29, 0x48, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000001400)=ANY=[@ANYBLOB="0100000001bbe4a173000000", @ANYRES32=r1, @ANYRES32=r9, @ANYBLOB='\x00\x00\x00\x00./file0\x00']) pread64(r1, &(0x7f00000001c0)=""/4096, 0x1000, 0x0) 08:40:53 executing program 7: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='attr/exec\x00') r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) r3 = dup2(r2, r2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001340)=@IORING_OP_CLOSE={0x13, 0x5}, 0x7) write$snapshot(r3, 0x0, 0x0) io_setup(0x1, &(0x7f0000000140)=0x0) r5 = syz_open_dev$vcsu(&(0x7f0000000180), 0x20, 0x420842) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) r7 = dup2(r6, r6) write$snapshot(r7, 0x0, 0x0) read(r0, &(0x7f00000013c0)=""/48, 0x30) r8 = syz_open_dev$vcsu(&(0x7f0000001380), 0xffffffffffffffff, 0x200a40) ioctl$SNAPSHOT_S2RAM(r8, 0x330b) io_cancel(r4, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x2, 0x0, r5, &(0x7f00000011c0)="ade8be2efd67fe4094ddc439a79f75e806b4f4cf7387a1d37d699c9c3d66f0b29c3d1c170af210ba5d5278757fbf3b992d884f3a722e4d5e079ac4fc62cee7add32af5c126a1ec7e5444b02b4771e684fa6eaffb3635f7cc2fe309dc8e3d5e8716da8e6b6de3dd972aa2fc94c6ac90cd9ec957e7e0acf93e996ab110d33a35f1cb9f3367a21f292acf16f4ebbd044c27c491ef6ab4e0815d7bec00ba944a3dfbbb80544cd6fd014f8bb2a64d59ac21ec24a47949798cb396b3cc9d7df12aeb8a3a35a66e9fd8c69a1225d3215fc16315d6a15b538ca3e9127c9f8c4d7b782e6cf5", 0xe1, 0x2, 0x0, 0x1, r7}, &(0x7f0000001300)) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x1, 0x27, 0x81, 0xc0, 0x0, 0x7fff, 0x2120, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x5, 0x800}, 0x2801, 0x1, 0x3, 0x2, 0x7fffffff, 0x3f, 0x9, 0x0, 0xe43, 0x0, 0x6}, 0xffffffffffffffff, 0x5, r3, 0x1) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r9, 0x29, 0x48, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000001400)=ANY=[@ANYBLOB="0100000001bbe4a173000000", @ANYRES32=r1, @ANYRES32=r9, @ANYBLOB='\x00\x00\x00\x00./file0\x00']) pread64(r1, &(0x7f00000001c0)=""/4096, 0x1000, 0x0) 08:40:53 executing program 5: newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setuid(r0) setreuid(0x0, 0x0) [ 114.082539] random: crng reseeded on system resumption [ 114.155310] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. 08:40:54 executing program 6: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r0, &(0x7f0000000900)="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", 0x200) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x44000) sendfile(r0, r1, 0x0, 0xfdef) 08:40:54 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r0, &(0x7f0000000900)="5ed0b2ff68d76fb346352b602a2a1295cbe01cb3f64fbed9e7f9bc9be0f300cb97f6a204cc586e45dfb949002f61f8fb969dd435dd0c37c5077e5b10cfeafd75205e215b167323a3b971b0ec98e6c3d4d825cae01271cb35cdd091e4872367f354e0dc81a7e4ac79775bc1dcaafe2f5079da79d1989f1ddce6722fc438a7217526cfe75d53471624d6f091e19a7fb699ea27efa9e0fd1914e7c35f297afd9b9b85ff0ce7a982f4fa0c172ea5f06479eec302f30e5df66273717e028f4ca7d4c5b6bc8a3c3c67f688195f22488a15d9e1f7e5fed3a6c2aba7bc308b0e2c5657f4538f4a3bf9b975bb887a901ab3c85261be3e331b741313e78b5ad63b7b1b378e9c79dc4a95b2b4d15cd1d1b808844378f882a72af1e5b0eefd356e0247246e60643204c3b46183dbe4e066c55cb1dcdaa7b70ef43ab2fa4d2b8c4c1a89cb0e325fd9716874d3856cf368efd1f92d21214e55e4de647c37c71887d11f74f9afe1616e3054ceae601e4b3555e243c1882ad42c7730caeb309e7714ad87c55e9fba308cfc4161e562abde3ac4f3d7e0a3584d4928100197f102307c05c0b4b4898b0591bc1433af443478979f28e6136ffb21aaeac2be5490475a08e96bb94fd9d9d3aa2f8a1e147a80ba9bfd04dac3f476ff128476c693ea71f7be47a508c98eddc479eb703d6f17cc5be2182f7c39b0a47eb23e0808b5d87dd2a9ce88eb48a601", 0x200) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x44000) sendfile(r0, r1, 0x0, 0xfdef) 08:40:54 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0xc0505405, &(0x7f0000000040)={{0x1}}) 08:40:54 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='attr/exec\x00') r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) r3 = dup2(r2, r2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001340)=@IORING_OP_CLOSE={0x13, 0x5}, 0x7) write$snapshot(r3, 0x0, 0x0) io_setup(0x1, &(0x7f0000000140)=0x0) r5 = syz_open_dev$vcsu(&(0x7f0000000180), 0x20, 0x420842) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) r7 = dup2(r6, r6) write$snapshot(r7, 0x0, 0x0) read(r0, &(0x7f00000013c0)=""/48, 0x30) r8 = syz_open_dev$vcsu(&(0x7f0000001380), 0xffffffffffffffff, 0x200a40) ioctl$SNAPSHOT_S2RAM(r8, 0x330b) io_cancel(r4, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x2, 0x0, r5, &(0x7f00000011c0)="ade8be2efd67fe4094ddc439a79f75e806b4f4cf7387a1d37d699c9c3d66f0b29c3d1c170af210ba5d5278757fbf3b992d884f3a722e4d5e079ac4fc62cee7add32af5c126a1ec7e5444b02b4771e684fa6eaffb3635f7cc2fe309dc8e3d5e8716da8e6b6de3dd972aa2fc94c6ac90cd9ec957e7e0acf93e996ab110d33a35f1cb9f3367a21f292acf16f4ebbd044c27c491ef6ab4e0815d7bec00ba944a3dfbbb80544cd6fd014f8bb2a64d59ac21ec24a47949798cb396b3cc9d7df12aeb8a3a35a66e9fd8c69a1225d3215fc16315d6a15b538ca3e9127c9f8c4d7b782e6cf5", 0xe1, 0x2, 0x0, 0x1, r7}, &(0x7f0000001300)) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x1, 0x27, 0x81, 0xc0, 0x0, 0x7fff, 0x2120, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x5, 0x800}, 0x2801, 0x1, 0x3, 0x2, 0x7fffffff, 0x3f, 0x9, 0x0, 0xe43, 0x0, 0x6}, 0xffffffffffffffff, 0x5, r3, 0x1) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r9, 0x29, 0x48, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000001400)=ANY=[@ANYBLOB="0100000001bbe4a173000000", @ANYRES32=r1, @ANYRES32=r9, @ANYBLOB='\x00\x00\x00\x00./file0\x00']) pread64(r1, &(0x7f00000001c0)=""/4096, 0x1000, 0x0) 08:40:54 executing program 1: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='attr/exec\x00') r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) r3 = dup2(r2, r2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001340)=@IORING_OP_CLOSE={0x13, 0x5}, 0x7) write$snapshot(r3, 0x0, 0x0) io_setup(0x1, &(0x7f0000000140)=0x0) r5 = syz_open_dev$vcsu(&(0x7f0000000180), 0x20, 0x420842) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) r7 = dup2(r6, r6) write$snapshot(r7, 0x0, 0x0) read(r0, &(0x7f00000013c0)=""/48, 0x30) r8 = syz_open_dev$vcsu(&(0x7f0000001380), 0xffffffffffffffff, 0x200a40) ioctl$SNAPSHOT_S2RAM(r8, 0x330b) io_cancel(r4, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x2, 0x0, r5, &(0x7f00000011c0)="ade8be2efd67fe4094ddc439a79f75e806b4f4cf7387a1d37d699c9c3d66f0b29c3d1c170af210ba5d5278757fbf3b992d884f3a722e4d5e079ac4fc62cee7add32af5c126a1ec7e5444b02b4771e684fa6eaffb3635f7cc2fe309dc8e3d5e8716da8e6b6de3dd972aa2fc94c6ac90cd9ec957e7e0acf93e996ab110d33a35f1cb9f3367a21f292acf16f4ebbd044c27c491ef6ab4e0815d7bec00ba944a3dfbbb80544cd6fd014f8bb2a64d59ac21ec24a47949798cb396b3cc9d7df12aeb8a3a35a66e9fd8c69a1225d3215fc16315d6a15b538ca3e9127c9f8c4d7b782e6cf5", 0xe1, 0x2, 0x0, 0x1, r7}, &(0x7f0000001300)) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x1, 0x27, 0x81, 0xc0, 0x0, 0x7fff, 0x2120, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x5, 0x800}, 0x2801, 0x1, 0x3, 0x2, 0x7fffffff, 0x3f, 0x9, 0x0, 0xe43, 0x0, 0x6}, 0xffffffffffffffff, 0x5, r3, 0x1) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r9, 0x29, 0x48, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000001400)=ANY=[@ANYBLOB="0100000001bbe4a173000000", @ANYRES32=r1, @ANYRES32=r9, @ANYBLOB='\x00\x00\x00\x00./file0\x00']) pread64(r1, &(0x7f00000001c0)=""/4096, 0x1000, 0x0) 08:40:54 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000100000005000000000004000040000020000000ddf4655fddf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000001000008000000d24201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e7e1fc40a6de4c28a2c3627f6ec42b47010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000f5a98cb97d640000000060", 0x13, 0x540}], 0x0, &(0x7f0000014100)) 08:40:54 executing program 4: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000200)={0x80, 0x0, 'client1\x00', 0x0, "3ea01b02c06ead7d", "7e8367a423427a1485773e6c861fe3c6df6c110eb037b8d7c4b2c8e7014cf7c1"}) [ 114.762507] random: crng reseeded on system resumption 08:40:54 executing program 2: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='attr/exec\x00') r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) r3 = dup2(r2, r2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001340)=@IORING_OP_CLOSE={0x13, 0x5}, 0x7) write$snapshot(r3, 0x0, 0x0) io_setup(0x1, &(0x7f0000000140)=0x0) r5 = syz_open_dev$vcsu(&(0x7f0000000180), 0x20, 0x420842) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) r7 = dup2(r6, r6) write$snapshot(r7, 0x0, 0x0) read(r0, &(0x7f00000013c0)=""/48, 0x30) r8 = syz_open_dev$vcsu(&(0x7f0000001380), 0xffffffffffffffff, 0x200a40) ioctl$SNAPSHOT_S2RAM(r8, 0x330b) io_cancel(r4, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x2, 0x0, r5, &(0x7f00000011c0)="ade8be2efd67fe4094ddc439a79f75e806b4f4cf7387a1d37d699c9c3d66f0b29c3d1c170af210ba5d5278757fbf3b992d884f3a722e4d5e079ac4fc62cee7add32af5c126a1ec7e5444b02b4771e684fa6eaffb3635f7cc2fe309dc8e3d5e8716da8e6b6de3dd972aa2fc94c6ac90cd9ec957e7e0acf93e996ab110d33a35f1cb9f3367a21f292acf16f4ebbd044c27c491ef6ab4e0815d7bec00ba944a3dfbbb80544cd6fd014f8bb2a64d59ac21ec24a47949798cb396b3cc9d7df12aeb8a3a35a66e9fd8c69a1225d3215fc16315d6a15b538ca3e9127c9f8c4d7b782e6cf5", 0xe1, 0x2, 0x0, 0x1, r7}, &(0x7f0000001300)) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x1, 0x27, 0x81, 0xc0, 0x0, 0x7fff, 0x2120, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x5, 0x800}, 0x2801, 0x1, 0x3, 0x2, 0x7fffffff, 0x3f, 0x9, 0x0, 0xe43, 0x0, 0x6}, 0xffffffffffffffff, 0x5, r3, 0x1) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r9, 0x29, 0x48, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000001400)=ANY=[@ANYBLOB="0100000001bbe4a173000000", @ANYRES32=r1, @ANYRES32=r9, @ANYBLOB='\x00\x00\x00\x00./file0\x00']) pread64(r1, &(0x7f00000001c0)=""/4096, 0x1000, 0x0) [ 114.770817] loop7: detected capacity change from 0 to 5 08:40:54 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0xc0505405, &(0x7f0000000040)={{0x1}}) [ 114.780389] random: crng reseeded on system resumption [ 114.791760] EXT4-fs (loop7): filesystem too large to mount safely on this system 08:40:54 executing program 4: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000200)={0x80, 0x0, 'client1\x00', 0x0, "3ea01b02c06ead7d", "7e8367a423427a1485773e6c861fe3c6df6c110eb037b8d7c4b2c8e7014cf7c1"}) 08:40:54 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f000072f000/0x1000)=nil) 08:40:54 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000100000005000000000004000040000020000000ddf4655fddf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000001000008000000d24201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e7e1fc40a6de4c28a2c3627f6ec42b47010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000f5a98cb97d640000000060", 0x13, 0x540}], 0x0, &(0x7f0000014100)) 08:40:54 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0xc0505405, &(0x7f0000000040)={{0x1}}) [ 114.933783] loop7: detected capacity change from 0 to 5 [ 114.939741] EXT4-fs (loop7): filesystem too large to mount safely on this system 08:40:54 executing program 1: keyctl$set_reqkey_keyring(0xe, 0xffffffffffffffff) 08:40:54 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000100000005000000000004000040000020000000ddf4655fddf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000001000008000000d24201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e7e1fc40a6de4c28a2c3627f6ec42b47010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000f5a98cb97d640000000060", 0x13, 0x540}], 0x0, &(0x7f0000014100)) 08:40:54 executing program 0: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900)="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", 0x200) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x64) fcntl$setstatus(r0, 0x4, 0x44000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x49, &(0x7f0000000080)=0x68bbd9b0592ebacf, 0x4) [ 115.084503] loop7: detected capacity change from 0 to 5 [ 115.100223] EXT4-fs (loop7): filesystem too large to mount safely on this system 08:40:55 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0xc0505405, &(0x7f0000000040)={{0x1}}) 08:40:55 executing program 1: keyctl$set_reqkey_keyring(0xe, 0xffffffffffffffff) 08:40:55 executing program 4: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000200)={0x80, 0x0, 'client1\x00', 0x0, "3ea01b02c06ead7d", "7e8367a423427a1485773e6c861fe3c6df6c110eb037b8d7c4b2c8e7014cf7c1"}) 08:40:55 executing program 0: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900)="5ed0b2ff68d76fb346352b602a2a1295cbe01cb3f64fbed9e7f9bc9be0f300cb97f6a204cc586e45dfb949002f61f8fb969dd435dd0c37c5077e5b10cfeafd75205e215b167323a3b971b0ec98e6c3d4d825cae01271cb35cdd091e4872367f354e0dc81a7e4ac79775bc1dcaafe2f5079da79d1989f1ddce6722fc438a7217526cfe75d53471624d6f091e19a7fb699ea27efa9e0fd1914e7c35f297afd9b9b85ff0ce7a982f4fa0c172ea5f06479eec302f30e5df66273717e028f4ca7d4c5b6bc8a3c3c67f688195f22488a15d9e1f7e5fed3a6c2aba7bc308b0e2c5657f4538f4a3bf9b975bb887a901ab3c85261be3e331b741313e78b5ad63b7b1b378e9c79dc4a95b2b4d15cd1d1b808844378f882a72af1e5b0eefd356e0247246e60643204c3b46183dbe4e066c55cb1dcdaa7b70ef43ab2fa4d2b8c4c1a89cb0e325fd9716874d3856cf368efd1f92d21214e55e4de647c37c71887d11f74f9afe1616e3054ceae601e4b3555e243c1882ad42c7730caeb309e7714ad87c55e9fba308cfc4161e562abde3ac4f3d7e0a3584d4928100197f102307c05c0b4b4898b0591bc1433af443478979f28e6136ffb21aaeac2be5490475a08e96bb94fd9d9d3aa2f8a1e147a80ba9bfd04dac3f476ff128476c693ea71f7be47a508c98eddc479eb703d6f17cc5be2182f7c39b0a47eb23e0808b5d87dd2a9ce88eb48a601", 0x200) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x64) fcntl$setstatus(r0, 0x4, 0x44000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x49, &(0x7f0000000080)=0x68bbd9b0592ebacf, 0x4) 08:40:55 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f000072f000/0x1000)=nil) 08:40:55 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000100000005000000000004000040000020000000ddf4655fddf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000001000008000000d24201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e7e1fc40a6de4c28a2c3627f6ec42b47010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000f5a98cb97d640000000060", 0x13, 0x540}], 0x0, &(0x7f0000014100)) [ 115.359003] loop7: detected capacity change from 0 to 5 [ 115.372243] EXT4-fs (loop7): filesystem too large to mount safely on this system 08:40:55 executing program 1: keyctl$set_reqkey_keyring(0xe, 0xffffffffffffffff) 08:40:55 executing program 4: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000200)={0x80, 0x0, 'client1\x00', 0x0, "3ea01b02c06ead7d", "7e8367a423427a1485773e6c861fe3c6df6c110eb037b8d7c4b2c8e7014cf7c1"}) 08:40:55 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f000072f000/0x1000)=nil) 08:40:55 executing program 0: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900)="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", 0x200) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x64) fcntl$setstatus(r0, 0x4, 0x44000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x49, &(0x7f0000000080)=0x68bbd9b0592ebacf, 0x4) 08:40:55 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x210b2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 08:40:55 executing program 6: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8943, &(0x7f0000000300)={'wlan0\x00'}) 08:40:55 executing program 5: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0x7}, {}], 0x2, 0x0) semop(0x0, &(0x7f0000000080)=[{0x0, 0x0, 0x1000}], 0x1) 08:40:55 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f00000014c0)=[{&(0x7f00000001c0)="9564689aebd9fd05ec728e93ac91", 0xe}], 0x1) 08:40:55 executing program 6: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8943, &(0x7f0000000300)={'wlan0\x00'}) 08:40:55 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x210b2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 08:40:55 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x210b2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 08:40:55 executing program 1: keyctl$set_reqkey_keyring(0xe, 0xffffffffffffffff) 08:40:55 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f000072f000/0x1000)=nil) 08:40:55 executing program 0: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900)="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", 0x200) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x64) fcntl$setstatus(r0, 0x4, 0x44000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x49, &(0x7f0000000080)=0x68bbd9b0592ebacf, 0x4) 08:40:55 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r1) setsockopt$sock_int(r0, 0x1, 0x1, &(0x7f0000000240)=0x97, 0x4) 08:40:55 executing program 7: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 08:40:55 executing program 6: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8943, &(0x7f0000000300)={'wlan0\x00'}) 08:40:55 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x210b2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 08:40:55 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) ppoll(&(0x7f0000000100)=[{r0}], 0x1, &(0x7f0000000140)={0x0, 0x989680}, 0x0, 0x0) 08:40:55 executing program 1: clock_adjtime(0x0, &(0x7f0000000000)={0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}) 08:40:55 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x3e6df880) 08:40:55 executing program 6: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8943, &(0x7f0000000300)={'wlan0\x00'}) 08:40:55 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x210b2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 08:40:55 executing program 5: prctl$PR_SET_MM_MAP(0x3a, 0xe, 0x0, 0x0) 08:40:55 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) ppoll(&(0x7f0000000100)=[{r0}], 0x1, &(0x7f0000000140)={0x0, 0x989680}, 0x0, 0x0) 08:40:55 executing program 1: clock_adjtime(0x0, &(0x7f0000000000)={0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}) 08:40:55 executing program 1: clock_adjtime(0x0, &(0x7f0000000000)={0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}) 08:40:55 executing program 5: prctl$PR_SET_MM_MAP(0x3a, 0xe, 0x0, 0x0) 08:40:55 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/bus/input/devices\x00', 0x0, 0x0) lseek(r0, 0x0, 0x1) 08:40:55 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) ppoll(&(0x7f0000000100)=[{r0}], 0x1, &(0x7f0000000140)={0x0, 0x989680}, 0x0, 0x0) 08:40:55 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x3e6df880) 08:40:55 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x3e6df880) 08:40:55 executing program 5: prctl$PR_SET_MM_MAP(0x3a, 0xe, 0x0, 0x0) 08:40:55 executing program 7: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 08:40:55 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x210b2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 08:40:55 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/bus/input/devices\x00', 0x0, 0x0) lseek(r0, 0x0, 0x1) 08:40:55 executing program 1: clock_adjtime(0x0, &(0x7f0000000000)={0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}) 08:40:55 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) ppoll(&(0x7f0000000100)=[{r0}], 0x1, &(0x7f0000000140)={0x0, 0x989680}, 0x0, 0x0) 08:40:55 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x210b2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 08:40:56 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/bus/input/devices\x00', 0x0, 0x0) lseek(r0, 0x0, 0x1) 08:40:56 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 08:40:56 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x3e6df880) 08:40:56 executing program 5: prctl$PR_SET_MM_MAP(0x3a, 0xe, 0x0, 0x0) 08:40:56 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xc}]}, 0x28}}, 0x0) 08:40:56 executing program 3: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = io_uring_setup(0x127e, &(0x7f0000000440)) setuid(0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) setuid(0x0) close_range(r0, 0xffffffffffffffff, 0x0) 08:40:56 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0x13, &(0x7f0000001100), &(0x7f0000001140)=0x4) 08:40:56 executing program 7: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) [ 116.394691] netlink: 'syz-executor.4': attribute type 11 has an invalid length. [ 116.397245] netlink: 'syz-executor.4': attribute type 11 has an invalid length. 08:40:56 executing program 5: syz_mount_image$iso9660(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) chmod(&(0x7f0000000040)='./file0\x00', 0xed41) creat(&(0x7f0000000040)='./file0/file0\x00', 0x408) 08:40:56 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/bus/input/devices\x00', 0x0, 0x0) lseek(r0, 0x0, 0x1) 08:40:56 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xc}]}, 0x28}}, 0x0) 08:40:56 executing program 3: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = io_uring_setup(0x127e, &(0x7f0000000440)) setuid(0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) setuid(0x0) close_range(r0, 0xffffffffffffffff, 0x0) 08:40:56 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0x13, &(0x7f0000001100), &(0x7f0000001140)=0x4) 08:40:56 executing program 2: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = io_uring_setup(0x127e, &(0x7f0000000440)) setuid(0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) setuid(0x0) close_range(r0, 0xffffffffffffffff, 0x0) 08:40:56 executing program 5: syz_mount_image$iso9660(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) chmod(&(0x7f0000000040)='./file0\x00', 0xed41) creat(&(0x7f0000000040)='./file0/file0\x00', 0x408) [ 116.513041] netlink: 'syz-executor.4': attribute type 11 has an invalid length. 08:40:56 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0x13, &(0x7f0000001100), &(0x7f0000001140)=0x4) 08:40:56 executing program 2: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = io_uring_setup(0x127e, &(0x7f0000000440)) setuid(0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) setuid(0x0) close_range(r0, 0xffffffffffffffff, 0x0) 08:40:56 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0x13, &(0x7f0000001100), &(0x7f0000001140)=0x4) 08:40:56 executing program 6: syz_mount_image$iso9660(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) chmod(&(0x7f0000000040)='./file0\x00', 0xed41) creat(&(0x7f0000000040)='./file0/file0\x00', 0x408) 08:40:56 executing program 5: syz_mount_image$iso9660(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) chmod(&(0x7f0000000040)='./file0\x00', 0xed41) creat(&(0x7f0000000040)='./file0/file0\x00', 0x408) 08:40:56 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xc}]}, 0x28}}, 0x0) 08:40:56 executing program 3: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = io_uring_setup(0x127e, &(0x7f0000000440)) setuid(0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) setuid(0x0) close_range(r0, 0xffffffffffffffff, 0x0) 08:40:56 executing program 2: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = io_uring_setup(0x127e, &(0x7f0000000440)) setuid(0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) setuid(0x0) close_range(r0, 0xffffffffffffffff, 0x0) 08:40:56 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 08:40:56 executing program 7: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) [ 116.754155] netlink: 'syz-executor.4': attribute type 11 has an invalid length. 08:40:56 executing program 6: syz_mount_image$iso9660(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) chmod(&(0x7f0000000040)='./file0\x00', 0xed41) creat(&(0x7f0000000040)='./file0/file0\x00', 0x408) 08:40:56 executing program 5: syz_mount_image$iso9660(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) chmod(&(0x7f0000000040)='./file0\x00', 0xed41) creat(&(0x7f0000000040)='./file0/file0\x00', 0x408) 08:40:56 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xc}]}, 0x28}}, 0x0) 08:40:56 executing program 3: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = io_uring_setup(0x127e, &(0x7f0000000440)) setuid(0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) setuid(0x0) close_range(r0, 0xffffffffffffffff, 0x0) 08:40:56 executing program 0: set_mempolicy(0x3, &(0x7f0000000040)=0x7, 0x5db) perf_event_open(&(0x7f0000000000)={0x2, 0xaa, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7132, &(0x7f0000000180)={0x0, 0x0, 0x3}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000000)) 08:40:56 executing program 2: setresuid(0xee01, 0xee00, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, 0x0, 0x0) 08:40:56 executing program 6: syz_mount_image$iso9660(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) chmod(&(0x7f0000000040)='./file0\x00', 0xed41) creat(&(0x7f0000000040)='./file0/file0\x00', 0x408) [ 116.825792] netlink: 'syz-executor.4': attribute type 11 has an invalid length. 08:40:56 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, &(0x7f0000000680)=0x3) [ 117.028519] syz-executor.1 (4254) used greatest stack depth: 23648 bytes left 08:40:56 executing program 2: setresuid(0xee01, 0xee00, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, 0x0, 0x0) 08:40:56 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/softlockup_count', 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x4007) finit_module(r0, 0x0, 0x0) 08:40:56 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 08:40:56 executing program 0: set_mempolicy(0x3, &(0x7f0000000040)=0x7, 0x5db) perf_event_open(&(0x7f0000000000)={0x2, 0xaa, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7132, &(0x7f0000000180)={0x0, 0x0, 0x3}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000000)) 08:40:56 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, &(0x7f0000000680)=0x3) 08:40:56 executing program 3: io_setup(0x3, &(0x7f0000000040)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) io_submit(r0, 0x1, &(0x7f0000000480)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x6}]) [ 117.106665] audit: type=1400 audit(1768293656.845:11): avc: denied { module_load } for pid=4292 comm="syz-executor.4" path="/sys/kernel/softlockup_count" dev="sysfs" ino=11662 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=system permissive=1 08:40:56 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/softlockup_count', 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x4007) finit_module(r0, 0x0, 0x0) 08:40:56 executing program 0: set_mempolicy(0x3, &(0x7f0000000040)=0x7, 0x5db) perf_event_open(&(0x7f0000000000)={0x2, 0xaa, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7132, &(0x7f0000000180)={0x0, 0x0, 0x3}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000000)) 08:40:56 executing program 3: io_setup(0x3, &(0x7f0000000040)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) io_submit(r0, 0x1, &(0x7f0000000480)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x6}]) 08:40:56 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, &(0x7f0000000680)=0x3) 08:40:56 executing program 2: setresuid(0xee01, 0xee00, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, 0x0, 0x0) 08:40:56 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/softlockup_count', 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x4007) finit_module(r0, 0x0, 0x0) 08:40:56 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioperm(0x0, 0x7, 0x7) ioperm(0x0, 0x200, 0x0) 08:40:56 executing program 6: clock_nanosleep(0xa, 0x0, 0x0, 0x0) 08:40:56 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, &(0x7f0000000680)=0x3) 08:40:56 executing program 2: setresuid(0xee01, 0xee00, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, 0x0, 0x0) 08:40:56 executing program 3: io_setup(0x3, &(0x7f0000000040)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) io_submit(r0, 0x1, &(0x7f0000000480)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x6}]) 08:40:56 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/softlockup_count', 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x4007) finit_module(r0, 0x0, 0x0) 08:40:57 executing program 0: set_mempolicy(0x3, &(0x7f0000000040)=0x7, 0x5db) perf_event_open(&(0x7f0000000000)={0x2, 0xaa, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7132, &(0x7f0000000180)={0x0, 0x0, 0x3}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000000)) 08:40:57 executing program 6: clock_nanosleep(0xa, 0x0, 0x0, 0x0) 08:40:57 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioperm(0x0, 0x7, 0x7) ioperm(0x0, 0x200, 0x0) 08:40:57 executing program 2: mount_setattr(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000000140)={0x10, 0x1000f2}, 0x20) 08:40:57 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioperm(0x0, 0x7, 0x7) ioperm(0x0, 0x200, 0x0) 08:40:57 executing program 3: io_setup(0x3, &(0x7f0000000040)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) io_submit(r0, 0x1, &(0x7f0000000480)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x6}]) 08:40:57 executing program 5: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900)='^', 0x1) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000000c0), 0x4) sendfile(r2, r1, 0x0, 0x2) 08:40:57 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioperm(0x0, 0x7, 0x7) ioperm(0x0, 0x200, 0x0) 08:40:57 executing program 6: clock_nanosleep(0xa, 0x0, 0x0, 0x0) 08:40:57 executing program 2: mount_setattr(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000000140)={0x10, 0x1000f2}, 0x20) 08:40:57 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) open_by_handle_at(r0, &(0x7f0000000000)=@FILEID_INO32_GEN_PARENT={0x10, 0x2, {{0xb}}}, 0x414d02) close_range(r0, 0xffffffffffffffff, 0x0) 08:40:57 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioperm(0x0, 0x7, 0x7) ioperm(0x0, 0x200, 0x0) 08:40:57 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) 08:40:57 executing program 6: clock_nanosleep(0xa, 0x0, 0x0, 0x0) 08:40:57 executing program 2: mount_setattr(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000000140)={0x10, 0x1000f2}, 0x20) 08:40:57 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net\x00') fstat(r0, &(0x7f0000000340)) 08:40:57 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioperm(0x0, 0x7, 0x7) ioperm(0x0, 0x200, 0x0) 08:40:57 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) open_by_handle_at(r0, &(0x7f0000000000)=@FILEID_INO32_GEN_PARENT={0x10, 0x2, {{0xb}}}, 0x414d02) close_range(r0, 0xffffffffffffffff, 0x0) 08:40:57 executing program 5: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900)='^', 0x1) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000000c0), 0x4) sendfile(r2, r1, 0x0, 0x2) 08:40:57 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net\x00') fstat(r0, &(0x7f0000000340)) 08:40:57 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioperm(0x0, 0x7, 0x7) ioperm(0x0, 0x200, 0x0) 08:40:57 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) open_by_handle_at(r0, &(0x7f0000000000)=@FILEID_INO32_GEN_PARENT={0x10, 0x2, {{0xb}}}, 0x414d02) close_range(r0, 0xffffffffffffffff, 0x0) 08:40:57 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net\x00') fstat(r0, &(0x7f0000000340)) 08:40:57 executing program 2: mount_setattr(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000000140)={0x10, 0x1000f2}, 0x20) 08:40:57 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) 08:40:57 executing program 5: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900)='^', 0x1) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000000c0), 0x4) sendfile(r2, r1, 0x0, 0x2) 08:40:57 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc}}}}, 0x28}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) write(0xffffffffffffffff, &(0x7f0000000100)="8a", 0x1) 08:40:57 executing program 7: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x401) write$evdev(r0, &(0x7f00000000c0)=[{{0x77359400}, 0x14, 0x3d}], 0xff2f) 08:40:57 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) open_by_handle_at(r0, &(0x7f0000000000)=@FILEID_INO32_GEN_PARENT={0x10, 0x2, {{0xb}}}, 0x414d02) close_range(r0, 0xffffffffffffffff, 0x0) 08:40:57 executing program 2: syz_mount_image$iso9660(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x0, 0x1, &(0x7f0000000440)=[{&(0x7f0000000340)="cb", 0x1, 0x78ac}], 0x0, &(0x7f0000000480)={[{@check_strict}, {@iocharset={'iocharset', 0x3d, 'cp863'}}, {@nocompress}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'cp865'}}, {@map_acorn}, {@session}]}) 08:40:57 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net\x00') fstat(r0, &(0x7f0000000340)) 08:40:57 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) open_by_handle_at(r0, &(0x7f0000000000)=@FILEID_INO32_GEN_PARENT={0x10, 0x2, {{0xb}}}, 0x414d02) close_range(r0, 0xffffffffffffffff, 0x0) [ 117.732473] loop2: detected capacity change from 0 to 120 [ 117.743127] isofs_fill_super: bread failed, dev=loop2, iso_blknum=30, block=60 [ 117.760953] loop2: detected capacity change from 0 to 120 08:40:57 executing program 5: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900)='^', 0x1) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000000c0), 0x4) sendfile(r2, r1, 0x0, 0x2) [ 117.776297] isofs_fill_super: bread failed, dev=loop2, iso_blknum=30, block=60 08:40:57 executing program 7: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x401) write$evdev(r0, &(0x7f00000000c0)=[{{0x77359400}, 0x14, 0x3d}], 0xff2f) 08:40:57 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) open_by_handle_at(r0, &(0x7f0000000000)=@FILEID_INO32_GEN_PARENT={0x10, 0x2, {{0xb}}}, 0x414d02) close_range(r0, 0xffffffffffffffff, 0x0) 08:40:57 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc}}}}, 0x28}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) write(0xffffffffffffffff, &(0x7f0000000100)="8a", 0x1) 08:40:57 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) open_by_handle_at(r0, &(0x7f0000000000)=@FILEID_INO32_GEN_PARENT={0x10, 0x2, {{0xb}}}, 0x414d02) close_range(r0, 0xffffffffffffffff, 0x0) 08:40:57 executing program 2: syz_mount_image$iso9660(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x0, 0x1, &(0x7f0000000440)=[{&(0x7f0000000340)="cb", 0x1, 0x78ac}], 0x0, &(0x7f0000000480)={[{@check_strict}, {@iocharset={'iocharset', 0x3d, 'cp863'}}, {@nocompress}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'cp865'}}, {@map_acorn}, {@session}]}) 08:40:57 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) 08:40:57 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc}}}}, 0x28}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) write(0xffffffffffffffff, &(0x7f0000000100)="8a", 0x1) 08:40:57 executing program 7: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x401) write$evdev(r0, &(0x7f00000000c0)=[{{0x77359400}, 0x14, 0x3d}], 0xff2f) 08:40:57 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) kexec_load(0x0, 0x0, 0x0, 0x0) [ 117.930868] loop2: detected capacity change from 0 to 120 [ 117.948964] isofs_fill_super: bread failed, dev=loop2, iso_blknum=30, block=60 08:40:57 executing program 7: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x401) write$evdev(r0, &(0x7f00000000c0)=[{{0x77359400}, 0x14, 0x3d}], 0xff2f) 08:40:57 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc}}}}, 0x28}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) write(0xffffffffffffffff, &(0x7f0000000100)="8a", 0x1) 08:40:57 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc}}}}, 0x28}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) write(0xffffffffffffffff, &(0x7f0000000100)="8a", 0x1) 08:40:57 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) kexec_load(0x0, 0x0, 0x0, 0x0) 08:40:57 executing program 2: syz_mount_image$iso9660(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x0, 0x1, &(0x7f0000000440)=[{&(0x7f0000000340)="cb", 0x1, 0x78ac}], 0x0, &(0x7f0000000480)={[{@check_strict}, {@iocharset={'iocharset', 0x3d, 'cp863'}}, {@nocompress}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'cp865'}}, {@map_acorn}, {@session}]}) 08:40:57 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc}}}}, 0x28}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) write(0xffffffffffffffff, &(0x7f0000000100)="8a", 0x1) 08:40:57 executing program 6: syz_mount_image$nfs(0x0, 0x0, 0x0, 0x2, &(0x7f00000006c0)=[{&(0x7f0000000180)="e1", 0x1, 0xb0c7}, {&(0x7f0000000480)="fa", 0x1, 0xffffffff}], 0x0, 0x0) [ 118.083757] loop6: detected capacity change from 0 to 264192 [ 118.105732] loop2: detected capacity change from 0 to 120 [ 118.133268] isofs_fill_super: bread failed, dev=loop2, iso_blknum=30, block=60 08:40:57 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc}}}}, 0x28}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) write(0xffffffffffffffff, &(0x7f0000000100)="8a", 0x1) 08:40:57 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x80000, 0xe, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400028020000400000004f8000020004000030000000000000001000000000000000200000001000600000000000000000000000000800029f2118df153595a4b414c4c4552202046415433322020200e1fbe777cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe54686973206973206e6f74206120626f6f7461626c65206469736b2e2020506c6561736520696e73657274206120626f6f7461626c6520666c6f70707920616e640d0a707265737320616e79206b657920746f2074727920616761696e202e2e2e200d0a0000000000", 0xe0}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aa5252614100"/64, 0x40, 0x1e0}, {&(0x7f0000010200)="00000000727241610100000007000000000000000000000000000000000055aa", 0x20, 0x3e0}, {&(0x7f0000010300)="eb58906d6b66732e66617400028020000400000004f8000020004000030000000000000001000000000000000200000001000600000000000000000000000000800029f2118df153595a4b414c4c4552202046415433322020200e1fbe777cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe54686973206973206e6f74206120626f6f7461626c65206469736b2e2020506c6561736520696e73657274206120626f6f7461626c6520666c6f70707920616e640d0a707265737320616e79206b657920746f2074727920616761696e202e2e2e200d0a0000000000", 0xe0, 0xc00}, {&(0x7f0000010400)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0xde0}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0fffffff0fffffff0fffffff0fffffff0fffffff0f", 0x20, 0x4000}, {&(0x7f0000010600)="f8ffff0fffffff0ff8ffff0fffffff0fffffff0fffffff0fffffff0fffffff0f", 0x20, 0x4200}, {&(0x7f0000010700)="f8ffff0fffffff0ff8ffff0fffffff0fffffff0fffffff0fffffff0fffffff0f", 0x20, 0x4400}, {&(0x7f0000010800)="f8ffff0fffffff0ff8ffff0fffffff0fffffff0fffffff0fffffff0fffffff0f", 0x20, 0x4600}, {&(0x7f0000010900)="53595a4b414c4c45522020080000ea80325132510000ea80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100088ea70325132510000ea70325103000000000041660069006c00650031000f00100000ffffffffffffffffffff0000ffffffff46494c4531202020202020200088ea70325132510000ea70325105000a00000041660069006c00650032000f00140000ffffffffffffffffffff0000ffffffff46494c4532202020202020200088ea70325132510000ea70325106002823000041660069006c0065002e000f00d263006f006c0064000000ffff0000ffffffff46494c457e312020434f4c200088ea70325132510000ea703251070064000000", 0x120, 0x4800}, {&(0x7f0000010b00)="2e20202020202020202020100088ea70325132510000ea7032510300000000002e2e202020202020202020100088ea70325132510000ea70325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020200088ea70325132510000ea70325104001a040000", 0x80, 0x14800}, {&(0x7f0000010c00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x24800}, {&(0x7f0000011100)='syzkallers\x00'/32, 0x20, 0x34800}, {&(0x7f0000011200)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x54800}], 0x0, &(0x7f0000011300)) 08:40:57 executing program 7: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40e8662e, &(0x7f0000000000)={0xa9f, 0x9}) 08:40:57 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r0, 0x10e, 0x0, 0x0, &(0x7f0000000100)) 08:40:57 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) kexec_load(0x0, 0x0, 0x0, 0x0) 08:40:57 executing program 2: syz_mount_image$iso9660(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x0, 0x1, &(0x7f0000000440)=[{&(0x7f0000000340)="cb", 0x1, 0x78ac}], 0x0, &(0x7f0000000480)={[{@check_strict}, {@iocharset={'iocharset', 0x3d, 'cp863'}}, {@nocompress}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'cp865'}}, {@map_acorn}, {@session}]}) 08:40:57 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2286, &(0x7f00000000c0)) 08:40:57 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) [ 118.206845] loop2: detected capacity change from 0 to 120 [ 118.215646] isofs_fill_super: bread failed, dev=loop2, iso_blknum=30, block=60 08:40:57 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r0, 0x10e, 0x0, 0x0, &(0x7f0000000100)) 08:40:57 executing program 7: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40e8662e, &(0x7f0000000000)={0xa9f, 0x9}) 08:40:58 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) kexec_load(0x0, 0x0, 0x0, 0x0) 08:40:58 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2286, &(0x7f00000000c0)) 08:40:58 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x80000, 0xe, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400028020000400000004f8000020004000030000000000000001000000000000000200000001000600000000000000000000000000800029f2118df153595a4b414c4c4552202046415433322020200e1fbe777cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe54686973206973206e6f74206120626f6f7461626c65206469736b2e2020506c6561736520696e73657274206120626f6f7461626c6520666c6f70707920616e640d0a707265737320616e79206b657920746f2074727920616761696e202e2e2e200d0a0000000000", 0xe0}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aa5252614100"/64, 0x40, 0x1e0}, {&(0x7f0000010200)="00000000727241610100000007000000000000000000000000000000000055aa", 0x20, 0x3e0}, {&(0x7f0000010300)="eb58906d6b66732e66617400028020000400000004f8000020004000030000000000000001000000000000000200000001000600000000000000000000000000800029f2118df153595a4b414c4c4552202046415433322020200e1fbe777cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe54686973206973206e6f74206120626f6f7461626c65206469736b2e2020506c6561736520696e73657274206120626f6f7461626c6520666c6f70707920616e640d0a707265737320616e79206b657920746f2074727920616761696e202e2e2e200d0a0000000000", 0xe0, 0xc00}, {&(0x7f0000010400)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0xde0}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0fffffff0fffffff0fffffff0fffffff0fffffff0f", 0x20, 0x4000}, {&(0x7f0000010600)="f8ffff0fffffff0ff8ffff0fffffff0fffffff0fffffff0fffffff0fffffff0f", 0x20, 0x4200}, {&(0x7f0000010700)="f8ffff0fffffff0ff8ffff0fffffff0fffffff0fffffff0fffffff0fffffff0f", 0x20, 0x4400}, {&(0x7f0000010800)="f8ffff0fffffff0ff8ffff0fffffff0fffffff0fffffff0fffffff0fffffff0f", 0x20, 0x4600}, {&(0x7f0000010900)="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", 0x120, 0x4800}, {&(0x7f0000010b00)="2e20202020202020202020100088ea70325132510000ea7032510300000000002e2e202020202020202020100088ea70325132510000ea70325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020200088ea70325132510000ea70325104001a040000", 0x80, 0x14800}, {&(0x7f0000010c00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkaller VM DIAGNOSIS: 08:40:52 Registers: info registers vcpu 0 RAX=dffffc0000000000 RBX=0000000000000001 RCX=ffffffff84d1527e RDX=0000000000000000 RSI=0000000000000004 RDI=ffffffff85c16880 RBP=ffffffff85c16880 RSP=ffff88801b467af8 R8 =0000000000000000 R9 =fffffbfff0b82d10 R10=ffffffff85c16883 R11=0000000000000000 R12=1ffff1100368cf64 R13=0000000000000003 R14=fffffbfff0b82d10 R15=ffff88801b467b50 RIP=ffffffff81b3f806 RFL=00000216 [----AP-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000555573001400 00000000 00000000 GS =0000 ffff8880e5342000 00000000 00000000 LDT=0000 fffffe5000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000555586fdfc58 CR3=000000000d1a0000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ff00000000ff000000000000000000ff XMM01=25252525252525252525252525252525 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000078 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff82977f45 RDI=ffffffff889c1a00 RBP=ffffffff889c19c0 RSP=ffff888051807488 R8 =0000000000000000 R9 =ffffed10013e5046 R10=0000000000000078 R11=666666203a302320 R12=0000000000000078 R13=0000000000000010 R14=ffffffff889c19c0 R15=ffffffff82977f30 RIP=ffffffff82977f9d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000555560528400 00000000 00000000 GS =0000 ffff8880e5442000 00000000 00000000 LDT=0000 fffffe0e00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fd19b486544 CR3=0000000048f7b000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000a60ce07b00000000cec3662e XMM01=000000000000000003515b82db34ca11 XMM02=0000000000000000333bebdfd0a6a21d XMM03=00000000000000000000000000000000 XMM04=000000ff0000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000