Warning: Permanently added '[localhost]:11688' (ECDSA) to the list of known hosts. 2026/01/13 08:49:47 fuzzer started 2026/01/13 08:49:47 dialing manager at localhost:38155 syzkaller login: [ 45.243033] cgroup: Unknown subsys name 'net' [ 45.296790] cgroup: Unknown subsys name 'cpuset' [ 45.314920] cgroup: Unknown subsys name 'rlimit' 2026/01/13 08:49:59 syscalls: 2214 2026/01/13 08:49:59 code coverage: enabled 2026/01/13 08:49:59 comparison tracing: enabled 2026/01/13 08:49:59 extra coverage: enabled 2026/01/13 08:49:59 setuid sandbox: enabled 2026/01/13 08:49:59 namespace sandbox: enabled 2026/01/13 08:49:59 Android sandbox: enabled 2026/01/13 08:49:59 fault injection: enabled 2026/01/13 08:49:59 leak checking: enabled 2026/01/13 08:49:59 net packet injection: enabled 2026/01/13 08:49:59 net device setup: enabled 2026/01/13 08:49:59 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2026/01/13 08:49:59 devlink PCI setup: PCI device 0000:00:10.0 is not available 2026/01/13 08:49:59 USB emulation: enabled 2026/01/13 08:49:59 hci packet injection: enabled 2026/01/13 08:49:59 wifi device emulation: enabled 2026/01/13 08:49:59 802.15.4 emulation: enabled 2026/01/13 08:49:59 fetching corpus: 0, signal 0/2000 (executing program) 2026/01/13 08:49:59 fetching corpus: 41, signal 24916/28400 (executing program) 2026/01/13 08:49:59 fetching corpus: 80, signal 37712/42595 (executing program) 2026/01/13 08:50:00 fetching corpus: 130, signal 49787/55877 (executing program) 2026/01/13 08:50:00 fetching corpus: 180, signal 57423/64642 (executing program) 2026/01/13 08:50:00 fetching corpus: 230, signal 63213/71544 (executing program) 2026/01/13 08:50:00 fetching corpus: 280, signal 67213/76689 (executing program) 2026/01/13 08:50:00 fetching corpus: 330, signal 70607/81173 (executing program) 2026/01/13 08:50:00 fetching corpus: 380, signal 75069/86552 (executing program) 2026/01/13 08:50:00 fetching corpus: 430, signal 78820/91192 (executing program) 2026/01/13 08:50:00 fetching corpus: 480, signal 84101/97096 (executing program) 2026/01/13 08:50:01 fetching corpus: 530, signal 87281/101108 (executing program) 2026/01/13 08:50:01 fetching corpus: 580, signal 90079/104631 (executing program) 2026/01/13 08:50:01 fetching corpus: 630, signal 92928/108210 (executing program) 2026/01/13 08:50:01 fetching corpus: 680, signal 94936/111070 (executing program) 2026/01/13 08:50:01 fetching corpus: 729, signal 97614/114409 (executing program) 2026/01/13 08:50:01 fetching corpus: 779, signal 100239/117654 (executing program) 2026/01/13 08:50:01 fetching corpus: 829, signal 103204/121105 (executing program) 2026/01/13 08:50:01 fetching corpus: 879, signal 105104/123643 (executing program) 2026/01/13 08:50:01 fetching corpus: 928, signal 107153/126267 (executing program) 2026/01/13 08:50:02 fetching corpus: 977, signal 109090/128759 (executing program) 2026/01/13 08:50:02 fetching corpus: 1027, signal 110972/131171 (executing program) 2026/01/13 08:50:02 fetching corpus: 1076, signal 112537/133316 (executing program) 2026/01/13 08:50:02 fetching corpus: 1125, signal 113604/135013 (executing program) 2026/01/13 08:50:02 fetching corpus: 1174, signal 115787/137546 (executing program) 2026/01/13 08:50:02 fetching corpus: 1224, signal 116912/139281 (executing program) 2026/01/13 08:50:02 fetching corpus: 1274, signal 118327/141185 (executing program) 2026/01/13 08:50:02 fetching corpus: 1324, signal 119746/143079 (executing program) 2026/01/13 08:50:03 fetching corpus: 1374, signal 121083/144837 (executing program) 2026/01/13 08:50:03 fetching corpus: 1424, signal 122600/146716 (executing program) 2026/01/13 08:50:03 fetching corpus: 1473, signal 123910/148410 (executing program) 2026/01/13 08:50:03 fetching corpus: 1522, signal 125227/150123 (executing program) 2026/01/13 08:50:03 fetching corpus: 1572, signal 126637/151851 (executing program) 2026/01/13 08:50:03 fetching corpus: 1622, signal 128015/153525 (executing program) 2026/01/13 08:50:03 fetching corpus: 1671, signal 129121/155046 (executing program) 2026/01/13 08:50:03 fetching corpus: 1720, signal 130209/156501 (executing program) 2026/01/13 08:50:04 fetching corpus: 1770, signal 131197/157857 (executing program) 2026/01/13 08:50:04 fetching corpus: 1820, signal 132068/159086 (executing program) 2026/01/13 08:50:04 fetching corpus: 1870, signal 133558/160722 (executing program) 2026/01/13 08:50:04 fetching corpus: 1920, signal 134398/161944 (executing program) 2026/01/13 08:50:04 fetching corpus: 1970, signal 136200/163661 (executing program) 2026/01/13 08:50:04 fetching corpus: 2020, signal 136973/164757 (executing program) 2026/01/13 08:50:04 fetching corpus: 2070, signal 138209/166078 (executing program) 2026/01/13 08:50:04 fetching corpus: 2120, signal 139073/167173 (executing program) 2026/01/13 08:50:04 fetching corpus: 2169, signal 140012/168343 (executing program) 2026/01/13 08:50:05 fetching corpus: 2219, signal 141080/169615 (executing program) 2026/01/13 08:50:05 fetching corpus: 2269, signal 142066/170772 (executing program) 2026/01/13 08:50:05 fetching corpus: 2319, signal 143071/171910 (executing program) 2026/01/13 08:50:05 fetching corpus: 2369, signal 143981/173022 (executing program) 2026/01/13 08:50:05 fetching corpus: 2419, signal 144730/173985 (executing program) 2026/01/13 08:50:05 fetching corpus: 2469, signal 145944/175167 (executing program) 2026/01/13 08:50:05 fetching corpus: 2519, signal 146879/176163 (executing program) 2026/01/13 08:50:05 fetching corpus: 2569, signal 148092/177345 (executing program) 2026/01/13 08:50:06 fetching corpus: 2618, signal 148614/178161 (executing program) 2026/01/13 08:50:06 fetching corpus: 2668, signal 149522/179139 (executing program) 2026/01/13 08:50:06 fetching corpus: 2717, signal 150049/179924 (executing program) 2026/01/13 08:50:06 fetching corpus: 2766, signal 150835/180784 (executing program) 2026/01/13 08:50:06 fetching corpus: 2815, signal 151470/181577 (executing program) 2026/01/13 08:50:06 fetching corpus: 2864, signal 152293/182470 (executing program) 2026/01/13 08:50:06 fetching corpus: 2914, signal 153343/183332 (executing program) 2026/01/13 08:50:06 fetching corpus: 2964, signal 154325/184242 (executing program) 2026/01/13 08:50:06 fetching corpus: 3014, signal 155282/185090 (executing program) 2026/01/13 08:50:07 fetching corpus: 3061, signal 155947/185838 (executing program) 2026/01/13 08:50:07 fetching corpus: 3110, signal 156488/186525 (executing program) 2026/01/13 08:50:07 fetching corpus: 3159, signal 157095/187199 (executing program) 2026/01/13 08:50:07 fetching corpus: 3208, signal 158109/188053 (executing program) 2026/01/13 08:50:07 fetching corpus: 3257, signal 159267/188950 (executing program) 2026/01/13 08:50:07 fetching corpus: 3307, signal 160330/189718 (executing program) 2026/01/13 08:50:07 fetching corpus: 3357, signal 160977/190411 (executing program) 2026/01/13 08:50:07 fetching corpus: 3407, signal 161322/190927 (executing program) 2026/01/13 08:50:08 fetching corpus: 3456, signal 162131/191619 (executing program) 2026/01/13 08:50:08 fetching corpus: 3505, signal 162787/192220 (executing program) 2026/01/13 08:50:08 fetching corpus: 3554, signal 163370/192805 (executing program) 2026/01/13 08:50:08 fetching corpus: 3604, signal 163998/193376 (executing program) 2026/01/13 08:50:08 fetching corpus: 3653, signal 164630/193945 (executing program) 2026/01/13 08:50:08 fetching corpus: 3701, signal 165451/194547 (executing program) 2026/01/13 08:50:08 fetching corpus: 3751, signal 166045/195106 (executing program) 2026/01/13 08:50:08 fetching corpus: 3801, signal 166700/195644 (executing program) 2026/01/13 08:50:08 fetching corpus: 3851, signal 167092/196123 (executing program) 2026/01/13 08:50:09 fetching corpus: 3901, signal 167617/196618 (executing program) 2026/01/13 08:50:09 fetching corpus: 3951, signal 168000/197070 (executing program) 2026/01/13 08:50:09 fetching corpus: 4001, signal 168468/197495 (executing program) 2026/01/13 08:50:09 fetching corpus: 4051, signal 169000/197979 (executing program) 2026/01/13 08:50:09 fetching corpus: 4100, signal 169592/198430 (executing program) 2026/01/13 08:50:09 fetching corpus: 4150, signal 169918/198829 (executing program) 2026/01/13 08:50:09 fetching corpus: 4200, signal 170334/199239 (executing program) 2026/01/13 08:50:09 fetching corpus: 4249, signal 170834/199665 (executing program) 2026/01/13 08:50:09 fetching corpus: 4299, signal 171285/200065 (executing program) 2026/01/13 08:50:10 fetching corpus: 4349, signal 171844/200470 (executing program) 2026/01/13 08:50:10 fetching corpus: 4399, signal 172220/200817 (executing program) 2026/01/13 08:50:10 fetching corpus: 4449, signal 172664/201184 (executing program) 2026/01/13 08:50:10 fetching corpus: 4499, signal 173025/201548 (executing program) 2026/01/13 08:50:10 fetching corpus: 4549, signal 173458/201889 (executing program) 2026/01/13 08:50:10 fetching corpus: 4599, signal 173810/202211 (executing program) 2026/01/13 08:50:10 fetching corpus: 4649, signal 174475/202565 (executing program) 2026/01/13 08:50:10 fetching corpus: 4699, signal 174952/202880 (executing program) 2026/01/13 08:50:10 fetching corpus: 4749, signal 175464/203210 (executing program) 2026/01/13 08:50:10 fetching corpus: 4799, signal 175901/203487 (executing program) 2026/01/13 08:50:11 fetching corpus: 4849, signal 176347/203760 (executing program) 2026/01/13 08:50:11 fetching corpus: 4899, signal 176836/204038 (executing program) 2026/01/13 08:50:11 fetching corpus: 4949, signal 177303/204321 (executing program) 2026/01/13 08:50:11 fetching corpus: 4999, signal 177890/204507 (executing program) 2026/01/13 08:50:11 fetching corpus: 5049, signal 178272/204512 (executing program) 2026/01/13 08:50:11 fetching corpus: 5099, signal 178744/204512 (executing program) 2026/01/13 08:50:11 fetching corpus: 5149, signal 179145/204512 (executing program) 2026/01/13 08:50:11 fetching corpus: 5199, signal 179551/204514 (executing program) 2026/01/13 08:50:11 fetching corpus: 5249, signal 179909/204514 (executing program) 2026/01/13 08:50:11 fetching corpus: 5299, signal 180203/204514 (executing program) 2026/01/13 08:50:12 fetching corpus: 5349, signal 180680/204523 (executing program) 2026/01/13 08:50:12 fetching corpus: 5399, signal 181240/204523 (executing program) 2026/01/13 08:50:12 fetching corpus: 5449, signal 181859/204523 (executing program) 2026/01/13 08:50:12 fetching corpus: 5499, signal 182259/204523 (executing program) 2026/01/13 08:50:12 fetching corpus: 5549, signal 182916/204523 (executing program) 2026/01/13 08:50:12 fetching corpus: 5599, signal 183259/204527 (executing program) 2026/01/13 08:50:12 fetching corpus: 5649, signal 183488/204530 (executing program) 2026/01/13 08:50:12 fetching corpus: 5699, signal 183951/204532 (executing program) 2026/01/13 08:50:13 fetching corpus: 5749, signal 184334/204536 (executing program) 2026/01/13 08:50:13 fetching corpus: 5799, signal 184603/204540 (executing program) 2026/01/13 08:50:13 fetching corpus: 5849, signal 184968/204540 (executing program) 2026/01/13 08:50:13 fetching corpus: 5899, signal 185483/204543 (executing program) 2026/01/13 08:50:13 fetching corpus: 5949, signal 185879/204550 (executing program) 2026/01/13 08:50:13 fetching corpus: 5999, signal 186230/204550 (executing program) 2026/01/13 08:50:13 fetching corpus: 6049, signal 186549/204550 (executing program) 2026/01/13 08:50:13 fetching corpus: 6099, signal 186806/204564 (executing program) 2026/01/13 08:50:13 fetching corpus: 6149, signal 187196/204564 (executing program) 2026/01/13 08:50:14 fetching corpus: 6199, signal 187511/204565 (executing program) 2026/01/13 08:50:14 fetching corpus: 6249, signal 187967/204566 (executing program) 2026/01/13 08:50:14 fetching corpus: 6299, signal 188296/204566 (executing program) 2026/01/13 08:50:14 fetching corpus: 6349, signal 188645/204566 (executing program) 2026/01/13 08:50:14 fetching corpus: 6399, signal 189092/204567 (executing program) 2026/01/13 08:50:14 fetching corpus: 6449, signal 189495/204567 (executing program) 2026/01/13 08:50:14 fetching corpus: 6499, signal 189800/204567 (executing program) 2026/01/13 08:50:14 fetching corpus: 6549, signal 190145/204567 (executing program) 2026/01/13 08:50:14 fetching corpus: 6599, signal 190602/204762 (executing program) 2026/01/13 08:50:15 fetching corpus: 6649, signal 191076/204762 (executing program) 2026/01/13 08:50:15 fetching corpus: 6699, signal 191827/204762 (executing program) 2026/01/13 08:50:15 fetching corpus: 6749, signal 192245/204764 (executing program) 2026/01/13 08:50:15 fetching corpus: 6799, signal 192562/204764 (executing program) 2026/01/13 08:50:15 fetching corpus: 6849, signal 193015/204764 (executing program) 2026/01/13 08:50:15 fetching corpus: 6899, signal 193271/204764 (executing program) 2026/01/13 08:50:15 fetching corpus: 6949, signal 193600/204767 (executing program) 2026/01/13 08:50:15 fetching corpus: 6999, signal 193857/204767 (executing program) 2026/01/13 08:50:15 fetching corpus: 7049, signal 194206/204790 (executing program) 2026/01/13 08:50:16 fetching corpus: 7099, signal 194612/204790 (executing program) 2026/01/13 08:50:16 fetching corpus: 7149, signal 194912/204792 (executing program) 2026/01/13 08:50:16 fetching corpus: 7199, signal 195377/204792 (executing program) 2026/01/13 08:50:16 fetching corpus: 7249, signal 195661/204792 (executing program) 2026/01/13 08:50:16 fetching corpus: 7299, signal 195954/204792 (executing program) 2026/01/13 08:50:16 fetching corpus: 7349, signal 196240/204792 (executing program) 2026/01/13 08:50:16 fetching corpus: 7399, signal 196497/204792 (executing program) 2026/01/13 08:50:16 fetching corpus: 7449, signal 196994/204801 (executing program) 2026/01/13 08:50:16 fetching corpus: 7499, signal 197443/204801 (executing program) 2026/01/13 08:50:17 fetching corpus: 7549, signal 197731/204801 (executing program) 2026/01/13 08:50:17 fetching corpus: 7599, signal 198016/204801 (executing program) 2026/01/13 08:50:17 fetching corpus: 7649, signal 198546/204802 (executing program) 2026/01/13 08:50:17 fetching corpus: 7699, signal 198842/204802 (executing program) 2026/01/13 08:50:17 fetching corpus: 7749, signal 199158/204805 (executing program) 2026/01/13 08:50:17 fetching corpus: 7799, signal 199476/204805 (executing program) 2026/01/13 08:50:17 fetching corpus: 7849, signal 199785/204811 (executing program) 2026/01/13 08:50:17 fetching corpus: 7899, signal 200078/204811 (executing program) 2026/01/13 08:50:17 fetching corpus: 7949, signal 200308/204816 (executing program) 2026/01/13 08:50:18 fetching corpus: 7999, signal 200459/204816 (executing program) 2026/01/13 08:50:18 fetching corpus: 8049, signal 200731/204816 (executing program) 2026/01/13 08:50:18 fetching corpus: 8099, signal 201080/204818 (executing program) 2026/01/13 08:50:18 fetching corpus: 8149, signal 201379/204818 (executing program) 2026/01/13 08:50:18 fetching corpus: 8199, signal 201672/204818 (executing program) 2026/01/13 08:50:18 fetching corpus: 8249, signal 202221/204818 (executing program) 2026/01/13 08:50:18 fetching corpus: 8299, signal 202547/204818 (executing program) 2026/01/13 08:50:18 fetching corpus: 8349, signal 202986/204820 (executing program) 2026/01/13 08:50:18 fetching corpus: 8399, signal 203238/204820 (executing program) 2026/01/13 08:50:19 fetching corpus: 8414, signal 203313/204820 (executing program) 2026/01/13 08:50:19 fetching corpus: 8414, signal 203313/204820 (executing program) 2026/01/13 08:50:20 starting 8 fuzzer processes 08:50:20 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x14, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 08:50:20 executing program 2: r0 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x0) 08:50:20 executing program 3: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="043eaf0da7e4"], 0x1b2) 08:50:20 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)={0x24, 0x18, 0x1, 0x0, 0x0, "", [@nested={0x2, 0x0, 0x0, 0x1, [@typed={0x0, 0x0, 0x0, 0x0, @fd}, @typed={0x8, 0xb, 0x0, 0x0, @fd}]}]}, 0x24}], 0x1}, 0x0) 08:50:20 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f00000000c0)={@mcast2, 0x2a}) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000000c0)={@remote, 0x0, r4}) fcntl$setstatus(r2, 0x4, 0x4800) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x4f, r4}) sendmmsg$inet6(r0, &(0x7f0000006140)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@hopopts_2292={{0x18, 0x11}}], 0x18}}], 0x2, 0x0) [ 76.417347] audit: type=1400 audit(1768294220.987:7): avc: denied { execmem } for pid=273 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 08:50:21 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000740), 0x0, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x2284, 0xffffffffffffffff) 08:50:21 executing program 5: syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbbbbbbbbbbbbb86dd60ca51080018000020010000000000000000001000000000fc0000000000000000000001000000000000c2043f"], 0x0) 08:50:21 executing program 6: setgroups(0x2901, 0x0) [ 77.505212] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 77.508170] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 77.511803] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 77.518001] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 77.521893] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 77.632617] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 77.637000] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 77.643674] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 77.649422] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 77.652899] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 77.654103] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 77.656090] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 77.658289] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 77.688414] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 77.694002] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 77.697053] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 77.701404] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 77.703276] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 77.714007] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 77.717118] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 77.726646] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 77.727724] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 77.730472] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 77.732669] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 77.737088] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 77.743700] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 77.746633] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 77.748368] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 77.760127] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 77.761674] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 77.769808] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 77.769822] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 77.774863] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 77.776159] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 77.780029] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 77.782889] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 77.797869] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 77.799684] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 77.806703] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 77.812252] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 79.602109] Bluetooth: hci0: command tx timeout [ 79.728680] Bluetooth: hci1: command tx timeout [ 79.730001] Bluetooth: hci2: command tx timeout [ 79.792608] Bluetooth: hci4: command tx timeout [ 79.793025] Bluetooth: hci3: command tx timeout [ 79.856720] Bluetooth: hci6: command tx timeout [ 79.857598] Bluetooth: hci7: command tx timeout [ 79.858364] Bluetooth: hci5: command tx timeout [ 81.649584] Bluetooth: hci0: command tx timeout [ 81.777560] Bluetooth: hci2: command tx timeout [ 81.777588] Bluetooth: hci1: command tx timeout [ 81.841800] Bluetooth: hci3: command tx timeout [ 81.842311] Bluetooth: hci4: command tx timeout [ 81.904594] Bluetooth: hci7: command tx timeout [ 81.904633] Bluetooth: hci5: command tx timeout [ 81.904992] Bluetooth: hci6: command tx timeout [ 83.696563] Bluetooth: hci0: command tx timeout [ 83.825550] Bluetooth: hci1: command tx timeout [ 83.825966] Bluetooth: hci2: command tx timeout [ 83.888949] Bluetooth: hci4: command tx timeout [ 83.889557] Bluetooth: hci3: command tx timeout [ 83.953152] Bluetooth: hci5: command tx timeout [ 83.953610] Bluetooth: hci7: command tx timeout [ 83.954003] Bluetooth: hci6: command tx timeout [ 85.745536] Bluetooth: hci0: command tx timeout [ 85.873952] Bluetooth: hci2: command tx timeout [ 85.874373] Bluetooth: hci1: command tx timeout [ 85.937631] Bluetooth: hci4: command tx timeout [ 85.938042] Bluetooth: hci3: command tx timeout [ 86.000626] Bluetooth: hci7: command tx timeout [ 86.001567] Bluetooth: hci5: command tx timeout [ 86.001953] Bluetooth: hci6: command tx timeout [ 109.597567] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.598841] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.946971] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.947618] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.030497] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.035580] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.297933] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.298575] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 08:50:54 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f00000000c0)={@mcast2, 0x2a}) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000000c0)={@remote, 0x0, r4}) fcntl$setstatus(r2, 0x4, 0x4800) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x4f, r4}) sendmmsg$inet6(r0, &(0x7f0000006140)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@hopopts_2292={{0x18, 0x11}}], 0x18}}], 0x2, 0x0) 08:50:55 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f00000000c0)={@mcast2, 0x2a}) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000000c0)={@remote, 0x0, r4}) fcntl$setstatus(r2, 0x4, 0x4800) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x4f, r4}) sendmmsg$inet6(r0, &(0x7f0000006140)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@hopopts_2292={{0x18, 0x11}}], 0x18}}], 0x2, 0x0) 08:50:55 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f00000000c0)={@mcast2, 0x2a}) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000000c0)={@remote, 0x0, r4}) fcntl$setstatus(r2, 0x4, 0x4800) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x4f, r4}) sendmmsg$inet6(r0, &(0x7f0000006140)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@hopopts_2292={{0x18, 0x11}}], 0x18}}], 0x2, 0x0) [ 110.802922] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.808601] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 08:50:55 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='hugetlbfs\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000000)='./file0\x00', 0x100) umount2(&(0x7f0000000180)='./file0\x00', 0x0) syz_io_uring_setup(0x6ef9, &(0x7f0000000040), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000af2000/0x4000)=nil, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) [ 110.903644] audit: type=1400 audit(1768294255.472:8): avc: denied { open } for pid=3860 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 110.905296] audit: type=1400 audit(1768294255.473:9): avc: denied { kernel } for pid=3860 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 08:50:55 executing program 5: syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbbbbbbbbbbbbb86dd60ca51080018000020010000000000000000001000000000fc0000000000000000000001000000000000c2043f"], 0x0) 08:50:55 executing program 5: syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbbbbbbbbbbbbb86dd60ca51080018000020010000000000000000001000000000fc0000000000000000000001000000000000c2043f"], 0x0) 08:50:55 executing program 5: syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbbbbbbbbbbbbb86dd60ca51080018000020010000000000000000001000000000fc0000000000000000000001000000000000c2043f"], 0x0) [ 111.091980] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.092857] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 08:50:55 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='hugetlbfs\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000000)='./file0\x00', 0x100) umount2(&(0x7f0000000180)='./file0\x00', 0x0) syz_io_uring_setup(0x6ef9, &(0x7f0000000040), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000af2000/0x4000)=nil, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) [ 111.204509] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.205448] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.271479] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.272109] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.322543] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.323192] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.379632] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.380300] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.461390] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.462487] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.496426] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.497198] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.536188] Bluetooth: hci4: unexpected event 0x3e length: 431 > 260 [ 111.536213] Bluetooth: hci4: unexpected subevent 0x0d length: 430 > 260 [ 111.537622] Bluetooth: hci4: Malformed LE Event: 0x0d [ 111.542916] Bluetooth: hci4: unexpected event 0x3e length: 431 > 260 [ 111.542936] Bluetooth: hci4: unexpected subevent 0x0d length: 430 > 260 [ 111.544242] Bluetooth: hci4: Malformed LE Event: 0x0d [ 111.562755] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.564804] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.611013] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.612250] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.613826] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.614434] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.688856] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.690161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 08:50:56 executing program 6: setgroups(0x2901, 0x0) 08:50:56 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='hugetlbfs\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000000)='./file0\x00', 0x100) umount2(&(0x7f0000000180)='./file0\x00', 0x0) syz_io_uring_setup(0x6ef9, &(0x7f0000000040), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000af2000/0x4000)=nil, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 08:50:56 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='hugetlbfs\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000000)='./file0\x00', 0x100) umount2(&(0x7f0000000180)='./file0\x00', 0x0) syz_io_uring_setup(0x6ef9, &(0x7f0000000040), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000af2000/0x4000)=nil, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 08:50:56 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x14, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 08:50:56 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000740), 0x0, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x2284, 0xffffffffffffffff) 08:50:56 executing program 3: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="043eaf0da7e4"], 0x1b2) 08:50:56 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)={0x24, 0x18, 0x1, 0x0, 0x0, "", [@nested={0x2, 0x0, 0x0, 0x1, [@typed={0x0, 0x0, 0x0, 0x0, @fd}, @typed={0x8, 0xb, 0x0, 0x0, @fd}]}]}, 0x24}], 0x1}, 0x0) 08:50:56 executing program 2: r0 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x0) [ 112.067690] Bluetooth: hci4: unexpected event 0x3e length: 431 > 260 [ 112.067730] Bluetooth: hci4: unexpected subevent 0x0d length: 430 > 260 [ 112.075626] Bluetooth: hci4: Malformed LE Event: 0x0d [ 112.197991] [ 112.198356] ===================================== [ 112.199096] WARNING: bad unlock balance detected! [ 112.199837] 6.19.0-rc5-next-20260113 #1 Not tainted [ 112.200596] ------------------------------------- [ 112.202368] syz-executor.7/286 is trying to release lock (rcu_read_lock) at: [ 112.208087] [] __wait_on_freeing_inode+0x105/0x350 [ 112.209096] but there are no more locks to release! [ 112.209856] [ 112.209856] other info that might help us debug this: [ 112.210860] 4 locks held by syz-executor.7/286: [ 112.211567] #0: ffff88800fc5a3f8 (sb_writers#3){.+.+}-{0:0}, at: filename_create+0xf7/0x400 [ 112.212914] #1: ffff88801b16b388 (&type->i_mutex_dir_key#3/1){+.+.}-{4:4}, at: filename_create+0x1b1/0x400 [ 112.214453] #2: ffff88800fc5e950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xe32/0x12d0 [ 112.215829] #3: ffffffff85c16898 (inode_hash_lock){+.+.}-{3:3}, at: insert_inode_locked+0xf9/0x890 [ 112.217241] [ 112.217241] stack backtrace: [ 112.217963] CPU: 1 UID: 0 PID: 286 Comm: syz-executor.7 Not tainted 6.19.0-rc5-next-20260113 #1 PREEMPT(lazy) [ 112.217990] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 112.218003] Call Trace: [ 112.218011] [ 112.218020] dump_stack_lvl+0xca/0x120 [ 112.218065] ? __wait_on_freeing_inode+0x105/0x350 [ 112.218092] print_unlock_imbalance_bug+0x118/0x130 [ 112.218121] ? __wait_on_freeing_inode+0x105/0x350 [ 112.218150] lock_release+0x1ee/0x270 [ 112.218183] __wait_on_freeing_inode+0x10a/0x350 [ 112.218213] ? __pfx___wait_on_freeing_inode+0x10/0x10 [ 112.218247] ? __pfx_var_wake_function+0x10/0x10 [ 112.218284] ? lock_is_held_type+0x9e/0x120 [ 112.218309] insert_inode_locked+0x25f/0x890 [ 112.218347] __ext4_new_inode+0x223d/0x4cd0 [ 112.218388] ? __pfx___ext4_new_inode+0x10/0x10 [ 112.218417] ? __pfx_avc_has_perm+0x10/0x10 [ 112.218445] ? __pfx___dquot_initialize+0x10/0x10 [ 112.218491] ext4_mkdir+0x331/0xb30 [ 112.218533] ? __pfx_ext4_mkdir+0x10/0x10 [ 112.218565] ? security_inode_permission+0x72/0xe0 [ 112.218595] vfs_mkdir+0x6d8/0xc00 [ 112.218632] do_mkdirat+0x11a/0x440 [ 112.218659] ? __pfx_do_mkdirat+0x10/0x10 [ 112.218685] ? strncpy_from_user+0x21b/0x2f0 [ 112.218724] __x64_sys_mkdir+0x65/0x80 [ 112.218750] do_syscall_64+0xbf/0x420 [ 112.218777] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.218800] RIP: 0033:0x7f0af45b5c27 [ 112.218817] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 112.218839] RSP: 002b:00007ffc624429e8 EFLAGS: 00000206 ORIG_RAX: 0000000000000053 [ 112.218860] RAX: ffffffffffffffda RBX: 00007ffc62442a70 RCX: 00007f0af45b5c27 [ 112.218874] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 00007ffc62442a70 [ 112.218888] RBP: 00007ffc62442a4c R08: 0000000000000000 R09: 0000000000000003 [ 112.218901] R10: 00007ffc62442787 R11: 0000000000000206 R12: 0000000000000032 [ 112.218914] R13: 000000000001b54a R14: 0000000000000002 R15: 00007ffc62442ab0 [ 112.218941] [ 112.248581] ------------[ cut here ]------------ [ 112.249307] WARNING: kernel/rcu/tree_plugin.h:443 at __rcu_read_unlock+0x25f/0x5c0, CPU#1: syz-executor.7/286 [ 112.250944] Modules linked in: [ 112.251501] CPU: 1 UID: 0 PID: 286 Comm: syz-executor.7 Not tainted 6.19.0-rc5-next-20260113 #1 PREEMPT(lazy) [ 112.252994] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 112.254241] RIP: 0010:__rcu_read_unlock+0x25f/0x5c0 [ 112.255125] Code: f2 02 00 00 c7 43 58 01 00 00 00 bf 09 00 00 00 e8 a6 bb de ff 4d 85 f6 0f 84 73 fe ff ff e8 38 89 20 00 fb e9 68 fe ff ff 90 <0f> 0b 90 5b 5d 41 5c 41 5d 41 5e e9 61 f9 73 03 e8 0c 88 56 00 e9 [ 112.257856] RSP: 0018:ffff88806cf08cb8 EFLAGS: 00010086 [ 112.258670] RAX: 00000000ffffffff RBX: ffff88801929b700 RCX: 000000000000000d [ 112.259742] RDX: 0000000000000000 RSI: ffffffff85e25d40 RDI: ffff88801929bafc [ 112.260824] RBP: ffff88801929b700 R08: ffffffff84e98ac0 R09: 0000000000000000 [ 112.261909] R10: 0000000000000000 R11: ffff88806cf08ff8 R12: ffff88801929b700 [ 112.262984] R13: 0000000000000001 R14: ffff88806cf379c0 R15: ffff88806cf37a20 [ 112.264068] FS: 00005555666a4400(0000) GS:ffff8880e5442000(0000) knlGS:0000000000000000 [ 112.265284] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 112.266171] CR2: 0000001b2d837000 CR3: 000000000dfe5000 CR4: 0000000000350ef0 [ 112.267253] Call Trace: [ 112.267710] [ 112.268851] sched_tick+0x232/0x6e0 [ 112.271202] update_process_times+0x116/0x210 [ 112.273035] tick_nohz_handler+0x4ff/0x8c0 [ 112.274662] ? __pfx_tick_nohz_handler+0x10/0x10 [ 112.275984] ? lock_release+0x1c7/0x270 [ 112.277524] ? __pfx_tick_nohz_handler+0x10/0x10 [ 112.279170] __hrtimer_run_queues+0x654/0xbb0 [ 112.282766] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 112.283666] ? ktime_get_update_offsets_now+0x252/0x3c0 [ 112.286843] hrtimer_interrupt+0x369/0x830 [ 112.290700] __sysvec_apic_timer_interrupt+0xbb/0x300 [ 112.292146] sysvec_apic_timer_interrupt+0x6b/0x80 [ 112.293238] [ 112.293592] [ 112.294272] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 112.295242] RIP: 0010:__sanitizer_cov_trace_pc+0x8/0x80 [ 112.296181] Code: 5b 03 48 c7 c0 f4 ff ff ff eb 92 0f 1f 80 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 34 24 <65> 48 8b 15 48 5e 38 06 65 8b 05 59 5e 38 06 a9 00 01 ff 00 74 27 [ 112.298950] RSP: 0018:ffff88800f80f788 EFLAGS: 00000202 [ 112.299766] RAX: 0000000000000000 RBX: ffffffff86678440 RCX: ffffffff84c4fbdf [ 112.300869] RDX: ffff88801929b700 RSI: ffffffff84c4fbe9 RDI: 0000000000000006 [ 112.301973] RBP: ffffffff81251f9c R08: 0000000000000000 R09: 0000000000000000 [ 112.303064] R10: ffffffff81251f9c R11: 0000000000000000 R12: ffffffff815d780f [ 112.304157] R13: dffffc0000000000 R14: 0000000000000002 R15: 000000000000000b [ 112.305716] ? __rcu_read_unlock+0x25f/0x5c0 [ 112.306515] ? intel_pmu_drain_pebs_icl+0x84c/0xb80 [ 112.307712] ? intel_pmu_drain_pebs_icl+0x84c/0xb80 [ 112.309073] ? __report_bug+0x4cf/0x5b0 [ 112.309982] ? __report_bug+0x4d9/0x5b0 [ 112.311744] ? __rcu_read_unlock+0x25f/0x5c0 [ 112.312531] __report_bug+0x4d9/0x5b0 [ 112.313937] ? _printk+0xbe/0xf0 [ 112.314904] ? __pfx___report_bug+0x10/0x10 [ 112.317441] ? __is_insn_slot_addr+0x140/0x290 [ 112.320043] ? __rcu_read_unlock+0x25f/0x5c0 [ 112.321312] report_bug+0x7c/0x120 [ 112.322214] ? __rcu_read_unlock+0x25f/0x5c0 [ 112.323176] handle_bug+0x2e8/0x4f0 [ 112.324081] ? trace_hardirqs_off_finish+0xe3/0x110 [ 112.325926] exc_invalid_op+0x35/0x80 [ 112.327158] asm_exc_invalid_op+0x1a/0x20 [ 112.327957] RIP: 0010:__rcu_read_unlock+0x25f/0x5c0 [ 112.328854] Code: f2 02 00 00 c7 43 58 01 00 00 00 bf 09 00 00 00 e8 a6 bb de ff 4d 85 f6 0f 84 73 fe ff ff e8 38 89 20 00 fb e9 68 fe ff ff 90 <0f> 0b 90 5b 5d 41 5c 41 5d 41 5e e9 61 f9 73 03 e8 0c 88 56 00 e9 [ 112.331643] RSP: 0018:ffff88800f80f9e0 EFLAGS: 00010286 [ 112.332453] RAX: 00000000ffffffff RBX: ffff88801929b700 RCX: ffffffff815664c7 [ 112.333536] RDX: 0000000000000000 RSI: ffffffff815664d0 RDI: ffff88801929bafc [ 112.334632] RBP: ffff88801929b700 R08: 0000000000000000 R09: fffffbfff0ba6ff4 [ 112.335711] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88801929b700 [ 112.336802] R13: 0000000000000001 R14: ffffffff85c0fdb0 R15: ffff88800959bc48 [ 112.339658] ? nbcon_cpu_emergency_exit+0x117/0x1c0 [ 112.340702] ? nbcon_cpu_emergency_exit+0x120/0x1c0 [ 112.343410] __wait_on_freeing_inode+0x10f/0x350 [ 112.344632] ? __pfx___wait_on_freeing_inode+0x10/0x10 [ 112.346646] ? __pfx_var_wake_function+0x10/0x10 [ 112.348781] ? lock_is_held_type+0x9e/0x120 [ 112.350689] insert_inode_locked+0x25f/0x890 [ 112.353478] __ext4_new_inode+0x223d/0x4cd0 [ 112.357670] ? __pfx___ext4_new_inode+0x10/0x10 [ 112.359339] ? __pfx_avc_has_perm+0x10/0x10 [ 112.360449] ? __pfx___dquot_initialize+0x10/0x10 [ 112.364199] ext4_mkdir+0x331/0xb30 [ 112.367507] ? __pfx_ext4_mkdir+0x10/0x10 [ 112.368588] ? security_inode_permission+0x72/0xe0 [ 112.371378] vfs_mkdir+0x6d8/0xc00 [ 112.373715] do_mkdirat+0x11a/0x440 [ 112.375419] ? __pfx_do_mkdirat+0x10/0x10 [ 112.376651] ? strncpy_from_user+0x21b/0x2f0 [ 112.379852] __x64_sys_mkdir+0x65/0x80 [ 112.380949] do_syscall_64+0xbf/0x420 [ 112.382360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.383316] RIP: 0033:0x7f0af45b5c27 [ 112.384003] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 112.386788] RSP: 002b:00007ffc624429e8 EFLAGS: 00000206 ORIG_RAX: 0000000000000053 [ 112.387951] RAX: ffffffffffffffda RBX: 00007ffc62442a70 RCX: 00007f0af45b5c27 [ 112.389052] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 00007ffc62442a70 [ 112.390172] RBP: 00007ffc62442a4c R08: 0000000000000000 R09: 0000000000000003 [ 112.391254] R10: 00007ffc62442787 R11: 0000000000000206 R12: 0000000000000032 [ 112.392352] R13: 000000000001b54a R14: 0000000000000002 R15: 00007ffc62442ab0 [ 112.396794] [ 112.397163] irq event stamp: 159053 [ 112.397724] hardirqs last enabled at (159053): [] _raw_spin_unlock_irqrestore+0x2c/0x50 [ 112.399302] hardirqs last disabled at (159052): [] _raw_spin_lock_irqsave+0x53/0x60 [ 112.400821] softirqs last enabled at (159048): [] kernel_fpu_end+0x59/0x70 [ 112.402258] softirqs last disabled at (159046): [] kernel_fpu_begin_mask+0x1bb/0x300 [ 112.403796] ---[ end trace 0000000000000000 ]--- 08:50:57 executing program 6: setgroups(0x2901, 0x0) 08:50:57 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000740), 0x0, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x2284, 0xffffffffffffffff) 08:50:57 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='hugetlbfs\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000000)='./file0\x00', 0x100) umount2(&(0x7f0000000180)='./file0\x00', 0x0) syz_io_uring_setup(0x6ef9, &(0x7f0000000040), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000af2000/0x4000)=nil, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 08:50:57 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x14, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 08:50:57 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='hugetlbfs\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000000)='./file0\x00', 0x100) umount2(&(0x7f0000000180)='./file0\x00', 0x0) syz_io_uring_setup(0x6ef9, &(0x7f0000000040), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000af2000/0x4000)=nil, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 08:50:57 executing program 2: r0 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x0) 08:50:57 executing program 3: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="043eaf0da7e4"], 0x1b2) 08:50:57 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)={0x24, 0x18, 0x1, 0x0, 0x0, "", [@nested={0x2, 0x0, 0x0, 0x1, [@typed={0x0, 0x0, 0x0, 0x0, @fd}, @typed={0x8, 0xb, 0x0, 0x0, @fd}]}]}, 0x24}], 0x1}, 0x0) [ 112.692752] Bluetooth: hci4: unexpected event 0x3e length: 431 > 260 [ 112.692783] Bluetooth: hci4: unexpected subevent 0x0d length: 430 > 260 [ 112.694338] Bluetooth: hci4: Malformed LE Event: 0x0d 08:50:57 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)={0x24, 0x18, 0x1, 0x0, 0x0, "", [@nested={0x2, 0x0, 0x0, 0x1, [@typed={0x0, 0x0, 0x0, 0x0, @fd}, @typed={0x8, 0xb, 0x0, 0x0, @fd}]}]}, 0x24}], 0x1}, 0x0) 08:50:57 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000740), 0x0, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x2284, 0xffffffffffffffff) 08:50:57 executing program 2: r0 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x0) 08:50:57 executing program 6: setgroups(0x2901, 0x0) 08:50:57 executing program 3: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="043eaf0da7e4"], 0x1b2) [ 112.820993] Bluetooth: hci4: unexpected event 0x3e length: 431 > 260 [ 112.821020] Bluetooth: hci4: unexpected subevent 0x0d length: 430 > 260 [ 112.822455] Bluetooth: hci4: Malformed LE Event: 0x0d 08:50:57 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='hugetlbfs\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000000)='./file0\x00', 0x100) umount2(&(0x7f0000000180)='./file0\x00', 0x0) syz_io_uring_setup(0x6ef9, &(0x7f0000000040), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000af2000/0x4000)=nil, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 08:50:57 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x14, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 08:50:57 executing program 2: r0 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x0) 08:50:57 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000180)=@allocspi={0xf8, 0x16, 0x39, 0x0, 0x0, {{{@in=@local, @in6=@rand_addr=' \x01\x00'}, {@in=@loopback, 0x0, 0x33}, @in=@dev}, 0x0, 0xffffffff}}, 0xf8}}, 0x0) 08:50:57 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) bind(r0, &(0x7f0000000240)=@generic={0x11, "46e423c9573668918a59c3e1a9c8813d8469a97a5e8b12f327902bef9ab7e9736fbcfd3b8c461ec8b0e56a242ea6a5c65f1d46b63a90c2c9fede8953b992e3ead0f2a9485aa2621de1c57f30ab41d73b20c173187023def01ef85cffdcc48064ff7397e70ac00abe19cdb1c010b66f7a4623b52b286297970a20224258e4"}, 0x80) 08:50:57 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)={0x38, r3, 0x1, 0x0, 0x0, {{0x39}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0xbb8]}}]}]}]}, 0x38}}, 0x0) 08:50:57 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r1) setuid(r1) ioprio_get$uid(0x3, r1) r3 = semget$private(0x0, 0x1, 0x0) semctl$IPC_SET(r3, 0x0, 0x1, &(0x7f00000001c0)={{0x3, 0xffffffffffffffff, r2, r1, 0x0, 0x24, 0x8}, 0x0, 0x8a}) semctl$SEM_STAT_ANY(r3, 0x4, 0x14, &(0x7f0000000100)=""/66) r4 = semget(0x1, 0x4, 0x210) semtimedop(r4, &(0x7f0000000340)=[{0x1, 0x2}], 0x1, &(0x7f0000000380)={0x0, 0x989680}) semctl$SEM_STAT_ANY(r4, 0x3, 0x14, &(0x7f0000000180)=""/59) semctl$IPC_SET(r3, 0x0, 0x1, &(0x7f0000000080)={{0x1, 0xee01, r2, r1, r2, 0x1a4, 0x6}, 0xc72, 0x5, 0x0, 0x0, 0x0, 0x0, 0x6}) 08:50:57 executing program 6: r0 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x0) 08:50:57 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCOUTQ(r0, 0x541b, 0xfffffffffffffffe) 08:50:57 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0xa40024, &(0x7f0000001cc0)={[{@gid}]}) 08:50:57 executing program 2: r0 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x0) 08:50:57 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) bind(r0, &(0x7f0000000240)=@generic={0x11, "46e423c9573668918a59c3e1a9c8813d8469a97a5e8b12f327902bef9ab7e9736fbcfd3b8c461ec8b0e56a242ea6a5c65f1d46b63a90c2c9fede8953b992e3ead0f2a9485aa2621de1c57f30ab41d73b20c173187023def01ef85cffdcc48064ff7397e70ac00abe19cdb1c010b66f7a4623b52b286297970a20224258e4"}, 0x80) 08:50:57 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000180)=@allocspi={0xf8, 0x16, 0x39, 0x0, 0x0, {{{@in=@local, @in6=@rand_addr=' \x01\x00'}, {@in=@loopback, 0x0, 0x33}, @in=@dev}, 0x0, 0xffffffff}}, 0xf8}}, 0x0) 08:50:57 executing program 6: r0 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x0) 08:50:57 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)={0x38, r3, 0x1, 0x0, 0x0, {{0x39}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0xbb8]}}]}]}]}, 0x38}}, 0x0) 08:50:57 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r1) setuid(r1) ioprio_get$uid(0x3, r1) r3 = semget$private(0x0, 0x1, 0x0) semctl$IPC_SET(r3, 0x0, 0x1, &(0x7f00000001c0)={{0x3, 0xffffffffffffffff, r2, r1, 0x0, 0x24, 0x8}, 0x0, 0x8a}) semctl$SEM_STAT_ANY(r3, 0x4, 0x14, &(0x7f0000000100)=""/66) r4 = semget(0x1, 0x4, 0x210) semtimedop(r4, &(0x7f0000000340)=[{0x1, 0x2}], 0x1, &(0x7f0000000380)={0x0, 0x989680}) semctl$SEM_STAT_ANY(r4, 0x3, 0x14, &(0x7f0000000180)=""/59) semctl$IPC_SET(r3, 0x0, 0x1, &(0x7f0000000080)={{0x1, 0xee01, r2, r1, r2, 0x1a4, 0x6}, 0xc72, 0x5, 0x0, 0x0, 0x0, 0x0, 0x6}) 08:50:57 executing program 2: r0 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x0) 08:50:57 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) bind(r0, &(0x7f0000000240)=@generic={0x11, "46e423c9573668918a59c3e1a9c8813d8469a97a5e8b12f327902bef9ab7e9736fbcfd3b8c461ec8b0e56a242ea6a5c65f1d46b63a90c2c9fede8953b992e3ead0f2a9485aa2621de1c57f30ab41d73b20c173187023def01ef85cffdcc48064ff7397e70ac00abe19cdb1c010b66f7a4623b52b286297970a20224258e4"}, 0x80) 08:50:57 executing program 6: r0 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x0) 08:50:57 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) bind(r0, &(0x7f0000000240)=@generic={0x11, "46e423c9573668918a59c3e1a9c8813d8469a97a5e8b12f327902bef9ab7e9736fbcfd3b8c461ec8b0e56a242ea6a5c65f1d46b63a90c2c9fede8953b992e3ead0f2a9485aa2621de1c57f30ab41d73b20c173187023def01ef85cffdcc48064ff7397e70ac00abe19cdb1c010b66f7a4623b52b286297970a20224258e4"}, 0x80) 08:50:57 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000180)=@allocspi={0xf8, 0x16, 0x39, 0x0, 0x0, {{{@in=@local, @in6=@rand_addr=' \x01\x00'}, {@in=@loopback, 0x0, 0x33}, @in=@dev}, 0x0, 0xffffffff}}, 0xf8}}, 0x0) 08:50:57 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0xa40024, &(0x7f0000001cc0)={[{@gid}]}) 08:50:57 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)={0x38, r3, 0x1, 0x0, 0x0, {{0x39}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0xbb8]}}]}]}]}, 0x38}}, 0x0) 08:50:57 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r1) setuid(r1) ioprio_get$uid(0x3, r1) r3 = semget$private(0x0, 0x1, 0x0) semctl$IPC_SET(r3, 0x0, 0x1, &(0x7f00000001c0)={{0x3, 0xffffffffffffffff, r2, r1, 0x0, 0x24, 0x8}, 0x0, 0x8a}) semctl$SEM_STAT_ANY(r3, 0x4, 0x14, &(0x7f0000000100)=""/66) r4 = semget(0x1, 0x4, 0x210) semtimedop(r4, &(0x7f0000000340)=[{0x1, 0x2}], 0x1, &(0x7f0000000380)={0x0, 0x989680}) semctl$SEM_STAT_ANY(r4, 0x3, 0x14, &(0x7f0000000180)=""/59) semctl$IPC_SET(r3, 0x0, 0x1, &(0x7f0000000080)={{0x1, 0xee01, r2, r1, r2, 0x1a4, 0x6}, 0xc72, 0x5, 0x0, 0x0, 0x0, 0x0, 0x6}) 08:50:57 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCOUTQ(r0, 0x541b, 0xfffffffffffffffe) 08:50:57 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r1) setuid(r1) ioprio_get$uid(0x3, r1) r3 = semget$private(0x0, 0x1, 0x0) semctl$IPC_SET(r3, 0x0, 0x1, &(0x7f00000001c0)={{0x3, 0xffffffffffffffff, r2, r1, 0x0, 0x24, 0x8}, 0x0, 0x8a}) semctl$SEM_STAT_ANY(r3, 0x4, 0x14, &(0x7f0000000100)=""/66) r4 = semget(0x1, 0x4, 0x210) semtimedop(r4, &(0x7f0000000340)=[{0x1, 0x2}], 0x1, &(0x7f0000000380)={0x0, 0x989680}) semctl$SEM_STAT_ANY(r4, 0x3, 0x14, &(0x7f0000000180)=""/59) semctl$IPC_SET(r3, 0x0, 0x1, &(0x7f0000000080)={{0x1, 0xee01, r2, r1, r2, 0x1a4, 0x6}, 0xc72, 0x5, 0x0, 0x0, 0x0, 0x0, 0x6}) 08:50:57 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r1) setuid(r1) ioprio_get$uid(0x3, r1) r3 = semget$private(0x0, 0x1, 0x0) semctl$IPC_SET(r3, 0x0, 0x1, &(0x7f00000001c0)={{0x3, 0xffffffffffffffff, r2, r1, 0x0, 0x24, 0x8}, 0x0, 0x8a}) semctl$SEM_STAT_ANY(r3, 0x4, 0x14, &(0x7f0000000100)=""/66) r4 = semget(0x1, 0x4, 0x210) semtimedop(r4, &(0x7f0000000340)=[{0x1, 0x2}], 0x1, &(0x7f0000000380)={0x0, 0x989680}) semctl$SEM_STAT_ANY(r4, 0x3, 0x14, &(0x7f0000000180)=""/59) semctl$IPC_SET(r3, 0x0, 0x1, &(0x7f0000000080)={{0x1, 0xee01, r2, r1, r2, 0x1a4, 0x6}, 0xc72, 0x5, 0x0, 0x0, 0x0, 0x0, 0x6}) 08:50:58 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000180)=@allocspi={0xf8, 0x16, 0x39, 0x0, 0x0, {{{@in=@local, @in6=@rand_addr=' \x01\x00'}, {@in=@loopback, 0x0, 0x33}, @in=@dev}, 0x0, 0xffffffff}}, 0xf8}}, 0x0) 08:50:58 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)={0x38, r3, 0x1, 0x0, 0x0, {{0x39}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0xbb8]}}]}]}]}, 0x38}}, 0x0) 08:50:58 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCOUTQ(r0, 0x541b, 0xfffffffffffffffe) 08:50:58 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r1) setuid(r1) ioprio_get$uid(0x3, r1) r3 = semget$private(0x0, 0x1, 0x0) semctl$IPC_SET(r3, 0x0, 0x1, &(0x7f00000001c0)={{0x3, 0xffffffffffffffff, r2, r1, 0x0, 0x24, 0x8}, 0x0, 0x8a}) semctl$SEM_STAT_ANY(r3, 0x4, 0x14, &(0x7f0000000100)=""/66) r4 = semget(0x1, 0x4, 0x210) semtimedop(r4, &(0x7f0000000340)=[{0x1, 0x2}], 0x1, &(0x7f0000000380)={0x0, 0x989680}) semctl$SEM_STAT_ANY(r4, 0x3, 0x14, &(0x7f0000000180)=""/59) semctl$IPC_SET(r3, 0x0, 0x1, &(0x7f0000000080)={{0x1, 0xee01, r2, r1, r2, 0x1a4, 0x6}, 0xc72, 0x5, 0x0, 0x0, 0x0, 0x0, 0x6}) 08:50:58 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r1) setuid(r1) ioprio_get$uid(0x3, r1) r3 = semget$private(0x0, 0x1, 0x0) semctl$IPC_SET(r3, 0x0, 0x1, &(0x7f00000001c0)={{0x3, 0xffffffffffffffff, r2, r1, 0x0, 0x24, 0x8}, 0x0, 0x8a}) semctl$SEM_STAT_ANY(r3, 0x4, 0x14, &(0x7f0000000100)=""/66) r4 = semget(0x1, 0x4, 0x210) semtimedop(r4, &(0x7f0000000340)=[{0x1, 0x2}], 0x1, &(0x7f0000000380)={0x0, 0x989680}) semctl$SEM_STAT_ANY(r4, 0x3, 0x14, &(0x7f0000000180)=""/59) semctl$IPC_SET(r3, 0x0, 0x1, &(0x7f0000000080)={{0x1, 0xee01, r2, r1, r2, 0x1a4, 0x6}, 0xc72, 0x5, 0x0, 0x0, 0x0, 0x0, 0x6}) 08:50:58 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r1) setuid(r1) ioprio_get$uid(0x3, r1) r3 = semget$private(0x0, 0x1, 0x0) semctl$IPC_SET(r3, 0x0, 0x1, &(0x7f00000001c0)={{0x3, 0xffffffffffffffff, r2, r1, 0x0, 0x24, 0x8}, 0x0, 0x8a}) semctl$SEM_STAT_ANY(r3, 0x4, 0x14, &(0x7f0000000100)=""/66) r4 = semget(0x1, 0x4, 0x210) semtimedop(r4, &(0x7f0000000340)=[{0x1, 0x2}], 0x1, &(0x7f0000000380)={0x0, 0x989680}) semctl$SEM_STAT_ANY(r4, 0x3, 0x14, &(0x7f0000000180)=""/59) semctl$IPC_SET(r3, 0x0, 0x1, &(0x7f0000000080)={{0x1, 0xee01, r2, r1, r2, 0x1a4, 0x6}, 0xc72, 0x5, 0x0, 0x0, 0x0, 0x0, 0x6}) 08:50:58 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r1) setuid(r1) ioprio_get$uid(0x3, r1) r3 = semget$private(0x0, 0x1, 0x0) semctl$IPC_SET(r3, 0x0, 0x1, &(0x7f00000001c0)={{0x3, 0xffffffffffffffff, r2, r1, 0x0, 0x24, 0x8}, 0x0, 0x8a}) semctl$SEM_STAT_ANY(r3, 0x4, 0x14, &(0x7f0000000100)=""/66) r4 = semget(0x1, 0x4, 0x210) semtimedop(r4, &(0x7f0000000340)=[{0x1, 0x2}], 0x1, &(0x7f0000000380)={0x0, 0x989680}) semctl$SEM_STAT_ANY(r4, 0x3, 0x14, &(0x7f0000000180)=""/59) semctl$IPC_SET(r3, 0x0, 0x1, &(0x7f0000000080)={{0x1, 0xee01, r2, r1, r2, 0x1a4, 0x6}, 0xc72, 0x5, 0x0, 0x0, 0x0, 0x0, 0x6}) 08:50:58 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r1) setuid(r1) ioprio_get$uid(0x3, r1) r3 = semget$private(0x0, 0x1, 0x0) semctl$IPC_SET(r3, 0x0, 0x1, &(0x7f00000001c0)={{0x3, 0xffffffffffffffff, r2, r1, 0x0, 0x24, 0x8}, 0x0, 0x8a}) semctl$SEM_STAT_ANY(r3, 0x4, 0x14, &(0x7f0000000100)=""/66) r4 = semget(0x1, 0x4, 0x210) semtimedop(r4, &(0x7f0000000340)=[{0x1, 0x2}], 0x1, &(0x7f0000000380)={0x0, 0x989680}) semctl$SEM_STAT_ANY(r4, 0x3, 0x14, &(0x7f0000000180)=""/59) semctl$IPC_SET(r3, 0x0, 0x1, &(0x7f0000000080)={{0x1, 0xee01, r2, r1, r2, 0x1a4, 0x6}, 0xc72, 0x5, 0x0, 0x0, 0x0, 0x0, 0x6}) 08:50:58 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r1) setuid(r1) ioprio_get$uid(0x3, r1) r3 = semget$private(0x0, 0x1, 0x0) semctl$IPC_SET(r3, 0x0, 0x1, &(0x7f00000001c0)={{0x3, 0xffffffffffffffff, r2, r1, 0x0, 0x24, 0x8}, 0x0, 0x8a}) semctl$SEM_STAT_ANY(r3, 0x4, 0x14, &(0x7f0000000100)=""/66) r4 = semget(0x1, 0x4, 0x210) semtimedop(r4, &(0x7f0000000340)=[{0x1, 0x2}], 0x1, &(0x7f0000000380)={0x0, 0x989680}) semctl$SEM_STAT_ANY(r4, 0x3, 0x14, &(0x7f0000000180)=""/59) semctl$IPC_SET(r3, 0x0, 0x1, &(0x7f0000000080)={{0x1, 0xee01, r2, r1, r2, 0x1a4, 0x6}, 0xc72, 0x5, 0x0, 0x0, 0x0, 0x0, 0x6}) 08:50:58 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0xa40024, &(0x7f0000001cc0)={[{@gid}]}) 08:50:58 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r1) setuid(r1) ioprio_get$uid(0x3, r1) r3 = semget$private(0x0, 0x1, 0x0) semctl$IPC_SET(r3, 0x0, 0x1, &(0x7f00000001c0)={{0x3, 0xffffffffffffffff, r2, r1, 0x0, 0x24, 0x8}, 0x0, 0x8a}) semctl$SEM_STAT_ANY(r3, 0x4, 0x14, &(0x7f0000000100)=""/66) r4 = semget(0x1, 0x4, 0x210) semtimedop(r4, &(0x7f0000000340)=[{0x1, 0x2}], 0x1, &(0x7f0000000380)={0x0, 0x989680}) semctl$SEM_STAT_ANY(r4, 0x3, 0x14, &(0x7f0000000180)=""/59) semctl$IPC_SET(r3, 0x0, 0x1, &(0x7f0000000080)={{0x1, 0xee01, r2, r1, r2, 0x1a4, 0x6}, 0xc72, 0x5, 0x0, 0x0, 0x0, 0x0, 0x6}) 08:50:58 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r1) setuid(r1) ioprio_get$uid(0x3, r1) r3 = semget$private(0x0, 0x1, 0x0) semctl$IPC_SET(r3, 0x0, 0x1, &(0x7f00000001c0)={{0x3, 0xffffffffffffffff, r2, r1, 0x0, 0x24, 0x8}, 0x0, 0x8a}) semctl$SEM_STAT_ANY(r3, 0x4, 0x14, &(0x7f0000000100)=""/66) r4 = semget(0x1, 0x4, 0x210) semtimedop(r4, &(0x7f0000000340)=[{0x1, 0x2}], 0x1, &(0x7f0000000380)={0x0, 0x989680}) semctl$SEM_STAT_ANY(r4, 0x3, 0x14, &(0x7f0000000180)=""/59) semctl$IPC_SET(r3, 0x0, 0x1, &(0x7f0000000080)={{0x1, 0xee01, r2, r1, r2, 0x1a4, 0x6}, 0xc72, 0x5, 0x0, 0x0, 0x0, 0x0, 0x6}) 08:50:58 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r1) setuid(r1) ioprio_get$uid(0x3, r1) r3 = semget$private(0x0, 0x1, 0x0) semctl$IPC_SET(r3, 0x0, 0x1, &(0x7f00000001c0)={{0x3, 0xffffffffffffffff, r2, r1, 0x0, 0x24, 0x8}, 0x0, 0x8a}) semctl$SEM_STAT_ANY(r3, 0x4, 0x14, &(0x7f0000000100)=""/66) r4 = semget(0x1, 0x4, 0x210) semtimedop(r4, &(0x7f0000000340)=[{0x1, 0x2}], 0x1, &(0x7f0000000380)={0x0, 0x989680}) semctl$SEM_STAT_ANY(r4, 0x3, 0x14, &(0x7f0000000180)=""/59) semctl$IPC_SET(r3, 0x0, 0x1, &(0x7f0000000080)={{0x1, 0xee01, r2, r1, r2, 0x1a4, 0x6}, 0xc72, 0x5, 0x0, 0x0, 0x0, 0x0, 0x6}) 08:50:58 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r1) setuid(r1) ioprio_get$uid(0x3, r1) r3 = semget$private(0x0, 0x1, 0x0) semctl$IPC_SET(r3, 0x0, 0x1, &(0x7f00000001c0)={{0x3, 0xffffffffffffffff, r2, r1, 0x0, 0x24, 0x8}, 0x0, 0x8a}) semctl$SEM_STAT_ANY(r3, 0x4, 0x14, &(0x7f0000000100)=""/66) r4 = semget(0x1, 0x4, 0x210) semtimedop(r4, &(0x7f0000000340)=[{0x1, 0x2}], 0x1, &(0x7f0000000380)={0x0, 0x989680}) semctl$SEM_STAT_ANY(r4, 0x3, 0x14, &(0x7f0000000180)=""/59) semctl$IPC_SET(r3, 0x0, 0x1, &(0x7f0000000080)={{0x1, 0xee01, r2, r1, r2, 0x1a4, 0x6}, 0xc72, 0x5, 0x0, 0x0, 0x0, 0x0, 0x6}) 08:50:58 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCOUTQ(r0, 0x541b, 0xfffffffffffffffe) 08:50:58 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000ac0)={0xffffffffffffffff}) sendto$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 08:50:58 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000ac0)={0xffffffffffffffff}) sendto$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 08:50:58 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r1) setuid(r1) ioprio_get$uid(0x3, r1) r3 = semget$private(0x0, 0x1, 0x0) semctl$IPC_SET(r3, 0x0, 0x1, &(0x7f00000001c0)={{0x3, 0xffffffffffffffff, r2, r1, 0x0, 0x24, 0x8}, 0x0, 0x8a}) semctl$SEM_STAT_ANY(r3, 0x4, 0x14, &(0x7f0000000100)=""/66) r4 = semget(0x1, 0x4, 0x210) semtimedop(r4, &(0x7f0000000340)=[{0x1, 0x2}], 0x1, &(0x7f0000000380)={0x0, 0x989680}) semctl$SEM_STAT_ANY(r4, 0x3, 0x14, &(0x7f0000000180)=""/59) semctl$IPC_SET(r3, 0x0, 0x1, &(0x7f0000000080)={{0x1, 0xee01, r2, r1, r2, 0x1a4, 0x6}, 0xc72, 0x5, 0x0, 0x0, 0x0, 0x0, 0x6}) 08:50:58 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r1) setuid(r1) ioprio_get$uid(0x3, r1) r3 = semget$private(0x0, 0x1, 0x0) semctl$IPC_SET(r3, 0x0, 0x1, &(0x7f00000001c0)={{0x3, 0xffffffffffffffff, r2, r1, 0x0, 0x24, 0x8}, 0x0, 0x8a}) semctl$SEM_STAT_ANY(r3, 0x4, 0x14, &(0x7f0000000100)=""/66) r4 = semget(0x1, 0x4, 0x210) semtimedop(r4, &(0x7f0000000340)=[{0x1, 0x2}], 0x1, &(0x7f0000000380)={0x0, 0x989680}) semctl$SEM_STAT_ANY(r4, 0x3, 0x14, &(0x7f0000000180)=""/59) semctl$IPC_SET(r3, 0x0, 0x1, &(0x7f0000000080)={{0x1, 0xee01, r2, r1, r2, 0x1a4, 0x6}, 0xc72, 0x5, 0x0, 0x0, 0x0, 0x0, 0x6}) 08:50:58 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0xa40024, &(0x7f0000001cc0)={[{@gid}]}) 08:50:58 executing program 6: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000a80)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x1c, r0, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 08:50:58 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r1) setuid(r1) ioprio_get$uid(0x3, r1) r3 = semget$private(0x0, 0x1, 0x0) semctl$IPC_SET(r3, 0x0, 0x1, &(0x7f00000001c0)={{0x3, 0xffffffffffffffff, r2, r1, 0x0, 0x24, 0x8}, 0x0, 0x8a}) semctl$SEM_STAT_ANY(r3, 0x4, 0x14, &(0x7f0000000100)=""/66) r4 = semget(0x1, 0x4, 0x210) semtimedop(r4, &(0x7f0000000340)=[{0x1, 0x2}], 0x1, &(0x7f0000000380)={0x0, 0x989680}) semctl$SEM_STAT_ANY(r4, 0x3, 0x14, &(0x7f0000000180)=""/59) semctl$IPC_SET(r3, 0x0, 0x1, &(0x7f0000000080)={{0x1, 0xee01, r2, r1, r2, 0x1a4, 0x6}, 0xc72, 0x5, 0x0, 0x0, 0x0, 0x0, 0x6}) 08:50:58 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000006140)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@hopopts_2292={{0x18, 0x29, 0x43}}], 0x18}}], 0x2, 0x0) 08:50:58 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000008c0), 0xffffffffffffffff) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r4 = dup2(r3, r2) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000000)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000fddbdf25070000000a0004007770616e330000000a0004007770616e3100000008000300", @ANYRES64=r4], 0x48}}, 0x0) 08:50:58 executing program 6: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000a80)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x1c, r0, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) [ 113.890009] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 08:50:58 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000ac0)={0xffffffffffffffff}) sendto$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 08:50:58 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r1) setuid(r1) ioprio_get$uid(0x3, r1) r3 = semget$private(0x0, 0x1, 0x0) semctl$IPC_SET(r3, 0x0, 0x1, &(0x7f00000001c0)={{0x3, 0xffffffffffffffff, r2, r1, 0x0, 0x24, 0x8}, 0x0, 0x8a}) semctl$SEM_STAT_ANY(r3, 0x4, 0x14, &(0x7f0000000100)=""/66) r4 = semget(0x1, 0x4, 0x210) semtimedop(r4, &(0x7f0000000340)=[{0x1, 0x2}], 0x1, &(0x7f0000000380)={0x0, 0x989680}) semctl$SEM_STAT_ANY(r4, 0x3, 0x14, &(0x7f0000000180)=""/59) semctl$IPC_SET(r3, 0x0, 0x1, &(0x7f0000000080)={{0x1, 0xee01, r2, r1, r2, 0x1a4, 0x6}, 0xc72, 0x5, 0x0, 0x0, 0x0, 0x0, 0x6}) 08:50:58 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "9bd070", 0x18, 0x6, 0x0, @mcast2, @mcast2, {[], @payload_conn={{{0x18, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7, 0x1}}}}}}}}, 0x0) 08:50:58 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000008c0), 0xffffffffffffffff) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r4 = dup2(r3, r2) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000000)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000fddbdf25070000000a0004007770616e330000000a0004007770616e3100000008000300", @ANYRES64=r4], 0x48}}, 0x0) 08:50:58 executing program 6: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000a80)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x1c, r0, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 08:50:58 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getsa={0x28, 0x12, 0x401, 0x0, 0x0, {@in6=@private1, 0x0, 0x0, 0xff}}, 0x28}}, 0x0) 08:50:58 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000006140)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@hopopts_2292={{0x18, 0x29, 0x43}}], 0x18}}], 0x2, 0x0) 08:50:58 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VT_ACTIVATE(r0, 0x5608, 0x0) [ 113.972720] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 08:50:58 executing program 6: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000a80)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x1c, r0, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 08:50:58 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000008c0), 0xffffffffffffffff) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r4 = dup2(r3, r2) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000000)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000fddbdf25070000000a0004007770616e330000000a0004007770616e3100000008000300", @ANYRES64=r4], 0x48}}, 0x0) 08:50:58 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000ac0)={0xffffffffffffffff}) sendto$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 08:50:58 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000006140)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@hopopts_2292={{0x18, 0x29, 0x43}}], 0x18}}], 0x2, 0x0) 08:50:58 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getsa={0x28, 0x12, 0x401, 0x0, 0x0, {@in6=@private1, 0x0, 0x0, 0xff}}, 0x28}}, 0x0) [ 114.029650] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 08:50:58 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000008c0), 0xffffffffffffffff) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r4 = dup2(r3, r2) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000000)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000fddbdf25070000000a0004007770616e330000000a0004007770616e3100000008000300", @ANYRES64=r4], 0x48}}, 0x0) 08:50:58 executing program 5: r0 = creat(&(0x7f00000000c0)='./file1\x00', 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f0000000140), 0x8) listen(r1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 08:50:58 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getsa={0x28, 0x12, 0x401, 0x0, 0x0, {@in6=@private1, 0x0, 0x0, 0xff}}, 0x28}}, 0x0) 08:50:58 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x3, 0x8}, 0x100, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2ff, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='personality\x00') pread64(r2, &(0x7f0000000240)=""/213, 0xd5, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 08:50:58 executing program 6: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/if_inet6\x00') pread64(r0, &(0x7f0000000000)=""/233, 0xe9, 0x0) 08:50:58 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "9bd070", 0x18, 0x6, 0x0, @mcast2, @mcast2, {[], @payload_conn={{{0x18, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7, 0x1}}}}}}}}, 0x0) 08:50:58 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000006140)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@hopopts_2292={{0x18, 0x29, 0x43}}], 0x18}}], 0x2, 0x0) 08:50:58 executing program 5: r0 = creat(&(0x7f00000000c0)='./file1\x00', 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f0000000140), 0x8) listen(r1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) [ 114.139013] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 08:50:58 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getsa={0x28, 0x12, 0x401, 0x0, 0x0, {@in6=@private1, 0x0, 0x0, 0xff}}, 0x28}}, 0x0) [ 114.151291] audit: type=1400 audit(1768294258.721:10): avc: denied { tracepoint } for pid=4102 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 08:50:58 executing program 2: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0xa40024, &(0x7f0000000040)=ANY=[]) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x1000, 0x1) 08:50:58 executing program 5: r0 = creat(&(0x7f00000000c0)='./file1\x00', 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f0000000140), 0x8) listen(r1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 08:50:58 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "9bd070", 0x18, 0x6, 0x0, @mcast2, @mcast2, {[], @payload_conn={{{0x18, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7, 0x1}}}}}}}}, 0x0) 08:50:58 executing program 7: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000001540), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 08:50:58 executing program 6: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/if_inet6\x00') pread64(r0, &(0x7f0000000000)=""/233, 0xe9, 0x0) 08:50:58 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x4c, &(0x7f0000000080), 0x4) fcntl$setstatus(r0, 0x4, 0xc0400) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000180)={0x8, 0x43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x9}, 0x0, 0x9, 0xffffffffffffffff, 0x8) r1 = fork() waitid(0x2, 0x0, 0x0, 0x8, &(0x7f00000000c0)) ptrace(0x10, r1) 08:50:58 executing program 3: r0 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000280)=0x729) 08:50:58 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x3, 0x8}, 0x100, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2ff, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='personality\x00') pread64(r2, &(0x7f0000000240)=""/213, 0xd5, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) [ 114.363753] audit: type=1400 audit(1768294258.924:11): avc: denied { write } for pid=4121 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 08:50:58 executing program 6: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/if_inet6\x00') pread64(r0, &(0x7f0000000000)=""/233, 0xe9, 0x0) 08:50:58 executing program 5: r0 = creat(&(0x7f00000000c0)='./file1\x00', 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f0000000140), 0x8) listen(r1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 08:50:58 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "9bd070", 0x18, 0x6, 0x0, @mcast2, @mcast2, {[], @payload_conn={{{0x18, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7, 0x1}}}}}}}}, 0x0) 08:50:58 executing program 2: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0xa40024, &(0x7f0000000040)=ANY=[]) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x1000, 0x1) 08:50:59 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x3, 0x8}, 0x100, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2ff, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='personality\x00') pread64(r2, &(0x7f0000000240)=""/213, 0xd5, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 08:50:59 executing program 5: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x3, 0x8}, 0x100, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2ff, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='personality\x00') pread64(r2, &(0x7f0000000240)=""/213, 0xd5, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 08:50:59 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x3, 0x8}, 0x100, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2ff, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='personality\x00') pread64(r2, &(0x7f0000000240)=""/213, 0xd5, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 08:50:59 executing program 2: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0xa40024, &(0x7f0000000040)=ANY=[]) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x1000, 0x1) 08:50:59 executing program 7: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000001540), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 08:50:59 executing program 6: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/if_inet6\x00') pread64(r0, &(0x7f0000000000)=""/233, 0xe9, 0x0) 08:50:59 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x4c, &(0x7f0000000080), 0x4) fcntl$setstatus(r0, 0x4, 0xc0400) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000180)={0x8, 0x43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x9}, 0x0, 0x9, 0xffffffffffffffff, 0x8) r1 = fork() waitid(0x2, 0x0, 0x0, 0x8, &(0x7f00000000c0)) ptrace(0x10, r1) 08:50:59 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000280)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000280)={0x20, r3, 0x1, 0x0, 0x0, {0x17}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x20}}, 0x0) r6 = syz_io_uring_setup(0x455, &(0x7f0000003a00), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0x14, 0x0, r7) syz_io_uring_submit(0x0, r1, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x1, 0x0, @fd=r2, 0x0, 0x0, 0x0, {0x8400}, 0x0, {0x0, r7}}, 0x401) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, 0x0) 08:50:59 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x4c, &(0x7f0000000080), 0x4) fcntl$setstatus(r0, 0x4, 0xc0400) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000180)={0x8, 0x43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x9}, 0x0, 0x9, 0xffffffffffffffff, 0x8) r1 = fork() waitid(0x2, 0x0, 0x0, 0x8, &(0x7f00000000c0)) ptrace(0x10, r1) 08:50:59 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000280)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000280)={0x20, r3, 0x1, 0x0, 0x0, {0x17}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x20}}, 0x0) r6 = syz_io_uring_setup(0x455, &(0x7f0000003a00), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0x14, 0x0, r7) syz_io_uring_submit(0x0, r1, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x1, 0x0, @fd=r2, 0x0, 0x0, 0x0, {0x8400}, 0x0, {0x0, r7}}, 0x401) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, 0x0) 08:50:59 executing program 5: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x3, 0x8}, 0x100, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2ff, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='personality\x00') pread64(r2, &(0x7f0000000240)=""/213, 0xd5, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 08:50:59 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x3, 0x8}, 0x100, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2ff, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='personality\x00') pread64(r2, &(0x7f0000000240)=""/213, 0xd5, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 08:50:59 executing program 7: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000001540), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 08:50:59 executing program 2: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0xa40024, &(0x7f0000000040)=ANY=[]) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x1000, 0x1) 08:50:59 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x3, 0x8}, 0x100, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2ff, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='personality\x00') pread64(r2, &(0x7f0000000240)=""/213, 0xd5, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 08:50:59 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000280)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000280)={0x20, r3, 0x1, 0x0, 0x0, {0x17}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x20}}, 0x0) r6 = syz_io_uring_setup(0x455, &(0x7f0000003a00), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0x14, 0x0, r7) syz_io_uring_submit(0x0, r1, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x1, 0x0, @fd=r2, 0x0, 0x0, 0x0, {0x8400}, 0x0, {0x0, r7}}, 0x401) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, 0x0) 08:50:59 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000280)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000280)={0x20, r3, 0x1, 0x0, 0x0, {0x17}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x20}}, 0x0) r6 = syz_io_uring_setup(0x455, &(0x7f0000003a00), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0x14, 0x0, r7) syz_io_uring_submit(0x0, r1, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x1, 0x0, @fd=r2, 0x0, 0x0, 0x0, {0x8400}, 0x0, {0x0, r7}}, 0x401) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, 0x0) 08:50:59 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x3, 0x8}, 0x100, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2ff, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='personality\x00') pread64(r2, &(0x7f0000000240)=""/213, 0xd5, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 08:50:59 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000280)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000280)={0x20, r3, 0x1, 0x0, 0x0, {0x17}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x20}}, 0x0) r6 = syz_io_uring_setup(0x455, &(0x7f0000003a00), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0x14, 0x0, r7) syz_io_uring_submit(0x0, r1, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x1, 0x0, @fd=r2, 0x0, 0x0, 0x0, {0x8400}, 0x0, {0x0, r7}}, 0x401) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, 0x0) 08:50:59 executing program 5: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x3, 0x8}, 0x100, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2ff, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='personality\x00') pread64(r2, &(0x7f0000000240)=""/213, 0xd5, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 08:50:59 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x4c, &(0x7f0000000080), 0x4) fcntl$setstatus(r0, 0x4, 0xc0400) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000180)={0x8, 0x43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x9}, 0x0, 0x9, 0xffffffffffffffff, 0x8) r1 = fork() waitid(0x2, 0x0, 0x0, 0x8, &(0x7f00000000c0)) ptrace(0x10, r1) 08:50:59 executing program 7: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000001540), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 08:50:59 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x4c, &(0x7f0000000080), 0x4) fcntl$setstatus(r0, 0x4, 0xc0400) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000180)={0x8, 0x43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x9}, 0x0, 0x9, 0xffffffffffffffff, 0x8) r1 = fork() waitid(0x2, 0x0, 0x0, 0x8, &(0x7f00000000c0)) ptrace(0x10, r1) 08:50:59 executing program 5: r0 = perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x91, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) socket$packet(0x11, 0x0, 0x300) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_pid(r1, &(0x7f0000000080), 0x12) fallocate(r1, 0x11, 0x80000000, 0x6ef) ftruncate(r1, 0x10000) 08:50:59 executing program 0: io_setup(0x9, &(0x7f00000001c0)=0x0) io_pgetevents(r0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) 08:50:59 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000280)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000280)={0x20, r3, 0x1, 0x0, 0x0, {0x17}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x20}}, 0x0) r6 = syz_io_uring_setup(0x455, &(0x7f0000003a00), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0x14, 0x0, r7) syz_io_uring_submit(0x0, r1, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x1, 0x0, @fd=r2, 0x0, 0x0, 0x0, {0x8400}, 0x0, {0x0, r7}}, 0x401) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, 0x0) 08:50:59 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x4c, &(0x7f0000000080), 0x4) fcntl$setstatus(r0, 0x4, 0xc0400) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000180)={0x8, 0x43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x9}, 0x0, 0x9, 0xffffffffffffffff, 0x8) r1 = fork() waitid(0x2, 0x0, 0x0, 0x8, &(0x7f00000000c0)) ptrace(0x10, r1) 08:50:59 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000280)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000280)={0x20, r3, 0x1, 0x0, 0x0, {0x17}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x20}}, 0x0) r6 = syz_io_uring_setup(0x455, &(0x7f0000003a00), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0x14, 0x0, r7) syz_io_uring_submit(0x0, r1, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x1, 0x0, @fd=r2, 0x0, 0x0, 0x0, {0x8400}, 0x0, {0x0, r7}}, 0x401) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, 0x0) 08:50:59 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'sit0\x00', 0x0}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000440)={&(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000240)="6caf", 0x2}], 0x1, &(0x7f00000001c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @empty}}}], 0x20}, 0x0) 08:50:59 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_secret(0x0) ftruncate(r0, 0x4) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fec000/0x14000)=nil, 0x14000, 0x2, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) 08:50:59 executing program 5: r0 = perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x91, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) socket$packet(0x11, 0x0, 0x300) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_pid(r1, &(0x7f0000000080), 0x12) fallocate(r1, 0x11, 0x80000000, 0x6ef) ftruncate(r1, 0x10000) 08:50:59 executing program 7: r0 = perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x91, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) socket$packet(0x11, 0x0, 0x300) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_pid(r1, &(0x7f0000000080), 0x12) fallocate(r1, 0x11, 0x80000000, 0x6ef) ftruncate(r1, 0x10000) 08:50:59 executing program 0: io_setup(0x9, &(0x7f00000001c0)=0x0) io_pgetevents(r0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) 08:50:59 executing program 6: r0 = perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x91, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) socket$packet(0x11, 0x0, 0x300) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_pid(r1, &(0x7f0000000080), 0x12) fallocate(r1, 0x11, 0x80000000, 0x6ef) ftruncate(r1, 0x10000) 08:50:59 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgrp(0xffffffffffffffff) ptrace(0xffffffffffffffff, r0) 08:50:59 executing program 5: r0 = perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x91, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) socket$packet(0x11, 0x0, 0x300) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_pid(r1, &(0x7f0000000080), 0x12) fallocate(r1, 0x11, 0x80000000, 0x6ef) ftruncate(r1, 0x10000) 08:50:59 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_secret(0x0) ftruncate(r0, 0x4) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fec000/0x14000)=nil, 0x14000, 0x2, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) 08:50:59 executing program 0: io_setup(0x9, &(0x7f00000001c0)=0x0) io_pgetevents(r0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) 08:50:59 executing program 7: r0 = perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x91, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) socket$packet(0x11, 0x0, 0x300) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_pid(r1, &(0x7f0000000080), 0x12) fallocate(r1, 0x11, 0x80000000, 0x6ef) ftruncate(r1, 0x10000) 08:51:00 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'sit0\x00', 0x0}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000440)={&(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000240)="6caf", 0x2}], 0x1, &(0x7f00000001c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @empty}}}], 0x20}, 0x0) 08:51:00 executing program 6: r0 = perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x91, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) socket$packet(0x11, 0x0, 0x300) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_pid(r1, &(0x7f0000000080), 0x12) fallocate(r1, 0x11, 0x80000000, 0x6ef) ftruncate(r1, 0x10000) 08:51:00 executing program 0: io_setup(0x9, &(0x7f00000001c0)=0x0) io_pgetevents(r0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) 08:51:00 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgrp(0xffffffffffffffff) ptrace(0xffffffffffffffff, r0) 08:51:00 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x4c, &(0x7f0000000080), 0x4) fcntl$setstatus(r0, 0x4, 0xc0400) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000180)={0x8, 0x43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x9}, 0x0, 0x9, 0xffffffffffffffff, 0x8) r1 = fork() waitid(0x2, 0x0, 0x0, 0x8, &(0x7f00000000c0)) ptrace(0x10, r1) 08:51:00 executing program 7: r0 = perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x91, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) socket$packet(0x11, 0x0, 0x300) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_pid(r1, &(0x7f0000000080), 0x12) fallocate(r1, 0x11, 0x80000000, 0x6ef) ftruncate(r1, 0x10000) 08:51:00 executing program 5: r0 = perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x91, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) socket$packet(0x11, 0x0, 0x300) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_pid(r1, &(0x7f0000000080), 0x12) fallocate(r1, 0x11, 0x80000000, 0x6ef) ftruncate(r1, 0x10000) 08:51:00 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'sit0\x00', 0x0}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000440)={&(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000240)="6caf", 0x2}], 0x1, &(0x7f00000001c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @empty}}}], 0x20}, 0x0) 08:51:00 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_secret(0x0) ftruncate(r0, 0x4) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fec000/0x14000)=nil, 0x14000, 0x2, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) 08:51:00 executing program 6: r0 = perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x91, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) socket$packet(0x11, 0x0, 0x300) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_pid(r1, &(0x7f0000000080), 0x12) fallocate(r1, 0x11, 0x80000000, 0x6ef) ftruncate(r1, 0x10000) 08:51:00 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_secret(0x0) ftruncate(r0, 0x4) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fec000/0x14000)=nil, 0x14000, 0x2, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) 08:51:00 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'sit0\x00', 0x0}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000440)={&(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000240)="6caf", 0x2}], 0x1, &(0x7f00000001c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @empty}}}], 0x20}, 0x0) 08:51:00 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_secret(0x0) ftruncate(r0, 0x4) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fec000/0x14000)=nil, 0x14000, 0x2, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) 08:51:00 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgrp(0xffffffffffffffff) ptrace(0xffffffffffffffff, r0) 08:51:00 executing program 7: r0 = fsopen(&(0x7f0000000040)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x22, 0x0, 0x0, 0x0) 08:51:00 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x1b, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000dc0000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b0000000001000028020000028401001b0000000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e35343235353432393700"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000191e9a1afbab4a0784039e22778533ac010000000c00000000000000d1f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000100000000000000000000000000000000000000000000002500000000000000", 0x40, 0x540}, {&(0x7f0000010300)="0000000000000000000000000000000000000000010400"/32, 0x20, 0x640}, {&(0x7f0000010400)="030000000400000005000000dc000f000300040000000000000000000f004582", 0x20, 0x800}, {&(0x7f0000010500)="ffffffff07000000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0100ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000d1f4655fd1f4655fd1f4655f00"/2080, 0x820, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d1f4655fd1f4655fd1f4655f00000000000004000200000000000000050000000d00"/64, 0x40, 0x1500}, {&(0x7f0000010f00)="2000000008f5ddb808f5ddb800000000d1f4655f00"/32, 0x20, 0x1580}, {&(0x7f0000011000)="c0410000002c0000d1f4655fd1f4655fd1f4655f00000000000002001600000000000000000000000e0000000f000000100000001100000012000000130000001400000015000000160000001700000018000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000d1f4655f000000000000000000000000000002ea00"/192, 0xc0, 0x1e00}, {&(0x7f0000011100)="ed4100003c000000d1f4655fd1f4655fd1f4655f0000000000000200000000000000001003000000020000000d0000001000050166696c65300000000e0000002800050766696c65310000000000000000000000000000000000000000000000000000006d465f020000000000000000000000000000000000000000000000002000000008f5ddb808f5ddb808f5ddb8d1f4655f08f5ddb80000000000000000000002ea04070000000000000000000000000000646174610000000000000000", 0xc0, 0x1f00}, {&(0x7f0000011200)="ed8100001a040000d1f4655fd1f4655fd1f4655f0000000000000100040000000000000001000000190000001a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000852c53740000000000000000000000000000000000000000000000002000000008f5ddb808f5ddb808f5ddb8d1f4655f08f5ddb80000000000000000", 0xa0, 0x2000}, {&(0x7f0000011300)="ffa1000026000000d1f4655fd1f4655fd1f4655f00000000000001000000000000000000010000002f746d702f73797a2d696d61676567656e3534323535343239372f66696c65302f66696c6530000000000000000000000000000000000000000000007c8f883b0000000000000000000000000000000000000000000000002000000008f5ddb808f5ddb808f5ddb8d1f4655f08f5ddb80000000000000000", 0xa0, 0x2100}, {&(0x7f0000011400)="ed8100000a000000d1f4655fd1f4655fd1f4655f000000000000010000000000000000100100000073797a6b616c6c6572730000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a40410760000000000000000000000000000000000000000000000002000000008f5ddb808f5ddb808f5ddb8d1f4655f08f5ddb80000000000000000000002ea040700000000000000000000000000006461746106015400000000000600000000000000786174747231000006014c000000000006000000000000007861747472320000000000000000000078617474723200007861747472310000ed81000028230000d1f4655fd1f4655fd1f4655f00000000000002001200000000000000010000001b0000001c0000001d0000001e0000001f000000200000002100000022000000230000000000000000000000000000000000000000000000000000004d0f9deb0000000000000000000000000000000000000000000000002000000008f5ddb808f5ddb808f5ddb8d1f4655f08f5ddb80000000000000000", 0x1a0, 0x2200}, {&(0x7f0000011600)="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", 0x100, 0x2400}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531000000100000001000050166696c6532000000100000001000050166696c6533000000110000009403090166696c652e636f6c64000000", 0x80, 0x3400}, {&(0x7f0000011800)="0b0000000c0001022e000000020000000c0002022e2e000000000000e8030000", 0x20, 0x3800}, {&(0x7f0000011900)="00000000000400"/32, 0x20, 0x3c00}, {&(0x7f0000011a00)="00000000000400"/32, 0x20, 0x4000}, {&(0x7f0000011b00)="00000000000400"/32, 0x20, 0x4400}, {&(0x7f0000011c00)="00000000000400"/32, 0x20, 0x4800}, {&(0x7f0000011d00)="00000000000400"/32, 0x20, 0x4c00}, {&(0x7f0000011e00)="00000000000400"/32, 0x20, 0x5000}, {&(0x7f0000011f00)="00000000000400"/32, 0x20, 0x5400}, {&(0x7f0000012000)="00000000000400"/32, 0x20, 0x5800}, {&(0x7f0000012100)="00000000000400"/32, 0x20, 0x5c00}, {&(0x7f0000012200)="00000000000400"/32, 0x20, 0x6000}, {&(0x7f0000012300)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x6400}], 0x0, &(0x7f0000012800)) 08:51:00 executing program 2: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) pread64(r0, &(0x7f00000000c0)=""/33, 0x21, 0x2) [ 115.864452] loop6: detected capacity change from 0 to 512 [ 115.895081] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.943421] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. 08:51:00 executing program 7: r0 = fsopen(&(0x7f0000000040)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x22, 0x0, 0x0, 0x0) 08:51:00 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_secret(0x0) ftruncate(r0, 0x4) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fec000/0x14000)=nil, 0x14000, 0x2, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) 08:51:00 executing program 6: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r0, &(0x7f0000002040)={0x0, 0x0, 0x0}, 0x0) 08:51:00 executing program 2: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) pread64(r0, &(0x7f00000000c0)=""/33, 0x21, 0x2) 08:51:00 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgrp(0xffffffffffffffff) ptrace(0xffffffffffffffff, r0) 08:51:00 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000003c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x3c, r1, 0xf1b5a43ca6b9a97, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0xe, 0x1, 'NLBL_MGMT\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}]}, 0x3c}}, 0x0) 08:51:00 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000003c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x3c, r1, 0xf1b5a43ca6b9a97, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0xe, 0x1, 'NLBL_MGMT\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}]}, 0x3c}}, 0x0) 08:51:00 executing program 4: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x4000) 08:51:00 executing program 1: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='hugetlbfs\x00', 0x0, 0x0) r0 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0xa40024, &(0x7f0000000040)=ANY=[]) mknodat$loop(r0, &(0x7f0000000000)='./file0\x00', 0xc000, 0x1) 08:51:00 executing program 6: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r0, &(0x7f0000002040)={0x0, 0x0, 0x0}, 0x0) [ 116.076498] capability: warning: `syz-executor.4' uses deprecated v2 capabilities in a way that may be insecure 08:51:00 executing program 7: r0 = fsopen(&(0x7f0000000040)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x22, 0x0, 0x0, 0x0) 08:51:00 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_secret(0x0) ftruncate(r0, 0x4) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fec000/0x14000)=nil, 0x14000, 0x2, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) 08:51:00 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000003c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x3c, r1, 0xf1b5a43ca6b9a97, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0xe, 0x1, 'NLBL_MGMT\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}]}, 0x3c}}, 0x0) 08:51:00 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x24, &(0x7f0000000300)=ANY=[@ANYRESHEX], 0x90) sendmsg(r0, &(0x7f0000000280)={&(0x7f00000000c0)=@nl=@unspec, 0x80, &(0x7f0000000240)=[{&(0x7f0000000180)="866369ed15bf241db3222862d749dac5bfd1325d", 0x14}, {&(0x7f00000004c0)="4150fbb84c8ccf532ef1cc28fdaf31f0dbee28b8", 0x14}], 0x2}, 0x10) 08:51:00 executing program 4: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x4000) 08:51:00 executing program 1: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='hugetlbfs\x00', 0x0, 0x0) r0 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0xa40024, &(0x7f0000000040)=ANY=[]) mknodat$loop(r0, &(0x7f0000000000)='./file0\x00', 0xc000, 0x1) 08:51:00 executing program 6: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r0, &(0x7f0000002040)={0x0, 0x0, 0x0}, 0x0) 08:51:00 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x24, &(0x7f0000000300)=ANY=[@ANYRESHEX], 0x90) sendmsg(r0, &(0x7f0000000280)={&(0x7f00000000c0)=@nl=@unspec, 0x80, &(0x7f0000000240)=[{&(0x7f0000000180)="866369ed15bf241db3222862d749dac5bfd1325d", 0x14}, {&(0x7f00000004c0)="4150fbb84c8ccf532ef1cc28fdaf31f0dbee28b8", 0x14}], 0x2}, 0x10) 08:51:00 executing program 2: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) pread64(r0, &(0x7f00000000c0)=""/33, 0x21, 0x2) 08:51:00 executing program 6: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r0, &(0x7f0000002040)={0x0, 0x0, 0x0}, 0x0) 08:51:00 executing program 7: r0 = fsopen(&(0x7f0000000040)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x22, 0x0, 0x0, 0x0) 08:51:00 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x40086607, &(0x7f0000000000)) 08:51:00 executing program 1: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='hugetlbfs\x00', 0x0, 0x0) r0 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0xa40024, &(0x7f0000000040)=ANY=[]) mknodat$loop(r0, &(0x7f0000000000)='./file0\x00', 0xc000, 0x1) 08:51:00 executing program 4: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x4000) 08:51:00 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000003c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x3c, r1, 0xf1b5a43ca6b9a97, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0xe, 0x1, 'NLBL_MGMT\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}]}, 0x3c}}, 0x0) 08:51:00 executing program 1: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00 VM DIAGNOSIS: 08:50:56 Registers: info registers vcpu 0 RAX=0000000000000001 RBX=0000000000000001 RCX=ffffffff84d1527e RDX=fffffbfff0b82d11 RSI=0000000000000004 RDI=ffffffff85c16880 RBP=ffffffff85c16880 RSP=ffff88801913fb50 R8 =0000000000000000 R9 =fffffbfff0b82d10 R10=ffffffff85c16883 R11=0000000000000000 R12=1ffff11003227f6b R13=0000000000000003 R14=fffffbfff0b82d10 R15=ffff88801913fb88 RIP=ffffffff84d15410 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 000055556b4a8400 00000000 00000000 GS =0000 ffff8880e5342000 00000000 00000000 LDT=0000 fffffe7400000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fffad00afa8 CR3=000000000ce1b000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000a60ce07b00000000cec3662e XMM01=000000000000000003515b82db34ca11 XMM02=0000000000000000333bebdfd0a6a21d XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000063 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff82977f45 RDI=ffffffff889c1a00 RBP=ffffffff889c19c0 RSP=ffff88800f80f4e8 R8 =0000000000000000 R9 =ffffed10016e3046 R10=0000000000000063 R11=206f7420676e6979 R12=0000000000000063 R13=0000000000000010 R14=ffffffff889c19c0 R15=ffffffff82977f30 RIP=ffffffff82977f9d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00005555666a4400 00000000 00000000 GS =0000 ffff8880e5442000 00000000 00000000 LDT=0000 fffffe6d00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000001b2d837000 CR3=000000000dfe5000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000a60ce07b00000000cec3662e XMM01=000000000000000003515b82db34ca11 XMM02=0000000000000000333bebdfd0a6a21d XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000