Warning: Permanently added '[localhost]:45579' (ECDSA) to the list of known hosts. 2025/09/01 10:16:12 fuzzer started 2025/09/01 10:16:12 dialing manager at localhost:35473 syzkaller login: [ 51.558449] cgroup: Unknown subsys name 'net' [ 51.635303] cgroup: Unknown subsys name 'cpuset' [ 51.651617] cgroup: Unknown subsys name 'rlimit' 2025/09/01 10:16:23 syscalls: 2214 2025/09/01 10:16:23 code coverage: enabled 2025/09/01 10:16:23 comparison tracing: enabled 2025/09/01 10:16:23 extra coverage: enabled 2025/09/01 10:16:23 setuid sandbox: enabled 2025/09/01 10:16:23 namespace sandbox: enabled 2025/09/01 10:16:23 Android sandbox: enabled 2025/09/01 10:16:23 fault injection: enabled 2025/09/01 10:16:23 leak checking: enabled 2025/09/01 10:16:23 net packet injection: enabled 2025/09/01 10:16:23 net device setup: enabled 2025/09/01 10:16:23 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/09/01 10:16:23 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/09/01 10:16:23 USB emulation: enabled 2025/09/01 10:16:23 hci packet injection: enabled 2025/09/01 10:16:23 wifi device emulation: enabled 2025/09/01 10:16:23 802.15.4 emulation: enabled 2025/09/01 10:16:23 fetching corpus: 0, signal 0/2000 (executing program) 2025/09/01 10:16:23 fetching corpus: 50, signal 21629/25180 (executing program) 2025/09/01 10:16:23 fetching corpus: 100, signal 29625/34645 (executing program) 2025/09/01 10:16:23 fetching corpus: 150, signal 37187/43479 (executing program) 2025/09/01 10:16:23 fetching corpus: 200, signal 43824/51320 (executing program) 2025/09/01 10:16:23 fetching corpus: 250, signal 53072/61439 (executing program) 2025/09/01 10:16:23 fetching corpus: 300, signal 57459/66826 (executing program) 2025/09/01 10:16:23 fetching corpus: 350, signal 60835/71250 (executing program) 2025/09/01 10:16:23 fetching corpus: 400, signal 66762/77836 (executing program) 2025/09/01 10:16:23 fetching corpus: 450, signal 70179/82055 (executing program) 2025/09/01 10:16:24 fetching corpus: 500, signal 73455/86089 (executing program) 2025/09/01 10:16:24 fetching corpus: 550, signal 75967/89385 (executing program) 2025/09/01 10:16:24 fetching corpus: 600, signal 79331/93352 (executing program) 2025/09/01 10:16:24 fetching corpus: 650, signal 83309/97755 (executing program) 2025/09/01 10:16:24 fetching corpus: 700, signal 85543/100625 (executing program) 2025/09/01 10:16:24 fetching corpus: 750, signal 87343/103145 (executing program) 2025/09/01 10:16:24 fetching corpus: 800, signal 90914/107047 (executing program) 2025/09/01 10:16:24 fetching corpus: 850, signal 92486/109225 (executing program) 2025/09/01 10:16:24 fetching corpus: 900, signal 94064/111435 (executing program) 2025/09/01 10:16:24 fetching corpus: 950, signal 96093/113876 (executing program) 2025/09/01 10:16:25 fetching corpus: 1000, signal 97555/115849 (executing program) 2025/09/01 10:16:25 fetching corpus: 1050, signal 99478/118125 (executing program) 2025/09/01 10:16:25 fetching corpus: 1100, signal 100434/119643 (executing program) 2025/09/01 10:16:25 fetching corpus: 1150, signal 102616/121992 (executing program) 2025/09/01 10:16:25 fetching corpus: 1200, signal 103624/123505 (executing program) 2025/09/01 10:16:25 fetching corpus: 1250, signal 104695/125030 (executing program) 2025/09/01 10:16:25 fetching corpus: 1300, signal 106171/126865 (executing program) 2025/09/01 10:16:25 fetching corpus: 1350, signal 107917/128840 (executing program) 2025/09/01 10:16:25 fetching corpus: 1400, signal 109054/130291 (executing program) 2025/09/01 10:16:25 fetching corpus: 1450, signal 109793/131458 (executing program) 2025/09/01 10:16:26 fetching corpus: 1500, signal 110898/132867 (executing program) 2025/09/01 10:16:26 fetching corpus: 1550, signal 111579/133995 (executing program) 2025/09/01 10:16:26 fetching corpus: 1600, signal 112757/135411 (executing program) 2025/09/01 10:16:26 fetching corpus: 1650, signal 113483/136439 (executing program) 2025/09/01 10:16:26 fetching corpus: 1700, signal 114913/137957 (executing program) 2025/09/01 10:16:26 fetching corpus: 1750, signal 115970/139246 (executing program) 2025/09/01 10:16:26 fetching corpus: 1800, signal 117061/140508 (executing program) 2025/09/01 10:16:26 fetching corpus: 1850, signal 118192/141792 (executing program) 2025/09/01 10:16:26 fetching corpus: 1900, signal 119363/143079 (executing program) 2025/09/01 10:16:26 fetching corpus: 1950, signal 120702/144376 (executing program) 2025/09/01 10:16:27 fetching corpus: 2000, signal 121722/145513 (executing program) 2025/09/01 10:16:27 fetching corpus: 2050, signal 122668/146544 (executing program) 2025/09/01 10:16:27 fetching corpus: 2100, signal 123503/147544 (executing program) 2025/09/01 10:16:27 fetching corpus: 2150, signal 124261/148479 (executing program) 2025/09/01 10:16:27 fetching corpus: 2200, signal 125208/149499 (executing program) 2025/09/01 10:16:27 fetching corpus: 2250, signal 126297/150524 (executing program) 2025/09/01 10:16:27 fetching corpus: 2300, signal 126860/151284 (executing program) 2025/09/01 10:16:27 fetching corpus: 2350, signal 127576/152077 (executing program) 2025/09/01 10:16:27 fetching corpus: 2400, signal 128185/152803 (executing program) 2025/09/01 10:16:27 fetching corpus: 2450, signal 129367/153759 (executing program) 2025/09/01 10:16:27 fetching corpus: 2500, signal 130641/154783 (executing program) 2025/09/01 10:16:28 fetching corpus: 2550, signal 131927/155734 (executing program) 2025/09/01 10:16:28 fetching corpus: 2600, signal 133105/156637 (executing program) 2025/09/01 10:16:28 fetching corpus: 2650, signal 133620/157311 (executing program) 2025/09/01 10:16:28 fetching corpus: 2700, signal 134225/157942 (executing program) 2025/09/01 10:16:28 fetching corpus: 2750, signal 134944/158635 (executing program) 2025/09/01 10:16:28 fetching corpus: 2800, signal 136255/159510 (executing program) 2025/09/01 10:16:28 fetching corpus: 2850, signal 136912/160178 (executing program) 2025/09/01 10:16:28 fetching corpus: 2900, signal 138104/160976 (executing program) 2025/09/01 10:16:28 fetching corpus: 2950, signal 139107/161710 (executing program) 2025/09/01 10:16:28 fetching corpus: 3000, signal 139747/162257 (executing program) 2025/09/01 10:16:29 fetching corpus: 3050, signal 140461/162830 (executing program) 2025/09/01 10:16:29 fetching corpus: 3100, signal 141193/163397 (executing program) 2025/09/01 10:16:29 fetching corpus: 3150, signal 141875/163928 (executing program) 2025/09/01 10:16:29 fetching corpus: 3200, signal 142443/164399 (executing program) 2025/09/01 10:16:29 fetching corpus: 3250, signal 143114/164902 (executing program) 2025/09/01 10:16:29 fetching corpus: 3300, signal 143737/165369 (executing program) 2025/09/01 10:16:29 fetching corpus: 3350, signal 144461/165858 (executing program) 2025/09/01 10:16:29 fetching corpus: 3400, signal 145271/166321 (executing program) 2025/09/01 10:16:29 fetching corpus: 3450, signal 145778/166751 (executing program) 2025/09/01 10:16:30 fetching corpus: 3500, signal 146334/167182 (executing program) 2025/09/01 10:16:30 fetching corpus: 3550, signal 146822/167540 (executing program) 2025/09/01 10:16:30 fetching corpus: 3600, signal 147718/167925 (executing program) 2025/09/01 10:16:30 fetching corpus: 3650, signal 148363/168324 (executing program) 2025/09/01 10:16:30 fetching corpus: 3700, signal 148933/168669 (executing program) 2025/09/01 10:16:30 fetching corpus: 3750, signal 149298/168993 (executing program) 2025/09/01 10:16:30 fetching corpus: 3800, signal 149827/169309 (executing program) 2025/09/01 10:16:30 fetching corpus: 3850, signal 150191/169592 (executing program) 2025/09/01 10:16:30 fetching corpus: 3900, signal 150611/169887 (executing program) 2025/09/01 10:16:31 fetching corpus: 3950, signal 151076/170168 (executing program) 2025/09/01 10:16:31 fetching corpus: 4000, signal 151553/170439 (executing program) 2025/09/01 10:16:31 fetching corpus: 4050, signal 151923/170709 (executing program) 2025/09/01 10:16:31 fetching corpus: 4100, signal 153737/170962 (executing program) 2025/09/01 10:16:31 fetching corpus: 4150, signal 154283/171173 (executing program) 2025/09/01 10:16:31 fetching corpus: 4200, signal 154636/171209 (executing program) 2025/09/01 10:16:31 fetching corpus: 4250, signal 155204/171219 (executing program) 2025/09/01 10:16:31 fetching corpus: 4300, signal 155606/171262 (executing program) 2025/09/01 10:16:31 fetching corpus: 4350, signal 156278/171272 (executing program) 2025/09/01 10:16:31 fetching corpus: 4400, signal 156748/171278 (executing program) 2025/09/01 10:16:31 fetching corpus: 4450, signal 157217/171279 (executing program) 2025/09/01 10:16:32 fetching corpus: 4500, signal 157569/171302 (executing program) 2025/09/01 10:16:32 fetching corpus: 4550, signal 158015/171318 (executing program) 2025/09/01 10:16:32 fetching corpus: 4600, signal 158482/171328 (executing program) 2025/09/01 10:16:32 fetching corpus: 4650, signal 158947/171362 (executing program) 2025/09/01 10:16:32 fetching corpus: 4700, signal 159386/171366 (executing program) 2025/09/01 10:16:32 fetching corpus: 4750, signal 159726/171369 (executing program) 2025/09/01 10:16:32 fetching corpus: 4800, signal 160138/171378 (executing program) 2025/09/01 10:16:32 fetching corpus: 4850, signal 160719/171382 (executing program) 2025/09/01 10:16:32 fetching corpus: 4900, signal 161068/171390 (executing program) 2025/09/01 10:16:32 fetching corpus: 4950, signal 161479/171397 (executing program) 2025/09/01 10:16:32 fetching corpus: 5000, signal 161847/171397 (executing program) 2025/09/01 10:16:32 fetching corpus: 5050, signal 162130/171404 (executing program) 2025/09/01 10:16:33 fetching corpus: 5100, signal 162817/171411 (executing program) 2025/09/01 10:16:33 fetching corpus: 5150, signal 163161/171424 (executing program) 2025/09/01 10:16:33 fetching corpus: 5200, signal 163683/171430 (executing program) 2025/09/01 10:16:33 fetching corpus: 5250, signal 164143/171436 (executing program) 2025/09/01 10:16:33 fetching corpus: 5300, signal 164613/171446 (executing program) 2025/09/01 10:16:33 fetching corpus: 5350, signal 164992/171460 (executing program) 2025/09/01 10:16:33 fetching corpus: 5400, signal 165193/171462 (executing program) 2025/09/01 10:16:33 fetching corpus: 5450, signal 165661/171466 (executing program) 2025/09/01 10:16:33 fetching corpus: 5500, signal 166079/171478 (executing program) 2025/09/01 10:16:33 fetching corpus: 5550, signal 166576/171482 (executing program) 2025/09/01 10:16:34 fetching corpus: 5600, signal 166929/171484 (executing program) 2025/09/01 10:16:34 fetching corpus: 5650, signal 167301/171504 (executing program) 2025/09/01 10:16:34 fetching corpus: 5700, signal 167686/171518 (executing program) 2025/09/01 10:16:34 fetching corpus: 5750, signal 167987/171519 (executing program) 2025/09/01 10:16:34 fetching corpus: 5800, signal 168568/171522 (executing program) 2025/09/01 10:16:34 fetching corpus: 5849, signal 168855/171540 (executing program) 2025/09/01 10:16:34 fetching corpus: 5849, signal 168855/171540 (executing program) 2025/09/01 10:16:36 starting 8 fuzzer processes 10:16:36 executing program 0: mlockall(0xf) 10:16:36 executing program 1: prctl$PR_GET_SECUREBITS(0x1b) 10:16:36 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000001c80), r0) 10:16:36 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={[{@inode_readahead_blks}]}) [ 75.242899] audit: type=1400 audit(1756721796.517:7): avc: denied { execmem } for pid=274 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 10:16:36 executing program 2: sendmsg$IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r0, 0xc0603d0f, &(0x7f00000000c0)) 10:16:36 executing program 3: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000080)={r0}, &(0x7f00000000c0)={'enc=', 'pkcs1', ' hash=', {'sha3-512\x00'}}, 0x0, 0x0) 10:16:36 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCXONC(r0, 0x5420, 0x0) 10:16:36 executing program 5: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind(r0, &(0x7f0000000300)=@ax25={{0x3, @null}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x80) [ 76.372076] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.374375] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.377809] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.383565] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.386222] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 76.439743] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 76.441611] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 76.443755] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 76.447234] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 76.449860] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 76.578050] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 76.584768] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 76.590171] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 76.593204] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 76.594899] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 76.597813] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 76.601975] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 76.613679] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 76.622432] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 76.627211] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 76.651372] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 76.663065] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 76.682449] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 76.688694] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 76.692209] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 76.718054] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 76.719981] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 76.726177] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 76.728185] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 76.729035] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 76.732741] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 76.734625] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 76.736710] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 76.739787] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 76.742005] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 76.754233] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 76.755484] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 76.762184] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 76.765666] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 76.782691] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 78.408531] Bluetooth: hci0: command tx timeout [ 78.471530] Bluetooth: hci1: command tx timeout [ 78.662771] Bluetooth: hci2: command tx timeout [ 78.726635] Bluetooth: hci4: command tx timeout [ 78.729533] Bluetooth: hci3: command tx timeout [ 78.790484] Bluetooth: hci7: command tx timeout [ 78.791043] Bluetooth: hci5: command tx timeout [ 78.857446] Bluetooth: hci6: command tx timeout [ 80.454561] Bluetooth: hci0: command tx timeout [ 80.518592] Bluetooth: hci1: command tx timeout [ 80.710470] Bluetooth: hci2: command tx timeout [ 80.774525] Bluetooth: hci3: command tx timeout [ 80.774962] Bluetooth: hci4: command tx timeout [ 80.839527] Bluetooth: hci5: command tx timeout [ 80.839962] Bluetooth: hci7: command tx timeout [ 80.903648] Bluetooth: hci6: command tx timeout [ 82.502449] Bluetooth: hci0: command tx timeout [ 82.568434] Bluetooth: hci1: command tx timeout [ 82.758536] Bluetooth: hci2: command tx timeout [ 82.822552] Bluetooth: hci3: command tx timeout [ 82.822980] Bluetooth: hci4: command tx timeout [ 82.886459] Bluetooth: hci5: command tx timeout [ 82.886898] Bluetooth: hci7: command tx timeout [ 82.950497] Bluetooth: hci6: command tx timeout [ 84.550574] Bluetooth: hci0: command tx timeout [ 84.614447] Bluetooth: hci1: command tx timeout [ 84.806538] Bluetooth: hci2: command tx timeout [ 84.870568] Bluetooth: hci4: command tx timeout [ 84.870990] Bluetooth: hci3: command tx timeout [ 84.934459] Bluetooth: hci7: command tx timeout [ 84.934887] Bluetooth: hci5: command tx timeout [ 84.998451] Bluetooth: hci6: command tx timeout [ 113.355966] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.356774] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.520584] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.521234] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.939346] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.940008] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.021178] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.021828] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.104185] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.104855] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.294968] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.296582] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.400798] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.401725] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.555167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.555833] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.701510] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.702895] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.812501] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.814289] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.040620] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.041260] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.159337] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.160143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.281304] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.282747] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.323440] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.324016] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.410480] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.411077] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.438243] No source specified [ 115.441055] No source specified [ 115.458604] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.459165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 10:17:16 executing program 2: sendmsg$IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r0, 0xc0603d0f, &(0x7f00000000c0)) 10:17:16 executing program 5: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind(r0, &(0x7f0000000300)=@ax25={{0x3, @null}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x80) 10:17:16 executing program 3: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000080)={r0}, &(0x7f00000000c0)={'enc=', 'pkcs1', ' hash=', {'sha3-512\x00'}}, 0x0, 0x0) 10:17:16 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCXONC(r0, 0x5420, 0x0) 10:17:16 executing program 1: prctl$PR_GET_SECUREBITS(0x1b) 10:17:16 executing program 0: mlockall(0xf) 10:17:16 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={[{@inode_readahead_blks}]}) 10:17:16 executing program 6: sendmsg$IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r0, 0xc0603d0f, &(0x7f00000000c0)) [ 115.614632] No source specified 10:17:16 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCXONC(r0, 0x5420, 0x0) 10:17:16 executing program 2: sendmsg$IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r0, 0xc0603d0f, &(0x7f00000000c0)) 10:17:16 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={[{@inode_readahead_blks}]}) 10:17:16 executing program 3: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000080)={r0}, &(0x7f00000000c0)={'enc=', 'pkcs1', ' hash=', {'sha3-512\x00'}}, 0x0, 0x0) 10:17:16 executing program 5: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind(r0, &(0x7f0000000300)=@ax25={{0x3, @null}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x80) 10:17:16 executing program 0: mlockall(0xf) 10:17:16 executing program 1: prctl$PR_GET_SECUREBITS(0x1b) 10:17:17 executing program 6: sendmsg$IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r0, 0xc0603d0f, &(0x7f00000000c0)) [ 115.734278] No source specified 10:17:17 executing program 3: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000080)={r0}, &(0x7f00000000c0)={'enc=', 'pkcs1', ' hash=', {'sha3-512\x00'}}, 0x0, 0x0) 10:17:17 executing program 5: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind(r0, &(0x7f0000000300)=@ax25={{0x3, @null}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x80) 10:17:17 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCXONC(r0, 0x5420, 0x0) 10:17:17 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={[{@inode_readahead_blks}]}) 10:17:17 executing program 0: mlockall(0xf) 10:17:17 executing program 2: sendmsg$IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r0, 0xc0603d0f, &(0x7f00000000c0)) 10:17:17 executing program 6: sendmsg$IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r0, 0xc0603d0f, &(0x7f00000000c0)) 10:17:17 executing program 1: prctl$PR_GET_SECUREBITS(0x1b) 10:17:17 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x1d, 0x0, 0x0) 10:17:17 executing program 3: shmctl$SHM_UNLOCK(0x0, 0xc) [ 115.918149] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 115.923628] No source specified 10:17:17 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000007e40), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000007f40)={&(0x7f0000007e00), 0xc, &(0x7f0000007f00)={&(0x7f0000007e80)={0x30, r2, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '\xff\xff'}]}, 0x30}}, 0x0) 10:17:17 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_rx_ntuple={0x2, {0x0, @tcp_ip4_spec={@rand_addr, @private}, @esp_ip4_spec={@multicast1, @local}}}}) fork() 10:17:17 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f00000012c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 10:17:17 executing program 6: r0 = syz_io_uring_setup(0x77b6, &(0x7f0000000000), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000180), &(0x7f0000001240)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000011c0)=[{&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f0000000140), 0x2000}], 0x2) [ 116.012003] audit: type=1400 audit(1756721837.285:8): avc: denied { open } for pid=3946 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 116.019844] audit: type=1400 audit(1756721837.285:9): avc: denied { kernel } for pid=3946 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 10:17:17 executing program 2: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, 0x0, &(0x7f0000000180)) 10:17:17 executing program 7: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x3, 0x0) write$nbd(r1, &(0x7f00000000c0), 0x10) 10:17:17 executing program 4: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x1, 0x3, &(0x7f0000001340)=[{&(0x7f0000000080)="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", 0x7e2, 0xada5}, {&(0x7f0000001080)="447c30bf6a6def45cca96db0cd90aa94cc03ac608c7903c92daaed20c1d26c899a68027a4dcfc08cfc4ea043fc590c6cd060d835f8ea5104d5b102024542e0adf954bc6e6730240cd26500d198ee0f1d8acb034e0438a04225ab443172555b7b835126f91844f74e4938b90e63e509f8a46ab3834ee01db4", 0x78, 0x7}, {&(0x7f0000001180)="25162eec71addce18ddffd1b1c76663dc8b5705763fe", 0x16, 0x3f}], 0x10, &(0x7f00000013c0)={[{@gid={'gid', 0x3d, 0xee01}}, {@mode={'mode', 0x3d, 0x1}}, {@size={'size', 0x3d, [0x74, 0x25, 0x2d, 0x67, 0x39, 0x35, 0x65]}}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@subj_type}, {@audit}, {@uid_lt={'uid<', 0xee00}}, {@obj_role}, {@euid_eq}, {@dont_appraise}, {@fsuuid={'fsuuid', 0x3d, {[0x0, 0x36, 0x64, 0x34, 0x0, 0x38, 0x38, 0x35], 0x2d, [0x35, 0x62, 0x35, 0xc8c7b74223d5d005], 0x2d, [0x61, 0x3, 0x37, 0x62], 0x2d, [0x64, 0x64, 0x36, 0x64], 0x2d, [0x48, 0x33, 0x64, 0x0, 0x30, 0x0, 0x34, 0x38]}}}]}) mount_setattr(r0, &(0x7f00000014c0)='./file0\x00', 0x8100, &(0x7f0000001500)={0x8, 0xf8, 0x20000}, 0x20) r1 = openat$incfs(r0, &(0x7f0000001580)='.pending_reads\x00', 0x2, 0x4) faccessat2(0xffffffffffffffff, &(0x7f0000001640)='./file0\x00', 0x1, 0x100) fchmodat(r1, &(0x7f0000001700)='./file0\x00', 0x24) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000017c0)={'ip6gre0\x00', &(0x7f0000001740)={'ip6tnl0\x00', 0x0, 0x29, 0x1f, 0x2, 0x7, 0x28, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x40, 0x40, 0x3, 0x4}}) linkat(0xffffffffffffffff, &(0x7f0000005580)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000055c0)='./file0\x00', 0x1400) 10:17:17 executing program 6: r0 = syz_io_uring_setup(0x77b6, &(0x7f0000000000), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000180), &(0x7f0000001240)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000011c0)=[{&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f0000000140), 0x2000}], 0x2) 10:17:17 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000007e40), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000007f40)={&(0x7f0000007e00), 0xc, &(0x7f0000007f00)={&(0x7f0000007e80)={0x30, r2, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '\xff\xff'}]}, 0x30}}, 0x0) 10:17:17 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f00000012c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 10:17:17 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x1d, 0x0, 0x0) 10:17:17 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_rx_ntuple={0x2, {0x0, @tcp_ip4_spec={@rand_addr, @private}, @esp_ip4_spec={@multicast1, @local}}}}) fork() [ 116.200451] loop4: detected capacity change from 0 to 173 [ 116.207948] tmpfs: Bad value for 'size' 10:17:17 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x1d, 0x0, 0x0) [ 116.221751] loop4: detected capacity change from 0 to 173 [ 116.228053] tmpfs: Bad value for 'size' 10:17:17 executing program 2: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, 0x0, &(0x7f0000000180)) 10:17:17 executing program 6: r0 = syz_io_uring_setup(0x77b6, &(0x7f0000000000), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000180), &(0x7f0000001240)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000011c0)=[{&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f0000000140), 0x2000}], 0x2) 10:17:17 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000007e40), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000007f40)={&(0x7f0000007e00), 0xc, &(0x7f0000007f00)={&(0x7f0000007e80)={0x30, r2, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '\xff\xff'}]}, 0x30}}, 0x0) 10:17:17 executing program 7: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x3, 0x0) write$nbd(r1, &(0x7f00000000c0), 0x10) 10:17:17 executing program 4: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x1, 0x3, &(0x7f0000001340)=[{&(0x7f0000000080)="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", 0x7e2, 0xada5}, {&(0x7f0000001080)="447c30bf6a6def45cca96db0cd90aa94cc03ac608c7903c92daaed20c1d26c899a68027a4dcfc08cfc4ea043fc590c6cd060d835f8ea5104d5b102024542e0adf954bc6e6730240cd26500d198ee0f1d8acb034e0438a04225ab443172555b7b835126f91844f74e4938b90e63e509f8a46ab3834ee01db4", 0x78, 0x7}, {&(0x7f0000001180)="25162eec71addce18ddffd1b1c76663dc8b5705763fe", 0x16, 0x3f}], 0x10, &(0x7f00000013c0)={[{@gid={'gid', 0x3d, 0xee01}}, {@mode={'mode', 0x3d, 0x1}}, {@size={'size', 0x3d, [0x74, 0x25, 0x2d, 0x67, 0x39, 0x35, 0x65]}}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@subj_type}, {@audit}, {@uid_lt={'uid<', 0xee00}}, {@obj_role}, {@euid_eq}, {@dont_appraise}, {@fsuuid={'fsuuid', 0x3d, {[0x0, 0x36, 0x64, 0x34, 0x0, 0x38, 0x38, 0x35], 0x2d, [0x35, 0x62, 0x35, 0xc8c7b74223d5d005], 0x2d, [0x61, 0x3, 0x37, 0x62], 0x2d, [0x64, 0x64, 0x36, 0x64], 0x2d, [0x48, 0x33, 0x64, 0x0, 0x30, 0x0, 0x34, 0x38]}}}]}) mount_setattr(r0, &(0x7f00000014c0)='./file0\x00', 0x8100, &(0x7f0000001500)={0x8, 0xf8, 0x20000}, 0x20) r1 = openat$incfs(r0, &(0x7f0000001580)='.pending_reads\x00', 0x2, 0x4) faccessat2(0xffffffffffffffff, &(0x7f0000001640)='./file0\x00', 0x1, 0x100) fchmodat(r1, &(0x7f0000001700)='./file0\x00', 0x24) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000017c0)={'ip6gre0\x00', &(0x7f0000001740)={'ip6tnl0\x00', 0x0, 0x29, 0x1f, 0x2, 0x7, 0x28, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x40, 0x40, 0x3, 0x4}}) linkat(0xffffffffffffffff, &(0x7f0000005580)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000055c0)='./file0\x00', 0x1400) 10:17:17 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_rx_ntuple={0x2, {0x0, @tcp_ip4_spec={@rand_addr, @private}, @esp_ip4_spec={@multicast1, @local}}}}) fork() 10:17:17 executing program 2: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, 0x0, &(0x7f0000000180)) 10:17:17 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f00000012c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 10:17:17 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x1d, 0x0, 0x0) [ 116.345555] loop4: detected capacity change from 0 to 173 [ 116.350354] tmpfs: Bad value for 'size' 10:17:17 executing program 6: r0 = syz_io_uring_setup(0x77b6, &(0x7f0000000000), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000180), &(0x7f0000001240)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000011c0)=[{&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f0000000140), 0x2000}], 0x2) 10:17:17 executing program 2: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, 0x0, &(0x7f0000000180)) 10:17:17 executing program 5: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x1, 0x3, &(0x7f0000001340)=[{&(0x7f0000000080)="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", 0x7e2, 0xada5}, {&(0x7f0000001080)="447c30bf6a6def45cca96db0cd90aa94cc03ac608c7903c92daaed20c1d26c899a68027a4dcfc08cfc4ea043fc590c6cd060d835f8ea5104d5b102024542e0adf954bc6e6730240cd26500d198ee0f1d8acb034e0438a04225ab443172555b7b835126f91844f74e4938b90e63e509f8a46ab3834ee01db4", 0x78, 0x7}, {&(0x7f0000001180)="25162eec71addce18ddffd1b1c76663dc8b5705763fe", 0x16, 0x3f}], 0x10, &(0x7f00000013c0)={[{@gid={'gid', 0x3d, 0xee01}}, {@mode={'mode', 0x3d, 0x1}}, {@size={'size', 0x3d, [0x74, 0x25, 0x2d, 0x67, 0x39, 0x35, 0x65]}}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@subj_type}, {@audit}, {@uid_lt={'uid<', 0xee00}}, {@obj_role}, {@euid_eq}, {@dont_appraise}, {@fsuuid={'fsuuid', 0x3d, {[0x0, 0x36, 0x64, 0x34, 0x0, 0x38, 0x38, 0x35], 0x2d, [0x35, 0x62, 0x35, 0xc8c7b74223d5d005], 0x2d, [0x61, 0x3, 0x37, 0x62], 0x2d, [0x64, 0x64, 0x36, 0x64], 0x2d, [0x48, 0x33, 0x64, 0x0, 0x30, 0x0, 0x34, 0x38]}}}]}) mount_setattr(r0, &(0x7f00000014c0)='./file0\x00', 0x8100, &(0x7f0000001500)={0x8, 0xf8, 0x20000}, 0x20) r1 = openat$incfs(r0, &(0x7f0000001580)='.pending_reads\x00', 0x2, 0x4) faccessat2(0xffffffffffffffff, &(0x7f0000001640)='./file0\x00', 0x1, 0x100) fchmodat(r1, &(0x7f0000001700)='./file0\x00', 0x24) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000017c0)={'ip6gre0\x00', &(0x7f0000001740)={'ip6tnl0\x00', 0x0, 0x29, 0x1f, 0x2, 0x7, 0x28, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x40, 0x40, 0x3, 0x4}}) linkat(0xffffffffffffffff, &(0x7f0000005580)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000055c0)='./file0\x00', 0x1400) 10:17:17 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000007e40), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000007f40)={&(0x7f0000007e00), 0xc, &(0x7f0000007f00)={&(0x7f0000007e80)={0x30, r2, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '\xff\xff'}]}, 0x30}}, 0x0) 10:17:17 executing program 4: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x1, 0x3, &(0x7f0000001340)=[{&(0x7f0000000080)="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", 0x7e2, 0xada5}, {&(0x7f0000001080)="447c30bf6a6def45cca96db0cd90aa94cc03ac608c7903c92daaed20c1d26c899a68027a4dcfc08cfc4ea043fc590c6cd060d835f8ea5104d5b102024542e0adf954bc6e6730240cd26500d198ee0f1d8acb034e0438a04225ab443172555b7b835126f91844f74e4938b90e63e509f8a46ab3834ee01db4", 0x78, 0x7}, {&(0x7f0000001180)="25162eec71addce18ddffd1b1c76663dc8b5705763fe", 0x16, 0x3f}], 0x10, &(0x7f00000013c0)={[{@gid={'gid', 0x3d, 0xee01}}, {@mode={'mode', 0x3d, 0x1}}, {@size={'size', 0x3d, [0x74, 0x25, 0x2d, 0x67, 0x39, 0x35, 0x65]}}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@subj_type}, {@audit}, {@uid_lt={'uid<', 0xee00}}, {@obj_role}, {@euid_eq}, {@dont_appraise}, {@fsuuid={'fsuuid', 0x3d, {[0x0, 0x36, 0x64, 0x34, 0x0, 0x38, 0x38, 0x35], 0x2d, [0x35, 0x62, 0x35, 0xc8c7b74223d5d005], 0x2d, [0x61, 0x3, 0x37, 0x62], 0x2d, [0x64, 0x64, 0x36, 0x64], 0x2d, [0x48, 0x33, 0x64, 0x0, 0x30, 0x0, 0x34, 0x38]}}}]}) mount_setattr(r0, &(0x7f00000014c0)='./file0\x00', 0x8100, &(0x7f0000001500)={0x8, 0xf8, 0x20000}, 0x20) r1 = openat$incfs(r0, &(0x7f0000001580)='.pending_reads\x00', 0x2, 0x4) faccessat2(0xffffffffffffffff, &(0x7f0000001640)='./file0\x00', 0x1, 0x100) fchmodat(r1, &(0x7f0000001700)='./file0\x00', 0x24) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000017c0)={'ip6gre0\x00', &(0x7f0000001740)={'ip6tnl0\x00', 0x0, 0x29, 0x1f, 0x2, 0x7, 0x28, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x40, 0x40, 0x3, 0x4}}) linkat(0xffffffffffffffff, &(0x7f0000005580)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000055c0)='./file0\x00', 0x1400) 10:17:17 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f00000012c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 10:17:17 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_rx_ntuple={0x2, {0x0, @tcp_ip4_spec={@rand_addr, @private}, @esp_ip4_spec={@multicast1, @local}}}}) fork() 10:17:17 executing program 7: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x3, 0x0) write$nbd(r1, &(0x7f00000000c0), 0x10) [ 116.501337] loop4: detected capacity change from 0 to 173 [ 116.508101] loop5: detected capacity change from 0 to 173 [ 116.509244] tmpfs: Bad value for 'size' [ 116.512074] tmpfs: Bad value for 'size' 10:17:17 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x3, 0x0) write$nbd(r1, &(0x7f00000000c0), 0x10) 10:17:17 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f00000012c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 10:17:17 executing program 4: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x1, 0x3, &(0x7f0000001340)=[{&(0x7f0000000080)="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", 0x7e2, 0xada5}, {&(0x7f0000001080)="447c30bf6a6def45cca96db0cd90aa94cc03ac608c7903c92daaed20c1d26c899a68027a4dcfc08cfc4ea043fc590c6cd060d835f8ea5104d5b102024542e0adf954bc6e6730240cd26500d198ee0f1d8acb034e0438a04225ab443172555b7b835126f91844f74e4938b90e63e509f8a46ab3834ee01db4", 0x78, 0x7}, {&(0x7f0000001180)="25162eec71addce18ddffd1b1c76663dc8b5705763fe", 0x16, 0x3f}], 0x10, &(0x7f00000013c0)={[{@gid={'gid', 0x3d, 0xee01}}, {@mode={'mode', 0x3d, 0x1}}, {@size={'size', 0x3d, [0x74, 0x25, 0x2d, 0x67, 0x39, 0x35, 0x65]}}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@subj_type}, {@audit}, {@uid_lt={'uid<', 0xee00}}, {@obj_role}, {@euid_eq}, {@dont_appraise}, {@fsuuid={'fsuuid', 0x3d, {[0x0, 0x36, 0x64, 0x34, 0x0, 0x38, 0x38, 0x35], 0x2d, [0x35, 0x62, 0x35, 0xc8c7b74223d5d005], 0x2d, [0x61, 0x3, 0x37, 0x62], 0x2d, [0x64, 0x64, 0x36, 0x64], 0x2d, [0x48, 0x33, 0x64, 0x0, 0x30, 0x0, 0x34, 0x38]}}}]}) mount_setattr(r0, &(0x7f00000014c0)='./file0\x00', 0x8100, &(0x7f0000001500)={0x8, 0xf8, 0x20000}, 0x20) r1 = openat$incfs(r0, &(0x7f0000001580)='.pending_reads\x00', 0x2, 0x4) faccessat2(0xffffffffffffffff, &(0x7f0000001640)='./file0\x00', 0x1, 0x100) fchmodat(r1, &(0x7f0000001700)='./file0\x00', 0x24) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000017c0)={'ip6gre0\x00', &(0x7f0000001740)={'ip6tnl0\x00', 0x0, 0x29, 0x1f, 0x2, 0x7, 0x28, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x40, 0x40, 0x3, 0x4}}) linkat(0xffffffffffffffff, &(0x7f0000005580)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000055c0)='./file0\x00', 0x1400) 10:17:17 executing program 5: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x1, 0x3, &(0x7f0000001340)=[{&(0x7f0000000080)="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", 0x7e2, 0xada5}, {&(0x7f0000001080)="447c30bf6a6def45cca96db0cd90aa94cc03ac608c7903c92daaed20c1d26c899a68027a4dcfc08cfc4ea043fc590c6cd060d835f8ea5104d5b102024542e0adf954bc6e6730240cd26500d198ee0f1d8acb034e0438a04225ab443172555b7b835126f91844f74e4938b90e63e509f8a46ab3834ee01db4", 0x78, 0x7}, {&(0x7f0000001180)="25162eec71addce18ddffd1b1c76663dc8b5705763fe", 0x16, 0x3f}], 0x10, &(0x7f00000013c0)={[{@gid={'gid', 0x3d, 0xee01}}, {@mode={'mode', 0x3d, 0x1}}, {@size={'size', 0x3d, [0x74, 0x25, 0x2d, 0x67, 0x39, 0x35, 0x65]}}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@subj_type}, {@audit}, {@uid_lt={'uid<', 0xee00}}, {@obj_role}, {@euid_eq}, {@dont_appraise}, {@fsuuid={'fsuuid', 0x3d, {[0x0, 0x36, 0x64, 0x34, 0x0, 0x38, 0x38, 0x35], 0x2d, [0x35, 0x62, 0x35, 0xc8c7b74223d5d005], 0x2d, [0x61, 0x3, 0x37, 0x62], 0x2d, [0x64, 0x64, 0x36, 0x64], 0x2d, [0x48, 0x33, 0x64, 0x0, 0x30, 0x0, 0x34, 0x38]}}}]}) mount_setattr(r0, &(0x7f00000014c0)='./file0\x00', 0x8100, &(0x7f0000001500)={0x8, 0xf8, 0x20000}, 0x20) r1 = openat$incfs(r0, &(0x7f0000001580)='.pending_reads\x00', 0x2, 0x4) faccessat2(0xffffffffffffffff, &(0x7f0000001640)='./file0\x00', 0x1, 0x100) fchmodat(r1, &(0x7f0000001700)='./file0\x00', 0x24) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000017c0)={'ip6gre0\x00', &(0x7f0000001740)={'ip6tnl0\x00', 0x0, 0x29, 0x1f, 0x2, 0x7, 0x28, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x40, 0x40, 0x3, 0x4}}) linkat(0xffffffffffffffff, &(0x7f0000005580)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000055c0)='./file0\x00', 0x1400) 10:17:17 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_rx_ntuple={0x2, {0x0, @tcp_ip4_spec={@rand_addr, @private}, @esp_ip4_spec={@multicast1, @local}}}}) fork() [ 116.609795] loop4: detected capacity change from 0 to 173 [ 116.618330] tmpfs: Bad value for 'size' [ 116.623923] loop5: detected capacity change from 0 to 173 [ 116.628967] tmpfs: Bad value for 'size' 10:17:17 executing program 7: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x3, 0x0) write$nbd(r1, &(0x7f00000000c0), 0x10) 10:17:17 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)={0x28, 0x2e, 0x1, 0x0, 0x0, "", [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0x14, 0x0, 0x0, 0x0, @ipv6=@local}]}]}, 0x28}], 0x1}, 0x0) 10:17:17 executing program 5: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x1, 0x3, &(0x7f0000001340)=[{&(0x7f0000000080)="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", 0x7e2, 0xada5}, {&(0x7f0000001080)="447c30bf6a6def45cca96db0cd90aa94cc03ac608c7903c92daaed20c1d26c899a68027a4dcfc08cfc4ea043fc590c6cd060d835f8ea5104d5b102024542e0adf954bc6e6730240cd26500d198ee0f1d8acb034e0438a04225ab443172555b7b835126f91844f74e4938b90e63e509f8a46ab3834ee01db4", 0x78, 0x7}, {&(0x7f0000001180)="25162eec71addce18ddffd1b1c76663dc8b5705763fe", 0x16, 0x3f}], 0x10, &(0x7f00000013c0)={[{@gid={'gid', 0x3d, 0xee01}}, {@mode={'mode', 0x3d, 0x1}}, {@size={'size', 0x3d, [0x74, 0x25, 0x2d, 0x67, 0x39, 0x35, 0x65]}}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@subj_type}, {@audit}, {@uid_lt={'uid<', 0xee00}}, {@obj_role}, {@euid_eq}, {@dont_appraise}, {@fsuuid={'fsuuid', 0x3d, {[0x0, 0x36, 0x64, 0x34, 0x0, 0x38, 0x38, 0x35], 0x2d, [0x35, 0x62, 0x35, 0xc8c7b74223d5d005], 0x2d, [0x61, 0x3, 0x37, 0x62], 0x2d, [0x64, 0x64, 0x36, 0x64], 0x2d, [0x48, 0x33, 0x64, 0x0, 0x30, 0x0, 0x34, 0x38]}}}]}) mount_setattr(r0, &(0x7f00000014c0)='./file0\x00', 0x8100, &(0x7f0000001500)={0x8, 0xf8, 0x20000}, 0x20) r1 = openat$incfs(r0, &(0x7f0000001580)='.pending_reads\x00', 0x2, 0x4) faccessat2(0xffffffffffffffff, &(0x7f0000001640)='./file0\x00', 0x1, 0x100) fchmodat(r1, &(0x7f0000001700)='./file0\x00', 0x24) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000017c0)={'ip6gre0\x00', &(0x7f0000001740)={'ip6tnl0\x00', 0x0, 0x29, 0x1f, 0x2, 0x7, 0x28, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x40, 0x40, 0x3, 0x4}}) linkat(0xffffffffffffffff, &(0x7f0000005580)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000055c0)='./file0\x00', 0x1400) 10:17:17 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f00000012c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) [ 116.693616] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 116.725199] loop5: detected capacity change from 0 to 173 [ 116.731019] tmpfs: Bad value for 'size' 10:17:18 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x3, 0x0) write$nbd(r1, &(0x7f00000000c0), 0x10) 10:17:18 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)={0x28, 0x2e, 0x1, 0x0, 0x0, "", [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0x14, 0x0, 0x0, 0x0, @ipv6=@local}]}]}, 0x28}], 0x1}, 0x0) 10:17:18 executing program 0: r0 = epoll_create(0xe9) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0xd000200a}) 10:17:18 executing program 4: clone3(&(0x7f0000002c40)={0x210000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:17:18 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_rx_ntuple={0x2, {0x0, @tcp_ip4_spec={@rand_addr, @private}, @esp_ip4_spec={@multicast1, @local}}}}) fork() 10:17:18 executing program 7: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000001440)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f00000025c0)=[@dstopts_2292={{0x18}}], 0x18}}], 0x1, 0x400c000) writev(r0, &(0x7f0000001580)=[{&(0x7f00000000c0)="8d", 0x9801}], 0x1) 10:17:18 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f00000012c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 10:17:18 executing program 5: openat$sysfs(0xffffffffffffff9c, &(0x7f0000001080)='/sys/class/backlight', 0x80000, 0x0) [ 116.833470] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 10:17:18 executing program 4: clone3(&(0x7f0000002c40)={0x210000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:17:18 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') pread64(r0, &(0x7f0000000240)=""/22, 0x16, 0x0) 10:17:18 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x3, 0x0) write$nbd(r1, &(0x7f00000000c0), 0x10) 10:17:18 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x15, &(0x7f00000002c0)={0x0, {{0x2, 0x0, @local}}}, 0x88) 10:17:18 executing program 4: clone3(&(0x7f0000002c40)={0x210000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:17:18 executing program 7: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000001440)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f00000025c0)=[@dstopts_2292={{0x18}}], 0x18}}], 0x1, 0x400c000) writev(r0, &(0x7f0000001580)=[{&(0x7f00000000c0)="8d", 0x9801}], 0x1) 10:17:18 executing program 0: r0 = epoll_create(0xe9) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0xd000200a}) 10:17:18 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)={0x28, 0x2e, 0x1, 0x0, 0x0, "", [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0x14, 0x0, 0x0, 0x0, @ipv6=@local}]}]}, 0x28}], 0x1}, 0x0) 10:17:18 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_rx_ntuple={0x2, {0x0, @tcp_ip4_spec={@rand_addr, @private}, @esp_ip4_spec={@multicast1, @local}}}}) fork() [ 116.976827] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 10:17:18 executing program 4: clone3(&(0x7f0000002c40)={0x210000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:17:18 executing program 7: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000001440)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f00000025c0)=[@dstopts_2292={{0x18}}], 0x18}}], 0x1, 0x400c000) writev(r0, &(0x7f0000001580)=[{&(0x7f00000000c0)="8d", 0x9801}], 0x1) 10:17:18 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)={0x28, 0x2e, 0x1, 0x0, 0x0, "", [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0x14, 0x0, 0x0, 0x0, @ipv6=@local}]}]}, 0x28}], 0x1}, 0x0) 10:17:18 executing program 0: r0 = epoll_create(0xe9) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0xd000200a}) 10:17:18 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') pread64(r0, &(0x7f0000000240)=""/22, 0x16, 0x0) 10:17:18 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x15, &(0x7f00000002c0)={0x0, {{0x2, 0x0, @local}}}, 0x88) 10:17:18 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') pread64(r0, &(0x7f0000000240)=""/22, 0x16, 0x0) [ 117.086516] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 10:17:18 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x1}}) r1 = dup(r0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x80e85411, 0x0) 10:17:18 executing program 0: r0 = epoll_create(0xe9) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0xd000200a}) 10:17:18 executing program 7: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000001440)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f00000025c0)=[@dstopts_2292={{0x18}}], 0x18}}], 0x1, 0x400c000) writev(r0, &(0x7f0000001580)=[{&(0x7f00000000c0)="8d", 0x9801}], 0x1) 10:17:18 executing program 1: r0 = syz_open_dev$rtc(&(0x7f0000000800), 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1c, 0x0, 0x81}) poll(0x0, 0x0, 0x0) 10:17:18 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x15, &(0x7f00000002c0)={0x0, {{0x2, 0x0, @local}}}, 0x88) 10:17:18 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') pread64(r0, &(0x7f0000000240)=""/22, 0x16, 0x0) 10:17:18 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) recvmsg(r0, &(0x7f0000001540)={0x0, 0x0, 0x0}, 0x2020) 10:17:18 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') pread64(r0, &(0x7f0000000240)=""/22, 0x16, 0x0) 10:17:18 executing program 1: r0 = syz_open_dev$rtc(&(0x7f0000000800), 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1c, 0x0, 0x81}) poll(0x0, 0x0, 0x0) 10:17:18 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x1}}) r1 = dup(r0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x80e85411, 0x0) 10:17:18 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x2, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0x4}, {0x6}]}) 10:17:18 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x15, &(0x7f00000002c0)={0x0, {{0x2, 0x0, @local}}}, 0x88) 10:17:18 executing program 7: keyctl$set_reqkey_keyring(0xe, 0x2) request_key(&(0x7f0000001dc0)='id_resolver\x00', &(0x7f0000001e00)={'syz', 0x2}, &(0x7f0000001e40)='k\\\xc5(&}\x00', 0x0) [ 117.309188] audit: type=1326 audit(1756721838.583:10): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4111 comm="syz-executor.0" exe="/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcbed75eb19 code=0x0 10:17:18 executing program 1: r0 = syz_open_dev$rtc(&(0x7f0000000800), 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1c, 0x0, 0x81}) poll(0x0, 0x0, 0x0) 10:17:18 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') pread64(r0, &(0x7f0000000240)=""/22, 0x16, 0x0) 10:17:18 executing program 2: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, 0x0, &(0x7f0000000100)) 10:17:18 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x1}}) r1 = dup(r0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x80e85411, 0x0) 10:17:18 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) recvmsg(r0, &(0x7f0000001540)={0x0, 0x0, 0x0}, 0x2020) 10:17:18 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') pread64(r0, &(0x7f0000000240)=""/22, 0x16, 0x0) 10:17:18 executing program 7: keyctl$set_reqkey_keyring(0xe, 0x2) request_key(&(0x7f0000001dc0)='id_resolver\x00', &(0x7f0000001e00)={'syz', 0x2}, &(0x7f0000001e40)='k\\\xc5(&}\x00', 0x0) 10:17:18 executing program 2: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, 0x0, &(0x7f0000000100)) 10:17:18 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x2, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0x4}, {0x6}]}) 10:17:18 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x1}}) r1 = dup(r0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x80e85411, 0x0) 10:17:18 executing program 1: r0 = syz_open_dev$rtc(&(0x7f0000000800), 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1c, 0x0, 0x81}) poll(0x0, 0x0, 0x0) [ 117.503669] audit: type=1326 audit(1756721838.779:11): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4142 comm="syz-executor.0" exe="/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcbed75eb19 code=0x0 10:17:18 executing program 2: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, 0x0, &(0x7f0000000100)) 10:17:18 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) recvmsg(r0, &(0x7f0000001540)={0x0, 0x0, 0x0}, 0x2020) 10:17:18 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, '\x00', [{0x0, 0x0, 0x0, 0x0, 0x43df}]}) 10:17:18 executing program 7: keyctl$set_reqkey_keyring(0xe, 0x2) request_key(&(0x7f0000001dc0)='id_resolver\x00', &(0x7f0000001e00)={'syz', 0x2}, &(0x7f0000001e40)='k\\\xc5(&}\x00', 0x0) 10:17:18 executing program 6: r0 = getpid() r1 = pidfd_open(r0, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xff01, &(0x7f0000001000)) 10:17:18 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$sock(r0, &(0x7f0000003080)=[{{&(0x7f0000000040)=@in6={0xa, 0x4e20, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000001680)=[@mark={{0x14}}], 0x18}}], 0x1, 0x0) 10:17:18 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x2, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0x4}, {0x6}]}) 10:17:18 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0xa, &(0x7f00000000c0), 0x4) sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) [ 117.640533] audit: type=1326 audit(1756721838.915:12): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4164 comm="syz-executor.0" exe="/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcbed75eb19 code=0x0 10:17:18 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$sock(r0, &(0x7f0000003080)=[{{&(0x7f0000000040)=@in6={0xa, 0x4e20, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000001680)=[@mark={{0x14}}], 0x18}}], 0x1, 0x0) 10:17:18 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, '\x00', [{0x0, 0x0, 0x0, 0x0, 0x43df}]}) 10:17:18 executing program 6: r0 = getpid() r1 = pidfd_open(r0, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xff01, &(0x7f0000001000)) 10:17:18 executing program 7: keyctl$set_reqkey_keyring(0xe, 0x2) request_key(&(0x7f0000001dc0)='id_resolver\x00', &(0x7f0000001e00)={'syz', 0x2}, &(0x7f0000001e40)='k\\\xc5(&}\x00', 0x0) 10:17:19 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x2, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0x4}, {0x6}]}) 10:17:19 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) recvmsg(r0, &(0x7f0000001540)={0x0, 0x0, 0x0}, 0x2020) 10:17:19 executing program 2: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, 0x0, &(0x7f0000000100)) 10:17:19 executing program 6: r0 = getpid() r1 = pidfd_open(r0, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xff01, &(0x7f0000001000)) 10:17:19 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$sock(r0, &(0x7f0000003080)=[{{&(0x7f0000000040)=@in6={0xa, 0x4e20, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000001680)=[@mark={{0x14}}], 0x18}}], 0x1, 0x0) 10:17:19 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, '\x00', [{0x0, 0x0, 0x0, 0x0, 0x43df}]}) 10:17:19 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0xa, &(0x7f00000000c0), 0x4) sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 10:17:19 executing program 7: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0xa, &(0x7f00000000c0), 0x4) sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) [ 117.788971] audit: type=1326 audit(1756721839.060:13): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4177 comm="syz-executor.0" exe="/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcbed75eb19 code=0x0 10:17:19 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0xa, &(0x7f00000000c0), 0x4) sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 10:17:19 executing program 3: syz_emit_ethernet(0x2e, &(0x7f0000000400)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local, {[@ra={0x94, 0x4}]}}}}}}, 0x0) 10:17:19 executing program 2: syz_open_dev$rtc(&(0x7f0000000080), 0x0, 0x0) 10:17:19 executing program 6: r0 = getpid() r1 = pidfd_open(r0, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xff01, &(0x7f0000001000)) 10:17:19 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, '\x00', [{0x0, 0x0, 0x0, 0x0, 0x43df}]}) 10:17:19 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$sock(r0, &(0x7f0000003080)=[{{&(0x7f0000000040)=@in6={0xa, 0x4e20, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000001680)=[@mark={{0x14}}], 0x18}}], 0x1, 0x0) 10:17:19 executing program 7: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0xa, &(0x7f00000000c0), 0x4) sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 10:17:19 executing program 0: r0 = syz_mount_image$tmpfs(&(0x7f0000000cc0), &(0x7f0000000d00)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)={[{@nr_inodes={'nr_inodes', 0x3d, [0x6d]}}]}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) mknodat$loop(r1, &(0x7f0000000000)='./file0\x00', 0x0, 0x1) unlinkat(r0, &(0x7f0000000040)='./file0\x00', 0x0) 10:17:19 executing program 2: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6}]}) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0xfffffffffffffffe) 10:17:19 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0xa, &(0x7f00000000c0), 0x4) sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 10:17:19 executing program 3: syz_emit_ethernet(0x2e, &(0x7f0000000400)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local, {[@ra={0x94, 0x4}]}}}}}}, 0x0) 10:17:19 executing program 7: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0xa, &(0x7f00000000c0), 0x4) sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 10:17:19 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x80086603, &(0x7f0000000000)) 10:17:19 executing program 0: r0 = syz_mount_image$tmpfs(&(0x7f0000000cc0), &(0x7f0000000d00)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)={[{@nr_inodes={'nr_inodes', 0x3d, [0x6d]}}]}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) mknodat$loop(r1, &(0x7f0000000000)='./file0\x00', 0x0, 0x1) unlinkat(r0, &(0x7f0000000040)='./file0\x00', 0x0) 10:17:19 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000180)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000180)={0x2, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) 10:17:19 executing program 6: r0 = syz_mount_image$tmpfs(&(0x7f0000000cc0), &(0x7f0000000d00)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)={[{@nr_inodes={'nr_inodes', 0x3d, [0x6d]}}]}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) mknodat$loop(r1, &(0x7f0000000000)='./file0\x00', 0x0, 0x1) unlinkat(r0, &(0x7f0000000040)='./file0\x00', 0x0) [ 118.038063] audit: type=1326 audit(1756721839.306:14): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4210 comm="syz-executor.2" exe="/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f067250fb19 code=0x0 10:17:19 executing program 3: syz_emit_ethernet(0x2e, &(0x7f0000000400)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local, {[@ra={0x94, 0x4}]}}}}}}, 0x0) 10:17:19 executing program 5: r0 = syz_mount_image$tmpfs(&(0x7f0000000cc0), &(0x7f0000000d00)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)={[{@nr_inodes={'nr_inodes', 0x3d, [0x6d]}}]}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) mknodat$loop(r1, &(0x7f0000000000)='./file0\x00', 0x0, 0x1) unlinkat(r0, &(0x7f0000000040)='./file0\x00', 0x0) 10:17:19 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000180)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000180)={0x2, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) 10:17:19 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000180)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000180)={0x2, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) 10:17:19 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x80086603, &(0x7f0000000000)) 10:17:19 executing program 0: r0 = syz_mount_image$tmpfs(&(0x7f0000000cc0), &(0x7f0000000d00)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)={[{@nr_inodes={'nr_inodes', 0x3d, [0x6d]}}]}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) mknodat$loop(r1, &(0x7f0000000000)='./file0\x00', 0x0, 0x1) unlinkat(r0, &(0x7f0000000040)='./file0\x00', 0x0) 10:17:19 executing program 6: r0 = syz_mount_image$tmpfs(&(0x7f0000000cc0), &(0x7f0000000d00)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)={[{@nr_inodes={'nr_inodes', 0x3d, [0x6d]}}]}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) mknodat$loop(r1, &(0x7f0000000000)='./file0\x00', 0x0, 0x1) unlinkat(r0, &(0x7f0000000040)='./file0\x00', 0x0) 10:17:19 executing program 5: r0 = syz_mount_image$tmpfs(&(0x7f0000000cc0), &(0x7f0000000d00)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)={[{@nr_inodes={'nr_inodes', 0x3d, [0x6d]}}]}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) mknodat$loop(r1, &(0x7f0000000000)='./file0\x00', 0x0, 0x1) unlinkat(r0, &(0x7f0000000040)='./file0\x00', 0x0) [ 118.860674] audit: type=1326 audit(1756721840.135:15): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4210 comm="syz-executor.2" exe="/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f067250fb19 code=0x0 10:17:20 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000180)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000180)={0x2, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) 10:17:20 executing program 3: syz_emit_ethernet(0x2e, &(0x7f0000000400)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local, {[@ra={0x94, 0x4}]}}}}}}, 0x0) 10:17:20 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000180)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000180)={0x2, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) 10:17:20 executing program 2: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6}]}) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0xfffffffffffffffe) 10:17:20 executing program 5: r0 = syz_mount_image$tmpfs(&(0x7f0000000cc0), &(0x7f0000000d00)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)={[{@nr_inodes={'nr_inodes', 0x3d, [0x6d]}}]}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) mknodat$loop(r1, &(0x7f0000000000)='./file0\x00', 0x0, 0x1) unlinkat(r0, &(0x7f0000000040)='./file0\x00', 0x0) 10:17:20 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x80086603, &(0x7f0000000000)) 10:17:20 executing program 6: r0 = syz_mount_image$tmpfs(&(0x7f0000000cc0), &(0x7f0000000d00)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)={[{@nr_inodes={'nr_inodes', 0x3d, [0x6d]}}]}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) mknodat$loop(r1, &(0x7f0000000000)='./file0\x00', 0x0, 0x1) unlinkat(r0, &(0x7f0000000040)='./file0\x00', 0x0) 10:17:20 executing program 0: r0 = syz_mount_image$tmpfs(&(0x7f0000000cc0), &(0x7f0000000d00)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)={[{@nr_inodes={'nr_inodes', 0x3d, [0x6d]}}]}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) mknodat$loop(r1, &(0x7f0000000000)='./file0\x00', 0x0, 0x1) unlinkat(r0, &(0x7f0000000040)='./file0\x00', 0x0) 10:17:20 executing program 3: creat(&(0x7f0000000080)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) truncate(&(0x7f0000000100)='./file0\x00', 0xe) preadv2(r0, &(0x7f0000000480)=[{&(0x7f0000000300)=""/70, 0x46}], 0x1, 0x0, 0x0, 0x0) read(r0, &(0x7f0000000380)=""/242, 0xf2) 10:17:20 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r2 = dup2(r1, r0) syz_open_dev$sg(0x0, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[], 0x2e) ioctl$SG_IO(r2, 0x227d, &(0x7f00000022c0)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) 10:17:20 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000180)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000180)={0x2, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) 10:17:20 executing program 6: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0xa0840, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$netlink(0x10, 0x3, 0x6) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) setuid(r2) ioctl$CDROM_SEND_PACKET(r0, 0x5393, &(0x7f0000000240)={"80eaffffffffffff030000ba", 0x0, 0x20000, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0}) setresgid(0x0, 0x0, 0xee01) fstat(0xffffffffffffffff, &(0x7f0000000240)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000085c0), &(0x7f0000008600)=0xc) r3 = getpgid(0x0) r4 = fork() kcmp(r3, r4, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) 10:17:20 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000180)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000180)={0x2, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) [ 119.057765] audit: type=1326 audit(1756721840.333:16): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4259 comm="syz-executor.2" exe="/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f067250fb19 code=0x0 10:17:20 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x80086603, &(0x7f0000000000)) 10:17:20 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) sendmsg(r0, &(0x7f0000002280)={0x0, 0x0, &(0x7f0000002140)=[{&(0x7f0000000040)="a855", 0x2}], 0x1, &(0x7f0000002180)=[{0x10}], 0x10}, 0x10) 10:17:20 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 10:17:20 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r2 = dup2(r1, r0) syz_open_dev$sg(0x0, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[], 0x2e) ioctl$SG_IO(r2, 0x227d, &(0x7f00000022c0)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) 10:17:20 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r2 = dup2(r1, r0) syz_open_dev$sg(0x0, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[], 0x2e) ioctl$SG_IO(r2, 0x227d, &(0x7f00000022c0)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) 10:17:20 executing program 3: creat(&(0x7f0000000080)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) truncate(&(0x7f0000000100)='./file0\x00', 0xe) preadv2(r0, &(0x7f0000000480)=[{&(0x7f0000000300)=""/70, 0x46}], 0x1, 0x0, 0x0, 0x0) read(r0, &(0x7f0000000380)=""/242, 0xf2) 10:17:20 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000001480), &(0x7f00000014c0), &(0x7f0000005780)) [ 119.222268] kmemleak: Found object by alias at 0x607f1a63e304 [ 119.222291] CPU: 0 UID: 0 PID: 4264 Comm: syz-executor.6 Tainted: G W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) [ 119.222310] Tainted: [W]=WARN [ 119.222314] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 119.222321] Call Trace: [ 119.222326] [ 119.222330] dump_stack_lvl+0xca/0x120 [ 119.222362] __lookup_object+0x94/0xb0 [ 119.222380] delete_object_full+0x27/0x70 [ 119.222401] free_percpu+0x30/0x1160 [ 119.222419] ? arch_uprobe_clear_state+0x16/0x140 [ 119.222439] futex_hash_free+0x38/0xc0 [ 119.222455] mmput+0x2d3/0x390 [ 119.222474] do_exit+0x79d/0x2970 [ 119.222491] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 119.222505] ? __pfx_do_exit+0x10/0x10 [ 119.222520] ? find_held_lock+0x2b/0x80 [ 119.222539] ? get_signal+0x835/0x2340 [ 119.222559] do_group_exit+0xd3/0x2a0 [ 119.222575] get_signal+0x2315/0x2340 [ 119.222591] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 119.222604] ? __call_rcu_common.constprop.0+0x4c1/0x960 [ 119.222624] ? __pfx_get_signal+0x10/0x10 [ 119.222641] ? __schedule+0xe91/0x3590 [ 119.222663] arch_do_signal_or_restart+0x80/0x790 [ 119.222681] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 119.222698] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 119.222711] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 119.222724] ? __pfx___x64_sys_futex+0x10/0x10 [ 119.222743] exit_to_user_mode_loop+0x8b/0x110 [ 119.222757] do_syscall_64+0x2f7/0x360 [ 119.222770] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.222783] RIP: 0033:0x7fe1dafdab19 [ 119.222792] Code: Unable to access opcode bytes at 0x7fe1dafdaaef. [ 119.222797] RSP: 002b:00007fe1d8550218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 119.222809] RAX: 0000000000000001 RBX: 00007fe1db0edf68 RCX: 00007fe1dafdab19 [ 119.222817] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fe1db0edf6c [ 119.222825] RBP: 00007fe1db0edf60 R08: 000000000000000e R09: 0000000000000000 [ 119.222832] R10: 0000000000000035 R11: 0000000000000246 R12: 00007fe1db0edf6c [ 119.222839] R13: 00007fff6d8f473f R14: 00007fe1d8550300 R15: 0000000000022000 [ 119.222855] [ 119.222859] kmemleak: Object (percpu) 0x607f1a63e300 (size 8): [ 119.222866] kmemleak: comm "syz-executor.7", pid 4288, jiffies 4294786087 [ 119.222873] kmemleak: min_count = 1 [ 119.222877] kmemleak: count = 0 [ 119.222881] kmemleak: flags = 0x21 [ 119.222885] kmemleak: checksum = 0 [ 119.222889] kmemleak: backtrace: [ 119.222893] pcpu_alloc_noprof+0x87a/0x1170 [ 119.222909] perf_trace_event_init+0x366/0xa10 [ 119.222923] perf_trace_init+0x1a4/0x2f0 [ 119.222935] perf_tp_event_init+0xa6/0x120 [ 119.222952] perf_try_init_event+0x140/0x9f0 [ 119.222966] perf_event_alloc.part.0+0x118e/0x45f0 [ 119.222983] __do_sys_perf_event_open+0x719/0x2c20 [ 119.222997] do_syscall_64+0xbf/0x360 [ 119.223006] entry_SYSCALL_64_after_hwframe+0x77/0x7f 10:17:21 executing program 6: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0xa0840, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$netlink(0x10, 0x3, 0x6) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) setuid(r2) ioctl$CDROM_SEND_PACKET(r0, 0x5393, &(0x7f0000000240)={"80eaffffffffffff030000ba", 0x0, 0x20000, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0}) setresgid(0x0, 0x0, 0xee01) fstat(0xffffffffffffffff, &(0x7f0000000240)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000085c0), &(0x7f0000008600)=0xc) r3 = getpgid(0x0) r4 = fork() kcmp(r3, r4, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) 10:17:21 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 10:17:21 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r2 = dup2(r1, r0) syz_open_dev$sg(0x0, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[], 0x2e) ioctl$SG_IO(r2, 0x227d, &(0x7f00000022c0)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) 10:17:21 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r2 = dup2(r1, r0) syz_open_dev$sg(0x0, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[], 0x2e) ioctl$SG_IO(r2, 0x227d, &(0x7f00000022c0)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) 10:17:21 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000001480), &(0x7f00000014c0), &(0x7f0000005780)) 10:17:21 executing program 2: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6}]}) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0xfffffffffffffffe) 10:17:21 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) sendmsg(r0, &(0x7f0000002280)={0x0, 0x0, &(0x7f0000002140)=[{&(0x7f0000000040)="a855", 0x2}], 0x1, &(0x7f0000002180)=[{0x10}], 0x10}, 0x10) 10:17:21 executing program 3: creat(&(0x7f0000000080)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) truncate(&(0x7f0000000100)='./file0\x00', 0xe) preadv2(r0, &(0x7f0000000480)=[{&(0x7f0000000300)=""/70, 0x46}], 0x1, 0x0, 0x0, 0x0) read(r0, &(0x7f0000000380)=""/242, 0xf2) [ 119.903443] audit: type=1326 audit(1756721841.178:17): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4307 comm="syz-executor.2" exe="/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f067250fb19 code=0x0 10:17:22 executing program 3: creat(&(0x7f0000000080)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) truncate(&(0x7f0000000100)='./file0\x00', 0xe) preadv2(r0, &(0x7f0000000480)=[{&(0x7f0000000300)=""/70, 0x46}], 0x1, 0x0, 0x0, 0x0) read(r0, &(0x7f0000000380)=""/242, 0xf2) 10:17:22 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000001480), &(0x7f00000014c0), &(0x7f0000005780)) 10:17:22 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 10:17:22 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) sendmsg(r0, &(0x7f0000002280)={0x0, 0x0, &(0x7f0000002140)=[{&(0x7f0000000040)="a855", 0x2}], 0x1, &(0x7f0000002180)=[{0x10}], 0x10}, 0x10) 10:17:22 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r2 = dup2(r1, r0) syz_open_dev$sg(0x0, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[], 0x2e) ioctl$SG_IO(r2, 0x227d, &(0x7f00000022c0)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) 10:17:22 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r2 = dup2(r1, r0) syz_open_dev$sg(0x0, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[], 0x2e) ioctl$SG_IO(r2, 0x227d, &(0x7f00000022c0)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) 10:17:22 executing program 2: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6}]}) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0xfffffffffffffffe) 10:17:22 executing program 6: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0xa0840, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$netlink(0x10, 0x3, 0x6) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) setuid(r2) ioctl$CDROM_SEND_PACKET(r0, 0x5393, &(0x7f0000000240)={"80eaffffffffffff030000ba", 0x0, 0x20000, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0}) setresgid(0x0, 0x0, 0xee01) fstat(0xffffffffffffffff, &(0x7f0000000240)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000085c0), &(0x7f0000008600)=0xc) r3 = getpgid(0x0) r4 = fork() kcmp(r3, r4, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) 10:17:22 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 10:17:22 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000001480), &(0x7f00000014c0), &(0x7f0000005780)) 10:17:22 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) sendmsg(r0, &(0x7f0000002280)={0x0, 0x0, &(0x7f0000002140)=[{&(0x7f0000000040)="a855", 0x2}], 0x1, &(0x7f0000002180)=[{0x10}], 0x10}, 0x10) 10:17:22 executing program 3: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0xa0840, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$netlink(0x10, 0x3, 0x6) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) setuid(r2) ioctl$CDROM_SEND_PACKET(r0, 0x5393, &(0x7f0000000240)={"80eaffffffffffff030000ba", 0x0, 0x20000, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0}) setresgid(0x0, 0x0, 0xee01) fstat(0xffffffffffffffff, &(0x7f0000000240)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000085c0), &(0x7f0000008600)=0xc) r3 = getpgid(0x0) r4 = fork() kcmp(r3, r4, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) 10:17:22 executing program 0: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0xa0840, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$netlink(0x10, 0x3, 0x6) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) setuid(r2) ioctl$CDROM_SEND_PACKET(r0, 0x5393, &(0x7f0000000240)={"80eaffffffffffff030000ba", 0x0, 0x20000, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0}) setresgid(0x0, 0x0, 0xee01) fstat(0xffffffffffffffff, &(0x7f0000000240)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000085c0), &(0x7f0000008600)=0xc) r3 = getpgid(0x0) r4 = fork() kcmp(r3, r4, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) 10:17:22 executing program 6: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0xa0840, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$netlink(0x10, 0x3, 0x6) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) setuid(r2) ioctl$CDROM_SEND_PACKET(r0, 0x5393, &(0x7f0000000240)={"80eaffffffffffff030000ba", 0x0, 0x20000, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0}) setresgid(0x0, 0x0, 0xee01) fstat(0xffffffffffffffff, &(0x7f0000000240)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000085c0), &(0x7f0000008600)=0xc) r3 = getpgid(0x0) r4 = fork() kcmp(r3, r4, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) 10:17:22 executing program 0: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0xa0840, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$netlink(0x10, 0x3, 0x6) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) setuid(r2) ioctl$CDROM_SEND_PACKET(r0, 0x5393, &(0x7f0000000240)={"80eaffffffffffff030000ba", 0x0, 0x20000, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0}) setresgid(0x0, 0x0, 0xee01) fstat(0xffffffffffffffff, &(0x7f0000000240)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000085c0), &(0x7f0000008600)=0xc) r3 = getpgid(0x0) r4 = fork() kcmp(r3, r4, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) 10:17:22 executing program 1: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0xa0840, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$netlink(0x10, 0x3, 0x6) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) setuid(r2) ioctl$CDROM_SEND_PACKET(r0, 0x5393, &(0x7f0000000240)={"80eaffffffffffff030000ba", 0x0, 0x20000, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0}) setresgid(0x0, 0x0, 0xee01) fstat(0xffffffffffffffff, &(0x7f0000000240)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000085c0), &(0x7f0000008600)=0xc) r3 = getpgid(0x0) r4 = fork() kcmp(r3, r4, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) 10:17:22 executing program 5: r0 = eventfd(0x3ff) write$eventfd(r0, &(0x7f0000000000)=0xfffffffffffffff7, 0x8) 10:17:22 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$VT_ACTIVATE(r1, 0x227c, 0x8000000000004) 10:17:22 executing program 3: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0xa0840, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$netlink(0x10, 0x3, 0x6) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) setuid(r2) ioctl$CDROM_SEND_PACKET(r0, 0x5393, &(0x7f0000000240)={"80eaffffffffffff030000ba", 0x0, 0x20000, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0}) setresgid(0x0, 0x0, 0xee01) fstat(0xffffffffffffffff, &(0x7f0000000240)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000085c0), &(0x7f0000008600)=0xc) r3 = getpgid(0x0) r4 = fork() kcmp(r3, r4, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) 10:17:23 executing program 1: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0xa0840, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$netlink(0x10, 0x3, 0x6) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) setuid(r2) ioctl$CDROM_SEND_PACKET(r0, 0x5393, &(0x7f0000000240)={"80eaffffffffffff030000ba", 0x0, 0x20000, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0}) setresgid(0x0, 0x0, 0xee01) fstat(0xffffffffffffffff, &(0x7f0000000240)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000085c0), &(0x7f0000008600)=0xc) r3 = getpgid(0x0) r4 = fork() kcmp(r3, r4, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) 10:17:23 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$VT_ACTIVATE(r1, 0x227c, 0x8000000000004) 10:17:23 executing program 0: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0xa0840, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$netlink(0x10, 0x3, 0x6) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) setuid(r2) ioctl$CDROM_SEND_PACKET(r0, 0x5393, &(0x7f0000000240)={"80eaffffffffffff030000ba", 0x0, 0x20000, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0}) setresgid(0x0, 0x0, 0xee01) fstat(0xffffffffffffffff, &(0x7f0000000240)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000085c0), &(0x7f0000008600)=0xc) r3 = getpgid(0x0) r4 = fork() kcmp(r3, r4, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) 10:17:23 executing program 7: symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') readlinkat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=""/155, 0x9b) 10:17:23 executing program 5: r0 = eventfd(0x3ff) write$eventfd(r0, &(0x7f0000000000)=0xfffffffffffffff7, 0x8) 10:17:23 executing program 3: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0xa0840, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$netlink(0x10, 0x3, 0x6) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) setuid(r2) ioctl$CDROM_SEND_PACKET(r0, 0x5393, &(0x7f0000000240)={"80eaffffffffffff030000ba", 0x0, 0x20000, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0}) setresgid(0x0, 0x0, 0xee01) fstat(0xffffffffffffffff, &(0x7f0000000240)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000085c0), &(0x7f0000008600)=0xc) r3 = getpgid(0x0) r4 = fork() kcmp(r3, r4, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) 10:17:23 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x1, 0x4, 0x801, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14}, 0x14}}, 0x0) close(r1) 10:17:23 executing program 6: r0 = semget(0x2, 0x3, 0x200) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) 10:17:23 executing program 7: symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') readlinkat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=""/155, 0x9b) 10:17:23 executing program 6: r0 = semget(0x2, 0x3, 0x200) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) 10:17:23 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$VT_ACTIVATE(r1, 0x227c, 0x8000000000004) 10:17:23 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x1, 0x4, 0x801, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14}, 0x14}}, 0x0) close(r1) 10:17:23 executing program 7: symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') readlinkat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=""/155, 0x9b) 10:17:23 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rt_sigtimedwait(&(0x7f0000000000), &(0x7f0000000100), &(0x7f0000000040)={0x0, 0x3938700}, 0x8) 10:17:23 executing program 1: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0xa0840, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$netlink(0x10, 0x3, 0x6) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) setuid(r2) ioctl$CDROM_SEND_PACKET(r0, 0x5393, &(0x7f0000000240)={"80eaffffffffffff030000ba", 0x0, 0x20000, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0}) setresgid(0x0, 0x0, 0xee01) fstat(0xffffffffffffffff, &(0x7f0000000240)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000085c0), &(0x7f0000008600)=0xc) r3 = getpgid(0x0) r4 = fork() kcmp(r3, r4, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) 10:17:23 executing program 6: r0 = semget(0x2, 0x3, 0x200) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) 10:17:23 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$VT_ACTIVATE(r1, 0x227c, 0x8000000000004) 10:17:24 executing program 7: symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') readlinkat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=""/155, 0x9b) 10:17:24 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x1, 0x4, 0x801, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14}, 0x14}}, 0x0) close(r1) 10:17:24 executing program 3: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='hugetlbfs\x00', 0x0, 0x0) r0 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0xa40024, &(0x7f0000000040)=ANY=[]) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x1000, 0x1) 10:17:24 executing program 6: r0 = semget(0x2, 0x3, 0x200) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) 10:17:24 executing program 4: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000ff7000/0x4000)=nil) 10:17:24 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rt_sigtimedwait(&(0x7f0000000000), &(0x7f0000000100), &(0x7f0000000040)={0x0, 0x3938700}, 0x8) 10:17:24 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x18, &(0x7f0000000000)={0x0, 0x1}, 0x4) 10:17:24 executing program 5: r0 = eventfd(0x3ff) write$eventfd(r0, &(0x7f0000000000)=0xfffffffffffffff7, 0x8) [ 122.874753] hugetlbfs: Unknown parameter './file0' 10:17:24 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x18, &(0x7f0000000000)={0x0, 0x1}, 0x4) 10:17:24 executing program 4: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000ff7000/0x4000)=nil) 10:17:24 executing program 7: getcwd(&(0x7f0000000100)=""/164, 0xa4) 10:17:24 executing program 6: prctl$PR_SET_MM(0x23, 0xa, &(0x7f0000ffe000/0x2000)=nil) 10:17:24 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x1, 0x4, 0x801, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14}, 0x14}}, 0x0) close(r1) 10:17:24 executing program 3: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='hugetlbfs\x00', 0x0, 0x0) r0 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0xa40024, &(0x7f0000000040)=ANY=[]) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x1000, 0x1) 10:17:24 executing program 7: getcwd(&(0x7f0000000100)=""/164, 0xa4) 10:17:24 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x18, &(0x7f0000000000)={0x0, 0x1}, 0x4) 10:17:24 executing program 4: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000ff7000/0x4000)=nil) 10:17:24 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rt_sigtimedwait(&(0x7f0000000000), &(0x7f0000000100), &(0x7f0000000040)={0x0, 0x3938700}, 0x8) 10:17:24 executing program 4: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000ff7000/0x4000)=nil) 10:17:24 executing program 7: getcwd(&(0x7f0000000100)=""/164, 0xa4) 10:17:24 executing program 6: prctl$PR_SET_MM(0x23, 0xa, &(0x7f0000ffe000/0x2000)=nil) 10:17:24 executing program 2: mount_setattr(0xffffffffffffffff, 0x0, 0x100, &(0x7f0000000100), 0x20) 10:17:24 executing program 3: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='hugetlbfs\x00', 0x0, 0x0) r0 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0xa40024, &(0x7f0000000040)=ANY=[]) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x1000, 0x1) 10:17:24 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x18, &(0x7f0000000000)={0x0, 0x1}, 0x4) 10:17:24 executing program 7: getcwd(&(0x7f0000000100)=""/164, 0xa4) 10:17:24 executing program 4: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) ioctl$PTP_PIN_SETFUNC2(r0, 0x40603d10, &(0x7f0000000040)) 10:17:24 executing program 5: r0 = eventfd(0x3ff) write$eventfd(r0, &(0x7f0000000000)=0xfffffffffffffff7, 0x8) 10:17:24 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rt_sigtimedwait(&(0x7f0000000000), &(0x7f0000000100), &(0x7f0000000040)={0x0, 0x3938700}, 0x8) 10:17:25 executing program 6: prctl$PR_SET_MM(0x23, 0xa, &(0x7f0000ffe000/0x2000)=nil) 10:17:25 executing program 3: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='hugetlbfs\x00', 0x0, 0x0) r0 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0xa40024, &(0x7f0000000040)=ANY=[]) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x1000, 0x1) 10:17:25 executing program 4: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) ioctl$PTP_PIN_SETFUNC2(r0, 0x40603d10, &(0x7f0000000040)) 10:17:25 executing program 2: mount_setattr(0xffffffffffffffff, 0x0, 0x100, &(0x7f0000000100), 0x20) 10:17:25 executing program 7: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = dup2(r0, r0) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r1) 10:17:25 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000080)={@broadcast, @remote, r2}, 0xc) 10:17:25 executing program 6: prctl$PR_SET_MM(0x23, 0xa, &(0x7f0000ffe000/0x2000)=nil) 10:17:25 executing program 7: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = dup2(r0, r0) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r1) 10:17:25 executing program 2: mount_setattr(0xffffffffffffffff, 0x0, 0x100, &(0x7f0000000100), 0x20) 10:17:25 executing program 4: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) ioctl$PTP_PIN_SETFUNC2(r0, 0x40603d10, &(0x7f0000000040)) 10:17:25 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000080)={@broadcast, @remote, r2}, 0xc) 10:17:25 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001e00), 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, 0x0, 0x0) 10:17:25 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) sendmmsg$sock(r0, &(0x7f00000016c0)=[{{&(0x7f0000000200)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000000)="e557ce3bd6d952e732a1369d88a8", 0xe}], 0x1}}], 0x2, 0x0) 10:17:25 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f000000f200), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f000000f240)={0x1000, 0x0, 'client1\x00', 0x0, "8574d6c59706452c", "8fcd994d963f8c96ce93c6428c08299f36f517fc275a30b54b8ba1853b3303d3"}) 10:17:26 executing program 3: r0 = syz_io_uring_setup(0x6ed6, &(0x7f0000000280), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0x1a, 0x0, 0x0) 10:17:26 executing program 7: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = dup2(r0, r0) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r1) 10:17:26 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000080)={@broadcast, @remote, r2}, 0xc) 10:17:26 executing program 2: mount_setattr(0xffffffffffffffff, 0x0, 0x100, &(0x7f0000000100), 0x20) 10:17:26 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f000000f200), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f000000f240)={0x1000, 0x0, 'client1\x00', 0x0, "8574d6c59706452c", "8fcd994d963f8c96ce93c6428c08299f36f517fc275a30b54b8ba1853b3303d3"}) 10:17:26 executing program 4: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) ioctl$PTP_PIN_SETFUNC2(r0, 0x40603d10, &(0x7f0000000040)) 10:17:26 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x20, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x4}]]}, 0x20}}, 0x0) 10:17:26 executing program 3: r0 = syz_io_uring_setup(0x6ed6, &(0x7f0000000280), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0x1a, 0x0, 0x0) 10:17:26 executing program 7: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = dup2(r0, r0) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r1) 10:17:26 executing program 2: socket(0x0, 0xb, 0x0) 10:17:26 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) sendmmsg$sock(r0, &(0x7f00000016c0)=[{{&(0x7f0000000200)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000000)="e557ce3bd6d952e732a1369d88a8", 0xe}], 0x1}}], 0x2, 0x0) 10:17:26 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f000000f200), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f000000f240)={0x1000, 0x0, 'client1\x00', 0x0, "8574d6c59706452c", "8fcd994d963f8c96ce93c6428c08299f36f517fc275a30b54b8ba1853b3303d3"}) 10:17:26 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000080)={@broadcast, @remote, r2}, 0xc) 10:17:26 executing program 4: syz_emit_ethernet(0x82, &(0x7f00000000c0)={@local, @broadcast, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @source_quench={0xb, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @dev, @loopback, {[@cipso={0x2a, 0x3d, 0x0, [{0x0, 0xc, "ba4906dca0ac3f21ee4d"}, {0x0, 0xa, "0b1bb9011e61db13"}, {0x0, 0xe, "9fb8dedc4ea32f0be3c4157e"}, {0x0, 0x6, "3f70cd62"}, {0x0, 0xd, "20126d234d2862265a340c"}]}]}}}}}}}, 0x0) 10:17:26 executing program 3: r0 = syz_io_uring_setup(0x6ed6, &(0x7f0000000280), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0x1a, 0x0, 0x0) 10:17:26 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x20, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x4}]]}, 0x20}}, 0x0) 10:17:26 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f000000f200), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f000000f240)={0x1000, 0x0, 'client1\x00', 0x0, "8574d6c59706452c", "8fcd994d963f8c96ce93c6428c08299f36f517fc275a30b54b8ba1853b3303d3"}) 10:17:26 executing program 2: socket(0x0, 0xb, 0x0) 10:17:26 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x20, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x4}]]}, 0x20}}, 0x0) 10:17:26 executing program 4: syz_emit_ethernet(0x82, &(0x7f00000000c0)={@local, @broadcast, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @source_quench={0xb, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @dev, @loopback, {[@cipso={0x2a, 0x3d, 0x0, [{0x0, 0xc, "ba4906dca0ac3f21ee4d"}, {0x0, 0xa, "0b1bb9011e61db13"}, {0x0, 0xe, "9fb8dedc4ea32f0be3c4157e"}, {0x0, 0x6, "3f70cd62"}, {0x0, 0xd, "20126d234d2862265a340c"}]}]}}}}}}}, 0x0) 10:17:26 executing program 7: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, 0x1, 0x4, 0x801, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x1, 0x4, 0x401, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x1c}}, 0x0) 10:17:26 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x19, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000100000005000000000004000040000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000001000018000000c28500002b0200000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e32323330373039383000"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000e8f7d2e8feeb4bf889ba053b02420ff8010040000c00000000000000daf4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000100000000000500400000000000000000000000000000004300000000000000", 0x40, 0x540}, {&(0x7f0000010300)="02000000030000000400000019000f0003000400"/32, 0x20, 0x800}, {&(0x7f0000010400)="7f000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0100ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000daf4655fdaf4655fdaf4655f00"/4128, 0x1020, 0x1000}, {&(0x7f0000011500)="ed41000000080000daf4655fdbf4655fdbf4655f00000000000004004000000000000800050000000af301000400000000000000000000000100000010000000", 0x40, 0x2100}, {&(0x7f0000011600)="20000000641e8ebf641e8ebf00000000daf4655f00"/32, 0x20, 0x2180}, {&(0x7f0000011700)="8081000000601020daf4655fdaf4655fdaf4655f00000000000001004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000daf4655f00"/160, 0xa0, 0x2600}, {&(0x7f0000011800)="c041000000380000daf4655fdaf4655fdaf4655f00000000000002004000000000000800000000000af301000400000000000000000000000700000020000000", 0x40, 0x2a00}, {&(0x7f0000011900)="20000000000000000000000000000000daf4655f000000000000000000000000000002ea00"/64, 0x40, 0x2a80}, {&(0x7f0000011a00)="ed4100003c000000dbf4655fdbf4655fdbf4655f0000000000000200000000000000001003000000020000000d0000001000050166696c65300000000e0000002800050766696c6531000000000000000000000000000000000000000000000000000000904a5ec200000000000000000000000000000000000000000000000020000000641e8ebf641e8ebf641e8ebfdbf4655f641e8ebf0000000000000000000002ea04070000000000000000000000000000646174610000000000000000", 0xc0, 0x2b00}, {&(0x7f0000011b00)="ed8100001a040000dbf4655fdbf4655fdbf4655f00000000000001004000000000000800010000000af30100040000000000000000000000010000005000000000000000000000000000000000000000000000000000000000000000000000000000000046b58a6000000000000000000000000000000000000000000000000020000000641e8ebf641e8ebf641e8ebfdbf4655f641e8ebf0000000000000000", 0xa0, 0x2c00}, {&(0x7f0000011c00)="ffa1000026000000dbf4655fdbf4655fdbf4655f00000000000001000000000000000000010000002f746d702f73797a2d696d61676567656e3232333037303938302f66696c65302f66696c65300000000000000000000000000000000000000000000029d1c2e100000000000000000000000000000000000000000000000020000000641e8ebf641e8ebf641e8ebfdbf4655f641e8ebf0000000000000000", 0xa0, 0x2d00}, {&(0x7f0000011d00)="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", 0x1a0, 0x2e00}, {&(0x7f0000011f00)="ed81000064000000dbf4655fdbf4655fdbf4655f000000000000010000000000000000100100000073797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616cb822423400000000000000000000000000000000000000000000000020000000641e8ebf641e8ebf641e8ebfdbf4655f641e8ebf0000000000000000000002ea040734000000000028000000000000006461746100000000000000000000000000000000000000000000000000000000000000006c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273", 0x100, 0x3000}, {&(0x7f0000012000)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531000000100000001000050166696c6532000000100000001000050166696c6533000000110000009407090166696c652e636f6c64000000", 0x80, 0x8000}, {&(0x7f0000012100)="0b0000000c0001022e000000020000000c0002022e2e000000000000e8070000", 0x20, 0x10000}, {&(0x7f0000012200)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x10800}, {&(0x7f0000012300)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x11000}, {&(0x7f0000012400)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x11800}, {&(0x7f0000012500)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x12000}, {&(0x7f0000012600)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x12800}, {&(0x7f0000012700)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x13000}, {&(0x7f0000012800)="504d4d00504d4dffdbf4655f00000000647679756b6f762d676c6170746f70320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006c6f6f7033320075782f746573742f73797a5f6d6f756e745f696d6167655f650500"/128, 0x80, 0x20000}, {&(0x7f0000012900)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x28000}], 0x0, &(0x7f0000012e00)) 10:17:26 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) sendmmsg$sock(r0, &(0x7f00000016c0)=[{{&(0x7f0000000200)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000000)="e557ce3bd6d952e732a1369d88a8", 0xe}], 0x1}}], 0x2, 0x0) 10:17:26 executing program 3: r0 = syz_io_uring_setup(0x6ed6, &(0x7f0000000280), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0x1a, 0x0, 0x0) 10:17:26 executing program 2: socket(0x0, 0xb, 0x0) 10:17:26 executing program 4: syz_emit_ethernet(0x82, &(0x7f00000000c0)={@local, @broadcast, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @source_quench={0xb, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @dev, @loopback, {[@cipso={0x2a, 0x3d, 0x0, [{0x0, 0xc, "ba4906dca0ac3f21ee4d"}, {0x0, 0xa, "0b1bb9011e61db13"}, {0x0, 0xe, "9fb8dedc4ea32f0be3c4157e"}, {0x0, 0x6, "3f70cd62"}, {0x0, 0xd, "20126d234d2862265a340c"}]}]}}}}}}}, 0x0) 10:17:26 executing program 7: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, 0x1, 0x4, 0x801, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x1, 0x4, 0x401, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x1c}}, 0x0) 10:17:26 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x20, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x4}]]}, 0x20}}, 0x0) 10:17:26 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, 0x1, 0x4, 0x801, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x1, 0x4, 0x401, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x1c}}, 0x0) 10:17:26 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x18, &(0x7f0000000000)=0x2e, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10) 10:17:26 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) sendmmsg$sock(r0, &(0x7f00000016c0)=[{{&(0x7f0000000200)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000000)="e557ce3bd6d952e732a1369d88a8", 0xe}], 0x1}}], 0x2, 0x0) 10:17:26 executing program 3: mount_setattr(0xffffffffffffffff, 0x0, 0x1200, 0x0, 0x0) 10:17:26 executing program 2: socket(0x0, 0xb, 0x0) 10:17:26 executing program 4: syz_emit_ethernet(0x82, &(0x7f00000000c0)={@local, @broadcast, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @source_quench={0xb, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @dev, @loopback, {[@cipso={0x2a, 0x3d, 0x0, [{0x0, 0xc, "ba4906dca0ac3f21ee4d"}, {0x0, 0xa, "0b1bb9011e61db13"}, {0x0, 0xe, "9fb8dedc4ea32f0be3c4157e"}, {0x0, 0x6, "3f70cd62"}, {0x0, 0xd, "20126d234d2862265a340c"}]}]}}}}}}}, 0x0) 10:17:26 executing program 3: mount_setattr(0xffffffffffffffff, 0x0, 0x1200, 0x0, 0x0) 10:17:26 executing program 7: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, 0x1, 0x4, 0x801, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x1, 0x4, 0x401, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x1c}}, 0x0) 10:17:26 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x18, &(0x7f0000000000)=0x2e, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10) 10:17:26 executing program 6: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x18, &(0x7f0000000000)=0x2e, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10) 10:17:26 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/config', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup3(r1, r0, 0x0) 10:17:26 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, 0x1, 0x4, 0x801, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x1, 0x4, 0x401, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x1c}}, 0x0) 10:17:27 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, 0x1, 0x4, 0x801, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x1, 0x4, 0x401, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x1c}}, 0x0) 10:17:27 executing program 3: mount_setattr(0xffffffffffffffff, 0x0, 0x1200, 0x0, 0x0) 10:17:27 executing program 7: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, 0x1, 0x4, 0x801, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x1, 0x4, 0x401, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x1c}}, 0x0) 10:17:27 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x18, &(0x7f0000000000)=0x2e, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10) 10:17:27 executing program 6: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x18, &(0x7f0000000000)=0x2e, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10) 10:17:27 executing program 4: io_uring_setup(0x548c, &(0x7f00000000c0)) 10:17:27 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/config', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup3(r1, r0, 0x0) 10:17:27 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$rtc(&(0x7f0000000800), 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x7005, 0x0) openat$hpet(0xffffffffffffff9c, 0x0, 0x0, 0x0) 10:17:27 executing program 4: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000001b00)) waitid(0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_RELDISP(r1, 0x5605) waitid(0x0, r0, &(0x7f0000000080), 0x2, &(0x7f0000000100)) fork() r2 = getpgid(0x0) setpriority(0x1, r2, 0xff) 10:17:27 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/config', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup3(r1, r0, 0x0) 10:17:27 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$rtc(&(0x7f0000000800), 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x7005, 0x0) openat$hpet(0xffffffffffffff9c, 0x0, 0x0, 0x0) 10:17:27 executing program 3: mount_setattr(0xffffffffffffffff, 0x0, 0x1200, 0x0, 0x0) 10:17:27 executing program 6: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x18, &(0x7f0000000000)=0x2e, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10) 10:17:27 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$rtc(&(0x7f0000000800), 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x7005, 0x0) openat$hpet(0xffffffffffffff9c, 0x0, 0x0, 0x0) 10:17:27 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x18, &(0x7f0000000000)=0x2e, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10) 10:17:27 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) 10:17:27 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/config', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup3(r1, r0, 0x0) 10:17:27 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) 10:17:27 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsopen(&(0x7f0000000000)='tracefs\x00', 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = eventfd2(0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) r2 = syz_io_uring_complete(0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)={0x1c, 0x13, 0x1, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}, 0x1c}], 0x1}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)={0x1c, 0x13, 0x1, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}, 0x1c}], 0x1}, 0x0) io_submit(0x0, 0x4, &(0x7f0000000480)=[0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2, 0x8c1, r2, &(0x7f0000000100)="82694bfb6a22c685ddde74140e1e54395174858317898f84b4d320e3046de5ee82e7b2423705649e7e1f70538355bfae8c7cdff2f2f36b449456f839291d5ad5a0545f4b36f53a793d9a6e30ce890484b43d5a6c35eae5a2e6a39d16f938bb056b1ec86436ba2d3210b10ab183fffd193a05a31e147582f824dfa274b4d184dcaf00bc9c6c56", 0x86, 0x0, 0x0, 0x1}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0xe4, r3, &(0x7f0000000200)="c6105fa00a31661f9e9ece482ed28b44fa80ee2bb0630f1aa223e79514e262138f120fea4e131925f904325a9a7936b566de9e9230b57953c88113467de279ed6bcdb369b2cd9fcc76b357ad12a6e771bae4c6467b5845a84598e3b31f832341e513e092a9492d3d43653a51df3df5b16d08f592c6f27d3e9257b6c54c0a227a07eb30deea3f91ce7a37d2604d3256517aac4a9a6e2da3540d10356c8473dc658d12ceb60b60bd63b6255ca621803bf45921795627ec4a9fcf85fc93338d59d972e3d42b4dcc063459caeec959877b6063c559fb797036a257fbd69fe5ddc1c5a5542f4bde2857c71ab4678d36bccdc8a9", 0xf1, 0x401, 0x0, 0x2}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x6, 0x5, r4, &(0x7f0000000400)="2afd830d1b428a5c3faf1f6aca0f7d1f2ccb41c0dc0e65afdba6f4", 0x1b, 0x0, 0x0, 0x0, r0}]) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 10:17:27 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$rtc(&(0x7f0000000800), 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x7005, 0x0) openat$hpet(0xffffffffffffff9c, 0x0, 0x0, 0x0) 10:17:27 executing program 3: syz_emit_ethernet(0x136, &(0x7f00000001c0)={@link_local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x100, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x5, 0x1d, "2a94b064bfcabdaabb8cd5309bf220d0a49af1af9a2608a5f54f1971cf3d3ba94abd965ad3c687deca3eba10b52318114216a0dad2e5a23b2dd4153b6e8e60cf660a0201d21fa36a6aff628305dcc7bf2218c99d8813dd069b6bd7b1bbeaf381c6965646e78418be54db5eedf4c7e781ba79b112c040913a2088aff1c33cc139fc8708c9b09949c719e69fe6ad9f6c8faadf1048875ebcfca8cb62aa9bd062e32e551a70bd9176b560d98ea580a6ea18892dc6b50d5a20fc413ea5948a909387f73e28288cd1e4e12cdc744b48d1e2cdab6c6974408e73e66a0f446cd1a093d67fb1dd35f4f27a010b1c"}, {0x0, 0x0, "eb50"}]}}}}}}, 0x0) 10:17:27 executing program 6: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000002c0)={{0x80}, 'port1\x00', 0x300}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000140)={{0x80}, 'port0\x00'}) 10:17:27 executing program 4: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000001b00)) waitid(0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_RELDISP(r1, 0x5605) waitid(0x0, r0, &(0x7f0000000080), 0x2, &(0x7f0000000100)) fork() r2 = getpgid(0x0) setpriority(0x1, r2, 0xff) 10:17:27 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$rtc(&(0x7f0000000800), 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x7005, 0x0) openat$hpet(0xffffffffffffff9c, 0x0, 0x0, 0x0) 10:17:27 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$rtc(&(0x7f0000000800), 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x7005, 0x0) openat$hpet(0xffffffffffffff9c, 0x0, 0x0, 0x0) 10:17:27 executing program 3: syz_emit_ethernet(0x136, &(0x7f00000001c0)={@link_local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x100, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x5, 0x1d, "2a94b064bfcabdaabb8cd5309bf220d0a49af1af9a2608a5f54f1971cf3d3ba94abd965ad3c687deca3eba10b52318114216a0dad2e5a23b2dd4153b6e8e60cf660a0201d21fa36a6aff628305dcc7bf2218c99d8813dd069b6bd7b1bbeaf381c6965646e78418be54db5eedf4c7e781ba79b112c040913a2088aff1c33cc139fc8708c9b09949c719e69fe6ad9f6c8faadf1048875ebcfca8cb62aa9bd062e32e551a70bd9176b560d98ea580a6ea18892dc6b50d5a20fc413ea5948a909387f73e28288cd1e4e12cdc744b48d1e2cdab6c6974408e73e66a0f446cd1a093d67fb1dd35f4f27a010b1c"}, {0x0, 0x0, "eb50"}]}}}}}}, 0x0) 10:17:27 executing program 6: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000002c0)={{0x80}, 'port1\x00', 0x300}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000140)={{0x80}, 'port0\x00'}) 10:17:27 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$rtc(&(0x7f0000000800), 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x7005, 0x0) openat$hpet(0xffffffffffffff9c, 0x0, 0x0, 0x0) 10:17:27 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000002c0)={{0x80}, 'port1\x00', 0x300}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000140)={{0x80}, 'port0\x00'}) 10:17:27 executing program 4: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000001b00)) waitid(0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_RELDISP(r1, 0x5605) waitid(0x0, r0, &(0x7f0000000080), 0x2, &(0x7f0000000100)) fork() r2 = getpgid(0x0) setpriority(0x1, r2, 0xff) 10:17:27 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) 10:17:27 executing program 3: syz_emit_ethernet(0x136, &(0x7f00000001c0)={@link_local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x100, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x5, 0x1d, "2a94b064bfcabdaabb8cd5309bf220d0a49af1af9a2608a5f54f1971cf3d3ba94abd965ad3c687deca3eba10b52318114216a0dad2e5a23b2dd4153b6e8e60cf660a0201d21fa36a6aff628305dcc7bf2218c99d8813dd069b6bd7b1bbeaf381c6965646e78418be54db5eedf4c7e781ba79b112c040913a2088aff1c33cc139fc8708c9b09949c719e69fe6ad9f6c8faadf1048875ebcfca8cb62aa9bd062e32e551a70bd9176b560d98ea580a6ea18892dc6b50d5a20fc413ea5948a909387f73e28288cd1e4e12cdc744b48d1e2cdab6c6974408e73e66a0f446cd1a093d67fb1dd35f4f27a010b1c"}, {0x0, 0x0, "eb50"}]}}}}}}, 0x0) 10:17:27 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsopen(&(0x7f0000000000)='tracefs\x00', 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = eventfd2(0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) r2 = syz_io_uring_complete(0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)={0x1c, 0x13, 0x1, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}, 0x1c}], 0x1}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)={0x1c, 0x13, 0x1, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}, 0x1c}], 0x1}, 0x0) io_submit(0x0, 0x4, &(0x7f0000000480)=[0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2, 0x8c1, r2, &(0x7f0000000100)="82694bfb6a22c685ddde74140e1e54395174858317898f84b4d320e3046de5ee82e7b2423705649e7e1f70538355bfae8c7cdff2f2f36b449456f839291d5ad5a0545f4b36f53a793d9a6e30ce890484b43d5a6c35eae5a2e6a39d16f938bb056b1ec86436ba2d3210b10ab183fffd193a05a31e147582f824dfa274b4d184dcaf00bc9c6c56", 0x86, 0x0, 0x0, 0x1}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0xe4, r3, &(0x7f0000000200)="c6105fa00a31661f9e9ece482ed28b44fa80ee2bb0630f1aa223e79514e262138f120fea4e131925f904325a9a7936b566de9e9230b57953c88113467de279ed6bcdb369b2cd9fcc76b357ad12a6e771bae4c6467b5845a84598e3b31f832341e513e092a9492d3d43653a51df3df5b16d08f592c6f27d3e9257b6c54c0a227a07eb30deea3f91ce7a37d2604d3256517aac4a9a6e2da3540d10356c8473dc658d12ceb60b60bd63b6255ca621803bf45921795627ec4a9fcf85fc93338d59d972e3d42b4dcc063459caeec959877b6063c559fb797036a257fbd69fe5ddc1c5a5542f4bde2857c71ab4678d36bccdc8a9", 0xf1, 0x401, 0x0, 0x2}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x6, 0x5, r4, &(0x7f0000000400)="2afd830d1b428a5c3faf1f6aca0f7d1f2ccb41c0dc0e65afdba6f4", 0x1b, 0x0, 0x0, 0x0, r0}]) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 10:17:27 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000002c0)={{0x80}, 'port1\x00', 0x300}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000140)={{0x80}, 'port0\x00'}) 10:17:27 executing program 6: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000002c0)={{0x80}, 'port1\x00', 0x300}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000140)={{0x80}, 'port0\x00'}) 10:17:27 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) 10:17:27 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsopen(&(0x7f0000000000)='tracefs\x00', 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = eventfd2(0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) r2 = syz_io_uring_complete(0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)={0x1c, 0x13, 0x1, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}, 0x1c}], 0x1}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)={0x1c, 0x13, 0x1, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}, 0x1c}], 0x1}, 0x0) io_submit(0x0, 0x4, &(0x7f0000000480)=[0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2, 0x8c1, r2, &(0x7f0000000100)="82694bfb6a22c685ddde74140e1e54395174858317898f84b4d320e3046de5ee82e7b2423705649e7e1f70538355bfae8c7cdff2f2f36b449456f839291d5ad5a0545f4b36f53a793d9a6e30ce890484b43d5a6c35eae5a2e6a39d16f938bb056b1ec86436ba2d3210b10ab183fffd193a05a31e147582f824dfa274b4d184dcaf00bc9c6c56", 0x86, 0x0, 0x0, 0x1}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0xe4, r3, &(0x7f0000000200)="c6105fa00a31661f9e9ece482ed28b44fa80ee2bb0630f1aa223e79514e262138f120fea4e131925f904325a9a7936b566de9e9230b57953c88113467de279ed6bcdb369b2cd9fcc76b357ad12a6e771bae4c6467b5845a84598e3b31f832341e513e092a9492d3d43653a51df3df5b16d08f592c6f27d3e9257b6c54c0a227a07eb30deea3f91ce7a37d2604d3256517aac4a9a6e2da3540d10356c8473dc658d12ceb60b60bd63b6255ca621803bf45921795627ec4a9fcf85fc93338d59d972e3d42b4dcc063459caeec959877b6063c559fb797036a257fbd69fe5ddc1c5a5542f4bde2857c71ab4678d36bccdc8a9", 0xf1, 0x401, 0x0, 0x2}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x6, 0x5, r4, &(0x7f0000000400)="2afd830d1b428a5c3faf1f6aca0f7d1f2ccb41c0dc0e65afdba6f4", 0x1b, 0x0, 0x0, 0x0, r0}]) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 10:17:27 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) 10:17:27 executing program 4: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000001b00)) waitid(0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_RELDISP(r1, 0x5605) waitid(0x0, r0, &(0x7f0000000080), 0x2, &(0x7f0000000100)) fork() r2 = getpgid(0x0) setpriority(0x1, r2, 0xff) [ 126.448158] kmemleak: Found object by alias at 0x607f1a63e304 [ 126.448185] CPU: 0 UID: 0 PID: 4656 Comm: syz-executor.6 Tainted: G W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) [ 126.448204] Tainted: [W]=WARN [ 126.448207] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 126.448215] Call Trace: [ 126.448219] [ 126.448224] dump_stack_lvl+0xca/0x120 [ 126.448250] __lookup_object+0x94/0xb0 [ 126.448268] delete_object_full+0x27/0x70 [ 126.448285] free_percpu+0x30/0x1160 10:17:27 executing program 3: syz_emit_ethernet(0x136, &(0x7f00000001c0)={@link_local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x100, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x5, 0x1d, "2a94b064bfcabdaabb8cd5309bf220d0a49af1af9a2608a5f54f1971cf3d3ba94abd965ad3c687deca3eba10b52318114216a0dad2e5a23b2dd4153b6e8e60cf660a0201d21fa36a6aff628305dcc7bf2218c99d8813dd069b6bd7b1bbeaf381c6965646e78418be54db5eedf4c7e781ba79b112c040913a2088aff1c33cc139fc8708c9b09949c719e69fe6ad9f6c8faadf1048875ebcfca8cb62aa9bd062e32e551a70bd9176b560d98ea580a6ea18892dc6b50d5a20fc413ea5948a909387f73e28288cd1e4e12cdc744b48d1e2cdab6c6974408e73e66a0f446cd1a093d67fb1dd35f4f27a010b1c"}, {0x0, 0x0, "eb50"}]}}}}}}, 0x0) [ 126.448302] ? arch_uprobe_clear_state+0x16/0x140 [ 126.448323] futex_hash_free+0x38/0xc0 [ 126.448338] mmput+0x2d3/0x390 [ 126.448358] do_exit+0x79d/0x2970 [ 126.448372] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 126.448387] ? zap_other_threads+0x2b9/0x3a0 [ 126.448404] ? __pfx_do_exit+0x10/0x10 [ 126.448418] ? do_group_exit+0x1c3/0x2a0 [ 126.448433] ? _raw_spin_unlock_irq+0x23/0x40 [ 126.448451] do_group_exit+0xd3/0x2a0 [ 126.448467] __x64_sys_exit_group+0x3e/0x50 [ 126.448481] x64_sys_call+0x18c5/0x18d0 [ 126.448497] do_syscall_64+0xbf/0x360 [ 126.448510] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.448522] RIP: 0033:0x7fe1dafdab19 [ 126.448531] Code: Unable to access opcode bytes at 0x7fe1dafdaaef. [ 126.448536] RSP: 002b:00007fff6d8f4968 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 126.448548] RAX: ffffffffffffffda RBX: 000000000000001e RCX: 00007fe1dafdab19 [ 126.448556] RDX: 00007fe1daf8d72b RSI: ffffffffffffffbc RDI: 0000000000000000 [ 126.448563] RBP: 0000000000000000 R08: 0000001b2d121f08 R09: 0000000000000000 [ 126.448570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 126.448577] R13: 0000000000000000 R14: 0000000000000001 R15: 00007fff6d8f4a50 [ 126.448592] [ 126.448596] kmemleak: Object (percpu) 0x607f1a63e300 (size 8): [ 126.448603] kmemleak: comm "syz-executor.7", pid 4666, jiffies 4294793302 [ 126.448610] kmemleak: min_count = 1 [ 126.448614] kmemleak: count = 0 [ 126.448617] kmemleak: flags = 0x21 [ 126.448621] kmemleak: checksum = 0 [ 126.448625] kmemleak: backtrace: [ 126.448629] pcpu_alloc_noprof+0x87a/0x1170 [ 126.448645] perf_trace_event_init+0x366/0xa10 [ 126.448658] perf_trace_init+0x1a4/0x2f0 [ 126.448671] perf_tp_event_init+0xa6/0x120 [ 126.448687] perf_try_init_event+0x140/0x9f0 [ 126.448701] perf_event_alloc.part.0+0x118e/0x45f0 [ 126.448718] __do_sys_perf_event_open+0x719/0x2c20 [ 126.448731] do_syscall_64+0xbf/0x360 [ 126.448741] entry_SYSCALL_64_after_hwframe+0x77/0x7f 10:17:27 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) 10:17:27 executing program 4: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000001b00)) waitid(0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_RELDISP(r1, 0x5605) waitid(0x0, r0, &(0x7f0000000080), 0x2, &(0x7f0000000100)) fork() r2 = getpgid(0x0) setpriority(0x1, r2, 0xff) 10:17:27 executing program 6: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000002c0)={{0x80}, 'port1\x00', 0x300}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000140)={{0x80}, 'port0\x00'}) 10:17:27 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000002c0)={{0x80}, 'port1\x00', 0x300}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000140)={{0x80}, 'port0\x00'}) 10:17:27 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsopen(&(0x7f0000000000)='tracefs\x00', 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = eventfd2(0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) r2 = syz_io_uring_complete(0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)={0x1c, 0x13, 0x1, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}, 0x1c}], 0x1}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)={0x1c, 0x13, 0x1, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}, 0x1c}], 0x1}, 0x0) io_submit(0x0, 0x4, &(0x7f0000000480)=[0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2, 0x8c1, r2, &(0x7f0000000100)="82694bfb6a22c685ddde74140e1e54395174858317898f84b4d320e3046de5ee82e7b2423705649e7e1f70538355bfae8c7cdff2f2f36b449456f839291d5ad5a0545f4b36f53a793d9a6e30ce890484b43d5a6c35eae5a2e6a39d16f938bb056b1ec86436ba2d3210b10ab183fffd193a05a31e147582f824dfa274b4d184dcaf00bc9c6c56", 0x86, 0x0, 0x0, 0x1}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0xe4, r3, &(0x7f0000000200)="c6105fa00a31661f9e9ece482ed28b44fa80ee2bb0630f1aa223e79514e262138f120fea4e131925f904325a9a7936b566de9e9230b57953c88113467de279ed6bcdb369b2cd9fcc76b357ad12a6e771bae4c6467b5845a84598e3b31f832341e513e092a9492d3d43653a51df3df5b16d08f592c6f27d3e9257b6c54c0a227a07eb30deea3f91ce7a37d2604d3256517aac4a9a6e2da3540d10356c8473dc658d12ceb60b60bd63b6255ca621803bf45921795627ec4a9fcf85fc93338d59d972e3d42b4dcc063459caeec959877b6063c559fb797036a257fbd69fe5ddc1c5a5542f4bde2857c71ab4678d36bccdc8a9", 0xf1, 0x401, 0x0, 0x2}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x6, 0x5, r4, &(0x7f0000000400)="2afd830d1b428a5c3faf1f6aca0f7d1f2ccb41c0dc0e65afdba6f4", 0x1b, 0x0, 0x0, 0x0, r0}]) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 10:17:27 executing program 1: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000001b00)) waitid(0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_RELDISP(r1, 0x5605) waitid(0x0, r0, &(0x7f0000000080), 0x2, &(0x7f0000000100)) fork() r2 = getpgid(0x0) setpriority(0x1, r2, 0xff) 10:17:27 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsopen(&(0x7f0000000000)='tracefs\x00', 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = eventfd2(0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) r2 = syz_io_uring_complete(0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)={0x1c, 0x13, 0x1, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}, 0x1c}], 0x1}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)={0x1c, 0x13, 0x1, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}, 0x1c}], 0x1}, 0x0) io_submit(0x0, 0x4, &(0x7f0000000480)=[0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2, 0x8c1, r2, &(0x7f0000000100)="82694bfb6a22c685ddde74140e1e54395174858317898f84b4d320e3046de5ee82e7b2423705649e7e1f70538355bfae8c7cdff2f2f36b449456f839291d5ad5a0545f4b36f53a793d9a6e30ce890484b43d5a6c35eae5a2e6a39d16f938bb056b1ec86436ba2d3210b10ab183fffd193a05a31e147582f824dfa274b4d184dcaf00bc9c6c56", 0x86, 0x0, 0x0, 0x1}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0xe4, r3, &(0x7f0000000200)="c6105fa00a31661f9e9ece482ed28b44fa80ee2bb0630f1aa223e79514e262138f120fea4e131925f904325a9a7936b566de9e9230b57953c88113467de279ed6bcdb369b2cd9fcc76b357ad12a6e771bae4c6467b5845a84598e3b31f832341e513e092a9492d3d43653a51df3df5b16d08f592c6f27d3e9257b6c54c0a227a07eb30deea3f91ce7a37d2604d3256517aac4a9a6e2da3540d10356c8473dc658d12ceb60b60bd63b6255ca621803bf45921795627ec4a9fcf85fc93338d59d972e3d42b4dcc063459caeec959877b6063c559fb797036a257fbd69fe5ddc1c5a5542f4bde2857c71ab4678d36bccdc8a9", 0xf1, 0x401, 0x0, 0x2}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x6, 0x5, r4, &(0x7f0000000400)="2afd830d1b428a5c3faf1f6aca0f7d1f2ccb41c0dc0e65afdba6f4", 0x1b, 0x0, 0x0, 0x0, r0}]) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 10:17:27 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) 10:17:27 executing program 3: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000001b00)) waitid(0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_RELDISP(r1, 0x5605) waitid(0x0, r0, &(0x7f0000000080), 0x2, &(0x7f0000000100)) fork() r2 = getpgid(0x0) setpriority(0x1, r2, 0xff) 10:17:27 executing program 5: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000001b00)) waitid(0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_RELDISP(r1, 0x5605) waitid(0x0, r0, &(0x7f0000000080), 0x2, &(0x7f0000000100)) fork() r2 = getpgid(0x0) setpriority(0x1, r2, 0xff) 10:17:27 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0xc0189436, 0xfffffffffffffffd) 10:17:28 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsopen(&(0x7f0000000000)='tracefs\x00', 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = eventfd2(0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) r2 = syz_io_uring_complete(0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)={0x1c, 0x13, 0x1, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}, 0x1c}], 0x1}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)={0x1c, 0x13, 0x1, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}, 0x1c}], 0x1}, 0x0) io_submit(0x0, 0x4, &(0x7f0000000480)=[0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2, 0x8c1, r2, &(0x7f0000000100)="82694bfb6a22c685ddde74140e1e54395174858317898f84b4d320e3046de5ee82e7b2423705649e7e1f70538355bfae8c7cdff2f2f36b449456f839291d5ad5a0545f4b36f53a793d9a6e30ce890484b43d5a6c35eae5a2e6a39d16f938bb056b1ec86436ba2d3210b10ab183fffd193a05a31e147582f824dfa274b4d184dcaf00bc9c6c56", 0x86, 0x0, 0x0, 0x1}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0xe4, r3, &(0x7f0000000200)="c6105fa00a31661f9e9ece482ed28b44fa80ee2bb0630f1aa223e79514e262138f120fea4e131925f904325a9a7936b566de9e9230b57953c88113467de279ed6bcdb369b2cd9fcc76b357ad12a6e771bae4c6467b5845a84598e3b31f832341e513e092a9492d3d43653a51df3df5b16d08f592c6f27d3e9257b6c54c0a227a07eb30deea3f91ce7a37d2604d3256517aac4a9a6e2da3540d10356c8473dc658d12ceb60b60bd63b6255ca621803bf45921795627ec4a9fcf85fc93338d59d972e3d42b4dcc063459caeec959877b6063c559fb797036a257fbd69fe5ddc1c5a5542f4bde2857c71ab4678d36bccdc8a9", 0xf1, 0x401, 0x0, 0x2}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x6, 0x5, r4, &(0x7f0000000400)="2afd830d1b428a5c3faf1f6aca0f7d1f2ccb41c0dc0e65afdba6f4", 0x1b, 0x0, 0x0, 0x0, r0}]) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 10:17:28 executing program 3: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000001b00)) waitid(0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_RELDISP(r1, 0x5605) waitid(0x0, r0, &(0x7f0000000080), 0x2, &(0x7f0000000100)) fork() r2 = getpgid(0x0) setpriority(0x1, r2, 0xff) 10:17:28 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0xc0189436, 0xfffffffffffffffd) 10:17:28 executing program 5: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000001b00)) waitid(0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_RELDISP(r1, 0x5605) waitid(0x0, r0, &(0x7f0000000080), 0x2, &(0x7f0000000100)) fork() r2 = getpgid(0x0) setpriority(0x1, r2, 0xff) 10:17:28 executing program 4: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000001b00)) waitid(0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_RELDISP(r1, 0x5605) waitid(0x0, r0, &(0x7f0000000080), 0x2, &(0x7f0000000100)) fork() r2 = getpgid(0x0) setpriority(0x1, r2, 0xff) 10:17:28 executing program 2: setregid(0x0, 0xee01) socket$inet_icmp(0x2, 0x2, 0x1) 10:17:28 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsopen(&(0x7f0000000000)='tracefs\x00', 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = eventfd2(0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) r2 = syz_io_uring_complete(0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)={0x1c, 0x13, 0x1, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}, 0x1c}], 0x1}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)={0x1c, 0x13, 0x1, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}, 0x1c}], 0x1}, 0x0) io_submit(0x0, 0x4, &(0x7f0000000480)=[0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2, 0x8c1, r2, &(0x7f0000000100)="82694bfb6a22c685ddde74140e1e54395174858317898f84b4d320e3046de5ee82e7b2423705649e7e1f70538355bfae8c7cdff2f2f36b449456f839291d5ad5a0545f4b36f53a793d9a6e30ce890484b43d5a6c35eae5a2e6a39d16f938bb056b1ec86436ba2d3210b10ab183fffd193a05a31e147582f824dfa274b4d184dcaf00bc9c6c56", 0x86, 0x0, 0x0, 0x1}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0xe4, r3, &(0x7f0000000200)="c6105fa00a31661f9e9ece482ed28b44fa80ee2bb0630f1aa223e79514e262138f120fea4e131925f904325a9a7936b566de9e9230b57953c88113467de279ed6bcdb369b2cd9fcc76b357ad12a6e771bae4c6467b5845a84598e3b31f832341e513e092a9492d3d43653a51df3df5b16d08f592c6f27d3e9257b6c54c0a227a07eb30deea3f91ce7a37d2604d3256517aac4a9a6e2da3540d10356c8473dc658d12ceb60b60bd63b6255ca621803bf45921795627ec4a9fcf85fc93338d59d972e3d42b4dcc063459caeec959877b6063c559fb797036a257fbd69fe5ddc1c5a5542f4bde2857c71ab4678d36bccdc8a9", 0xf1, 0x401, 0x0, 0x2}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x6, 0x5, r4, &(0x7f0000000400)="2afd830d1b428a5c3faf1f6aca0f7d1f2ccb41c0dc0e65afdba6f4", 0x1b, 0x0, 0x0, 0x0, r0}]) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 10:17:28 executing program 3: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000001b00)) waitid(0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_RELDISP(r1, 0x5605) waitid(0x0, r0, &(0x7f0000000080), 0x2, &(0x7f0000000100)) fork() r2 = getpgid(0x0) setpriority(0x1, r2, 0xff) 10:17:28 executing program 1: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000001b00)) waitid(0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_RELDISP(r1, 0x5605) waitid(0x0, r0, &(0x7f0000000080), 0x2, &(0x7f0000000100)) fork() r2 = getpgid(0x0) setpriority(0x1, r2, 0xff) 10:17:28 executing program 5: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000001b00)) waitid(0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_RELDISP(r1, 0x5605) waitid(0x0, r0, &(0x7f0000000080), 0x2, &(0x7f0000000100)) fork() r2 = getpgid(0x0) setpriority(0x1, r2, 0xff) 10:17:28 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0xc0189436, 0xfffffffffffffffd) 10:17:28 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev}, 0xf) 10:17:28 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0xc0189436, 0xfffffffffffffffd) 10:17:28 executing program 2: setregid(0x0, 0xee01) socket$inet_icmp(0x2, 0x2, 0x1) 10:17:28 executing program 4: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000001b00)) waitid(0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_RELDISP(r1, 0x5605) waitid(0x0, r0, &(0x7f0000000080), 0x2, &(0x7f0000000100)) fork() r2 = getpgid(0x0) setpriority(0x1, r2, 0xff) 10:17:28 executing program 5: setregid(0x0, 0xee01) socket$inet_icmp(0x2, 0x2, 0x1) 10:17:28 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev}, 0xf) 10:17:28 executing program 6: io_setup(0x8, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) io_submit(r0, 0x1, &(0x7f0000001e00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) r3 = dup3(r2, r1, 0x0) write$eventfd(r3, 0x0, 0x0) 10:17:28 executing program 5: setregid(0x0, 0xee01) socket$inet_icmp(0x2, 0x2, 0x1) 10:17:28 executing program 1: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000001b00)) waitid(0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_RELDISP(r1, 0x5605) waitid(0x0, r0, &(0x7f0000000080), 0x2, &(0x7f0000000100)) fork() r2 = getpgid(0x0) setpriority(0x1, r2, 0xff) 10:17:28 executing program 2: setregid(0x0, 0xee01) socket$inet_icmp(0x2, 0x2, 0x1) 10:17:28 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev}, 0xf) 10:17:28 executing program 5: setregid(0x0, 0xee01) socket$inet_icmp(0x2, 0x2, 0x1) 10:17:28 executing program 6: io_setup(0x8, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) io_submit(r0, 0x1, &(0x7f0000001e00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) r3 = dup3(r2, r1, 0x0) write$eventfd(r3, 0x0, 0x0) 10:17:28 executing program 3: syz_mount_image$msdos(&(0x7f0000000980), &(0x7f00000009c0)='./file1\x00', 0x0, 0x0, &(0x7f0000000e80), 0x0, &(0x7f0000000f40)) 10:17:28 executing program 4: openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) inotify_init() [ 127.326307] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 127.330463] FAT-fs (loop3): unable to read boot sector 10:17:28 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmmsg$sock(r0, &(0x7f0000007800)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000000180)='#', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f0000002d40)='H', 0x1}], 0x1, &(0x7f0000003000)=[@txtime={{0x18}}], 0x18}}], 0x2, 0x0) [ 127.353522] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 127.355467] FAT-fs (loop3): unable to read boot sector [ 127.356651] kmemleak: Found object by alias at 0x607f1a63e304 [ 127.356672] CPU: 0 UID: 0 PID: 4748 Comm: syz-executor.6 Tainted: G W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) [ 127.356692] Tainted: [W]=WARN [ 127.356696] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 127.356704] Call Trace: [ 127.356708] [ 127.356713] dump_stack_lvl+0xca/0x120 [ 127.356745] __lookup_object+0x94/0xb0 [ 127.356764] delete_object_full+0x27/0x70 [ 127.356780] free_percpu+0x30/0x1160 [ 127.356798] ? arch_uprobe_clear_state+0x16/0x140 [ 127.356819] futex_hash_free+0x38/0xc0 [ 127.356835] mmput+0x2d3/0x390 [ 127.356854] do_exit+0x79d/0x2970 [ 127.356868] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 127.356883] ? zap_other_threads+0x2b9/0x3a0 [ 127.356901] ? __pfx_do_exit+0x10/0x10 [ 127.356915] ? do_group_exit+0x1c3/0x2a0 [ 127.356930] ? _raw_spin_unlock_irq+0x23/0x40 [ 127.356949] do_group_exit+0xd3/0x2a0 [ 127.356964] __x64_sys_exit_group+0x3e/0x50 [ 127.356978] x64_sys_call+0x18c5/0x18d0 [ 127.356995] do_syscall_64+0xbf/0x360 [ 127.357009] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.357021] RIP: 0033:0x7fe1dafdab19 [ 127.357030] Code: Unable to access opcode bytes at 0x7fe1dafdaaef. [ 127.357036] RSP: 002b:00007fff6d8f4968 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 127.357048] RAX: ffffffffffffffda RBX: 000000000000001e RCX: 00007fe1dafdab19 [ 127.357056] RDX: 00007fe1daf8d72b RSI: ffffffffffffffbc RDI: 0000000000000000 [ 127.357064] RBP: 0000000000000000 R08: 0000001b2d125940 R09: 0000000000000000 [ 127.357071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 127.357078] R13: 0000000000000000 R14: 0000000000000001 R15: 00007fff6d8f4a50 [ 127.357094] [ 127.357098] kmemleak: Object (percpu) 0x607f1a63e300 (size 8): [ 127.357105] kmemleak: comm "syz-executor.3", pid 4756, jiffies 4294794184 [ 127.357112] kmemleak: min_count = 1 [ 127.357116] kmemleak: count = 0 [ 127.357120] kmemleak: flags = 0x21 [ 127.357124] kmemleak: checksum = 0 [ 127.357128] kmemleak: backtrace: [ 127.357132] pcpu_alloc_noprof+0x87a/0x1170 [ 127.357148] __alloc_workqueue+0x74b/0x1820 [ 127.357166] alloc_workqueue_noprof+0xc7/0x200 [ 127.357176] loop_configure+0xf73/0x1590 [ 127.357191] lo_ioctl+0x66d/0x1c70 [ 127.357205] blkdev_ioctl+0x27c/0x6c0 [ 127.357215] __x64_sys_ioctl+0x18f/0x210 [ 127.357232] do_syscall_64+0xbf/0x360 [ 127.357241] entry_SYSCALL_64_after_hwframe+0x77/0x7f 10:17:28 executing program 1: setresuid(0x0, 0xee01, 0x0) clock_adjtime(0x0, &(0x7f0000000100)={0x8}) 10:17:28 executing program 2: setregid(0x0, 0xee01) socket$inet_icmp(0x2, 0x2, 0x1) 10:17:28 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev}, 0xf) 10:17:28 executing program 6: io_setup(0x8, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) io_submit(r0, 0x1, &(0x7f0000001e00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) r3 = dup3(r2, r1, 0x0) write$eventfd(r3, 0x0, 0x0) 10:17:28 executing program 4: r0 = syz_io_uring_setup(0x6ed6, &(0x7f0000000280), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)=""/24, 0x18}, {0x0}], 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000980)='fdinfo/3\x00') pread64(r1, &(0x7f0000000040)=""/156, 0x9c, 0x0) 10:17:28 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmmsg$sock(r0, &(0x7f0000007800)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000000180)='#', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f0000002d40)='H', 0x1}], 0x1, &(0x7f0000003000)=[@txtime={{0x18}}], 0x18}}], 0x2, 0x0) 10:17:28 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000003c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x24, r1, 0xf1b5a43ca6b9a97, 0x0, 0x0, {}, [@NLBL_MGMT_A_DOMAIN={0xe, 0x1, 'NLBL_MGMT\x00'}]}, 0x24}}, 0x0) 10:17:28 executing program 3: syz_mount_image$msdos(&(0x7f0000000980), &(0x7f00000009c0)='./file1\x00', 0x0, 0x0, &(0x7f0000000e80), 0x0, &(0x7f0000000f40)) [ 127.490185] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN NOPTI [ 127.491108] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 127.491724] CPU: 0 UID: 0 PID: 4778 Comm: syz-executor.3 Tainted: G W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) [ 127.492691] Tainted: [W]=WARN [ 127.493259] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 127.494997] RIP: 0010:__queue_work+0x202/0x1240 [ 127.495930] Code: 48 8b 6d 00 e8 4f ee 79 03 31 ff 41 89 c5 89 c6 e8 c3 02 32 00 45 85 ed 0f 85 e1 05 00 00 e8 85 07 32 00 48 89 e8 48 c1 e8 03 <42> 80 3c 20 00 0f 85 a0 0e 00 00 4c 8b 75 00 48 89 df 4c 89 34 24 [ 127.499524] RSP: 0018:ffff888044fc73f0 EFLAGS: 00010056 [ 127.500533] RAX: 0000000000000000 RBX: ffff888043dd2818 RCX: ffffc90009232000 [ 127.501862] RDX: 0000000000040000 RSI: ffffffff8141ef2b RDI: 0000000000000005 [ 127.502425] RBP: 0000000000000000 R08: 0000000000000001 R09: fffffbfff0f128f4 [ 127.502981] R10: 0000000000000001 R11: 0000000000000001 R12: dffffc0000000000 [ 127.503593] R13: 0000000000000001 R14: 0000000000000000 R15: ffff888017d19800 [ 127.504175] FS: 00007f79adeb7700(0000) GS:ffff8880e55d8000(0000) knlGS:0000000000000000 [ 127.504806] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 127.505266] CR2: 00007f79adeb8000 CR3: 000000004614e000 CR4: 0000000000350ef0 [ 127.505828] Call Trace: [ 127.506035] [ 127.506217] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 127.506596] queue_work_on+0xd0/0xe0 [ 127.506907] loop_queue_rq+0x5c8/0x1180 [ 127.507233] __blk_mq_issue_directly+0xd5/0x260 [ 127.507616] ? __pfx___blk_mq_issue_directly+0x10/0x10 [ 127.508038] ? bdev_count_inflight_rw.part.0+0x5f/0x380 [ 127.508472] blk_mq_request_issue_directly+0x11c/0x1e0 [ 127.508890] blk_mq_issue_direct+0x192/0x640 [ 127.509242] blk_mq_dispatch_queue_requests+0x4b0/0x7c0 [ 127.509668] blk_mq_flush_plug_list+0x1ec/0x5b0 [ 127.510049] ? read_tsc+0x9/0x20 [ 127.510335] ? ktime_get+0x16d/0x270 [ 127.510644] ? trace_block_plug+0x149/0x1b0 [ 127.510994] ? blk_add_rq_to_plug+0x234/0x550 [ 127.511357] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 127.511769] ? blk_mq_submit_bio+0x4fd/0x2220 [ 127.512148] __blk_flush_plug+0x25c/0x460 [ 127.512480] ? __pfx___blk_flush_plug+0x10/0x10 [ 127.512854] __submit_bio+0x480/0x5b0 [ 127.513160] ? __pfx___submit_bio+0x10/0x10 [ 127.513505] ? read_tsc+0x9/0x20 [ 127.513783] ? ktime_get+0x16d/0x270 [ 127.514084] submit_bio_noacct_nocheck+0x68e/0xcb0 [ 127.514474] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 127.514909] submit_bio_noacct+0x359/0x1350 [ 127.515272] __bread_gfp+0x18b/0x3c0 [ 127.515579] fat_fill_super+0x5e1/0x3fd0 [ 127.515915] ? __pfx_setup+0x10/0x10 [ 127.516223] ? __pfx_fat_fill_super+0x10/0x10 [ 127.516591] ? snprintf+0xbe/0x100 [ 127.516886] ? __pfx_snprintf+0x10/0x10 [ 127.517210] ? find_held_lock+0x2b/0x80 [ 127.517538] ? setup_bdev_super+0x2ed/0x6e0 [ 127.517896] ? set_blocksize+0x1b4/0x470 [ 127.518219] ? lock_release+0xc8/0x290 [ 127.518535] ? sb_set_blocksize+0x177/0x1c0 [ 127.518879] ? setup_bdev_super+0x31f/0x6e0 [ 127.519232] get_tree_bdev_flags+0x38a/0x620 [ 127.519588] ? __pfx_msdos_fill_super+0x10/0x10 [ 127.519963] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 127.520364] ? cap_capable+0xdb/0x3b0 [ 127.520678] ? security_capable+0x2f/0x90 [ 127.521013] vfs_get_tree+0x93/0x340 [ 127.521319] path_mount+0x132d/0x1dd0 [ 127.521631] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 127.522051] ? __pfx_path_mount+0x10/0x10 [ 127.522387] ? kmem_cache_free+0x2a1/0x540 [ 127.522723] ? putname.part.0+0x11b/0x160 [ 127.523060] ? getname_flags.part.0+0x1c6/0x540 [ 127.523437] ? putname.part.0+0x11b/0x160 [ 127.523774] __x64_sys_mount+0x27b/0x300 [ 127.524100] ? __pfx___x64_sys_mount+0x10/0x10 [ 127.524482] do_syscall_64+0xbf/0x360 [ 127.524789] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.525200] RIP: 0033:0x7f79b094304a [ 127.525497] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 127.526922] RSP: 002b:00007f79adeb6fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 127.527517] RAX: ffffffffffffffda RBX: 0000000020000e80 RCX: 00007f79b094304a [ 127.528082] RDX: 0000000020000980 RSI: 00000000200009c0 RDI: 00007f79adeb7000 [ 127.528654] RBP: 00007f79adeb7040 R08: 00007f79adeb7040 R09: 0000000020000980 [ 127.529213] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000980 [ 127.529769] R13: 00000000200009c0 R14: 00007f79adeb7000 R15: 0000000020000f40 [ 127.530337] [ 127.530530] Modules linked in: [ 127.530790] ---[ end trace 0000000000000000 ]--- [ 127.531160] RIP: 0010:__queue_work+0x202/0x1240 [ 127.531539] Code: 48 8b 6d 00 e8 4f ee 79 03 31 ff 41 89 c5 89 c6 e8 c3 02 32 00 45 85 ed 0f 85 e1 05 00 00 e8 85 07 32 00 48 89 e8 48 c1 e8 03 <42> 80 3c 20 00 0f 85 a0 0e 00 00 4c 8b 75 00 48 89 df 4c 89 34 24 [ 127.532970] RSP: 0018:ffff888044fc73f0 EFLAGS: 00010056 [ 127.533399] RAX: 0000000000000000 RBX: ffff888043dd2818 RCX: ffffc90009232000 [ 127.533956] RDX: 0000000000040000 RSI: ffffffff8141ef2b RDI: 0000000000000005 [ 127.534517] RBP: 0000000000000000 R08: 0000000000000001 R09: fffffbfff0f128f4 [ 127.535082] R10: 0000000000000001 R11: 0000000000000001 R12: dffffc0000000000 [ 127.535646] R13: 0000000000000001 R14: 0000000000000000 R15: ffff888017d19800 [ 127.536219] FS: 00007f79adeb7700(0000) GS:ffff8880e55d8000(0000) knlGS:0000000000000000 [ 127.536856] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 127.537315] CR2: 00007f79adeb8000 CR3: 000000004614e000 CR4: 0000000000350ef0 [ 127.537882] note: syz-executor.3[4778] exited with irqs disabled [ 127.538493] note: syz-executor.3[4778] exited with preempt_count 1 [ 127.539010] ------------[ cut here ]------------ 10:17:28 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000003c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x24, r1, 0xf1b5a43ca6b9a97, 0x0, 0x0, {}, [@NLBL_MGMT_A_DOMAIN={0xe, 0x1, 'NLBL_MGMT\x00'}]}, 0x24}}, 0x0) [ 127.539386] WARNING: kernel/exit.c:898 at do_exit+0x1c36/0x2970, CPU#0: syz-executor.3/4778 [ 127.541377] Modules linked in: [ 127.541725] CPU: 0 UID: 0 PID: 4778 Comm: syz-executor.3 Tainted: G D W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) [ 127.542903] Tainted: [D]=DIE, [W]=WARN [ 127.543210] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 127.544030] RIP: 0010:do_exit+0x1c36/0x2970 [ 127.544484] Code: 96 0a 00 00 c7 43 18 00 00 00 00 e9 21 e6 ff ff e8 ef b3 38 00 bf 02 24 00 00 e8 f5 ab 0b 00 e9 41 ff ff ff e8 db b3 38 00 90 <0f> 0b 90 e9 87 e4 ff ff e8 cd b3 38 00 4c 89 e6 bf 05 06 00 00 e8 [ 127.546053] RSP: 0018:ffff888044fc7e40 EFLAGS: 00010212 [ 127.546549] RAX: 000000000003b79c RBX: 0000000000000200 RCX: ffffc90009232000 [ 127.547112] RDX: 0000000000040000 RSI: ffffffff813b42d5 RDI: ffff888045bd2d68 [ 127.547701] RBP: ffff888045bd1b80 R08: 0000000000000001 R09: fffffbfff0f126d8 10:17:28 executing program 2: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CCA_MODE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x30, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x30}}, 0x0) [ 127.548277] R10: 0000000000000200 R11: 0000000000000001 R12: 000000000000000b 10:17:28 executing program 0: perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1004}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000000)={@dev, r6}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000040)={@private1, 0x6f, r6}) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r8 = dup(r7) recvmsg$unix(r8, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x40000060) setsockopt$inet6_udp_int(r8, 0x11, 0xb, &(0x7f0000000080)=0x39f9, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) [ 127.549304] R13: 0000000000002710 R14: dffffc0000000000 R15: 0000000000000000 [ 127.550076] FS: 00007f79adeb7700(0000) GS:ffff8880e55d8000(0000) knlGS:0000000000000000 [ 127.550844] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 127.551317] CR2: 00007f79adeb8000 CR3: 000000004614e000 CR4: 0000000000350ef0 [ 127.552017] Call Trace: [ 127.552313] [ 127.552527] ? _printk+0xbe/0xf0 [ 127.552911] ? __pfx__printk+0x10/0x10 [ 127.553341] ? __pfx_do_exit+0x10/0x10 [ 127.553754] make_task_dead+0x174/0x3b0 [ 127.554087] ? do_syscall_64+0xbf/0x360 [ 127.554432] rewind_stack_and_make_dead+0x16/0x20 [ 127.554837] RIP: 0033:0x7f79b094304a [ 127.555144] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 127.557819] RSP: 002b:00007f79adeb6fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 127.559434] RAX: ffffffffffffffda RBX: 0000000020000e80 RCX: 00007f79b094304a [ 127.560024] RDX: 0000000020000980 RSI: 00000000200009c0 RDI: 00007f79adeb7000 [ 127.560642] RBP: 00007f79adeb7040 R08: 00007f79adeb7040 R09: 0000000020000980 [ 127.561416] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000980 [ 127.562082] R13: 00000000200009c0 R14: 00007f79adeb7000 R15: 0000000020000f40 [ 127.562688] [ 127.562887] irq event stamp: 640 [ 127.563162] hardirqs last enabled at (639): [] ktime_get+0x1c7/0x270 [ 127.563967] hardirqs last disabled at (640): [] _raw_spin_lock_irq+0x42/0x50 [ 127.564848] softirqs last enabled at (462): [] handle_softirqs+0x50c/0x770 [ 127.565559] softirqs last disabled at (423): [] __irq_exit_rcu+0xc4/0x100 [ 127.566240] ---[ end trace 0000000000000000 ]--- [ 127.566641] BUG: sleeping function called from invalid context at ./include/linux/percpu-rwsem.h:51 [ 127.567371] in_atomic(): 0, irqs_disabled(): 0, non_block: 0, pid: 4778, name: syz-executor.3 [ 127.568083] preempt_count: 0, expected: 0 [ 127.568454] RCU nest depth: 2, expected: 0 [ 127.568869] INFO: lockdep is turned off. [ 127.569308] CPU: 0 UID: 0 PID: 4778 Comm: syz-executor.3 Tainted: G D W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) [ 127.569327] Tainted: [D]=DIE, [W]=WARN [ 127.569331] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 127.569338] Call Trace: [ 127.569342] [ 127.569346] dump_stack_lvl+0xfa/0x120 [ 127.569372] __might_resched+0x2f3/0x510 [ 127.569387] exit_signals+0x25/0x940 [ 127.569409] do_exit+0x2db/0x2970 [ 127.569422] ? _printk+0xbe/0xf0 10:17:28 executing program 4: r0 = syz_io_uring_setup(0x6ed6, &(0x7f0000000280), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)=""/24, 0x18}, {0x0}], 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000980)='fdinfo/3\x00') pread64(r1, &(0x7f0000000040)=""/156, 0x9c, 0x0) [ 127.569434] ? __pfx__printk+0x10/0x10 [ 127.569451] ? __pfx_do_exit+0x10/0x10 [ 127.569467] make_task_dead+0x174/0x3b0 [ 127.569480] ? do_syscall_64+0xbf/0x360 [ 127.569492] rewind_stack_and_make_dead+0x16/0x20 [ 127.569508] RIP: 0033:0x7f79b094304a [ 127.569516] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 127.569527] RSP: 002b:00007f79adeb6fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 127.569539] RAX: ffffffffffffffda RBX: 0000000020000e80 RCX: 00007f79b094304a [ 127.569547] RDX: 0000000020000980 RSI: 00000000200009c0 RDI: 00007f79adeb7000 [ 127.569555] RBP: 00007f79adeb7040 R08: 00007f79adeb7040 R09: 0000000020000980 [ 127.569562] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000980 [ 127.569569] R13: 00000000200009c0 R14: 00007f79adeb7000 R15: 0000000020000f40 [ 127.569581] 10:17:28 executing program 1: setresuid(0x0, 0xee01, 0x0) clock_adjtime(0x0, &(0x7f0000000100)={0x8}) 10:17:28 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmmsg$sock(r0, &(0x7f0000007800)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000000180)='#', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f0000002d40)='H', 0x1}], 0x1, &(0x7f0000003000)=[@txtime={{0x18}}], 0x18}}], 0x2, 0x0) 10:17:28 executing program 6: io_setup(0x8, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) io_submit(r0, 0x1, &(0x7f0000001e00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) r3 = dup3(r2, r1, 0x0) write$eventfd(r3, 0x0, 0x0) 10:17:29 executing program 4: r0 = syz_io_uring_setup(0x6ed6, &(0x7f0000000280), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)=""/24, 0x18}, {0x0}], 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000980)='fdinfo/3\x00') pread64(r1, &(0x7f0000000040)=""/156, 0x9c, 0x0) 10:17:29 executing program 1: setresuid(0x0, 0xee01, 0x0) clock_adjtime(0x0, &(0x7f0000000100)={0x8}) 10:17:29 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000003c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x24, r1, 0xf1b5a43ca6b9a97, 0x0, 0x0, {}, [@NLBL_MGMT_A_DOMAIN={0xe, 0x1, 'NLBL_MGMT\x00'}]}, 0x24}}, 0x0) 10:17:29 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmmsg$sock(r0, &(0x7f0000007800)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000000180)='#', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f0000002d40)='H', 0x1}], 0x1, &(0x7f0000003000)=[@txtime={{0x18}}], 0x18}}], 0x2, 0x0) 10:17:29 executing program 3: syz_mount_image$msdos(&(0x7f0000000980), &(0x7f00000009c0)='./file1\x00', 0x0, 0x0, &(0x7f0000000e80), 0x0, &(0x7f0000000f40)) 10:17:29 executing program 0: perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1004}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000000)={@dev, r6}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000040)={@private1, 0x6f, r6}) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r8 = dup(r7) recvmsg$unix(r8, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x40000060) setsockopt$inet6_udp_int(r8, 0x11, 0xb, &(0x7f0000000080)=0x39f9, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 10:17:29 executing program 2: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CCA_MODE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x30, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x30}}, 0x0) 10:17:29 executing program 6: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CCA_MODE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x30, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x30}}, 0x0) 10:17:29 executing program 6: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CCA_MODE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x30, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x30}}, 0x0) 10:17:29 executing program 3: syz_mount_image$msdos(&(0x7f0000000980), &(0x7f00000009c0)='./file1\x00', 0x0, 0x0, &(0x7f0000000e80), 0x0, &(0x7f0000000f40)) 10:17:29 executing program 0: perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1004}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000000)={@dev, r6}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000040)={@private1, 0x6f, r6}) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r8 = dup(r7) recvmsg$unix(r8, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x40000060) setsockopt$inet6_udp_int(r8, 0x11, 0xb, &(0x7f0000000080)=0x39f9, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 10:17:29 executing program 1: setresuid(0x0, 0xee01, 0x0) clock_adjtime(0x0, &(0x7f0000000100)={0x8}) 10:17:29 executing program 2: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CCA_MODE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x30, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x30}}, 0x0) 10:17:29 executing program 4: r0 = syz_io_uring_setup(0x6ed6, &(0x7f0000000280), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)=""/24, 0x18}, {0x0}], 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000980)='fdinfo/3\x00') pread64(r1, &(0x7f0000000040)=""/156, 0x9c, 0x0) 10:17:29 executing program 6: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CCA_MODE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x30, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x30}}, 0x0) 10:17:29 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000003c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x24, r1, 0xf1b5a43ca6b9a97, 0x0, 0x0, {}, [@NLBL_MGMT_A_DOMAIN={0xe, 0x1, 'NLBL_MGMT\x00'}]}, 0x24}}, 0x0) 10:17:29 executing program 7: perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1004}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000000)={@dev, r6}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000040)={@private1, 0x6f, r6}) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r8 = dup(r7) recvmsg$unix(r8, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x40000060) setsockopt$inet6_udp_int(r8, 0x11, 0xb, &(0x7f0000000080)=0x39f9, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) [ 128.571427] kmemleak: Found object by alias at 0x607f1a63e304 [ 128.571449] CPU: 0 UID: 0 PID: 4822 Comm: syz-executor.6 Tainted: G D W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) [ 128.571469] Tainted: [D]=DIE, [W]=WARN [ 128.571473] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 128.571480] Call Trace: [ 128.571484] [ 128.571489] dump_stack_lvl+0xca/0x120 [ 128.571522] __lookup_object+0x94/0xb0 [ 128.571540] delete_object_full+0x27/0x70 [ 128.571555] free_percpu+0x30/0x1160 [ 128.571573] ? arch_uprobe_clear_state+0x16/0x140 [ 128.571592] futex_hash_free+0x38/0xc0 [ 128.571606] mmput+0x2d3/0x390 [ 128.571625] do_exit+0x79d/0x2970 [ 128.571638] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 128.571653] ? zap_other_threads+0x2b9/0x3a0 [ 128.571669] ? __pfx_do_exit+0x10/0x10 [ 128.571682] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 128.571700] ? _raw_spin_unlock_irq+0x23/0x40 [ 128.571717] do_group_exit+0xd3/0x2a0 [ 128.571731] __x64_sys_exit_group+0x3e/0x50 [ 128.571745] x64_sys_call+0x18c5/0x18d0 [ 128.571762] do_syscall_64+0xbf/0x360 [ 128.571774] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.571785] RIP: 0033:0x7fe1dafdab19 [ 128.571794] Code: Unable to access opcode bytes at 0x7fe1dafdaaef. [ 128.571800] RSP: 002b:00007fff6d8f4968 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 128.571812] RAX: ffffffffffffffda RBX: 000000000000001e RCX: 00007fe1dafdab19 [ 128.571820] RDX: 00007fe1daf8d72b RSI: ffffffffffffffbc RDI: 0000000000000000 [ 128.571827] RBP: 0000000000000000 R08: 0000001b2d126b70 R09: 0000000000000000 [ 128.571835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 128.571842] R13: 0000000000000000 R14: 0000000000000001 R15: 00007fff6d8f4a50 [ 128.571852] [ 128.571856] kmemleak: Object (percpu) 0x607f1a63e300 (size 8): [ 128.571863] kmemleak: comm "syz-executor.0", pid 4824, jiffies 4294795414 [ 128.571871] kmemleak: min_count = 1 [ 128.571875] kmemleak: count = 0 [ 128.571878] kmemleak: flags = 0x21 [ 128.571882] kmemleak: checksum = 0 [ 128.571886] kmemleak: backtrace: [ 128.571890] pcpu_alloc_noprof+0x87a/0x1170 [ 128.571906] fib_nh_common_init+0x30/0xd0 [ 128.571920] fib6_nh_init+0x968/0x1a00 [ 128.571932] ip6_route_info_create_nh+0x530/0xf80 [ 128.571943] addrconf_f6i_alloc+0x208/0x430 [ 128.571954] __ipv6_dev_ac_inc+0x2fc/0xd80 [ 128.571970] ipv6_sock_ac_join+0x8b5/0x1190 [ 128.571985] do_ipv6_setsockopt+0x3f54/0x47b0 [ 128.572002] ipv6_setsockopt+0xcb/0x170 [ 128.572018] udpv6_setsockopt+0x84/0xd0 [ 128.572029] do_sock_setsockopt+0xf7/0x1e0 [ 128.572041] __sys_setsockopt+0x11f/0x1a0 [ 128.572057] __x64_sys_setsockopt+0xbe/0x160 [ 128.572072] do_syscall_64+0xbf/0x360 [ 128.572082] entry_SYSCALL_64_after_hwframe+0x77/0x7f 10:17:29 executing program 2: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CCA_MODE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x30, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x30}}, 0x0) 10:17:29 executing program 7: perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1004}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000000)={@dev, r6}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000040)={@private1, 0x6f, r6}) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r8 = dup(r7) recvmsg$unix(r8, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x40000060) setsockopt$inet6_udp_int(r8, 0x11, 0xb, &(0x7f0000000080)=0x39f9, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 10:17:29 executing program 0: perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1004}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000000)={@dev, r6}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000040)={@private1, 0x6f, r6}) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r8 = dup(r7) recvmsg$unix(r8, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x40000060) setsockopt$inet6_udp_int(r8, 0x11, 0xb, &(0x7f0000000080)=0x39f9, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 10:17:29 executing program 7: perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1004}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000000)={@dev, r6}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000040)={@private1, 0x6f, r6}) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r8 = dup(r7) recvmsg$unix(r8, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x40000060) setsockopt$inet6_udp_int(r8, 0x11, 0xb, &(0x7f0000000080)=0x39f9, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 10:17:30 executing program 4: perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1004}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000000)={@dev, r6}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000040)={@private1, 0x6f, r6}) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r8 = dup(r7) recvmsg$unix(r8, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x40000060) setsockopt$inet6_udp_int(r8, 0x11, 0xb, &(0x7f0000000080)=0x39f9, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 10:17:30 executing program 1: perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1004}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000000)={@dev, r6}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000040)={@private1, 0x6f, r6}) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r8 = dup(r7) recvmsg$unix(r8, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x40000060) setsockopt$inet6_udp_int(r8, 0x11, 0xb, &(0x7f0000000080)=0x39f9, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 10:17:30 executing program 6: perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1004}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000000)={@dev, r6}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000040)={@private1, 0x6f, r6}) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r8 = dup(r7) recvmsg$unix(r8, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x40000060) setsockopt$inet6_udp_int(r8, 0x11, 0xb, &(0x7f0000000080)=0x39f9, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 10:17:30 executing program 3: perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1004}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000000)={@dev, r6}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000040)={@private1, 0x6f, r6}) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r8 = dup(r7) recvmsg$unix(r8, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x40000060) setsockopt$inet6_udp_int(r8, 0x11, 0xb, &(0x7f0000000080)=0x39f9, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 10:17:30 executing program 7: perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1004}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000000)={@dev, r6}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000040)={@private1, 0x6f, r6}) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r8 = dup(r7) recvmsg$unix(r8, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x40000060) setsockopt$inet6_udp_int(r8, 0x11, 0xb, &(0x7f0000000080)=0x39f9, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 10:17:30 executing program 5: perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1004}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000000)={@dev, r6}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000040)={@private1, 0x6f, r6}) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r8 = dup(r7) recvmsg$unix(r8, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x40000060) setsockopt$inet6_udp_int(r8, 0x11, 0xb, &(0x7f0000000080)=0x39f9, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 10:17:30 executing program 2: r0 = syz_io_uring_setup(0x6ed6, &(0x7f0000000280), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)=""/24, 0x18}, {0x0}], 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000980)='fdinfo/3\x00') pread64(r1, &(0x7f0000000040)=""/156, 0x9c, 0x0) 10:17:30 executing program 6: perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1004}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000000)={@dev, r6}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000040)={@private1, 0x6f, r6}) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r8 = dup(r7) recvmsg$unix(r8, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x40000060) setsockopt$inet6_udp_int(r8, 0x11, 0xb, &(0x7f0000000080)=0x39f9, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 10:17:30 executing program 4: perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1004}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000000)={@dev, r6}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000040)={@private1, 0x6f, r6}) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r8 = dup(r7) recvmsg$unix(r8, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x40000060) setsockopt$inet6_udp_int(r8, 0x11, 0xb, &(0x7f0000000080)=0x39f9, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 10:17:30 executing program 1: perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1004}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000000)={@dev, r6}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000040)={@private1, 0x6f, r6}) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r8 = dup(r7) recvmsg$unix(r8, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x40000060) setsockopt$inet6_udp_int(r8, 0x11, 0xb, &(0x7f0000000080)=0x39f9, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 10:17:30 executing program 3: perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1004}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000000)={@dev, r6}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000040)={@private1, 0x6f, r6}) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r8 = dup(r7) recvmsg$unix(r8, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x40000060) setsockopt$inet6_udp_int(r8, 0x11, 0xb, &(0x7f0000000080)=0x39f9, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 10:17:30 executing program 0: syz_emit_ethernet(0xfffffffffffffdef, &(0x7f0000000100)={@link_local, @empty, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x0, @remote, @remote, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, 0x0) 10:17:30 executing program 5: perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1004}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000000)={@dev, r6}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000040)={@private1, 0x6f, r6}) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r8 = dup(r7) recvmsg$unix(r8, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x40000060) setsockopt$inet6_udp_int(r8, 0x11, 0xb, &(0x7f0000000080)=0x39f9, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 10:17:30 executing program 7: perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1004}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000000)={@dev, r6}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000040)={@private1, 0x6f, r6}) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r8 = dup(r7) recvmsg$unix(r8, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x40000060) setsockopt$inet6_udp_int(r8, 0x11, 0xb, &(0x7f0000000080)=0x39f9, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 10:17:30 executing program 2: r0 = syz_io_uring_setup(0x6ed6, &(0x7f0000000280), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)=""/24, 0x18}, {0x0}], 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000980)='fdinfo/3\x00') pread64(r1, &(0x7f0000000040)=""/156, 0x9c, 0x0) 10:17:30 executing program 0: syz_emit_ethernet(0xfffffffffffffdef, &(0x7f0000000100)={@link_local, @empty, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x0, @remote, @remote, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, 0x0) 10:17:30 executing program 6: perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1004}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000000)={@dev, r6}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000040)={@private1, 0x6f, r6}) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r8 = dup(r7) recvmsg$unix(r8, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x40000060) setsockopt$inet6_udp_int(r8, 0x11, 0xb, &(0x7f0000000080)=0x39f9, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 10:17:30 executing program 1: perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1004}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000000)={@dev, r6}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000040)={@private1, 0x6f, r6}) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r8 = dup(r7) recvmsg$unix(r8, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x40000060) setsockopt$inet6_udp_int(r8, 0x11, 0xb, &(0x7f0000000080)=0x39f9, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 10:17:30 executing program 3: perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1004}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000000)={@dev, r6}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000040)={@private1, 0x6f, r6}) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r8 = dup(r7) recvmsg$unix(r8, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x40000060) setsockopt$inet6_udp_int(r8, 0x11, 0xb, &(0x7f0000000080)=0x39f9, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 10:17:30 executing program 7: perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1004}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000000)={@dev, r6}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000040)={@private1, 0x6f, r6}) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r8 = dup(r7) recvmsg$unix(r8, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x40000060) setsockopt$inet6_udp_int(r8, 0x11, 0xb, &(0x7f0000000080)=0x39f9, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 10:17:30 executing program 4: perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1004}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000000)={@dev, r6}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000040)={@private1, 0x6f, r6}) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r8 = dup(r7) recvmsg$unix(r8, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x40000060) setsockopt$inet6_udp_int(r8, 0x11, 0xb, &(0x7f0000000080)=0x39f9, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 10:17:30 executing program 0: syz_emit_ethernet(0xfffffffffffffdef, &(0x7f0000000100)={@link_local, @empty, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x0, @remote, @remote, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, 0x0) 10:17:30 executing program 2: r0 = syz_io_uring_setup(0x6ed6, &(0x7f0000000280), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)=""/24, 0x18}, {0x0}], 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000980)='fdinfo/3\x00') pread64(r1, &(0x7f0000000040)=""/156, 0x9c, 0x0) 10:17:30 executing program 5: perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1004}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000000)={@dev, r6}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000040)={@private1, 0x6f, r6}) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r8 = dup(r7) recvmsg$unix(r8, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x40000060) setsockopt$inet6_udp_int(r8, 0x11, 0xb, &(0x7f0000000080)=0x39f9, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) [ 129.140619] kmemleak: Found object by alias at 0x607f1a63e304 [ 129.140640] CPU: 0 UID: 0 PID: 4872 Comm: syz-executor.6 Tainted: G D W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) [ 129.140660] Tainted: [D]=DIE, [W]=WARN [ 129.140664] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 129.140672] Call Trace: [ 129.140676] [ 129.140680] dump_stack_lvl+0xca/0x120 [ 129.140712] __lookup_object+0x94/0xb0 [ 129.140730] delete_object_full+0x27/0x70 [ 129.140745] free_percpu+0x30/0x1160 [ 129.140763] ? arch_uprobe_clear_state+0x16/0x140 [ 129.140782] futex_hash_free+0x38/0xc0 [ 129.140797] mmput+0x2d3/0x390 [ 129.140815] do_exit+0x79d/0x2970 [ 129.140829] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 129.140843] ? zap_other_threads+0x2b9/0x3a0 [ 129.140859] ? __pfx_do_exit+0x10/0x10 [ 129.140872] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 129.140890] ? _raw_spin_unlock_irq+0x23/0x40 [ 129.140907] do_group_exit+0xd3/0x2a0 [ 129.140921] __x64_sys_exit_group+0x3e/0x50 [ 129.140935] x64_sys_call+0x18c5/0x18d0 [ 129.140951] do_syscall_64+0xbf/0x360 [ 129.140963] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.140975] RIP: 0033:0x7fe1dafdab19 [ 129.140983] Code: Unable to access opcode bytes at 0x7fe1dafdaaef. [ 129.140989] RSP: 002b:00007fff6d8f4968 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 129.141001] RAX: ffffffffffffffda RBX: 000000000000001e RCX: 00007fe1dafdab19 [ 129.141009] RDX: 00007fe1daf8d72b RSI: ffffffffffffffbc RDI: 0000000000000000 [ 129.141016] RBP: 0000000000000000 R08: 0000001b2d12c474 R09: 0000000000000000 [ 129.141024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 129.141031] R13: 0000000000000000 R14: 0000000000000001 R15: 00007fff6d8f4a50 [ 129.141042] [ 129.141049] kmemleak: Object (percpu) 0x607f1a63e300 (size 8): [ 129.141056] kmemleak: comm "syz-executor.1", pid 4883, jiffies 4294796006 [ 129.141064] kmemleak: min_count = 1 [ 129.141068] kmemleak: count = 0 [ 129.141072] kmemleak: flags = 0x21 [ 129.141075] kmemleak: checksum = 0 [ 129.141079] kmemleak: backtrace: [ 129.141082] pcpu_alloc_noprof+0x87a/0x1170 [ 129.141098] fib_nh_common_init+0x30/0xd0 [ 129.141112] fib6_nh_init+0x968/0x1a00 [ 129.141124] ip6_route_info_create_nh+0x530/0xf80 [ 129.141135] addrconf_f6i_alloc+0x208/0x430 [ 129.141146] __ipv6_dev_ac_inc+0x2fc/0xd80 [ 129.141163] ipv6_sock_ac_join+0x8b5/0x1190 [ 129.141178] do_ipv6_setsockopt+0x3f54/0x47b0 [ 129.141194] ipv6_setsockopt+0xcb/0x170 [ 129.141210] udpv6_setsockopt+0x84/0xd0 [ 129.141221] do_sock_setsockopt+0xf7/0x1e0 [ 129.141233] __sys_setsockopt+0x11f/0x1a0 [ 129.141253] __x64_sys_setsockopt+0xbe/0x160 [ 129.141268] do_syscall_64+0xbf/0x360 [ 129.141278] entry_SYSCALL_64_after_hwframe+0x77/0x7f 10:17:30 executing program 0: syz_emit_ethernet(0xfffffffffffffdef, &(0x7f0000000100)={@link_local, @empty, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x0, @remote, @remote, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, 0x0) 10:17:30 executing program 3: perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 10:17:30 executing program 7: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x0, 0x0) 10:17:30 executing program 6: syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 10:17:30 executing program 6: syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 10:17:30 executing program 3: perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 10:17:30 executing program 7: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x0, 0x0) 10:17:30 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup2(r0, r1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x0, 0x11, r2, 0x0) 10:17:30 executing program 6: syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 10:17:30 executing program 1: r0 = socket$inet(0x2, 0xa, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) 10:17:30 executing program 6: syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) [ 129.377934] syz-executor.1 uses obsolete (PF_INET,SOCK_PACKET) 10:17:30 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KIOCSOUND(r0, 0x4b2f, 0x1) 10:17:30 executing program 3: perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 10:17:30 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2286b00"}) 10:17:30 executing program 7: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x0, 0x0) 10:17:30 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup2(r0, r1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x0, 0x11, r2, 0x0) 10:17:30 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x13) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000100)={0xfff7, 0x0, 0x0, 0x0, 0x0, "9acbfae571669c64"}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000140)) 10:17:30 executing program 1: r0 = socket$inet(0x2, 0xa, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) 10:17:30 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x13) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000100)={0xfff7, 0x0, 0x0, 0x0, 0x0, "9acbfae571669c64"}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000140)) 10:17:30 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KIOCSOUND(r0, 0x4b2f, 0x1) 10:17:30 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2286b00"}) 10:17:30 executing program 3: perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 10:17:30 executing program 6: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x13) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000100)={0xfff7, 0x0, 0x0, 0x0, 0x0, "9acbfae571669c64"}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000140)) 10:17:30 executing program 7: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x0, 0x0) 10:17:30 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x13) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000100)={0xfff7, 0x0, 0x0, 0x0, 0x0, "9acbfae571669c64"}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000140)) 10:17:30 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup2(r0, r1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x0, 0x11, r2, 0x0) 10:17:30 executing program 1: r0 = socket$inet(0x2, 0xa, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) 10:17:30 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KIOCSOUND(r0, 0x4b2f, 0x1) 10:17:30 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2286b00"}) 10:17:30 executing program 6: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x13) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000100)={0xfff7, 0x0, 0x0, 0x0, 0x0, "9acbfae571669c64"}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000140)) 10:17:30 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2286b00"}) 10:17:30 executing program 6: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x13) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000100)={0xfff7, 0x0, 0x0, 0x0, 0x0, "9acbfae571669c64"}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000140)) 10:17:30 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x13) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000100)={0xfff7, 0x0, 0x0, 0x0, 0x0, "9acbfae571669c64"}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000140)) 10:17:30 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x3, 0x0, 0x0, 0x8}, {0x6}]}) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) 10:17:30 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KIOCSOUND(r0, 0x4b2f, 0x1) 10:17:30 executing program 1: r0 = socket$inet(0x2, 0xa, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) 10:17:30 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup2(r0, r1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x0, 0x11, r2, 0x0) [ 129.741743] kauditd_printk_skb: 1 callbacks suppressed [ 129.741755] audit: type=1326 audit(1756721851.017:19): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4957 comm="syz-executor.3" exe="/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f79b0941b19 code=0x0 10:17:31 executing program 4: r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) timerfd_gettime(r0, &(0x7f00000000c0)) 10:17:31 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x18, &(0x7f0000000000), 0x4) [ 130.574238] audit: type=1326 audit(1756721851.849:20): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4957 comm="syz-executor.3" exe="/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f79b0941b19 code=0x0 10:17:31 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x3, 0x0, 0x0, 0x8}, {0x6}]}) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) 10:17:31 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(0x0, 0x0) 10:17:31 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x5}, 0xe) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x5}, 0xe) 10:17:31 executing program 5: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) kexec_load(0x0, 0x1, &(0x7f0000000040)=[{0x0, 0x8, 0x40000000, 0x10000}], 0x0) 10:17:31 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x18, &(0x7f0000000000), 0x4) 10:17:31 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[]) syz_mount_image$tmpfs(0x0, &(0x7f0000000300)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) rename(&(0x7f0000001740)='./file1\x00', &(0x7f0000001780)='./file0\x00') 10:17:31 executing program 4: r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) timerfd_gettime(r0, &(0x7f00000000c0)) 10:17:31 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f00000000c0)='./file1\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2) 10:17:31 executing program 5: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) kexec_load(0x0, 0x1, &(0x7f0000000040)=[{0x0, 0x8, 0x40000000, 0x10000}], 0x0) [ 130.752088] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000032: 0000 [#2] SMP KASAN NOPTI [ 130.753810] KASAN: null-ptr-deref in range [0x0000000000000190-0x0000000000000197] [ 130.754932] CPU: 1 UID: 0 PID: 4979 Comm: syz-executor.7 Tainted: G D W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) [ 130.756700] Tainted: [D]=DIE, [W]=WARN [ 130.757286] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 130.758670] RIP: 0010:perf_tp_event+0x175/0xe70 [ 130.759474] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 130.762287] RSP: 0018:ffff888046027800 EFLAGS: 00010212 [ 130.763061] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: ffffc90005212000 [ 130.764071] RDX: 0000000000040000 RSI: ffffffff8189a4e7 RDI: 0000000000000191 [ 130.765136] RBP: ffff888046027a70 R08: ffff88806cf31340 R09: ffffe8ffffd16300 [ 130.766153] R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000 [ 130.767167] R13: 000000000000002c R14: ffff88806cf31340 R15: dffffc0000000000 [ 130.768192] FS: 00007f184d107700(0000) GS:ffff8880e56d8000(0000) knlGS:0000000000000000 [ 130.769346] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 130.770203] CR2: 0000555586ea6c58 CR3: 000000000eea9000 CR4: 0000000000350ef0 [ 130.771232] Call Trace: [ 130.771619] [ 130.771977] ? __pfx_perf_tp_event+0x10/0x10 [ 130.772660] ? kvm_sched_clock_read+0x16/0x30 [ 130.773337] ? local_clock_noinstr+0xf/0xc0 [ 130.773981] ? perf_trace_lock+0xb5/0x5d0 [ 130.774606] ? perf_trace_lock+0xb5/0x5d0 [ 130.775220] ? __pfx_perf_trace_lock+0x10/0x10 [ 130.775897] ? __pfx_perf_trace_lock+0x10/0x10 [ 130.776601] ? perf_ctx_unlock+0x73/0x160 [ 130.777220] ? __perf_install_in_context+0x503/0xb90 [ 130.777958] ? lock_release+0x1c7/0x290 [ 130.778555] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 130.779412] ? do_raw_spin_unlock+0x53/0x220 [ 130.780074] ? perf_trace_run_bpf_submit+0xef/0x180 [ 130.780833] perf_trace_run_bpf_submit+0xef/0x180 [ 130.781566] perf_trace_lock+0x337/0x5d0 [ 130.782178] ? __pfx_perf_trace_lock+0x10/0x10 [ 130.782859] ? perf_trace_lock+0xb5/0x5d0 [ 130.783476] ? __pfx_smp_call_function_single+0x10/0x10 [ 130.784285] ? get_futex_key+0x592/0x14a0 [ 130.784902] ? futex_ref_get+0x114/0x300 [ 130.785504] ? futex_hash+0x15c/0x390 [ 130.786070] lock_release+0x1ab/0x290 [ 130.786649] ? futex_hash+0x15c/0x390 [ 130.787210] futex_ref_get+0x119/0x300 [ 130.787798] ? futex_hash+0x15c/0x390 [ 130.788378] futex_hash+0x70/0x390 [ 130.788916] futex_wake+0x143/0x540 [ 130.789464] ? __pfx_perf_trace_lock+0x10/0x10 [ 130.790138] ? __pfx___mutex_lock+0x10/0x10 [ 130.790791] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 130.791567] ? __pfx_futex_wake+0x10/0x10 [ 130.792202] ? lock_release+0x1c7/0x290 [ 130.792798] ? fd_install+0x1f0/0x660 [ 130.793375] do_futex+0x26d/0x370 [ 130.793902] ? __pfx_do_futex+0x10/0x10 [ 130.794499] ? __pfx___do_sys_perf_event_open+0x10/0x10 [ 130.795277] ? __pfx___schedule+0x10/0x10 [ 130.795910] __x64_sys_futex+0x1c9/0x4d0 [ 130.796531] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 130.797384] ? __pfx___x64_sys_futex+0x10/0x10 [ 130.798057] ? xfd_validate_state+0x55/0x180 [ 130.798735] do_syscall_64+0xbf/0x360 [ 130.799301] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.800060] RIP: 0033:0x7f184fb91b19 [ 130.800628] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 130.803221] RSP: 002b:00007f184d107218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 130.804331] RAX: ffffffffffffffda RBX: 00007f184fca4f68 RCX: 00007f184fb91b19 [ 130.805363] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f184fca4f6c [ 130.806400] RBP: 00007f184fca4f60 R08: 000000000000000e R09: 0000000000000000 [ 130.807435] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f184fca4f6c [ 130.808467] R13: 00007ffc6e17f30f R14: 00007f184d107300 R15: 0000000000022000 [ 130.809511] [ 130.809874] Modules linked in: [ 130.810415] Oops: general protection fault, probably for non-canonical address 0xdffffc0020000032: 0000 [#3] SMP KASAN NOPTI [ 130.812041] KASAN: probably user-memory-access in range [0x0000000100000190-0x0000000100000197] [ 130.813278] CPU: 0 UID: 0 PID: 4986 Comm: syz-executor.6 Tainted: G D W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) [ 130.814952] Tainted: [D]=DIE, [W]=WARN [ 130.815513] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 130.816703] RIP: 0010:perf_tp_event+0x175/0xe70 [ 130.817398] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 130.819953] RSP: 0018:ffff888043f9f800 EFLAGS: 00010212 [ 130.820716] RAX: 0000000020000032 RBX: 00000000ffffffa0 RCX: ffffc90004c0f000 [ 130.821727] RDX: 0000000000040000 RSI: ffffffff8189a4e7 RDI: 0000000100000190 [ 130.822733] RBP: ffff888043f9fa70 R08: ffff88806ce31340 R09: ffffe8ffffc16300 [ 130.823736] R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000 [ 130.824753] R13: 000000000000002c R14: ffff88806ce31340 R15: dffffc0000000000 [ 130.825868] FS: 00007fe1d8550700(0000) GS:ffff8880e55d8000(0000) knlGS:0000000000000000 [ 130.827137] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 130.828066] CR2: 0000000000000000 CR3: 0000000043da4000 CR4: 0000000000350ef0 [ 130.829207] Call Trace: [ 130.829625] [ 130.829994] ? __is_insn_slot_addr+0x136/0x290 [ 130.830759] ? __pfx_perf_tp_event+0x10/0x10 [ 130.831488] ? kernel_text_address+0x5b/0xc0 [ 130.832222] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 130.833108] ? __kernel_text_address+0xd/0x40 [ 130.833838] ? unwind_get_return_address+0x59/0xa0 [ 130.834637] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 130.835510] ? arch_stack_walk+0x9c/0xf0 [ 130.836185] ? stack_trace_save+0x8e/0xc0 [ 130.836863] ? perf_trace_lock+0xb5/0x5d0 [ 130.837538] ? __pfx_perf_trace_lock+0x10/0x10 [ 130.838289] ? kasan_save_stack+0x34/0x50 [ 130.838960] ? kasan_save_stack+0x24/0x50 [ 130.839630] ? kasan_save_track+0x14/0x30 [ 130.840330] ? perf_trace_run_bpf_submit+0xef/0x180 [ 130.841138] ? __might_fault+0x138/0x190 [ 130.841796] perf_trace_run_bpf_submit+0xef/0x180 [ 130.842595] perf_trace_lock+0x337/0x5d0 [ 130.843259] ? __pfx_perf_trace_lock+0x10/0x10 [ 130.844003] ? perf_trace_lock+0xb5/0x5d0 [ 130.844687] ? get_futex_key+0x592/0x14a0 [ 130.845360] ? futex_ref_get+0x114/0x300 [ 130.846007] ? futex_hash+0x15c/0x390 [ 130.846625] lock_release+0x1ab/0x290 [ 130.847255] ? futex_hash+0x15c/0x390 [ 130.847874] futex_ref_get+0x119/0x300 [ 130.848529] ? futex_hash+0x15c/0x390 [ 130.849154] futex_hash+0x70/0x390 [ 130.849743] futex_wake+0x143/0x540 [ 130.850353] ? __pfx_futex_wake+0x10/0x10 [ 130.851032] ? copy_siginfo_to_user+0xb9/0xd0 [ 130.851759] ? __pfx_signal_setup_done+0x10/0x10 [ 130.852554] do_futex+0x26d/0x370 [ 130.853134] ? __pfx_do_futex+0x10/0x10 [ 130.853780] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 130.854628] ? arch_do_signal_or_restart+0x204/0x790 [ 130.855451] __x64_sys_futex+0x1c9/0x4d0 [ 130.856127] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 130.857086] ? __pfx___x64_sys_futex+0x10/0x10 [ 130.857833] ? lock_mm_and_find_vma+0xaa/0x6f0 [ 130.858594] do_syscall_64+0xbf/0x360 [ 130.859216] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.860046] RIP: 0033:0x7fe1dafdab19 [ 130.860655] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 130.863509] RSP: 002b:00007fe1d8550218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 130.864727] RAX: ffffffffffffffda RBX: 00007fe1db0edf68 RCX: 00007fe1dafdab19 [ 130.865848] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fe1db0edf6c [ 130.866981] RBP: 00007fe1db0edf60 R08: 000000000000000e R09: 0000000000000000 [ 130.868104] R10: ffffffffffffffff R11: 0000000000000246 R12: 00007fe1db0edf6c [ 130.869252] R13: 00007fff6d8f473f R14: 00007fe1d8550300 R15: 0000000000022000 [ 130.870392] [ 130.870783] Modules linked in: [ 130.871310] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000032: 0000 [#4] SMP KASAN NOPTI [ 130.872932] KASAN: null-ptr-deref in range [0x0000000000000190-0x0000000000000197] [ 130.874033] CPU: 1 UID: 0 PID: 4979 Comm: syz-executor.7 Tainted: G D W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) [ 130.875732] Tainted: [D]=DIE, [W]=WARN [ 130.876309] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 130.877489] RIP: 0010:perf_tp_event+0x175/0xe70 [ 130.878189] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 130.880836] RSP: 0018:ffff88806cf08a80 EFLAGS: 00010012 [ 130.881743] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: 0000000000000002 [ 130.882871] RDX: ffff888044ead280 RSI: ffffffff8189a4e7 RDI: 0000000000000191 [ 130.883906] RBP: ffff88806cf08cf0 R08: ffff88806cf31490 R09: ffffe8ffffd16300 [ 130.884947] R10: 0000000000000000 R11: ffff88806cf37018 R12: dffffc0000000000 [ 130.886026] R13: 0000000000000024 R14: ffff88806cf31490 R15: dffffc0000000000 [ 130.887230] FS: 00007f184d107700(0000) GS:ffff8880e56d8000(0000) knlGS:0000000000000000 [ 130.888457] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 130.889376] CR2: 0000555586ea6c58 CR3: 000000000eea9000 CR4: 0000000000350ef0 [ 130.890595] Call Trace: [ 130.891042] [ 130.891419] ? __update_load_avg_se+0x428/0xa40 [ 130.892230] ? __pfx_perf_tp_event+0x10/0x10 [ 130.892982] ? place_entity+0x1c/0x410 [ 130.893642] ? kvm_sched_clock_read+0x16/0x30 [ 130.894419] ? enqueue_task_fair+0x43a/0x1e00 [ 130.895178] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 130.896179] ? check_preempt_wakeup_fair+0x6e/0x950 [ 130.897027] ? wakeup_preempt+0x140/0x2a0 [ 130.897737] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 130.898721] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 130.899605] ? do_raw_spin_lock+0x123/0x260 [ 130.900372] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 130.900803] ? perf_trace_run_bpf_submit+0xef/0x180 [ 130.901228] perf_trace_run_bpf_submit+0xef/0x180 [ 130.901637] perf_trace_lock+0x337/0x5d0 [ 130.901979] ? place_entity+0x1c/0x410 [ 130.902308] ? kvm_sched_clock_read+0x16/0x30 [ 130.902695] ? __pfx_perf_trace_lock+0x10/0x10 [ 130.903079] ? check_preempt_wakeup_fair+0x6e/0x950 [ 130.903476] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 130.903827] ? sched_ttwu_pending+0x2e0/0x4a0 [ 130.904183] lock_release+0x1ab/0x290 [ 130.904470] ? ttwu_do_activate+0x1a4/0x8a0 [ 130.904795] _raw_spin_unlock+0x16/0x40 [ 130.905098] sched_ttwu_pending+0x2e0/0x4a0 [ 130.905424] ? __pfx_sched_ttwu_pending+0x10/0x10 [ 130.905790] __flush_smp_call_function_queue+0x434/0x740 [ 130.906199] __sysvec_call_function_single+0x6d/0x370 [ 130.906606] sysvec_call_function_single+0xa1/0xc0 [ 130.907050] [ 130.907263] [ 130.907460] asm_sysvec_call_function_single+0x1a/0x20 [ 130.907907] RIP: 0010:oops_exit+0x0/0x50 [ 130.908291] Code: 00 3a 00 be ff ff ff ff 48 c7 c7 50 b4 43 86 e8 c6 0f f9 ff 5b e9 50 00 3a 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <66> 0f 1f 00 53 e8 36 00 3a 00 8b 1d c0 3d 4f 06 31 ff 89 de e8 57 [ 130.909898] RSP: 0018:ffff888046027690 EFLAGS: 00000202 [ 130.910372] RAX: 000000000002f2f0 RBX: 0000000000000212 RCX: ffffc90005212000 [ 130.911002] RDX: 0000000000040000 RSI: ffffffff812a3dca RDI: 0000000000000007 [ 130.911557] RBP: 000000000000000b R08: 0000000000000001 R09: fffffbfff0f12690 [ 130.912186] R10: 0000000000000000 R11: 0000000000000001 R12: ffff888046027758 [ 130.912760] R13: 0000000000000000 R14: dffffc0000000032 R15: 0000000000000000 [ 130.913346] ? oops_end+0x4a/0xe0 [ 130.913644] oops_end+0x65/0xe0 [ 130.913923] exc_general_protection+0x1a2/0x330 [ 130.914303] asm_exc_general_protection+0x26/0x30 [ 130.914693] RIP: 0010:perf_tp_event+0x175/0xe70 [ 130.915070] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 130.916527] RSP: 0018:ffff888046027800 EFLAGS: 00010212 [ 130.916949] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: ffffc90005212000 [ 130.917507] RDX: 0000000000040000 RSI: ffffffff8189a4e7 RDI: 0000000000000191 [ 130.918068] RBP: ffff888046027a70 R08: ffff88806cf31340 R09: ffffe8ffffd16300 [ 130.918630] R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000 [ 130.919196] R13: 000000000000002c R14: ffff88806cf31340 R15: dffffc0000000000 [ 130.919761] ? perf_tp_event+0x167/0xe70 [ 130.920100] ? __pfx_perf_tp_event+0x10/0x10 [ 130.920471] ? kvm_sched_clock_read+0x16/0x30 [ 130.920835] ? local_clock_noinstr+0xf/0xc0 [ 130.921188] ? perf_trace_lock+0xb5/0x5d0 [ 130.921522] ? perf_trace_lock+0xb5/0x5d0 [ 130.921855] ? __pfx_perf_trace_lock+0x10/0x10 [ 130.922225] ? __pfx_perf_trace_lock+0x10/0x10 [ 130.922597] ? perf_ctx_unlock+0x73/0x160 [ 130.922933] ? __perf_install_in_context+0x503/0xb90 [ 130.923338] ? lock_release+0x1c7/0x290 [ 130.923657] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 130.924123] ? do_raw_spin_unlock+0x53/0x220 [ 130.924487] ? perf_trace_run_bpf_submit+0xef/0x180 [ 130.924888] perf_trace_run_bpf_submit+0xef/0x180 [ 130.925280] perf_trace_lock+0x337/0x5d0 [ 130.925611] ? __pfx_perf_trace_lock+0x10/0x10 [ 130.925980] ? perf_trace_lock+0xb5/0x5d0 [ 130.926310] ? __pfx_smp_call_function_single+0x10/0x10 [ 130.926740] ? get_futex_key+0x592/0x14a0 [ 130.927073] ? futex_ref_get+0x114/0x300 [ 130.927397] ? futex_hash+0x15c/0x390 [ 130.927703] lock_release+0x1ab/0x290 [ 130.928013] ? futex_hash+0x15c/0x390 [ 130.928326] futex_ref_get+0x119/0x300 [ 130.928642] ? futex_hash+0x15c/0x390 [ 130.928948] futex_hash+0x70/0x390 [ 130.929238] futex_wake+0x143/0x540 [ 130.929539] ? __pfx_perf_trace_lock+0x10/0x10 [ 130.929908] ? __pfx___mutex_lock+0x10/0x10 [ 130.930265] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 130.930693] ? __pfx_futex_wake+0x10/0x10 [ 130.931031] ? lock_release+0x1c7/0x290 [ 130.931352] ? fd_install+0x1f0/0x660 [ 130.931666] do_futex+0x26d/0x370 [ 130.931963] ? __pfx_do_futex+0x10/0x10 [ 130.932285] ? __pfx___do_sys_perf_event_open+0x10/0x10 [ 130.932685] ? __pfx___schedule+0x10/0x10 [ 130.933000] __x64_sys_futex+0x1c9/0x4d0 [ 130.933307] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 130.933741] ? __pfx___x64_sys_futex+0x10/0x10 [ 130.934087] ? xfd_validate_state+0x55/0x180 [ 130.934433] do_syscall_64+0xbf/0x360 [ 130.934721] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.935102] RIP: 0033:0x7f184fb91b19 [ 130.935381] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 130.936706] RSP: 002b:00007f184d107218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 130.937262] RAX: ffffffffffffffda RBX: 00007f184fca4f68 RCX: 00007f184fb91b19 [ 130.937782] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f184fca4f6c [ 130.938302] RBP: 00007f184fca4f60 R08: 000000000000000e R09: 0000000000000000 [ 130.938911] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f184fca4f6c [ 130.939548] R13: 00007ffc6e17f30f R14: 00007f184d107300 R15: 0000000000022000 [ 130.940083] [ 130.940277] Modules linked in: [ 130.940532] ---[ end trace 0000000000000000 ]--- [ 130.940534] Oops: general protection fault, probably for non-canonical address 0xdffffc0020000032: 0000 [#5] SMP KASAN NOPTI [ 130.940881] RIP: 0010:__queue_work+0x202/0x1240 [ 130.942419] KASAN: probably user-memory-access in range [0x0000000100000190-0x0000000100000197] [ 130.942761] Code: 48 8b 6d 00 e8 4f ee 79 03 31 ff 41 89 c5 89 c6 e8 c3 02 32 00 45 85 ed 0f 85 e1 05 00 00 e8 85 07 32 00 48 89 e8 48 c1 e8 03 <42> 80 3c 20 00 0f 85 a0 0e 00 00 4c 8b 75 00 48 89 df 4c 89 34 24 [ 130.943958] CPU: 0 UID: 0 PID: 4986 Comm: syz-executor.6 Tainted: G D W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) [ 130.945559] RSP: 0018:ffff888044fc73f0 EFLAGS: 00010056 [ 130.947281] Tainted: [D]=DIE, [W]=WARN [ 130.947746] RAX: 0000000000000000 RBX: ffff888043dd2818 RCX: ffffc90009232000 [ 130.948321] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 130.948946] RDX: 0000000000040000 RSI: ffffffff8141ef2b RDI: 0000000000000005 [ 130.950135] RIP: 0010:perf_tp_event+0x175/0xe70 [ 130.950725] RBP: 0000000000000000 R08: 0000000000000001 R09: fffffbfff0f128f4 [ 130.951391] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 130.952022] R10: 0000000000000001 R11: 0000000000000001 R12: dffffc0000000000 [ 130.954669] RSP: 0018:ffff88806ce08a80 EFLAGS: 00010012 [ 130.955299] R13: 0000000000000001 R14: 0000000000000000 R15: ffff888017d19800 [ 130.955302] [ 130.955314] FS: 00007f184d107700(0000) GS:ffff8880e56d8000(0000) knlGS:0000000000000000 [ 130.956068] RAX: 0000000020000032 RBX: 00000000ffffffa0 RCX: 0000000000000002 [ 130.956715] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 130.956966] RDX: ffff888045379b80 RSI: ffffffff8189a4e7 RDI: 0000000100000190 [ 130.957671] CR2: 0000555586ea6c58 CR3: 000000000eea9000 CR4: 0000000000350ef0 [ 130.958697] RBP: ffff88806ce08cf0 R08: ffff88806ce31490 R09: ffffe8ffffc16300 [ 130.959214] Kernel panic - not syncing: Fatal exception in interrupt [ 132.006245] Shutting down cpus with NMI [ 132.008456] Kernel Offset: disabled [ 132.008743] ---[ end Kernel panic - not syncing: Fatal exception in interrupt ]--- VM DIAGNOSIS: 10:17:28 Registers: info registers vcpu 0 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff828e5105 RDI=ffffffff88729280 RBP=ffffffff88729240 RSP=ffff888044fc6ce0 R8 =0000000000000000 R9 =ffffed1001401046 R10=0000000000000020 R11=0000000065646f43 R12=0000000000000020 R13=0000000000000010 R14=ffffffff88729240 R15=ffffffff828e50f0 RIP=ffffffff828e515d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f79adeb7700 00000000 00000000 GS =0000 ffff8880e55d8000 00000000 00000000 LDT=0000 fffffe2400000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f79adeb8000 CR3=000000004614e000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffffffffffffffffffffffffffffffff XMM02=ffffffffffffffffffffffffffffffff XMM03=ffffffffffffffffffffffffffffffff XMM04=ffffffffffffffffffffffffffffffff XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=dffffc0000000000 RBX=ffff8880e56d8000 RCX=ffffffff8146e356 RDX=0000000000000000 RSI=ffffffff814841fb RDI=ffff88806cf31850 RBP=ffff88806cf36ed8 RSP=ffff888016007c30 R8 =ffff88806cf37978 R9 =ffff888017a59e30 R10=ffffffff8643b457 R11=0000000000000000 R12=ffffffff814841fb R13=ffff888017a5a4f0 R14=ffff88806cf36ed8 R15=ffff888017a59b94 RIP=ffffffff815af2b0 RFL=00000016 [----AP-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 000000c000030410 00000000 00000000 GS =0000 ffff8880e56d8000 00000000 00000000 LDT=0000 fffffe5a00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000020000100 CR3=000000000d6ba000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=0000000c0000000b0000000b00000009 XMM02=00000000000000000000000000000000 XMM03=0000000b000000090000000700000006 XMM04=77654e2e726567616e614d100182ff18 XMM05=e8a47d8efca66a3183fc8ed86f30fc2c XMM06=fc40da814cfcb6cea766fc6863fb93fc XMM07=4efc019f6023fc9ddc5522fca710b24a XMM08=c0d1fc082963a1fc40f47ac4fc166e05 XMM09=306c95fcfef22965fc948cbb5ffc6186 XMM10=fe1406e1fc6fea6df9fc4f54f2fcfc8b XMM11=fc0d977cfcfc82e5f85efccca96ea5fc XMM12=abfccd78b0cdfc6be11b88fcb90b5b83 XMM13=474d5f4c424c4e2467736d646e65730a XMM14=302826202c3072284444415f435f544d XMM15=7b3d2930343030303030303030663778