Warning: Permanently added '[localhost]:56824' (ECDSA) to the list of known hosts. 2025/11/27 08:07:13 fuzzer started 2025/11/27 08:07:13 dialing manager at localhost:36809 syzkaller login: [ 44.457696] cgroup: Unknown subsys name 'net' [ 44.528533] cgroup: Unknown subsys name 'cpuset' [ 44.546215] cgroup: Unknown subsys name 'rlimit' 2025/11/27 08:07:24 syscalls: 2214 2025/11/27 08:07:24 code coverage: enabled 2025/11/27 08:07:24 comparison tracing: enabled 2025/11/27 08:07:24 extra coverage: enabled 2025/11/27 08:07:24 setuid sandbox: enabled 2025/11/27 08:07:24 namespace sandbox: enabled 2025/11/27 08:07:24 Android sandbox: enabled 2025/11/27 08:07:24 fault injection: enabled 2025/11/27 08:07:24 leak checking: enabled 2025/11/27 08:07:24 net packet injection: enabled 2025/11/27 08:07:24 net device setup: enabled 2025/11/27 08:07:24 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/11/27 08:07:24 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/11/27 08:07:24 USB emulation: enabled 2025/11/27 08:07:24 hci packet injection: enabled 2025/11/27 08:07:24 wifi device emulation: enabled 2025/11/27 08:07:24 802.15.4 emulation: enabled 2025/11/27 08:07:24 fetching corpus: 0, signal 0/2000 (executing program) 2025/11/27 08:07:24 fetching corpus: 27, signal 28122/31036 (executing program) 2025/11/27 08:07:24 fetching corpus: 57, signal 34579/38578 (executing program) 2025/11/27 08:07:24 fetching corpus: 87, signal 42238/47013 (executing program) 2025/11/27 08:07:24 fetching corpus: 130, signal 48487/53831 (executing program) 2025/11/27 08:07:24 fetching corpus: 178, signal 57850/63136 (executing program) 2025/11/27 08:07:24 fetching corpus: 228, signal 64110/69431 (executing program) 2025/11/27 08:07:25 fetching corpus: 276, signal 70326/75461 (executing program) 2025/11/27 08:07:25 fetching corpus: 325, signal 74592/79623 (executing program) 2025/11/27 08:07:25 fetching corpus: 375, signal 77650/82673 (executing program) 2025/11/27 08:07:25 fetching corpus: 425, signal 81151/85924 (executing program) 2025/11/27 08:07:25 fetching corpus: 474, signal 83194/87960 (executing program) 2025/11/27 08:07:25 fetching corpus: 524, signal 87639/91650 (executing program) 2025/11/27 08:07:26 fetching corpus: 572, signal 90690/94229 (executing program) 2025/11/27 08:07:26 fetching corpus: 620, signal 91939/95355 (executing program) 2025/11/27 08:07:26 fetching corpus: 668, signal 94935/97648 (executing program) 2025/11/27 08:07:26 fetching corpus: 717, signal 96981/99224 (executing program) 2025/11/27 08:07:26 fetching corpus: 767, signal 98297/100217 (executing program) 2025/11/27 08:07:26 fetching corpus: 817, signal 99997/101440 (executing program) 2025/11/27 08:07:27 fetching corpus: 865, signal 102155/102847 (executing program) 2025/11/27 08:07:27 fetching corpus: 895, signal 103050/103417 (executing program) 2025/11/27 08:07:27 fetching corpus: 895, signal 103050/103443 (executing program) 2025/11/27 08:07:27 fetching corpus: 895, signal 103050/103461 (executing program) 2025/11/27 08:07:27 fetching corpus: 895, signal 103050/103478 (executing program) 2025/11/27 08:07:27 fetching corpus: 895, signal 103050/103489 (executing program) 2025/11/27 08:07:27 fetching corpus: 895, signal 103050/103505 (executing program) 2025/11/27 08:07:27 fetching corpus: 895, signal 103050/103524 (executing program) 2025/11/27 08:07:27 fetching corpus: 896, signal 103078/103558 (executing program) 2025/11/27 08:07:27 fetching corpus: 896, signal 103080/103571 (executing program) 2025/11/27 08:07:27 fetching corpus: 896, signal 103080/103591 (executing program) 2025/11/27 08:07:27 fetching corpus: 898, signal 103157/103677 (executing program) 2025/11/27 08:07:27 fetching corpus: 898, signal 103181/103716 (executing program) 2025/11/27 08:07:27 fetching corpus: 898, signal 103181/103735 (executing program) 2025/11/27 08:07:27 fetching corpus: 898, signal 103181/103755 (executing program) 2025/11/27 08:07:27 fetching corpus: 898, signal 103181/103766 (executing program) 2025/11/27 08:07:27 fetching corpus: 898, signal 103181/103776 (executing program) 2025/11/27 08:07:27 fetching corpus: 899, signal 103190/103796 (executing program) 2025/11/27 08:07:27 fetching corpus: 899, signal 103190/103803 (executing program) 2025/11/27 08:07:27 fetching corpus: 900, signal 103232/103845 (executing program) 2025/11/27 08:07:27 fetching corpus: 900, signal 103232/103860 (executing program) 2025/11/27 08:07:27 fetching corpus: 900, signal 103232/103877 (executing program) 2025/11/27 08:07:27 fetching corpus: 900, signal 103232/103889 (executing program) 2025/11/27 08:07:27 fetching corpus: 900, signal 103232/103906 (executing program) 2025/11/27 08:07:27 fetching corpus: 900, signal 103232/103928 (executing program) 2025/11/27 08:07:27 fetching corpus: 900, signal 103232/103951 (executing program) 2025/11/27 08:07:27 fetching corpus: 900, signal 103232/103967 (executing program) 2025/11/27 08:07:27 fetching corpus: 900, signal 103232/103988 (executing program) 2025/11/27 08:07:27 fetching corpus: 900, signal 103232/104007 (executing program) 2025/11/27 08:07:27 fetching corpus: 900, signal 103232/104024 (executing program) 2025/11/27 08:07:27 fetching corpus: 900, signal 103232/104043 (executing program) 2025/11/27 08:07:27 fetching corpus: 900, signal 103232/104059 (executing program) 2025/11/27 08:07:27 fetching corpus: 900, signal 103232/104090 (executing program) 2025/11/27 08:07:27 fetching corpus: 901, signal 103241/104099 (executing program) 2025/11/27 08:07:27 fetching corpus: 901, signal 103241/104099 (executing program) 2025/11/27 08:07:29 starting 8 fuzzer processes 08:07:29 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, 0x0, 0x0) 08:07:29 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x43, &(0x7f00000000c0)=0xffffffff, 0x4) 08:07:29 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000000740)=[{{&(0x7f0000000000)={0x2, 0x4e21}, 0x10, 0x0, 0x0, &(0x7f00000007c0)=[@ip_retopts={{0x10}}, @ip_retopts={{0x10}}], 0x20}}], 0x1, 0x0) 08:07:29 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = mq_open(&(0x7f00000000c0)='{@!(*@\x00', 0x40, 0x0, 0x0) close(r0) mq_unlink(&(0x7f0000000140)='{@!(*@\x00') 08:07:29 executing program 2: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000480)=[&(0x7f0000000180)={0x0, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0x3000}]) io_pgetevents(r1, 0x0, 0xffffff7b, 0x0, 0x0, 0x0) 08:07:29 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)={0x1c, r3, 0x1, 0x0, 0x0, {{0x3d}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}}, 0x0) 08:07:29 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x24048861, &(0x7f00000000c0)={0x2, 0xfbfe, @dev}, 0x10) getpeername(r0, 0x0, 0x0) 08:07:29 executing program 6: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) vmsplice(r0, 0x0, 0x0, 0x0) [ 59.875410] audit: type=1400 audit(1764230849.401:7): avc: denied { execmem } for pid=279 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 60.975793] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 60.977290] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 60.978481] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 60.983900] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 60.986902] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 61.166594] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 61.168819] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 61.174876] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 61.178125] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 61.179144] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 61.180272] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 61.181752] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 61.184705] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 61.192183] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 61.193959] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 61.195072] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 61.195809] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 61.197661] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 61.198586] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 61.198673] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 61.202747] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 61.205173] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 61.206243] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 61.206583] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 61.209351] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 61.210291] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 61.217860] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 61.219114] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 61.219402] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 61.224145] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 61.224409] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 61.226427] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 61.237277] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 61.244188] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 61.246641] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 61.258673] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 61.262283] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 61.276294] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 61.288223] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 61.293597] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 63.010407] Bluetooth: hci0: command tx timeout [ 63.266401] Bluetooth: hci6: command tx timeout [ 63.330561] Bluetooth: hci7: command tx timeout [ 63.330604] Bluetooth: hci1: command tx timeout [ 63.331391] Bluetooth: hci3: command tx timeout [ 63.331443] Bluetooth: hci5: command tx timeout [ 63.331484] Bluetooth: hci2: command tx timeout [ 63.394558] Bluetooth: hci4: command tx timeout [ 65.058052] Bluetooth: hci0: command tx timeout [ 65.315053] Bluetooth: hci6: command tx timeout [ 65.378167] Bluetooth: hci7: command tx timeout [ 65.378613] Bluetooth: hci2: command tx timeout [ 65.378645] Bluetooth: hci5: command tx timeout [ 65.379284] Bluetooth: hci3: command tx timeout [ 65.379912] Bluetooth: hci1: command tx timeout [ 65.443069] Bluetooth: hci4: command tx timeout [ 67.107050] Bluetooth: hci0: command tx timeout [ 67.363048] Bluetooth: hci6: command tx timeout [ 67.426044] Bluetooth: hci1: command tx timeout [ 67.426490] Bluetooth: hci5: command tx timeout [ 67.427094] Bluetooth: hci7: command tx timeout [ 67.427496] Bluetooth: hci3: command tx timeout [ 67.427510] Bluetooth: hci2: command tx timeout [ 67.490035] Bluetooth: hci4: command tx timeout [ 69.154042] Bluetooth: hci0: command tx timeout [ 69.411025] Bluetooth: hci6: command tx timeout [ 69.476116] Bluetooth: hci7: command tx timeout [ 69.476139] Bluetooth: hci3: command tx timeout [ 69.476564] Bluetooth: hci1: command tx timeout [ 69.476961] Bluetooth: hci5: command tx timeout [ 69.477494] Bluetooth: hci2: command tx timeout [ 69.538059] Bluetooth: hci4: command tx timeout [ 94.357327] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.358535] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.649756] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.650967] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.912717] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.914109] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.147075] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.148598] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.502777] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.503883] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.789943] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.791429] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 08:08:05 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x43, &(0x7f00000000c0)=0xffffffff, 0x4) 08:08:05 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000000740)=[{{&(0x7f0000000000)={0x2, 0x4e21}, 0x10, 0x0, 0x0, &(0x7f00000007c0)=[@ip_retopts={{0x10}}, @ip_retopts={{0x10}}], 0x20}}], 0x1, 0x0) 08:08:05 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000000740)=[{{&(0x7f0000000000)={0x2, 0x4e21}, 0x10, 0x0, 0x0, &(0x7f00000007c0)=[@ip_retopts={{0x10}}, @ip_retopts={{0x10}}], 0x20}}], 0x1, 0x0) 08:08:05 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x43, &(0x7f00000000c0)=0xffffffff, 0x4) [ 96.286105] audit: type=1400 audit(1764230885.808:8): avc: denied { open } for pid=3816 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 96.295103] audit: type=1400 audit(1764230885.809:9): avc: denied { kernel } for pid=3816 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 08:08:05 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000000740)=[{{&(0x7f0000000000)={0x2, 0x4e21}, 0x10, 0x0, 0x0, &(0x7f00000007c0)=[@ip_retopts={{0x10}}, @ip_retopts={{0x10}}], 0x20}}], 0x1, 0x0) [ 96.359172] ================================================================== [ 96.359855] BUG: KASAN: slab-use-after-free in _raw_spin_lock+0x2b/0x40 [ 96.360459] Read of size 1 at addr ffff88800b38a1d8 by task syz-executor.1/3816 [ 96.361514] [ 96.361887] CPU: 1 UID: 0 PID: 3816 Comm: syz-executor.1 Not tainted 6.18.0-rc7-next-20251127 #1 PREEMPT(voluntary) [ 96.361903] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 96.361911] Call Trace: [ 96.361915] [ 96.361920] dump_stack_lvl+0xca/0x120 [ 96.361943] print_report+0xcb/0x610 [ 96.361964] ? __virt_addr_valid+0x100/0x5d0 [ 96.361978] ? _raw_spin_lock+0x2b/0x40 [ 96.361993] ? _raw_spin_lock+0x2b/0x40 [ 96.362008] kasan_report+0xca/0x100 [ 96.362027] ? _raw_spin_lock+0x2b/0x40 [ 96.362043] ? _raw_spin_lock+0x2b/0x40 [ 96.362058] __kasan_check_byte+0x3a/0x50 [ 96.362076] lock_acquire+0xec/0x2d0 [ 96.362094] ? find_held_lock+0x2b/0x80 [ 96.362106] _raw_spin_lock+0x2b/0x40 [ 96.362120] ? mqueue_flush_file+0x47/0x110 [ 96.362138] mqueue_flush_file+0x47/0x110 [ 96.362154] ? __pfx_mqueue_flush_file+0x10/0x10 [ 96.362170] filp_flush+0x12c/0x1d0 [ 96.362187] __x64_sys_close+0x85/0x120 [ 96.362199] do_syscall_64+0xbf/0x420 [ 96.362212] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.362225] RIP: 0033:0x7f8172a0b72b [ 96.362234] Code: 0f 05 48 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 63 fc ff ff 8b 7c 24 0c 41 89 c0 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 44 89 c7 89 44 24 0c e8 a1 fc ff ff 8b 44 [ 96.362246] RSP: 002b:00007ffc83433480 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 96.362258] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f8172a0b72b [ 96.362266] RDX: 00007f8172b70ba8 RSI: 0000000000000081 RDI: 0000000000000004 [ 96.362273] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 96.362280] R10: 0000000000000000 R11: 0000000000000293 R12: 00007f8172b70ba8 [ 96.362287] R13: 00007ffc834335a0 R14: 00007f8172b6bf60 R15: 00000000000177af [ 96.362299] [ 96.362303] [ 96.380518] Allocated by task 3819: [ 96.380823] kasan_save_stack+0x24/0x50 [ 96.381165] kasan_save_track+0x14/0x30 [ 96.381506] __kasan_slab_alloc+0x59/0x70 [ 96.381860] kmem_cache_alloc_lru_noprof+0x217/0x720 [ 96.382290] mqueue_alloc_inode+0x27/0x50 [ 96.382644] alloc_inode+0x67/0x250 [ 96.382952] new_inode+0x1e/0x160 [ 96.383246] mqueue_get_inode+0x2e/0xdf0 [ 96.383592] mqueue_create_attr+0x1df/0x460 [ 96.383958] vfs_mkobj+0x3d5/0x620 [ 96.384267] do_mq_open+0x7a3/0x980 [ 96.384580] __x64_sys_mq_open+0x14f/0x1e0 [ 96.384938] do_syscall_64+0xbf/0x420 [ 96.385255] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.385679] [ 96.385828] Freed by task 3826: [ 96.386107] kasan_save_stack+0x24/0x50 [ 96.386449] kasan_save_track+0x14/0x30 [ 96.386790] kasan_save_free_info+0x3a/0x60 [ 96.387154] __kasan_slab_free+0x43/0x70 [ 96.387498] kmem_cache_free+0x2cd/0x660 [ 96.387839] i_callback+0x46/0x70 [ 96.388141] rcu_core+0x73c/0x1ed0 [ 96.388462] handle_softirqs+0x1b1/0x740 [ 96.388802] __irq_exit_rcu+0xc4/0x100 [ 96.389128] irq_exit_rcu+0x9/0x20 [ 96.389436] sysvec_apic_timer_interrupt+0x70/0x80 [ 96.389858] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 96.390290] [ 96.390433] Last potentially related work creation: [ 96.390837] kasan_save_stack+0x24/0x50 [ 96.391170] kasan_record_aux_stack+0x89/0xa0 [ 96.391546] __call_rcu_common.constprop.0+0x70/0xad0 [ 96.391981] destroy_inode+0x12b/0x1b0 [ 96.392324] evict+0x4fe/0x9e0 [ 96.392604] iput.part.0+0x7ea/0xeb0 [ 96.392922] iput+0x35/0x40 [ 96.393176] __do_sys_mq_unlink+0x2a3/0x3d0 [ 96.393535] do_syscall_64+0xbf/0x420 [ 96.393851] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.394275] [ 96.394421] The buggy address belongs to the object at ffff88800b38a1c0 [ 96.394421] which belongs to the cache mqueue_inode_cache of size 1568 [ 96.395482] The buggy address is located 24 bytes inside of [ 96.395482] freed 1568-byte region [ffff88800b38a1c0, ffff88800b38a7e0) [ 96.396470] [ 96.396615] The buggy address belongs to the physical page: [ 96.397081] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0xb388 [ 96.397725] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 96.398348] memcg:ffff88800e25d801 [ 96.398639] flags: 0x100000000000040(head|node=0|zone=1) [ 96.399084] page_type: f5(slab) [ 96.399365] raw: 0100000000000040 ffff88800a9b2a00 dead000000000122 0000000000000000 [ 96.400000] raw: 0000000000000000 0000000080120012 00000000f5000000 ffff88800e25d801 08:08:05 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x43, &(0x7f00000000c0)=0xffffffff, 0x4) [ 96.400760] head: 0100000000000040 ffff88800a9b2a00 dead000000000122 0000000000000000 [ 96.401421] head: 0000000000000000 0000000080120012 00000000f5000000 ffff88800e25d801 [ 96.402059] head: 0100000000000003 ffffea00002ce201 00000000ffffffff 00000000ffffffff [ 96.402703] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008 [ 96.403338] page dumped because: kasan: bad access detected [ 96.403796] [ 96.403937] Memory state around the buggy address: [ 96.404350] ffff88800b38a080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 96.404946] ffff88800b38a100: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc [ 96.405525] >ffff88800b38a180: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 96.406074] ^ [ 96.406526] ffff88800b38a200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 96.407060] ffff88800b38a280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 96.407639] ================================================================== [ 96.408630] Disabling lock debugging due to kernel taint [ 96.464067] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000005: 0000 [#1] SMP KASAN NOPTI [ 96.464939] KASAN: null-ptr-deref in range [0x0000000000000028-0x000000000000002f] [ 96.465504] CPU: 1 UID: 0 PID: 3816 Comm: syz-executor.1 Tainted: G B 6.18.0-rc7-next-20251127 #1 PREEMPT(voluntary) [ 96.466367] Tainted: [B]=BAD_PAGE [ 96.466621] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 96.467220] RIP: 0010:__fput+0x1cc/0xb50 [ 96.467535] Code: 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 f6 08 00 00 48 b8 00 00 00 00 00 fc ff df 4d 8b 7e 68 49 8d 7f 28 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 c9 08 00 00 48 ba 00 00 00 00 00 fc ff df 49 8b [ 96.468860] RSP: 0018:ffff888016f47e08 EFLAGS: 00010216 [ 96.469251] RAX: dffffc0000000000 RBX: ffff88800b38a200 RCX: ffffffff81b95f1e [ 96.469829] RDX: 0000000000000005 RSI: 0000000000000008 RDI: 0000000000000028 [ 96.470346] RBP: ffff8880169ad6c0 R08: 0000000000000000 R09: fffffbfff0cca14a [ 96.470872] R10: 0000000004000000 R11: 0000000040000000 R12: ffff8880169ad700 [ 96.471390] R13: 0000000000000010 R14: ffff88801c883318 R15: 0000000000000000 [ 96.471909] FS: 000055558c43a400(0000) GS:ffff8880e547a000(0000) knlGS:0000000000000000 [ 96.472511] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 96.472936] CR2: 00007f666c27d7f0 CR3: 000000000c520000 CR4: 0000000000350ef0 [ 96.473456] Call Trace: [ 96.473648] [ 96.473821] fput_close_sync+0x10f/0x230 [ 96.474124] ? __pfx_fput_close_sync+0x10/0x10 [ 96.474462] ? dnotify_flush+0x79/0x4c0 [ 96.474765] __x64_sys_close+0x8f/0x120 [ 96.475063] do_syscall_64+0xbf/0x420 [ 96.475352] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.475739] RIP: 0033:0x7f8172a0b72b [ 96.476015] Code: 0f 05 48 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 63 fc ff ff 8b 7c 24 0c 41 89 c0 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 44 89 c7 89 44 24 0c e8 a1 fc ff ff 8b 44 [ 96.477336] RSP: 002b:00007ffc83433480 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 96.477889] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f8172a0b72b [ 96.478408] RDX: 00007f8172b70ba8 RSI: 0000000000000081 RDI: 0000000000000004 [ 96.478933] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 96.479450] R10: 0000000000000000 R11: 0000000000000293 R12: 00007f8172b70ba8 [ 96.479971] R13: 00007ffc834335a0 R14: 00007f8172b6bf60 R15: 00000000000177af [ 96.480502] [ 96.480677] Modules linked in: [ 96.481038] ---[ end trace 0000000000000000 ]--- [ 96.481390] RIP: 0010:__fput+0x1cc/0xb50 [ 96.481699] Code: 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 f6 08 00 00 48 b8 00 00 00 00 00 fc ff df 4d 8b 7e 68 49 8d 7f 28 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 c9 08 00 00 48 ba 00 00 00 00 00 fc ff df 49 8b [ 96.483095] RSP: 0018:ffff888016f47e08 EFLAGS: 00010216 [ 96.483490] RAX: dffffc0000000000 RBX: ffff88800b38a200 RCX: ffffffff81b95f1e [ 96.484066] RDX: 0000000000000005 RSI: 0000000000000008 RDI: 0000000000000028 [ 96.484601] RBP: ffff8880169ad6c0 R08: 0000000000000000 R09: fffffbfff0cca14a [ 96.485174] R10: 0000000004000000 R11: 0000000040000000 R12: ffff8880169ad700 [ 96.485694] R13: 0000000000000010 R14: ffff88801c883318 R15: 0000000000000000 [ 96.486269] FS: 000055558c43a400(0000) GS:ffff8880e547a000(0000) knlGS:0000000000000000 [ 96.486854] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 96.487373] CR2: 00007f666c27d7f0 CR3: 000000000c520000 CR4: 0000000000350ef0 08:08:06 executing program 7: io_setup(0x4, &(0x7f0000000040)=0x0) r1 = memfd_create(&(0x7f0000000000)='-&!\'\x00\x11w\xc7\r\xa4\f=\xce\xce\xd8R\xc4\x81\xca\x03\x06G\xac', 0x0) write$binfmt_script(r1, &(0x7f00000001c0)={'#! ', './file0'}, 0xb) write$binfmt_script(r1, &(0x7f0000000280)={'#! ', './file0'}, 0xb) write$binfmt_script(r1, 0x0, 0xb) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x21}]) 08:08:06 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) dup(0xffffffffffffffff) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) lsetxattr$security_ima(0x0, 0x0, 0x0, 0xe, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000200)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000240), 0x4) close_range(r0, 0xffffffffffffffff, 0x0) [ 96.797596] ieee80211 phy8: Selected rate control algorithm 'minstrel_ht' [ 96.871343] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.872000] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.904495] ieee80211 phy9: Selected rate control algorithm 'minstrel_ht' [ 96.971514] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.972212] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.099813] ieee80211 phy10: Selected rate control algorithm 'minstrel_ht' [ 97.176809] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.177463] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.193631] ieee80211 phy11: Selected rate control algorithm 'minstrel_ht' [ 97.286252] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.286873] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.301028] ieee80211 phy12: Selected rate control algorithm 'minstrel_ht' [ 97.403060] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.403887] ieee80211 phy13: Selected rate control algorithm 'minstrel_ht' [ 97.405160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.447355] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.447940] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.454596] ieee80211 phy14: Selected rate control algorithm 'minstrel_ht' [ 97.475879] ieee80211 phy15: Selected rate control algorithm 'minstrel_ht' [ 97.485550] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.486758] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.496743] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.497646] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.533495] ieee80211 phy16: Selected rate control algorithm 'minstrel_ht' [ 97.592146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.592720] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.597682] ieee80211 phy17: Selected rate control algorithm 'minstrel_ht' [ 97.610574] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.611366] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 08:08:08 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, 0x0, 0x0) 08:08:08 executing program 7: io_setup(0x4, &(0x7f0000000040)=0x0) r1 = memfd_create(&(0x7f0000000000)='-&!\'\x00\x11w\xc7\r\xa4\f=\xce\xce\xd8R\xc4\x81\xca\x03\x06G\xac', 0x0) write$binfmt_script(r1, &(0x7f00000001c0)={'#! ', './file0'}, 0xb) write$binfmt_script(r1, &(0x7f0000000280)={'#! ', './file0'}, 0xb) write$binfmt_script(r1, 0x0, 0xb) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x21}]) 08:08:08 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = mq_open(&(0x7f00000000c0)='{@!(*@\x00', 0x40, 0x0, 0x0) close(r0) mq_unlink(&(0x7f0000000140)='{@!(*@\x00') 08:08:08 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) dup(0xffffffffffffffff) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) lsetxattr$security_ima(0x0, 0x0, 0x0, 0xe, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000200)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000240), 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 08:08:08 executing program 6: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) vmsplice(r0, 0x0, 0x0, 0x0) 08:08:08 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x24048861, &(0x7f00000000c0)={0x2, 0xfbfe, @dev}, 0x10) getpeername(r0, 0x0, 0x0) 08:08:08 executing program 2: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000480)=[&(0x7f0000000180)={0x0, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0x3000}]) io_pgetevents(r1, 0x0, 0xffffff7b, 0x0, 0x0, 0x0) 08:08:08 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)={0x1c, r3, 0x1, 0x0, 0x0, {{0x3d}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}}, 0x0) 08:08:08 executing program 7: io_setup(0x4, &(0x7f0000000040)=0x0) r1 = memfd_create(&(0x7f0000000000)='-&!\'\x00\x11w\xc7\r\xa4\f=\xce\xce\xd8R\xc4\x81\xca\x03\x06G\xac', 0x0) write$binfmt_script(r1, &(0x7f00000001c0)={'#! ', './file0'}, 0xb) write$binfmt_script(r1, &(0x7f0000000280)={'#! ', './file0'}, 0xb) write$binfmt_script(r1, 0x0, 0xb) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x21}]) 08:08:09 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, 0x0, 0x0) 08:08:09 executing program 6: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) vmsplice(r0, 0x0, 0x0, 0x0) 08:08:09 executing program 2: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000480)=[&(0x7f0000000180)={0x0, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0x3000}]) io_pgetevents(r1, 0x0, 0xffffff7b, 0x0, 0x0, 0x0) 08:08:09 executing program 7: io_setup(0x4, &(0x7f0000000040)=0x0) r1 = memfd_create(&(0x7f0000000000)='-&!\'\x00\x11w\xc7\r\xa4\f=\xce\xce\xd8R\xc4\x81\xca\x03\x06G\xac', 0x0) write$binfmt_script(r1, &(0x7f00000001c0)={'#! ', './file0'}, 0xb) write$binfmt_script(r1, &(0x7f0000000280)={'#! ', './file0'}, 0xb) write$binfmt_script(r1, 0x0, 0xb) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x21}]) 08:08:09 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x24048861, &(0x7f00000000c0)={0x2, 0xfbfe, @dev}, 0x10) getpeername(r0, 0x0, 0x0) 08:08:09 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = mq_open(&(0x7f00000000c0)='{@!(*@\x00', 0x40, 0x0, 0x0) close(r0) mq_unlink(&(0x7f0000000140)='{@!(*@\x00') 08:08:09 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)={0x1c, r3, 0x1, 0x0, 0x0, {{0x3d}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}}, 0x0) 08:08:09 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) dup(0xffffffffffffffff) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) lsetxattr$security_ima(0x0, 0x0, 0x0, 0xe, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000200)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000240), 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 08:08:09 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, 0x0, 0x0) 08:08:09 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x24048861, &(0x7f00000000c0)={0x2, 0xfbfe, @dev}, 0x10) getpeername(r0, 0x0, 0x0) 08:08:09 executing program 2: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000480)=[&(0x7f0000000180)={0x0, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0x3000}]) io_pgetevents(r1, 0x0, 0xffffff7b, 0x0, 0x0, 0x0) 08:08:09 executing program 6: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) vmsplice(r0, 0x0, 0x0, 0x0) 08:08:09 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)={0x1c, r3, 0x1, 0x0, 0x0, {{0x3d}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}}, 0x0) 08:08:09 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = mq_open(&(0x7f00000000c0)='{@!(*@\x00', 0x40, 0x0, 0x0) close(r0) mq_unlink(&(0x7f0000000140)='{@!(*@\x00') 08:08:09 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) dup(0xffffffffffffffff) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) lsetxattr$security_ima(0x0, 0x0, 0x0, 0xe, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000200)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000240), 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 08:08:09 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = mq_open(&(0x7f00000000c0)='{@!(*@\x00', 0x40, 0x0, 0x0) close(r0) mq_unlink(&(0x7f0000000140)='{@!(*@\x00') 08:08:09 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)={0x1c, r3, 0x1, 0x0, 0x0, {{0x3d}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}}, 0x0) 08:08:09 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)={0x1c, r3, 0x1, 0x0, 0x0, {{0x3d}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}}, 0x0) 08:08:09 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000480)=[&(0x7f0000000180)={0x0, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0x3000}]) io_pgetevents(r1, 0x0, 0xffffff7b, 0x0, 0x0, 0x0) 08:08:09 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000480)=[&(0x7f0000000180)={0x0, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0x3000}]) io_pgetevents(r1, 0x0, 0xffffff7b, 0x0, 0x0, 0x0) 08:08:09 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x24048861, &(0x7f00000000c0)={0x2, 0xfbfe, @dev}, 0x10) getpeername(r0, 0x0, 0x0) 08:08:09 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) vmsplice(r0, 0x0, 0x0, 0x0) 08:08:09 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000480)=[&(0x7f0000000180)={0x0, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0x3000}]) io_pgetevents(r1, 0x0, 0xffffff7b, 0x0, 0x0, 0x0) 08:08:09 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)={0x1c, r3, 0x1, 0x0, 0x0, {{0x3d}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}}, 0x0) 08:08:09 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000480)=[&(0x7f0000000180)={0x0, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0x3000}]) io_pgetevents(r1, 0x0, 0xffffff7b, 0x0, 0x0, 0x0) 08:08:09 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)={0x1c, r3, 0x1, 0x0, 0x0, {{0x3d}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}}, 0x0) 08:08:09 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x24048861, &(0x7f00000000c0)={0x2, 0xfbfe, @dev}, 0x10) getpeername(r0, 0x0, 0x0) 08:08:09 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) vmsplice(r0, 0x0, 0x0, 0x0) 08:08:09 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = mq_open(&(0x7f00000000c0)='{@!(*@\x00', 0x40, 0x0, 0x0) close(r0) mq_unlink(&(0x7f0000000140)='{@!(*@\x00') 08:08:09 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) dup(0xffffffffffffffff) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) lsetxattr$security_ima(0x0, 0x0, 0x0, 0xe, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000200)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000240), 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 08:08:09 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) vmsplice(r0, 0x0, 0x0, 0x0) 08:08:09 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x24048861, &(0x7f00000000c0)={0x2, 0xfbfe, @dev}, 0x10) getpeername(r0, 0x0, 0x0) 08:08:09 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)={0x1c, r3, 0x1, 0x0, 0x0, {{0x3d}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}}, 0x0) 08:08:09 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000480)=[&(0x7f0000000180)={0x0, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0x3000}]) io_pgetevents(r1, 0x0, 0xffffff7b, 0x0, 0x0, 0x0) 08:08:09 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000480)=[&(0x7f0000000180)={0x0, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0x3000}]) io_pgetevents(r1, 0x0, 0xffffff7b, 0x0, 0x0, 0x0) 08:08:09 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)={0x1c, r3, 0x1, 0x0, 0x0, {{0x3d}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}}, 0x0) 08:08:09 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) dup(0xffffffffffffffff) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) lsetxattr$security_ima(0x0, 0x0, 0x0, 0xe, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000200)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000240), 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 08:08:09 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = mq_open(&(0x7f00000000c0)='{@!(*@\x00', 0x40, 0x0, 0x0) close(r0) mq_unlink(&(0x7f0000000140)='{@!(*@\x00') 08:08:09 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) dup(0xffffffffffffffff) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) lsetxattr$security_ima(0x0, 0x0, 0x0, 0xe, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000200)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000240), 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 08:08:09 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) dup(0xffffffffffffffff) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) lsetxattr$security_ima(0x0, 0x0, 0x0, 0xe, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000200)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000240), 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 08:08:09 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) dup(0xffffffffffffffff) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) lsetxattr$security_ima(0x0, 0x0, 0x0, 0xe, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000200)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000240), 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 08:08:09 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) dup(0xffffffffffffffff) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) lsetxattr$security_ima(0x0, 0x0, 0x0, 0xe, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000200)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000240), 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 08:08:09 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) dup(0xffffffffffffffff) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) lsetxattr$security_ima(0x0, 0x0, 0x0, 0xe, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000200)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000240), 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 08:08:10 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) dup(0xffffffffffffffff) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) lsetxattr$security_ima(0x0, 0x0, 0x0, 0xe, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000200)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000240), 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 08:08:10 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) dup(0xffffffffffffffff) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) lsetxattr$security_ima(0x0, 0x0, 0x0, 0xe, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000200)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000240), 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 08:08:10 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) dup(0xffffffffffffffff) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) lsetxattr$security_ima(0x0, 0x0, 0x0, 0xe, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000200)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000240), 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 08:08:10 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) dup(0xffffffffffffffff) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) lsetxattr$security_ima(0x0, 0x0, 0x0, 0xe, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000200)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000240), 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 08:08:10 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) dup(0xffffffffffffffff) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) lsetxattr$security_ima(0x0, 0x0, 0x0, 0xe, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000200)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000240), 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 08:08:10 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) dup(0xffffffffffffffff) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) lsetxattr$security_ima(0x0, 0x0, 0x0, 0xe, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000200)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000240), 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 08:08:10 executing program 5: io_setup(0x4, &(0x7f0000000040)=0x0) r1 = memfd_create(&(0x7f0000000000)='-&!\'\x00\x11w\xc7\r\xa4\f=\xce\xce\xd8R\xc4\x81\xca\x03\x06G\xac', 0x0) write$binfmt_script(r1, &(0x7f00000001c0)={'#! ', './file0'}, 0xb) write$binfmt_script(r1, &(0x7f0000000280)={'#! ', './file0'}, 0xb) write$binfmt_script(r1, 0x0, 0xb) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x21}]) 08:08:10 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) dup(0xffffffffffffffff) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) lsetxattr$security_ima(0x0, 0x0, 0x0, 0xe, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000200)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000240), 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 08:08:10 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) dup(0xffffffffffffffff) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) lsetxattr$security_ima(0x0, 0x0, 0x0, 0xe, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000200)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000240), 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 08:08:10 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) dup(0xffffffffffffffff) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) lsetxattr$security_ima(0x0, 0x0, 0x0, 0xe, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000200)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000240), 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 08:08:10 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) dup(0xffffffffffffffff) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) lsetxattr$security_ima(0x0, 0x0, 0x0, 0xe, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000200)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000240), 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 08:08:10 executing program 5: io_setup(0x4, &(0x7f0000000040)=0x0) r1 = memfd_create(&(0x7f0000000000)='-&!\'\x00\x11w\xc7\r\xa4\f=\xce\xce\xd8R\xc4\x81\xca\x03\x06G\xac', 0x0) write$binfmt_script(r1, &(0x7f00000001c0)={'#! ', './file0'}, 0xb) write$binfmt_script(r1, &(0x7f0000000280)={'#! ', './file0'}, 0xb) write$binfmt_script(r1, 0x0, 0xb) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x21}]) 08:08:10 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) dup(0xffffffffffffffff) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) lsetxattr$security_ima(0x0, 0x0, 0x0, 0xe, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000200)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000240), 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 08:08:10 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) dup(0xffffffffffffffff) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) lsetxattr$security_ima(0x0, 0x0, 0x0, 0xe, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000200)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000240), 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 08:08:10 executing program 2: io_setup(0x4, &(0x7f0000000040)=0x0) r1 = memfd_create(&(0x7f0000000000)='-&!\'\x00\x11w\xc7\r\xa4\f=\xce\xce\xd8R\xc4\x81\xca\x03\x06G\xac', 0x0) write$binfmt_script(r1, &(0x7f00000001c0)={'#! ', './file0'}, 0xb) write$binfmt_script(r1, &(0x7f0000000280)={'#! ', './file0'}, 0xb) write$binfmt_script(r1, 0x0, 0xb) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x21}]) 08:08:10 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) dup(0xffffffffffffffff) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) lsetxattr$security_ima(0x0, 0x0, 0x0, 0xe, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000200)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000240), 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 08:08:10 executing program 1: io_setup(0x4, &(0x7f0000000040)=0x0) r1 = memfd_create(&(0x7f0000000000)='-&!\'\x00\x11w\xc7\r\xa4\f=\xce\xce\xd8R\xc4\x81\xca\x03\x06G\xac', 0x0) write$binfmt_script(r1, &(0x7f00000001c0)={'#! ', './file0'}, 0xb) write$binfmt_script(r1, &(0x7f0000000280)={'#! ', './file0'}, 0xb) write$binfmt_script(r1, 0x0, 0xb) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x21}]) 08:08:10 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) dup(0xffffffffffffffff) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) lsetxattr$security_ima(0x0, 0x0, 0x0, 0xe, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000200)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000240), 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 08:08:10 executing program 1: io_setup(0x4, &(0x7f0000000040)=0x0) r1 = memfd_create(&(0x7f0000000000)='-&!\'\x00\x11w\xc7\r\xa4\f=\xce\xce\xd8R\xc4\x81\xca\x03\x06G\xac', 0x0) write$binfmt_script(r1, &(0x7f00000001c0)={'#! ', './file0'}, 0xb) write$binfmt_script(r1, &(0x7f0000000280)={'#! ', './file0'}, 0xb) write$binfmt_script(r1, 0x0, 0xb) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x21}]) 08:08:10 executing program 0: io_setup(0x4, &(0x7f0000000040)=0x0) r1 = memfd_create(&(0x7f0000000000)='-&!\'\x00\x11w\xc7\r\xa4\f=\xce\xce\xd8R\xc4\x81\xca\x03\x06G\xac', 0x0) write$binfmt_script(r1, &(0x7f00000001c0)={'#! ', './file0'}, 0xb) write$binfmt_script(r1, &(0x7f0000000280)={'#! ', './file0'}, 0xb) write$binfmt_script(r1, 0x0, 0xb) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x21}]) 08:08:10 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) dup(0xffffffffffffffff) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) lsetxattr$security_ima(0x0, 0x0, 0x0, 0xe, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000200)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000240), 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 08:08:10 executing program 2: io_setup(0x4, &(0x7f0000000040)=0x0) r1 = memfd_create(&(0x7f0000000000)='-&!\'\x00\x11w\xc7\r\xa4\f=\xce\xce\xd8R\xc4\x81\xca\x03\x06G\xac', 0x0) write$binfmt_script(r1, &(0x7f00000001c0)={'#! ', './file0'}, 0xb) write$binfmt_script(r1, &(0x7f0000000280)={'#! ', './file0'}, 0xb) write$binfmt_script(r1, 0x0, 0xb) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x21}]) 08:08:10 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) dup(0xffffffffffffffff) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) lsetxattr$security_ima(0x0, 0x0, 0x0, 0xe, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000200)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000240), 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 08:08:10 executing program 5: io_setup(0x4, &(0x7f0000000040)=0x0) r1 = memfd_create(&(0x7f0000000000)='-&!\'\x00\x11w\xc7\r\xa4\f=\xce\xce\xd8R\xc4\x81\xca\x03\x06G\xac', 0x0) write$binfmt_script(r1, &(0x7f00000001c0)={'#! ', './file0'}, 0xb) write$binfmt_script(r1, &(0x7f0000000280)={'#! ', './file0'}, 0xb) write$binfmt_script(r1, 0x0, 0xb) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x21}]) 08:08:10 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) dup(0xffffffffffffffff) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) lsetxattr$security_ima(0x0, 0x0, 0x0, 0xe, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000200)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000240), 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 08:08:10 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 08:08:10 executing program 1: io_setup(0x4, &(0x7f0000000040)=0x0) r1 = memfd_create(&(0x7f0000000000)='-&!\'\x00\x11w\xc7\r\xa4\f=\xce\xce\xd8R\xc4\x81\xca\x03\x06G\xac', 0x0) write$binfmt_script(r1, &(0x7f00000001c0)={'#! ', './file0'}, 0xb) write$binfmt_script(r1, &(0x7f0000000280)={'#! ', './file0'}, 0xb) write$binfmt_script(r1, 0x0, 0xb) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x21}]) 08:08:10 executing program 0: io_setup(0x4, &(0x7f0000000040)=0x0) r1 = memfd_create(&(0x7f0000000000)='-&!\'\x00\x11w\xc7\r\xa4\f=\xce\xce\xd8R\xc4\x81\xca\x03\x06G\xac', 0x0) write$binfmt_script(r1, &(0x7f00000001c0)={'#! ', './file0'}, 0xb) write$binfmt_script(r1, &(0x7f0000000280)={'#! ', './file0'}, 0xb) write$binfmt_script(r1, 0x0, 0xb) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x21}]) 08:08:10 executing program 5: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0xc842, 0x0) write(r0, 0x0, 0x0) 08:08:10 executing program 0: io_setup(0x4, &(0x7f0000000040)=0x0) r1 = memfd_create(&(0x7f0000000000)='-&!\'\x00\x11w\xc7\r\xa4\f=\xce\xce\xd8R\xc4\x81\xca\x03\x06G\xac', 0x0) write$binfmt_script(r1, &(0x7f00000001c0)={'#! ', './file0'}, 0xb) write$binfmt_script(r1, &(0x7f0000000280)={'#! ', './file0'}, 0xb) write$binfmt_script(r1, 0x0, 0xb) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x21}]) 08:08:10 executing program 2: io_setup(0x4, &(0x7f0000000040)=0x0) r1 = memfd_create(&(0x7f0000000000)='-&!\'\x00\x11w\xc7\r\xa4\f=\xce\xce\xd8R\xc4\x81\xca\x03\x06G\xac', 0x0) write$binfmt_script(r1, &(0x7f00000001c0)={'#! ', './file0'}, 0xb) write$binfmt_script(r1, &(0x7f0000000280)={'#! ', './file0'}, 0xb) write$binfmt_script(r1, 0x0, 0xb) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x21}]) 08:08:10 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 08:08:10 executing program 6: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x18, 0x0, 0x1, 0x301, 0x0, 0x0, {}, [@CTA_TUPLE_REPLY={0x4}]}, 0x18}}, 0x0) 08:08:10 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000001200ffff"], 0x14}], 0x1}, 0x0) close(r0) 08:08:10 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x0, &(0x7f0000002200), 0x4) 08:08:10 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 08:08:10 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f0000006bc0)=[{{&(0x7f00000056c0)={0x2, 0x4e21}, 0x10, &(0x7f00000058c0)=[{&(0x7f0000005700)="ab036d05e0b0", 0x6}, {&(0x7f00000057c0)="10", 0x1}], 0x2}}], 0x3, 0x0) [ 101.334226] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list 08:08:10 executing program 6: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x18, 0x0, 0x1, 0x301, 0x0, 0x0, {}, [@CTA_TUPLE_REPLY={0x4}]}, 0x18}}, 0x0) 08:08:10 executing program 5: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0xc842, 0x0) write(r0, 0x0, 0x0) 08:08:10 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 08:08:10 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 08:08:10 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000001200ffff"], 0x14}], 0x1}, 0x0) close(r0) 08:08:10 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x0, &(0x7f0000002200), 0x4) 08:08:10 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f0000006bc0)=[{{&(0x7f00000056c0)={0x2, 0x4e21}, 0x10, &(0x7f00000058c0)=[{&(0x7f0000005700)="ab036d05e0b0", 0x6}, {&(0x7f00000057c0)="10", 0x1}], 0x2}}], 0x3, 0x0) 08:08:10 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(&(0x7f00000053c0), &(0x7f0000005400)='./file0\x00', 0x1, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, 'rfdno'}}]}}) 08:08:11 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x0, &(0x7f0000002200), 0x4) 08:08:11 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000001200ffff"], 0x14}], 0x1}, 0x0) close(r0) 08:08:11 executing program 6: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x18, 0x0, 0x1, 0x301, 0x0, 0x0, {}, [@CTA_TUPLE_REPLY={0x4}]}, 0x18}}, 0x0) 08:08:11 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 08:08:11 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f0000006bc0)=[{{&(0x7f00000056c0)={0x2, 0x4e21}, 0x10, &(0x7f00000058c0)=[{&(0x7f0000005700)="ab036d05e0b0", 0x6}, {&(0x7f00000057c0)="10", 0x1}], 0x2}}], 0x3, 0x0) 08:08:11 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 08:08:11 executing program 5: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0xc842, 0x0) write(r0, 0x0, 0x0) 08:08:11 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x0, &(0x7f0000002200), 0x4) 08:08:11 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000001200ffff"], 0x14}], 0x1}, 0x0) close(r0) 08:08:11 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f0000006bc0)=[{{&(0x7f00000056c0)={0x2, 0x4e21}, 0x10, &(0x7f00000058c0)=[{&(0x7f0000005700)="ab036d05e0b0", 0x6}, {&(0x7f00000057c0)="10", 0x1}], 0x2}}], 0x3, 0x0) 08:08:11 executing program 6: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x18, 0x0, 0x1, 0x301, 0x0, 0x0, {}, [@CTA_TUPLE_REPLY={0x4}]}, 0x18}}, 0x0) 08:08:11 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 08:08:11 executing program 5: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0xc842, 0x0) write(r0, 0x0, 0x0) 08:08:11 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f0000006bc0)=[{{&(0x7f00000056c0)={0x2, 0x4e21}, 0x10, &(0x7f00000058c0)=[{&(0x7f0000005700)="ab036d05e0b0", 0x6}, {&(0x7f00000057c0)="10", 0x1}], 0x2}}], 0x3, 0x0) 08:08:11 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(&(0x7f00000053c0), &(0x7f0000005400)='./file0\x00', 0x1, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, 'rfdno'}}]}}) 08:08:11 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000001200ffff"], 0x14}], 0x1}, 0x0) close(r0) 08:08:11 executing program 6: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0xc842, 0x0) write(r0, 0x0, 0x0) 08:08:11 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x0, &(0x7f0000002200), 0x4) 08:08:11 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 08:08:11 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f0000006bc0)=[{{&(0x7f00000056c0)={0x2, 0x4e21}, 0x10, &(0x7f00000058c0)=[{&(0x7f0000005700)="ab036d05e0b0", 0x6}, {&(0x7f00000057c0)="10", 0x1}], 0x2}}], 0x3, 0x0) 08:08:11 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x18, 0x0, 0x1, 0x301, 0x0, 0x0, {}, [@CTA_TUPLE_REPLY={0x4}]}, 0x18}}, 0x0) 08:08:11 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(&(0x7f00000053c0), &(0x7f0000005400)='./file0\x00', 0x1, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, 'rfdno'}}]}}) 08:08:11 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x0, &(0x7f0000002200), 0x4) 08:08:11 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 08:08:11 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x18, 0x0, 0x1, 0x301, 0x0, 0x0, {}, [@CTA_TUPLE_REPLY={0x4}]}, 0x18}}, 0x0) 08:08:11 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000001200ffff"], 0x14}], 0x1}, 0x0) close(r0) 08:08:11 executing program 6: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0xc842, 0x0) write(r0, 0x0, 0x0) 08:08:11 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f0000006bc0)=[{{&(0x7f00000056c0)={0x2, 0x4e21}, 0x10, &(0x7f00000058c0)=[{&(0x7f0000005700)="ab036d05e0b0", 0x6}, {&(0x7f00000057c0)="10", 0x1}], 0x2}}], 0x3, 0x0) 08:08:11 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x0, &(0x7f0000002200), 0x4) 08:08:11 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 08:08:11 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x18, 0x0, 0x1, 0x301, 0x0, 0x0, {}, [@CTA_TUPLE_REPLY={0x4}]}, 0x18}}, 0x0) 08:08:11 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(&(0x7f00000053c0), &(0x7f0000005400)='./file0\x00', 0x1, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, 'rfdno'}}]}}) 08:08:11 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(&(0x7f00000053c0), &(0x7f0000005400)='./file0\x00', 0x1, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, 'rfdno'}}]}}) 08:08:11 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000001200ffff"], 0x14}], 0x1}, 0x0) close(r0) 08:08:11 executing program 6: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0xc842, 0x0) write(r0, 0x0, 0x0) 08:08:11 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(&(0x7f00000053c0), &(0x7f0000005400)='./file0\x00', 0x1, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, 'rfdno'}}]}}) 08:08:11 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(&(0x7f00000053c0), &(0x7f0000005400)='./file0\x00', 0x1, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, 'rfdno'}}]}}) 08:08:11 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'sit0\x00', 0x0}) sendmmsg$inet6(r0, &(0x7f0000006cc0)=[{{&(0x7f0000000480)={0xa, 0x4e24, 0x0, @remote, 0x2}, 0x1c, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@empty, r2}}}], 0x28}}], 0x1, 0x0) 08:08:11 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000180)=""/208) 08:08:11 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448e3, &(0x7f0000000040)={0x0, 0x0, "d19869"}) 08:08:11 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'sit0\x00', 0x0}) sendmmsg$inet6(r0, &(0x7f0000006cc0)=[{{&(0x7f0000000480)={0xa, 0x4e24, 0x0, @remote, 0x2}, 0x1c, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@empty, r2}}}], 0x28}}], 0x1, 0x0) 08:08:11 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448e3, &(0x7f0000000040)={0x0, 0x0, "d19869"}) 08:08:11 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(&(0x7f00000053c0), &(0x7f0000005400)='./file0\x00', 0x1, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, 'rfdno'}}]}}) 08:08:11 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(&(0x7f00000053c0), &(0x7f0000005400)='./file0\x00', 0x1, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, 'rfdno'}}]}}) 08:08:11 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000180)=""/208) 08:08:12 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448e3, &(0x7f0000000040)={0x0, 0x0, "d19869"}) 08:08:12 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448e3, &(0x7f0000000040)={0x0, 0x0, "d19869"}) 08:08:12 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'sit0\x00', 0x0}) sendmmsg$inet6(r0, &(0x7f0000006cc0)=[{{&(0x7f0000000480)={0xa, 0x4e24, 0x0, @remote, 0x2}, 0x1c, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@empty, r2}}}], 0x28}}], 0x1, 0x0) 08:08:12 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(&(0x7f00000053c0), &(0x7f0000005400)='./file0\x00', 0x1, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, 'rfdno'}}]}}) 08:08:12 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(&(0x7f00000053c0), &(0x7f0000005400)='./file0\x00', 0x1, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, 'rfdno'}}]}}) 08:08:12 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'sit0\x00', 0x0}) sendmmsg$inet6(r0, &(0x7f0000006cc0)=[{{&(0x7f0000000480)={0xa, 0x4e24, 0x0, @remote, 0x2}, 0x1c, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@empty, r2}}}], 0x28}}], 0x1, 0x0) 08:08:12 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448e3, &(0x7f0000000040)={0x0, 0x0, "d19869"}) 08:08:12 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000180)=""/208) 08:08:12 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(&(0x7f00000053c0), &(0x7f0000005400)='./file0\x00', 0x1, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, 'rfdno'}}]}}) 08:08:12 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000180)=""/208) 08:08:12 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'sit0\x00', 0x0}) sendmmsg$inet6(r0, &(0x7f0000006cc0)=[{{&(0x7f0000000480)={0xa, 0x4e24, 0x0, @remote, 0x2}, 0x1c, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@empty, r2}}}], 0x28}}], 0x1, 0x0) 08:08:12 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448e3, &(0x7f0000000040)={0x0, 0x0, "d19869"}) 08:08:12 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(&(0x7f00000053c0), &(0x7f0000005400)='./file0\x00', 0x1, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, 'rfdno'}}]}}) 08:08:12 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448e3, &(0x7f0000000040)={0x0, 0x0, "d19869"}) 08:08:12 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000180)=""/208) 08:08:12 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'sit0\x00', 0x0}) sendmmsg$inet6(r0, &(0x7f0000006cc0)=[{{&(0x7f0000000480)={0xa, 0x4e24, 0x0, @remote, 0x2}, 0x1c, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@empty, r2}}}], 0x28}}], 0x1, 0x0) 08:08:12 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000180)=""/208) 08:08:12 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'sit0\x00', 0x0}) sendmmsg$inet6(r0, &(0x7f0000006cc0)=[{{&(0x7f0000000480)={0xa, 0x4e24, 0x0, @remote, 0x2}, 0x1c, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@empty, r2}}}], 0x28}}], 0x1, 0x0) 08:08:12 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000100)=[@window={0x3, 0xeab}, @timestamp, @sack_perm, @timestamp, @sack_perm, @sack_perm, @sack_perm, @timestamp], 0x8) 08:08:12 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'sit0\x00', 0x0}) sendmmsg$inet6(r0, &(0x7f0000006cc0)=[{{&(0x7f0000000480)={0xa, 0x4e24, 0x0, @remote, 0x2}, 0x1c, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@empty, r2}}}], 0x28}}], 0x1, 0x0) 08:08:12 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'sit0\x00', 0x0}) sendmmsg$inet6(r0, &(0x7f0000006cc0)=[{{&(0x7f0000000480)={0xa, 0x4e24, 0x0, @remote, 0x2}, 0x1c, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@empty, r2}}}], 0x28}}], 0x1, 0x0) 08:08:12 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000180)=""/208) 08:08:12 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) write$bt_hci(r0, &(0x7f0000004900)={0x1, @le_set_ext_adv_params={{0x2036, 0x19}, {0x0, 0x0, 'j3Q', "b774ab", 0x0, 0x0, 0x0, @fixed}}}, 0x1d) 08:08:12 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x49, &(0x7f0000006340), 0x4) 08:08:12 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'sit0\x00', 0x0}) sendmmsg$inet6(r0, &(0x7f0000006cc0)=[{{&(0x7f0000000480)={0xa, 0x4e24, 0x0, @remote, 0x2}, 0x1c, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@empty, r2}}}], 0x28}}], 0x1, 0x0) 08:08:12 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000100)=[@window={0x3, 0xeab}, @timestamp, @sack_perm, @timestamp, @sack_perm, @sack_perm, @sack_perm, @timestamp], 0x8) 08:08:12 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) write$bt_hci(r0, &(0x7f0000004900)={0x1, @le_set_ext_adv_params={{0x2036, 0x19}, {0x0, 0x0, 'j3Q', "b774ab", 0x0, 0x0, 0x0, @fixed}}}, 0x1d) 08:08:12 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x49, &(0x7f0000006340), 0x4) 08:08:12 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) write$bt_hci(r0, &(0x7f0000004900)={0x1, @le_set_ext_adv_params={{0x2036, 0x19}, {0x0, 0x0, 'j3Q', "b774ab", 0x0, 0x0, 0x0, @fixed}}}, 0x1d) 08:08:12 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) fsetxattr$security_selinux(r0, &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:init_var_run_t:s0\x00', 0x24, 0x0) 08:08:12 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_buf(r0, 0x29, 0x20, &(0x7f0000000080)="816ade021f72f629975e38794f4b6266ce72777b1bf5dfd56855246ed2b58a69", 0x20) [ 103.021772] audit: type=1400 audit(1764230892.547:10): avc: denied { associate } for pid=4270 comm="syz-executor.0" name="sr0" dev="devtmpfs" ino=116 scontext=system_u:object_r:init_runtime_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=filesystem permissive=1 08:08:12 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) write$bt_hci(r0, &(0x7f0000004900)={0x1, @le_set_ext_adv_params={{0x2036, 0x19}, {0x0, 0x0, 'j3Q', "b774ab", 0x0, 0x0, 0x0, @fixed}}}, 0x1d) 08:08:12 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) write$bt_hci(r0, &(0x7f0000004900)={0x1, @le_set_ext_adv_params={{0x2036, 0x19}, {0x0, 0x0, 'j3Q', "b774ab", 0x0, 0x0, 0x0, @fixed}}}, 0x1d) 08:08:12 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_buf(r0, 0x29, 0x20, &(0x7f0000000080)="816ade021f72f629975e38794f4b6266ce72777b1bf5dfd56855246ed2b58a69", 0x20) 08:08:12 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x49, &(0x7f0000006340), 0x4) 08:08:12 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000100)=[@window={0x3, 0xeab}, @timestamp, @sack_perm, @timestamp, @sack_perm, @sack_perm, @sack_perm, @timestamp], 0x8) 08:08:12 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x49, &(0x7f0000006340), 0x4) 08:08:12 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) fsetxattr$security_selinux(r0, &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:init_var_run_t:s0\x00', 0x24, 0x0) 08:08:12 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_buf(r0, 0x29, 0x20, &(0x7f0000000080)="816ade021f72f629975e38794f4b6266ce72777b1bf5dfd56855246ed2b58a69", 0x20) 08:08:12 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000100)=[@window={0x3, 0xeab}, @timestamp, @sack_perm, @timestamp, @sack_perm, @sack_perm, @sack_perm, @timestamp], 0x8) 08:08:12 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) write$bt_hci(r0, &(0x7f0000004900)={0x1, @le_set_ext_adv_params={{0x2036, 0x19}, {0x0, 0x0, 'j3Q', "b774ab", 0x0, 0x0, 0x0, @fixed}}}, 0x1d) 08:08:12 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) fsetxattr$security_selinux(r0, &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:init_var_run_t:s0\x00', 0x24, 0x0) 08:08:12 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) write$bt_hci(r0, &(0x7f0000004900)={0x1, @le_set_ext_adv_params={{0x2036, 0x19}, {0x0, 0x0, 'j3Q', "b774ab", 0x0, 0x0, 0x0, @fixed}}}, 0x1d) 08:08:12 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000100)=[@window={0x3, 0xeab}, @timestamp, @sack_perm, @timestamp, @sack_perm, @sack_perm, @sack_perm, @timestamp], 0x8) 08:08:12 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_buf(r0, 0x29, 0x20, &(0x7f0000000080)="816ade021f72f629975e38794f4b6266ce72777b1bf5dfd56855246ed2b58a69", 0x20) 08:08:12 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000100)=[@window={0x3, 0xeab}, @timestamp, @sack_perm, @timestamp, @sack_perm, @sack_perm, @sack_perm, @timestamp], 0x8) 08:08:12 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000100)=[@window={0x3, 0xeab}, @timestamp, @sack_perm, @timestamp, @sack_perm, @sack_perm, @sack_perm, @timestamp], 0x8) 08:08:12 executing program 6: syz_mount_image$iso9660(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='autofs\x00', 0x0, &(0x7f00000000c0)='gid') 08:08:12 executing program 5: r0 = fork() ptrace(0x10, r0) ptrace$peeksig(0x2, r0, &(0x7f00000002c0)={0x2ff, 0x1, 0x8}, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}, {}, {}]) 08:08:12 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) fsetxattr$security_selinux(r0, &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:init_var_run_t:s0\x00', 0x24, 0x0) [ 103.251231] autofs: Bad value for 'gid' [ 103.251623] autofs: Bad value for 'gid' 08:08:12 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000100)=[@window={0x3, 0xeab}, @timestamp, @sack_perm, @timestamp, @sack_perm, @sack_perm, @sack_perm, @timestamp], 0x8) 08:08:12 executing program 6: syz_mount_image$iso9660(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='autofs\x00', 0x0, &(0x7f00000000c0)='gid') 08:08:12 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) fsetxattr$security_selinux(r0, &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:init_var_run_t:s0\x00', 0x24, 0x0) 08:08:12 executing program 4: syz_mount_image$iso9660(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='autofs\x00', 0x0, &(0x7f00000000c0)='gid') 08:08:12 executing program 1: r0 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)={0x0, "9031f2499de666c238d91a7f02483cda2f84ef5b3f95b9cb48db2e036a376af5342a9e442671c818f9b0686f29ddc1b417ee0fa0115757950cbd8c97cd22f51c"}, 0x48, 0xfffffffffffffffe) r1 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)={0x0, "9031f2499de666c238d91a7f02483cda2f84ef5b3f95b9cb48db2e036a376af5342a9e442671c818f9b0686f29ddc1b417ee0fa0115757950cbd8c97cd22f51c"}, 0x48, 0xfffffffffffffffe) keyctl$link(0x8, r1, r0) 08:08:12 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000100)=[@window={0x3, 0xeab}, @timestamp, @sack_perm, @timestamp, @sack_perm, @sack_perm, @sack_perm, @timestamp], 0x8) [ 103.313844] autofs: Bad value for 'gid' [ 103.314235] autofs: Bad value for 'gid' 08:08:12 executing program 5: r0 = fork() ptrace(0x10, r0) ptrace$peeksig(0x2, r0, &(0x7f00000002c0)={0x2ff, 0x1, 0x8}, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}, {}, {}]) [ 103.335533] autofs: Bad value for 'gid' [ 103.335898] autofs: Bad value for 'gid' 08:08:12 executing program 6: syz_mount_image$iso9660(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='autofs\x00', 0x0, &(0x7f00000000c0)='gid') [ 103.381696] autofs: Bad value for 'gid' [ 103.382176] autofs: Bad value for 'gid' 08:08:12 executing program 4: syz_mount_image$iso9660(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='autofs\x00', 0x0, &(0x7f00000000c0)='gid') 08:08:12 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000100)=[@window={0x3, 0xeab}, @timestamp, @sack_perm, @timestamp, @sack_perm, @sack_perm, @sack_perm, @timestamp], 0x8) 08:08:12 executing program 5: r0 = fork() ptrace(0x10, r0) ptrace$peeksig(0x2, r0, &(0x7f00000002c0)={0x2ff, 0x1, 0x8}, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}, {}, {}]) 08:08:12 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) fsetxattr$security_selinux(r0, &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:init_var_run_t:s0\x00', 0x24, 0x0) 08:08:12 executing program 1: r0 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)={0x0, "9031f2499de666c238d91a7f02483cda2f84ef5b3f95b9cb48db2e036a376af5342a9e442671c818f9b0686f29ddc1b417ee0fa0115757950cbd8c97cd22f51c"}, 0x48, 0xfffffffffffffffe) r1 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)={0x0, "9031f2499de666c238d91a7f02483cda2f84ef5b3f95b9cb48db2e036a376af5342a9e442671c818f9b0686f29ddc1b417ee0fa0115757950cbd8c97cd22f51c"}, 0x48, 0xfffffffffffffffe) keyctl$link(0x8, r1, r0) 08:08:12 executing program 6: syz_mount_image$iso9660(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='autofs\x00', 0x0, &(0x7f00000000c0)='gid') 08:08:12 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) fsetxattr$security_selinux(r0, &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:init_var_run_t:s0\x00', 0x24, 0x0) 08:08:12 executing program 7: r0 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)={0x0, "9031f2499de666c238d91a7f02483cda2f84ef5b3f95b9cb48db2e036a376af5342a9e442671c818f9b0686f29ddc1b417ee0fa0115757950cbd8c97cd22f51c"}, 0x48, 0xfffffffffffffffe) r1 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)={0x0, "9031f2499de666c238d91a7f02483cda2f84ef5b3f95b9cb48db2e036a376af5342a9e442671c818f9b0686f29ddc1b417ee0fa0115757950cbd8c97cd22f51c"}, 0x48, 0xfffffffffffffffe) keyctl$link(0x8, r1, r0) [ 103.440108] autofs: Bad value for 'gid' [ 103.440504] autofs: Bad value for 'gid' [ 103.446960] autofs: Bad value for 'gid' [ 103.447320] autofs: Bad value for 'gid' 08:08:12 executing program 3: r0 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)={0x0, "9031f2499de666c238d91a7f02483cda2f84ef5b3f95b9cb48db2e036a376af5342a9e442671c818f9b0686f29ddc1b417ee0fa0115757950cbd8c97cd22f51c"}, 0x48, 0xfffffffffffffffe) r1 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)={0x0, "9031f2499de666c238d91a7f02483cda2f84ef5b3f95b9cb48db2e036a376af5342a9e442671c818f9b0686f29ddc1b417ee0fa0115757950cbd8c97cd22f51c"}, 0x48, 0xfffffffffffffffe) keyctl$link(0x8, r1, r0) 08:08:13 executing program 4: syz_mount_image$iso9660(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='autofs\x00', 0x0, &(0x7f00000000c0)='gid') 08:08:13 executing program 1: r0 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)={0x0, "9031f2499de666c238d91a7f02483cda2f84ef5b3f95b9cb48db2e036a376af5342a9e442671c818f9b0686f29ddc1b417ee0fa0115757950cbd8c97cd22f51c"}, 0x48, 0xfffffffffffffffe) r1 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)={0x0, "9031f2499de666c238d91a7f02483cda2f84ef5b3f95b9cb48db2e036a376af5342a9e442671c818f9b0686f29ddc1b417ee0fa0115757950cbd8c97cd22f51c"}, 0x48, 0xfffffffffffffffe) keyctl$link(0x8, r1, r0) 08:08:13 executing program 6: r0 = fork() ptrace(0x10, r0) ptrace$peeksig(0x2, r0, &(0x7f00000002c0)={0x2ff, 0x1, 0x8}, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}, {}, {}]) 08:08:13 executing program 0: r0 = fork() ptrace(0x10, r0) ptrace$peeksig(0x2, r0, &(0x7f00000002c0)={0x2ff, 0x1, 0x8}, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}, {}, {}]) [ 103.524235] autofs: Bad value for 'gid' [ 103.524614] autofs: Bad value for 'gid' 08:08:13 executing program 7: r0 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)={0x0, "9031f2499de666c238d91a7f02483cda2f84ef5b3f95b9cb48db2e036a376af5342a9e442671c818f9b0686f29ddc1b417ee0fa0115757950cbd8c97cd22f51c"}, 0x48, 0xfffffffffffffffe) r1 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)={0x0, "9031f2499de666c238d91a7f02483cda2f84ef5b3f95b9cb48db2e036a376af5342a9e442671c818f9b0686f29ddc1b417ee0fa0115757950cbd8c97cd22f51c"}, 0x48, 0xfffffffffffffffe) keyctl$link(0x8, r1, r0) 08:08:13 executing program 1: r0 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)={0x0, "9031f2499de666c238d91a7f02483cda2f84ef5b3f95b9cb48db2e036a376af5342a9e442671c818f9b0686f29ddc1b417ee0fa0115757950cbd8c97cd22f51c"}, 0x48, 0xfffffffffffffffe) r1 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)={0x0, "9031f2499de666c238d91a7f02483cda2f84ef5b3f95b9cb48db2e036a376af5342a9e442671c818f9b0686f29ddc1b417ee0fa0115757950cbd8c97cd22f51c"}, 0x48, 0xfffffffffffffffe) keyctl$link(0x8, r1, r0) 08:08:13 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8955, &(0x7f0000000100)={{0x2, 0x0, @remote}, {0x0, @multicast}, 0x8, {0x2, 0x0, @remote}}) 08:08:13 executing program 6: r0 = fork() ptrace(0x10, r0) ptrace$peeksig(0x2, r0, &(0x7f00000002c0)={0x2ff, 0x1, 0x8}, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}, {}, {}]) 08:08:13 executing program 5: r0 = fork() ptrace(0x10, r0) ptrace$peeksig(0x2, r0, &(0x7f00000002c0)={0x2ff, 0x1, 0x8}, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}, {}, {}]) 08:08:13 executing program 7: r0 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)={0x0, "9031f2499de666c238d91a7f02483cda2f84ef5b3f95b9cb48db2e036a376af5342a9e442671c818f9b0686f29ddc1b417ee0fa0115757950cbd8c97cd22f51c"}, 0x48, 0xfffffffffffffffe) r1 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)={0x0, "9031f2499de666c238d91a7f02483cda2f84ef5b3f95b9cb48db2e036a376af5342a9e442671c818f9b0686f29ddc1b417ee0fa0115757950cbd8c97cd22f51c"}, 0x48, 0xfffffffffffffffe) keyctl$link(0x8, r1, r0) 08:08:13 executing program 3: r0 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)={0x0, "9031f2499de666c238d91a7f02483cda2f84ef5b3f95b9cb48db2e036a376af5342a9e442671c818f9b0686f29ddc1b417ee0fa0115757950cbd8c97cd22f51c"}, 0x48, 0xfffffffffffffffe) r1 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)={0x0, "9031f2499de666c238d91a7f02483cda2f84ef5b3f95b9cb48db2e036a376af5342a9e442671c818f9b0686f29ddc1b417ee0fa0115757950cbd8c97cd22f51c"}, 0x48, 0xfffffffffffffffe) keyctl$link(0x8, r1, r0) 08:08:13 executing program 6: r0 = fork() ptrace(0x10, r0) ptrace$peeksig(0x2, r0, &(0x7f00000002c0)={0x2ff, 0x1, 0x8}, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}, {}, {}]) 08:08:13 executing program 0: r0 = fork() ptrace(0x10, r0) ptrace$peeksig(0x2, r0, &(0x7f00000002c0)={0x2ff, 0x1, 0x8}, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}, {}, {}]) 08:08:13 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8955, &(0x7f0000000100)={{0x2, 0x0, @remote}, {0x0, @multicast}, 0x8, {0x2, 0x0, @remote}}) 08:08:13 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8955, &(0x7f0000000100)={{0x2, 0x0, @remote}, {0x0, @multicast}, 0x8, {0x2, 0x0, @remote}}) 08:08:13 executing program 4: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x40032, 0xffffffffffffffff, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)) 08:08:13 executing program 1: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/pid\x00') ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x8004b709) 08:08:13 executing program 7: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x59, 0x9f, 0xe, 0x0, 0xc45, 0x624c, 0x4bd2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xbe, 0xee, 0x78}}]}}]}}, 0x0) [ 103.725373] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.730410] misc raw-gadget: fail, usb_gadget_register_driver returned -16 08:08:13 executing program 3: r0 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)={0x0, "9031f2499de666c238d91a7f02483cda2f84ef5b3f95b9cb48db2e036a376af5342a9e442671c818f9b0686f29ddc1b417ee0fa0115757950cbd8c97cd22f51c"}, 0x48, 0xfffffffffffffffe) r1 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)={0x0, "9031f2499de666c238d91a7f02483cda2f84ef5b3f95b9cb48db2e036a376af5342a9e442671c818f9b0686f29ddc1b417ee0fa0115757950cbd8c97cd22f51c"}, 0x48, 0xfffffffffffffffe) keyctl$link(0x8, r1, r0) 08:08:13 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8955, &(0x7f0000000100)={{0x2, 0x0, @remote}, {0x0, @multicast}, 0x8, {0x2, 0x0, @remote}}) [ 104.237105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.238032] misc raw-gadget: fail, usb_gadget_register_driver returned -16 08:08:13 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8955, &(0x7f0000000100)={{0x2, 0x0, @remote}, {0x0, @multicast}, 0x8, {0x2, 0x0, @remote}}) 08:08:13 executing program 1: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/pid\x00') ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x8004b709) 08:08:13 executing program 6: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/pid\x00') ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x8004b709) 08:08:13 executing program 0: r0 = fork() ptrace(0x10, r0) ptrace$peeksig(0x2, r0, &(0x7f00000002c0)={0x2ff, 0x1, 0x8}, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}, {}, {}]) 08:08:13 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000000)=0x7ff, 0x4) 08:08:13 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8955, &(0x7f0000000100)={{0x2, 0x0, @remote}, {0x0, @multicast}, 0x8, {0x2, 0x0, @remote}}) 08:08:13 executing program 7: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x59, 0x9f, 0xe, 0x0, 0xc45, 0x624c, 0x4bd2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xbe, 0xee, 0x78}}]}}]}}, 0x0) 08:08:13 executing program 4: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x40032, 0xffffffffffffffff, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)) [ 104.289900] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.301289] misc raw-gadget: fail, usb_gadget_register_driver returned -16 08:08:13 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000000)=0x7ff, 0x4) 08:08:13 executing program 4: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x40032, 0xffffffffffffffff, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)) 08:08:13 executing program 6: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/pid\x00') ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x8004b709) 08:08:13 executing program 1: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/pid\x00') ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x8004b709) 08:08:13 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000000)=0x7ff, 0x4) 08:08:13 executing program 4: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x40032, 0xffffffffffffffff, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)) 08:08:13 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8955, &(0x7f0000000100)={{0x2, 0x0, @remote}, {0x0, @multicast}, 0x8, {0x2, 0x0, @remote}}) 08:08:13 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000000)=0x7ff, 0x4) 08:08:13 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000000)=0x7ff, 0x4) 08:08:13 executing program 4: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x40032, 0xffffffffffffffff, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)) 08:08:14 executing program 1: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/pid\x00') ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x8004b709) 08:08:14 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) fgetxattr(r0, &(0x7f0000000180)=@known='security.selinux\x00', &(0x7f0000000140)=""/10, 0xa) 08:08:14 executing program 6: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/pid\x00') ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x8004b709) 08:08:14 executing program 4: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x40032, 0xffffffffffffffff, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)) 08:08:14 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000000)=0x7ff, 0x4) 08:08:14 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000000)=0x7ff, 0x4) 08:08:14 executing program 7: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x59, 0x9f, 0xe, 0x0, 0xc45, 0x624c, 0x4bd2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xbe, 0xee, 0x78}}]}}]}}, 0x0) 08:08:14 executing program 5: r0 = syz_mount_image$tmpfs(&(0x7f0000000cc0), &(0x7f0000000d00)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)=ANY=[]) r1 = inotify_init() r2 = inotify_add_watch(r1, &(0x7f00000001c0)='./file0\x00', 0xd400080b) inotify_rm_watch(r1, r2) mknodat$loop(r0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) unlink(&(0x7f0000000080)='./file0/file0\x00') [ 104.857288] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.861663] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.862815] audit: type=1400 audit(1764230894.388:11): avc: denied { watch_reads } for pid=4457 comm="syz-executor.5" path="/syzkaller-testdir604817437/syzkaller.nrAleg/36/file0" dev="tmpfs" ino=1 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=dir permissive=1 08:08:14 executing program 4: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x40032, 0xffffffffffffffff, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)) 08:08:14 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) fgetxattr(r0, &(0x7f0000000180)=@known='security.selinux\x00', &(0x7f0000000140)=""/10, 0xa) 08:08:14 executing program 5: r0 = syz_mount_image$tmpfs(&(0x7f0000000cc0), &(0x7f0000000d00)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)=ANY=[]) r1 = inotify_init() r2 = inotify_add_watch(r1, &(0x7f00000001c0)='./file0\x00', 0xd400080b) inotify_rm_watch(r1, r2) mknodat$loop(r0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) unlink(&(0x7f0000000080)='./file0/file0\x00') 08:08:14 executing program 6: r0 = syz_mount_image$tmpfs(&(0x7f0000000cc0), &(0x7f0000000d00)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)=ANY=[]) r1 = inotify_init() r2 = inotify_add_watch(r1, &(0x7f00000001c0)='./file0\x00', 0xd400080b) inotify_rm_watch(r1, r2) mknodat$loop(r0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) unlink(&(0x7f0000000080)='./file0/file0\x00') 08:08:14 executing program 1: r0 = syz_mount_image$tmpfs(&(0x7f0000000cc0), &(0x7f0000000d00)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)=ANY=[]) r1 = inotify_init() r2 = inotify_add_watch(r1, &(0x7f00000001c0)='./file0\x00', 0xd400080b) inotify_rm_watch(r1, r2) mknodat$loop(r0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) unlink(&(0x7f0000000080)='./file0/file0\x00') 08:08:14 executing program 3: r0 = syz_mount_image$tmpfs(&(0x7f0000000cc0), &(0x7f0000000d00)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)=ANY=[]) r1 = inotify_init() r2 = inotify_add_watch(r1, &(0x7f00000001c0)='./file0\x00', 0xd400080b) inotify_rm_watch(r1, r2) mknodat$loop(r0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) unlink(&(0x7f0000000080)='./file0/file0\x00') 08:08:14 executing program 2: r0 = syz_mount_image$tmpfs(&(0x7f0000000cc0), &(0x7f0000000d00)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)=ANY=[]) r1 = inotify_init() r2 = inotify_add_watch(r1, &(0x7f00000001c0)='./file0\x00', 0xd400080b) inotify_rm_watch(r1, r2) mknodat$loop(r0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) unlink(&(0x7f0000000080)='./file0/file0\x00') 08:08:14 executing program 5: r0 = syz_mount_image$tmpfs(&(0x7f0000000cc0), &(0x7f0000000d00)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)=ANY=[]) r1 = inotify_init() r2 = inotify_add_watch(r1, &(0x7f00000001c0)='./file0\x00', 0xd400080b) inotify_rm_watch(r1, r2) mknodat$loop(r0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) unlink(&(0x7f0000000080)='./file0/file0\x00') 08:08:14 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) fgetxattr(r0, &(0x7f0000000180)=@known='security.selinux\x00', &(0x7f0000000140)=""/10, 0xa) 08:08:14 executing program 3: r0 = syz_mount_image$tmpfs(&(0x7f0000000cc0), &(0x7f0000000d00)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)=ANY=[]) r1 = inotify_init() r2 = inotify_add_watch(r1, &(0x7f00000001c0)='./file0\x00', 0xd400080b) inotify_rm_watch(r1, r2) mknodat$loop(r0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) unlink(&(0x7f0000000080)='./file0/file0\x00') 08:08:14 executing program 5: r0 = syz_mount_image$tmpfs(&(0x7f0000000cc0), &(0x7f0000000d00)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)=ANY=[]) r1 = inotify_init() r2 = inotify_add_watch(r1, &(0x7f00000001c0)='./file0\x00', 0xd400080b) inotify_rm_watch(r1, r2) mknodat$loop(r0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) unlink(&(0x7f0000000080)='./file0/file0\x00') 08:08:14 executing program 6: r0 = syz_mount_image$tmpfs(&(0x7f0000000cc0), &(0x7f0000000d00)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)=ANY=[]) r1 = inotify_init() r2 = inotify_add_watch(r1, &(0x7f00000001c0)='./file0\x00', 0xd400080b) inotify_rm_watch(r1, r2) mknodat$loop(r0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) unlink(&(0x7f0000000080)='./file0/file0\x00') 08:08:14 executing program 1: r0 = syz_mount_image$tmpfs(&(0x7f0000000cc0), &(0x7f0000000d00)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)=ANY=[]) r1 = inotify_init() r2 = inotify_add_watch(r1, &(0x7f00000001c0)='./file0\x00', 0xd400080b) inotify_rm_watch(r1, r2) mknodat$loop(r0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) unlink(&(0x7f0000000080)='./file0/file0\x00') 08:08:14 executing program 2: r0 = syz_mount_image$tmpfs(&(0x7f0000000cc0), &(0x7f0000000d00)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)=ANY=[]) r1 = inotify_init() r2 = inotify_add_watch(r1, &(0x7f00000001c0)='./file0\x00', 0xd400080b) inotify_rm_watch(r1, r2) mknodat$loop(r0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) unlink(&(0x7f0000000080)='./file0/file0\x00') 08:08:14 executing program 4: r0 = syz_mount_image$tmpfs(&(0x7f0000000cc0), &(0x7f0000000d00)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)=ANY=[]) r1 = inotify_init() r2 = inotify_add_watch(r1, &(0x7f00000001c0)='./file0\x00', 0xd400080b) inotify_rm_watch(r1, r2) mknodat$loop(r0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) unlink(&(0x7f0000000080)='./file0/file0\x00') 08:08:14 executing program 7: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x59, 0x9f, 0xe, 0x0, 0xc45, 0x624c, 0x4bd2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xbe, 0xee, 0x78}}]}}]}}, 0x0) 08:08:14 executing program 2: r0 = syz_mount_image$tmpfs(&(0x7f0000000cc0), &(0x7f0000000d00)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)=ANY=[]) r1 = inotify_init() r2 = inotify_add_watch(r1, &(0x7f00000001c0)='./file0\x00', 0xd400080b) inotify_rm_watch(r1, r2) mknodat$loop(r0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) unlink(&(0x7f0000000080)='./file0/file0\x00') 08:08:14 executing program 3: r0 = syz_mount_image$tmpfs(&(0x7f0000000cc0), &(0x7f0000000d00)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)=ANY=[]) r1 = inotify_init() r2 = inotify_add_watch(r1, &(0x7f00000001c0)='./file0\x00', 0xd400080b) inotify_rm_watch(r1, r2) mknodat$loop(r0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) unlink(&(0x7f0000000080)='./file0/file0\x00') [ 105.456843] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.464172] misc raw-gadget: fail, usb_gadget_register_driver returned -16 08:08:15 executing program 6: r0 = syz_mount_image$tmpfs(&(0x7f0000000cc0), &(0x7f0000000d00)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)=ANY=[]) r1 = inotify_init() r2 = inotify_add_watch(r1, &(0x7f00000001c0)='./file0\x00', 0xd400080b) inotify_rm_watch(r1, r2) mknodat$loop(r0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) unlink(&(0x7f0000000080)='./file0/file0\x00') 08:08:15 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) fgetxattr(r0, &(0x7f0000000180)=@known='security.selinux\x00', &(0x7f0000000140)=""/10, 0xa) 08:08:15 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[{@mpol={'mpol', 0x3d, {'bind', '', @val={0x3a, [0x30, 0x2c, 0x30]}}}}]}) 08:08:15 executing program 4: r0 = syz_mount_image$tmpfs(&(0x7f0000000cc0), &(0x7f0000000d00)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)=ANY=[]) r1 = inotify_init() r2 = inotify_add_watch(r1, &(0x7f00000001c0)='./file0\x00', 0xd400080b) inotify_rm_watch(r1, r2) mknodat$loop(r0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) unlink(&(0x7f0000000080)='./file0/file0\x00') 08:08:15 executing program 1: r0 = syz_mount_image$tmpfs(&(0x7f0000000cc0), &(0x7f0000000d00)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)=ANY=[]) r1 = inotify_init() r2 = inotify_add_watch(r1, &(0x7f00000001c0)='./file0\x00', 0xd400080b) inotify_rm_watch(r1, r2) mknodat$loop(r0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) unlink(&(0x7f0000000080)='./file0/file0\x00') 08:08:15 executing program 5: getrusage(0x981b350a4b802194, 0x0) 08:08:15 executing program 5: getrusage(0x981b350a4b802194, 0x0) 08:08:15 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[{@mpol={'mpol', 0x3d, {'bind', '', @val={0x3a, [0x30, 0x2c, 0x30]}}}}]}) 08:08:15 executing program 0: symlinkat(0x0, 0xffffffffffffffff, 0x0) 08:08:15 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x7, 0x0, &(0x7f0000000040)) 08:08:15 executing program 4: r0 = syz_mount_image$tmpfs(&(0x7f0000000cc0), &(0x7f0000000d00)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)=ANY=[]) r1 = inotify_init() r2 = inotify_add_watch(r1, &(0x7f00000001c0)='./file0\x00', 0xd400080b) inotify_rm_watch(r1, r2) mknodat$loop(r0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) unlink(&(0x7f0000000080)='./file0/file0\x00') 08:08:15 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="020000000000000085a7", @ANYRES16]) [ 106.023016] program syz-executor.1 is using a deprecated SCSI ioctl, please convert it to SG_IO 08:08:15 executing program 5: getrusage(0x981b350a4b802194, 0x0) 08:08:15 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="020000000000000085a7", @ANYRES16]) [ 106.085617] program syz-executor.1 is using a deprecated SCSI ioctl, please convert it to SG_IO 08:08:15 executing program 5: getrusage(0x981b350a4b802194, 0x0) 08:08:15 executing program 0: symlinkat(0x0, 0xffffffffffffffff, 0x0) 08:08:15 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[{@mpol={'mpol', 0x3d, {'bind', '', @val={0x3a, [0x30, 0x2c, 0x30]}}}}]}) 08:08:15 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x7, 0x0, &(0x7f0000000040)) 08:08:15 executing program 0: symlinkat(0x0, 0xffffffffffffffff, 0x0) 08:08:15 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="020000000000000085a7", @ANYRES16]) 08:08:15 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[{@mpol={'mpol', 0x3d, {'bind', '', @val={0x3a, [0x30, 0x2c, 0x30]}}}}]}) 08:08:15 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x7, 0x0, &(0x7f0000000040)) [ 106.207022] program syz-executor.1 is using a deprecated SCSI ioctl, please convert it to SG_IO 08:08:15 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x7, 0x0, &(0x7f0000000040)) 08:08:15 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="020000000000000085a7", @ANYRES16]) 08:08:15 executing program 0: symlinkat(0x0, 0xffffffffffffffff, 0x0) [ 106.260682] program syz-executor.1 is using a deprecated SCSI ioctl, please convert it to SG_IO 08:08:15 executing program 7: openat2(0xffffffffffffff9c, 0x0, &(0x7f00000000c0)={0x651203}, 0x18) 08:08:15 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f0000000140)=0x922, 0x4) 08:08:15 executing program 4: r0 = memfd_create(&(0x7f0000000180)='($\x18\xe5=\x11c\x86g\x02\x00\x00\x00?\x00\x00\x00\a\x00\x00\x00S\xc8\xe8*\xcc\xff\x7f\xcb\x9e@G\x96\x1e>\xdb\xa1J\xab\xd0\xb7.k^mq\xc2\xc4Q{\x14J\xb3i\x82\xa18\xf6\x04\x7f\x14RT?\xd2\x01J\xf5E\xc1\xf8\x1f\x80(\x9b?\xb6\xac_l\x17\xd1\f \xbf\xb8\xf8\xfc\xb5\xf8\xf4\x0e\xc3\xd6\xdf\xa3 \x00\x00\x00\n>\xdfm\f\xd5\xc4?\x04\x00\x00\x00\x00\x00\x00\x00\xd6j\xe7\x00-Y\x99\x03\xdf\xcc(\xa7t\xf4)\xf5\xf9s8@U\xca$Jd\xf3G\xcd\xfdAno\xc7\b\x92\xa7\x18\xf09@\x10\xb3\xe4\xdd\x14\xbfoO', 0x5) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x7fffffffffe00000}) 08:08:15 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000200)=""/132, 0x84}], 0x1000000000000092, &(0x7f0000000680)=[{&(0x7f0000000800)=""/102400, 0x19000}], 0x1, 0x0) 08:08:15 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f0000000140)=0x922, 0x4) 08:08:15 executing program 7: openat2(0xffffffffffffff9c, 0x0, &(0x7f00000000c0)={0x651203}, 0x18) VM DIAGNOSIS: 08:08:06 Registers: info registers vcpu 0 RAX=0000000000000004 RBX=0000000000000001 RCX=ffffffff84c355be RDX=0000000000000001 RSI=ffffffff84c355cc RDI=ffffffff85527661 RBP=ffff88801697ee00 RSP=ffff88801c4cf5f8 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=0000000000000001 R13=ffff88801697ee08 R14=dffffc0000000000 R15=ffff88801c4cf6f8 RIP=ffffffff84c355e6 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e537a000 00000000 00000000 LDT=0000 fffffe2500000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f4214c951f0 CR3=000000001e7b0000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=6461657268747062696c2f756e672d78 XMM02=00302e6f732e6461657268747062696c XMM03=2f756e672d78756e696c2d34365f3638 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff82955de0 RDI=ffffffff88989ac0 RBP=ffffffff88989a80 RSP=ffff888016f47818 R8 =0000000000000000 R9 =ffffed1001701046 R10=00000000000fe503 R11=725f746e69727020 R12=0000000000000823 R13=0000000000000020 R14=fffffbfff11313aa R15=dffffc0000000000 RIP=ffffffff82955e35 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 000055558c43a400 00000000 00000000 GS =0000 ffff8880e547a000 00000000 00000000 LDT=0000 fffffe4f00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f016b1e8f64 CR3=000000000c520000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=000000000000ff000000000000000000 XMM01=00000000000001000000000000000000 XMM02=7463656a6e695f31313230385f7a7973 XMM03=00007f8172b3f7c800007f8172b3f7c0 XMM04=ffffffff0000ff00000000ff00000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000